API tools faq
paste
Guest User

Untitled

a guest
Jan 3rd, 2018
233
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 258.71 KB | None | 0 0
raw download clone embed print report
  1. e28.e30: Log file opened: 5.2.4r119785 g_hStartupLog=0000000000000014 g_uNtVerCombined=0x611db110
  2. e28.e30: \SystemRoot\System32\ntdll.dll:
  3. e28.e30: CreationTime: 2017-10-23T07:24:57.993413300Z
  4. e28.e30: LastWriteTime: 2017-09-13T15:31:56.094569800Z
  5. e28.e30: ChangeTime: 2017-10-23T09:41:08.709712800Z
  6. e28.e30: FileAttributes: 0x20
  7. e28.e30: Size: 0x1a7100
  8. e28.e30: NT Headers: 0xe0
  9. e28.e30: Timestamp: 0x59b94ee4
  10. e28.e30: Machine: 0x8664 - amd64
  11. e28.e30: Timestamp: 0x59b94ee4
  12. e28.e30: Image Version: 6.1
  13. e28.e30: SizeOfImage: 0x1aa000 (1744896)
  14. e28.e30: Resource Dir: 0x14e000 LB 0x5a028
  15. e28.e30: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
  16. e28.e30: [Raw version resource data: 0x14e0f0 LB 0x380, codepage 0x0 (reserved 0x0)]
  17. e28.e30: ProductName: Microsoft® Windows® Operating System
  18. e28.e30: ProductVersion: 6.1.7601.23915
  19. e28.e30: FileVersion: 6.1.7601.23915 (win7sp1_ldr.170913-0600)
  20. e28.e30: FileDescription: NT Layer DLL
  21. e28.e30: \SystemRoot\System32\kernel32.dll:
  22. e28.e30: CreationTime: 2017-10-23T07:24:54.656222400Z
  23. e28.e30: LastWriteTime: 2017-09-13T15:27:59.681000000Z
  24. e28.e30: ChangeTime: 2017-10-23T09:41:14.356922700Z
  25. e28.e30: FileAttributes: 0x20
  26. e28.e30: Size: 0x11c000
  27. e28.e30: NT Headers: 0xe0
  28. e28.e30: Timestamp: 0x59b94f29
  29. e28.e30: Machine: 0x8664 - amd64
  30. e28.e30: Timestamp: 0x59b94f29
  31. e28.e30: Image Version: 6.1
  32. e28.e30: SizeOfImage: 0x11f000 (1175552)
  33. e28.e30: Resource Dir: 0x116000 LB 0x528
  34. e28.e30: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
  35. e28.e30: [Raw version resource data: 0x1160b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
  36. e28.e30: ProductName: Microsoft® Windows® Operating System
  37. e28.e30: ProductVersion: 6.1.7601.23915
  38. e28.e30: FileVersion: 6.1.7601.23915 (win7sp1_ldr.170913-0600)
  39. e28.e30: FileDescription: Windows NT BASE API Client DLL
  40. e28.e30: \SystemRoot\System32\KernelBase.dll:
  41. e28.e30: CreationTime: 2017-10-23T07:24:54.828232200Z
  42. e28.e30: LastWriteTime: 2017-09-13T15:27:59.681000000Z
  43. e28.e30: ChangeTime: 2017-10-23T09:41:13.779721700Z
  44. e28.e30: FileAttributes: 0x20
  45. e28.e30: Size: 0x66800
  46. e28.e30: NT Headers: 0xe8
  47. e28.e30: Timestamp: 0x59b94f2a
  48. e28.e30: Machine: 0x8664 - amd64
  49. e28.e30: Timestamp: 0x59b94f2a
  50. e28.e30: Image Version: 6.1
  51. e28.e30: SizeOfImage: 0x6a000 (434176)
  52. e28.e30: Resource Dir: 0x68000 LB 0x530
  53. e28.e30: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
  54. e28.e30: [Raw version resource data: 0x680b0 LB 0x3ac, codepage 0x0 (reserved 0x0)]
  55. e28.e30: ProductName: Microsoft® Windows® Operating System
  56. e28.e30: ProductVersion: 6.1.7601.23915
  57. e28.e30: FileVersion: 6.1.7601.23915 (win7sp1_ldr.170913-0600)
  58. e28.e30: FileDescription: Windows NT BASE API Client DLL
  59. e28.e30: \SystemRoot\System32\apisetschema.dll:
  60. e28.e30: CreationTime: 2017-10-23T07:24:50.640992700Z
  61. e28.e30: LastWriteTime: 2017-09-13T15:27:55.360000000Z
  62. e28.e30: ChangeTime: 2017-10-23T09:41:08.210511900Z
  63. e28.e30: FileAttributes: 0x20
  64. e28.e30: Size: 0x1a00
  65. e28.e30: NT Headers: 0xc0
  66. e28.e30: Timestamp: 0x59b94ec4
  67. e28.e30: Machine: 0x8664 - amd64
  68. e28.e30: Timestamp: 0x59b94ec4
  69. e28.e30: Image Version: 6.1
  70. e28.e30: SizeOfImage: 0x50000 (327680)
  71. e28.e30: Resource Dir: 0x30000 LB 0x3f8
  72. e28.e30: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
  73. e28.e30: [Raw version resource data: 0x30060 LB 0x398, codepage 0x0 (reserved 0x0)]
  74. e28.e30: ProductName: Microsoft® Windows® Operating System
  75. e28.e30: ProductVersion: 6.1.7601.23915
  76. e28.e30: FileVersion: 6.1.7601.23915 (win7sp1_ldr.170913-0600)
  77. e28.e30: FileDescription: ApiSet Schema DLL
  78. e28.e30: NtOpenDirectoryObject failed on \Driver: 0xc0000022
  79. e28.e30: supR3HardenedWinFindAdversaries: 0x0
  80. e28.e30: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
  81. e28.e30: Calling main()
  82. e28.e30: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2
  83. e28.e30: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
  84. e28.e30: SUPR3HardenedMain: Respawn #1
  85. e28.e30: System32: \Device\HarddiskVolume2\Windows\System32
  86. e28.e30: WinSxS: \Device\HarddiskVolume2\Windows\winsxs
  87. e28.e30: KnownDllPath: C:\Windows\system32
  88. e28.e30: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
  89. e28.e30: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe)
  90. e28.e30: supR3HardNtEnableThreadCreation:
  91. e28.e30: supR3HardNtDisableThreadCreation: pvLdrInitThunk=0000000076e8a360 pvNtTerminateThread=0000000076eac260
  92. e28.e30: supR3HardenedWinDoReSpawn(1): New child e88.e34 [kernel32].
  93. e28.e30: supR3HardNtChildGatherData: PebBaseAddress=000007fffffdd000 cbPeb=0x380
  94. e28.e30: supR3HardNtPuChFindNtdll: uNtDllParentAddr=0000000076e60000 uNtDllChildAddr=0000000076e60000
  95. e28.e30: supR3HardenedWinSetupChildInit: uLdrInitThunk=0000000076e8a360
  96. e28.e30: supR3HardenedWinSetupChildInit: Start child.
  97. e28.e30: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 0 ms.
  98. e28.e30: supR3HardNtChildPurify: Startup delay kludge #1/0: 265 ms, 17 sleeps
  99. e28.e30: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
  100. e28.e30: *0000000000000000-000000000000ffff 0x0001/0x0000 0x0000000
  101. e28.e30: *0000000000010000-000000000002ffff 0x0004/0x0004 0x0020000
  102. e28.e30: *0000000000030000-0000000000033fff 0x0002/0x0002 0x0040000
  103. e28.e30: 0000000000034000-000000000003ffff 0x0001/0x0000 0x0000000
  104. e28.e30: *0000000000040000-0000000000040fff 0x0004/0x0004 0x0020000
  105. e28.e30: 0000000000041000-000000000010ffff 0x0001/0x0000 0x0000000
  106. e28.e30: *0000000000110000-000000000020bfff 0x0000/0x0004 0x0020000
  107. e28.e30: 000000000020c000-000000000020dfff 0x0104/0x0004 0x0020000
  108. e28.e30: 000000000020e000-000000000020ffff 0x0004/0x0004 0x0020000
  109. e28.e30: 0000000000210000-0000000076e5ffff 0x0001/0x0000 0x0000000
  110. e28.e30: *0000000076e60000-0000000076e60fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
  111. e28.e30: 0000000076e61000-0000000076f5dfff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
  112. e28.e30: 0000000076f5e000-0000000076f8cfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
  113. e28.e30: 0000000076f8d000-0000000076f96fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
  114. e28.e30: 0000000076f97000-0000000076f97fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
  115. e28.e30: 0000000076f98000-0000000076f9afff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
  116. e28.e30: 0000000076f9b000-0000000077009fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
  117. e28.e30: 000000007700a000-000000007efdffff 0x0001/0x0000 0x0000000
  118. e28.e30: *000000007efe0000-000000007ffdffff 0x0000/0x0002 0x0020000
  119. e28.e30: *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000
  120. e28.e30: 000000007ffe1000-000000007ffeffff 0x0000/0x0002 0x0020000
  121. e28.e30: 000000007fff0000-000000013fccffff 0x0001/0x0000 0x0000000
  122. e28.e30: *000000013fcd0000-000000013fcd0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
  123. e28.e30: 000000013fcd1000-000000013fd41fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
  124. e28.e30: 000000013fd42000-000000013fd42fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
  125. e28.e30: 000000013fd43000-000000013fd88fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
  126. e28.e30: 000000013fd89000-000000013fd89fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
  127. e28.e30: 000000013fd8a000-000000013fd8afff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
  128. e28.e30: 000000013fd8b000-000000013fd8ffff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
  129. e28.e30: 000000013fd90000-000000013fd90fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
  130. e28.e30: 000000013fd91000-000000013fd91fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
  131. e28.e30: 000000013fd92000-000000013fd95fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
  132. e28.e30: 000000013fd96000-000000013fdddfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
  133. e28.e30: 000000013fdde000-000007feff17ffff 0x0001/0x0000 0x0000000
  134. e28.e30: *000007feff180000-000007feff180fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\apisetschema.dll
  135. e28.e30: 000007feff181000-000007fffffaffff 0x0001/0x0000 0x0000000
  136. e28.e30: *000007fffffb0000-000007fffffd2fff 0x0002/0x0002 0x0040000
  137. e28.e30: 000007fffffd3000-000007fffffdcfff 0x0001/0x0000 0x0000000
  138. e28.e30: *000007fffffdd000-000007fffffddfff 0x0004/0x0004 0x0020000
  139. e28.e30: *000007fffffde000-000007fffffdffff 0x0004/0x0004 0x0020000
  140. e28.e30: *000007fffffe0000-000007fffffeffff 0x0001/0x0002 0x0020000
  141. e28.e30: apisetschema.dll: timestamp 0x59b94ec4 (rc=VINF_SUCCESS)
  142. e28.e30: VirtualBox.exe: timestamp 0x5a37e337 (rc=VINF_SUCCESS)
  143. e28.e30: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
  144. e28.e30: '\Device\HarddiskVolume2\Windows\System32\apisetschema.dll' has no imports
  145. e28.e30: '\Device\HarddiskVolume2\Windows\System32\ntdll.dll' has no imports
  146. e28.e30: supR3HardNtChildPurify: Done after 281 ms and 0 fixes (loop #0).
  147. e88.e34: Log file opened: 5.2.4r119785 g_hStartupLog=0000000000000004 g_uNtVerCombined=0x611db100
  148. e88.e34: supR3HardenedVmProcessInit: uNtDllAddr=0000000076e60000 g_uNtVerCombined=0x611db100
  149. e28.e30: supR3HardNtEnableThreadCreation:
  150. e88.e34: ntdll.dll: timestamp 0x59b94ee4 (rc=VINF_SUCCESS)
  151. e88.e34: New simple heap: #1 0000000000310000 LB 0x400000 (for 1744896 allocation)
  152. e88.e34: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
  153. e88.e34: System32: \Device\HarddiskVolume2\Windows\System32
  154. e88.e34: WinSxS: \Device\HarddiskVolume2\Windows\winsxs
  155. e88.e34: KnownDllPath: C:\Windows\system32
  156. e88.e34: supR3HardenedVmProcessInit: Opening vboxdrv stub...
  157. e88.e34: supR3HardenedVmProcessInit: Restoring LdrInitializeThunk...
  158. e88.e34: supR3HardenedVmProcessInit: Returning to LdrInitializeThunk...
  159. e88.e34: Registered Dll notification callback with NTDLL.
  160. e88.e34: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\kernel32.dll)
  161. e88.e34: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\kernel32.dll
  162. e88.e34: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\kernel32.dll (Input=kernel32.dll, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000000000:<flags> [calling]
  163. e88.e34: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
  164. e88.e34: supR3HardenedDllNotificationCallback: load 0000000076d40000 LB 0x0011f000 C:\Windows\system32\kernel32.dll [fFlags=0x0]
  165. e88.e34: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
  166. e88.e34: supR3HardenedDllNotificationCallback: load 000007fefcb90000 LB 0x0006a000 C:\Windows\system32\KERNELBASE.dll [fFlags=0x0]
  167. e88.e34: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\KernelBase.dll)
  168. e88.e34: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\KernelBase.dll
  169. e88.e34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=0000000076d40000 'C:\Windows\system32\kernel32.dll'
  170. e88.e34: supR3HardNtDisableThreadCreation: pvLdrInitThunk=0000000076e8a360 pvNtTerminateThread=0000000076eac260
  171. e28.e30: supR3HardNtChildWaitFor: Found expected request 1 (CloseEvents) after 31 ms.
  172. e88.e34: \SystemRoot\System32\ntdll.dll:
  173. e88.e34: CreationTime: 2017-10-23T07:24:57.993413300Z
  174. e88.e34: LastWriteTime: 2017-09-13T15:31:56.094569800Z
  175. e88.e34: ChangeTime: 2017-10-23T09:41:08.709712800Z
  176. e88.e34: FileAttributes: 0x20
  177. e88.e34: Size: 0x1a7100
  178. e88.e34: NT Headers: 0xe0
  179. e88.e34: Timestamp: 0x59b94ee4
  180. e88.e34: Machine: 0x8664 - amd64
  181. e88.e34: Timestamp: 0x59b94ee4
  182. e88.e34: Image Version: 6.1
  183. e88.e34: SizeOfImage: 0x1aa000 (1744896)
  184. e88.e34: Resource Dir: 0x14e000 LB 0x5a028
  185. e88.e34: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
  186. e88.e34: [Raw version resource data: 0x14e0f0 LB 0x380, codepage 0x0 (reserved 0x0)]
  187. e88.e34: ProductName: Microsoft® Windows® Operating System
  188. e88.e34: ProductVersion: 6.1.7601.23915
  189. e88.e34: FileVersion: 6.1.7601.23915 (win7sp1_ldr.170913-0600)
  190. e88.e34: FileDescription: NT Layer DLL
  191. e88.e34: \SystemRoot\System32\kernel32.dll:
  192. e88.e34: CreationTime: 2017-10-23T07:24:54.656222400Z
  193. e88.e34: LastWriteTime: 2017-09-13T15:27:59.681000000Z
  194. e88.e34: ChangeTime: 2017-10-23T09:41:14.356922700Z
  195. e88.e34: FileAttributes: 0x20
  196. e88.e34: Size: 0x11c000
  197. e88.e34: NT Headers: 0xe0
  198. e88.e34: Timestamp: 0x59b94f29
  199. e88.e34: Machine: 0x8664 - amd64
  200. e88.e34: Timestamp: 0x59b94f29
  201. e88.e34: Image Version: 6.1
  202. e88.e34: SizeOfImage: 0x11f000 (1175552)
  203. e88.e34: Resource Dir: 0x116000 LB 0x528
  204. e88.e34: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
  205. e88.e34: [Raw version resource data: 0x1160b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
  206. e88.e34: ProductName: Microsoft® Windows® Operating System
  207. e88.e34: ProductVersion: 6.1.7601.23915
  208. e88.e34: FileVersion: 6.1.7601.23915 (win7sp1_ldr.170913-0600)
  209. e88.e34: FileDescription: Windows NT BASE API Client DLL
  210. e88.e34: \SystemRoot\System32\KernelBase.dll:
  211. e88.e34: CreationTime: 2017-10-23T07:24:54.828232200Z
  212. e88.e34: LastWriteTime: 2017-09-13T15:27:59.681000000Z
  213. e88.e34: ChangeTime: 2017-10-23T09:41:13.779721700Z
  214. e88.e34: FileAttributes: 0x20
  215. e88.e34: Size: 0x66800
  216. e88.e34: NT Headers: 0xe8
  217. e88.e34: Timestamp: 0x59b94f2a
  218. e88.e34: Machine: 0x8664 - amd64
  219. e88.e34: Timestamp: 0x59b94f2a
  220. e88.e34: Image Version: 6.1
  221. e88.e34: SizeOfImage: 0x6a000 (434176)
  222. e88.e34: Resource Dir: 0x68000 LB 0x530
  223. e88.e34: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
  224. e88.e34: [Raw version resource data: 0x680b0 LB 0x3ac, codepage 0x0 (reserved 0x0)]
  225. e88.e34: ProductName: Microsoft® Windows® Operating System
  226. e88.e34: ProductVersion: 6.1.7601.23915
  227. e88.e34: FileVersion: 6.1.7601.23915 (win7sp1_ldr.170913-0600)
  228. e88.e34: FileDescription: Windows NT BASE API Client DLL
  229. e88.e34: \SystemRoot\System32\apisetschema.dll:
  230. e88.e34: CreationTime: 2017-10-23T07:24:50.640992700Z
  231. e88.e34: LastWriteTime: 2017-09-13T15:27:55.360000000Z
  232. e88.e34: ChangeTime: 2017-10-23T09:41:08.210511900Z
  233. e88.e34: FileAttributes: 0x20
  234. e88.e34: Size: 0x1a00
  235. e88.e34: NT Headers: 0xc0
  236. e88.e34: Timestamp: 0x59b94ec4
  237. e88.e34: Machine: 0x8664 - amd64
  238. e88.e34: Timestamp: 0x59b94ec4
  239. e88.e34: Image Version: 6.1
  240. e88.e34: SizeOfImage: 0x50000 (327680)
  241. e88.e34: Resource Dir: 0x30000 LB 0x3f8
  242. e88.e34: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
  243. e88.e34: [Raw version resource data: 0x30060 LB 0x398, codepage 0x0 (reserved 0x0)]
  244. e88.e34: ProductName: Microsoft® Windows® Operating System
  245. e88.e34: ProductVersion: 6.1.7601.23915
  246. e88.e34: FileVersion: 6.1.7601.23915 (win7sp1_ldr.170913-0600)
  247. e88.e34: FileDescription: ApiSet Schema DLL
  248. e88.e34: NtOpenDirectoryObject failed on \Driver: 0xc0000022
  249. e88.e34: supR3HardenedWinFindAdversaries: 0x0
  250. e88.e34: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
  251. e88.e34: Calling main()
  252. e88.e34: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2
  253. e88.e34: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
  254. e88.e34: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
  255. e88.e34: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe)
  256. e88.e34: SUPR3HardenedMain: Respawn #2
  257. e88.e34: supR3HardNtEnableThreadCreation:
  258. e88.e34: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\apphelp.dll)
  259. e88.e34: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\apphelp.dll
  260. e88.e34: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\apphelp.dll (rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000000000:<flags> [calling]
  261. e88.e34: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\apphelp.dll [lacks WinVerifyTrust]
  262. e88.e34: supR3HardenedDllNotificationCallback: load 000007fefc990000 LB 0x00057000 C:\Windows\system32\apphelp.dll [fFlags=0x0]
  263. e88.e34: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\apphelp.dll [lacks WinVerifyTrust]
  264. e88.e34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefc990000 'C:\Windows\system32\apphelp.dll'
  265. e88.e34: supR3HardNtDisableThreadCreation: pvLdrInitThunk=0000000076e8a360 pvNtTerminateThread=0000000076eac260
  266. e88.e34: supR3HardenedWinDoReSpawn(2): New child fec.c30 [kernel32].
