API tools faq
paste
Advertisement
Guest User

VM Ошибка

a guest
Jul 6th, 2017
629
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 288.39 KB | None | 0 0
raw download clone embed print report
  1. 15dc.1be0: Log file opened: 5.1.22r115126 g_hStartupLog=0000000000000014 g_uNtVerCombined=0x611db110
  2. 15dc.1be0: \SystemRoot\System32\ntdll.dll:
  3. 15dc.1be0: CreationTime: 2010-11-21T03:23:51.351694200Z
  4. 15dc.1be0: LastWriteTime: 2010-11-21T03:23:51.367294200Z
  5. 15dc.1be0: ChangeTime: 2014-07-14T07:39:55.310004000Z
  6. 15dc.1be0: FileAttributes: 0x20
  7. 15dc.1be0: Size: 0x1a6d60
  8. 15dc.1be0: NT Headers: 0xe0
  9. 15dc.1be0: Timestamp: 0x4ce7c8f9
  10. 15dc.1be0: Machine: 0x8664 - amd64
  11. 15dc.1be0: Timestamp: 0x4ce7c8f9
  12. 15dc.1be0: Image Version: 6.1
  13. 15dc.1be0: SizeOfImage: 0x1a9000 (1740800)
  14. 15dc.1be0: Resource Dir: 0x151000 LB 0x560d8
  15. 15dc.1be0: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
  16. 15dc.1be0: [Raw version resource data: 0x1510f0 LB 0x380, codepage 0x0 (reserved 0x0)]
  17. 15dc.1be0: ProductName: MicrosoftВ® WindowsВ® Operating System
  18. 15dc.1be0: ProductVersion: 6.1.7601.17514
  19. 15dc.1be0: FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850)
  20. 15dc.1be0: FileDescription: NT Layer DLL
  21. 15dc.1be0: \SystemRoot\System32\kernel32.dll:
  22. 15dc.1be0: CreationTime: 2014-06-18T18:38:22.485350000Z
  23. 15dc.1be0: LastWriteTime: 2014-03-04T09:44:00.336000000Z
  24. 15dc.1be0: ChangeTime: 2014-07-14T07:40:02.459004000Z
  25. 15dc.1be0: FileAttributes: 0x20
  26. 15dc.1be0: Size: 0x11c000
  27. 15dc.1be0: NT Headers: 0xe8
  28. 15dc.1be0: Timestamp: 0x5315a059
  29. 15dc.1be0: Machine: 0x8664 - amd64
  30. 15dc.1be0: Timestamp: 0x5315a059
  31. 15dc.1be0: Image Version: 6.1
  32. 15dc.1be0: SizeOfImage: 0x11f000 (1175552)
  33. 15dc.1be0: Resource Dir: 0x116000 LB 0x528
  34. 15dc.1be0: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
  35. 15dc.1be0: [Raw version resource data: 0x1160b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
  36. 15dc.1be0: ProductName: MicrosoftВ® WindowsВ® Operating System
  37. 15dc.1be0: ProductVersion: 6.1.7601.18409
  38. 15dc.1be0: FileVersion: 6.1.7601.18409 (win7sp1_gdr.140303-2144)
  39. 15dc.1be0: FileDescription: Windows NT BASE API Client DLL
  40. 15dc.1be0: \SystemRoot\System32\KernelBase.dll:
  41. 15dc.1be0: CreationTime: 2014-06-18T18:46:48.572550000Z
  42. 15dc.1be0: LastWriteTime: 2014-03-04T09:44:00.336000000Z
  43. 15dc.1be0: ChangeTime: 2014-07-14T07:40:02.609004000Z
  44. 15dc.1be0: FileAttributes: 0x20
  45. 15dc.1be0: Size: 0x67c00
  46. 15dc.1be0: NT Headers: 0xe8
  47. 15dc.1be0: Timestamp: 0x5315a05a
  48. 15dc.1be0: Machine: 0x8664 - amd64
  49. 15dc.1be0: Timestamp: 0x5315a05a
  50. 15dc.1be0: Image Version: 6.1
  51. 15dc.1be0: SizeOfImage: 0x6c000 (442368)
  52. 15dc.1be0: Resource Dir: 0x6a000 LB 0x530
  53. 15dc.1be0: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
  54. 15dc.1be0: [Raw version resource data: 0x6a0b0 LB 0x3ac, codepage 0x0 (reserved 0x0)]
  55. 15dc.1be0: ProductName: MicrosoftВ® WindowsВ® Operating System
  56. 15dc.1be0: ProductVersion: 6.1.7601.18409
  57. 15dc.1be0: FileVersion: 6.1.7601.18409 (win7sp1_gdr.140303-2144)
  58. 15dc.1be0: FileDescription: Windows NT BASE API Client DLL
  59. 15dc.1be0: \SystemRoot\System32\apisetschema.dll:
  60. 15dc.1be0: CreationTime: 2014-06-18T18:47:46.432950000Z
  61. 15dc.1be0: LastWriteTime: 2013-08-02T02:12:20.275000000Z
  62. 15dc.1be0: ChangeTime: 2014-06-21T07:29:09.202000000Z
  63. 15dc.1be0: FileAttributes: 0x20
  64. 15dc.1be0: Size: 0x1a00
  65. 15dc.1be0: NT Headers: 0xc0
  66. 15dc.1be0: Timestamp: 0x51fb15ca
  67. 15dc.1be0: Machine: 0x8664 - amd64
  68. 15dc.1be0: Timestamp: 0x51fb15ca
  69. 15dc.1be0: Image Version: 6.1
  70. 15dc.1be0: SizeOfImage: 0x50000 (327680)
  71. 15dc.1be0: Resource Dir: 0x30000 LB 0x3f8
  72. 15dc.1be0: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
  73. 15dc.1be0: [Raw version resource data: 0x30060 LB 0x398, codepage 0x0 (reserved 0x0)]
  74. 15dc.1be0: ProductName: MicrosoftВ® WindowsВ® Operating System
  75. 15dc.1be0: ProductVersion: 6.1.7601.18229
  76. 15dc.1be0: FileVersion: 6.1.7601.18229 (win7sp1_gdr.130801-1533)
  77. 15dc.1be0: FileDescription: ApiSet Schema DLL
  78. 15dc.1be0: Found driver avgtdia (0x100)
  79. 15dc.1be0: supR3HardenedWinFindAdversaries: 0x180
  80. 15dc.1be0: \SystemRoot\System32\drivers\MBAMSwissArmy.sys:
  81. 15dc.1be0: CreationTime: 2014-08-20T06:31:59.539800000Z
  82. 15dc.1be0: LastWriteTime: 2016-02-27T15:17:50.365400000Z
  83. 15dc.1be0: ChangeTime: 2016-02-27T15:17:50.365400000Z
  84. 15dc.1be0: FileAttributes: 0x20
  85. 15dc.1be0: Size: 0x2eed8
  86. 15dc.1be0: NT Headers: 0xe0
  87. 15dc.1be0: Timestamp: 0x55b855d9
  88. 15dc.1be0: Machine: 0x8664 - amd64
  89. 15dc.1be0: Timestamp: 0x55b855d9
  90. 15dc.1be0: Image Version: 6.1
  91. 15dc.1be0: SizeOfImage: 0x33000 (208896)
  92. 15dc.1be0: Resource Dir: 0x31000 LB 0x3b8
  93. 15dc.1be0: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
  94. 15dc.1be0: [Raw version resource data: 0x31060 LB 0x354, codepage 0x0 (reserved 0x0)]
  95. 15dc.1be0: ProductName: Malwarebytes Anti-Malware
  96. 15dc.1be0: ProductVersion: 0.3.0.0
  97. 15dc.1be0: FileVersion: 0.3.0.0
  98. 15dc.1be0: FileDescription: Malwarebytes Anti-Malware
  99. 15dc.1be0: \SystemRoot\System32\drivers\mwac.sys:
  100. 15dc.1be0: CreationTime: 2014-08-20T06:31:33.124800000Z
  101. 15dc.1be0: LastWriteTime: 2015-10-05T06:50:18.000000000Z
  102. 15dc.1be0: ChangeTime: 2016-01-30T17:11:27.683800000Z
  103. 15dc.1be0: FileAttributes: 0x20
  104. 15dc.1be0: Size: 0xf8d8
  105. 15dc.1be0: NT Headers: 0xf8
  106. 15dc.1be0: Timestamp: 0x53a0f42a
  107. 15dc.1be0: Machine: 0x8664 - amd64
  108. 15dc.1be0: Timestamp: 0x53a0f42a
  109. 15dc.1be0: Image Version: 6.2
  110. 15dc.1be0: SizeOfImage: 0x12000 (73728)
  111. 15dc.1be0: Resource Dir: 0x10000 LB 0x3e0
  112. 15dc.1be0: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
  113. 15dc.1be0: [Raw version resource data: 0x10060 LB 0x37c, codepage 0x0 (reserved 0x0)]
  114. 15dc.1be0: ProductName: Malwarebytes Web Access Control
  115. 15dc.1be0: ProductVersion: 1.0.6.0
  116. 15dc.1be0: FileVersion: 1.0.6.0
  117. 15dc.1be0: FileDescription: Malwarebytes Web Access Control
  118. 15dc.1be0: \SystemRoot\System32\drivers\mbamchameleon.sys:
  119. 15dc.1be0: CreationTime: 2014-08-20T06:31:33.135800000Z
  120. 15dc.1be0: LastWriteTime: 2015-10-05T06:50:10.000000000Z
  121. 15dc.1be0: ChangeTime: 2016-01-30T17:11:27.699800000Z
  122. 15dc.1be0: FileAttributes: 0x20
  123. 15dc.1be0: Size: 0x1aad8
  124. 15dc.1be0: NT Headers: 0xd8
  125. 15dc.1be0: Timestamp: 0x55c103c3
  126. 15dc.1be0: Machine: 0x8664 - amd64
  127. 15dc.1be0: Timestamp: 0x55c103c3
  128. 15dc.1be0: Image Version: 6.1
  129. 15dc.1be0: SizeOfImage: 0x1e000 (122880)
  130. 15dc.1be0: Resource Dir: 0x1c000 LB 0xba8
  131. 15dc.1be0: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
  132. 15dc.1be0: [Raw version resource data: 0x1c830 LB 0x378, codepage 0x0 (reserved 0x0)]
  133. 15dc.1be0: ProductName: Malwarebytes Chameleon
  134. 15dc.1be0: ProductVersion: 1.1.21.0
  135. 15dc.1be0: FileVersion: 1.1.21.0
  136. 15dc.1be0: FileDescription: Malwarebytes Chameleon Protection Driver
  137. 15dc.1be0: \SystemRoot\System32\drivers\mbam.sys:
  138. 15dc.1be0: CreationTime: 2014-08-20T06:31:33.118800000Z
  139. 15dc.1be0: LastWriteTime: 2015-10-05T06:50:06.000000000Z
  140. 15dc.1be0: ChangeTime: 2016-01-30T17:11:27.611800000Z
  141. 15dc.1be0: FileAttributes: 0x20
  142. 15dc.1be0: Size: 0x64d8
  143. 15dc.1be0: NT Headers: 0xd8
  144. 15dc.1be0: Timestamp: 0x55ca3257
  145. 15dc.1be0: Machine: 0x8664 - amd64
  146. 15dc.1be0: Timestamp: 0x55ca3257
  147. 15dc.1be0: Image Version: 6.1
  148. 15dc.1be0: SizeOfImage: 0xa000 (40960)
  149. 15dc.1be0: Resource Dir: 0x8000 LB 0x3a0
  150. 15dc.1be0: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
  151. 15dc.1be0: [Raw version resource data: 0x8060 LB 0x33c, codepage 0x0 (reserved 0x0)]
  152. 15dc.1be0: ProductName: Malwarebytes Anti-Malware
  153. 15dc.1be0: ProductVersion: 0.1.16.0
  154. 15dc.1be0: FileVersion: 0.1.16.0
  155. 15dc.1be0: FileDescription: Malwarebytes Anti-Malware
  156. 15dc.1be0: \SystemRoot\System32\drivers\avgrkx64.sys:
  157. 15dc.1be0: CreationTime: 2014-06-17T12:06:06.000000000Z
  158. 15dc.1be0: LastWriteTime: 2014-06-17T12:06:06.000000000Z
  159. 15dc.1be0: ChangeTime: 2014-07-13T06:19:22.198200000Z
  160. 15dc.1be0: FileAttributes: 0x20
  161. 15dc.1be0: Size: 0x7b18
  162. 15dc.1be0: NT Headers: 0xe8
  163. 15dc.1be0: Timestamp: 0x53a04b4c
  164. 15dc.1be0: Machine: 0x8664 - amd64
  165. 15dc.1be0: Timestamp: 0x53a04b4c
  166. 15dc.1be0: Image Version: 6.1
  167. 15dc.1be0: SizeOfImage: 0xa000 (40960)
  168. 15dc.1be0: Resource Dir: 0x9000 LB 0x51c
  169. 15dc.1be0: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x0)]
  170. 15dc.1be0: [Raw version resource data: 0x9058 LB 0x4c4, codepage 0x4e4 (reserved 0x0)]
  171. 15dc.1be0: ProductName: AVG Internet Security
  172. 15dc.1be0: ProductVersion: 14.0.0.4714
  173. 15dc.1be0: FileVersion: 14.0.0.4714
  174. 15dc.1be0: SpecialBuild: AvgVC10_2014_0617_160322(4714), SVNRev 6b87abe1b566d287d38b9fc5faf4290f8510e7ae (release/SmallUpdate2014-04_release), av
  175. 15dc.1be0: PrivateBuild: x64 Release_Unicode_DRIVER_wnet
  176. 15dc.1be0: FileDescription: AVG Anti-Rootkit Driver
  177. 15dc.1be0: \SystemRoot\System32\drivers\avgmfx64.sys:
  178. 15dc.1be0: CreationTime: 2014-10-29T17:03:36.000000000Z
  179. 15dc.1be0: LastWriteTime: 2014-10-29T17:03:36.000000000Z
  180. 15dc.1be0: ChangeTime: 2014-11-24T06:14:31.958004800Z
  181. 15dc.1be0: FileAttributes: 0x20
  182. 15dc.1be0: Size: 0x1e318
  183. 15dc.1be0: NT Headers: 0xe0
  184. 15dc.1be0: Timestamp: 0x54514814
  185. 15dc.1be0: Machine: 0x8664 - amd64
  186. 15dc.1be0: Timestamp: 0x54514814
  187. 15dc.1be0: Image Version: 6.1
  188. 15dc.1be0: SizeOfImage: 0x22000 (139264)
  189. 15dc.1be0: Resource Dir: 0x20000 LB 0x51c
  190. 15dc.1be0: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x0)]
  191. 15dc.1be0: [Raw version resource data: 0x20058 LB 0x4c4, codepage 0x4e4 (reserved 0x0)]
  192. 15dc.1be0: ProductName: AVG Internet Security
  193. 15dc.1be0: ProductVersion: 14.0.0.4792
  194. 15dc.1be0: FileVersion: 14.0.0.4792
  195. 15dc.1be0: SpecialBuild: AvgVC10_2014_1029_210007(4792), SVNRev b20923a7bac78d60b1a92794c8089d1220f00709 (release/HotFix2014-08), av
  196. 15dc.1be0: PrivateBuild: x64 Release_Unicode_DRIVER_wlh
  197. 15dc.1be0: FileDescription: AVG Resident Shield Minifilter Driver
  198. 15dc.1be0: \SystemRoot\System32\drivers\avgidsdrivera.sys:
  199. 15dc.1be0: CreationTime: 2014-07-21T17:03:12.000000000Z
  200. 15dc.1be0: LastWriteTime: 2014-07-21T17:03:12.000000000Z
  201. 15dc.1be0: ChangeTime: 2014-09-03T08:41:05.719000000Z
  202. 15dc.1be0: FileAttributes: 0x20
  203. 15dc.1be0: Size: 0x3bb18
  204. 15dc.1be0: NT Headers: 0xe0
  205. 15dc.1be0: Timestamp: 0x53cd63ec
  206. 15dc.1be0: Machine: 0x8664 - amd64
  207. 15dc.1be0: Timestamp: 0x53cd63ec
  208. 15dc.1be0: Image Version: 6.1
  209. 15dc.1be0: SizeOfImage: 0x44000 (278528)
  210. 15dc.1be0: Resource Dir: 0x42000 LB 0x53c
  211. 15dc.1be0: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x0)]
  212. 15dc.1be0: [Raw version resource data: 0x42058 LB 0x4e4, codepage 0x4e4 (reserved 0x0)]
  213. 15dc.1be0: ProductName: AVG Internet Security
  214. 15dc.1be0: ProductVersion: 14.0.0.4760
  215. 15dc.1be0: FileVersion: 14.0.0.4760
  216. 15dc.1be0: SpecialBuild: AvgVC10_2014_0721_210006(4760), SVNRev dfdd661531917266a37baed70275b67eed92e174 (release/HotFix2014-07), av
  217. 15dc.1be0: PrivateBuild: x64 Release_Unicode_DRIVER_wlh
  218. 15dc.1be0: FileDescription: AVG IDS Application Activity Monitor Driver.
  219. 15dc.1be0: \SystemRoot\System32\drivers\avgidsha.sys:
  220. 15dc.1be0: CreationTime: 2014-06-17T12:06:24.000000000Z
  221. 15dc.1be0: LastWriteTime: 2014-06-17T12:06:24.000000000Z
  222. 15dc.1be0: ChangeTime: 2014-07-13T06:19:26.780200000Z
  223. 15dc.1be0: FileAttributes: 0x20
  224. 15dc.1be0: Size: 0x2e918
  225. 15dc.1be0: NT Headers: 0xe0
  226. 15dc.1be0: Timestamp: 0x53a04b5c
  227. 15dc.1be0: Machine: 0x8664 - amd64
  228. 15dc.1be0: Timestamp: 0x53a04b5c
  229. 15dc.1be0: Image Version: 6.1
  230. 15dc.1be0: SizeOfImage: 0x31000 (200704)
  231. 15dc.1be0: Resource Dir: 0x2f000 LB 0x54c
  232. 15dc.1be0: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x0)]
  233. 15dc.1be0: [Raw version resource data: 0x2f058 LB 0x4f4, codepage 0x4e4 (reserved 0x0)]
  234. 15dc.1be0: ProductName: AVG Internet Security
  235. 15dc.1be0: ProductVersion: 14.0.0.4714
  236. 15dc.1be0: FileVersion: 14.0.0.4714
  237. 15dc.1be0: SpecialBuild: AvgVC10_2014_0617_160322(4714), SVNRev 6b87abe1b566d287d38b9fc5faf4290f8510e7ae (release/SmallUpdate2014-04_release), av
  238. 15dc.1be0: PrivateBuild: x64 Release_Unicode_DRIVER_wlh
  239. 15dc.1be0: FileDescription: AVG Application Activity Monitor Helper Driver
  240. 15dc.1be0: \SystemRoot\System32\drivers\avgtdia.sys:
  241. 15dc.1be0: CreationTime: 2014-10-20T11:15:50.000000000Z
  242. 15dc.1be0: LastWriteTime: 2014-10-20T11:15:50.000000000Z
  243. 15dc.1be0: ChangeTime: 2014-11-24T06:14:40.362004800Z
  244. 15dc.1be0: FileAttributes: 0x20
  245. 15dc.1be0: Size: 0x41b18
  246. 15dc.1be0: NT Headers: 0xd0
  247. 15dc.1be0: Timestamp: 0x54451912
  248. 15dc.1be0: Machine: 0x8664 - amd64
  249. 15dc.1be0: Timestamp: 0x54451912
  250. 15dc.1be0: Image Version: 6.1
  251. 15dc.1be0: SizeOfImage: 0x45000 (282624)
  252. 15dc.1be0: Resource Dir: 0x43000 LB 0x508
  253. 15dc.1be0: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x0)]
  254. 15dc.1be0: [Raw version resource data: 0x43058 LB 0x4b0, codepage 0x4e4 (reserved 0x0)]
  255. 15dc.1be0: ProductName: AVG Internet Security
  256. 15dc.1be0: ProductVersion: 14.0.0.4790
  257. 15dc.1be0: FileVersion: 14.0.0.4790
  258. 15dc.1be0: SpecialBuild: AvgVC10_2014_1020_155858(4790), SVNRev f279ea93ed396e8bfd3f999e74bc58082beb907f (release/HotFix2014-08), av
  259. 15dc.1be0: PrivateBuild: x64 Release_Unicode_DRIVER_wnet
  260. 15dc.1be0: FileDescription: AVG Network connection watcher
  261. 15dc.1be0: \SystemRoot\System32\drivers\avgloga.sys:
  262. 15dc.1be0: CreationTime: 2014-06-17T12:07:12.000000000Z
  263. 15dc.1be0: LastWriteTime: 2014-06-17T12:07:12.000000000Z
  264. 15dc.1be0: ChangeTime: 2014-07-13T06:19:21.328200000Z
  265. 15dc.1be0: FileAttributes: 0x20
  266. 15dc.1be0: Size: 0x50518
  267. 15dc.1be0: NT Headers: 0xf0
  268. 15dc.1be0: Timestamp: 0x53a04b72
  269. 15dc.1be0: Machine: 0x8664 - amd64
  270. 15dc.1be0: Timestamp: 0x53a04b72
  271. 15dc.1be0: Image Version: 6.1
  272. 15dc.1be0: SizeOfImage: 0x53000 (339968)
  273. 15dc.1be0: Resource Dir: 0x51000 LB 0x50c
  274. 15dc.1be0: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x0)]
  275. 15dc.1be0: [Raw version resource data: 0x51058 LB 0x4b4, codepage 0x4e4 (reserved 0x0)]
  276. 15dc.1be0: ProductName: AVG Internet Security
  277. 15dc.1be0: ProductVersion: 14.0.0.4714
  278. 15dc.1be0: FileVersion: 14.0.0.4714
  279. 15dc.1be0: SpecialBuild: AvgVC10_2014_0617_160322(4714), SVNRev 6b87abe1b566d287d38b9fc5faf4290f8510e7ae (release/SmallUpdate2014-04_release), av
  280. 15dc.1be0: PrivateBuild: x64 Release_Unicode_DRIVER_wnet
  281. 15dc.1be0: FileDescription: AVG Logging Driver
  282. 15dc.1be0: \SystemRoot\System32\drivers\avgldx64.sys:
  283. 15dc.1be0: CreationTime: 2014-10-24T06:20:06.000000000Z
  284. 15dc.1be0: LastWriteTime: 2014-10-24T06:20:06.000000000Z
  285. 15dc.1be0: ChangeTime: 2014-11-24T06:13:58.801004800Z
  286. 15dc.1be0: FileAttributes: 0x20
  287. 15dc.1be0: Size: 0x3a118
  288. 15dc.1be0: NT Headers: 0xd8
  289. 15dc.1be0: Timestamp: 0x544a19c1
  290. 15dc.1be0: Machine: 0x8664 - amd64
  291. 15dc.1be0: Timestamp: 0x544a19c1
  292. 15dc.1be0: Image Version: 6.1
  293. 15dc.1be0: SizeOfImage: 0x3f000 (258048)
  294. 15dc.1be0: Resource Dir: 0x3d000 LB 0x4fc
  295. 15dc.1be0: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x0)]
  296. 15dc.1be0: [Raw version resource data: 0x3d058 LB 0x4a4, codepage 0x4e4 (reserved 0x0)]
  297. 15dc.1be0: ProductName: AVG Internet Security
  298. 15dc.1be0: ProductVersion: 14.0.0.4791
  299. 15dc.1be0: FileVersion: 14.0.0.4791
  300. 15dc.1be0: SpecialBuild: AvgVC10_2014_1024_110127(4791), SVNRev 76eaf36d34c0826cbc2379eb9fab04a59739a8a0 (release/HotFix2014-08), av
  301. 15dc.1be0: PrivateBuild: x64 Release_Unicode_DRIVER_wnet
  302. 15dc.1be0: FileDescription: AVG AVI Loader Driver
  303. 15dc.1be0: \SystemRoot\System32\drivers\avgdiska.sys:
  304. 15dc.1be0: CreationTime: 2014-06-30T08:43:02.000000000Z
  305. 15dc.1be0: LastWriteTime: 2014-06-30T08:43:02.000000000Z
  306. 15dc.1be0: ChangeTime: 2014-08-21T05:54:31.670000000Z
  307. 15dc.1be0: FileAttributes: 0x20
  308. 15dc.1be0: Size: 0x25318
  309. 15dc.1be0: NT Headers: 0xe0
  310. 15dc.1be0: Timestamp: 0x53b13f33
  311. 15dc.1be0: Machine: 0x8664 - amd64
  312. 15dc.1be0: Timestamp: 0x53b13f33
  313. 15dc.1be0: Image Version: 6.1
  314. 15dc.1be0: SizeOfImage: 0x29000 (167936)
  315. 15dc.1be0: Resource Dir: 0x27000 LB 0x4fc
  316. 15dc.1be0: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x0)]
  317. 15dc.1be0: [Raw version resource data: 0x27058 LB 0x4a4, codepage 0x4e4 (reserved 0x0)]
  318. 15dc.1be0: ProductName: AVG Internet Security
  319. 15dc.1be0: ProductVersion: 14.0.0.4741
  320. 15dc.1be0: FileVersion: 14.0.0.4741
  321. 15dc.1be0: SpecialBuild: AvgVC10_2014_0630_124028(4741), SVNRev ddde18c0a639900c76fda086a939c074be8995d0 (release/HotFix2014-06), av
  322. 15dc.1be0: PrivateBuild: x64 Release_Unicode_DRIVER_wlh
  323. 15dc.1be0: FileDescription: AVG File Vault Driver
  324. 15dc.1be0: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox'
  325. 15dc.1be0: Calling main()
  326. 15dc.1be0: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2
  327. 15dc.1be0: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox'
  328. 15dc.1be0: SUPR3HardenedMain: Respawn #1
  329. 15dc.1be0: System32: \Device\HarddiskVolume4\Windows\System32
  330. 15dc.1be0: WinSxS: \Device\HarddiskVolume4\Windows\winsxs
  331. 15dc.1be0: KnownDllPath: C:\Windows\system32
  332. 15dc.1be0: '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
  333. 15dc.1be0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe)
  334. 15dc.1be0: supR3HardNtEnableThreadCreation:
  335. 15dc.1be0: supR3HardNtDisableThreadCreation: pvLdrInitThunk=000000007777c320 pvNtTerminateThread=00000000777a1840
  336. 15dc.1be0: supR3HardenedWinDoReSpawn(1): New child 1014.18c0 [kernel32].