  267. e88.e34: supR3HardNtChildGatherData: PebBaseAddress=000007fffffd3000 cbPeb=0x380
  268. e88.e34: supR3HardNtPuChFindNtdll: uNtDllParentAddr=0000000076e60000 uNtDllChildAddr=0000000076e60000
  269. e88.e34: supR3HardenedWinSetupChildInit: uLdrInitThunk=0000000076e8a360
  270. e88.e34: supR3HardenedWinSetupChildInit: Start child.
  271. e88.e34: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 0 ms.
  272. e88.e34: supR3HardNtChildPurify: Startup delay kludge #1/0: 260 ms, 21 sleeps
  273. e88.e34: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
  274. e88.e34: *0000000000000000-000000000000ffff 0x0001/0x0000 0x0000000
  275. e88.e34: *0000000000010000-000000000002ffff 0x0004/0x0004 0x0020000
  276. e88.e34: *0000000000030000-0000000000033fff 0x0002/0x0002 0x0040000
  277. e88.e34: 0000000000034000-000000000003ffff 0x0001/0x0000 0x0000000
  278. e88.e34: *0000000000040000-0000000000040fff 0x0004/0x0004 0x0020000
  279. e88.e34: 0000000000041000-00000000001dffff 0x0001/0x0000 0x0000000
  280. e88.e34: *00000000001e0000-00000000002dbfff 0x0000/0x0004 0x0020000
  281. e88.e34: 00000000002dc000-00000000002ddfff 0x0104/0x0004 0x0020000
  282. e88.e34: 00000000002de000-00000000002dffff 0x0004/0x0004 0x0020000
  283. e88.e34: 00000000002e0000-0000000076e5ffff 0x0001/0x0000 0x0000000
  284. e88.e34: *0000000076e60000-0000000076e60fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
  285. e88.e34: 0000000076e61000-0000000076f5dfff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
  286. e88.e34: 0000000076f5e000-0000000076f8cfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
  287. e88.e34: 0000000076f8d000-0000000076f96fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
  288. e88.e34: 0000000076f97000-0000000076f97fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
  289. e88.e34: 0000000076f98000-0000000076f9afff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
  290. e88.e34: 0000000076f9b000-0000000077009fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
  291. e88.e34: 000000007700a000-000000007efdffff 0x0001/0x0000 0x0000000
  292. e88.e34: *000000007efe0000-000000007ffdffff 0x0000/0x0002 0x0020000
  293. e88.e34: *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000
  294. e88.e34: 000000007ffe1000-000000007ffeffff 0x0000/0x0002 0x0020000
  295. e88.e34: 000000007fff0000-000000013fccffff 0x0001/0x0000 0x0000000
  296. e88.e34: *000000013fcd0000-000000013fcd0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
  297. e88.e34: 000000013fcd1000-000000013fd41fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
  298. e88.e34: 000000013fd42000-000000013fd42fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
  299. e88.e34: 000000013fd43000-000000013fd88fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
  300. e88.e34: 000000013fd89000-000000013fd89fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
  301. e88.e34: 000000013fd8a000-000000013fd8afff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
  302. e88.e34: 000000013fd8b000-000000013fd8ffff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
  303. e88.e34: 000000013fd90000-000000013fd90fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
  304. e88.e34: 000000013fd91000-000000013fd91fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
  305. e88.e34: 000000013fd92000-000000013fd95fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
  306. e88.e34: 000000013fd96000-000000013fdddfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
  307. e88.e34: 000000013fdde000-000007feff17ffff 0x0001/0x0000 0x0000000
  308. e88.e34: *000007feff180000-000007feff180fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\apisetschema.dll
  309. e88.e34: 000007feff181000-000007fffffaffff 0x0001/0x0000 0x0000000
  310. e88.e34: *000007fffffb0000-000007fffffd2fff 0x0002/0x0002 0x0040000
  311. e88.e34: *000007fffffd3000-000007fffffd3fff 0x0004/0x0004 0x0020000
  312. e88.e34: 000007fffffd4000-000007fffffddfff 0x0001/0x0000 0x0000000
  313. e88.e34: *000007fffffde000-000007fffffdffff 0x0004/0x0004 0x0020000
  314. e88.e34: *000007fffffe0000-000007fffffeffff 0x0001/0x0002 0x0020000
  315. e88.e34: apisetschema.dll: timestamp 0x59b94ec4 (rc=VINF_SUCCESS)
  316. e88.e34: VirtualBox.exe: timestamp 0x5a37e337 (rc=VINF_SUCCESS)
  317. e88.e34: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
  318. e88.e34: '\Device\HarddiskVolume2\Windows\System32\apisetschema.dll' has no imports
  319. e88.e34: '\Device\HarddiskVolume2\Windows\System32\ntdll.dll' has no imports
  320. e88.e34: supR3HardNtChildPurify: Done after 287 ms and 0 fixes (loop #0).
  321. fec.c30: Log file opened: 5.2.4r119785 g_hStartupLog=0000000000000004 g_uNtVerCombined=0x611db100
  322. fec.c30: supR3HardenedVmProcessInit: uNtDllAddr=0000000076e60000 g_uNtVerCombined=0x611db100
  323. e88.e34: supR3HardenedEarlyCompact: Removed heap 1 (0x00000000310000 LB 0x400000)
  324. e88.e34: supR3HardNtEnableThreadCreation:
  325. fec.c30: ntdll.dll: timestamp 0x59b94ee4 (rc=VINF_SUCCESS)
  326. fec.c30: New simple heap: #1 00000000002e0000 LB 0x400000 (for 1744896 allocation)
  327. fec.c30: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
  328. fec.c30: System32: \Device\HarddiskVolume2\Windows\System32
  329. fec.c30: WinSxS: \Device\HarddiskVolume2\Windows\winsxs
  330. fec.c30: KnownDllPath: C:\Windows\system32
  331. fec.c30: supR3HardenedVmProcessInit: Opening vboxdrv...
  332. fec.c30: supR3HardenedVmProcessInit: Restoring LdrInitializeThunk...
  333. fec.c30: supR3HardenedVmProcessInit: Returning to LdrInitializeThunk...
  334. fec.c30: Registered Dll notification callback with NTDLL.
  335. fec.c30: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\kernel32.dll)
  336. fec.c30: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\kernel32.dll
  337. fec.c30: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\kernel32.dll (Input=kernel32.dll, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000000000:<flags> [calling]
  338. fec.c30: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
  339. fec.c30: supR3HardenedDllNotificationCallback: load 0000000076d40000 LB 0x0011f000 C:\Windows\system32\kernel32.dll [fFlags=0x0]
  340. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
  341. fec.c30: supR3HardenedDllNotificationCallback: load 000007fefcb90000 LB 0x0006a000 C:\Windows\system32\KERNELBASE.dll [fFlags=0x0]
  342. fec.c30: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\KernelBase.dll)
  343. fec.c30: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\KernelBase.dll
  344. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=0000000076d40000 'C:\Windows\system32\kernel32.dll'
  345. fec.c30: supR3HardNtDisableThreadCreation: pvLdrInitThunk=0000000076e8a360 pvNtTerminateThread=0000000076eac260
  346. e88.e34: supR3HardNtChildWaitFor: Found expected request 1 (CloseEvents) after 42 ms.
  347. fec.c30: \SystemRoot\System32\ntdll.dll:
  348. fec.c30: CreationTime: 2017-10-23T07:24:57.993413300Z
  349. fec.c30: LastWriteTime: 2017-09-13T15:31:56.094569800Z
  350. fec.c30: ChangeTime: 2017-10-23T09:41:08.709712800Z
  351. fec.c30: FileAttributes: 0x20
  352. fec.c30: Size: 0x1a7100
  353. fec.c30: NT Headers: 0xe0
  354. fec.c30: Timestamp: 0x59b94ee4
  355. fec.c30: Machine: 0x8664 - amd64
  356. fec.c30: Timestamp: 0x59b94ee4
  357. fec.c30: Image Version: 6.1
  358. fec.c30: SizeOfImage: 0x1aa000 (1744896)
  359. fec.c30: Resource Dir: 0x14e000 LB 0x5a028
  360. fec.c30: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
  361. fec.c30: [Raw version resource data: 0x14e0f0 LB 0x380, codepage 0x0 (reserved 0x0)]
  362. fec.c30: ProductName: Microsoft® Windows® Operating System
  363. fec.c30: ProductVersion: 6.1.7601.23915
  364. fec.c30: FileVersion: 6.1.7601.23915 (win7sp1_ldr.170913-0600)
  365. fec.c30: FileDescription: NT Layer DLL
  366. fec.c30: \SystemRoot\System32\kernel32.dll:
  367. fec.c30: CreationTime: 2017-10-23T07:24:54.656222400Z
  368. fec.c30: LastWriteTime: 2017-09-13T15:27:59.681000000Z
  369. fec.c30: ChangeTime: 2017-10-23T09:41:14.356922700Z
  370. fec.c30: FileAttributes: 0x20
  371. fec.c30: Size: 0x11c000
  372. fec.c30: NT Headers: 0xe0
  373. fec.c30: Timestamp: 0x59b94f29
  374. fec.c30: Machine: 0x8664 - amd64
  375. fec.c30: Timestamp: 0x59b94f29
  376. fec.c30: Image Version: 6.1
  377. fec.c30: SizeOfImage: 0x11f000 (1175552)
  378. fec.c30: Resource Dir: 0x116000 LB 0x528
  379. fec.c30: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
  380. fec.c30: [Raw version resource data: 0x1160b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
  381. fec.c30: ProductName: Microsoft® Windows® Operating System
  382. fec.c30: ProductVersion: 6.1.7601.23915
  383. fec.c30: FileVersion: 6.1.7601.23915 (win7sp1_ldr.170913-0600)
  384. fec.c30: FileDescription: Windows NT BASE API Client DLL
  385. fec.c30: \SystemRoot\System32\KernelBase.dll:
  386. fec.c30: CreationTime: 2017-10-23T07:24:54.828232200Z
  387. fec.c30: LastWriteTime: 2017-09-13T15:27:59.681000000Z
  388. fec.c30: ChangeTime: 2017-10-23T09:41:13.779721700Z
  389. fec.c30: FileAttributes: 0x20
  390. fec.c30: Size: 0x66800
  391. fec.c30: NT Headers: 0xe8
  392. fec.c30: Timestamp: 0x59b94f2a
  393. fec.c30: Machine: 0x8664 - amd64
  394. fec.c30: Timestamp: 0x59b94f2a
  395. fec.c30: Image Version: 6.1
  396. fec.c30: SizeOfImage: 0x6a000 (434176)
  397. fec.c30: Resource Dir: 0x68000 LB 0x530
  398. fec.c30: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
  399. fec.c30: [Raw version resource data: 0x680b0 LB 0x3ac, codepage 0x0 (reserved 0x0)]
  400. fec.c30: ProductName: Microsoft® Windows® Operating System
  401. fec.c30: ProductVersion: 6.1.7601.23915
  402. fec.c30: FileVersion: 6.1.7601.23915 (win7sp1_ldr.170913-0600)
  403. fec.c30: FileDescription: Windows NT BASE API Client DLL
  404. fec.c30: \SystemRoot\System32\apisetschema.dll:
  405. fec.c30: CreationTime: 2017-10-23T07:24:50.640992700Z
  406. fec.c30: LastWriteTime: 2017-09-13T15:27:55.360000000Z
  407. fec.c30: ChangeTime: 2017-10-23T09:41:08.210511900Z
  408. fec.c30: FileAttributes: 0x20
  409. fec.c30: Size: 0x1a00
  410. fec.c30: NT Headers: 0xc0
  411. fec.c30: Timestamp: 0x59b94ec4
  412. fec.c30: Machine: 0x8664 - amd64
  413. fec.c30: Timestamp: 0x59b94ec4
  414. fec.c30: Image Version: 6.1
  415. fec.c30: SizeOfImage: 0x50000 (327680)
  416. fec.c30: Resource Dir: 0x30000 LB 0x3f8
  417. fec.c30: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
  418. fec.c30: [Raw version resource data: 0x30060 LB 0x398, codepage 0x0 (reserved 0x0)]
  419. fec.c30: ProductName: Microsoft® Windows® Operating System
  420. fec.c30: ProductVersion: 6.1.7601.23915
  421. fec.c30: FileVersion: 6.1.7601.23915 (win7sp1_ldr.170913-0600)
  422. fec.c30: FileDescription: ApiSet Schema DLL
  423. fec.c30: NtOpenDirectoryObject failed on \Driver: 0xc0000022
  424. fec.c30: supR3HardenedWinFindAdversaries: 0x0
  425. fec.c30: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
  426. fec.c30: Calling main()
  427. fec.c30: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2
  428. fec.c30: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
  429. fec.c30: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
  430. fec.c30: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe)
  431. fec.c30: SUPR3HardenedMain: Final process, opening VBoxDrv...
  432. fec.c30: supR3HardenedEarlyCompact: Removed heap 1 (0x000000002e0000 LB 0x400000)
  433. fec.c30: supR3HardNtEnableThreadCreation:
  434. fec.c30: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSupLib.dll)
  435. fec.c30: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSupLib.dll
  436. fec.c30: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000002db821:<flags> [calling]
  437. fec.c30: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
  438. fec.c30: supR3HardenedDllNotificationCallback: load 000007fee2560000 LB 0x00005000 C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL [fFlags=0x0]
  439. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
  440. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
  441. fec.c30: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000002d8fa1:<flags> [calling]
  442. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee2560000 'C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL'
  443. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
  444. fec.c30: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000002d8fa1:<flags> [calling]
  445. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee2560000 'C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL'
  446. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee2560000 'C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL'
  447. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  448. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'crypt32.dll'.
  449. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msasn1.dll'.
  450. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'rpcrt4.dll'.
  451. fec.c30: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\wintrust.dll)
  452. fec.c30: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\wintrust.dll
  453. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  454. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  455. fec.c30: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll)
  456. fec.c30: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll
  457. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msasn1.dll'...
  458. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'msasn1.dll' -> '\Device\HarddiskVolume2\Windows\System32\msasn1.dll' [rcNtRedir=0xc0150008]
  459. fec.c30: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\msasn1.dll)
  460. fec.c30: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\msasn1.dll
  461. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'crypt32.dll'...
  462. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'crypt32.dll' -> '\Device\HarddiskVolume2\Windows\System32\crypt32.dll' [rcNtRedir=0xc0150008]
  463. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  464. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msasn1.dll'.
  465. fec.c30: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\crypt32.dll)
  466. fec.c30: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\crypt32.dll
  467. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  468. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  469. fec.c30: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\msvcrt.dll)
  470. fec.c30: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\msvcrt.dll
  471. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msasn1.dll'...
  472. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'msasn1.dll' -> '\Device\HarddiskVolume2\Windows\System32\msasn1.dll' [rcNtRedir=0xc0150008]
  473. fec.c30: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msasn1.dll [lacks WinVerifyTrust]
  474. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  475. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  476. fec.c30: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  477. fec.c30: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\Wintrust.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000002dd631:<flags> [calling]
  478. fec.c30: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
  479. fec.c30: supR3HardenedDllNotificationCallback: load 000007fefce00000 LB 0x0003b000 C:\Windows\system32\Wintrust.dll [fFlags=0x0]
  480. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
  481. fec.c30: supR3HardenedDllNotificationCallback: load 000007fefe630000 LB 0x0009f000 C:\Windows\system32\msvcrt.dll [fFlags=0x0]
  482. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  483. fec.c30: supR3HardenedDllNotificationCallback: load 000007fefcc10000 LB 0x0016d000 C:\Windows\system32\CRYPT32.dll [fFlags=0x0]
  484. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
  485. fec.c30: supR3HardenedDllNotificationCallback: load 000007fefcb50000 LB 0x0000f000 C:\Windows\system32\MSASN1.dll [fFlags=0x0]
  486. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msasn1.dll [lacks WinVerifyTrust]
  487. fec.c30: supR3HardenedDllNotificationCallback: load 000007fefe400000 LB 0x0012d000 C:\Windows\system32\RPCRT4.dll [fFlags=0x0]
  488. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  489. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefce00000 'C:\Windows\system32\Wintrust.dll'
  490. fec.c30: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\bcrypt.dll)
  491. fec.c30: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\bcrypt.dll
  492. fec.c30: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\bcrypt.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000002dd631:<flags> [calling]
  493. fec.c30: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
  494. fec.c30: supR3HardenedDllNotificationCallback: load 000007fefc4d0000 LB 0x00022000 C:\Windows\system32\bcrypt.dll [fFlags=0x0]
  495. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
  496. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefc4d0000 'C:\Windows\system32\bcrypt.dll'
  497. fec.c30: bcrypt.dll loaded at 000007fefc4d0000, BCryptOpenAlgorithmProvider at 000007fefc4d2460, preloading providers:
  498. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'advapi32.dll'.
  499. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'bcrypt.dll'.
  500. fec.c30: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\bcryptprimitives.dll)
  501. fec.c30: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\bcryptprimitives.dll
  502. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcrypt.dll'...
  503. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcrypt.dll' -> '\Device\HarddiskVolume2\Windows\System32\bcrypt.dll' [rcNtRedir=0xc0150008]
  504. fec.c30: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
  505. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
  506. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
  507. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  508. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'rpcrt4.dll'.
  509. fec.c30: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\advapi32.dll)
  510. fec.c30: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\advapi32.dll
  511. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  512. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  513. fec.c30: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  514. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  515. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  516. fec.c30: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  517. fec.c30: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\bcryptprimitives.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000002dd611:<flags> [calling]
  518. fec.c30: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust]
  519. fec.c30: supR3HardenedDllNotificationCallback: load 000007fefbfc0000 LB 0x0004c000 C:\Windows\system32\bcryptprimitives.dll [fFlags=0x0]
  520. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust]
  521. fec.c30: supR3HardenedDllNotificationCallback: load 000007fefe2f0000 LB 0x000db000 C:\Windows\system32\ADVAPI32.dll [fFlags=0x0]
  522. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
  523. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'msvcrt.dll'.
  524. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'rpcrt4.dll'.
  525. fec.c30: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\sechost.dll)
  526. fec.c30: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\sechost.dll
  527. fec.c30: supR3HardenedDllNotificationCallback: load 000007fefe900000 LB 0x0001f000 C:\Windows\SYSTEM32\sechost.dll [fFlags=0x0]
  528. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\sechost.dll [lacks WinVerifyTrust]
  529. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefbfc0000 'C:\Windows\system32\bcryptprimitives.dll'
  530. fec.c30: BCryptOpenAlgorithmProvider(,'MD2',0,0) -> 0x0 (hAlgo=00000000007fbbd0)
  531. fec.c30: BCryptOpenAlgorithmProvider(,'MD4',0,0) -> 0x0 (hAlgo=00000000007fda90)
  532. fec.c30: BCryptOpenAlgorithmProvider(,'MD5',0,0) -> 0x0 (hAlgo=00000000007fdbc0)
  533. fec.c30: BCryptOpenAlgorithmProvider(,'SHA1',0,0) -> 0x0 (hAlgo=00000000007fdde0)
  534. fec.c30: BCryptOpenAlgorithmProvider(,'SHA256',0,0) -> 0x0 (hAlgo=00000000007fdf10)
  535. fec.c30: BCryptOpenAlgorithmProvider(,'SHA512',0,0) -> 0x0 (hAlgo=00000000007fe040)
  536. fec.c30: BCryptOpenAlgorithmProvider(,'RSA',0,0) -> 0x0 (hAlgo=00000000007fe290)
  537. fec.c30: BCryptOpenAlgorithmProvider(,'DSA',0,0) -> 0x0 (hAlgo=00000000007fe3c0)
  538. fec.c30: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\cryptsp.dll)
  539. fec.c30: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\cryptsp.dll
  540. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  541. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  542. fec.c30: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  543. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  544. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  545. fec.c30: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  546. fec.c30: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\CRYPTSP.dll (Input=CRYPTSP.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000002dd181:<flags> [calling]
  547. fec.c30: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptsp.dll [lacks WinVerifyTrust]
  548. fec.c30: supR3HardenedDllNotificationCallback: load 000007fefc380000 LB 0x00018000 C:\Windows\system32\CRYPTSP.dll [fFlags=0x0]
  549. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptsp.dll [lacks WinVerifyTrust]
  550. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefc380000 'C:\Windows\system32\CRYPTSP.dll'
  551. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  552. fec.c30: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\rsaenh.dll)
  553. fec.c30: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\rsaenh.dll
  554. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  555. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  556. fec.c30: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  557. fec.c30: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000002dd111:<flags> [calling]
  558. fec.c30: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
  559. fec.c30: supR3HardenedDllNotificationCallback: load 000007fefc080000 LB 0x00047000 C:\Windows\system32\rsaenh.dll [fFlags=0x0]
  560. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
  561. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefc080000 'C:\Windows\system32\rsaenh.dll'
  562. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
  563. fec.c30: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\ADVAPI32.dll (Input=ADVAPI32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000002dc9a1:<flags> [calling]
  564. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefe2f0000 'C:\Windows\system32\ADVAPI32.dll'
  565. fec.c30: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\cryptbase.dll)
  566. fec.c30: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\cryptbase.dll
  567. fec.c30: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\CRYPTBASE.dll (Input=CRYPTBASE.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000002dcd21:<flags> [calling]
  568. fec.c30: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptbase.dll [lacks WinVerifyTrust]
  569. fec.c30: supR3HardenedDllNotificationCallback: load 000007fefc9f0000 LB 0x0000f000 C:\Windows\system32\CRYPTBASE.dll [fFlags=0x0]
  570. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptbase.dll [lacks WinVerifyTrust]
  571. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefc9f0000 'C:\Windows\system32\CRYPTBASE.dll'
  572. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
  573. fec.c30: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\kernel32.dll (Input=kernel32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000002dc751:<flags> [calling]
  574. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=0000000076d40000 'C:\Windows\system32\kernel32.dll'
  575. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
  576. fec.c30: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\WINTRUST.DLL (Input=WINTRUST.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000002dd0e1:<flags> [calling]
  577. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefce00000 'C:\Windows\system32\WINTRUST.DLL'
  578. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
  579. fec.c30: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\CRYPT32.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=00000000002dcf11:<flags> [calling]
  580. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefcc10000 'C:\Windows\system32\CRYPT32.dll'
  581. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  582. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #16 'advapi32.dll'.
  583. fec.c30: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\imagehlp.dll)
  584. fec.c30: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\imagehlp.dll
  585. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
  586. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
  587. fec.c30: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
  588. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  589. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  590. fec.c30: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  591. fec.c30: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\imagehlp.dll (Input=imagehlp.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000002dcf61:<flags> [calling]
  592. fec.c30: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\imagehlp.dll [lacks WinVerifyTrust]
  593. fec.c30: supR3HardenedDllNotificationCallback: load 000007fefe6d0000 LB 0x00019000 C:\Windows\system32\imagehlp.dll [fFlags=0x0]
  594. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\imagehlp.dll [lacks WinVerifyTrust]
  595. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefe6d0000 'C:\Windows\system32\imagehlp.dll'
  596. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptsp.dll [lacks WinVerifyTrust]
  597. fec.c30: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\CRYPTSP.dll (Input=CRYPTSP.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000002dd0b1:<flags> [calling]
  598. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefc380000 'C:\Windows\system32\CRYPTSP.dll'
  599. fec.c30: \Device\HarddiskVolume2\Windows\System32\user32.dll: Owner is administrators group.
  600. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'gdi32.dll'.
  601. fec.c30: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\user32.dll)
  602. fec.c30: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\user32.dll
  603. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  604. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  605. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
  606. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'lpk.dll'.
  607. fec.c30: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\gdi32.dll)
  608. fec.c30: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\gdi32.dll
  609. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'lpk.dll'...
  610. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'lpk.dll' -> '\Device\HarddiskVolume2\Windows\System32\lpk.dll' [rcNtRedir=0xc0150008]
  611. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'gdi32.dll'.
  612. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'user32.dll'.
  613. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'usp10.dll'.
  614. fec.c30: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\lpk.dll)
  615. fec.c30: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\lpk.dll
  616. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  617. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  618. fec.c30: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
  619. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'usp10.dll'...
  620. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'usp10.dll' -> '\Device\HarddiskVolume2\Windows\System32\usp10.dll' [rcNtRedir=0xc0150008]
  621. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  622. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
  623. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'gdi32.dll'.
  624. fec.c30: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\usp10.dll)
  625. fec.c30: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\usp10.dll
  626. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  627. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  628. fec.c30: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
  629. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  630. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  631. fec.c30: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  632. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  633. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  634. fec.c30: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  635. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  636. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  637. fec.c30: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
  638. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  639. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  640. fec.c30: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  641. fec.c30: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\USER32.dll (Input=USER32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000002dcbe1:<flags> [calling]
  642. fec.c30: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
  643. fec.c30: supR3HardenedDllNotificationCallback: load 0000000076c40000 LB 0x000fa000 C:\Windows\system32\USER32.dll [fFlags=0x0]
  644. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
  645. fec.c30: supR3HardenedDllNotificationCallback: load 000007fefe540000 LB 0x00067000 C:\Windows\system32\GDI32.dll [fFlags=0x0]
  646. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  647. fec.c30: supR3HardenedDllNotificationCallback: load 000007fefe530000 LB 0x0000e000 C:\Windows\system32\LPK.dll [fFlags=0x0]
  648. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\lpk.dll [lacks WinVerifyTrust]
  649. fec.c30: supR3HardenedDllNotificationCallback: load 000007fefe750000 LB 0x000cb000 C:\Windows\system32\USP10.dll [fFlags=0x0]
  650. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\usp10.dll [lacks WinVerifyTrust]
  651. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  652. fec.c30: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\gdi32.dll (Input=gdi32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000002dc0e1:<flags> [calling]
  653. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefe540000 'C:\Windows\system32\gdi32.dll'
  654. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'user32.dll'.
  655. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'gdi32.dll'.
  656. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msctf.dll'.
  657. fec.c30: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\imm32.dll)
  658. fec.c30: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\imm32.dll
  659. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msctf.dll'...
  660. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'msctf.dll' -> '\Device\HarddiskVolume2\Windows\System32\msctf.dll' [rcNtRedir=0xc0150008]
  661. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  662. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'user32.dll'.
  663. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'gdi32.dll'.
  664. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'imm32.dll'.
  665. fec.c30: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\msctf.dll)
  666. fec.c30: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\msctf.dll
  667. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  668. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  669. fec.c30: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  670. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  671. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  672. fec.c30: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
  673. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'...
  674. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume2\Windows\System32\imm32.dll' [rcNtRedir=0xc0150008]
  675. fec.c30: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\imm32.dll [lacks WinVerifyTrust]
  676. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  677. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  678. fec.c30: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  679. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  680. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  681. fec.c30: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
  682. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  683. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  684. fec.c30: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  685. fec.c30: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\IMM32.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000002dba21:<flags> [calling]
  686. fec.c30: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\imm32.dll [lacks WinVerifyTrust]
  687. fec.c30: supR3HardenedDllNotificationCallback: load 000007fefe3d0000 LB 0x0002e000 C:\Windows\system32\IMM32.DLL [fFlags=0x0]
  688. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\imm32.dll [lacks WinVerifyTrust]
  689. fec.c30: supR3HardenedDllNotificationCallback: load 000007fefd3b0000 LB 0x00109000 C:\Windows\system32\MSCTF.dll [fFlags=0x0]
  690. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msctf.dll [lacks WinVerifyTrust]
  691. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefe3d0000 'C:\Windows\system32\IMM32.DLL'
  692. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=0000000076c40000 'C:\Windows\system32\USER32.dll'
  693. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'bcrypt.dll'.
  694. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'.
  695. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'msasn1.dll'.
  696. fec.c30: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\ncrypt.dll)
  697. fec.c30: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\ncrypt.dll
  698. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msasn1.dll'...
  699. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'msasn1.dll' -> '\Device\HarddiskVolume2\Windows\System32\msasn1.dll' [rcNtRedir=0xc0150008]
  700. fec.c30: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msasn1.dll [lacks WinVerifyTrust]
  701. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  702. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  703. fec.c30: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  704. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcrypt.dll'...
  705. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcrypt.dll' -> '\Device\HarddiskVolume2\Windows\System32\bcrypt.dll' [rcNtRedir=0xc0150008]
  706. fec.c30: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
  707. fec.c30: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\ncrypt.dll (Input=ncrypt.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000002dcee1:<flags> [calling]
  708. fec.c30: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\ncrypt.dll [lacks WinVerifyTrust]
  709. fec.c30: supR3HardenedDllNotificationCallback: load 000007fefc500000 LB 0x00050000 C:\Windows\system32\ncrypt.dll [fFlags=0x0]
  710. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\ncrypt.dll [lacks WinVerifyTrust]
  711. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefc500000 'C:\Windows\system32\ncrypt.dll'
  712. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
  713. fec.c30: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\bcrypt.dll (Input=bcrypt.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000002dccd1:<flags> [calling]
  714. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefc4d0000 'C:\Windows\system32\bcrypt.dll'
  715. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  716. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #17 'rpcrt4.dll'.
  717. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'profapi.dll'.
  718. fec.c30: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\userenv.dll)
  719. fec.c30: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\userenv.dll
  720. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'profapi.dll'...
  721. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'profapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\profapi.dll' [rcNtRedir=0xc0150008]
  722. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  723. fec.c30: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\profapi.dll)
  724. fec.c30: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\profapi.dll
  725. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  726. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  727. fec.c30: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  728. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  729. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  730. fec.c30: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  731. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  732. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  733. fec.c30: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  734. fec.c30: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\USERENV.dll (Input=USERENV.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000002dc661:<flags> [calling]
  735. fec.c30: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\userenv.dll [lacks WinVerifyTrust]
  736. fec.c30: supR3HardenedDllNotificationCallback: load 000007fefcb70000 LB 0x0001e000 C:\Windows\system32\USERENV.dll [fFlags=0x0]
  737. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\userenv.dll [lacks WinVerifyTrust]
  738. fec.c30: supR3HardenedDllNotificationCallback: load 000007fefcb60000 LB 0x0000f000 C:\Windows\system32\profapi.dll [fFlags=0x0]
  739. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\profapi.dll [lacks WinVerifyTrust]
  740. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefcb70000 'C:\Windows\system32\USERENV.dll'
  741. fec.c30: supR3HardenedIsApiSetDll: '<NULL>' -> true
  742. fec.c30: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-Win-Security-SDDL-L1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=00000000002dc3c1:<flags> [calling]
  743. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefe900000 'API-MS-Win-Security-SDDL-L1-1-0.dll'
  744. fec.c30: supR3HardenedIsApiSetDll: '<NULL>' -> true
  745. fec.c30: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-Win-Security-SDDL-L1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=00000000002dc751:<flags> [calling]
  746. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefe900000 'API-MS-Win-Security-SDDL-L1-1-0.dll'
  747. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  748. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #16 'rpcrt4.dll'.
  749. fec.c30: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\gpapi.dll)
  750. fec.c30: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\gpapi.dll
  751. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  752. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  753. fec.c30: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  754. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  755. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  756. fec.c30: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  757. fec.c30: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\GPAPI.dll (Input=GPAPI.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000002dc981:<flags> [calling]
  758. fec.c30: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gpapi.dll [lacks WinVerifyTrust]
  759. fec.c30: supR3HardenedDllNotificationCallback: load 000007fefbd90000 LB 0x0001b000 C:\Windows\system32\GPAPI.dll [fFlags=0x0]
  760. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gpapi.dll [lacks WinVerifyTrust]
  761. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefbd90000 'C:\Windows\system32\GPAPI.dll'
  762. fec.c30: supR3HardenedIsApiSetDll: '<NULL>' -> true
  763. fec.c30: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-WIN-Service-Management-L1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=00000000002dc8d1:<flags> [calling]
  764. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefe900000 'API-MS-WIN-Service-Management-L1-1-0.dll'
  765. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  766. fec.c30: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rpcrt4.dll (Input=rpcrt4.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000002dbfd1:<flags> [calling]
  767. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefe400000 'C:\Windows\system32\rpcrt4.dll'
  768. fec.c30: supR3HardenedIsApiSetDll: '<NULL>' -> true
  769. fec.c30: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-WIN-Service-Management-L2-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=00000000002dc8b1:<flags> [calling]
  770. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefe900000 'API-MS-WIN-Service-Management-L2-1-0.dll'
  771. fec.c30: supR3HardenedIsApiSetDll: '<NULL>' -> true
  772. fec.c30: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-Win-Security-SDDL-L1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=00000000002dc8c1:<flags> [calling]
  773. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefe900000 'API-MS-Win-Security-SDDL-L1-1-0.dll'
  774. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  775. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'advapi32.dll'.
  776. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'crypt32.dll'.
  777. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'wldap32.dll'.
  778. fec.c30: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\cryptnet.dll)
  779. fec.c30: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\cryptnet.dll
  780. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'wldap32.dll'...
  781. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'wldap32.dll' -> '\Device\HarddiskVolume2\Windows\System32\wldap32.dll' [rcNtRedir=0xc0150008]
  782. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  783. fec.c30: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\Wldap32.dll)
  784. fec.c30: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\Wldap32.dll
  785. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'crypt32.dll'...
  786. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'crypt32.dll' -> '\Device\HarddiskVolume2\Windows\System32\crypt32.dll' [rcNtRedir=0xc0150008]
  787. fec.c30: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
  788. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
  789. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
  790. fec.c30: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
  791. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  792. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  793. fec.c30: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  794. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  795. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  796. fec.c30: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  797. fec.c30: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\cryptnet.dll (Input=cryptnet.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000002dc3c1:<flags> [calling]
  798. fec.c30: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
  799. fec.c30: supR3HardenedDllNotificationCallback: load 000007fefa560000 LB 0x00027000 C:\Windows\system32\cryptnet.dll [fFlags=0x0]
  800. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
  801. fec.c30: supR3HardenedDllNotificationCallback: load 000007fefe6f0000 LB 0x00052000 C:\Windows\system32\WLDAP32.dll [fFlags=0x0]
  802. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\Wldap32.dll [lacks WinVerifyTrust]
  803. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
  804. fec.c30: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=00000000002db5f1:<flags> [calling]
  805. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefa560000 'C:\Windows\system32\cryptnet.dll'
  806. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
  807. fec.c30: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=00000000002db5f1:<flags> [calling]
  808. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefa560000 'C:\Windows\system32\cryptnet.dll'
  809. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
  810. fec.c30: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=00000000002db5f1:<flags> [calling]
  811. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefa560000 'C:\Windows\system32\cryptnet.dll'
  812. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
  813. fec.c30: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=00000000002db5f1:<flags> [calling]
  814. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefa560000 'C:\Windows\system32\cryptnet.dll'
  815. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
  816. fec.c30: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=00000000002db5f1:<flags> [calling]
  817. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefa560000 'C:\Windows\system32\cryptnet.dll'
  818. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
  819. fec.c30: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=00000000002db5f1:<flags> [calling]
  820. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefa560000 'C:\Windows\system32\cryptnet.dll'
  821. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
  822. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefa560000 'C:\Windows\system32\cryptnet.dll'
  823. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
  824. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefa560000 'C:\Windows\system32\cryptnet.dll'
  825. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
  826. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefa560000 'C:\Windows\system32\cryptnet.dll'
  827. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
  828. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefa560000 'C:\Windows\system32\cryptnet.dll'
  829. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
  830. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefa560000 'C:\Windows\system32\cryptnet.dll'
  831. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefa560000 'C:\Windows\system32\cryptnet.dll'
  832. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
  833. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefa560000 'C:\Windows\system32\cryptnet.dll'
  834. fec.c30: supR3HardenedIsApiSetDll: '<NULL>' -> true
  835. fec.c30: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-Win-Security-SDDL-L1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=00000000002dbce1:<flags> [calling]
  836. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefe900000 'API-MS-Win-Security-SDDL-L1-1-0.dll'
  837. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\profapi.dll [lacks WinVerifyTrust]
  838. fec.c30: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\profapi.dll (Input=profapi.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000002dbce1:<flags> [calling]
  839. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefcb60000 'C:\Windows\system32\profapi.dll'
  840. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'gdi32.dll'.
  841. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
  842. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'msvcrt.dll'.