  337. 15dc.1be0: supR3HardNtChildGatherData: PebBaseAddress=000007fffffdf000 cbPeb=0x380
  338. 15dc.1be0: supR3HardNtPuChFindNtdll: uNtDllParentAddr=0000000077750000 uNtDllChildAddr=0000000077750000
  339. 15dc.1be0: supR3HardenedWinSetupChildInit: uLdrInitThunk=000000007777c320
  340. 15dc.1be0: supR3HardenedWinSetupChildInit: Start child.
  341. 15dc.1be0: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 1 ms.
  342. 15dc.1be0: supR3HardNtChildPurify: Startup delay kludge #1/0: 514 ms, 61 sleeps
  343. 15dc.1be0: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
  344. 15dc.1be0: *0000000000000000-000000000000ffff 0x0001/0x0000 0x0000000
  345. 15dc.1be0: *0000000000010000-000000000002ffff 0x0004/0x0004 0x0020000
  346. 15dc.1be0: *0000000000030000-0000000000033fff 0x0002/0x0002 0x0040000
  347. 15dc.1be0: 0000000000034000-000000000003ffff 0x0001/0x0000 0x0000000
  348. 15dc.1be0: *0000000000040000-0000000000040fff 0x0004/0x0004 0x0020000
  349. 15dc.1be0: 0000000000041000-000000000004ffff 0x0001/0x0000 0x0000000
  350. 15dc.1be0: *0000000000050000-000000000014bfff 0x0000/0x0004 0x0020000
  351. 15dc.1be0: 000000000014c000-000000000014dfff 0x0104/0x0004 0x0020000
  352. 15dc.1be0: 000000000014e000-000000000014ffff 0x0004/0x0004 0x0020000
  353. 15dc.1be0: 0000000000150000-000000007774ffff 0x0001/0x0000 0x0000000
  354. 15dc.1be0: *0000000077750000-0000000077750fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
  355. 15dc.1be0: 0000000077751000-0000000077852fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
  356. 15dc.1be0: 0000000077853000-0000000077881fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
  357. 15dc.1be0: 0000000077882000-000000007788dfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
  358. 15dc.1be0: 000000007788e000-00000000778f8fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
  359. 15dc.1be0: 00000000778f9000-000000007efdffff 0x0001/0x0000 0x0000000
  360. 15dc.1be0: *000000007efe0000-000000007ffdffff 0x0000/0x0002 0x0020000
  361. 15dc.1be0: *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000
  362. 15dc.1be0: 000000007ffe1000-000000007ffeffff 0x0000/0x0002 0x0020000
  363. 15dc.1be0: 000000007fff0000-000000013fd7ffff 0x0001/0x0000 0x0000000
  364. 15dc.1be0: *000000013fd80000-000000013fd80fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
  365. 15dc.1be0: 000000013fd81000-000000013fdf0fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
  366. 15dc.1be0: 000000013fdf1000-000000013fdf1fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
  367. 15dc.1be0: 000000013fdf2000-000000013fe36fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
  368. 15dc.1be0: 000000013fe37000-000000013fe37fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
  369. 15dc.1be0: 000000013fe38000-000000013fe38fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
  370. 15dc.1be0: 000000013fe39000-000000013fe3dfff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
  371. 15dc.1be0: 000000013fe3e000-000000013fe3efff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
  372. 15dc.1be0: 000000013fe3f000-000000013fe3ffff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
  373. 15dc.1be0: 000000013fe40000-000000013fe43fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
  374. 15dc.1be0: 000000013fe44000-000000013fe8bfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
  375. 15dc.1be0: 000000013fe8c000-000007feffa6ffff 0x0001/0x0000 0x0000000
  376. 15dc.1be0: *000007feffa70000-000007feffa70fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\apisetschema.dll
  377. 15dc.1be0: 000007feffa71000-000007fffffaffff 0x0001/0x0000 0x0000000
  378. 15dc.1be0: *000007fffffb0000-000007fffffd2fff 0x0002/0x0002 0x0040000
  379. 15dc.1be0: 000007fffffd3000-000007fffffdcfff 0x0001/0x0000 0x0000000
  380. 15dc.1be0: *000007fffffdd000-000007fffffdefff 0x0004/0x0004 0x0020000
  381. 15dc.1be0: *000007fffffdf000-000007fffffdffff 0x0004/0x0004 0x0020000
  382. 15dc.1be0: *000007fffffe0000-000007fffffeffff 0x0001/0x0002 0x0020000
  383. 15dc.1be0: apisetschema.dll: timestamp 0x51fb15ca (rc=VINF_SUCCESS)
  384. 15dc.1be0: VirtualBox.exe: timestamp 0x5903619d (rc=VINF_SUCCESS)
  385. 15dc.1be0: '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
  386. 15dc.1be0: '\Device\HarddiskVolume4\Windows\System32\apisetschema.dll' has no imports
  387. 15dc.1be0: '\Device\HarddiskVolume4\Windows\System32\ntdll.dll' has no imports
  388. 15dc.1be0: supR3HardNtChildPurify: Done after 541 ms and 0 fixes (loop #0).
  389. 1014.18c0: Log file opened: 5.1.22r115126 g_hStartupLog=0000000000000004 g_uNtVerCombined=0x611db100
  390. 1014.18c0: supR3HardenedVmProcessInit: uNtDllAddr=0000000077750000 g_uNtVerCombined=0x611db100
  391. 1014.18c0: ntdll.dll: timestamp 0x4ce7c8f9 (rc=VINF_SUCCESS)
  392. 1014.18c0: New simple heap: #1 0000000000250000 LB 0x400000 (for 1740800 allocation)
  393. 1014.18c0: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox'
  394. 15dc.1be0: supR3HardNtEnableThreadCreation:
  395. 1014.18c0: System32: \Device\HarddiskVolume4\Windows\System32
  396. 1014.18c0: WinSxS: \Device\HarddiskVolume4\Windows\winsxs
  397. 1014.18c0: KnownDllPath: C:\Windows\system32
  398. 1014.18c0: supR3HardenedVmProcessInit: Opening vboxdrv stub...
  399. 1014.18c0: supR3HardenedVmProcessInit: Restoring LdrInitializeThunk...
  400. 1014.18c0: supR3HardenedVmProcessInit: Returning to LdrInitializeThunk...
  401. 1014.18c0: Registered Dll notification callback with NTDLL.
  402. 1014.18c0: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\kernel32.dll)
  403. 1014.18c0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\kernel32.dll
  404. 1014.18c0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\kernel32.dll (Input=kernel32.dll, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000000000:<flags> [calling]
  405. 1014.18c0: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
  406. 1014.18c0: supR3HardenedDllNotificationCallback: load 0000000077630000 LB 0x0011f000 C:\Windows\system32\kernel32.dll [fFlags=0x0]
  407. 1014.18c0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
  408. 1014.18c0: supR3HardenedDllNotificationCallback: load 000007fefce70000 LB 0x0006c000 C:\Windows\system32\KERNELBASE.dll [fFlags=0x0]
  409. 1014.18c0: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\KernelBase.dll)
  410. 1014.18c0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\KernelBase.dll
  411. 1014.18c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=0000000077630000 'C:\Windows\system32\kernel32.dll'
  412. 1014.18c0: supR3HardNtDisableThreadCreation: pvLdrInitThunk=000000007777c320 pvNtTerminateThread=00000000777a1840
  413. 15dc.1be0: supR3HardNtChildWaitFor: Found expected request 1 (CloseEvents) after 31 ms.
  414. 1014.18c0: \SystemRoot\System32\ntdll.dll:
  415. 1014.18c0: CreationTime: 2010-11-21T03:23:51.351694200Z
  416. 1014.18c0: LastWriteTime: 2010-11-21T03:23:51.367294200Z
  417. 1014.18c0: ChangeTime: 2014-07-14T07:39:55.310004000Z
  418. 1014.18c0: FileAttributes: 0x20
  419. 1014.18c0: Size: 0x1a6d60
  420. 1014.18c0: NT Headers: 0xe0
  421. 1014.18c0: Timestamp: 0x4ce7c8f9
  422. 1014.18c0: Machine: 0x8664 - amd64
  423. 1014.18c0: Timestamp: 0x4ce7c8f9
  424. 1014.18c0: Image Version: 6.1
  425. 1014.18c0: SizeOfImage: 0x1a9000 (1740800)
  426. 1014.18c0: Resource Dir: 0x151000 LB 0x560d8
  427. 1014.18c0: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
  428. 1014.18c0: [Raw version resource data: 0x1510f0 LB 0x380, codepage 0x0 (reserved 0x0)]
  429. 1014.18c0: ProductName: MicrosoftВ® WindowsВ® Operating System
  430. 1014.18c0: ProductVersion: 6.1.7601.17514
  431. 1014.18c0: FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850)
  432. 1014.18c0: FileDescription: NT Layer DLL
  433. 1014.18c0: \SystemRoot\System32\kernel32.dll:
  434. 1014.18c0: CreationTime: 2014-06-18T18:38:22.485350000Z
  435. 1014.18c0: LastWriteTime: 2014-03-04T09:44:00.336000000Z
  436. 1014.18c0: ChangeTime: 2014-07-14T07:40:02.459004000Z
  437. 1014.18c0: FileAttributes: 0x20
  438. 1014.18c0: Size: 0x11c000
  439. 1014.18c0: NT Headers: 0xe8
  440. 1014.18c0: Timestamp: 0x5315a059
  441. 1014.18c0: Machine: 0x8664 - amd64
  442. 1014.18c0: Timestamp: 0x5315a059
  443. 1014.18c0: Image Version: 6.1
  444. 1014.18c0: SizeOfImage: 0x11f000 (1175552)
  445. 1014.18c0: Resource Dir: 0x116000 LB 0x528
  446. 1014.18c0: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
  447. 1014.18c0: [Raw version resource data: 0x1160b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
  448. 1014.18c0: ProductName: MicrosoftВ® WindowsВ® Operating System
  449. 1014.18c0: ProductVersion: 6.1.7601.18409
  450. 1014.18c0: FileVersion: 6.1.7601.18409 (win7sp1_gdr.140303-2144)
  451. 1014.18c0: FileDescription: Windows NT BASE API Client DLL
  452. 1014.18c0: \SystemRoot\System32\KernelBase.dll:
  453. 1014.18c0: CreationTime: 2014-06-18T18:46:48.572550000Z
  454. 1014.18c0: LastWriteTime: 2014-03-04T09:44:00.336000000Z
  455. 1014.18c0: ChangeTime: 2014-07-14T07:40:02.609004000Z
  456. 1014.18c0: FileAttributes: 0x20
  457. 1014.18c0: Size: 0x67c00
  458. 1014.18c0: NT Headers: 0xe8
  459. 1014.18c0: Timestamp: 0x5315a05a
  460. 1014.18c0: Machine: 0x8664 - amd64
  461. 1014.18c0: Timestamp: 0x5315a05a
  462. 1014.18c0: Image Version: 6.1
  463. 1014.18c0: SizeOfImage: 0x6c000 (442368)
  464. 1014.18c0: Resource Dir: 0x6a000 LB 0x530
  465. 1014.18c0: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
  466. 1014.18c0: [Raw version resource data: 0x6a0b0 LB 0x3ac, codepage 0x0 (reserved 0x0)]
  467. 1014.18c0: ProductName: MicrosoftВ® WindowsВ® Operating System
  468. 1014.18c0: ProductVersion: 6.1.7601.18409
  469. 1014.18c0: FileVersion: 6.1.7601.18409 (win7sp1_gdr.140303-2144)
  470. 1014.18c0: FileDescription: Windows NT BASE API Client DLL
  471. 1014.18c0: \SystemRoot\System32\apisetschema.dll:
  472. 1014.18c0: CreationTime: 2014-06-18T18:47:46.432950000Z
  473. 1014.18c0: LastWriteTime: 2013-08-02T02:12:20.275000000Z
  474. 1014.18c0: ChangeTime: 2014-06-21T07:29:09.202000000Z
  475. 1014.18c0: FileAttributes: 0x20
  476. 1014.18c0: Size: 0x1a00
  477. 1014.18c0: NT Headers: 0xc0
  478. 1014.18c0: Timestamp: 0x51fb15ca
  479. 1014.18c0: Machine: 0x8664 - amd64
  480. 1014.18c0: Timestamp: 0x51fb15ca
  481. 1014.18c0: Image Version: 6.1
  482. 1014.18c0: SizeOfImage: 0x50000 (327680)
  483. 1014.18c0: Resource Dir: 0x30000 LB 0x3f8
  484. 1014.18c0: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
  485. 1014.18c0: [Raw version resource data: 0x30060 LB 0x398, codepage 0x0 (reserved 0x0)]
  486. 1014.18c0: ProductName: MicrosoftВ® WindowsВ® Operating System
  487. 1014.18c0: ProductVersion: 6.1.7601.18229
  488. 1014.18c0: FileVersion: 6.1.7601.18229 (win7sp1_gdr.130801-1533)
  489. 1014.18c0: FileDescription: ApiSet Schema DLL
  490. 1014.18c0: Found driver avgtdia (0x100)
  491. 1014.18c0: supR3HardenedWinFindAdversaries: 0x180
  492. 1014.18c0: \SystemRoot\System32\drivers\MBAMSwissArmy.sys:
  493. 1014.18c0: CreationTime: 2014-08-20T06:31:59.539800000Z
  494. 1014.18c0: LastWriteTime: 2016-02-27T15:17:50.365400000Z
  495. 1014.18c0: ChangeTime: 2016-02-27T15:17:50.365400000Z
  496. 1014.18c0: FileAttributes: 0x20
  497. 1014.18c0: Size: 0x2eed8
  498. 1014.18c0: NT Headers: 0xe0
  499. 1014.18c0: Timestamp: 0x55b855d9
  500. 1014.18c0: Machine: 0x8664 - amd64
  501. 1014.18c0: Timestamp: 0x55b855d9
  502. 1014.18c0: Image Version: 6.1
  503. 1014.18c0: SizeOfImage: 0x33000 (208896)
  504. 1014.18c0: Resource Dir: 0x31000 LB 0x3b8
  505. 1014.18c0: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
  506. 1014.18c0: [Raw version resource data: 0x31060 LB 0x354, codepage 0x0 (reserved 0x0)]
  507. 1014.18c0: ProductName: Malwarebytes Anti-Malware
  508. 1014.18c0: ProductVersion: 0.3.0.0
  509. 1014.18c0: FileVersion: 0.3.0.0
  510. 1014.18c0: FileDescription: Malwarebytes Anti-Malware
  511. 1014.18c0: \SystemRoot\System32\drivers\mwac.sys:
  512. 1014.18c0: CreationTime: 2014-08-20T06:31:33.124800000Z
  513. 1014.18c0: LastWriteTime: 2015-10-05T06:50:18.000000000Z
  514. 1014.18c0: ChangeTime: 2016-01-30T17:11:27.683800000Z
  515. 1014.18c0: FileAttributes: 0x20
  516. 1014.18c0: Size: 0xf8d8
  517. 1014.18c0: NT Headers: 0xf8
  518. 1014.18c0: Timestamp: 0x53a0f42a
  519. 1014.18c0: Machine: 0x8664 - amd64
  520. 1014.18c0: Timestamp: 0x53a0f42a
  521. 1014.18c0: Image Version: 6.2
  522. 1014.18c0: SizeOfImage: 0x12000 (73728)
  523. 1014.18c0: Resource Dir: 0x10000 LB 0x3e0
  524. 1014.18c0: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
  525. 1014.18c0: [Raw version resource data: 0x10060 LB 0x37c, codepage 0x0 (reserved 0x0)]
  526. 1014.18c0: ProductName: Malwarebytes Web Access Control
  527. 1014.18c0: ProductVersion: 1.0.6.0
  528. 1014.18c0: FileVersion: 1.0.6.0
  529. 1014.18c0: FileDescription: Malwarebytes Web Access Control
  530. 1014.18c0: \SystemRoot\System32\drivers\mbamchameleon.sys:
  531. 1014.18c0: CreationTime: 2014-08-20T06:31:33.135800000Z
  532. 1014.18c0: LastWriteTime: 2015-10-05T06:50:10.000000000Z
  533. 1014.18c0: ChangeTime: 2016-01-30T17:11:27.699800000Z
  534. 1014.18c0: FileAttributes: 0x20
  535. 1014.18c0: Size: 0x1aad8
  536. 1014.18c0: NT Headers: 0xd8
  537. 1014.18c0: Timestamp: 0x55c103c3
  538. 1014.18c0: Machine: 0x8664 - amd64
  539. 1014.18c0: Timestamp: 0x55c103c3
  540. 1014.18c0: Image Version: 6.1
  541. 1014.18c0: SizeOfImage: 0x1e000 (122880)
  542. 1014.18c0: Resource Dir: 0x1c000 LB 0xba8
  543. 1014.18c0: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
  544. 1014.18c0: [Raw version resource data: 0x1c830 LB 0x378, codepage 0x0 (reserved 0x0)]
  545. 1014.18c0: ProductName: Malwarebytes Chameleon
  546. 1014.18c0: ProductVersion: 1.1.21.0
  547. 1014.18c0: FileVersion: 1.1.21.0
  548. 1014.18c0: FileDescription: Malwarebytes Chameleon Protection Driver
  549. 1014.18c0: \SystemRoot\System32\drivers\mbam.sys:
  550. 1014.18c0: CreationTime: 2014-08-20T06:31:33.118800000Z
  551. 1014.18c0: LastWriteTime: 2015-10-05T06:50:06.000000000Z
  552. 1014.18c0: ChangeTime: 2016-01-30T17:11:27.611800000Z
  553. 1014.18c0: FileAttributes: 0x20
  554. 1014.18c0: Size: 0x64d8
  555. 1014.18c0: NT Headers: 0xd8
  556. 1014.18c0: Timestamp: 0x55ca3257
  557. 1014.18c0: Machine: 0x8664 - amd64
  558. 1014.18c0: Timestamp: 0x55ca3257
  559. 1014.18c0: Image Version: 6.1
  560. 1014.18c0: SizeOfImage: 0xa000 (40960)
  561. 1014.18c0: Resource Dir: 0x8000 LB 0x3a0
  562. 1014.18c0: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
  563. 1014.18c0: [Raw version resource data: 0x8060 LB 0x33c, codepage 0x0 (reserved 0x0)]
  564. 1014.18c0: ProductName: Malwarebytes Anti-Malware
  565. 1014.18c0: ProductVersion: 0.1.16.0
  566. 1014.18c0: FileVersion: 0.1.16.0
  567. 1014.18c0: FileDescription: Malwarebytes Anti-Malware
  568. 1014.18c0: \SystemRoot\System32\drivers\avgrkx64.sys:
  569. 1014.18c0: CreationTime: 2014-06-17T12:06:06.000000000Z
  570. 1014.18c0: LastWriteTime: 2014-06-17T12:06:06.000000000Z
  571. 1014.18c0: ChangeTime: 2014-07-13T06:19:22.198200000Z
  572. 1014.18c0: FileAttributes: 0x20
  573. 1014.18c0: Size: 0x7b18
  574. 1014.18c0: NT Headers: 0xe8
  575. 1014.18c0: Timestamp: 0x53a04b4c
  576. 1014.18c0: Machine: 0x8664 - amd64
  577. 1014.18c0: Timestamp: 0x53a04b4c
  578. 1014.18c0: Image Version: 6.1
  579. 1014.18c0: SizeOfImage: 0xa000 (40960)
  580. 1014.18c0: Resource Dir: 0x9000 LB 0x51c
  581. 1014.18c0: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x0)]
  582. 1014.18c0: [Raw version resource data: 0x9058 LB 0x4c4, codepage 0x4e4 (reserved 0x0)]
  583. 1014.18c0: ProductName: AVG Internet Security
  584. 1014.18c0: ProductVersion: 14.0.0.4714
  585. 1014.18c0: FileVersion: 14.0.0.4714
  586. 1014.18c0: SpecialBuild: AvgVC10_2014_0617_160322(4714), SVNRev 6b87abe1b566d287d38b9fc5faf4290f8510e7ae (release/SmallUpdate2014-04_release), av
  587. 1014.18c0: PrivateBuild: x64 Release_Unicode_DRIVER_wnet
  588. 1014.18c0: FileDescription: AVG Anti-Rootkit Driver
  589. 1014.18c0: \SystemRoot\System32\drivers\avgmfx64.sys:
  590. 1014.18c0: CreationTime: 2014-10-29T17:03:36.000000000Z
  591. 1014.18c0: LastWriteTime: 2014-10-29T17:03:36.000000000Z
  592. 1014.18c0: ChangeTime: 2014-11-24T06:14:31.958004800Z
  593. 1014.18c0: FileAttributes: 0x20
  594. 1014.18c0: Size: 0x1e318
  595. 1014.18c0: NT Headers: 0xe0
  596. 1014.18c0: Timestamp: 0x54514814
  597. 1014.18c0: Machine: 0x8664 - amd64
  598. 1014.18c0: Timestamp: 0x54514814
  599. 1014.18c0: Image Version: 6.1
  600. 1014.18c0: SizeOfImage: 0x22000 (139264)
  601. 1014.18c0: Resource Dir: 0x20000 LB 0x51c
  602. 1014.18c0: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x0)]
  603. 1014.18c0: [Raw version resource data: 0x20058 LB 0x4c4, codepage 0x4e4 (reserved 0x0)]
  604. 1014.18c0: ProductName: AVG Internet Security
  605. 1014.18c0: ProductVersion: 14.0.0.4792
  606. 1014.18c0: FileVersion: 14.0.0.4792
  607. 1014.18c0: SpecialBuild: AvgVC10_2014_1029_210007(4792), SVNRev b20923a7bac78d60b1a92794c8089d1220f00709 (release/HotFix2014-08), av
  608. 1014.18c0: PrivateBuild: x64 Release_Unicode_DRIVER_wlh
  609. 1014.18c0: FileDescription: AVG Resident Shield Minifilter Driver
  610. 1014.18c0: \SystemRoot\System32\drivers\avgidsdrivera.sys:
  611. 1014.18c0: CreationTime: 2014-07-21T17:03:12.000000000Z
  612. 1014.18c0: LastWriteTime: 2014-07-21T17:03:12.000000000Z
  613. 1014.18c0: ChangeTime: 2014-09-03T08:41:05.719000000Z
  614. 1014.18c0: FileAttributes: 0x20
  615. 1014.18c0: Size: 0x3bb18
  616. 1014.18c0: NT Headers: 0xe0
  617. 1014.18c0: Timestamp: 0x53cd63ec
  618. 1014.18c0: Machine: 0x8664 - amd64
  619. 1014.18c0: Timestamp: 0x53cd63ec
  620. 1014.18c0: Image Version: 6.1
  621. 1014.18c0: SizeOfImage: 0x44000 (278528)
  622. 1014.18c0: Resource Dir: 0x42000 LB 0x53c
  623. 1014.18c0: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x0)]
  624. 1014.18c0: [Raw version resource data: 0x42058 LB 0x4e4, codepage 0x4e4 (reserved 0x0)]
  625. 1014.18c0: ProductName: AVG Internet Security
  626. 1014.18c0: ProductVersion: 14.0.0.4760
  627. 1014.18c0: FileVersion: 14.0.0.4760
  628. 1014.18c0: SpecialBuild: AvgVC10_2014_0721_210006(4760), SVNRev dfdd661531917266a37baed70275b67eed92e174 (release/HotFix2014-07), av
  629. 1014.18c0: PrivateBuild: x64 Release_Unicode_DRIVER_wlh
  630. 1014.18c0: FileDescription: AVG IDS Application Activity Monitor Driver.