  843. fec.c30: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\shlwapi.dll)
  844. fec.c30: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\shlwapi.dll
  845. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  846. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  847. fec.c30: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  848. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  849. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  850. fec.c30: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
  851. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  852. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  853. fec.c30: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  854. fec.c30: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\SHLWAPI.dll (Input=SHLWAPI.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000002db771:<flags> [calling]
  855. fec.c30: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\shlwapi.dll [lacks WinVerifyTrust]
  856. fec.c30: supR3HardenedDllNotificationCallback: load 000007fefe5b0000 LB 0x00071000 C:\Windows\system32\SHLWAPI.dll [fFlags=0x0]
  857. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\shlwapi.dll [lacks WinVerifyTrust]
  858. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefe5b0000 'C:\Windows\system32\SHLWAPI.dll'
  859. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000000 pwszName=\SystemRoot\System32\ntdll.dll
  860. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: New context 00000000029ffb00
  861. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000029ffb00
  862. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=1F5E05BCF645241EEA763D2EB09C25AC95452663
  863. fec.c30: supR3HardenedIsApiSetDll: '<NULL>' -> true
  864. fec.c30: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-Win-Security-SDDL-L1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=00000000002dc6a1:<flags> [calling]
  865. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefe900000 'API-MS-Win-Security-SDDL-L1-1-0.dll'
  866. fec.c30: supR3HardenedIsApiSetDll: '<NULL>' -> true
  867. fec.c30: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-WIN-Service-Management-L1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=00000000002dc201:<flags> [calling]
  868. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefe900000 'API-MS-WIN-Service-Management-L1-1-0.dll'
  869. fec.c30: supR3HardenedIsApiSetDll: '<NULL>' -> true
  870. fec.c30: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-WIN-Service-winsvc-L1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=00000000002dc201:<flags> [calling]
  871. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefe900000 'API-MS-WIN-Service-winsvc-L1-1-0.dll'
  872. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
  873. fec.c30: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\ADVAPI32.dll (Input=ADVAPI32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000002dc6a1:<flags> [calling]
  874. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefe2f0000 'C:\Windows\system32\ADVAPI32.dll'
  875. fec.c30: supR3HardenedIsApiSetDll: '<NULL>' -> true
  876. fec.c30: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-Win-Security-LSALookup-L1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=00000000002dc651:<flags> [calling]
  877. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefe900000 'API-MS-Win-Security-LSALookup-L1-1-0.dll'
  878. fec.c30: supR3HardenedIsApiSetDll: '<NULL>' -> true
  879. fec.c30: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-Win-Security-LSALookup-L1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=00000000002dc341:<flags> [calling]
  880. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefe900000 'API-MS-Win-Security-LSALookup-L1-1-0.dll'
  881. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_500_for_KB4048957~31bf3856ad364e35~amd64~~6.1.1.2.cat'; file='\SystemRoot\System32\ntdll.dll'
  882. fec.c30: g_pfnWinVerifyTrust=000007fefce01010
  883. fec.c30: supR3HardenedScreenImage/preload: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\crypt32.dll [redoing WinVerifyTrust]
  884. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000000e0 pwszName=\Device\HarddiskVolume2\Windows\System32\crypt32.dll
  885. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000029ffb00
  886. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000029ffb00
  887. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=F77D21FA60E897144706C54D4A369C8DA3A96EDC
  888. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_500_for_KB4048957~31bf3856ad364e35~amd64~~6.1.1.2.cat'; file='\Device\HarddiskVolume2\Windows\System32\crypt32.dll'
  889. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  890. fec.c30: supR3HardenedScreenImage/preload: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\crypt32.dll'
  891. fec.c30: supR3HardenedScreenImage/preload: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wintrust.dll [redoing WinVerifyTrust]
  892. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000000d4 pwszName=\Device\HarddiskVolume2\Windows\System32\wintrust.dll
  893. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000029ffb00
  894. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000029ffb00
  895. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=64DB0BCE4F2D99E4624F5476790FB954117C96EF
  896. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_500_for_KB4048957~31bf3856ad364e35~amd64~~6.1.1.2.cat'; file='\Device\HarddiskVolume2\Windows\System32\wintrust.dll'
  897. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  898. fec.c30: supR3HardenedScreenImage/preload: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\wintrust.dll'
  899. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hFile=000000000000038c pwszName=\Device\HarddiskVolume2\Windows\System32\shlwapi.dll
  900. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000029ffb00
  901. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000029ffb00
  902. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=0AB8D9C9D3E1FC95D01F9A984B16ED031BB40CD8
  903. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume2\Windows\System32\shlwapi.dll'
  904. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  905. fec.c30: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\shlwapi.dll'
  906. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000384 pwszName=\Device\HarddiskVolume2\Windows\System32\Wldap32.dll
  907. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000029ffb00
  908. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000029ffb00
  909. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=086A94704E162AB5C6F0ED4BA6DE6C8B4524BA56
  910. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_500_for_KB4048957~31bf3856ad364e35~amd64~~6.1.1.2.cat'; file='\Device\HarddiskVolume2\Windows\System32\Wldap32.dll'
  911. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  912. fec.c30: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\Wldap32.dll'
  913. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000380 pwszName=\Device\HarddiskVolume2\Windows\System32\cryptnet.dll
  914. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000029ffb00
  915. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000029ffb00
  916. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=39AF46E16CB63BADF4DB0AE7F539D8C4373E13BA
  917. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_500_for_KB4048957~31bf3856ad364e35~amd64~~6.1.1.2.cat'; file='\Device\HarddiskVolume2\Windows\System32\cryptnet.dll'
  918. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  919. fec.c30: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\cryptnet.dll'
  920. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hFile=000000000000025c pwszName=\Device\HarddiskVolume2\Windows\System32\gpapi.dll
  921. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000029ffb00
  922. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000029ffb00
  923. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=EBDAA16C3FD93DFF9C20BA3B2689DFF4C8D31061
  924. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_115_for_KB3159398~31bf3856ad364e35~amd64~~6.1.1.1.cat'; file='\Device\HarddiskVolume2\Windows\System32\gpapi.dll'
  925. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  926. fec.c30: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\gpapi.dll'
  927. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000001c8 pwszName=\Device\HarddiskVolume2\Windows\System32\profapi.dll
  928. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000029ffb00
  929. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000029ffb00
  930. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=2449672745D9BA339420451D13FA0380AA768231
  931. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntpe.cat'; file='\Device\HarddiskVolume2\Windows\System32\profapi.dll'
  932. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  933. fec.c30: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\profapi.dll'
  934. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000001c4 pwszName=\Device\HarddiskVolume2\Windows\System32\userenv.dll
  935. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000029ffb00
  936. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000029ffb00
  937. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=D3E1A2CC7367F751C19EBF4E6EDF5E9A10E47313
  938. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume2\Windows\System32\userenv.dll'
  939. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  940. fec.c30: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\userenv.dll'
  941. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000001b0 pwszName=\Device\HarddiskVolume2\Windows\System32\ncrypt.dll
  942. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000029ffb00
  943. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000029ffb00
  944. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=2BBA3367EA1E5C673D52D2309BE2745A7A5FB2C4
  945. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_500_for_KB4048957~31bf3856ad364e35~amd64~~6.1.1.2.cat'; file='\Device\HarddiskVolume2\Windows\System32\ncrypt.dll'
  946. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  947. fec.c30: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\ncrypt.dll'
  948. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000198 pwszName=\Device\HarddiskVolume2\Windows\System32\msctf.dll
  949. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000029ffb00
  950. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000029ffb00
  951. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=B18074E6500B26B9675D6739EF0E6FFC56E8E0CA
  952. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_500_for_KB4048957~31bf3856ad364e35~amd64~~6.1.1.2.cat'; file='\Device\HarddiskVolume2\Windows\System32\msctf.dll'
  953. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  954. fec.c30: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\msctf.dll'
  955. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000194 pwszName=\Device\HarddiskVolume2\Windows\System32\imm32.dll
  956. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000029ffb00
  957. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000029ffb00
  958. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=6EEE1AB3B6D79AFF857940FF5F51ED27698153EC
  959. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntpe.cat'; file='\Device\HarddiskVolume2\Windows\System32\imm32.dll'
  960. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  961. fec.c30: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\imm32.dll'
  962. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000190 pwszName=\Device\HarddiskVolume2\Windows\System32\usp10.dll
  963. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000029ffb00
  964. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000029ffb00
  965. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=8AE1E4C5A6AE2CD7C2699FE89EFC72F3203BC58E
  966. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_500_for_KB4048957~31bf3856ad364e35~amd64~~6.1.1.2.cat'; file='\Device\HarddiskVolume2\Windows\System32\usp10.dll'
  967. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  968. fec.c30: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\usp10.dll'
  969. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hFile=000000000000018c pwszName=\Device\HarddiskVolume2\Windows\System32\lpk.dll
  970. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000029ffb00
  971. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000029ffb00
  972. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=DC994FB408FAF67CF116D1D74EFE3F5D9DA7A609
  973. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_500_for_KB4048957~31bf3856ad364e35~amd64~~6.1.1.2.cat'; file='\Device\HarddiskVolume2\Windows\System32\lpk.dll'
  974. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  975. fec.c30: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\lpk.dll'
  976. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000188 pwszName=\Device\HarddiskVolume2\Windows\System32\gdi32.dll
  977. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000029ffb00
  978. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000029ffb00
  979. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=2D767C07C15EAAFC316567AB2F5CA7B85CCD70E2
  980. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_500_for_KB4048957~31bf3856ad364e35~amd64~~6.1.1.2.cat'; file='\Device\HarddiskVolume2\Windows\System32\gdi32.dll'
  981. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  982. fec.c30: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\gdi32.dll'
  983. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000184 pwszName=\Device\HarddiskVolume2\Windows\System32\user32.dll
  984. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000029ffb00
  985. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000029ffb00
  986. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=E7DC496F06553DAC9BBB7B106A5859A9B7459010
  987. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: Retrying with fresh context (CryptCATAdminEnumCatalogFromHash -> 1168; iCat=0x0)
  988. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: New context 00000000029ffb00
  989. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000029ffb00
  990. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=E7DC496F06553DAC9BBB7B106A5859A9B7459010
  991. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: CryptCATAdminEnumCatalogFromHash failed ERRROR_NOT_FOUND (1168)
  992. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: New context 00000000029b8660
  993. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000029b8660
  994. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=32 wszDigest=72ED1EBF7CCEC3B4314BFD42BB8BEA0BB256C4D51D36CAB5E46777893F257BB3
  995. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: CryptCATAdminEnumCatalogFromHash failed ERRROR_NOT_FOUND (1168)
  996. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile -> -22900 (org 22900)
  997. fec.c30: supR3HardenedWinVerifyCacheProcessWvtTodos: -22900 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\user32.dll'
  998. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000180 pwszName=\Device\HarddiskVolume2\Windows\System32\imagehlp.dll
  999. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000029ffb00
  1000. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000029ffb00
  1001. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=2702EE05F1B717B0F2CE0FBE32784A47B8419DCA
  1002. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2893294~31bf3856ad364e35~amd64~~6.1.1.1.cat'; file='\Device\HarddiskVolume2\Windows\System32\imagehlp.dll'
  1003. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1004. fec.c30: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\imagehlp.dll'
  1005. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000134 pwszName=\Device\HarddiskVolume2\Windows\System32\cryptbase.dll
  1006. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000029ffb00
  1007. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000029ffb00
  1008. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=D5FC4F2CD5240E1C8EE8C6C3E3DFE4029596EF9C
  1009. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_500_for_KB4048957~31bf3856ad364e35~amd64~~6.1.1.2.cat'; file='\Device\HarddiskVolume2\Windows\System32\cryptbase.dll'
  1010. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1011. fec.c30: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\cryptbase.dll'
  1012. fec.c30: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\rsaenh.dll'
  1013. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000130 pwszName=\Device\HarddiskVolume2\Windows\System32\cryptsp.dll
  1014. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000029ffb00
  1015. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000029ffb00
  1016. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=CECCA98E04985A576883E9A9AD8AF2140526B576
  1017. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_500_for_KB4048957~31bf3856ad364e35~amd64~~6.1.1.2.cat'; file='\Device\HarddiskVolume2\Windows\System32\cryptsp.dll'
  1018. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1019. fec.c30: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\cryptsp.dll'
  1020. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000120 pwszName=\Device\HarddiskVolume2\Windows\System32\sechost.dll
  1021. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000029ffb00
  1022. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000029ffb00
  1023. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=CB669FA8DB80F8E50A29D055BB8D558E10E5E6B4
  1024. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_85_for_KB3068708~31bf3856ad364e35~amd64~~6.1.1.0.cat'; file='\Device\HarddiskVolume2\Windows\System32\sechost.dll'
  1025. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1026. fec.c30: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\sechost.dll'
  1027. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hFile=000000000000011c pwszName=\Device\HarddiskVolume2\Windows\System32\advapi32.dll
  1028. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000029ffb00
  1029. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000029ffb00
  1030. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=B9FB78D95C611EC480818A4744EAB8FFEAD97B10
  1031. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_500_for_KB4048957~31bf3856ad364e35~amd64~~6.1.1.2.cat'; file='\Device\HarddiskVolume2\Windows\System32\advapi32.dll'
  1032. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1033. fec.c30: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\advapi32.dll'
  1034. fec.c30: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\bcryptprimitives.dll'
  1035. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000104 pwszName=\Device\HarddiskVolume2\Windows\System32\bcrypt.dll
  1036. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000029ffb00
  1037. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000029ffb00
  1038. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=A37B61527FAD2E36038B930574FF8D168775773B
  1039. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_500_for_KB4048957~31bf3856ad364e35~amd64~~6.1.1.2.cat'; file='\Device\HarddiskVolume2\Windows\System32\bcrypt.dll'
  1040. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1041. fec.c30: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\bcrypt.dll'
  1042. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000000e4 pwszName=\Device\HarddiskVolume2\Windows\System32\msvcrt.dll
  1043. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000029ffb00
  1044. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000029ffb00
  1045. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=2CA2FD632B264C063162F71474266E3615B6420C
  1046. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2654428~31bf3856ad364e35~amd64~~6.1.1.0.cat'; file='\Device\HarddiskVolume2\Windows\System32\msvcrt.dll'
  1047. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1048. fec.c30: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll'
  1049. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000000dc pwszName=\Device\HarddiskVolume2\Windows\System32\msasn1.dll
  1050. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000029ffb00
  1051. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000029ffb00
  1052. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=F2FF57DC30D774F93061607060DAA0DD15E39CCE
  1053. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume2\Windows\System32\msasn1.dll'
  1054. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1055. fec.c30: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\msasn1.dll'
  1056. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000000d8 pwszName=\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll
  1057. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000029ffb00
  1058. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000029ffb00
  1059. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=0B1742B12D9CD2C2B26686DFFDD19ECDAC844FF8
  1060. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_500_for_KB4048957~31bf3856ad364e35~amd64~~6.1.1.2.cat'; file='\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll'
  1061. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1062. fec.c30: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll'
  1063. fec.c30: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSupLib.dll'
  1064. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000028 pwszName=\Device\HarddiskVolume2\Windows\System32\KernelBase.dll
  1065. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000029ffb00
  1066. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000029ffb00
  1067. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=B1DD6C04D2033BFDBE0C5B410EB7F5495BDBFD7E
  1068. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_500_for_KB4048957~31bf3856ad364e35~amd64~~6.1.1.2.cat'; file='\Device\HarddiskVolume2\Windows\System32\KernelBase.dll'
  1069. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1070. fec.c30: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\KernelBase.dll'
  1071. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000020 pwszName=\Device\HarddiskVolume2\Windows\System32\kernel32.dll
  1072. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000029ffb00
  1073. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000029ffb00
  1074. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=EC8F4EEF117488A42CEE6E26D5D82A459287E403
  1075. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_500_for_KB4048957~31bf3856ad364e35~amd64~~6.1.1.2.cat'; file='\Device\HarddiskVolume2\Windows\System32\kernel32.dll'
  1076. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1077. fec.c30: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\kernel32.dll'
  1078. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\crypt32.dll
  1079. fec.c30: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\crypt32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000002dc141:<flags> [calling]
  1080. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefcc10000 'C:\Windows\system32\crypt32.dll'
  1081. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x5ad46780fa5df300 DC=com, DC=microsoft, CN=Microsoft Root Certificate Authority
  1082. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xea5386456178582b C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA
  1083. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x3be670c1bd02a900 OU=Copyright (c) 1997 Microsoft Corp., OU=Microsoft Corporation, CN=Microsoft Root Authority
  1084. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x4d3835aa4180b200 C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Root Certificate Authority 2011
  1085. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x646e3fe3ba08df00 C=US, O=MSFT, CN=Microsoft Authenticode(tm) Root Authority
  1086. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xece4e4289e08b900 C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Root Certificate Authority 2010
  1087. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x43a9cc371ff5385a O=Microsoft Trust Network, OU=Microsoft Corporation, OU=Microsoft Time Stamping Service Root, OU=Copyright (c) 1997 Microsoft Corp.
  1088. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x2e2d2c7c68f0202e O=VeriSign Trust Network, OU=VeriSign, Inc., OU=VeriSign Time Stamping Service Root, OU=NO LIABILITY ACCEPTED, (c)97 VeriSign, Inc.
  1089. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x26c2e295b78ebf00 C=PA, ST=Panama, L=Panama City, O=TrustCor Systems S. de R.L., OU=TrustCor Certificate Authority, CN=TrustCor RootCert CA-1
  1090. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x64db4864a542b500 C=HU, L=Budapest, O=NISZ Nemzeti Infokommunikációs Szolgáltató Zrt., CN=Főtanúsítványkiadó - Kormányzati Hitelesítés Szolgáltató
  1091. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xe0249b57ec7fbc00 C=JP, O=SECOM Trust Systems CO.,LTD., OU=Security Communication EV RootCA1
  1092. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xee325335cd8dba00 C=DE, O=D-Trust GmbH, CN=D-TRUST Root Class 3 CA 2007
  1093. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x498022a0c4c5be00 C=CN, O=WoSign CA Limited, CN=Certification Authority of WoSign G2
  1094. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x4a25c87eb933b700 C=RO, O=certSIGN, OU=certSIGN ROOT CA
  1095. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x3703c8da1585b000 C=FI, ST=Finland, O=Vaestorekisterikeskus CA, OU=Certification Authority Services, OU=Varmennepalvelut, CN=VRK Gov. Root CA
  1096. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x8b062bb556fcc300 C=FR, O=Certeurope, OU=0002 434202180, CN=Certeurope Root CA 2
  1097. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x977025a7d23db100 C=UY, O=ADMINISTRACION NACIONAL DE CORREOS, OU=SERVICIOS ELECTRONICOS, CN=Correo Uruguayo - Root CA
  1098. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x15941d5f68b5c600 CN=ComSign Secured CA, O=ComSign, C=IL
  1099. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xa12b07674f1bf600 C=US, O=AffirmTrust, CN=AffirmTrust Commercial
  1100. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x7ba84b7b8ac1fe0d C=US, O=Amazon, CN=Amazon Root CA 4
  1101. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x57b18dfb583fb8cd C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Root G3
  1102. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x75a2ccecb8259a00 C=TW, O=Government Root Certification Authority
  1103. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x3c0043239a65bd00 C=FR, O=Certplus, CN=Class 3TS Primary CA
  1104. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x2ca429a5c4c6a700 C=IT, L=Milan, O=Actalis S.p.A./03358520967, CN=Actalis Authentication Root CA
  1105. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xd8dbfb2c27bfb200 C=US, O=thawte, Inc., OU=Certification Services Division, OU=(c) 2008 thawte, Inc. - For authorized use only, CN=thawte Primary Root CA - G3
  1106. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xa5c88c0a3eb7ab00 CN=TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı, C=TR, L=Ankara, O=TÜRKTRUST Bilgi İletişim ve Bilişim Güvenliği Hizmetleri A.Ş. (c) Aralık 2007
  1107. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x4701de45a311b800 C=NL, O=Digidentity B.V., CN=Digidentity L3 Root CA - G2
  1108. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xfabb782c2551e100 C=CN, O=China Financial Certification Authority, CN=CFCA Identity CA
  1109. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xd66525adaaa600 C=JP, O=Japanese Government, OU=GPKI, CN=ApplicationCA2 Root
  1110. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x91e3728b8b40d000 C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO Certification Authority
  1111. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xeb7a1ac4eef2cd00 C=HU, L=Budapest, O=NetLock Kft., OU=Tanúsítványkiadók (Certification Services), CN=NetLock Platina (Class Platinum) Főtanúsítvány
  1112. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x788c2b5ac673bf00 C=CN, O=CFCA GT CA
  1113. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x8fe279bdb46fee00 C=US, O=Wells Fargo WellsSecure, OU=Wells Fargo Bank NA, CN=WellsSecure Public Root Certificate Authority
  1114. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x57ea572f1df7c400 C=ch, O=Swisscom, OU=Digital Certificate Services, CN=Swisscom Root EV CA 2
  1115. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xe0c6a3a05515a600 C=US, O=GeoTrust Inc., CN=GeoTrust Universal CA
  1116. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x6cf5607c697cb700 C=ZA, ST=Western Cape, L=Somerset West, O=South African Post Office Limited, OU=SAPO Trust Centre, CN=SAPO Class 2 Root CA, Email=pkiadmin@trustcentre.co.za
  1117. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x1f3f10cd6b5dd700 C=CN, O=China Financial Certification Authority, CN=CFCA EV ROOT
  1118. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xcd4ba8503ebcb700 C=PL, O=Krajowa Izba Rozliczeniowa S.A., CN=SZAFIR ROOT CA2
  1119. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xc7d32b6954e4f000 CN=ComSign CA, O=ComSign, C=IL
  1120. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x61a3a33f81aace00 C=US, ST=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http://www.usertrust.com, CN=UTN-USERFirst-Object
  1121. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x760668e19592ff00 CN=ACEDICOM Root, OU=PKI, O=EDICOM, C=ES
  1122. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x3d993fde1950a700 C=US, O=IdenTrust, CN=IdenTrust Commercial Root CA 1
  1123. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x50bb81640c01cb00 C=TW, O=TAIWAN-CA, OU=Root CA, CN=TWCA Root Certification Authority
  1124. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x6b7bdc34cd37bb00 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G2
  1125. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xaafa7abb99ab000 O=Cisco Systems, CN=Cisco Root CA 2048
  1126. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x57ba5395b561bf00 C=BM, O=QuoVadis Limited, OU=Root Certification Authority, CN=QuoVadis Root Certification Authority
  1127. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xf4fd306318ccda00 C=US, O=GeoTrust Inc., CN=GeoTrust Global CA
  1128. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xbbde687390e6bf00 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Trusted Root G4
  1129. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x5eb09e2012c300 C=TR, O=Elektronik Bilgi Guvenligi A.S., CN=e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi
  1130. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xb798ed29328b700 CN=Autoridad de Certificacion Raiz del Estado Venezolano, C=VE, L=Caracas, ST=Distrito Capital, O=Sistema Nacional de Certificacion Electronica, OU=Superintendencia de Servicios de Certificacion Electronica, Email=acraiz@suscerte.gob.ve
  1131. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x38b3b5303d1acd00 C=GR, O=Athens Exchange S.A., CN=ATHEX Root CA
  1132. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xe35016950adaa500 C=NO, O=Buypass AS-983163327, CN=Buypass Class 3 Root CA
  1133. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x83085097e9afdf00 O=Digital Signature Trust Co., CN=DST Root CA X3
  1134. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x72b9f9f128f2be00 C=DE, O=DATEV eG, CN=CA DATEV BT 01
  1135. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xbedf2fa01f59a400 C=TW, O=Chunghwa Telecom Co., Ltd., CN=ePKI Root Certification Authority - G2
  1136. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xfb700f54a232be00 C=NL, O=Staat der Nederlanden, CN=Staat der Nederlanden Root CA - G3
  1137. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xe248b7eeee4af00 C=CH, O=SwissSign AG, CN=SwissSign Gold CA - G2
  1138. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x41fe5fa9df12c400 C=US, O=AffirmTrust, CN=AffirmTrust Premium
  1139. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x266e9b638ffac00 C=HK, O=Hongkong Post, CN=Hongkong Post Root CA 1
  1140. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xafc0be88bdf2a800 DC=rs, DC=posta, DC=ca, CN=Configuration, CN=Services, CN=Public Key Services, CN=AIA, CN=Posta CA Root
  1141. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x780679907625cc00 OU=GlobalSign Root CA - R3, O=GlobalSign, CN=GlobalSign
  1142. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x3d98ab22bb04a300 C=IE, O=Baltimore, OU=CyberTrust, CN=Baltimore CyberTrust Root
  1143. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x89ba3ef55e2bb900 C=ES, SRN=Q2863006I, O=CONSEJO GENERAL DE LA ABOGACIA, CN=ACA ROOT
  1144. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x3931598f2f47ac00 C=PL, O=Krajowa Izba Rozliczeniowa S.A., CN=SZAFIR ROOT CA
  1145. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x80d5e6f878f9bd00 C=PL, O=Unizeto Technologies S.A., OU=Certum Certification Authority, CN=Certum Trusted Network CA 2
  1146. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xd94cd06e3094b700 C=FR, O=Certplus, CN=Class 3 Primary CA
  1147. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x8dad0bbac2857b96 C=CN, O=WoSign CA Limited, CN=CA WoSign ECC Root
  1148. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xf08242cb8436b500 C=CZ, CN=I.CA - Qualified Certification Authority, 09/2009, O=První certifikační autorita, a.s., OU=I.CA - Accredited Provider of Certification Services
  1149. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xa0ee62086758b15d C=US, O=Equifax, OU=Equifax Secure Certificate Authority
  1150. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xeae16ef49d40be00 C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
  1151. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xc6536f24d57ae723 C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust ECC Certification Authority
  1152. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x9403a4b8727eb000 C=TW, O=TAIWAN-CA, OU=Root CA, CN=TWCA Root Certification Authority
  1153. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x39889aa748eabf00 C=ES, ST=Barcelona, L=Barcelona (see current address at https://www.anf.es/address/), O=ANF Autoridad de Certificación, OU=ANF Clase 1 CA, SRN=G63287510, CN=ANF Server CA
  1154. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x59b08ed7ab919600 C=AT, O=A-Trust Ges. f. Sicherheitssysteme im elektr. Datenverkehr GmbH, OU=A-Trust-Qual-02, CN=A-Trust-Qual-02
  1155. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x94184f8e8643e100 C=CH, O=Swiss Government PKI, OU=www.pki.admin.ch, CN=Swiss Government Root CA III
  1156. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x48cc53a3896bab00 C=CO, O=Sociedad Cameral de Certificación Digital - Certicámara S.A., CN=AC Raíz Certicámara S.A.