  631. 1014.18c0: \SystemRoot\System32\drivers\avgidsha.sys:
  632. 1014.18c0: CreationTime: 2014-06-17T12:06:24.000000000Z
  633. 1014.18c0: LastWriteTime: 2014-06-17T12:06:24.000000000Z
  634. 1014.18c0: ChangeTime: 2014-07-13T06:19:26.780200000Z
  635. 1014.18c0: FileAttributes: 0x20
  636. 1014.18c0: Size: 0x2e918
  637. 1014.18c0: NT Headers: 0xe0
  638. 1014.18c0: Timestamp: 0x53a04b5c
  639. 1014.18c0: Machine: 0x8664 - amd64
  640. 1014.18c0: Timestamp: 0x53a04b5c
  641. 1014.18c0: Image Version: 6.1
  642. 1014.18c0: SizeOfImage: 0x31000 (200704)
  643. 1014.18c0: Resource Dir: 0x2f000 LB 0x54c
  644. 1014.18c0: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x0)]
  645. 1014.18c0: [Raw version resource data: 0x2f058 LB 0x4f4, codepage 0x4e4 (reserved 0x0)]
  646. 1014.18c0: ProductName: AVG Internet Security
  647. 1014.18c0: ProductVersion: 14.0.0.4714
  648. 1014.18c0: FileVersion: 14.0.0.4714
  649. 1014.18c0: SpecialBuild: AvgVC10_2014_0617_160322(4714), SVNRev 6b87abe1b566d287d38b9fc5faf4290f8510e7ae (release/SmallUpdate2014-04_release), av
  650. 1014.18c0: PrivateBuild: x64 Release_Unicode_DRIVER_wlh
  651. 1014.18c0: FileDescription: AVG Application Activity Monitor Helper Driver
  652. 1014.18c0: \SystemRoot\System32\drivers\avgtdia.sys:
  653. 1014.18c0: CreationTime: 2014-10-20T11:15:50.000000000Z
  654. 1014.18c0: LastWriteTime: 2014-10-20T11:15:50.000000000Z
  655. 1014.18c0: ChangeTime: 2014-11-24T06:14:40.362004800Z
  656. 1014.18c0: FileAttributes: 0x20
  657. 1014.18c0: Size: 0x41b18
  658. 1014.18c0: NT Headers: 0xd0
  659. 1014.18c0: Timestamp: 0x54451912
  660. 1014.18c0: Machine: 0x8664 - amd64
  661. 1014.18c0: Timestamp: 0x54451912
  662. 1014.18c0: Image Version: 6.1
  663. 1014.18c0: SizeOfImage: 0x45000 (282624)
  664. 1014.18c0: Resource Dir: 0x43000 LB 0x508
  665. 1014.18c0: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x0)]
  666. 1014.18c0: [Raw version resource data: 0x43058 LB 0x4b0, codepage 0x4e4 (reserved 0x0)]
  667. 1014.18c0: ProductName: AVG Internet Security
  668. 1014.18c0: ProductVersion: 14.0.0.4790
  669. 1014.18c0: FileVersion: 14.0.0.4790
  670. 1014.18c0: SpecialBuild: AvgVC10_2014_1020_155858(4790), SVNRev f279ea93ed396e8bfd3f999e74bc58082beb907f (release/HotFix2014-08), av
  671. 1014.18c0: PrivateBuild: x64 Release_Unicode_DRIVER_wnet
  672. 1014.18c0: FileDescription: AVG Network connection watcher
  673. 1014.18c0: \SystemRoot\System32\drivers\avgloga.sys:
  674. 1014.18c0: CreationTime: 2014-06-17T12:07:12.000000000Z
  675. 1014.18c0: LastWriteTime: 2014-06-17T12:07:12.000000000Z
  676. 1014.18c0: ChangeTime: 2014-07-13T06:19:21.328200000Z
  677. 1014.18c0: FileAttributes: 0x20
  678. 1014.18c0: Size: 0x50518
  679. 1014.18c0: NT Headers: 0xf0
  680. 1014.18c0: Timestamp: 0x53a04b72
  681. 1014.18c0: Machine: 0x8664 - amd64
  682. 1014.18c0: Timestamp: 0x53a04b72
  683. 1014.18c0: Image Version: 6.1
  684. 1014.18c0: SizeOfImage: 0x53000 (339968)
  685. 1014.18c0: Resource Dir: 0x51000 LB 0x50c
  686. 1014.18c0: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x0)]
  687. 1014.18c0: [Raw version resource data: 0x51058 LB 0x4b4, codepage 0x4e4 (reserved 0x0)]
  688. 1014.18c0: ProductName: AVG Internet Security
  689. 1014.18c0: ProductVersion: 14.0.0.4714
  690. 1014.18c0: FileVersion: 14.0.0.4714
  691. 1014.18c0: SpecialBuild: AvgVC10_2014_0617_160322(4714), SVNRev 6b87abe1b566d287d38b9fc5faf4290f8510e7ae (release/SmallUpdate2014-04_release), av
  692. 1014.18c0: PrivateBuild: x64 Release_Unicode_DRIVER_wnet
  693. 1014.18c0: FileDescription: AVG Logging Driver
  694. 1014.18c0: \SystemRoot\System32\drivers\avgldx64.sys:
  695. 1014.18c0: CreationTime: 2014-10-24T06:20:06.000000000Z
  696. 1014.18c0: LastWriteTime: 2014-10-24T06:20:06.000000000Z
  697. 1014.18c0: ChangeTime: 2014-11-24T06:13:58.801004800Z
  698. 1014.18c0: FileAttributes: 0x20
  699. 1014.18c0: Size: 0x3a118
  700. 1014.18c0: NT Headers: 0xd8
  701. 1014.18c0: Timestamp: 0x544a19c1
  702. 1014.18c0: Machine: 0x8664 - amd64
  703. 1014.18c0: Timestamp: 0x544a19c1
  704. 1014.18c0: Image Version: 6.1
  705. 1014.18c0: SizeOfImage: 0x3f000 (258048)
  706. 1014.18c0: Resource Dir: 0x3d000 LB 0x4fc
  707. 1014.18c0: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x0)]
  708. 1014.18c0: [Raw version resource data: 0x3d058 LB 0x4a4, codepage 0x4e4 (reserved 0x0)]
  709. 1014.18c0: ProductName: AVG Internet Security
  710. 1014.18c0: ProductVersion: 14.0.0.4791
  711. 1014.18c0: FileVersion: 14.0.0.4791
  712. 1014.18c0: SpecialBuild: AvgVC10_2014_1024_110127(4791), SVNRev 76eaf36d34c0826cbc2379eb9fab04a59739a8a0 (release/HotFix2014-08), av
  713. 1014.18c0: PrivateBuild: x64 Release_Unicode_DRIVER_wnet
  714. 1014.18c0: FileDescription: AVG AVI Loader Driver
  715. 1014.18c0: \SystemRoot\System32\drivers\avgdiska.sys:
  716. 1014.18c0: CreationTime: 2014-06-30T08:43:02.000000000Z
  717. 1014.18c0: LastWriteTime: 2014-06-30T08:43:02.000000000Z
  718. 1014.18c0: ChangeTime: 2014-08-21T05:54:31.670000000Z
  719. 1014.18c0: FileAttributes: 0x20
  720. 1014.18c0: Size: 0x25318
  721. 1014.18c0: NT Headers: 0xe0
  722. 1014.18c0: Timestamp: 0x53b13f33
  723. 1014.18c0: Machine: 0x8664 - amd64
  724. 1014.18c0: Timestamp: 0x53b13f33
  725. 1014.18c0: Image Version: 6.1
  726. 1014.18c0: SizeOfImage: 0x29000 (167936)
  727. 1014.18c0: Resource Dir: 0x27000 LB 0x4fc
  728. 1014.18c0: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x0)]
  729. 1014.18c0: [Raw version resource data: 0x27058 LB 0x4a4, codepage 0x4e4 (reserved 0x0)]
  730. 1014.18c0: ProductName: AVG Internet Security
  731. 1014.18c0: ProductVersion: 14.0.0.4741
  732. 1014.18c0: FileVersion: 14.0.0.4741
  733. 1014.18c0: SpecialBuild: AvgVC10_2014_0630_124028(4741), SVNRev ddde18c0a639900c76fda086a939c074be8995d0 (release/HotFix2014-06), av
  734. 1014.18c0: PrivateBuild: x64 Release_Unicode_DRIVER_wlh
  735. 1014.18c0: FileDescription: AVG File Vault Driver
  736. 1014.18c0: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox'
  737. 1014.18c0: Calling main()
  738. 1014.18c0: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2
  739. 1014.18c0: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox'
  740. 1014.18c0: '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
  741. 1014.18c0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe)
  742. 1014.18c0: SUPR3HardenedMain: Respawn #2
  743. 1014.18c0: supR3HardNtEnableThreadCreation:
  744. 1014.18c0: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\apphelp.dll)
  745. 1014.18c0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\apphelp.dll
  746. 1014.18c0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\apphelp.dll (rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000000000:<flags> [calling]
  747. 1014.18c0: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\apphelp.dll [lacks WinVerifyTrust]
  748. 1014.18c0: supR3HardenedDllNotificationCallback: load 000007fefc790000 LB 0x00057000 C:\Windows\system32\apphelp.dll [fFlags=0x0]
  749. 1014.18c0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\apphelp.dll [lacks WinVerifyTrust]
  750. 1014.18c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefc790000 'C:\Windows\system32\apphelp.dll'
  751. 1014.18c0: supR3HardNtDisableThreadCreation: pvLdrInitThunk=000000007777c320 pvNtTerminateThread=00000000777a1840
  752. 1014.18c0: supR3HardenedWinDoReSpawn(2): New child 1918.1b94 [kernel32].
  753. 1014.18c0: supR3HardNtChildGatherData: PebBaseAddress=000007fffffd3000 cbPeb=0x380
  754. 1014.18c0: supR3HardNtPuChFindNtdll: uNtDllParentAddr=0000000077750000 uNtDllChildAddr=0000000077750000
  755. 1014.18c0: supR3HardenedWinSetupChildInit: uLdrInitThunk=000000007777c320
  756. 1014.18c0: supR3HardenedWinSetupChildInit: Start child.
  757. 1014.18c0: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 8 ms.
  758. 1014.18c0: supR3HardNtChildPurify: Startup delay kludge #1/0: 520 ms, 65 sleeps
  759. 1014.18c0: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
  760. 1014.18c0: *0000000000000000-000000000000ffff 0x0001/0x0000 0x0000000
  761. 1014.18c0: *0000000000010000-000000000002ffff 0x0004/0x0004 0x0020000
  762. 1014.18c0: *0000000000030000-0000000000033fff 0x0002/0x0002 0x0040000
  763. 1014.18c0: 0000000000034000-000000000003ffff 0x0001/0x0000 0x0000000
  764. 1014.18c0: *0000000000040000-0000000000040fff 0x0004/0x0004 0x0020000
  765. 1014.18c0: 0000000000041000-000000000008ffff 0x0001/0x0000 0x0000000
  766. 1014.18c0: *0000000000090000-000000000018bfff 0x0000/0x0004 0x0020000
  767. 1014.18c0: 000000000018c000-000000000018dfff 0x0104/0x0004 0x0020000
  768. 1014.18c0: 000000000018e000-000000000018ffff 0x0004/0x0004 0x0020000
  769. 1014.18c0: 0000000000190000-000000007774ffff 0x0001/0x0000 0x0000000
  770. 1014.18c0: *0000000077750000-0000000077750fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
  771. 1014.18c0: 0000000077751000-0000000077852fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
  772. 1014.18c0: 0000000077853000-0000000077881fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
  773. 1014.18c0: 0000000077882000-000000007788dfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
  774. 1014.18c0: 000000007788e000-00000000778f8fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
  775. 1014.18c0: 00000000778f9000-000000007efdffff 0x0001/0x0000 0x0000000
  776. 1014.18c0: *000000007efe0000-000000007ffdffff 0x0000/0x0002 0x0020000
  777. 1014.18c0: *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000
  778. 1014.18c0: 000000007ffe1000-000000007ffeffff 0x0000/0x0002 0x0020000
  779. 1014.18c0: 000000007fff0000-000000013fd7ffff 0x0001/0x0000 0x0000000
  780. 1014.18c0: *000000013fd80000-000000013fd80fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
  781. 1014.18c0: 000000013fd81000-000000013fdf0fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
  782. 1014.18c0: 000000013fdf1000-000000013fdf1fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
  783. 1014.18c0: 000000013fdf2000-000000013fe36fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
  784. 1014.18c0: 000000013fe37000-000000013fe37fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
  785. 1014.18c0: 000000013fe38000-000000013fe38fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
  786. 1014.18c0: 000000013fe39000-000000013fe3dfff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
  787. 1014.18c0: 000000013fe3e000-000000013fe3efff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
  788. 1014.18c0: 000000013fe3f000-000000013fe3ffff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
  789. 1014.18c0: 000000013fe40000-000000013fe43fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
  790. 1014.18c0: 000000013fe44000-000000013fe8bfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
  791. 1014.18c0: 000000013fe8c000-000007feffa6ffff 0x0001/0x0000 0x0000000
  792. 1014.18c0: *000007feffa70000-000007feffa70fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\apisetschema.dll
  793. 1014.18c0: 000007feffa71000-000007fffffaffff 0x0001/0x0000 0x0000000
  794. 1014.18c0: *000007fffffb0000-000007fffffd2fff 0x0002/0x0002 0x0040000
  795. 1014.18c0: *000007fffffd3000-000007fffffd3fff 0x0004/0x0004 0x0020000
  796. 1014.18c0: 000007fffffd4000-000007fffffddfff 0x0001/0x0000 0x0000000
  797. 1014.18c0: *000007fffffde000-000007fffffdffff 0x0004/0x0004 0x0020000
  798. 1014.18c0: *000007fffffe0000-000007fffffeffff 0x0001/0x0002 0x0020000
  799. 1014.18c0: apisetschema.dll: timestamp 0x51fb15ca (rc=VINF_SUCCESS)
  800. 1014.18c0: VirtualBox.exe: timestamp 0x5903619d (rc=VINF_SUCCESS)
  801. 1014.18c0: '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
  802. 1014.18c0: '\Device\HarddiskVolume4\Windows\System32\apisetschema.dll' has no imports
  803. 1014.18c0: '\Device\HarddiskVolume4\Windows\System32\ntdll.dll' has no imports
  804. 1014.18c0: supR3HardNtChildPurify: Done after 546 ms and 0 fixes (loop #0).
  805. 1014.18c0: supR3HardenedEarlyCompact: Removed heap 1 (0x00000000250000 LB 0x400000)
  806. 1014.18c0: supR3HardNtEnableThreadCreation:
  807. 1918.1b94: Log file opened: 5.1.22r115126 g_hStartupLog=0000000000000004 g_uNtVerCombined=0x611db100
  808. 1918.1b94: supR3HardenedVmProcessInit: uNtDllAddr=0000000077750000 g_uNtVerCombined=0x611db100
  809. 1918.1b94: ntdll.dll: timestamp 0x4ce7c8f9 (rc=VINF_SUCCESS)
  810. 1918.1b94: New simple heap: #1 0000000000290000 LB 0x400000 (for 1740800 allocation)
  811. 1918.1b94: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox'
  812. 1918.1b94: System32: \Device\HarddiskVolume4\Windows\System32
  813. 1918.1b94: WinSxS: \Device\HarddiskVolume4\Windows\winsxs
  814. 1918.1b94: KnownDllPath: C:\Windows\system32
  815. 1918.1b94: supR3HardenedVmProcessInit: Opening vboxdrv...
  816. 1918.1b94: supR3HardenedVmProcessInit: Restoring LdrInitializeThunk...
  817. 1918.1b94: supR3HardenedVmProcessInit: Returning to LdrInitializeThunk...
  818. 1918.1b94: Registered Dll notification callback with NTDLL.
  819. 1918.1b94: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\kernel32.dll)
  820. 1918.1b94: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\kernel32.dll
  821. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\kernel32.dll (Input=kernel32.dll, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000000000:<flags> [calling]
  822. 1918.1b94: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
  823. 1918.1b94: supR3HardenedDllNotificationCallback: load 0000000077630000 LB 0x0011f000 C:\Windows\system32\kernel32.dll [fFlags=0x0]
  824. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
  825. 1918.1b94: supR3HardenedDllNotificationCallback: load 000007fefce70000 LB 0x0006c000 C:\Windows\system32\KERNELBASE.dll [fFlags=0x0]
  826. 1918.1b94: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\KernelBase.dll)
  827. 1918.1b94: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\KernelBase.dll
  828. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=0000000077630000 'C:\Windows\system32\kernel32.dll'
  829. 1918.1b94: supR3HardNtDisableThreadCreation: pvLdrInitThunk=000000007777c320 pvNtTerminateThread=00000000777a1840
  830. 1918.1b94: \SystemRoot\System32\ntdll.dll:
  831. 1918.1b94: CreationTime: 2010-11-21T03:23:51.351694200Z
  832. 1918.1b94: LastWriteTime: 2010-11-21T03:23:51.367294200Z
  833. 1918.1b94: ChangeTime: 2014-07-14T07:39:55.310004000Z
  834. 1918.1b94: FileAttributes: 0x20
  835. 1918.1b94: Size: 0x1a6d60
  836. 1918.1b94: NT Headers: 0xe0
  837. 1918.1b94: Timestamp: 0x4ce7c8f9
  838. 1918.1b94: Machine: 0x8664 - amd64
  839. 1918.1b94: Timestamp: 0x4ce7c8f9
  840. 1918.1b94: Image Version: 6.1
  841. 1918.1b94: SizeOfImage: 0x1a9000 (1740800)
  842. 1918.1b94: Resource Dir: 0x151000 LB 0x560d8
  843. 1918.1b94: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
  844. 1918.1b94: [Raw version resource data: 0x1510f0 LB 0x380, codepage 0x0 (reserved 0x0)]
  845. 1918.1b94: ProductName: MicrosoftВ® WindowsВ® Operating System
  846. 1918.1b94: ProductVersion: 6.1.7601.17514
  847. 1918.1b94: FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850)
  848. 1918.1b94: FileDescription: NT Layer DLL
  849. 1918.1b94: \SystemRoot\System32\kernel32.dll:
  850. 1918.1b94: CreationTime: 2014-06-18T18:38:22.485350000Z
  851. 1918.1b94: LastWriteTime: 2014-03-04T09:44:00.336000000Z
  852. 1918.1b94: ChangeTime: 2014-07-14T07:40:02.459004000Z
  853. 1918.1b94: FileAttributes: 0x20
  854. 1918.1b94: Size: 0x11c000
  855. 1918.1b94: NT Headers: 0xe8
  856. 1918.1b94: Timestamp: 0x5315a059
  857. 1918.1b94: Machine: 0x8664 - amd64
  858. 1918.1b94: Timestamp: 0x5315a059
  859. 1918.1b94: Image Version: 6.1
  860. 1918.1b94: SizeOfImage: 0x11f000 (1175552)
  861. 1918.1b94: Resource Dir: 0x116000 LB 0x528
  862. 1918.1b94: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
  863. 1918.1b94: [Raw version resource data: 0x1160b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
  864. 1918.1b94: ProductName: MicrosoftВ® WindowsВ® Operating System
  865. 1918.1b94: ProductVersion: 6.1.7601.18409
  866. 1918.1b94: FileVersion: 6.1.7601.18409 (win7sp1_gdr.140303-2144)
  867. 1918.1b94: FileDescription: Windows NT BASE API Client DLL
  868. 1918.1b94: \SystemRoot\System32\KernelBase.dll:
  869. 1918.1b94: CreationTime: 2014-06-18T18:46:48.572550000Z
  870. 1918.1b94: LastWriteTime: 2014-03-04T09:44:00.336000000Z
  871. 1918.1b94: ChangeTime: 2014-07-14T07:40:02.609004000Z
  872. 1918.1b94: FileAttributes: 0x20
  873. 1918.1b94: Size: 0x67c00
  874. 1918.1b94: NT Headers: 0xe8
  875. 1918.1b94: Timestamp: 0x5315a05a
  876. 1918.1b94: Machine: 0x8664 - amd64
  877. 1918.1b94: Timestamp: 0x5315a05a
  878. 1918.1b94: Image Version: 6.1
  879. 1918.1b94: SizeOfImage: 0x6c000 (442368)
  880. 1918.1b94: Resource Dir: 0x6a000 LB 0x530
  881. 1918.1b94: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
  882. 1918.1b94: [Raw version resource data: 0x6a0b0 LB 0x3ac, codepage 0x0 (reserved 0x0)]
  883. 1918.1b94: ProductName: MicrosoftВ® WindowsВ® Operating System
  884. 1918.1b94: ProductVersion: 6.1.7601.18409
  885. 1918.1b94: FileVersion: 6.1.7601.18409 (win7sp1_gdr.140303-2144)
  886. 1918.1b94: FileDescription: Windows NT BASE API Client DLL
  887. 1918.1b94: \SystemRoot\System32\apisetschema.dll:
  888. 1918.1b94: CreationTime: 2014-06-18T18:47:46.432950000Z
  889. 1918.1b94: LastWriteTime: 2013-08-02T02:12:20.275000000Z
  890. 1918.1b94: ChangeTime: 2014-06-21T07:29:09.202000000Z
  891. 1918.1b94: FileAttributes: 0x20
  892. 1918.1b94: Size: 0x1a00
  893. 1918.1b94: NT Headers: 0xc0
  894. 1918.1b94: Timestamp: 0x51fb15ca
  895. 1918.1b94: Machine: 0x8664 - amd64
  896. 1918.1b94: Timestamp: 0x51fb15ca
  897. 1918.1b94: Image Version: 6.1
  898. 1918.1b94: SizeOfImage: 0x50000 (327680)
  899. 1918.1b94: Resource Dir: 0x30000 LB 0x3f8
  900. 1918.1b94: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
  901. 1918.1b94: [Raw version resource data: 0x30060 LB 0x398, codepage 0x0 (reserved 0x0)]
  902. 1918.1b94: ProductName: MicrosoftВ® WindowsВ® Operating System
  903. 1918.1b94: ProductVersion: 6.1.7601.18229
  904. 1918.1b94: FileVersion: 6.1.7601.18229 (win7sp1_gdr.130801-1533)
  905. 1918.1b94: FileDescription: ApiSet Schema DLL
  906. 1918.1b94: Found driver avgtdia (0x100)
  907. 1014.18c0: supR3HardNtChildWaitFor: Found expected request 1 (CloseEvents) after 44 ms.