  1157. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xd71519e43fd5ba00 C=CA, ST=Ontario, L=Toronto, O=Echoworx Corporation, OU=Certification Services, CN=Echoworx Root CA2
  1158. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xade42733bd8d9700 C=us, O=U.S. Government, OU=FBCA, CN=Common Policy
  1159. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x1c29714b0c909400 C=JP, O=Japan Certification Services, Inc., CN=SecureSign RootCA1
  1160. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xd944bca189a00 C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 2
  1161. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x4bc5e0ecc020c800 C=EE, O=AS Sertifitseerimiskeskus, CN=EE Certification Centre Root CA, Email=pki@sk.ee
  1162. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xca22f040a77fb200 C=LU, O=LuxTrust s.a., CN=LuxTrust Global Root
  1163. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xe0b0c3006b04c400 C=LV, OU=Sertifikacijas pakalpojumu dala, CN=E-ME SSI (RCA)
  1164. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x73c1ebd2e9958f00 C=LT, O=Skaitmeninio sertifikavimo centras, OU=CA ROOT Services, CN=SSC GDL CA Root B
  1165. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x22c0bfed122ca900 C=CH, O=The Federal Authorities of the Swiss Confederation, OU=Services, OU=Certification Authorities, CN=Swiss Government Root CA II
  1166. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xeb9e65e11925a400 C=TR, L=Ankara, O=TÜRKTRUST Bilgi İletişim ve Bilişim Güvenliği Hizmetleri A.Ş., CN=TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H5
  1167. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x96cb178d285f9e36 C=US, ST=Texas, L=Houston, O=SSL Corporation, CN=SSL.com Root Certification Authority ECC
  1168. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xde30f74972c9e300 C=JP, O=SECOM Trust Systems CO.,LTD., CN=Security Communication RootCA3
  1169. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x292d67d00f91f000 C=ES, O=Agencia Notarial de Certificacion S.L. Unipersonal - CIF B83395988, CN=ANCERT Certificados Notariales
  1170. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xa8a0b90e1e0a8700 C=IN, O=India PKI, CN=CCA India 2011
  1171. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xea33d3c14ab5d900 C=DE, ST=Baden-Wuerttemberg (BW), L=Stuttgart, O=Deutscher Sparkassen Verlag GmbH, CN=S-TRUST Authentication and Encryption Root CA 2005:PN
  1172. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xea5386456178582b C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA
  1173. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xaf48a4fc9422b600 C=US, O=IdenTrust, CN=IdenTrust Public Sector Root CA 1
  1174. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x1591b8ac8dcabd00 C=CN, O=WoSign CA Limited, CN=Certification Authority of WoSign
  1175. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x62a22ac26e20a700 C=PA, ST=Panama, L=Panama City, O=TrustCor Systems S. de R.L., OU=TrustCor Certificate Authority, CN=TrustCor RootCert CA-2
  1176. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x6e864c7a8071ba00 C=ES, O=FNMT-RCM, OU=AC RAIZ FNMT-RCM
  1177. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x923c3ab73579a1d0 C=US, O=AffirmTrust, CN=AffirmTrust Premium ECC
  1178. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x842b9c17d3f431bd C=JP, O=SECOM Trust Systems CO.,LTD., CN=Security Communication ECC RootCA1
  1179. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xbab415bd1e249800 C=US, OU=www.xrampsecurity.com, O=XRamp Security Services Inc, CN=XRamp Global Certification Authority
  1180. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xcb7d2ba3dd0ff900 C=US, ST=Texas, L=Houston, O=SSL Corporation, CN=SSL.com Root Certification Authority RSA
  1181. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x85d60900c4a3a200 C=SK, L=Bratislava, O=Disig a.s., CN=CA Disig Root R2
  1182. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x8ff6fc03c1edbd00 C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, Inc., CN=Starfield Root Certificate Authority - G2
  1183. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x8c3756f8425c300 C=US, O=Wells Fargo WellsSecure, OU=Wells Fargo Bank NA, CN=WellsSecure Public Root Certification Authority 01 G2
  1184. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x20a3c30cad008000 C=ES, O=DIRECCION GENERAL DE LA POLICIA, OU=DNIE, CN=AC RAIZ DNIE
  1185. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xc6fa4243b695b600 C=US, O=Entrust, Inc., OU=www.entrust.net/CPS is incorporated by reference, OU=(c) 2006 Entrust, Inc., CN=Entrust Root Certification Authority
  1186. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xb5e231b8cb64a900 C=PL, O=Telekomunikacja Polska S.A., OU=Signet Certification Authority, CN=Signet Root CA
  1187. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xf7c33b7ebfec9b00 C=SI, O=POSTA, OU=POSTArCA
  1188. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xa3ce8d99e60eda00 C=BE, O=GlobalSign nv-sa, OU=Root CA, CN=GlobalSign Root CA
  1189. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xab7df2a48539b200 C=US, ST=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http://www.usertrust.com, CN=UTN-USERFirst-Client Authentication and Email
  1190. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xb3d6d6c9f168c800 C=FR, O=Dhimyotis, CN=Certigna
  1191. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x1be813c97ffb600 C=TW, O=Government Root Certification Authority
  1192. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x560ad29254e89100 C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Certification Authority
  1193. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xfbf8ea8e6b96ca00 C=ES, CN=Autoridad de Certificacion Firmaprofesional CIF A62634068
  1194. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xeb1d2a732928b200 CN=ComSign Global Root CA, O=ComSign Ltd., C=IL
  1195. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xa671e9fec832b700 C=US, O=Starfield Technologies, Inc., OU=Starfield Class 2 Certification Authority
  1196. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xf44cbb0f8c74bc00 C=HU, ST=Hungary, L=Budapest, O=NetLock Halozatbiztonsagi Kft., OU=Tanusitvanykiadok, CN=NetLock Kozjegyzoi (Class A) Tanusitvanykiado
  1197. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x67db7cef8732e500 C=DE, O=DATEV eG, CN=CA DATEV STD 02
  1198. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x6a4c39c4152dd100 C=CZ, CN=I.CA - Standard root certificate, O=Prvni certifikacni autorita a.s.
  1199. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xbf168afe877852f1 C=US, O=thawte, Inc., OU=(c) 2007 thawte, Inc. - For authorized use only, CN=thawte Primary Root CA - G2
  1200. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xdf103d404d3cef00 C=US, O=GeoTrust Inc., CN=GeoTrust Global CA 2
  1201. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xf4d01b04544ed300 C=AU, O=GOV, OU=DoD, OU=PKI, OU=CAs, CN=Australian Defence Public Root CA
  1202. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x40e7dd0ea446ba00 C=BR, O=ICP-Brasil, OU=Instituto Nacional de Tecnologia da Informacao - ITI, CN=Autoridade Certificadora Raiz Brasileira v2
  1203. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xa8de7211e13be200 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root CA
  1204. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xcd5f6a62f176c400 C=CA, O=Carillon Information Security Inc., OU=Certification Authorities, CN=CISRCA1
  1205. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x177a8452aab3d500 C=BE, O=Certipost s.a./n.v., CN=Certipost E-Trust Primary Normalised CA
  1206. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xb00213280709a900 C=CN, O=UniTrust, CN=UCA Extended Validation Root
  1207. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x22ff8abd50c8de00 C=IN, O=India PKI, CN=CCA India 2014
  1208. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x449f1b13efa09400 C=CH, O=SwissSign AG, CN=SwissSign Platinum Root CA - G3
  1209. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x862f01f4720ec800 C=CH, O=The Federal Authorities of the Swiss Confederation, OU=Services, OU=Certification Authorities, CN=Swiss Government Root CA I
  1210. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x363f522f28e7d900 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Root G2
  1211. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xda5f1cc8fc5ca000 C=CZ, O=Česká pošta, s.p. [IČ 47114983], CN=PostSignum Root QCA 2
  1212. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xdff6d845073c8b00 C=NO, O=Buypass AS-983163327, CN=Buypass Class 2 CA 1
  1213. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x2f371157ab2ac600 C=ES, O=Generalitat Valenciana, OU=PKIGVA, CN=Root CA Generalitat Valenciana
  1214. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x6486991131f8e25c C=GR, L=Athens, O=Hellenic Academic and Research Institutions Cert. Authority, CN=Hellenic Academic and Research Institutions ECC RootCA 2015
  1215. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x2fd3fcc75929b700 CN=esignit.org
  1216. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xd41691e475fb8515 C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO ECC Certification Authority
  1217. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x923f2c0a09ccd400 C=FR, O=Certinomis, OU=0002 433998903, CN=Certinomis - Root CA
  1218. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xc48cebc8db05b000 C=TW, O=TAIWAN-CA, OU=Root CA, CN=TWCA Global Root CA
  1219. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xada18517b3fdc600 C=FR, O=KEYNECTIS, OU=ROOT, CN=KEYNECTIS ROOT CA
  1220. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x3178d37f87f1c400 C=CH, O=SwissSign AG, CN=SwissSign Silver CA - G2
  1221. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x76af89b5553faa00 C=CZ, O=První certifikační autorita, a.s., CN=I.CA Root CA/RSA, SRN=NTRCZ-26439395
  1222. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xf4eb5e1975b7c500 C=my, O=TM, OU=TM Applied Business Certification Authority, CN=TM Applied Business Root Certificate
  1223. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x7ae89c50f0b6a00f C=US, O=GTE Corporation, OU=GTE CyberTrust Solutions, Inc., CN=GTE CyberTrust Global Root
  1224. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x87b3c722f299c800 C=LT, O=VI Registru Centras - I.k. 124110246, OU=Registru Centro Sertifikavimo Centras, CN=VI Registru Centras RCSC (RootCA)
  1225. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x2fba703484f19900 C=DE, O=D-Trust GmbH, CN=D-TRUST Root Class 3 CA 2 EV 2009
  1226. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x68dbf810c635b900 C=JP, O=LGPKI, OU=Application CA G2
  1227. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xdd0fb62e707b000 C=TN, CN=Tunisian Root Certificate Authority - TunRootCA2, O=National Digital Certification Agency
  1228. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x94b9196cd23ff000 C=DE, O=DATEV eG, CN=CA DATEV INT 02
  1229. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x974a61bfaba99b00 CN=ACCVRAIZ1, OU=PKIACCV, O=ACCV, C=ES
  1230. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xe991ee72b03db500 C=US, O=Symantec Corporation, CN=Symantec Enterprise Mobile Root for Microsoft
  1231. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x4ef92ac43a0cd500 C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, Inc., CN=Starfield Services Root Certificate Authority - G2
  1232. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xa3b5bc7f5283c500 C=DE, O=DATEV eG, CN=CA DATEV INT 03
  1233. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xd45980fbf0a0ac00 C=US, O=thawte, Inc., OU=Certification Services Division, OU=(c) 2006 thawte, Inc. - For authorized use only, CN=thawte Primary Root CA
  1234. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x52273f34861cc300 C=IT, L=Milano, O=Actalis S.p.A./03358520967, CN=Actalis Authentication CA G1
  1235. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xebbf1d700c008a00 C=US, O=Verizon Business, OU=OmniRoot, CN=Verizon Global Root CA
  1236. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x94fb3f125608a800 C=CZ, CN=I.CA - Standard Certification Authority, 09/2009, O=První certifikační autorita, a.s., OU=I.CA - Provider of Certification Services
  1237. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x5a341635fb75d800 C=US, O=U.S. Government, OU=FPKI, CN=Federal Common Policy CA
  1238. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x4d3835aa4180b200 C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Root Certificate Authority 2011
  1239. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x236696801e5e9900 C=JP, O=Japan Certification Services, Inc., CN=SecureSign RootCA3
  1240. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xb8ca3a6a8df8400 C=US, ST=FL, L=Jacksonville, O=Network Solutions L.L.C., CN=Network Solutions RSA Certificate Authority
  1241. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xa398dcf778c3aa00 C=SK, L=Bratislava, O=Disig a.s., CN=CA Disig Root R1
  1242. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xd578ca718078b200 C=US, O=Amazon, CN=Amazon Root CA 1
  1243. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xef62113787ebace5 C=US, O=GeoTrust Inc., OU=(c) 2007 GeoTrust Inc. - For authorized use only, CN=GeoTrust Primary Certification Authority - G2
  1244. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x7c71e6059b87be00 C=CH, O=SwissSign AG, CN=SwissSign Silver Root CA - G3
  1245. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xc9edb72b684ba00 C=US, O=Entrust, Inc., OU=See www.entrust.net/legal-terms, OU=(c) 2009 Entrust, Inc. - for authorized use only, CN=Entrust Root Certification Authority - G2
  1246. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x6a3ad06184a0ee00 CN=EBG Elektronik Sertifika Hizmet Sağlayıcısı, O=EBG Bilişim Teknolojileri ve Hizmetleri A.Ş., C=TR
  1247. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xad77733ff735d300 C=CN, O=CNNIC, CN=CNNIC ROOT
  1248. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x14bde8d668b09d00 C=TR, L=Ankara, O=TÜRKTRUST Bilgi İletişim ve Bilişim Güvenliği Hizmetleri A.Ş., CN=TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H6
  1249. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xdaad63f38ff8e900 C=HU, L=Budapest, O=Microsec Ltd., CN=Microsec e-Szigno Root CA 2009, Email=info@e-szigno.hu
  1250. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xf5cd95e581a4ab00 C=US, O=SecureTrust Corporation, CN=SecureTrust CA
  1251. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x298be035a30bab00 C=DE, O=Deutsche Telekom AG, OU=T-TeleSec Trust Center, CN=Deutsche Telekom Root CA 2
  1252. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xabd0695c5d11d15e C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority - G2, OU=(c) 1998 VeriSign, Inc. - For authorized use only, OU=VeriSign Trust Network
  1253. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x3b756388ea46ee60 C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 1 Public Primary Certification Authority - G4
  1254. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xbe8f77488550e400 C=AU, O=GOV, OU=DoD, OU=PKI, OU=CAs, CN=ADOCA02
  1255. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x96af0ce22ce4e300 C=SA, O=National Center for Digital Certification, OU=Saudi National Root CA
  1256. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x7d2686ca075db300 C=CN, O=UniTrust, CN=UCA Root
  1257. fec.c30: supR3HardenedWinIsDesiredRootCA: skipping - not-self-signed: C=TW, O=Chunghwa Telecom Co., Ltd., CN=ePKI EV SSL Certification Authority - G1
  1258. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x4cb4bfc9ee1ed659 C=US, ST=FL, L=Jacksonville, O=Network Solutions L.L.C., CN=Network Solutions ECC Certificate Authority
  1259. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x5784013b5c9c9d00 CN=ComSign Advanced Security CA
  1260. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xf966ca73e8079500 OU=GlobalSign Root CA - R6, O=GlobalSign, CN=GlobalSign
  1261. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x5c39bb51bbe0b400 C=DE, O=TC TrustCenter GmbH, OU=TC TrustCenter Class 3 CA, CN=TC TrustCenter Class 3 CA II
  1262. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x80932303749f217 C=SI, O=Halcom, CN=Halcom CA PO 2
  1263. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x8b7607cf260bd500 C=si, O=state-institutions, OU=sigov-ca
  1264. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x8f874e74e06da700 C=JP, O=Japanese Government, OU=ApplicationCA
  1265. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x23f085ee57b2b400 C=ES, O=Consejo General de la Abogacia NIF:Q-2863006I, CN=Autoridad de Certificacion de la Abogacia
  1266. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x831827e970529d00 C=ES, O=Agencia Notarial de Certificacion S.L.U. - CIF B83395988, CN=ANCERT Certificados CGN V2
  1267. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x5534b165029017e7 C=US, O=Equifax Secure Inc., CN=Equifax Secure Global eBusiness CA-1
  1268. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xbebef0d2217f0bfb C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G3
  1269. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x81a1442a1fc49700 CN=Autoridad Certificadora Raíz Nacional de Uruguay, O=AGESIC, C=UY
  1270. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x30c596da4679f800 C=FR, O=OpenTrust, CN=OpenTrust Root CA G1
  1271. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x109433a557b6cc00 C=FR, O=OpenTrust, CN=OpenTrust Root CA G2
  1272. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x802b3770cb00af00 C=EU, L=Madrid (see current address at www.camerfirma.com/address), SRN=A82743287, O=AC Camerfirma S.A., CN=Chambers of Commerce Root - 2008
  1273. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xe6519d844e429500 C=ch, O=Swisscom, OU=Digital Certificate Services, CN=Swisscom Root CA 2
  1274. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x4b24f9897ec7e300 C=NL, O=Staat der Nederlanden, CN=Staat der Nederlanden EV Root CA
  1275. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xc9b005046ffea100 C=KR, O=Government of Korea, OU=GPKI, CN=GPKIRootCA1
  1276. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x6f2ebe0e24cfa600 OU=GlobalSign Root CA - R2, O=GlobalSign, CN=GlobalSign
  1277. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x4f681b69a21eba00 C=SE, O=Swedish Social Insurance Agency, CN=Swedish Government Root Authority v3
  1278. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xa09adb78d220ae00 C=BE, O=Certipost s.a./n.v., CN=Certipost E-Trust Primary Qualified CA
  1279. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x14018a1bf29e595c C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority
  1280. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x35f812d09650dc00 C=FR, O=Certplus, CN=Class 2 Primary CA
  1281. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xc66d30927ebce400 C=US, O=Network Solutions L.L.C., CN=Network Solutions Certificate Authority
  1282. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xce3493bee81cce00 C=BR, O=ICP-Brasil, OU=Instituto Nacional de Tecnologia da Informacao - ITI, CN=Autoridade Certificadora Raiz Brasileira v1
  1283. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xa16e1e56de57af00 C=US, O=VISA, OU=Visa International Service Association, CN=Visa eCommerce Root
  1284. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x2a6a1dc6b9e6b200 C=ES, O=Agencia Notarial de Certificacion S.L.U. - CIF B83395988, CN=ANCERT Certificados Notariales V2
  1285. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x2296d1f73e45cd00 C=JP, O=LGPKI, CN=Application CA G3 Root
  1286. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x185da5e55536b700 C=EU, O=AC Camerfirma SA CIF A82743287, OU=http://www.chambersign.org, CN=Chambers of Commerce Root
  1287. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x18e0fc11a33a06de C=FR, O=OpenTrust, CN=OpenTrust Root CA G3
  1288. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xec1f8292427bc400 C=DE, O=D-Trust GmbH, CN=D-TRUST Root CA 3 2013
  1289. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x2ca999312534d200 C=CH, O=admin, OU=Services, OU=Certification Authorities, CN=AdminCA-CD-T01
  1290. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x25debfb1cdcddc00 CN=AC1 RAIZ MTIN, SRN=S2819001E, OU=PRESTADOR DE SERVICIOS DE CERTIFICACION MTIN, OU=SUBDIRECCION GENERAL DE PROCESO DE DATOS, O=MINISTERIO DE TRABAJO E INMIGRACION, L=MADRID, C=ES
  1291. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xaec72ec8296bc300 C=FR, O=Certplus, CN=Class 1 Primary CA
  1292. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xa4031c19392e9f0e OU=GlobalSign ECC Root CA - R4, O=GlobalSign, CN=GlobalSign
  1293. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x88db8dee0f25e100 C=TW, O=Chunghwa Telecom Co., Ltd., OU=ePKI Root Certification Authority
  1294. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xfaccd3ef7cba514a C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 2 Public Primary Certification Authority - G4
  1295. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x9af18ce44abad600 C=TH, O=Electronic Transactions Development Agency (Public Organization), OU=Thailand National Root Certification Authority, CN=Thailand National Root Certification Authority - G1
  1296. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xf274f0a48808ab00 C=CZ, CN=I.CA - Qualified root certificate, O=První certifikační autorita, a.s.