  908. 1918.1b94: supR3HardenedWinFindAdversaries: 0x180
  909. 1918.1b94: \SystemRoot\System32\drivers\MBAMSwissArmy.sys:
  910. 1918.1b94: CreationTime: 2014-08-20T06:31:59.539800000Z
  911. 1918.1b94: LastWriteTime: 2016-02-27T15:17:50.365400000Z
  912. 1918.1b94: ChangeTime: 2016-02-27T15:17:50.365400000Z
  913. 1918.1b94: FileAttributes: 0x20
  914. 1918.1b94: Size: 0x2eed8
  915. 1918.1b94: NT Headers: 0xe0
  916. 1918.1b94: Timestamp: 0x55b855d9
  917. 1918.1b94: Machine: 0x8664 - amd64
  918. 1918.1b94: Timestamp: 0x55b855d9
  919. 1918.1b94: Image Version: 6.1
  920. 1918.1b94: SizeOfImage: 0x33000 (208896)
  921. 1918.1b94: Resource Dir: 0x31000 LB 0x3b8
  922. 1918.1b94: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
  923. 1918.1b94: [Raw version resource data: 0x31060 LB 0x354, codepage 0x0 (reserved 0x0)]
  924. 1918.1b94: ProductName: Malwarebytes Anti-Malware
  925. 1918.1b94: ProductVersion: 0.3.0.0
  926. 1918.1b94: FileVersion: 0.3.0.0
  927. 1918.1b94: FileDescription: Malwarebytes Anti-Malware
  928. 1918.1b94: \SystemRoot\System32\drivers\mwac.sys:
  929. 1918.1b94: CreationTime: 2014-08-20T06:31:33.124800000Z
  930. 1918.1b94: LastWriteTime: 2015-10-05T06:50:18.000000000Z
  931. 1918.1b94: ChangeTime: 2016-01-30T17:11:27.683800000Z
  932. 1918.1b94: FileAttributes: 0x20
  933. 1918.1b94: Size: 0xf8d8
  934. 1918.1b94: NT Headers: 0xf8
  935. 1918.1b94: Timestamp: 0x53a0f42a
  936. 1918.1b94: Machine: 0x8664 - amd64
  937. 1918.1b94: Timestamp: 0x53a0f42a
  938. 1918.1b94: Image Version: 6.2
  939. 1918.1b94: SizeOfImage: 0x12000 (73728)
  940. 1918.1b94: Resource Dir: 0x10000 LB 0x3e0
  941. 1918.1b94: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
  942. 1918.1b94: [Raw version resource data: 0x10060 LB 0x37c, codepage 0x0 (reserved 0x0)]
  943. 1918.1b94: ProductName: Malwarebytes Web Access Control
  944. 1918.1b94: ProductVersion: 1.0.6.0
  945. 1918.1b94: FileVersion: 1.0.6.0
  946. 1918.1b94: FileDescription: Malwarebytes Web Access Control
  947. 1918.1b94: \SystemRoot\System32\drivers\mbamchameleon.sys:
  948. 1918.1b94: CreationTime: 2014-08-20T06:31:33.135800000Z
  949. 1918.1b94: LastWriteTime: 2015-10-05T06:50:10.000000000Z
  950. 1918.1b94: ChangeTime: 2016-01-30T17:11:27.699800000Z
  951. 1918.1b94: FileAttributes: 0x20
  952. 1918.1b94: Size: 0x1aad8
  953. 1918.1b94: NT Headers: 0xd8
  954. 1918.1b94: Timestamp: 0x55c103c3
  955. 1918.1b94: Machine: 0x8664 - amd64
  956. 1918.1b94: Timestamp: 0x55c103c3
  957. 1918.1b94: Image Version: 6.1
  958. 1918.1b94: SizeOfImage: 0x1e000 (122880)
  959. 1918.1b94: Resource Dir: 0x1c000 LB 0xba8
  960. 1918.1b94: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
  961. 1918.1b94: [Raw version resource data: 0x1c830 LB 0x378, codepage 0x0 (reserved 0x0)]
  962. 1918.1b94: ProductName: Malwarebytes Chameleon
  963. 1918.1b94: ProductVersion: 1.1.21.0
  964. 1918.1b94: FileVersion: 1.1.21.0
  965. 1918.1b94: FileDescription: Malwarebytes Chameleon Protection Driver
  966. 1918.1b94: \SystemRoot\System32\drivers\mbam.sys:
  967. 1918.1b94: CreationTime: 2014-08-20T06:31:33.118800000Z
  968. 1918.1b94: LastWriteTime: 2015-10-05T06:50:06.000000000Z
  969. 1918.1b94: ChangeTime: 2016-01-30T17:11:27.611800000Z
  970. 1918.1b94: FileAttributes: 0x20
  971. 1918.1b94: Size: 0x64d8
  972. 1918.1b94: NT Headers: 0xd8
  973. 1918.1b94: Timestamp: 0x55ca3257
  974. 1918.1b94: Machine: 0x8664 - amd64
  975. 1918.1b94: Timestamp: 0x55ca3257
  976. 1918.1b94: Image Version: 6.1
  977. 1918.1b94: SizeOfImage: 0xa000 (40960)
  978. 1918.1b94: Resource Dir: 0x8000 LB 0x3a0
  979. 1918.1b94: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
  980. 1918.1b94: [Raw version resource data: 0x8060 LB 0x33c, codepage 0x0 (reserved 0x0)]
  981. 1918.1b94: ProductName: Malwarebytes Anti-Malware
  982. 1918.1b94: ProductVersion: 0.1.16.0
  983. 1918.1b94: FileVersion: 0.1.16.0
  984. 1918.1b94: FileDescription: Malwarebytes Anti-Malware
  985. 1918.1b94: \SystemRoot\System32\drivers\avgrkx64.sys:
  986. 1918.1b94: CreationTime: 2014-06-17T12:06:06.000000000Z
  987. 1918.1b94: LastWriteTime: 2014-06-17T12:06:06.000000000Z
  988. 1918.1b94: ChangeTime: 2014-07-13T06:19:22.198200000Z
  989. 1918.1b94: FileAttributes: 0x20
  990. 1918.1b94: Size: 0x7b18
  991. 1918.1b94: NT Headers: 0xe8
  992. 1918.1b94: Timestamp: 0x53a04b4c
  993. 1918.1b94: Machine: 0x8664 - amd64
  994. 1918.1b94: Timestamp: 0x53a04b4c
  995. 1918.1b94: Image Version: 6.1
  996. 1918.1b94: SizeOfImage: 0xa000 (40960)
  997. 1918.1b94: Resource Dir: 0x9000 LB 0x51c
  998. 1918.1b94: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x0)]
  999. 1918.1b94: [Raw version resource data: 0x9058 LB 0x4c4, codepage 0x4e4 (reserved 0x0)]
  1000. 1918.1b94: ProductName: AVG Internet Security
  1001. 1918.1b94: ProductVersion: 14.0.0.4714
  1002. 1918.1b94: FileVersion: 14.0.0.4714
  1003. 1918.1b94: SpecialBuild: AvgVC10_2014_0617_160322(4714), SVNRev 6b87abe1b566d287d38b9fc5faf4290f8510e7ae (release/SmallUpdate2014-04_release), av
  1004. 1918.1b94: PrivateBuild: x64 Release_Unicode_DRIVER_wnet
  1005. 1918.1b94: FileDescription: AVG Anti-Rootkit Driver
  1006. 1918.1b94: \SystemRoot\System32\drivers\avgmfx64.sys:
  1007. 1918.1b94: CreationTime: 2014-10-29T17:03:36.000000000Z
  1008. 1918.1b94: LastWriteTime: 2014-10-29T17:03:36.000000000Z
  1009. 1918.1b94: ChangeTime: 2014-11-24T06:14:31.958004800Z
  1010. 1918.1b94: FileAttributes: 0x20
  1011. 1918.1b94: Size: 0x1e318
  1012. 1918.1b94: NT Headers: 0xe0
  1013. 1918.1b94: Timestamp: 0x54514814
  1014. 1918.1b94: Machine: 0x8664 - amd64
  1015. 1918.1b94: Timestamp: 0x54514814
  1016. 1918.1b94: Image Version: 6.1
  1017. 1918.1b94: SizeOfImage: 0x22000 (139264)
  1018. 1918.1b94: Resource Dir: 0x20000 LB 0x51c
  1019. 1918.1b94: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x0)]
  1020. 1918.1b94: [Raw version resource data: 0x20058 LB 0x4c4, codepage 0x4e4 (reserved 0x0)]
  1021. 1918.1b94: ProductName: AVG Internet Security
  1022. 1918.1b94: ProductVersion: 14.0.0.4792
  1023. 1918.1b94: FileVersion: 14.0.0.4792
  1024. 1918.1b94: SpecialBuild: AvgVC10_2014_1029_210007(4792), SVNRev b20923a7bac78d60b1a92794c8089d1220f00709 (release/HotFix2014-08), av
  1025. 1918.1b94: PrivateBuild: x64 Release_Unicode_DRIVER_wlh
  1026. 1918.1b94: FileDescription: AVG Resident Shield Minifilter Driver
  1027. 1918.1b94: \SystemRoot\System32\drivers\avgidsdrivera.sys:
  1028. 1918.1b94: CreationTime: 2014-07-21T17:03:12.000000000Z
  1029. 1918.1b94: LastWriteTime: 2014-07-21T17:03:12.000000000Z
  1030. 1918.1b94: ChangeTime: 2014-09-03T08:41:05.719000000Z
  1031. 1918.1b94: FileAttributes: 0x20
  1032. 1918.1b94: Size: 0x3bb18
  1033. 1918.1b94: NT Headers: 0xe0
  1034. 1918.1b94: Timestamp: 0x53cd63ec
  1035. 1918.1b94: Machine: 0x8664 - amd64
  1036. 1918.1b94: Timestamp: 0x53cd63ec
  1037. 1918.1b94: Image Version: 6.1
  1038. 1918.1b94: SizeOfImage: 0x44000 (278528)
  1039. 1918.1b94: Resource Dir: 0x42000 LB 0x53c
  1040. 1918.1b94: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x0)]
  1041. 1918.1b94: [Raw version resource data: 0x42058 LB 0x4e4, codepage 0x4e4 (reserved 0x0)]
  1042. 1918.1b94: ProductName: AVG Internet Security
  1043. 1918.1b94: ProductVersion: 14.0.0.4760
  1044. 1918.1b94: FileVersion: 14.0.0.4760
  1045. 1918.1b94: SpecialBuild: AvgVC10_2014_0721_210006(4760), SVNRev dfdd661531917266a37baed70275b67eed92e174 (release/HotFix2014-07), av
  1046. 1918.1b94: PrivateBuild: x64 Release_Unicode_DRIVER_wlh
  1047. 1918.1b94: FileDescription: AVG IDS Application Activity Monitor Driver.
  1048. 1918.1b94: \SystemRoot\System32\drivers\avgidsha.sys:
  1049. 1918.1b94: CreationTime: 2014-06-17T12:06:24.000000000Z
  1050. 1918.1b94: LastWriteTime: 2014-06-17T12:06:24.000000000Z
  1051. 1918.1b94: ChangeTime: 2014-07-13T06:19:26.780200000Z
  1052. 1918.1b94: FileAttributes: 0x20
  1053. 1918.1b94: Size: 0x2e918
  1054. 1918.1b94: NT Headers: 0xe0
  1055. 1918.1b94: Timestamp: 0x53a04b5c
  1056. 1918.1b94: Machine: 0x8664 - amd64
  1057. 1918.1b94: Timestamp: 0x53a04b5c
  1058. 1918.1b94: Image Version: 6.1
  1059. 1918.1b94: SizeOfImage: 0x31000 (200704)
  1060. 1918.1b94: Resource Dir: 0x2f000 LB 0x54c
  1061. 1918.1b94: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x0)]
  1062. 1918.1b94: [Raw version resource data: 0x2f058 LB 0x4f4, codepage 0x4e4 (reserved 0x0)]
  1063. 1918.1b94: ProductName: AVG Internet Security
  1064. 1918.1b94: ProductVersion: 14.0.0.4714
  1065. 1918.1b94: FileVersion: 14.0.0.4714
  1066. 1918.1b94: SpecialBuild: AvgVC10_2014_0617_160322(4714), SVNRev 6b87abe1b566d287d38b9fc5faf4290f8510e7ae (release/SmallUpdate2014-04_release), av
  1067. 1918.1b94: PrivateBuild: x64 Release_Unicode_DRIVER_wlh
  1068. 1918.1b94: FileDescription: AVG Application Activity Monitor Helper Driver
  1069. 1918.1b94: \SystemRoot\System32\drivers\avgtdia.sys:
  1070. 1918.1b94: CreationTime: 2014-10-20T11:15:50.000000000Z
  1071. 1918.1b94: LastWriteTime: 2014-10-20T11:15:50.000000000Z
  1072. 1918.1b94: ChangeTime: 2014-11-24T06:14:40.362004800Z
  1073. 1918.1b94: FileAttributes: 0x20
  1074. 1918.1b94: Size: 0x41b18
  1075. 1918.1b94: NT Headers: 0xd0
  1076. 1918.1b94: Timestamp: 0x54451912
  1077. 1918.1b94: Machine: 0x8664 - amd64
  1078. 1918.1b94: Timestamp: 0x54451912
  1079. 1918.1b94: Image Version: 6.1
  1080. 1918.1b94: SizeOfImage: 0x45000 (282624)
  1081. 1918.1b94: Resource Dir: 0x43000 LB 0x508
  1082. 1918.1b94: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x0)]
  1083. 1918.1b94: [Raw version resource data: 0x43058 LB 0x4b0, codepage 0x4e4 (reserved 0x0)]
  1084. 1918.1b94: ProductName: AVG Internet Security
  1085. 1918.1b94: ProductVersion: 14.0.0.4790
  1086. 1918.1b94: FileVersion: 14.0.0.4790
  1087. 1918.1b94: SpecialBuild: AvgVC10_2014_1020_155858(4790), SVNRev f279ea93ed396e8bfd3f999e74bc58082beb907f (release/HotFix2014-08), av
  1088. 1918.1b94: PrivateBuild: x64 Release_Unicode_DRIVER_wnet
  1089. 1918.1b94: FileDescription: AVG Network connection watcher
  1090. 1918.1b94: \SystemRoot\System32\drivers\avgloga.sys:
  1091. 1918.1b94: CreationTime: 2014-06-17T12:07:12.000000000Z
  1092. 1918.1b94: LastWriteTime: 2014-06-17T12:07:12.000000000Z
  1093. 1918.1b94: ChangeTime: 2014-07-13T06:19:21.328200000Z
  1094. 1918.1b94: FileAttributes: 0x20
  1095. 1918.1b94: Size: 0x50518
  1096. 1918.1b94: NT Headers: 0xf0
  1097. 1918.1b94: Timestamp: 0x53a04b72
  1098. 1918.1b94: Machine: 0x8664 - amd64
  1099. 1918.1b94: Timestamp: 0x53a04b72
  1100. 1918.1b94: Image Version: 6.1
  1101. 1918.1b94: SizeOfImage: 0x53000 (339968)
  1102. 1918.1b94: Resource Dir: 0x51000 LB 0x50c
  1103. 1918.1b94: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x0)]
  1104. 1918.1b94: [Raw version resource data: 0x51058 LB 0x4b4, codepage 0x4e4 (reserved 0x0)]
  1105. 1918.1b94: ProductName: AVG Internet Security
  1106. 1918.1b94: ProductVersion: 14.0.0.4714
  1107. 1918.1b94: FileVersion: 14.0.0.4714
  1108. 1918.1b94: SpecialBuild: AvgVC10_2014_0617_160322(4714), SVNRev 6b87abe1b566d287d38b9fc5faf4290f8510e7ae (release/SmallUpdate2014-04_release), av
  1109. 1918.1b94: PrivateBuild: x64 Release_Unicode_DRIVER_wnet
  1110. 1918.1b94: FileDescription: AVG Logging Driver
  1111. 1918.1b94: \SystemRoot\System32\drivers\avgldx64.sys:
  1112. 1918.1b94: CreationTime: 2014-10-24T06:20:06.000000000Z
  1113. 1918.1b94: LastWriteTime: 2014-10-24T06:20:06.000000000Z
  1114. 1918.1b94: ChangeTime: 2014-11-24T06:13:58.801004800Z
  1115. 1918.1b94: FileAttributes: 0x20
  1116. 1918.1b94: Size: 0x3a118
  1117. 1918.1b94: NT Headers: 0xd8
  1118. 1918.1b94: Timestamp: 0x544a19c1
  1119. 1918.1b94: Machine: 0x8664 - amd64
  1120. 1918.1b94: Timestamp: 0x544a19c1
  1121. 1918.1b94: Image Version: 6.1
  1122. 1918.1b94: SizeOfImage: 0x3f000 (258048)
  1123. 1918.1b94: Resource Dir: 0x3d000 LB 0x4fc
  1124. 1918.1b94: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x0)]
  1125. 1918.1b94: [Raw version resource data: 0x3d058 LB 0x4a4, codepage 0x4e4 (reserved 0x0)]
  1126. 1918.1b94: ProductName: AVG Internet Security
  1127. 1918.1b94: ProductVersion: 14.0.0.4791
  1128. 1918.1b94: FileVersion: 14.0.0.4791
  1129. 1918.1b94: SpecialBuild: AvgVC10_2014_1024_110127(4791), SVNRev 76eaf36d34c0826cbc2379eb9fab04a59739a8a0 (release/HotFix2014-08), av
  1130. 1918.1b94: PrivateBuild: x64 Release_Unicode_DRIVER_wnet
  1131. 1918.1b94: FileDescription: AVG AVI Loader Driver
  1132. 1918.1b94: \SystemRoot\System32\drivers\avgdiska.sys:
  1133. 1918.1b94: CreationTime: 2014-06-30T08:43:02.000000000Z
  1134. 1918.1b94: LastWriteTime: 2014-06-30T08:43:02.000000000Z
  1135. 1918.1b94: ChangeTime: 2014-08-21T05:54:31.670000000Z
  1136. 1918.1b94: FileAttributes: 0x20
  1137. 1918.1b94: Size: 0x25318
  1138. 1918.1b94: NT Headers: 0xe0
  1139. 1918.1b94: Timestamp: 0x53b13f33
  1140. 1918.1b94: Machine: 0x8664 - amd64
  1141. 1918.1b94: Timestamp: 0x53b13f33
  1142. 1918.1b94: Image Version: 6.1
  1143. 1918.1b94: SizeOfImage: 0x29000 (167936)
  1144. 1918.1b94: Resource Dir: 0x27000 LB 0x4fc
  1145. 1918.1b94: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x0)]
  1146. 1918.1b94: [Raw version resource data: 0x27058 LB 0x4a4, codepage 0x4e4 (reserved 0x0)]
  1147. 1918.1b94: ProductName: AVG Internet Security
  1148. 1918.1b94: ProductVersion: 14.0.0.4741
  1149. 1918.1b94: FileVersion: 14.0.0.4741
  1150. 1918.1b94: SpecialBuild: AvgVC10_2014_0630_124028(4741), SVNRev ddde18c0a639900c76fda086a939c074be8995d0 (release/HotFix2014-06), av
  1151. 1918.1b94: PrivateBuild: x64 Release_Unicode_DRIVER_wlh
  1152. 1918.1b94: FileDescription: AVG File Vault Driver
  1153. 1918.1b94: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox'
  1154. 1918.1b94: Calling main()
  1155. 1918.1b94: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2
  1156. 1918.1b94: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox'
  1157. 1918.1b94: '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
  1158. 1918.1b94: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe)
  1159. 1918.1b94: SUPR3HardenedMain: Final process, opening VBoxDrv...
  1160. 1918.1b94: supR3HardenedEarlyCompact: Removed heap 1 (0x00000000290000 LB 0x400000)
  1161. 1918.1b94: supR3HardNtEnableThreadCreation:
  1162. 1918.1b94: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxSupLib.dll)
  1163. 1918.1b94: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxSupLib.dll
  1164. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000744590:C:\Windows\system32 [calling]
  1165. 1918.1b94: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
  1166. 1918.1b94: supR3HardenedDllNotificationCallback: load 000007fef6f30000 LB 0x00005000 C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL [fFlags=0x0]
  1167. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
  1168. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
  1169. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000744f10:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Autodesk\Backburner\;C:\Program Files (x86)\Common Files\Autodesk Shared\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\FPC\2.6.4\bin\i386-Win32;C:\Program Files (x86)\Livestreamer;C:\Program Files (x86)\Java\jre7\bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\Git\cmd;C:\Program Files (x86)\GNU\GnuPG\pub;C:\Program Files (x86)\Java\jdk1.8.0_60\bin;C:\Python34;C:\Python34\Scripts [calling]
  1170. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef6f30000 'C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL'
  1171. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
  1172. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000744f10:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Autodesk\Backburner\;C:\Program Files (x86)\Common Files\Autodesk Shared\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\FPC\2.6.4\bin\i386-Win32;C:\Program Files (x86)\Livestreamer;C:\Program Files (x86)\Java\jre7\bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\Git\cmd;C:\Program Files (x86)\GNU\GnuPG\pub;C:\Program Files (x86)\Java\jdk1.8.0_60\bin;C:\Python34;C:\Python34\Scripts [calling]
  1173. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef6f30000 'C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL'
  1174. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef6f30000 'C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL'
  1175. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1176. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'crypt32.dll'.
  1177. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msasn1.dll'.
  1178. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'rpcrt4.dll'.
  1179. 1918.1b94: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\wintrust.dll)
  1180. 1918.1b94: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\wintrust.dll
  1181. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  1182. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  1183. 1918.1b94: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll)
  1184. 1918.1b94: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll
  1185. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msasn1.dll'...
  1186. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'msasn1.dll' -> '\Device\HarddiskVolume4\Windows\System32\msasn1.dll' [rcNtRedir=0xc0150008]
  1187. 1918.1b94: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\msasn1.dll)
  1188. 1918.1b94: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\msasn1.dll
  1189. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'crypt32.dll'...
  1190. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'crypt32.dll' -> '\Device\HarddiskVolume4\Windows\System32\crypt32.dll' [rcNtRedir=0xc0150008]
  1191. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1192. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msasn1.dll'.
  1193. 1918.1b94: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\crypt32.dll)
  1194. 1918.1b94: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\crypt32.dll
  1195. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1196. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1197. 1918.1b94: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\msvcrt.dll)
  1198. 1918.1b94: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\msvcrt.dll
  1199. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msasn1.dll'...