  1297. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x9e5bc2d78b6a3636 C=ZA, ST=Western Cape, L=Cape Town, O=Thawte Consulting cc, OU=Certification Services Division, CN=Thawte Premium Server CA, Email=premium-server@thawte.com
  1298. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x7c4fd32ec1b1ce00 C=PL, O=Unizeto Sp. z o.o., CN=Certum CA
  1299. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xdb2cd5c20d0aaf00 C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 1999 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 2 Public Primary Certification Authority - G3
  1300. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x33c562d0d11fb200 C=FR, ST=France, L=Paris, O=PM/SGDN, OU=DCSSI, CN=IGC/A, Email=igca@sgdn.pm.gouv.fr
  1301. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xd4fbe673e5ccc600 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance EV Root CA
  1302. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x665014bdbcc8f800 O=Cybertrust, Inc, CN=Cybertrust Global Root
  1303. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xb352b1523915d000 C=JP, O=SECOM Trust Systems CO.,LTD., OU=Security Communication RootCA2
  1304. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xbbd90ca8b0b9d000 C=ch, O=Swisscom, OU=Digital Certificate Services, CN=Swisscom Root CA 1
  1305. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x16e64d2a56ccf200 C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, Inc., OU=http://certificates.starfieldtech.com/repository/, CN=Starfield Services Root Certificate Authority
  1306. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x5153f7daa1499900 C=DK, O=TRUST2408, CN=TRUST2408 OCES Primary CA
  1307. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x328ccb712f3ec700 C=ES, ST=Barcelona, L=Barcelona (see current address at http://www.anf.es/es/address-direccion.html ), O=ANF Autoridad de Certificacion, OU=ANF Clase 1 CA, Email=info@anf.es, SRN=G63287510, CN=ANF Global Root CA
  1308. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x4c4a9c2d9f96ad00 C=US, O=Amazon, CN=Amazon Root CA 2
  1309. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x19c084be4feaba00 C=LT, O=Skaitmeninio sertifikavimo centras, OU=Certification Authority, CN=SSC Root CA A
  1310. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x92d01fe10011c900 C=US, O=VISA, OU=Visa International Service Association, CN=Visa Information Delivery Root CA
  1311. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x3eaa756fe759c500 C=NL, O=Staat der Nederlanden, CN=Staat der Nederlanden Root CA - G2
  1312. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x363d9b00b34fcb00 C=CH, O=WISeKey, OU=Copyright (c) 2005, OU=OISTE Foundation Endorsed, CN=OISTE WISeKey Global Root GA CA
  1313. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x73e85f1bda5faa00 C=DE, O=T-Systems Enterprise Services GmbH, OU=T-Systems Trust Center, CN=T-TeleSec GlobalRoot Class 2
  1314. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xef477acf4ab2d300 C=DE, O=D-Trust GmbH, CN=D-TRUST Root Class 3 CA 2 2009
  1315. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xc672382f6ee021a1 C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Public Primary Certification Authority - G4
  1316. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xa89fb511e08fcf00 C=PA, ST=Panama, L=Panama City, O=TrustCor Systems S. de R.L., OU=TrustCor Certificate Authority, CN=TrustCor ECA-1
  1317. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xa8aca89ee6edc000 C=SE, O=Inera AB, CN=SITHS Root CA v1
  1318. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xf8dae202a2dfca00 C=CH, O=SwissSign AG, CN=SwissSign Platinum CA - G2
  1319. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x7637cbb5cf9ce200 C=SG, O=Netrust Certificate Authority 1, OU=Netrust CA1
  1320. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x6f2262f09375bd00 C=DE, O=T-Systems Enterprise Services GmbH, OU=T-Systems Trust Center, CN=T-TeleSec GlobalRoot Class 3
  1321. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xc77449e8ca80db00 CN=CAEDICOM Root, O=EDICOM, C=ES
  1322. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x48cc53a3896bab00 C=CO, O=Sociedad Cameral de Certificación Digital - Certicámara S.A., CN=AC Raíz Certicámara S.A.
  1323. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x75f4feca85b98900 C=SI, O=Halcom, CN=Halcom Root CA
  1324. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xfe74e9a1fda3c000 C=DE, O=DATEV eG, CN=CA DATEV INT 01
  1325. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x1e5105933ff5e200 C=TR, L=Ankara, O=E-TuÄŸra EBG BiliÅŸim Teknolojileri ve Hizmetleri A.Åž., OU=E-Tugra Sertifikasyon Merkezi, CN=E-Tugra Certification Authority
  1326. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x99a96449d739c700 C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 1 Public Primary Certification Authority - G6
  1327. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x1b8578514b74ac00 C=US, O=WFA Hotspot 2.0, CN=Hotspot 2.0 Trust Root CA - 03
  1328. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xb28612a94b4dad00 O=Entrust.net, OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.), OU=(c) 1999 Entrust.net Limited, CN=Entrust.net Certification Authority (2048)
  1329. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x783bbdee737e9b00 C=CN, O=China Internet Network Information Center, CN=China Internet Network Information Center EV Certificates Root
  1330. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x1df079f7add61a45 C=FR, O=Certplus, CN=Certplus Root CA G2
  1331. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x357a29080824af00 C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G5
  1332. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xf14e20830740c3ef C=US, ST=Texas, L=Houston, O=SSL Corporation, CN=SSL.com EV Root Certification Authority ECC
  1333. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x90f3036e613dad00 C=AT, O=A-Trust Ges. f. Sicherheitssysteme im elektr. Datenverkehr GmbH, OU=A-Trust-nQual-03, CN=A-Trust-nQual-03
  1334. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x615eae439978de00 C=US, ST=MN, L=Minneapolis, O=Open Access Technology International Inc, CN=OATI WebCARES Root CA
  1335. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x9b3ae4d356dfc000 C=EU, L=Madrid (see current address at www.camerfirma.com/address), SRN=A82743287, O=AC Camerfirma S.A., CN=Global Chambersign Root - 2008
  1336. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x69785d02da6eb500 C=ES, O=IZENPE S.A. - CIF A-01337260-RMerc.Vitoria-Gasteiz T1055 F62 S8, L=Avda del Mediterraneo Etorbidea 3 - 01010 Vitoria-Gasteiz, CN=Izenpe.com, Email=Info@izenpe.com
  1337. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xf8491584e4cdb300 C=DE, O=D-Trust GmbH, CN=D-TRUST Root Class 2 CA 2007
  1338. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xd407c1f75ec7d700 C=NO, O=Buypass AS-983163327, CN=Buypass Class 2 Root CA
  1339. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xea8e67100ecbb300 C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 3 G3
  1340. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x59faf1086271bf00 C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., CN=Go Daddy Root Certificate Authority - G2
  1341. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xbb6e19f43fdcce00 C=PT, O=MULTICERT - Serviços de Certificação Electrónica S.A., CN=MULTICERT Root Certification Authority 01
  1342. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xfe3e3d933619ad3f C=ES, O=FNMT, OU=FNMT Clase 2 CA
  1343. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xe05fe608c95b000 C=IL, O=PersonalID Ltd., OU=Certificate Services, CN=PersonalID Trustworthy RootCA 2011
  1344. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xa321f027ebbec200 O=TeliaSonera, CN=TeliaSonera Root CA v1
  1345. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xcfd21c88249eb300 C=AT, O=A-Trust Ges. f. Sicherheitssysteme im elektr. Datenverkehr GmbH, OU=A-Trust-Qual-03, CN=A-Trust-Qual-03
  1346. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x8563c805e9cccd00 C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 2 Public Primary Certification Authority - G6
  1347. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xd607333e36718100 Email=pki@sk.ee, C=EE, O=AS Sertifitseerimiskeskus, CN=Juur-SK
  1348. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xdc94c92cf53db900 C=US, O=Digital Signature Trust, OU=DST ACES, CN=DST ACES CA X6
  1349. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x6f9e73172e12ed00 C=GR, O=BYTE Computer S.A., CN=BYTE Root Certification Authority 001
  1350. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x4e5147f555f3c100 C=LT, O=Skaitmeninio sertifikavimo centras, OU=Certification Authority, CN=SSC Root CA B
  1351. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x64acc0b265e5b000 C=si, O=state-institutions, OU=sigen-ca
  1352. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x466cbc09db88c100 C=IL, O=StartCom Ltd., OU=Secure Digital Certificate Signing, CN=StartCom Certification Authority
  1353. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x91a085eefe26df00 C=DE, O=DATEV eG, CN=CA DATEV BT 03
  1354. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x41373d8936d79700 C=IN, O=India PKI, CN=CCA India 2015 SPL
  1355. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x5901ca5aa77fd00 C=JP, O=Japan Certification Services, Inc., CN=SecureSign RootCA11
  1356. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xd0353b9e7b50c500 C=GB, O=Trustis Limited, OU=Trustis FPS Root CA
  1357. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x30e0c22d9ccbd300 C=SI, O=Republika Slovenija
  1358. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x556cacd82e35af00 C=US, O=SecureTrust Corporation, CN=Secure Global CA
  1359. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x99f15213ef3bc100 CN=Autoridad de Certificacion Raiz del Estado Venezolano, C=VE, L=Caracas, ST=Distrito Capital, O=Sistema Nacional de Certificacion Electronica, OU=Superintendencia de Servicios de Certificacion Electronica, Email=acraiz@suscerte.gob.ve
  1360. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xe4dba5da41bbe600 C=DE, O=DATEV eG, CN=CA DATEV BT 02
  1361. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x30669a4e82fa800 C=US, O=America Online Inc., CN=America Online Root Certification Authority 1
  1362. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xa9c86e43a2efdb00 C=PT, O=SCEE, CN=ECRaizEstado
  1363. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xfbf6bc071a78ca00 C=ZA, ST=Western Cape, L=Somerset West, O=South African Post Office Limited, OU=SAPO Trust Centre, CN=SAPO Class 3 Root CA, Email=pkiadmin@trustcentre.co.za
  1364. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xf0ca9d354a179000 C=FI, O=Sonera, CN=Sonera Class2 CA
  1365. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xf23ec9c15254b300 C=US, O=GeoTrust Inc., CN=GeoTrust Universal CA 2
  1366. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xb16dd37ffeb3b300 C=JP, O=SECOM Trust.net, OU=Security Communication RootCA1
  1367. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x3401b15e3761c700 C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2008 VeriSign, Inc. - For authorized use only, CN=VeriSign Universal Root Certification Authority
  1368. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x7052e7f4a064c100 L=Alvaro Obregon, ST=Distrito Federal, C=MX, ZIP=01030, street=Insurgentes Sur 1940, CN=Autoridad Certificadora Raiz de la Secretaria de Economia, OU=Direccion General de Normatividad Mercantil, O=Secretaria de Economia, Email=acrse@economia.gob.mx
  1369. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xe8985fec4712d200 C=AT, L=Vienna, ST=Austria, O=ARGE DATEN - Austrian Society for Data Protection, OU=GLOBALTRUST Certification Service, CN=GLOBALTRUST, Email=info@globaltrust.info
  1370. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xae429fd0a270a200 C=EU, O=AC Camerfirma SA CIF A82743287, OU=http://www.chambersign.org, CN=Global Chambersign Root
  1371. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x1e150ab191dca400 C=ZA, O=LAWtrust, OU=LAW Trusted Third Party Services PTY Ltd., CN=LAWtrust Root Certification Authority 2048
  1372. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x4542bc43b5aec800 C=SE, O=Swedish Social Insurance Agency, CN=Swedish Government Root Authority v2
  1373. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x7cd4ff7b15b8be00 C=US, O=GeoTrust Inc., CN=GeoTrust Primary Certification Authority
  1374. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x20b7075b3689b600 C=IL, O=StartCom Ltd., CN=StartCom Certification Authority G2
  1375. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x6bbbaa333075af00 C=TR, L=Gebze - Kocaeli, O=Turkiye Bilimsel ve Teknolojik Arastirma Kurumu - TUBITAK, OU=Kamu Sertifikasyon Merkezi - Kamu SM, CN=TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1
  1376. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x84c6fbdb8408e200 C=MY, O=Digicert Sdn. Bhd., CN=PosDigicert Class 2 Root CA G2
  1377. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xac1e0fca7ad3c900 C=ES, O=IZENPE S.A., CN=Izenpe.com
  1378. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x67a526528cfbe400 C=AT, O=A-Trust Ges. f. Sicherheitssysteme im elektr. Datenverkehr GmbH, OU=A-Trust-Root-05, CN=A-Trust-Root-05
  1379. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xafe3d3869f859d00 C=FR, O=Certinomis, OU=0002 433998903, CN=Certinomis - Autorité Racine
  1380. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x99add4a1a4c6ea00 C=ES, ST=MADRID, L=MADRID, OU=see current address at www.camerfirma.com/address, OU=CHAMBERS OF COMMERCE ROOT - 2016, SRN=A82743287
  1381. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xb1591a653918cd00 C=FR, O=Dhimyotis, OU=0002 48146308100036, CN=Certigna Root CA
  1382. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x9cd30a7b3142db00 C=US, O=Cisco Systems, CN=Cisco RXC-R2
  1383. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x3b2a6f973b859500 CN=Atos TrustedRoot 2011, O=Atos, C=DE
  1384. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xc30e361765128000 C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
  1385. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xfd887dc131f69200 C=SK, L=Bratislava, O=Disig a.s., CN=CA Disig
  1386. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x6b2e1733cc84b400 C=US, O=AffirmTrust, CN=AffirmTrust Networking
  1387. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x26ef7c6f2be6c500 C=CN, O=UniTrust, CN=UCA Global G2 Root
  1388. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x4297e24fc722b300 C=ES, O=Agencia Catalana de Certificacio (NIF Q-0801176-I), OU=Serveis Publics de Certificacio, OU=Vegeu https://www.catcert.net/verarrel (c)03, OU=Jerarquia Entitats de Certificacio Catalanes, CN=EC-ACC
  1389. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x16921f393194ce00 C=DE, O=DATEV eG, CN=CA DATEV STD 03
  1390. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x491857ead79dde00 C=US, O=The Go Daddy Group, Inc., OU=Go Daddy Class 2 Certification Authority
  1391. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x9abc4dfab20eb700 C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Public Primary Certification Authority - G6
  1392. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xfe221444afe0cb00 C=ch, O=admin, OU=Services, OU=Certification Authorities, CN=Admin-Root-CA
  1393. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xdd80d271558fb700 O=RSA Security Inc, OU=RSA Security 2048 V3
  1394. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xab549401526569d3 L=Internet, O=VeriSign, Inc., OU=VeriSign Commercial Software Publishers CA
  1395. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xa9cc8cfa2245a100 C=LT, O=Skaitmeninio sertifikavimo centras, OU=Certification Authority, CN=SSC Root CA C
  1396. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xe66b56ffc86e50a4 C=ZA, ST=Western Cape, L=Cape Town, O=Thawte Consulting cc, OU=Certification Services Division, CN=Thawte Server CA, Email=server-certs@thawte.com
  1397. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xcd7b81d500c8ed00 C=HU, L=Budapest, O=Microsec Ltd., OU=e-Szigno CA, CN=Microsec e-Szigno Root CA
  1398. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xa9b8dab68750da00 C=FR, O=Certplus, CN=Certplus Root CA G1
  1399. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x92ac5ed85c2d0e9b C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2007 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G4
  1400. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x58a68ce5c7abaf00 C=JP, O=LGPKI, CN=Application CA G4 Root
  1401. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x419b60ebff37ab00 C=FR, O=Certplus, CN=Class 3P Primary CA
  1402. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xb8ce920e1b50ac00 C=ES, O=Colegio de Registradores de la Propiedad y Mercantiles de España, OU=Certificado Propio, CN=Registradores de España - CA Raíz
  1403. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x665f55ebd06ce27b C=US, O=Entrust, Inc., OU=See www.entrust.net/legal-terms, OU=(c) 2012 Entrust, Inc. - for authorized use only, CN=Entrust Root Certification Authority - EC1
  1404. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xa3a09a48eddcdb00 C=ZA, ST=Western Cape, L=Somerset West, O=South African Post Office Limited, OU=SAPO Trust Centre, CN=SAPO Class 4 Root CA, Email=pkiadmin@trustcentre.co.za
  1405. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xa7f9b4b9d484dd00 C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 1999 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 1 Public Primary Certification Authority - G3
  1406. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xe69c54164257cc00 C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 3
  1407. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x5c382892b952ad00 C=CA, O=Notarius Inc, CN=Notarius Root Certificate Authority
  1408. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xb9ff821d139e9bf OU=GlobalSign ECC Root CA - R5, O=GlobalSign, CN=GlobalSign
  1409. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xe99811bf9785d700 C=LU, O=LuxTrust S.A., CN=LuxTrust Global Root 2
  1410. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xfcf6f137c37c600 C=US, ST=Texas, L=Houston, O=SSL Corporation, CN=SSL.com EV Root Certification Authority RSA
  1411. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xf2e98e1050bea000 C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 1 G3
  1412. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x3a8810ff4b6d8a00 C=TR, L=Gebze - Kocaeli, O=Türkiye Bilimsel ve Teknolojik Araştırma Kurumu - TÜBİTAK, OU=Ulusal Elektronik ve Kriptoloji Araştırma Enstitüsü - UEKAE, OU=Kamu Sertifikasyon Merkezi, CN=TÜBİTAK UEKAE Kök Sertifika Hizmet Sağlayıcısı - Sürüm 3
  1413. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x853711df0be3a800 C=DE, O=Deutscher Sparkassen Verlag GmbH, OU=S-TRUST Certification Services, CN=S-TRUST Universal Root CA
  1414. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x9830119f287caa00 C=FR, O=ANSSI, OU=0002 130007669, CN=IGC/A AC racine Etat francais
  1415. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x7f2bd4d15bd9c500 C=SE, O=Carelink, CN=SITHS CA v3
  1416. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x87fc251e2149d000 C=CN, O=WoSign CA Limited, CN=CA 沃通根证书
  1417. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xfa20c4eccee39700 C=DE, O=DATEV eG, CN=CA DATEV STD 01
  1418. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x1f78fc529cbacb00 C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 1999 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G3
  1419. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xd5f715744f1cca00 C=SE, O=Swedish Social Insurance Agency, CN=Swedish Government Root Authority v1
  1420. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xcaac0c3f3f759000 C=ES, O=Agencia Notarial de Certificacion S.L. Unipersonal - CIF B83395988, CN=ANCERT Certificados CGN
  1421. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x532b229ee76bd000 C=ES, ST=MADRID, L=MADRID, OU=see current address at www.camerfirma.com/address, OU=GLOBAL CHAMBERSIGN ROOT - 2016, SRN=A82743287×-
  1422. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x817a1151b5d29800 C=NL, O=Staat der Nederlanden, CN=Staat der Nederlanden Root CA
  1423. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x2a244a1cb717d800 C=CH, O=WISeKey, OU=OISTE Foundation Endorsed, CN=OISTE WISeKey Global Root GB CA
  1424. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x7474c8f016a3d900 C=CN, O=GUANG DONG CERTIFICATE AUTHORITY CO.,LTD., CN=GDCA TrustAUTH R5 ROOT
  1425. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xf2c6561b01e89b0d C=US, O=Amazon, CN=Amazon Root CA 3
  1426. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xeb8adc879521a200 C=ES, O=Agencia Notarial de Certificacion S.L. Unipersonal - CIF B83395988, CN=ANCERT Corporaciones de Derecho Publico
  1427. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xf63f5006e5b3da00 C=CN, O=UniTrust, CN=UCA Global Root
  1428. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x9d5a65c89fe8c300 C=CH, O=SwissSign AG, CN=SwissSign Gold Root CA - G3
  1429. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xdc1801b225aea100 C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 2 G3
  1430. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x2f5561fdf9b89b00 C=LV, O=VAS Latvijas Pasts - Vien.reg.Nr.40003052790, OU=Sertifikacijas pakalpojumi, CN=VAS Latvijas Pasts SSI(RCA)
  1431. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xc2ba72a37dfbe300 C=PL, O=Unizeto Technologies S.A., OU=Certum Certification Authority, CN=Certum Trusted Network CA
  1432. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x5dcc74a787f8b600 C=MO, O=Macao Post, CN=Macao Post eSignTrust Root Certification Authority (G02)
  1433. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x6d4bbe735e24c400 C=HU, L=Budapest, O=NetLock Kft., OU=Tanúsítványkiadók (Certification Services), CN=NetLock Arany (Class Gold) Főtanúsítvány
  1434. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x8043e4ce150ead00 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Root CA
  1435. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xf1fbd6404bd4a500 C=BE, O=Certipost s.a./n.v., CN=Certipost E-Trust TOP Root CA
  1436. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xa8b43f38c3f7b100 C=US, ST=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http://www.usertrust.com, CN=UTN-USERFirst-Hardware
  1437. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x407c0c3d7576bf00 C=SI, O=ACNLB
  1438. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x9de5960126a3bc00 C=SI, O=Halcom, CN=Halcom CA FO
  1439. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0x331d58625ee2dc00 C=US, O=GeoTrust Inc., OU=(c) 2008 GeoTrust Inc. - For authorized use only, CN=GeoTrust Primary Certification Authority - G3
  1440. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xf2e6331af7b700 C=SE, O=AddTrust AB, OU=AddTrust External TTP Network, CN=AddTrust External CA Root
  1441. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xf03913fae404bc00 C=KR, O=KISA, OU=Korea Certification Authority Central, CN=KISA RootCA 1
  1442. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xd43dd8b22552c700 C=HU, L=Budapest, O=NetLock Halozatbiztonsagi Kft., OU=Tanusitvanykiadok, CN=NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado, Email=info@netlock.hu
  1443. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xfc891b3fa9f8c200 C=GR, L=Athens, O=Hellenic Academic and Research Institutions Cert. Authority, CN=Hellenic Academic and Research Institutions RootCA 2015
  1444. fec.c30: supR3HardenedWinIsDesiredRootCA: Adding 0xdf603f23927b9600 C=JP, O=Japan Certification Services, Inc., CN=SecureSign RootCA2
  1445. fec.c30: supR3HardenedWinRetrieveTrustedRootCAs: cAdded=363
  1446. fec.c30: SUPR3HardenedMain: Load Runtime...