  1200. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'msasn1.dll' -> '\Device\HarddiskVolume4\Windows\System32\msasn1.dll' [rcNtRedir=0xc0150008]
  1201. 1918.1b94: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\msasn1.dll [lacks WinVerifyTrust]
  1202. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1203. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1204. 1918.1b94: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1205. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\Wintrust.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000744590:C:\Windows\system32 [calling]
  1206. 1918.1b94: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
  1207. 1918.1b94: supR3HardenedDllNotificationCallback: load 000007fefcc80000 LB 0x0003a000 C:\Windows\system32\Wintrust.dll [fFlags=0x0]
  1208. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
  1209. 1918.1b94: supR3HardenedDllNotificationCallback: load 000007fefe5d0000 LB 0x0009f000 C:\Windows\system32\msvcrt.dll [fFlags=0x0]
  1210. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1211. 1918.1b94: supR3HardenedDllNotificationCallback: load 000007fefccc0000 LB 0x0016c000 C:\Windows\system32\CRYPT32.dll [fFlags=0x0]
  1212. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
  1213. 1918.1b94: supR3HardenedDllNotificationCallback: load 000007fefebc0000 LB 0x0000f000 C:\Windows\system32\MSASN1.dll [fFlags=0x0]
  1214. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\msasn1.dll [lacks WinVerifyTrust]
  1215. 1918.1b94: supR3HardenedDllNotificationCallback: load 000007fefd0b0000 LB 0x0012d000 C:\Windows\system32\RPCRT4.dll [fFlags=0x0]
  1216. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  1217. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefcc80000 'C:\Windows\system32\Wintrust.dll'
  1218. 1918.1b94: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\bcrypt.dll)
  1219. 1918.1b94: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\bcrypt.dll
  1220. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\bcrypt.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000771ba0:C:\Windows\system32 [calling]
  1221. 1918.1b94: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
  1222. 1918.1b94: supR3HardenedDllNotificationCallback: load 000007fefc330000 LB 0x00022000 C:\Windows\system32\bcrypt.dll [fFlags=0x0]
  1223. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
  1224. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefc330000 'C:\Windows\system32\bcrypt.dll'
  1225. 1918.1b94: bcrypt.dll loaded at 000007fefc330000, BCryptOpenAlgorithmProvider at 000007fefc332640, preloading providers:
  1226. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'advapi32.dll'.
  1227. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'bcrypt.dll'.
  1228. 1918.1b94: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\bcryptprimitives.dll)
  1229. 1918.1b94: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\bcryptprimitives.dll
  1230. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcrypt.dll'...
  1231. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcrypt.dll' -> '\Device\HarddiskVolume4\Windows\System32\bcrypt.dll' [rcNtRedir=0xc0150008]
  1232. 1918.1b94: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
  1233. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
  1234. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
  1235. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1236. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'rpcrt4.dll'.
  1237. 1918.1b94: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\advapi32.dll)
  1238. 1918.1b94: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\advapi32.dll
  1239. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  1240. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  1241. 1918.1b94: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  1242. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1243. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1244. 1918.1b94: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1245. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\bcryptprimitives.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000744f10:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Autodesk\Backburner\;C:\Program Files (x86)\Common Files\Autodesk Shared\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\FPC\2.6.4\bin\i386-Win32;C:\Program Files (x86)\Livestreamer;C:\Program Files (x86)\Java\jre7\bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\Git\cmd;C:\Program Files (x86)\GNU\GnuPG\pub;C:\Program Files (x86)\Java\jdk1.8.0_60\bin;C:\Python34;C:\Python34\Scripts [calling]
  1246. 1918.1b94: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust]
  1247. 1918.1b94: supR3HardenedDllNotificationCallback: load 000007fefbe10000 LB 0x0004c000 C:\Windows\system32\bcryptprimitives.dll [fFlags=0x0]
  1248. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust]
  1249. 1918.1b94: supR3HardenedDllNotificationCallback: load 000007fefe780000 LB 0x000db000 C:\Windows\system32\ADVAPI32.dll [fFlags=0x0]
  1250. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
  1251. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'msvcrt.dll'.
  1252. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'rpcrt4.dll'.
  1253. 1918.1b94: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\sechost.dll)
  1254. 1918.1b94: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\sechost.dll
  1255. 1918.1b94: supR3HardenedDllNotificationCallback: load 000007fefd300000 LB 0x0001f000 C:\Windows\SYSTEM32\sechost.dll [fFlags=0x0]
  1256. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\sechost.dll [lacks WinVerifyTrust]
  1257. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefbe10000 'C:\Windows\system32\bcryptprimitives.dll'
  1258. 1918.1b94: BCryptOpenAlgorithmProvider(,'MD2',0,0) -> 0x0 (hAlgo=0000000000773280)
  1259. 1918.1b94: BCryptOpenAlgorithmProvider(,'MD4',0,0) -> 0x0 (hAlgo=0000000000776140)
  1260. 1918.1b94: BCryptOpenAlgorithmProvider(,'MD5',0,0) -> 0x0 (hAlgo=0000000000776260)
  1261. 1918.1b94: BCryptOpenAlgorithmProvider(,'SHA1',0,0) -> 0x0 (hAlgo=0000000000776470)
  1262. 1918.1b94: BCryptOpenAlgorithmProvider(,'SHA256',0,0) -> 0x0 (hAlgo=0000000000776590)
  1263. 1918.1b94: BCryptOpenAlgorithmProvider(,'SHA512',0,0) -> 0x0 (hAlgo=00000000007766b0)
  1264. 1918.1b94: BCryptOpenAlgorithmProvider(,'RSA',0,0) -> 0x0 (hAlgo=00000000007768f0)
  1265. 1918.1b94: BCryptOpenAlgorithmProvider(,'DSA',0,0) -> 0x0 (hAlgo=0000000000776a10)
  1266. 1918.1b94: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\cryptsp.dll)
  1267. 1918.1b94: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\cryptsp.dll
  1268. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  1269. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  1270. 1918.1b94: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  1271. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1272. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1273. 1918.1b94: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1274. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\CRYPTSP.dll (Input=CRYPTSP.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000744f10:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Autodesk\Backburner\;C:\Program Files (x86)\Common Files\Autodesk Shared\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\FPC\2.6.4\bin\i386-Win32;C:\Program Files (x86)\Livestreamer;C:\Program Files (x86)\Java\jre7\bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\Git\cmd;C:\Program Files (x86)\GNU\GnuPG\pub;C:\Program Files (x86)\Java\jdk1.8.0_60\bin;C:\Python34;C:\Python34\Scripts [calling]
  1275. 1918.1b94: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\cryptsp.dll [lacks WinVerifyTrust]
  1276. 1918.1b94: supR3HardenedDllNotificationCallback: load 000007fefc1a0000 LB 0x00017000 C:\Windows\system32\CRYPTSP.dll [fFlags=0x0]
  1277. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\cryptsp.dll [lacks WinVerifyTrust]
  1278. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefc1a0000 'C:\Windows\system32\CRYPTSP.dll'
  1279. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1280. 1918.1b94: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\rsaenh.dll)
  1281. 1918.1b94: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\rsaenh.dll
  1282. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1283. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1284. 1918.1b94: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1285. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000744f10:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Autodesk\Backburner\;C:\Program Files (x86)\Common Files\Autodesk Shared\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\FPC\2.6.4\bin\i386-Win32;C:\Program Files (x86)\Livestreamer;C:\Program Files (x86)\Java\jre7\bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\Git\cmd;C:\Program Files (x86)\GNU\GnuPG\pub;C:\Program Files (x86)\Java\jdk1.8.0_60\bin;C:\Python34;C:\Python34\Scripts [calling]
  1286. 1918.1b94: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
  1287. 1918.1b94: supR3HardenedDllNotificationCallback: load 000007fefbed0000 LB 0x00047000 C:\Windows\system32\rsaenh.dll [fFlags=0x0]
  1288. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
  1289. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefbed0000 'C:\Windows\system32\rsaenh.dll'
  1290. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
  1291. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\ADVAPI32.dll (Input=ADVAPI32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000744f10:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Autodesk\Backburner\;C:\Program Files (x86)\Common Files\Autodesk Shared\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\FPC\2.6.4\bin\i386-Win32;C:\Program Files (x86)\Livestreamer;C:\Program Files (x86)\Java\jre7\bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\Git\cmd;C:\Program Files (x86)\GNU\GnuPG\pub;C:\Program Files (x86)\Java\jdk1.8.0_60\bin;C:\Python34;C:\Python34\Scripts [calling]
  1292. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefe780000 'C:\Windows\system32\ADVAPI32.dll'
  1293. 1918.1b94: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\cryptbase.dll)
  1294. 1918.1b94: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\cryptbase.dll
  1295. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\CRYPTBASE.dll (Input=CRYPTBASE.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000744f10:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Autodesk\Backburner\;C:\Program Files (x86)\Common Files\Autodesk Shared\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\FPC\2.6.4\bin\i386-Win32;C:\Program Files (x86)\Livestreamer;C:\Program Files (x86)\Java\jre7\bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\Git\cmd;C:\Program Files (x86)\GNU\GnuPG\pub;C:\Program Files (x86)\Java\jdk1.8.0_60\bin;C:\Python34;C:\Python34\Scripts [calling]
  1296. 1918.1b94: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\cryptbase.dll [lacks WinVerifyTrust]
  1297. 1918.1b94: supR3HardenedDllNotificationCallback: load 000007fefc7f0000 LB 0x0000f000 C:\Windows\system32\CRYPTBASE.dll [fFlags=0x0]
  1298. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\cryptbase.dll [lacks WinVerifyTrust]
  1299. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefc7f0000 'C:\Windows\system32\CRYPTBASE.dll'
  1300. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
  1301. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\kernel32.dll (Input=kernel32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000744f10:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Autodesk\Backburner\;C:\Program Files (x86)\Common Files\Autodesk Shared\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\FPC\2.6.4\bin\i386-Win32;C:\Program Files (x86)\Livestreamer;C:\Program Files (x86)\Java\jre7\bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\Git\cmd;C:\Program Files (x86)\GNU\GnuPG\pub;C:\Program Files (x86)\Java\jdk1.8.0_60\bin;C:\Python34;C:\Python34\Scripts [calling]
  1302. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=0000000077630000 'C:\Windows\system32\kernel32.dll'
  1303. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
  1304. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\WINTRUST.DLL (Input=WINTRUST.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000744f10:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Autodesk\Backburner\;C:\Program Files (x86)\Common Files\Autodesk Shared\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\FPC\2.6.4\bin\i386-Win32;C:\Program Files (x86)\Livestreamer;C:\Program Files (x86)\Java\jre7\bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\Git\cmd;C:\Program Files (x86)\GNU\GnuPG\pub;C:\Program Files (x86)\Java\jdk1.8.0_60\bin;C:\Python34;C:\Python34\Scripts [calling]
  1305. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefcc80000 'C:\Windows\system32\WINTRUST.DLL'
  1306. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
  1307. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\CRYPT32.dll (rcNtResolve=0xc0150008) *pfFlags=0x1002 pwszSearchPath=0000000000744f10:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Autodesk\Backburner\;C:\Program Files (x86)\Common Files\Autodesk Shared\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\FPC\2.6.4\bin\i386-Win32;C:\Program Files (x86)\Livestreamer;C:\Program Files (x86)\Java\jre7\bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\Git\cmd;C:\Program Files (x86)\GNU\GnuPG\pub;C:\Program Files (x86)\Java\jdk1.8.0_60\bin;C:\Python34;C:\Python34\Scripts [calling]
  1308. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefccc0000 'C:\Windows\system32\CRYPT32.dll'
  1309. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1310. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #16 'advapi32.dll'.
  1311. 1918.1b94: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\imagehlp.dll)
  1312. 1918.1b94: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\imagehlp.dll
  1313. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
  1314. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
  1315. 1918.1b94: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
  1316. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1317. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1318. 1918.1b94: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1319. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\imagehlp.dll (Input=imagehlp.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000744f10:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Autodesk\Backburner\;C:\Program Files (x86)\Common Files\Autodesk Shared\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\FPC\2.6.4\bin\i386-Win32;C:\Program Files (x86)\Livestreamer;C:\Program Files (x86)\Java\jre7\bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\Git\cmd;C:\Program Files (x86)\GNU\GnuPG\pub;C:\Program Files (x86)\Java\jdk1.8.0_60\bin;C:\Python34;C:\Python34\Scripts [calling]
  1320. 1918.1b94: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\imagehlp.dll [lacks WinVerifyTrust]
  1321. 1918.1b94: supR3HardenedDllNotificationCallback: load 000007fefd530000 LB 0x00019000 C:\Windows\system32\imagehlp.dll [fFlags=0x0]
  1322. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\imagehlp.dll [lacks WinVerifyTrust]
  1323. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefd530000 'C:\Windows\system32\imagehlp.dll'
  1324. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\cryptsp.dll [lacks WinVerifyTrust]
  1325. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\CRYPTSP.dll (Input=CRYPTSP.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000744f10:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Autodesk\Backburner\;C:\Program Files (x86)\Common Files\Autodesk Shared\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\FPC\2.6.4\bin\i386-Win32;C:\Program Files (x86)\Livestreamer;C:\Program Files (x86)\Java\jre7\bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\Git\cmd;C:\Program Files (x86)\GNU\GnuPG\pub;C:\Program Files (x86)\Java\jdk1.8.0_60\bin;C:\Python34;C:\Python34\Scripts [calling]
  1326. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefc1a0000 'C:\Windows\system32\CRYPTSP.dll'
  1327. 1918.1b94: \Device\HarddiskVolume4\Windows\System32\user32.dll: Owner is administrators group.
  1328. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'gdi32.dll'.
  1329. 1918.1b94: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\user32.dll)
  1330. 1918.1b94: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\user32.dll
  1331. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  1332. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  1333. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
  1334. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'lpk.dll'.
  1335. 1918.1b94: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\gdi32.dll)
  1336. 1918.1b94: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\gdi32.dll
  1337. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'lpk.dll'...
  1338. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'lpk.dll' -> '\Device\HarddiskVolume4\Windows\System32\lpk.dll' [rcNtRedir=0xc0150008]
  1339. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'gdi32.dll'.
  1340. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'user32.dll'.
  1341. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'usp10.dll'.
  1342. 1918.1b94: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\lpk.dll)
  1343. 1918.1b94: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\lpk.dll
  1344. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  1345. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  1346. 1918.1b94: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
  1347. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'usp10.dll'...
  1348. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'usp10.dll' -> '\Device\HarddiskVolume4\Windows\System32\usp10.dll' [rcNtRedir=0xc0150008]
  1349. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1350. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
  1351. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'gdi32.dll'.
  1352. 1918.1b94: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\usp10.dll)
  1353. 1918.1b94: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\usp10.dll
  1354. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  1355. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  1356. 1918.1b94: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
  1357. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  1358. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  1359. 1918.1b94: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  1360. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  1361. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  1362. 1918.1b94: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  1363. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  1364. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  1365. 1918.1b94: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
  1366. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1367. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1368. 1918.1b94: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1369. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\USER32.dll (Input=USER32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000744f10:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Autodesk\Backburner\;C:\Program Files (x86)\Common Files\Autodesk Shared\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\FPC\2.6.4\bin\i386-Win32;C:\Program Files (x86)\Livestreamer;C:\Program Files (x86)\Java\jre7\bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\Git\cmd;C:\Program Files (x86)\GNU\GnuPG\pub;C:\Program Files (x86)\Java\jdk1.8.0_60\bin;C:\Python34;C:\Python34\Scripts [calling]
  1370. 1918.1b94: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
  1371. 1918.1b94: supR3HardenedDllNotificationCallback: load 0000000077280000 LB 0x000fa000 C:\Windows\system32\USER32.dll [fFlags=0x0]
  1372. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
  1373. 1918.1b94: supR3HardenedDllNotificationCallback: load 000007fefe860000 LB 0x00067000 C:\Windows\system32\GDI32.dll [fFlags=0x0]
  1374. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  1375. 1918.1b94: supR3HardenedDllNotificationCallback: load 000007fefec30000 LB 0x0000e000 C:\Windows\system32\LPK.dll [fFlags=0x0]
  1376. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\lpk.dll [lacks WinVerifyTrust]
  1377. 1918.1b94: supR3HardenedDllNotificationCallback: load 000007fefcfe0000 LB 0x000c9000 C:\Windows\system32\USP10.dll [fFlags=0x0]
  1378. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\usp10.dll [lacks WinVerifyTrust]
  1379. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  1380. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\gdi32.dll (Input=gdi32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000744f10:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Autodesk\Backburner\;C:\Program Files (x86)\Common Files\Autodesk Shared\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\FPC\2.6.4\bin\i386-Win32;C:\Program Files (x86)\Livestreamer;C:\Program Files (x86)\Java\jre7\bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\Git\cmd;C:\Program Files (x86)\GNU\GnuPG\pub;C:\Program Files (x86)\Java\jdk1.8.0_60\bin;C:\Python34;C:\Python34\Scripts [calling]
  1381. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefe860000 'C:\Windows\system32\gdi32.dll'
  1382. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'user32.dll'.
  1383. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'gdi32.dll'.
  1384. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msctf.dll'.
  1385. 1918.1b94: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\imm32.dll)
  1386. 1918.1b94: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\imm32.dll
  1387. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msctf.dll'...
  1388. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'msctf.dll' -> '\Device\HarddiskVolume4\Windows\System32\msctf.dll' [rcNtRedir=0xc0150008]
  1389. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1390. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'user32.dll'.
  1391. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'gdi32.dll'.
  1392. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'imm32.dll'.
  1393. 1918.1b94: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\msctf.dll)
  1394. 1918.1b94: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\msctf.dll
  1395. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  1396. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  1397. 1918.1b94: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  1398. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  1399. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  1400. 1918.1b94: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
  1401. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'...
  1402. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume4\Windows\System32\imm32.dll' [rcNtRedir=0xc0150008]
  1403. 1918.1b94: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\imm32.dll [lacks WinVerifyTrust]
  1404. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  1405. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  1406. 1918.1b94: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  1407. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  1408. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  1409. 1918.1b94: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
  1410. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1411. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1412. 1918.1b94: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1413. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\IMM32.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000744f10:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Autodesk\Backburner\;C:\Program Files (x86)\Common Files\Autodesk Shared\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\FPC\2.6.4\bin\i386-Win32;C:\Program Files (x86)\Livestreamer;C:\Program Files (x86)\Java\jre7\bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\Git\cmd;C:\Program Files (x86)\GNU\GnuPG\pub;C:\Program Files (x86)\Java\jdk1.8.0_60\bin;C:\Python34;C:\Python34\Scripts [calling]
  1414. 1918.1b94: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\imm32.dll [lacks WinVerifyTrust]
  1415. 1918.1b94: supR3HardenedDllNotificationCallback: load 000007fefe670000 LB 0x0002e000 C:\Windows\system32\IMM32.DLL [fFlags=0x0]
  1416. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\imm32.dll [lacks WinVerifyTrust]
  1417. 1918.1b94: supR3HardenedDllNotificationCallback: load 000007fefe4c0000 LB 0x00109000 C:\Windows\system32\MSCTF.dll [fFlags=0x0]
  1418. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\msctf.dll [lacks WinVerifyTrust]
  1419. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefe670000 'C:\Windows\system32\IMM32.DLL'
  1420. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=0000000077280000 'C:\Windows\system32\USER32.dll'
  1421. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'bcrypt.dll'.
  1422. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'.
  1423. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'msasn1.dll'.
  1424. 1918.1b94: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\ncrypt.dll)
  1425. 1918.1b94: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\ncrypt.dll
  1426. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msasn1.dll'...
  1427. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'msasn1.dll' -> '\Device\HarddiskVolume4\Windows\System32\msasn1.dll' [rcNtRedir=0xc0150008]
  1428. 1918.1b94: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\msasn1.dll [lacks WinVerifyTrust]
  1429. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1430. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1431. 1918.1b94: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1432. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcrypt.dll'...
  1433. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcrypt.dll' -> '\Device\HarddiskVolume4\Windows\System32\bcrypt.dll' [rcNtRedir=0xc0150008]
  1434. 1918.1b94: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
  1435. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\ncrypt.dll (Input=ncrypt.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000744f10:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Autodesk\Backburner\;C:\Program Files (x86)\Common Files\Autodesk Shared\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\FPC\2.6.4\bin\i386-Win32;C:\Program Files (x86)\Livestreamer;C:\Program Files (x86)\Java\jre7\bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\Git\cmd;C:\Program Files (x86)\GNU\GnuPG\pub;C:\Program Files (x86)\Java\jdk1.8.0_60\bin;C:\Python34;C:\Python34\Scripts [calling]
  1436. 1918.1b94: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\ncrypt.dll [lacks WinVerifyTrust]
  1437. 1918.1b94: supR3HardenedDllNotificationCallback: load 000007fefc360000 LB 0x0004d000 C:\Windows\system32\ncrypt.dll [fFlags=0x0]
  1438. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\ncrypt.dll [lacks WinVerifyTrust]
  1439. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefc360000 'C:\Windows\system32\ncrypt.dll'
  1440. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
  1441. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\bcrypt.dll (Input=bcrypt.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000744f10:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Autodesk\Backburner\;C:\Program Files (x86)\Common Files\Autodesk Shared\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\FPC\2.6.4\bin\i386-Win32;C:\Program Files (x86)\Livestreamer;C:\Program Files (x86)\Java\jre7\bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\Git\cmd;C:\Program Files (x86)\GNU\GnuPG\pub;C:\Program Files (x86)\Java\jdk1.8.0_60\bin;C:\Python34;C:\Python34\Scripts [calling]
  1442. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefc330000 'C:\Windows\system32\bcrypt.dll'
  1443. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1444. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #17 'rpcrt4.dll'.
  1445. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'profapi.dll'.
  1446. 1918.1b94: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\userenv.dll)
  1447. 1918.1b94: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\userenv.dll
  1448. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'profapi.dll'...
  1449. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'profapi.dll' -> '\Device\HarddiskVolume4\Windows\System32\profapi.dll' [rcNtRedir=0xc0150008]
  1450. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1451. 1918.1b94: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\profapi.dll)
  1452. 1918.1b94: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\profapi.dll
  1453. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  1454. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  1455. 1918.1b94: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  1456. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1457. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1458. 1918.1b94: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1459. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1460. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1461. 1918.1b94: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1462. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\USERENV.dll (Input=USERENV.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000744f10:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Autodesk\Backburner\;C:\Program Files (x86)\Common Files\Autodesk Shared\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\FPC\2.6.4\bin\i386-Win32;C:\Program Files (x86)\Livestreamer;C:\Program Files (x86)\Java\jre7\bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\Git\cmd;C:\Program Files (x86)\GNU\GnuPG\pub;C:\Program Files (x86)\Java\jdk1.8.0_60\bin;C:\Python34;C:\Python34\Scripts [calling]
  1463. 1918.1b94: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\userenv.dll [lacks WinVerifyTrust]
  1464. 1918.1b94: supR3HardenedDllNotificationCallback: load 000007fefcaa0000 LB 0x0001e000 C:\Windows\system32\USERENV.dll [fFlags=0x0]
  1465. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\userenv.dll [lacks WinVerifyTrust]
  1466. 1918.1b94: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\profapi.dll [lacks WinVerifyTrust]
  1467. 1918.1b94: supR3HardenedDllNotificationCallback: load 000007fefca90000 LB 0x0000f000 C:\Windows\system32\profapi.dll [fFlags=0x0]
  1468. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\profapi.dll [lacks WinVerifyTrust]
  1469. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefcaa0000 'C:\Windows\system32\USERENV.dll'
  1470. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-Win-Security-SDDL-L1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000744f10:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Autodesk\Backburner\;C:\Program Files (x86)\Common Files\Autodesk Shared\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\FPC\2.6.4\bin\i386-Win32;C:\Program Files (x86)\Livestreamer;C:\Program Files (x86)\Java\jre7\bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\Git\cmd;C:\Program Files (x86)\GNU\GnuPG\pub;C:\Program Files (x86)\Java\jdk1.8.0_60\bin;C:\Python34;C:\Python34\Scripts [calling]
  1471. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefd300000 'API-MS-Win-Security-SDDL-L1-1-0.dll'
  1472. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-Win-Security-SDDL-L1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000744f10:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Autodesk\Backburner\;C:\Program Files (x86)\Common Files\Autodesk Shared\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\FPC\2.6.4\bin\i386-Win32;C:\Program Files (x86)\Livestreamer;C:\Program Files (x86)\Java\jre7\bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\Git\cmd;C:\Program Files (x86)\GNU\GnuPG\pub;C:\Program Files (x86)\Java\jdk1.8.0_60\bin;C:\Python34;C:\Python34\Scripts [calling]
  1473. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefd300000 'API-MS-Win-Security-SDDL-L1-1-0.dll'
  1474. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1475. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #16 'rpcrt4.dll'.