  1447. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
  1448. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
  1449. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ws2_32.dll'.
  1450. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'rpcrt4.dll'.
  1451. fec.c30: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll) WinVerifyTrust
  1452. fec.c30: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll
  1453. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  1454. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  1455. fec.c30: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll
  1456. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
  1457. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
  1458. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hFile=000000000000039c pwszName=\Device\HarddiskVolume2\Windows\System32\ws2_32.dll
  1459. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000029ffb00
  1460. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000029ffb00
  1461. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=901DCB8172024F14E25295BF5692180F12FC8C18
  1462. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB3161949~31bf3856ad364e35~amd64~~6.1.1.0.cat'; file='\Device\HarddiskVolume2\Windows\System32\ws2_32.dll'
  1463. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1464. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1465. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #16 'rpcrt4.dll'.
  1466. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #17 'nsi.dll'.
  1467. fec.c30: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\ws2_32.dll) WinVerifyTrust
  1468. fec.c30: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\ws2_32.dll
  1469. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
  1470. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
  1471. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
  1472. fec.c30: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll) WinVerifyTrust
  1473. fec.c30: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll
  1474. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
  1475. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
  1476. fec.c30: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll) WinVerifyTrust
  1477. fec.c30: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll
  1478. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
  1479. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
  1480. fec.c30: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll
  1481. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'nsi.dll'...
  1482. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'nsi.dll' -> '\Device\HarddiskVolume2\Windows\System32\nsi.dll' [rcNtRedir=0xc0150008]
  1483. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000424 pwszName=\Device\HarddiskVolume2\Windows\System32\nsi.dll
  1484. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000029ffb00
  1485. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000029ffb00
  1486. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=5C61E0233B4D23762E0FE158DE0FDC6C24988F13
  1487. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_500_for_KB4048957~31bf3856ad364e35~amd64~~6.1.1.2.cat'; file='\Device\HarddiskVolume2\Windows\System32\nsi.dll'
  1488. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1489. fec.c30: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\nsi.dll) WinVerifyTrust
  1490. fec.c30: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\nsi.dll
  1491. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  1492. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  1493. fec.c30: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll
  1494. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1495. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1496. fec.c30: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll
  1497. fec.c30: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000002dc471:<flags> [calling]
  1498. fec.c30: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll
  1499. fec.c30: supR3HardenedDllNotificationCallback: load 000007fee0010000 LB 0x00590000 C:\Program Files\Oracle\VirtualBox\VBoxRT.dll [fFlags=0x0]
  1500. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll
  1501. fec.c30: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll
  1502. fec.c30: supR3HardenedDllNotificationCallback: load 0000000065b80000 LB 0x000d2000 C:\Program Files\Oracle\VirtualBox\MSVCR100.dll [fFlags=0x0]
  1503. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll
  1504. fec.c30: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll
  1505. fec.c30: supR3HardenedDllNotificationCallback: load 0000000065ae0000 LB 0x00098000 C:\Program Files\Oracle\VirtualBox\MSVCP100.dll [fFlags=0x0]
  1506. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll
  1507. fec.c30: supR3HardenedDllNotificationCallback: load 000007feff120000 LB 0x0004d000 C:\Windows\system32\WS2_32.dll [fFlags=0x0]
  1508. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ws2_32.dll
  1509. fec.c30: supR3HardenedDllNotificationCallback: load 000007fefd280000 LB 0x00008000 C:\Windows\system32\NSI.dll [fFlags=0x0]
  1510. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\nsi.dll
  1511. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll
  1512. fec.c30: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000002d9bb1:<flags> [calling]
  1513. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee0010000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1514. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll
  1515. fec.c30: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000002d9bb1:<flags> [calling]
  1516. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee0010000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1517. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll
  1518. fec.c30: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000002d9bb1:<flags> [calling]
  1519. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee0010000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1520. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll
  1521. fec.c30: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000002d9bb1:<flags> [calling]
  1522. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee0010000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1523. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll
  1524. fec.c30: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000002d9bb1:<flags> [calling]
  1525. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee0010000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1526. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll
  1527. fec.c30: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000002d9bb1:<flags> [calling]
  1528. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee0010000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1529. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee0010000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1530. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee0010000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1531. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee0010000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1532. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee0010000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1533. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee0010000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1534. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee0010000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1535. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee0010000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1536. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll
  1537. fec.c30: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000002d9bb1:<flags> [calling]
  1538. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee0010000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1539. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee0010000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1540. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee0010000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1541. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee0010000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1542. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee0010000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1543. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee0010000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1544. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee0010000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1545. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee0010000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1546. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee0010000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1547. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee0010000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1548. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee0010000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1549. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee0010000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1550. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee0010000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1551. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee0010000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1552. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee0010000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1553. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee0010000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1554. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll
  1555. fec.c30: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000002d9bb1:<flags> [calling]
  1556. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee0010000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1557. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee0010000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1558. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee0010000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1559. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee0010000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1560. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wintrust.dll
  1561. fec.c30: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\Wintrust.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000002ddfd1:<flags> [calling]
  1562. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefce00000 'C:\Windows\system32\Wintrust.dll'
  1563. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\crypt32.dll
  1564. fec.c30: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\crypt32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000002dcb21:<flags> [calling]
  1565. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefcc10000 'C:\Windows\system32\crypt32.dll'
  1566. fec.c30: SUPR3HardenedMain: Load TrustedMain...
  1567. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'opengl32.dll'.
  1568. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
  1569. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'msvcp100.dll'.
  1570. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcr100.dll'.
  1571. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'.
  1572. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'qt5guivbox.dll'.
  1573. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'qt5widgetsvbox.dll'.
  1574. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'qt5printsupportvbox.dll'.
  1575. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'qt5openglvbox.dll'.
  1576. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'user32.dll'.
  1577. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'advapi32.dll'.
  1578. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'shell32.dll'.
  1579. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'ole32.dll'.
  1580. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'oleaut32.dll'.
  1581. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #15 'winmm.dll'.
  1582. fec.c30: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.dll) WinVerifyTrust
  1583. fec.c30: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.dll
  1584. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
  1585. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume2\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
  1586. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hFile=000000000000046c pwszName=\Device\HarddiskVolume2\Windows\System32\winmm.dll
  1587. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000029ffb00
  1588. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000029ffb00
  1589. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=82E2B2A7826F88BEB98FFF0540C9BDB0A12F001A
  1590. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntpe.cat'; file='\Device\HarddiskVolume2\Windows\System32\winmm.dll'
  1591. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1592. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'.
  1593. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
  1594. fec.c30: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\winmm.dll) WinVerifyTrust
  1595. fec.c30: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\winmm.dll
  1596. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
  1597. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume2\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
  1598. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000470 pwszName=\Device\HarddiskVolume2\Windows\System32\oleaut32.dll
  1599. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000029ffb00
  1600. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000029ffb00
  1601. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=6E76105B511B0668122629A2554FAFBBE17CD6DF
  1602. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_500_for_KB4048957~31bf3856ad364e35~amd64~~6.1.1.2.cat'; file='\Device\HarddiskVolume2\Windows\System32\oleaut32.dll'
  1603. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1604. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'ole32.dll'.
  1605. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'.
  1606. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'rpcrt4.dll'.
  1607. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'user32.dll'.
  1608. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'gdi32.dll'.
  1609. fec.c30: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\oleaut32.dll) WinVerifyTrust
  1610. fec.c30: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\oleaut32.dll
  1611. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
  1612. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
  1613. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hFile=000000000000047c pwszName=\Device\HarddiskVolume2\Windows\System32\ole32.dll
  1614. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000029ffb00
  1615. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000029ffb00
  1616. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=9DDF928A79649EE6EF62D5AAEDE2609045F68737
  1617. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_500_for_KB4048957~31bf3856ad364e35~amd64~~6.1.1.2.cat'; file='\Device\HarddiskVolume2\Windows\System32\ole32.dll'
  1618. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1619. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1620. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'gdi32.dll'.
  1621. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #25 'user32.dll'.
  1622. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'rpcrt4.dll'.
  1623. fec.c30: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\ole32.dll) WinVerifyTrust
  1624. fec.c30: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\ole32.dll
  1625. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
  1626. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume2\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
  1627. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000464 pwszName=\Device\HarddiskVolume2\Windows\System32\shell32.dll
  1628. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000029ffb00
  1629. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000029ffb00
  1630. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=66792BA817E2D5077D918A98F547AEB0248EE258
  1631. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_500_for_KB4048957~31bf3856ad364e35~amd64~~6.1.1.2.cat'; file='\Device\HarddiskVolume2\Windows\System32\shell32.dll'
  1632. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1633. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1634. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #21 'shlwapi.dll'.
  1635. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #23 'user32.dll'.
  1636. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #24 'gdi32.dll'.
  1637. fec.c30: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\shell32.dll) WinVerifyTrust
  1638. fec.c30: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\shell32.dll
  1639. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
  1640. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
  1641. fec.c30: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll
  1642. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  1643. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  1644. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5openglvbox.dll'...
  1645. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5openglvbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5openglvbox.dll' [rcNtRedir=0xc0150008]
  1646. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'qt5widgetsvbox.dll'.
  1647. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'qt5guivbox.dll'.
  1648. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5corevbox.dll'.
  1649. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcr100.dll'.
  1650. fec.c30: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll) WinVerifyTrust
  1651. fec.c30: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll
  1652. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5printsupportvbox.dll'...
  1653. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5printsupportvbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5printsupportvbox.dll' [rcNtRedir=0xc0150008]
  1654. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
  1655. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
  1656. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5widgetsvbox.dll'.
  1657. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5guivbox.dll'.
  1658. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'.
  1659. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'winspool.drv'.
  1660. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'comdlg32.dll'.
  1661. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcr100.dll'.
  1662. fec.c30: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll) WinVerifyTrust
  1663. fec.c30: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll
  1664. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
  1665. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
  1666. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
  1667. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
  1668. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5guivbox.dll'.
  1669. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5corevbox.dll'.
  1670. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'shell32.dll'.
  1671. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
  1672. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
  1673. fec.c30: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll) WinVerifyTrust
  1674. fec.c30: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll
  1675. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
  1676. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
  1677. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'ole32.dll'.
  1678. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'opengl32.dll'.
  1679. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
  1680. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
  1681. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'.
  1682. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
  1683. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
  1684. fec.c30: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll) WinVerifyTrust
  1685. fec.c30: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
  1686. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
  1687. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
  1688. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
  1689. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'shell32.dll'.
  1690. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ole32.dll'.
  1691. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'advapi32.dll'.
  1692. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ws2_32.dll'.
  1693. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'mpr.dll'.
  1694. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcp100.dll'.
  1695. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'msvcr100.dll'.
  1696. fec.c30: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll) WinVerifyTrust
  1697. fec.c30: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
  1698. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
  1699. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
  1700. fec.c30: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll
  1701. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
  1702. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
  1703. fec.c30: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll
  1704. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
  1705. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
  1706. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
  1707. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume2\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
  1708. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000480 pwszName=\Device\HarddiskVolume2\Windows\System32\opengl32.dll
  1709. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000029ffb00
  1710. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000029ffb00
  1711. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=608AC397FCC42B9FBAE25CB8C25EAF4C19AA384D
  1712. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\nt5.cat'; file='\Device\HarddiskVolume2\Windows\System32\opengl32.dll'
  1713. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1714. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1715. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'advapi32.dll'.
  1716. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'gdi32.dll'.
  1717. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'glu32.dll'.
  1718. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'ddraw.dll'.
  1719. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'user32.dll'.
  1720. fec.c30: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\opengl32.dll) WinVerifyTrust
  1721. fec.c30: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\opengl32.dll
  1722. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  1723. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  1724. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ddraw.dll'...
  1725. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'ddraw.dll' -> '\Device\HarddiskVolume2\Windows\System32\ddraw.dll' [rcNtRedir=0xc0150008]
  1726. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000004a4 pwszName=\Device\HarddiskVolume2\Windows\System32\ddraw.dll
  1727. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000029ffb00
  1728. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000029ffb00
  1729. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=24C763EA54CD792A0F1618411061DC356EE31FF6
  1730. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\nt5.cat'; file='\Device\HarddiskVolume2\Windows\System32\ddraw.dll'
  1731. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1732. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1733. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
  1734. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'dciman32.dll'.
  1735. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'gdi32.dll'.
  1736. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'setupapi.dll'.
  1737. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'dwmapi.dll'.
  1738. fec.c30: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\ddraw.dll) WinVerifyTrust
  1739. fec.c30: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\ddraw.dll
  1740. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'glu32.dll'...
  1741. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'glu32.dll' -> '\Device\HarddiskVolume2\Windows\System32\glu32.dll' [rcNtRedir=0xc0150008]
  1742. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000004b0 pwszName=\Device\HarddiskVolume2\Windows\System32\glu32.dll
  1743. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000029ffb00
  1744. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000029ffb00
  1745. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=60E45AB914E06A11F44EA76C6EF750AF892F9EA2
  1746. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\nt5.cat'; file='\Device\HarddiskVolume2\Windows\System32\glu32.dll'
  1747. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1748. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1749. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'opengl32.dll'.
  1750. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
  1751. fec.c30: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\glu32.dll) WinVerifyTrust
  1752. fec.c30: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\glu32.dll
  1753. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  1754. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  1755. fec.c30: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll
  1756. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
  1757. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
  1758. fec.c30: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll
  1759. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1760. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1761. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
  1762. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
  1763. fec.c30: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll
  1764. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
  1765. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
  1766. fec.c30: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll
  1767. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mpr.dll'...
  1768. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'mpr.dll' -> '\Device\HarddiskVolume2\Windows\System32\mpr.dll' [rcNtRedir=0xc0150008]
  1769. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000494 pwszName=\Device\HarddiskVolume2\Windows\System32\mpr.dll
  1770. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000029ffb00
  1771. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000029ffb00
  1772. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=F84FE9BA047B24E7694C9E0C349B48B9FD5F925B
  1773. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntpe.cat'; file='\Device\HarddiskVolume2\Windows\System32\mpr.dll'
  1774. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1775. fec.c30: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\mpr.dll) WinVerifyTrust
  1776. fec.c30: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\mpr.dll
  1777. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
  1778. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
  1779. fec.c30: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ws2_32.dll
  1780. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
  1781. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
  1782. fec.c30: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll
  1783. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
  1784. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
  1785. fec.c30: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ole32.dll
  1786. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
  1787. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume2\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
  1788. fec.c30: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\shell32.dll
  1789. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  1790. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  1791. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
  1792. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
  1793. fec.c30: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll
  1794. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
  1795. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
  1796. fec.c30: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll
  1797. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
  1798. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
  1799. fec.c30: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
  1800. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  1801. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  1802. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  1803. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  1804. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
  1805. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume2\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
  1806. fec.c30: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\opengl32.dll
  1807. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
  1808. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
  1809. fec.c30: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ole32.dll
  1810. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
  1811. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
  1812. fec.c30: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll
  1813. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
  1814. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
  1815. fec.c30: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll
  1816. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
  1817. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume2\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
  1818. fec.c30: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\shell32.dll
  1819. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
  1820. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
  1821. fec.c30: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
  1822. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
  1823. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
  1824. fec.c30: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
  1825. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  1826. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  1827. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  1828. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  1829. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
  1830. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
  1831. fec.c30: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll
  1832. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'comdlg32.dll'...