  1476. 1918.1b94: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\gpapi.dll)
  1477. 1918.1b94: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\gpapi.dll
  1478. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  1479. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  1480. 1918.1b94: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  1481. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1482. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1483. 1918.1b94: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1484. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\GPAPI.dll (Input=GPAPI.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000744f10:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Autodesk\Backburner\;C:\Program Files (x86)\Common Files\Autodesk Shared\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\FPC\2.6.4\bin\i386-Win32;C:\Program Files (x86)\Livestreamer;C:\Program Files (x86)\Java\jre7\bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\Git\cmd;C:\Program Files (x86)\GNU\GnuPG\pub;C:\Program Files (x86)\Java\jdk1.8.0_60\bin;C:\Python34;C:\Python34\Scripts [calling]
  1485. 1918.1b94: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\gpapi.dll [lacks WinVerifyTrust]
  1486. 1918.1b94: supR3HardenedDllNotificationCallback: load 000007fefbcb0000 LB 0x0001b000 C:\Windows\system32\GPAPI.dll [fFlags=0x0]
  1487. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\gpapi.dll [lacks WinVerifyTrust]
  1488. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefbcb0000 'C:\Windows\system32\GPAPI.dll'
  1489. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-WIN-Service-Management-L1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000744f10:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Autodesk\Backburner\;C:\Program Files (x86)\Common Files\Autodesk Shared\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\FPC\2.6.4\bin\i386-Win32;C:\Program Files (x86)\Livestreamer;C:\Program Files (x86)\Java\jre7\bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\Git\cmd;C:\Program Files (x86)\GNU\GnuPG\pub;C:\Program Files (x86)\Java\jdk1.8.0_60\bin;C:\Python34;C:\Python34\Scripts [calling]
  1490. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefd300000 'API-MS-WIN-Service-Management-L1-1-0.dll'
  1491. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  1492. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rpcrt4.dll (Input=rpcrt4.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000744f10:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Autodesk\Backburner\;C:\Program Files (x86)\Common Files\Autodesk Shared\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\FPC\2.6.4\bin\i386-Win32;C:\Program Files (x86)\Livestreamer;C:\Program Files (x86)\Java\jre7\bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\Git\cmd;C:\Program Files (x86)\GNU\GnuPG\pub;C:\Program Files (x86)\Java\jdk1.8.0_60\bin;C:\Python34;C:\Python34\Scripts [calling]
  1493. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefd0b0000 'C:\Windows\system32\rpcrt4.dll'
  1494. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-WIN-Service-Management-L2-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000744f10:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Autodesk\Backburner\;C:\Program Files (x86)\Common Files\Autodesk Shared\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\FPC\2.6.4\bin\i386-Win32;C:\Program Files (x86)\Livestreamer;C:\Program Files (x86)\Java\jre7\bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\Git\cmd;C:\Program Files (x86)\GNU\GnuPG\pub;C:\Program Files (x86)\Java\jdk1.8.0_60\bin;C:\Python34;C:\Python34\Scripts [calling]
  1495. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefd300000 'API-MS-WIN-Service-Management-L2-1-0.dll'
  1496. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-Win-Security-SDDL-L1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000744f10:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Autodesk\Backburner\;C:\Program Files (x86)\Common Files\Autodesk Shared\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\FPC\2.6.4\bin\i386-Win32;C:\Program Files (x86)\Livestreamer;C:\Program Files (x86)\Java\jre7\bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\Git\cmd;C:\Program Files (x86)\GNU\GnuPG\pub;C:\Program Files (x86)\Java\jdk1.8.0_60\bin;C:\Python34;C:\Python34\Scripts [calling]
  1497. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefd300000 'API-MS-Win-Security-SDDL-L1-1-0.dll'
  1498. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1499. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'advapi32.dll'.
  1500. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'crypt32.dll'.
  1501. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'wldap32.dll'.
  1502. 1918.1b94: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\cryptnet.dll)
  1503. 1918.1b94: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\cryptnet.dll
  1504. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'wldap32.dll'...
  1505. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'wldap32.dll' -> '\Device\HarddiskVolume4\Windows\System32\wldap32.dll' [rcNtRedir=0xc0150008]
  1506. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1507. 1918.1b94: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\Wldap32.dll)
  1508. 1918.1b94: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\Wldap32.dll
  1509. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'crypt32.dll'...
  1510. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'crypt32.dll' -> '\Device\HarddiskVolume4\Windows\System32\crypt32.dll' [rcNtRedir=0xc0150008]
  1511. 1918.1b94: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
  1512. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
  1513. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
  1514. 1918.1b94: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
  1515. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1516. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1517. 1918.1b94: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1518. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1519. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1520. 1918.1b94: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1521. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\cryptnet.dll (Input=cryptnet.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000744f10:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Autodesk\Backburner\;C:\Program Files (x86)\Common Files\Autodesk Shared\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\FPC\2.6.4\bin\i386-Win32;C:\Program Files (x86)\Livestreamer;C:\Program Files (x86)\Java\jre7\bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\Git\cmd;C:\Program Files (x86)\GNU\GnuPG\pub;C:\Program Files (x86)\Java\jdk1.8.0_60\bin;C:\Python34;C:\Python34\Scripts [calling]
  1522. 1918.1b94: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
  1523. 1918.1b94: supR3HardenedDllNotificationCallback: load 000007fef4ee0000 LB 0x00027000 C:\Windows\system32\cryptnet.dll [fFlags=0x0]
  1524. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
  1525. 1918.1b94: supR3HardenedDllNotificationCallback: load 000007fefcf80000 LB 0x00052000 C:\Windows\system32\WLDAP32.dll [fFlags=0x0]
  1526. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\Wldap32.dll [lacks WinVerifyTrust]
  1527. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
  1528. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x1002 pwszSearchPath=0000000000744f10:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Autodesk\Backburner\;C:\Program Files (x86)\Common Files\Autodesk Shared\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\FPC\2.6.4\bin\i386-Win32;C:\Program Files (x86)\Livestreamer;C:\Program Files (x86)\Java\jre7\bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\Git\cmd;C:\Program Files (x86)\GNU\GnuPG\pub;C:\Program Files (x86)\Java\jdk1.8.0_60\bin;C:\Python34;C:\Python34\Scripts [calling]
  1529. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef4ee0000 'C:\Windows\system32\cryptnet.dll'
  1530. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
  1531. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x1002 pwszSearchPath=0000000000744f10:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Autodesk\Backburner\;C:\Program Files (x86)\Common Files\Autodesk Shared\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\FPC\2.6.4\bin\i386-Win32;C:\Program Files (x86)\Livestreamer;C:\Program Files (x86)\Java\jre7\bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\Git\cmd;C:\Program Files (x86)\GNU\GnuPG\pub;C:\Program Files (x86)\Java\jdk1.8.0_60\bin;C:\Python34;C:\Python34\Scripts [calling]
  1532. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef4ee0000 'C:\Windows\system32\cryptnet.dll'
  1533. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
  1534. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x1002 pwszSearchPath=0000000000744f10:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Autodesk\Backburner\;C:\Program Files (x86)\Common Files\Autodesk Shared\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\FPC\2.6.4\bin\i386-Win32;C:\Program Files (x86)\Livestreamer;C:\Program Files (x86)\Java\jre7\bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\Git\cmd;C:\Program Files (x86)\GNU\GnuPG\pub;C:\Program Files (x86)\Java\jdk1.8.0_60\bin;C:\Python34;C:\Python34\Scripts [calling]
  1535. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef4ee0000 'C:\Windows\system32\cryptnet.dll'
  1536. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
  1537. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x1002 pwszSearchPath=0000000000744f10:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Autodesk\Backburner\;C:\Program Files (x86)\Common Files\Autodesk Shared\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\FPC\2.6.4\bin\i386-Win32;C:\Program Files (x86)\Livestreamer;C:\Program Files (x86)\Java\jre7\bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\Git\cmd;C:\Program Files (x86)\GNU\GnuPG\pub;C:\Program Files (x86)\Java\jdk1.8.0_60\bin;C:\Python34;C:\Python34\Scripts [calling]
  1538. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef4ee0000 'C:\Windows\system32\cryptnet.dll'
  1539. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
  1540. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x1002 pwszSearchPath=0000000000744f10:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Autodesk\Backburner\;C:\Program Files (x86)\Common Files\Autodesk Shared\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\FPC\2.6.4\bin\i386-Win32;C:\Program Files (x86)\Livestreamer;C:\Program Files (x86)\Java\jre7\bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\Git\cmd;C:\Program Files (x86)\GNU\GnuPG\pub;C:\Program Files (x86)\Java\jdk1.8.0_60\bin;C:\Python34;C:\Python34\Scripts [calling]
  1541. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef4ee0000 'C:\Windows\system32\cryptnet.dll'
  1542. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
  1543. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x1002 pwszSearchPath=0000000000744f10:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Autodesk\Backburner\;C:\Program Files (x86)\Common Files\Autodesk Shared\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\FPC\2.6.4\bin\i386-Win32;C:\Program Files (x86)\Livestreamer;C:\Program Files (x86)\Java\jre7\bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\Git\cmd;C:\Program Files (x86)\GNU\GnuPG\pub;C:\Program Files (x86)\Java\jdk1.8.0_60\bin;C:\Python34;C:\Python34\Scripts [calling]
  1544. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef4ee0000 'C:\Windows\system32\cryptnet.dll'
  1545. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
  1546. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef4ee0000 'C:\Windows\system32\cryptnet.dll'
  1547. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
  1548. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef4ee0000 'C:\Windows\system32\cryptnet.dll'
  1549. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
  1550. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef4ee0000 'C:\Windows\system32\cryptnet.dll'
  1551. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
  1552. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef4ee0000 'C:\Windows\system32\cryptnet.dll'
  1553. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
  1554. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef4ee0000 'C:\Windows\system32\cryptnet.dll'
  1555. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef4ee0000 'C:\Windows\system32\cryptnet.dll'
  1556. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
  1557. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef4ee0000 'C:\Windows\system32\cryptnet.dll'
  1558. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-Win-Security-SDDL-L1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000744f10:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Autodesk\Backburner\;C:\Program Files (x86)\Common Files\Autodesk Shared\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\FPC\2.6.4\bin\i386-Win32;C:\Program Files (x86)\Livestreamer;C:\Program Files (x86)\Java\jre7\bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\Git\cmd;C:\Program Files (x86)\GNU\GnuPG\pub;C:\Program Files (x86)\Java\jdk1.8.0_60\bin;C:\Python34;C:\Python34\Scripts [calling]
  1559. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefd300000 'API-MS-Win-Security-SDDL-L1-1-0.dll'
  1560. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\profapi.dll [lacks WinVerifyTrust]
  1561. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\profapi.dll (Input=profapi.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000744f10:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Autodesk\Backburner\;C:\Program Files (x86)\Common Files\Autodesk Shared\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\FPC\2.6.4\bin\i386-Win32;C:\Program Files (x86)\Livestreamer;C:\Program Files (x86)\Java\jre7\bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\Git\cmd;C:\Program Files (x86)\GNU\GnuPG\pub;C:\Program Files (x86)\Java\jdk1.8.0_60\bin;C:\Python34;C:\Python34\Scripts [calling]
  1562. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefca90000 'C:\Windows\system32\profapi.dll'
  1563. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'gdi32.dll'.
  1564. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
  1565. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'msvcrt.dll'.
  1566. 1918.1b94: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\shlwapi.dll)
  1567. 1918.1b94: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\shlwapi.dll
  1568. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1569. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1570. 1918.1b94: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1571. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  1572. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  1573. 1918.1b94: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
  1574. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  1575. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  1576. 1918.1b94: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  1577. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\SHLWAPI.dll (Input=SHLWAPI.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000744f10:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Autodesk\Backburner\;C:\Program Files (x86)\Common Files\Autodesk Shared\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\FPC\2.6.4\bin\i386-Win32;C:\Program Files (x86)\Livestreamer;C:\Program Files (x86)\Java\jre7\bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\Git\cmd;C:\Program Files (x86)\GNU\GnuPG\pub;C:\Program Files (x86)\Java\jdk1.8.0_60\bin;C:\Python34;C:\Python34\Scripts [calling]
  1578. 1918.1b94: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\shlwapi.dll [lacks WinVerifyTrust]
  1579. 1918.1b94: supR3HardenedDllNotificationCallback: load 000007fefe970000 LB 0x00071000 C:\Windows\system32\SHLWAPI.dll [fFlags=0x0]
  1580. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\shlwapi.dll [lacks WinVerifyTrust]
  1581. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefe970000 'C:\Windows\system32\SHLWAPI.dll'
  1582. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000000 pwszName=\SystemRoot\System32\ntdll.dll
  1583. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: New context 000000000076ddb0
  1584. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=000000000076ddb0
  1585. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=6463B603CF12442718467D754A1EDC45CE1D6E7E
  1586. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-Win-Security-SDDL-L1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000744f10:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Autodesk\Backburner\;C:\Program Files (x86)\Common Files\Autodesk Shared\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\FPC\2.6.4\bin\i386-Win32;C:\Program Files (x86)\Livestreamer;C:\Program Files (x86)\Java\jre7\bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\Git\cmd;C:\Program Files (x86)\GNU\GnuPG\pub;C:\Program Files (x86)\Java\jdk1.8.0_60\bin;C:\Python34;C:\Python34\Scripts [calling]
  1587. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefd300000 'API-MS-Win-Security-SDDL-L1-1-0.dll'
  1588. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-WIN-Service-Management-L1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000744f10:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Autodesk\Backburner\;C:\Program Files (x86)\Common Files\Autodesk Shared\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\FPC\2.6.4\bin\i386-Win32;C:\Program Files (x86)\Livestreamer;C:\Program Files (x86)\Java\jre7\bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\Git\cmd;C:\Program Files (x86)\GNU\GnuPG\pub;C:\Program Files (x86)\Java\jdk1.8.0_60\bin;C:\Python34;C:\Python34\Scripts [calling]
  1589. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefd300000 'API-MS-WIN-Service-Management-L1-1-0.dll'
  1590. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-WIN-Service-winsvc-L1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000744f10:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Autodesk\Backburner\;C:\Program Files (x86)\Common Files\Autodesk Shared\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\FPC\2.6.4\bin\i386-Win32;C:\Program Files (x86)\Livestreamer;C:\Program Files (x86)\Java\jre7\bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\Git\cmd;C:\Program Files (x86)\GNU\GnuPG\pub;C:\Program Files (x86)\Java\jdk1.8.0_60\bin;C:\Python34;C:\Python34\Scripts [calling]
  1591. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefd300000 'API-MS-WIN-Service-winsvc-L1-1-0.dll'
  1592. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
  1593. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\ADVAPI32.dll (Input=ADVAPI32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000744f10:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Autodesk\Backburner\;C:\Program Files (x86)\Common Files\Autodesk Shared\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\FPC\2.6.4\bin\i386-Win32;C:\Program Files (x86)\Livestreamer;C:\Program Files (x86)\Java\jre7\bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\Git\cmd;C:\Program Files (x86)\GNU\GnuPG\pub;C:\Program Files (x86)\Java\jdk1.8.0_60\bin;C:\Python34;C:\Python34\Scripts [calling]
  1594. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefe780000 'C:\Windows\system32\ADVAPI32.dll'
  1595. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-Win-Security-LSALookup-L1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000744f10:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Autodesk\Backburner\;C:\Program Files (x86)\Common Files\Autodesk Shared\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\FPC\2.6.4\bin\i386-Win32;C:\Program Files (x86)\Livestreamer;C:\Program Files (x86)\Java\jre7\bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\Git\cmd;C:\Program Files (x86)\GNU\GnuPG\pub;C:\Program Files (x86)\Java\jdk1.8.0_60\bin;C:\Python34;C:\Python34\Scripts [calling]
  1596. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefd300000 'API-MS-Win-Security-LSALookup-L1-1-0.dll'
  1597. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-Win-Security-LSALookup-L1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000744f10:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Autodesk\Backburner\;C:\Program Files (x86)\Common Files\Autodesk Shared\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\FPC\2.6.4\bin\i386-Win32;C:\Program Files (x86)\Livestreamer;C:\Program Files (x86)\Java\jre7\bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\Git\cmd;C:\Program Files (x86)\GNU\GnuPG\pub;C:\Program Files (x86)\Java\jdk1.8.0_60\bin;C:\Python34;C:\Python34\Scripts [calling]
  1598. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefd300000 'API-MS-Win-Security-LSALookup-L1-1-0.dll'
  1599. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat'; file='\SystemRoot\System32\ntdll.dll'
  1600. 1918.1b94: g_pfnWinVerifyTrust=000007fefcc81010
  1601. 1918.1b94: supR3HardenedScreenImage/preload: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\crypt32.dll [redoing WinVerifyTrust]
  1602. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000000e0 pwszName=\Device\HarddiskVolume4\Windows\System32\crypt32.dll
  1603. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 000000000076ddb0
  1604. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=000000000076ddb0
  1605. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=CF258E1DA85AD69891395F6F7501E1D54F2DFED8
  1606. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_112_for_KB2868626~31bf3856ad364e35~amd64~~6.1.1.2.cat'; file='\Device\HarddiskVolume4\Windows\System32\crypt32.dll'
  1607. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1608. 1918.1b94: supR3HardenedScreenImage/preload: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\crypt32.dll'
  1609. 1918.1b94: supR3HardenedScreenImage/preload: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\wintrust.dll [redoing WinVerifyTrust]
  1610. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000000d4 pwszName=\Device\HarddiskVolume4\Windows\System32\wintrust.dll
  1611. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 000000000076ddb0
  1612. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=000000000076ddb0
  1613. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=80662AB761CF56CEC7909E5D03289BC65B4457A8
  1614. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_75_for_KB2862966~31bf3856ad364e35~amd64~~6.1.1.1.cat'; file='\Device\HarddiskVolume4\Windows\System32\wintrust.dll'
  1615. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1616. 1918.1b94: supR3HardenedScreenImage/preload: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\wintrust.dll'
  1617. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000374 pwszName=\Device\HarddiskVolume4\Windows\System32\shlwapi.dll
  1618. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 000000000076ddb0
  1619. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=000000000076ddb0
  1620. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=0AB8D9C9D3E1FC95D01F9A984B16ED031BB40CD8
  1621. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume4\Windows\System32\shlwapi.dll'
  1622. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1623. 1918.1b94: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\shlwapi.dll'
  1624. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000368 pwszName=\Device\HarddiskVolume4\Windows\System32\Wldap32.dll
  1625. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 000000000076ddb0
  1626. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=000000000076ddb0
  1627. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=87E73086F2528CF31D3AD5F0D71E04F8B942D5D8
  1628. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume4\Windows\System32\Wldap32.dll'
  1629. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1630. 1918.1b94: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\Wldap32.dll'
  1631. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000364 pwszName=\Device\HarddiskVolume4\Windows\System32\cryptnet.dll
  1632. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 000000000076ddb0
  1633. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=000000000076ddb0
  1634. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=C1C670A9871F2BD448B2F0FA6127AC7A486B8D8F
  1635. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_75_for_KB2862966~31bf3856ad364e35~amd64~~6.1.1.1.cat'; file='\Device\HarddiskVolume4\Windows\System32\cryptnet.dll'
  1636. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1637. 1918.1b94: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\cryptnet.dll'
  1638. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000250 pwszName=\Device\HarddiskVolume4\Windows\System32\gpapi.dll
  1639. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 000000000076ddb0
  1640. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=000000000076ddb0
  1641. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=470795C189226F7BDB8E50F42104CC34488B9340
  1642. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume4\Windows\System32\gpapi.dll'
  1643. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1644. 1918.1b94: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\gpapi.dll'
  1645. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000001bc pwszName=\Device\HarddiskVolume4\Windows\System32\profapi.dll
  1646. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 000000000076ddb0
  1647. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=000000000076ddb0
  1648. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=2449672745D9BA339420451D13FA0380AA768231
  1649. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntpe.cat'; file='\Device\HarddiskVolume4\Windows\System32\profapi.dll'
  1650. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1651. 1918.1b94: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\profapi.dll'
  1652. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000001b8 pwszName=\Device\HarddiskVolume4\Windows\System32\userenv.dll
  1653. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 000000000076ddb0
  1654. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=000000000076ddb0
  1655. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=D3E1A2CC7367F751C19EBF4E6EDF5E9A10E47313
  1656. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume4\Windows\System32\userenv.dll'
  1657. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1658. 1918.1b94: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\userenv.dll'
  1659. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000001a4 pwszName=\Device\HarddiskVolume4\Windows\System32\ncrypt.dll
  1660. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 000000000076ddb0
  1661. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=000000000076ddb0
  1662. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=AAB2251E23910860D2DAA4D49B0B839A29B56621
  1663. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_54_for_KB2871997~31bf3856ad364e35~amd64~~6.1.2.5.cat'; file='\Device\HarddiskVolume4\Windows\System32\ncrypt.dll'
  1664. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1665. 1918.1b94: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\ncrypt.dll'
  1666. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hFile=000000000000018c pwszName=\Device\HarddiskVolume4\Windows\System32\msctf.dll
  1667. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 000000000076ddb0
  1668. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=000000000076ddb0
  1669. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=803AF52F95A9EFDFDA06C595023831EE36ACD3A8
  1670. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntpe.cat'; file='\Device\HarddiskVolume4\Windows\System32\msctf.dll'
  1671. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1672. 1918.1b94: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\msctf.dll'
  1673. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000188 pwszName=\Device\HarddiskVolume4\Windows\System32\imm32.dll
  1674. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 000000000076ddb0
  1675. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=000000000076ddb0
  1676. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=6EEE1AB3B6D79AFF857940FF5F51ED27698153EC
  1677. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntpe.cat'; file='\Device\HarddiskVolume4\Windows\System32\imm32.dll'
  1678. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1679. 1918.1b94: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\imm32.dll'
  1680. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000184 pwszName=\Device\HarddiskVolume4\Windows\System32\usp10.dll
  1681. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 000000000076ddb0
  1682. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=000000000076ddb0
  1683. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=1F1AA8340DE02FC1B6341EE2706E55D56EDF63B8
  1684. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2957509~31bf3856ad364e35~amd64~~6.1.1.2.cat'; file='\Device\HarddiskVolume4\Windows\System32\usp10.dll'
  1685. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1686. 1918.1b94: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\usp10.dll'
  1687. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000180 pwszName=\Device\HarddiskVolume4\Windows\System32\lpk.dll
  1688. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 000000000076ddb0
  1689. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=000000000076ddb0
  1690. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=6FCA4D678614C8615E6E5C082BF3A4562FCF14EB
  1691. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2847311~31bf3856ad364e35~amd64~~6.1.1.2.cat'; file='\Device\HarddiskVolume4\Windows\System32\lpk.dll'
  1692. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1693. 1918.1b94: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\lpk.dll'
  1694. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hFile=000000000000017c pwszName=\Device\HarddiskVolume4\Windows\System32\gdi32.dll
  1695. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 000000000076ddb0
  1696. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=000000000076ddb0
  1697. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=0B3AA461D69745EDE2C3FADA9D3727DE1798B436
  1698. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2876331~31bf3856ad364e35~amd64~~6.1.1.1.cat'; file='\Device\HarddiskVolume4\Windows\System32\gdi32.dll'
  1699. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1700. 1918.1b94: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\gdi32.dll'
  1701. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000178 pwszName=\Device\HarddiskVolume4\Windows\System32\user32.dll
  1702. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 000000000076ddb0
  1703. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=000000000076ddb0
  1704. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=FB05A6DD4AF9AC247D37C4B7BAFCCBD178A41E64
  1705. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: Retrying with fresh context (CryptCATAdminEnumCatalogFromHash -> 1168; iCat=0x0)
  1706. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: New context 000000000076ddb0
  1707. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=000000000076ddb0
  1708. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=FB05A6DD4AF9AC247D37C4B7BAFCCBD178A41E64
  1709. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: CryptCATAdminEnumCatalogFromHash failed ERRROR_NOT_FOUND (1168)
  1710. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile -> -22900 (org 22900)
  1711. 1918.1b94: supR3HardenedWinVerifyCacheProcessWvtTodos: -22900 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\user32.dll'
  1712. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000174 pwszName=\Device\HarddiskVolume4\Windows\System32\imagehlp.dll
  1713. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 000000000076ddb0
  1714. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=000000000076ddb0
  1715. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=2702EE05F1B717B0F2CE0FBE32784A47B8419DCA
  1716. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2893294~31bf3856ad364e35~amd64~~6.1.1.1.cat'; file='\Device\HarddiskVolume4\Windows\System32\imagehlp.dll'
  1717. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1718. 1918.1b94: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\imagehlp.dll'
  1719. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000130 pwszName=\Device\HarddiskVolume4\Windows\System32\cryptbase.dll
  1720. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 000000000076ddb0
  1721. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=000000000076ddb0
  1722. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=A965CC5DB13A5FB23BBB1B6B5FA6D400DC49462F
  1723. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntpe.cat'; file='\Device\HarddiskVolume4\Windows\System32\cryptbase.dll'
  1724. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1725. 1918.1b94: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\cryptbase.dll'
  1726. 1918.1b94: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\rsaenh.dll'
  1727. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hFile=000000000000012c pwszName=\Device\HarddiskVolume4\Windows\System32\cryptsp.dll
  1728. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 000000000076ddb0
  1729. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=000000000076ddb0
  1730. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=40667EDBA9045D4A4BE1D4844665D3B88F8CD0E0
  1731. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntpe.cat'; file='\Device\HarddiskVolume4\Windows\System32\cryptsp.dll'
  1732. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1733. 1918.1b94: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\cryptsp.dll'
  1734. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000120 pwszName=\Device\HarddiskVolume4\Windows\System32\sechost.dll
  1735. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 000000000076ddb0
  1736. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=000000000076ddb0
  1737. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=3FA2A014BF360CDC0E203A174FFC9DC5343C5323
  1738. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntpe.cat'; file='\Device\HarddiskVolume4\Windows\System32\sechost.dll'
  1739. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1740. 1918.1b94: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\sechost.dll'
  1741. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hFile=000000000000011c pwszName=\Device\HarddiskVolume4\Windows\System32\advapi32.dll
  1742. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 000000000076ddb0
  1743. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=000000000076ddb0
  1744. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=DBCDF817D89920EE3139FB7E090744EB36A4A21B
  1745. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntpe.cat'; file='\Device\HarddiskVolume4\Windows\System32\advapi32.dll'
  1746. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1747. 1918.1b94: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\advapi32.dll'
  1748. 1918.1b94: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\bcryptprimitives.dll'
  1749. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000104 pwszName=\Device\HarddiskVolume4\Windows\System32\bcrypt.dll
  1750. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 000000000076ddb0
  1751. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=000000000076ddb0
  1752. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=62E377A1F0AD0C2EDC0A73CB3EFF841FF18D00D2
  1753. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntpe.cat'; file='\Device\HarddiskVolume4\Windows\System32\bcrypt.dll'
  1754. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1755. 1918.1b94: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\bcrypt.dll'
  1756. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000000e4 pwszName=\Device\HarddiskVolume4\Windows\System32\msvcrt.dll
  1757. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 000000000076ddb0
  1758. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=000000000076ddb0
  1759. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=2CA2FD632B264C063162F71474266E3615B6420C
  1760. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2654428~31bf3856ad364e35~amd64~~6.1.1.0.cat'; file='\Device\HarddiskVolume4\Windows\System32\msvcrt.dll'
  1761. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1762. 1918.1b94: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll'
  1763. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000000dc pwszName=\Device\HarddiskVolume4\Windows\System32\msasn1.dll
  1764. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 000000000076ddb0
  1765. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=000000000076ddb0
  1766. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=F2FF57DC30D774F93061607060DAA0DD15E39CCE
  1767. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume4\Windows\System32\msasn1.dll'
  1768. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1769. 1918.1b94: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\msasn1.dll'
  1770. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000000d8 pwszName=\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll
  1771. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 000000000076ddb0
  1772. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=000000000076ddb0
  1773. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=763126EEC8673BD48C2CBC33CECBFBCE1E63524A
  1774. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2849470~31bf3856ad364e35~amd64~~6.1.1.3.cat'; file='\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll'
  1775. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1776. 1918.1b94: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll'
  1777. 1918.1b94: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxSupLib.dll'
  1778. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000028 pwszName=\Device\HarddiskVolume4\Windows\System32\KernelBase.dll
  1779. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 000000000076ddb0
  1780. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=000000000076ddb0
  1781. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=57EB6F834C5A5D9585A660D91756134028A3B089
  1782. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_54_for_KB2871997~31bf3856ad364e35~amd64~~6.1.2.5.cat'; file='\Device\HarddiskVolume4\Windows\System32\KernelBase.dll'
  1783. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1784. 1918.1b94: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\KernelBase.dll'
  1785. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000020 pwszName=\Device\HarddiskVolume4\Windows\System32\kernel32.dll
  1786. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 000000000076ddb0
  1787. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=000000000076ddb0
  1788. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=5349346AE66DA4E3A7206628F484AC3B3AA43776
  1789. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_54_for_KB2871997~31bf3856ad364e35~amd64~~6.1.2.5.cat'; file='\Device\HarddiskVolume4\Windows\System32\kernel32.dll'
  1790. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1791. 1918.1b94: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\kernel32.dll'
  1792. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\crypt32.dll
  1793. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\crypt32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=000000000083e700:C:\Windows\system32 [calling]
  1794. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefccc0000 'C:\Windows\system32\crypt32.dll'
  1795. 1918.1b94: supR3HardenedWinIsDesiredRootCA: Adding 0x5ad46780fa5df300 DC=com, DC=microsoft, CN=Microsoft Root Certificate Authority
  1796. 1918.1b94: supR3HardenedWinIsDesiredRootCA: Adding 0xea5386456178582b C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA
  1797. 1918.1b94: supR3HardenedWinIsDesiredRootCA: Adding 0x69c225a8bd34b100 C=RU, ST=Moscow, L=Moscow, O=SecureTrust LTD, OU=(c) 2013 SecureTrust Corporation - For authorized use only, CN=SecureTrust LTD CA
  1798. 1918.1b94: supR3HardenedWinIsDesiredRootCA: Adding 0x3be670c1bd02a900 OU=Copyright (c) 1997 Microsoft Corp., OU=Microsoft Corporation, CN=Microsoft Root Authority
  1799. 1918.1b94: supR3HardenedWinIsDesiredRootCA: Adding 0x4d3835aa4180b200 C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Root Certificate Authority 2011
  1800. 1918.1b94: supR3HardenedWinIsDesiredRootCA: Adding 0x646e3fe3ba08df00 C=US, O=MSFT, CN=Microsoft Authenticode(tm) Root Authority
  1801. 1918.1b94: supR3HardenedWinIsDesiredRootCA: Adding 0xece4e4289e08b900 C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Root Certificate Authority 2010
  1802. 1918.1b94: supR3HardenedWinIsDesiredRootCA: skipping - not-self-signed: C=BZ, ST=Belize, L=Belize city, O=Disc Soft Ltd, CN=Disc Soft Ltd, [email protected]
  1803. 1918.1b94: supR3HardenedWinIsDesiredRootCA: Adding 0x43a9cc371ff5385a O=Microsoft Trust Network, OU=Microsoft Corporation, OU=Microsoft Time Stamping Service Root, OU=Copyright (c) 1997 Microsoft Corp.
  1804. 1918.1b94: supR3HardenedWinIsDesiredRootCA: Adding 0x2e2d2c7c68f0202e O=VeriSign Trust Network, OU=VeriSign, Inc., OU=VeriSign Time Stamping Service Root, OU=NO LIABILITY ACCEPTED, (c)97 VeriSign, Inc.
  1805. 1918.1b94: supR3HardenedWinIsDesiredRootCA: Adding 0xf27194c5fa02d100 C=EN, CN=Sample CA 2
  1806. 1918.1b94: supR3HardenedWinIsDesiredRootCA: Adding 0xd8dbfb2c27bfb200 C=US, O=thawte, Inc., OU=Certification Services Division, OU=(c) 2008 thawte, Inc. - For authorized use only, CN=thawte Primary Root CA - G3
  1807. 1918.1b94: supR3HardenedWinIsDesiredRootCA: Adding 0x61a3a33f81aace00 C=US, ST=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http://www.usertrust.com, CN=UTN-USERFirst-Object
  1808. 1918.1b94: supR3HardenedWinIsDesiredRootCA: Adding 0xf4fd306318ccda00 C=US, O=GeoTrust Inc., CN=GeoTrust Global CA
  1809. 1918.1b94: supR3HardenedWinIsDesiredRootCA: Adding 0x83085097e9afdf00 O=Digital Signature Trust Co., CN=DST Root CA X3
  1810. 1918.1b94: supR3HardenedWinIsDesiredRootCA: Adding 0x780679907625cc00 OU=GlobalSign Root CA - R3, O=GlobalSign, CN=GlobalSign
  1811. 1918.1b94: supR3HardenedWinIsDesiredRootCA: Adding 0x3d98ab22bb04a300 C=IE, O=Baltimore, OU=CyberTrust, CN=Baltimore CyberTrust Root
  1812. 1918.1b94: supR3HardenedWinIsDesiredRootCA: Adding 0xa0ee62086758b15d C=US, O=Equifax, OU=Equifax Secure Certificate Authority
  1813. 1918.1b94: supR3HardenedWinIsDesiredRootCA: Adding 0xd944bca189a00 C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 2
  1814. 1918.1b94: supR3HardenedWinIsDesiredRootCA: Adding 0x1591b8ac8dcabd00 C=CN, O=WoSign CA Limited, CN=Certification Authority of WoSign
  1815. 1918.1b94: supR3HardenedWinIsDesiredRootCA: Adding 0x8ff6fc03c1edbd00 C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, Inc., CN=Starfield Root Certificate Authority - G2
  1816. 1918.1b94: supR3HardenedWinIsDesiredRootCA: Adding 0xc6fa4243b695b600 C=US, O=Entrust, Inc., OU=www.entrust.net/CPS is incorporated by reference, OU=(c) 2006 Entrust, Inc., CN=Entrust Root Certification Authority
  1817. 1918.1b94: supR3HardenedWinIsDesiredRootCA: Adding 0xa3ce8d99e60eda00 C=BE, O=GlobalSign nv-sa, OU=Root CA, CN=GlobalSign Root CA
  1818. 1918.1b94: supR3HardenedWinIsDesiredRootCA: Adding 0x560ad29254e89100 C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Certification Authority
  1819. 1918.1b94: supR3HardenedWinIsDesiredRootCA: Adding 0xa671e9fec832b700 C=US, O=Starfield Technologies, Inc., OU=Starfield Class 2 Certification Authority
  1820. 1918.1b94: supR3HardenedWinIsDesiredRootCA: Adding 0xa8de7211e13be200 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root CA
  1821. 1918.1b94: supR3HardenedWinIsDesiredRootCA: Adding 0x7ae89c50f0b6a00f C=US, O=GTE Corporation, OU=GTE CyberTrust Solutions, Inc., CN=GTE CyberTrust Global Root
  1822. 1918.1b94: supR3HardenedWinIsDesiredRootCA: Adding 0xd45980fbf0a0ac00 C=US, O=thawte, Inc., OU=Certification Services Division, OU=(c) 2006 thawte, Inc. - For authorized use only, CN=thawte Primary Root CA
  1823. 1918.1b94: supR3HardenedWinIsDesiredRootCA: Adding 0x4d3835aa4180b200 C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Root Certificate Authority 2011
  1824. 1918.1b94: supR3HardenedWinIsDesiredRootCA: Adding 0xc9edb72b684ba00 C=US, O=Entrust, Inc., OU=See www.entrust.net/legal-terms, OU=(c) 2009 Entrust, Inc. - for authorized use only, CN=Entrust Root Certification Authority - G2
  1825. 1918.1b94: supR3HardenedWinIsDesiredRootCA: Adding 0xf5cd95e581a4ab00 C=US, O=SecureTrust Corporation, CN=SecureTrust CA
  1826. 1918.1b94: supR3HardenedWinIsDesiredRootCA: Adding 0xabd0695c5d11d15e C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority - G2, OU=(c) 1998 VeriSign, Inc. - For authorized use only, OU=VeriSign Trust Network
  1827. 1918.1b94: supR3HardenedWinIsDesiredRootCA: Adding 0x6f2ebe0e24cfa600 OU=GlobalSign Root CA - R2, O=GlobalSign, CN=GlobalSign
  1828. 1918.1b94: supR3HardenedWinIsDesiredRootCA: Adding 0x14018a1bf29e595c C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority
  1829. 1918.1b94: supR3HardenedWinIsDesiredRootCA: Adding 0x35f812d09650dc00 C=FR, O=Certplus, CN=Class 2 Primary CA
  1830. 1918.1b94: supR3HardenedWinIsDesiredRootCA: Adding 0x9e5bc2d78b6a3636 C=ZA, ST=Western Cape, L=Cape Town, O=Thawte Consulting cc, OU=Certification Services Division, CN=Thawte Premium Server CA, [email protected]
  1831. 1918.1b94: supR3HardenedWinIsDesiredRootCA: Adding 0x7c4fd32ec1b1ce00 C=PL, O=Unizeto Sp. z o.o., CN=Certum CA
  1832. 1918.1b94: supR3HardenedWinIsDesiredRootCA: Adding 0xd4fbe673e5ccc600 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance EV Root CA
  1833. 1918.1b94: supR3HardenedWinIsDesiredRootCA: Adding 0x16e64d2a56ccf200 C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, Inc., OU=http://certificates.starfieldtech.com/repository/, CN=Starfield Services Root Certificate Authority
  1834. 1918.1b94: supR3HardenedWinIsDesiredRootCA: Adding 0xb28612a94b4dad00 O=Entrust.net, OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.), OU=(c) 1999 Entrust.net Limited, CN=Entrust.net Certification Authority (2048)
  1835. 1918.1b94: supR3HardenedWinIsDesiredRootCA: Adding 0x357a29080824af00 C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G5
  1836. 1918.1b94: supR3HardenedWinIsDesiredRootCA: Adding 0x59faf1086271bf00 C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., CN=Go Daddy Root Certificate Authority - G2
  1837. 1918.1b94: supR3HardenedWinIsDesiredRootCA: Adding 0x466cbc09db88c100 C=IL, O=StartCom Ltd., OU=Secure Digital Certificate Signing, CN=StartCom Certification Authority
  1838. 1918.1b94: supR3HardenedWinIsDesiredRootCA: Adding 0x3401b15e3761c700 C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2008 VeriSign, Inc. - For authorized use only, CN=VeriSign Universal Root Certification Authority
  1839. 1918.1b94: supR3HardenedWinIsDesiredRootCA: Adding 0x7cd4ff7b15b8be00 C=US, O=GeoTrust Inc., CN=GeoTrust Primary Certification Authority
  1840. 1918.1b94: supR3HardenedWinIsDesiredRootCA: Adding 0x20b7075b3689b600 C=IL, O=StartCom Ltd., CN=StartCom Certification Authority G2
  1841. 1918.1b94: supR3HardenedWinIsDesiredRootCA: Adding 0x491857ead79dde00 C=US, O=The Go Daddy Group, Inc., OU=Go Daddy Class 2 Certification Authority
  1842. 1918.1b94: supR3HardenedWinIsDesiredRootCA: Adding 0xab549401526569d3 L=Internet, O=VeriSign, Inc., OU=VeriSign Commercial Software Publishers CA
  1843. 1918.1b94: supR3HardenedWinIsDesiredRootCA: Adding 0xe66b56ffc86e50a4 C=ZA, ST=Western Cape, L=Cape Town, O=Thawte Consulting cc, OU=Certification Services Division, CN=Thawte Server CA, [email protected]
  1844. 1918.1b94: supR3HardenedWinIsDesiredRootCA: Adding 0xc2ba72a37dfbe300 C=PL, O=Unizeto Technologies S.A., OU=Certum Certification Authority, CN=Certum Trusted Network CA
  1845. 1918.1b94: supR3HardenedWinIsDesiredRootCA: Adding 0x8043e4ce150ead00 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Root CA
  1846. 1918.1b94: supR3HardenedWinIsDesiredRootCA: Adding 0x331d58625ee2dc00 C=US, O=GeoTrust Inc., OU=(c) 2008 GeoTrust Inc. - For authorized use only, CN=GeoTrust Primary Certification Authority - G3
  1847. 1918.1b94: supR3HardenedWinIsDesiredRootCA: Adding 0xf2e6331af7b700 C=SE, O=AddTrust AB, OU=AddTrust External TTP Network, CN=AddTrust External CA Root
  1848. 1918.1b94: supR3HardenedWinRetrieveTrustedRootCAs: cAdded=52
  1849. 1918.1b94: SUPR3HardenedMain: Load Runtime...
  1850. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
  1851. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
  1852. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ws2_32.dll'.
  1853. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'rpcrt4.dll'.
  1854. 1918.1b94: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll) WinVerifyTrust
  1855. 1918.1b94: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll
  1856. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  1857. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  1858. 1918.1b94: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll
  1859. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
  1860. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume4\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
  1861. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hFile=000000000000039c pwszName=\Device\HarddiskVolume4\Windows\System32\ws2_32.dll
  1862. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 000000000076ddb0
  1863. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=000000000076ddb0
  1864. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=3EF3BDC1E84DFA17EA056313214EE88EC3E66F79
  1865. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume4\Windows\System32\ws2_32.dll'
  1866. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1867. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1868. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #16 'rpcrt4.dll'.
  1869. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #17 'nsi.dll'.
  1870. 1918.1b94: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\ws2_32.dll) WinVerifyTrust
  1871. 1918.1b94: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\ws2_32.dll
  1872. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
  1873. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
  1874. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
  1875. 1918.1b94: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll) WinVerifyTrust
  1876. 1918.1b94: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll
  1877. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
  1878. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
  1879. 1918.1b94: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll) WinVerifyTrust
  1880. 1918.1b94: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll
  1881. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
  1882. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
  1883. 1918.1b94: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll
  1884. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'nsi.dll'...
  1885. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'nsi.dll' -> '\Device\HarddiskVolume4\Windows\System32\nsi.dll' [rcNtRedir=0xc0150008]
  1886. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000003f8 pwszName=\Device\HarddiskVolume4\Windows\System32\nsi.dll
  1887. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 000000000076ddb0
  1888. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=000000000076ddb0
  1889. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=7AFD8538945F2D05BC1AF949B9B19B7D2D9FBBF8
  1890. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntpe.cat'; file='\Device\HarddiskVolume4\Windows\System32\nsi.dll'
  1891. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1892. 1918.1b94: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\nsi.dll) WinVerifyTrust
  1893. 1918.1b94: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\nsi.dll
  1894. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  1895. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  1896. 1918.1b94: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll
  1897. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1898. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1899. 1918.1b94: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll
  1900. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000007c4a80:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
  1901. 1918.1b94: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll
  1902. 1918.1b94: supR3HardenedDllNotificationCallback: load 000007feee480000 LB 0x0053d000 C:\Program Files\Oracle\VirtualBox\VBoxRT.dll [fFlags=0x0]
  1903. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll
  1904. 1918.1b94: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll
  1905. 1918.1b94: supR3HardenedDllNotificationCallback: load 000000006bcb0000 LB 0x000d2000 C:\Program Files\Oracle\VirtualBox\MSVCR100.dll [fFlags=0x0]
  1906. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll
  1907. 1918.1b94: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll
  1908. 1918.1b94: supR3HardenedDllNotificationCallback: load 000000006fde0000 LB 0x00098000 C:\Program Files\Oracle\VirtualBox\MSVCP100.dll [fFlags=0x0]
  1909. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll
  1910. 1918.1b94: supR3HardenedDllNotificationCallback: load 000007fefe9f0000 LB 0x0004d000 C:\Windows\system32\WS2_32.dll [fFlags=0x0]
  1911. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ws2_32.dll
  1912. 1918.1b94: supR3HardenedDllNotificationCallback: load 000007fefec40000 LB 0x00008000 C:\Windows\system32\NSI.dll [fFlags=0x0]
  1913. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\nsi.dll
  1914. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll
  1915. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000744f10:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Autodesk\Backburner\;C:\Program Files (x86)\Common Files\Autodesk Shared\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\FPC\2.6.4\bin\i386-Win32;C:\Program Files (x86)\Livestreamer;C:\Program Files (x86)\Java\jre7\bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\Git\cmd;C:\Program Files (x86)\GNU\GnuPG\pub;C:\Program Files (x86)\Java\jdk1.8.0_60\bin;C:\Python34;C:\Python34\Scripts [calling]
  1916. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feee480000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1917. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll
  1918. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000744f10:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Autodesk\Backburner\;C:\Program Files (x86)\Common Files\Autodesk Shared\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\FPC\2.6.4\bin\i386-Win32;C:\Program Files (x86)\Livestreamer;C:\Program Files (x86)\Java\jre7\bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\Git\cmd;C:\Program Files (x86)\GNU\GnuPG\pub;C:\Program Files (x86)\Java\jdk1.8.0_60\bin;C:\Python34;C:\Python34\Scripts [calling]
  1919. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feee480000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1920. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll
  1921. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000744f10:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Autodesk\Backburner\;C:\Program Files (x86)\Common Files\Autodesk Shared\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\FPC\2.6.4\bin\i386-Win32;C:\Program Files (x86)\Livestreamer;C:\Program Files (x86)\Java\jre7\bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\Git\cmd;C:\Program Files (x86)\GNU\GnuPG\pub;C:\Program Files (x86)\Java\jdk1.8.0_60\bin;C:\Python34;C:\Python34\Scripts [calling]
  1922. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feee480000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1923. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll
  1924. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000744f10:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Autodesk\Backburner\;C:\Program Files (x86)\Common Files\Autodesk Shared\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\FPC\2.6.4\bin\i386-Win32;C:\Program Files (x86)\Livestreamer;C:\Program Files (x86)\Java\jre7\bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\Git\cmd;C:\Program Files (x86)\GNU\GnuPG\pub;C:\Program Files (x86)\Java\jdk1.8.0_60\bin;C:\Python34;C:\Python34\Scripts [calling]
  1925. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feee480000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1926. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll
  1927. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000744f10:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Autodesk\Backburner\;C:\Program Files (x86)\Common Files\Autodesk Shared\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\FPC\2.6.4\bin\i386-Win32;C:\Program Files (x86)\Livestreamer;C:\Program Files (x86)\Java\jre7\bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\Git\cmd;C:\Program Files (x86)\GNU\GnuPG\pub;C:\Program Files (x86)\Java\jdk1.8.0_60\bin;C:\Python34;C:\Python34\Scripts [calling]
  1928. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feee480000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1929. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll
  1930. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000744f10:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Autodesk\Backburner\;C:\Program Files (x86)\Common Files\Autodesk Shared\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\FPC\2.6.4\bin\i386-Win32;C:\Program Files (x86)\Livestreamer;C:\Program Files (x86)\Java\jre7\bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\Git\cmd;C:\Program Files (x86)\GNU\GnuPG\pub;C:\Program Files (x86)\Java\jdk1.8.0_60\bin;C:\Python34;C:\Python34\Scripts [calling]
  1931. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feee480000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1932. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feee480000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1933. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feee480000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1934. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feee480000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1935. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feee480000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1936. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feee480000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1937. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feee480000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1938. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feee480000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1939. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll
  1940. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000744f10:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Autodesk\Backburner\;C:\Program Files (x86)\Common Files\Autodesk Shared\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\FPC\2.6.4\bin\i386-Win32;C:\Program Files (x86)\Livestreamer;C:\Program Files (x86)\Java\jre7\bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\Git\cmd;C:\Program Files (x86)\GNU\GnuPG\pub;C:\Program Files (x86)\Java\jdk1.8.0_60\bin;C:\Python34;C:\Python34\Scripts [calling]
  1941. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feee480000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1942. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feee480000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1943. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feee480000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1944. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feee480000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1945. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feee480000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1946. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feee480000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1947. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feee480000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1948. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feee480000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1949. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feee480000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1950. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feee480000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1951. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feee480000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1952. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feee480000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1953. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feee480000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1954. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feee480000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1955. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feee480000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1956. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feee480000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1957. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll
  1958. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000744f10:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Autodesk\Backburner\;C:\Program Files (x86)\Common Files\Autodesk Shared\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\FPC\2.6.4\bin\i386-Win32;C:\Program Files (x86)\Livestreamer;C:\Program Files (x86)\Java\jre7\bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\Git\cmd;C:\Program Files (x86)\GNU\GnuPG\pub;C:\Program Files (x86)\Java\jdk1.8.0_60\bin;C:\Python34;C:\Python34\Scripts [calling]
  1959. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feee480000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1960. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feee480000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1961. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feee480000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1962. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feee480000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1963. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\wintrust.dll
  1964. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\Wintrust.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000002ff11c0:C:\Windows\system32 [calling]
  1965. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefcc80000 'C:\Windows\system32\Wintrust.dll'
  1966. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\crypt32.dll
  1967. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\crypt32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000002ff11c0:C:\Windows\system32 [calling]
  1968. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefccc0000 'C:\Windows\system32\crypt32.dll'
  1969. 1918.1b94: SUPR3HardenedMain: Load TrustedMain...