  1833. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'comdlg32.dll' -> '\Device\HarddiskVolume2\Windows\System32\comdlg32.dll' [rcNtRedir=0xc0150008]
  1834. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000004b8 pwszName=\Device\HarddiskVolume2\Windows\System32\comdlg32.dll
  1835. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000029ffb00
  1836. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000029ffb00
  1837. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=66EE5BDFFA413AEA9E1FE7838A08646E94136DA5
  1838. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume2\Windows\System32\comdlg32.dll'
  1839. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1840. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1841. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'shlwapi.dll'.
  1842. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
  1843. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'gdi32.dll'.
  1844. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'comctl32.dll'.
  1845. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'shell32.dll'.
  1846. fec.c30: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\comdlg32.dll) WinVerifyTrust
  1847. fec.c30: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\comdlg32.dll
  1848. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winspool.drv'...
  1849. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'winspool.drv' -> '\Device\HarddiskVolume2\Windows\System32\winspool.drv' [rcNtRedir=0xc0150008]
  1850. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000004c0 pwszName=\Device\HarddiskVolume2\Windows\System32\winspool.drv
  1851. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000029ffb00
  1852. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000029ffb00
  1853. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=C89A2ED7B99A056D78CA6BAC9CCAB8B1FF119A14
  1854. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume2\Windows\System32\winspool.drv'
  1855. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1856. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1857. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'gdi32.dll'.
  1858. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'user32.dll'.
  1859. fec.c30: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\winspool.drv) WinVerifyTrust
  1860. fec.c30: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\winspool.drv
  1861. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
  1862. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
  1863. fec.c30: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
  1864. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
  1865. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
  1866. fec.c30: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
  1867. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
  1868. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
  1869. fec.c30: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll
  1870. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  1871. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  1872. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  1873. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  1874. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
  1875. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
  1876. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
  1877. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
  1878. fec.c30: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
  1879. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
  1880. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
  1881. fec.c30: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
  1882. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
  1883. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
  1884. fec.c30: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll
  1885. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  1886. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  1887. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  1888. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  1889. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shlwapi.dll'...
  1890. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'shlwapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\shlwapi.dll' [rcNtRedir=0xc0150008]
  1891. fec.c30: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\shlwapi.dll
  1892. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1893. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1894. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  1895. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  1896. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  1897. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  1898. fec.c30: supR3HardenedScreenImage/Imports: cache hit (Unknown Status -22900 (0xffffa68c)) on \Device\HarddiskVolume2\Windows\System32\user32.dll
  1899. fec.c30: Error (rc=0):
  1900. fec.c30: supR3HardenedScreenImage/Imports: cached rc=Unknown Status -22900 (0xffffa68c) fImage=1 fProtect=0x0 fAccess=0x0 cHits=16 \Device\HarddiskVolume2\Windows\System32\user32.dll
  1901. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  1902. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  1903. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1904. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1905. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  1906. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  1907. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  1908. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  1909. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  1910. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  1911. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1912. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1913. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
  1914. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
  1915. fec.c30: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ole32.dll
  1916. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  1917. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  1918. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1919. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1920. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  1921. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  1922. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  1923. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  1924. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1925. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1926. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
  1927. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume2\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
  1928. fec.c30: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\shell32.dll
  1929. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'comctl32.dll'...
  1930. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'comctl32.dll' -> '\Device\HarddiskVolume2\Windows\System32\comctl32.dll' [rcNtRedir=0x0]
  1931. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hFile=000000000000048c pwszName=\Device\HarddiskVolume2\Windows\System32\comctl32.dll
  1932. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000029ffb00
  1933. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000029ffb00
  1934. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=761964761EE466757E306124E042F4C2ACBEA092
  1935. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB3059317~31bf3856ad364e35~amd64~~6.1.1.0.cat'; file='\Device\HarddiskVolume2\Windows\System32\comctl32.dll'
  1936. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1937. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'advapi32.dll'.
  1938. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
  1939. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
  1940. fec.c30: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\comctl32.dll) WinVerifyTrust
  1941. fec.c30: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\comctl32.dll
  1942. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  1943. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  1944. fec.c30: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll
  1945. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  1946. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  1947. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shlwapi.dll'...
  1948. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'shlwapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\shlwapi.dll' [rcNtRedir=0xc0150008]
  1949. fec.c30: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\shlwapi.dll
  1950. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1951. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1952. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  1953. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  1954. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
  1955. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume2\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
  1956. fec.c30: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\opengl32.dll
  1957. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1958. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1959. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dwmapi.dll'...
  1960. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'dwmapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\dwmapi.dll' [rcNtRedir=0xc0150008]
  1961. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000004d4 pwszName=\Device\HarddiskVolume2\Windows\System32\dwmapi.dll
  1962. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000029ffb00
  1963. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000029ffb00
  1964. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=F3F3D4867E9140896E0742D7EE8AE1D01FE85ECE
  1965. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB3078667~31bf3856ad364e35~amd64~~6.1.1.0.cat'; file='\Device\HarddiskVolume2\Windows\System32\dwmapi.dll'
  1966. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1967. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1968. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
  1969. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
  1970. fec.c30: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\dwmapi.dll) WinVerifyTrust
  1971. fec.c30: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\dwmapi.dll
  1972. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'setupapi.dll'...
  1973. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'setupapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\setupapi.dll' [rcNtRedir=0xc0150008]
  1974. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hFile=000000000000049c pwszName=\Device\HarddiskVolume2\Windows\System32\setupapi.dll
  1975. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000029ffb00
  1976. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000029ffb00
  1977. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=1499C4FEA6E143F9BEC35B4FFA098917D3A6EBF2
  1978. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume2\Windows\System32\setupapi.dll'
  1979. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1980. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'cfgmgr32.dll'.
  1981. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'msvcrt.dll'.
  1982. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'gdi32.dll'.
  1983. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'rpcrt4.dll'.
  1984. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'user32.dll'.
  1985. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'oleaut32.dll'.
  1986. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'devobj.dll'.
  1987. fec.c30: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\setupapi.dll) WinVerifyTrust
  1988. fec.c30: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\setupapi.dll
  1989. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  1990. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  1991. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dciman32.dll'...
  1992. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'dciman32.dll' -> '\Device\HarddiskVolume2\Windows\System32\dciman32.dll' [rcNtRedir=0xc0150008]
  1993. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000004d0 pwszName=\Device\HarddiskVolume2\Windows\System32\dciman32.dll
  1994. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000029ffb00
  1995. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000029ffb00
  1996. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=E39FA2354AB36177BAF7DADD59E614FF3B70029B
  1997. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_500_for_KB4048957~31bf3856ad364e35~amd64~~6.1.1.2.cat'; file='\Device\HarddiskVolume2\Windows\System32\dciman32.dll'
  1998. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1999. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  2000. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'gdi32.dll'.
  2001. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
  2002. fec.c30: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\dciman32.dll) WinVerifyTrust
  2003. fec.c30: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\dciman32.dll
  2004. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  2005. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  2006. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  2007. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  2008. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  2009. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  2010. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  2011. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  2012. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  2013. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  2014. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'devobj.dll'...
  2015. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'devobj.dll' -> '\Device\HarddiskVolume2\Windows\System32\devobj.dll' [rcNtRedir=0xc0150008]
  2016. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000004e4 pwszName=\Device\HarddiskVolume2\Windows\System32\devobj.dll
  2017. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000029ffb00
  2018. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000029ffb00
  2019. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=B410A095222E69F0ECE7D66E4AC27A7125D2EB5A
  2020. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume2\Windows\System32\devobj.dll'
  2021. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  2022. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  2023. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'cfgmgr32.dll'.
  2024. fec.c30: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\devobj.dll) WinVerifyTrust
  2025. fec.c30: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\devobj.dll
  2026. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
  2027. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume2\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
  2028. fec.c30: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\oleaut32.dll
  2029. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  2030. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  2031. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  2032. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  2033. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  2034. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  2035. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  2036. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  2037. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'cfgmgr32.dll'...
  2038. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'cfgmgr32.dll' -> '\Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll' [rcNtRedir=0xc0150008]
  2039. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000004f0 pwszName=\Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll
  2040. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000029ffb00
  2041. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000029ffb00
  2042. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=8F731777EFC4BC982C1E1467FBF29A74CC14D93A
  2043. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll'
  2044. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  2045. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  2046. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'rpcrt4.dll'.
  2047. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'advapi32.dll'.
  2048. fec.c30: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll) WinVerifyTrust
  2049. fec.c30: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll
  2050. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  2051. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  2052. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  2053. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  2054. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  2055. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  2056. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  2057. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  2058. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  2059. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  2060. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
  2061. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
  2062. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
  2063. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
  2064. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  2065. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  2066. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  2067. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  2068. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'cfgmgr32.dll'...
  2069. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'cfgmgr32.dll' -> '\Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll' [rcNtRedir=0xc0150008]
  2070. fec.c30: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll
  2071. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  2072. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  2073. fec.c30: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VirtualBox.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000002dc481:<flags> [calling]
  2074. fec.c30: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.dll
  2075. fec.c30: supR3HardenedDllNotificationCallback: load 000007fedbc60000 LB 0x00a33000 C:\Program Files\Oracle\VirtualBox\VirtualBox.dll [fFlags=0x0]
  2076. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.dll
  2077. fec.c30: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\opengl32.dll
  2078. fec.c30: supR3HardenedDllNotificationCallback: load 000007fedfef0000 LB 0x0011d000 C:\Windows\system32\OPENGL32.dll [fFlags=0x0]
  2079. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\opengl32.dll
  2080. fec.c30: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\glu32.dll
  2081. fec.c30: supR3HardenedDllNotificationCallback: load 000007fedfec0000 LB 0x0002d000 C:\Windows\system32\GLU32.dll [fFlags=0x0]
  2082. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\glu32.dll
  2083. fec.c30: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ddraw.dll
  2084. fec.c30: supR3HardenedDllNotificationCallback: load 000007fedfdc0000 LB 0x000f1000 C:\Windows\system32\DDRAW.dll [fFlags=0x0]
  2085. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ddraw.dll
  2086. fec.c30: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\dciman32.dll
  2087. fec.c30: supR3HardenedDllNotificationCallback: load 000007fee1880000 LB 0x00008000 C:\Windows\system32\DCIMAN32.dll [fFlags=0x0]
  2088. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\dciman32.dll
  2089. fec.c30: supR3HardenedDllNotificationCallback: load 000007fefd0a0000 LB 0x001d7000 C:\Windows\system32\SETUPAPI.dll [fFlags=0x0]
  2090. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\setupapi.dll
  2091. fec.c30: supR3HardenedDllNotificationCallback: load 000007fefcd80000 LB 0x00036000 C:\Windows\system32\CFGMGR32.dll [fFlags=0x0]
  2092. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll
  2093. fec.c30: supR3HardenedDllNotificationCallback: load 000007fefe820000 LB 0x000da000 C:\Windows\system32\OLEAUT32.dll [fFlags=0x0]
  2094. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\oleaut32.dll
  2095. fec.c30: supR3HardenedDllNotificationCallback: load 000007fefec50000 LB 0x001fc000 C:\Windows\system32\ole32.dll [fFlags=0x0]
  2096. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ole32.dll
  2097. fec.c30: supR3HardenedDllNotificationCallback: load 000007fefce40000 LB 0x0001a000 C:\Windows\system32\DEVOBJ.dll [fFlags=0x0]
  2098. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\devobj.dll
  2099. fec.c30: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\dwmapi.dll
  2100. fec.c30: supR3HardenedDllNotificationCallback: load 000007fefa830000 LB 0x00018000 C:\Windows\system32\dwmapi.dll [fFlags=0x0]
  2101. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\dwmapi.dll
  2102. fec.c30: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
  2103. fec.c30: supR3HardenedDllNotificationCallback: load 0000000064cf0000 LB 0x00565000 C:\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [fFlags=0x0]
  2104. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
  2105. fec.c30: supR3HardenedDllNotificationCallback: load 000007fefd4c0000 LB 0x00d8a000 C:\Windows\system32\SHELL32.dll [fFlags=0x0]
  2106. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\shell32.dll
  2107. fec.c30: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\mpr.dll
  2108. fec.c30: supR3HardenedDllNotificationCallback: load 000007fef86d0000 LB 0x00018000 C:\Windows\system32\MPR.dll [fFlags=0x0]
  2109. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\mpr.dll
  2110. fec.c30: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
  2111. fec.c30: supR3HardenedDllNotificationCallback: load 000007feddaa0000 LB 0x005f7000 C:\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [fFlags=0x0]
  2112. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
  2113. fec.c30: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll
  2114. fec.c30: supR3HardenedDllNotificationCallback: load 0000000064780000 LB 0x00561000 C:\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [fFlags=0x0]
  2115. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll
  2116. fec.c30: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll
  2117. fec.c30: supR3HardenedDllNotificationCallback: load 000007fedfd60000 LB 0x00051000 C:\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll [fFlags=0x0]
  2118. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll
  2119. fec.c30: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winspool.drv
  2120. fec.c30: supR3HardenedDllNotificationCallback: load 000007fefa5d0000 LB 0x00071000 C:\Windows\system32\WINSPOOL.DRV [fFlags=0x0]
  2121. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winspool.drv
  2122. fec.c30: supR3HardenedDllNotificationCallback: load 000007fefd290000 LB 0x00097000 C:\Windows\system32\COMDLG32.dll [fFlags=0x0]
  2123. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\comdlg32.dll
  2124. fec.c30: \Device\HarddiskVolume2\Windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.18837_none_a4d981ff711297b6\comctl32.dll: Owner is administrators group.
  2125. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'advapi32.dll'.
  2126. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
  2127. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
  2128. fec.c30: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.18837_none_a4d981ff711297b6\comctl32.dll)
  2129. fec.c30: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.18837_none_a4d981ff711297b6\comctl32.dll
  2130. fec.c30: supR3HardenedDllNotificationCallback: load 000007fef8fb0000 LB 0x000a0000 C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.18837_none_a4d981ff711297b6\COMCTL32.dll [fFlags=0x0]
  2131. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.18837_none_a4d981ff711297b6\comctl32.dll [avoiding WinVerifyTrust]
  2132. fec.c30: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll
  2133. fec.c30: supR3HardenedDllNotificationCallback: load 0000000065a80000 LB 0x00054000 C:\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll [fFlags=0x0]
  2134. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll
  2135. fec.c30: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winmm.dll
  2136. fec.c30: supR3HardenedDllNotificationCallback: load 000007fefad10000 LB 0x0003b000 C:\Windows\system32\WINMM.dll [fFlags=0x0]
  2137. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winmm.dll
  2138. fec.c30: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume2\Windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.18837_none_a4d981ff711297b6\comctl32.dll'.
  2139. fec.c30: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.18837_none_a4d981ff711297b6\comctl32.dll' [rescheduled]
  2140. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\imm32.dll
  2141. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  2142. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  2143. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  2144. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  2145. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
  2146. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
  2147. fec.c30: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\imm32.dll (Input=imm32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000002dba51:<flags> [calling]
  2148. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefe3d0000 'C:\Windows\system32\imm32.dll'
  2149. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefe2f0000 'C:\Windows\system32\ADVAPI32.DLL'
  2150. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\cryptbase.dll
  2151. fec.c30: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\cryptbase.dll (Input=cryptbase.dll, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000000000:<flags> [calling]
  2152. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefc9f0000 'C:\Windows\system32\cryptbase.dll'
  2153. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fedbc60000 'C:\Program Files\Oracle\VirtualBox\VirtualBox.dll'
  2154. fec.c30: SUPR3HardenedMain: Calling TrustedMain (000007fedbc614f0)...
  2155. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ole32.dll
  2156. fec.c30: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\ole32.dll (Input=ole32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000002ddd31:<flags> [calling]
  2157. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefec50000 'C:\Windows\system32\ole32.dll'
  2158. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefe2f0000 'C:\Windows\system32\ADVAPI32.dll'
  2159. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\profapi.dll
  2160. fec.c30: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\profapi.dll (Input=profapi.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000002dc411:<flags> [calling]
  2161. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefcb60000 'C:\Windows\system32\profapi.dll'
  2162. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
  2163. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'ole32.dll'.
  2164. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
  2165. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'imm32.dll'.
  2166. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'winmm.dll'.
  2167. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'oleaut32.dll'.
  2168. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'shell32.dll'.
  2169. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'advapi32.dll'.
  2170. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'qt5guivbox.dll'.
  2171. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'qt5corevbox.dll'.
  2172. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'msvcr100.dll'.
  2173. fec.c30: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\platforms\qwindows.dll) WinVerifyTrust
  2174. fec.c30: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\platforms\qwindows.dll
  2175. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
  2176. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
  2177. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
  2178. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
  2179. fec.c30: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
  2180. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
  2181. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
  2182. fec.c30: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
  2183. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
  2184. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
  2185. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
  2186. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume2\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
  2187. fec.c30: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\shell32.dll
  2188. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
  2189. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume2\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
  2190. fec.c30: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\oleaut32.dll
  2191. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
  2192. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume2\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
  2193. fec.c30: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winmm.dll
  2194. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'...
  2195. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume2\Windows\System32\imm32.dll' [rcNtRedir=0xc0150008]
  2196. fec.c30: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\imm32.dll
  2197. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  2198. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  2199. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
  2200. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
  2201. fec.c30: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ole32.dll
  2202. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  2203. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  2204. fec.c30: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000002de701:<flags> [calling]
  2205. fec.c30: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\platforms\qwindows.dll
  2206. fec.c30: supR3HardenedDllNotificationCallback: load 000007fedfc30000 LB 0x0012e000 C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll [fFlags=0x0]
  2207. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\platforms\qwindows.dll
  2208. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fedfc30000 'C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll'
  2209. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\cryptbase.dll
  2210. fec.c30: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\CRYPTBASE.dll (Input=CRYPTBASE.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000002de631:<flags> [calling]
  2211. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefc9f0000 'C:\Windows\system32\CRYPTBASE.dll'
  2212. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000584 pwszName=\Device\HarddiskVolume2\Windows\System32\uxtheme.dll
  2213. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000029ffb00
  2214. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000029ffb00
  2215. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=936D45CC7026757A151F62882B557DD75D5FCB21
  2216. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntpe.cat'; file='\Device\HarddiskVolume2\Windows\System32\uxtheme.dll'
  2217. fec.c30: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  2218. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  2219. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'user32.dll'.
  2220. fec.c30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'gdi32.dll'.
  2221. fec.c30: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\uxtheme.dll) WinVerifyTrust
  2222. fec.c30: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\uxtheme.dll
  2223. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  2224. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  2225. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  2226. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  2227. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  2228. fec.c30: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  2229. fec.c30: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000002de101:<flags> [calling]
  2230. fec.c30: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\uxtheme.dll
  2231. fec.c30: supR3HardenedDllNotificationCallback: load 000007fefac60000 LB 0x00056000 C:\Windows\system32\uxtheme.dll [fFlags=0x0]
  2232. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\uxtheme.dll
  2233. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefac60000 'C:\Windows\system32\uxtheme.dll'
  2234. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\uxtheme.dll
  2235. fec.c30: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000002ddb41:<flags> [calling]
  2236. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefac60000 'C:\Windows\system32\uxtheme.dll'
  2237. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\uxtheme.dll
  2238. fec.c30: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000002dd8b1:<flags> [calling]
  2239. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefac60000 'C:\Windows\system32\uxtheme.dll'
  2240. fec.c30: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\uxtheme.dll
  2241. fec.c30: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000002dd8b1:<flags> [calling]
  2242. fec.c30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefac60000 'C:\Windows\system32\uxtheme.dll'
  2243. e88.e34: supR3HardNtChildWaitFor[2]: Quitting: ExitCode=0x1 (rcNtWait=0x0, rcNt1=0x0, rcNt2=0x103, rcNt3=0x103, 3697 ms, the end);
  2244. e28.e30: supR3HardNtChildWaitFor[1]: Quitting: ExitCode=0x1 (rcNtWait=0x0, rcNt1=0x0, rcNt2=0x103, rcNt3=0x103, 4057 ms, the end);
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!