  1970. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'opengl32.dll'.
  1971. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
  1972. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'msvcp100.dll'.
  1973. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcr100.dll'.
  1974. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'.
  1975. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'qt5guivbox.dll'.
  1976. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'qt5widgetsvbox.dll'.
  1977. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'qt5printsupportvbox.dll'.
  1978. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'qt5openglvbox.dll'.
  1979. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'user32.dll'.
  1980. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'advapi32.dll'.
  1981. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'shell32.dll'.
  1982. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'ole32.dll'.
  1983. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'oleaut32.dll'.
  1984. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #15 'winmm.dll'.
  1985. 1918.1b94: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.dll) WinVerifyTrust
  1986. 1918.1b94: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.dll
  1987. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
  1988. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume4\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
  1989. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000430 pwszName=\Device\HarddiskVolume4\Windows\System32\winmm.dll
  1990. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 000000000076ddb0
  1991. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=000000000076ddb0
  1992. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=82E2B2A7826F88BEB98FFF0540C9BDB0A12F001A
  1993. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntpe.cat'; file='\Device\HarddiskVolume4\Windows\System32\winmm.dll'
  1994. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1995. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'.
  1996. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
  1997. 1918.1b94: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\winmm.dll) WinVerifyTrust
  1998. 1918.1b94: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\winmm.dll
  1999. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
  2000. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume4\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
  2001. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000410 pwszName=\Device\HarddiskVolume4\Windows\System32\oleaut32.dll
  2002. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 000000000076ddb0
  2003. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=000000000076ddb0
  2004. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=C1D7CC9111C6B5A59641FA11BE0A6A1841FEBBCD
  2005. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2564958~31bf3856ad364e35~amd64~~6.1.1.1.cat'; file='\Device\HarddiskVolume4\Windows\System32\oleaut32.dll'
  2006. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  2007. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'ole32.dll'.
  2008. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'.
  2009. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'rpcrt4.dll'.
  2010. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'user32.dll'.
  2011. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'gdi32.dll'.
  2012. 1918.1b94: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\oleaut32.dll) WinVerifyTrust
  2013. 1918.1b94: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\oleaut32.dll
  2014. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
  2015. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume4\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
  2016. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hFile=000000000000043c pwszName=\Device\HarddiskVolume4\Windows\System32\ole32.dll
  2017. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 000000000076ddb0
  2018. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=000000000076ddb0
  2019. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=2E64AE329BD5124592BC8CB0B327AA3B95DC65B7
  2020. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume4\Windows\System32\ole32.dll'
  2021. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  2022. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  2023. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'gdi32.dll'.
  2024. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #25 'user32.dll'.
  2025. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'rpcrt4.dll'.
  2026. 1918.1b94: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\ole32.dll) WinVerifyTrust
  2027. 1918.1b94: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\ole32.dll
  2028. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
  2029. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume4\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
  2030. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000448 pwszName=\Device\HarddiskVolume4\Windows\System32\shell32.dll
  2031. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 000000000076ddb0
  2032. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=000000000076ddb0
  2033. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=B2691B4CA862B8F691AC1CF51D38E621F27CACF6
  2034. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2926765~31bf3856ad364e35~amd64~~6.1.1.1.cat'; file='\Device\HarddiskVolume4\Windows\System32\shell32.dll'
  2035. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  2036. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  2037. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #21 'shlwapi.dll'.
  2038. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #23 'user32.dll'.
  2039. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #24 'gdi32.dll'.
  2040. 1918.1b94: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\shell32.dll) WinVerifyTrust
  2041. 1918.1b94: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\shell32.dll
  2042. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
  2043. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
  2044. 1918.1b94: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\advapi32.dll
  2045. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  2046. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  2047. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5openglvbox.dll'...
  2048. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5openglvbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5openglvbox.dll' [rcNtRedir=0xc0150008]
  2049. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'qt5widgetsvbox.dll'.
  2050. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'qt5guivbox.dll'.
  2051. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5corevbox.dll'.
  2052. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcr100.dll'.
  2053. 1918.1b94: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll) WinVerifyTrust
  2054. 1918.1b94: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll
  2055. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5printsupportvbox.dll'...
  2056. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5printsupportvbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5printsupportvbox.dll' [rcNtRedir=0xc0150008]
  2057. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
  2058. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
  2059. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5widgetsvbox.dll'.
  2060. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5guivbox.dll'.
  2061. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'.
  2062. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'winspool.drv'.
  2063. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'comdlg32.dll'.
  2064. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcr100.dll'.
  2065. 1918.1b94: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll) WinVerifyTrust
  2066. 1918.1b94: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll
  2067. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
  2068. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
  2069. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
  2070. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
  2071. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5guivbox.dll'.
  2072. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5corevbox.dll'.
  2073. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'shell32.dll'.
  2074. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
  2075. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
  2076. 1918.1b94: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll) WinVerifyTrust
  2077. 1918.1b94: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll
  2078. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
  2079. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
  2080. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'ole32.dll'.
  2081. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'opengl32.dll'.
  2082. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
  2083. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
  2084. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'.
  2085. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
  2086. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
  2087. 1918.1b94: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll) WinVerifyTrust
  2088. 1918.1b94: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
  2089. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
  2090. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
  2091. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
  2092. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'shell32.dll'.
  2093. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ole32.dll'.
  2094. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'advapi32.dll'.
  2095. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ws2_32.dll'.
  2096. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'mpr.dll'.
  2097. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcp100.dll'.
  2098. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'msvcr100.dll'.
  2099. 1918.1b94: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll) WinVerifyTrust
  2100. 1918.1b94: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
  2101. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
  2102. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
  2103. 1918.1b94: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll
  2104. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
  2105. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
  2106. 1918.1b94: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll
  2107. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
  2108. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
  2109. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
  2110. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume4\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
  2111. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000468 pwszName=\Device\HarddiskVolume4\Windows\System32\opengl32.dll
  2112. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 000000000076ddb0
  2113. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=000000000076ddb0
  2114. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=608AC397FCC42B9FBAE25CB8C25EAF4C19AA384D
  2115. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\nt5.cat'; file='\Device\HarddiskVolume4\Windows\System32\opengl32.dll'
  2116. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  2117. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  2118. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'advapi32.dll'.
  2119. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'gdi32.dll'.
  2120. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'glu32.dll'.
  2121. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'ddraw.dll'.
  2122. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'user32.dll'.
  2123. 1918.1b94: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\opengl32.dll) WinVerifyTrust
  2124. 1918.1b94: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\opengl32.dll
  2125. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  2126. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  2127. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ddraw.dll'...
  2128. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'ddraw.dll' -> '\Device\HarddiskVolume4\Windows\System32\ddraw.dll' [rcNtRedir=0xc0150008]
  2129. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hFile=000000000000045c pwszName=\Device\HarddiskVolume4\Windows\System32\ddraw.dll
  2130. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 000000000076ddb0
  2131. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=000000000076ddb0
  2132. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=24C763EA54CD792A0F1618411061DC356EE31FF6
  2133. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\nt5.cat'; file='\Device\HarddiskVolume4\Windows\System32\ddraw.dll'
  2134. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  2135. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  2136. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
  2137. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'dciman32.dll'.
  2138. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'gdi32.dll'.
  2139. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'setupapi.dll'.
  2140. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'dwmapi.dll'.
  2141. 1918.1b94: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\ddraw.dll) WinVerifyTrust
  2142. 1918.1b94: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\ddraw.dll
  2143. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'glu32.dll'...
  2144. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'glu32.dll' -> '\Device\HarddiskVolume4\Windows\System32\glu32.dll' [rcNtRedir=0xc0150008]
  2145. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000464 pwszName=\Device\HarddiskVolume4\Windows\System32\glu32.dll
  2146. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 000000000076ddb0
  2147. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=000000000076ddb0
  2148. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=60E45AB914E06A11F44EA76C6EF750AF892F9EA2
  2149. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\nt5.cat'; file='\Device\HarddiskVolume4\Windows\System32\glu32.dll'
  2150. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  2151. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  2152. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'opengl32.dll'.
  2153. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
  2154. 1918.1b94: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\glu32.dll) WinVerifyTrust
  2155. 1918.1b94: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\glu32.dll
  2156. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  2157. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  2158. 1918.1b94: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll
  2159. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
  2160. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
  2161. 1918.1b94: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\advapi32.dll
  2162. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  2163. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  2164. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
  2165. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
  2166. 1918.1b94: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll
  2167. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
  2168. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
  2169. 1918.1b94: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll
  2170. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mpr.dll'...
  2171. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'mpr.dll' -> '\Device\HarddiskVolume4\Windows\System32\mpr.dll' [rcNtRedir=0xc0150008]
  2172. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000478 pwszName=\Device\HarddiskVolume4\Windows\System32\mpr.dll
  2173. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 000000000076ddb0
  2174. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=000000000076ddb0
  2175. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=F84FE9BA047B24E7694C9E0C349B48B9FD5F925B
  2176. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntpe.cat'; file='\Device\HarddiskVolume4\Windows\System32\mpr.dll'
  2177. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  2178. 1918.1b94: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\mpr.dll) WinVerifyTrust
  2179. 1918.1b94: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\mpr.dll
  2180. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
  2181. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume4\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
  2182. 1918.1b94: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ws2_32.dll
  2183. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
  2184. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
  2185. 1918.1b94: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\advapi32.dll
  2186. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
  2187. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume4\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
  2188. 1918.1b94: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ole32.dll
  2189. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
  2190. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume4\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
  2191. 1918.1b94: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\shell32.dll
  2192. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  2193. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  2194. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
  2195. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
  2196. 1918.1b94: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll
  2197. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
  2198. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
  2199. 1918.1b94: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll
  2200. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
  2201. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
  2202. 1918.1b94: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
  2203. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  2204. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  2205. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  2206. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  2207. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
  2208. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume4\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
  2209. 1918.1b94: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\opengl32.dll
  2210. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
  2211. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume4\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
  2212. 1918.1b94: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ole32.dll
  2213. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
  2214. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
  2215. 1918.1b94: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll
  2216. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
  2217. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
  2218. 1918.1b94: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll
  2219. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
  2220. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume4\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
  2221. 1918.1b94: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\shell32.dll
  2222. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
  2223. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
  2224. 1918.1b94: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
  2225. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
  2226. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
  2227. 1918.1b94: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
  2228. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  2229. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  2230. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  2231. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  2232. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
  2233. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
  2234. 1918.1b94: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll
  2235. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'comdlg32.dll'...
  2236. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'comdlg32.dll' -> '\Device\HarddiskVolume4\Windows\System32\comdlg32.dll' [rcNtRedir=0xc0150008]
  2237. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000484 pwszName=\Device\HarddiskVolume4\Windows\System32\comdlg32.dll
  2238. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 000000000076ddb0
  2239. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=000000000076ddb0
  2240. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=66EE5BDFFA413AEA9E1FE7838A08646E94136DA5
  2241. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume4\Windows\System32\comdlg32.dll'
  2242. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  2243. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  2244. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'shlwapi.dll'.
  2245. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
  2246. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'gdi32.dll'.
  2247. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'comctl32.dll'.
  2248. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'shell32.dll'.
  2249. 1918.1b94: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\comdlg32.dll) WinVerifyTrust
  2250. 1918.1b94: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\comdlg32.dll
  2251. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winspool.drv'...
  2252. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'winspool.drv' -> '\Device\HarddiskVolume4\Windows\System32\winspool.drv' [rcNtRedir=0xc0150008]
  2253. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000488 pwszName=\Device\HarddiskVolume4\Windows\System32\winspool.drv
  2254. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 000000000076ddb0
  2255. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=000000000076ddb0
  2256. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=C89A2ED7B99A056D78CA6BAC9CCAB8B1FF119A14
  2257. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume4\Windows\System32\winspool.drv'
  2258. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  2259. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  2260. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'gdi32.dll'.
  2261. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'user32.dll'.
  2262. 1918.1b94: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\winspool.drv) WinVerifyTrust
  2263. 1918.1b94: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\winspool.drv
  2264. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
  2265. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
  2266. 1918.1b94: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
  2267. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
  2268. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
  2269. 1918.1b94: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
  2270. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
  2271. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
  2272. 1918.1b94: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll
  2273. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  2274. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  2275. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  2276. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  2277. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
  2278. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
  2279. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
  2280. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
  2281. 1918.1b94: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
  2282. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
  2283. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
  2284. 1918.1b94: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
  2285. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
  2286. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
  2287. 1918.1b94: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll
  2288. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  2289. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  2290. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  2291. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  2292. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shlwapi.dll'...
  2293. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'shlwapi.dll' -> '\Device\HarddiskVolume4\Windows\System32\shlwapi.dll' [rcNtRedir=0xc0150008]
  2294. 1918.1b94: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\shlwapi.dll
  2295. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  2296. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  2297. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  2298. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  2299. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  2300. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  2301. 1918.1b94: supR3HardenedScreenImage/Imports: cache hit (Unknown Status -22900 (0xffffa68c)) on \Device\HarddiskVolume4\Windows\System32\user32.dll
  2302. 1918.1b94: Error (rc=0):
  2303. 1918.1b94: supR3HardenedScreenImage/Imports: cached rc=Unknown Status -22900 (0xffffa68c) fImage=1 fProtect=0x0 fAccess=0x0 cHits=16 \Device\HarddiskVolume4\Windows\System32\user32.dll
  2304. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  2305. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  2306. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  2307. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  2308. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  2309. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  2310. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  2311. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  2312. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  2313. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  2314. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  2315. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  2316. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
  2317. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume4\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
  2318. 1918.1b94: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ole32.dll
  2319. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  2320. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  2321. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  2322. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  2323. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  2324. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  2325. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  2326. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  2327. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  2328. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  2329. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
  2330. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume4\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
  2331. 1918.1b94: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\shell32.dll
  2332. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'comctl32.dll'...
  2333. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'comctl32.dll' -> '\Device\HarddiskVolume4\Windows\System32\comctl32.dll' [rcNtRedir=0x0]
  2334. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000480 pwszName=\Device\HarddiskVolume4\Windows\System32\comctl32.dll
  2335. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 000000000076ddb0
  2336. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=000000000076ddb0
  2337. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=5A2FB6B10717AFC03CD9FE6E8F1337A8EA94BF9B
  2338. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2864058~31bf3856ad364e35~amd64~~6.1.1.1.cat'; file='\Device\HarddiskVolume4\Windows\System32\comctl32.dll'
  2339. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  2340. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'advapi32.dll'.
  2341. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
  2342. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
  2343. 1918.1b94: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\comctl32.dll) WinVerifyTrust
  2344. 1918.1b94: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\comctl32.dll
  2345. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  2346. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  2347. 1918.1b94: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll
  2348. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  2349. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  2350. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shlwapi.dll'...
  2351. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'shlwapi.dll' -> '\Device\HarddiskVolume4\Windows\System32\shlwapi.dll' [rcNtRedir=0xc0150008]
  2352. 1918.1b94: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\shlwapi.dll
  2353. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  2354. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  2355. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  2356. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  2357. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
  2358. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume4\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
  2359. 1918.1b94: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\opengl32.dll
  2360. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  2361. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  2362. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dwmapi.dll'...
  2363. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'dwmapi.dll' -> '\Device\HarddiskVolume4\Windows\System32\dwmapi.dll' [rcNtRedir=0xc0150008]
  2364. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000498 pwszName=\Device\HarddiskVolume4\Windows\System32\dwmapi.dll
  2365. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 000000000076ddb0
  2366. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=000000000076ddb0
  2367. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=B79EE7B5AD74EF51A849809202E043183A2C727E
  2368. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntpe.cat'; file='\Device\HarddiskVolume4\Windows\System32\dwmapi.dll'
  2369. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  2370. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  2371. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
  2372. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
  2373. 1918.1b94: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\dwmapi.dll) WinVerifyTrust
  2374. 1918.1b94: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\dwmapi.dll
  2375. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'setupapi.dll'...
  2376. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'setupapi.dll' -> '\Device\HarddiskVolume4\Windows\System32\setupapi.dll' [rcNtRedir=0xc0150008]
  2377. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hFile=000000000000048c pwszName=\Device\HarddiskVolume4\Windows\System32\setupapi.dll
  2378. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 000000000076ddb0
  2379. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=000000000076ddb0
  2380. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=1499C4FEA6E143F9BEC35B4FFA098917D3A6EBF2
  2381. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume4\Windows\System32\setupapi.dll'
  2382. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  2383. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'cfgmgr32.dll'.
  2384. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'msvcrt.dll'.
  2385. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'gdi32.dll'.
  2386. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'rpcrt4.dll'.
  2387. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'user32.dll'.
  2388. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'oleaut32.dll'.
  2389. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'devobj.dll'.
  2390. 1918.1b94: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\setupapi.dll) WinVerifyTrust
  2391. 1918.1b94: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\setupapi.dll
  2392. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  2393. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  2394. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dciman32.dll'...
  2395. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'dciman32.dll' -> '\Device\HarddiskVolume4\Windows\System32\dciman32.dll' [rcNtRedir=0xc0150008]
  2396. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000004a0 pwszName=\Device\HarddiskVolume4\Windows\System32\dciman32.dll
  2397. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 000000000076ddb0
  2398. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=000000000076ddb0
  2399. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=F097BF0B081F54722F0A01EF1CC13AECA64B12F0
  2400. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2847311~31bf3856ad364e35~amd64~~6.1.1.2.cat'; file='\Device\HarddiskVolume4\Windows\System32\dciman32.dll'
  2401. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  2402. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  2403. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'gdi32.dll'.
  2404. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
  2405. 1918.1b94: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\dciman32.dll) WinVerifyTrust
  2406. 1918.1b94: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\dciman32.dll
  2407. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  2408. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  2409. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  2410. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  2411. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  2412. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  2413. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  2414. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  2415. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  2416. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  2417. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'devobj.dll'...
  2418. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'devobj.dll' -> '\Device\HarddiskVolume4\Windows\System32\devobj.dll' [rcNtRedir=0xc0150008]
  2419. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000470 pwszName=\Device\HarddiskVolume4\Windows\System32\devobj.dll
  2420. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 000000000076ddb0
  2421. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=000000000076ddb0
  2422. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=B410A095222E69F0ECE7D66E4AC27A7125D2EB5A
  2423. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntpe.cat'; file='\Device\HarddiskVolume4\Windows\System32\devobj.dll'
  2424. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  2425. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  2426. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'cfgmgr32.dll'.
  2427. 1918.1b94: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\devobj.dll) WinVerifyTrust
  2428. 1918.1b94: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\devobj.dll
  2429. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
  2430. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume4\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
  2431. 1918.1b94: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\oleaut32.dll
  2432. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  2433. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  2434. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  2435. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  2436. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  2437. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  2438. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  2439. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  2440. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'cfgmgr32.dll'...
  2441. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'cfgmgr32.dll' -> '\Device\HarddiskVolume4\Windows\System32\cfgmgr32.dll' [rcNtRedir=0xc0150008]
  2442. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000004a4 pwszName=\Device\HarddiskVolume4\Windows\System32\cfgmgr32.dll
  2443. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 000000000076ddb0
  2444. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=000000000076ddb0
  2445. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=8F731777EFC4BC982C1E1467FBF29A74CC14D93A
  2446. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume4\Windows\System32\cfgmgr32.dll'
  2447. 1918.1b94: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  2448. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  2449. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'rpcrt4.dll'.
  2450. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'advapi32.dll'.
  2451. 1918.1b94: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\cfgmgr32.dll) WinVerifyTrust
  2452. 1918.1b94: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\cfgmgr32.dll
  2453. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  2454. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  2455. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  2456. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  2457. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  2458. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  2459. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  2460. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  2461. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  2462. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  2463. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
  2464. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
  2465. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
  2466. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
  2467. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  2468. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  2469. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  2470. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  2471. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'cfgmgr32.dll'...
  2472. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'cfgmgr32.dll' -> '\Device\HarddiskVolume4\Windows\System32\cfgmgr32.dll' [rcNtRedir=0xc0150008]
  2473. 1918.1b94: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\cfgmgr32.dll
  2474. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  2475. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  2476. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VirtualBox.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000007c4a80:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
  2477. 1918.1b94: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.dll
  2478. 1918.1b94: supR3HardenedDllNotificationCallback: load 000007feedb90000 LB 0x008ea000 C:\Program Files\Oracle\VirtualBox\VirtualBox.dll [fFlags=0x0]
  2479. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.dll
  2480. 1918.1b94: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\opengl32.dll
  2481. 1918.1b94: supR3HardenedDllNotificationCallback: load 000007fef7cf0000 LB 0x0011d000 C:\Windows\system32\OPENGL32.dll [fFlags=0x0]
  2482. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\opengl32.dll
  2483. 1918.1b94: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\glu32.dll
  2484. 1918.1b94: supR3HardenedDllNotificationCallback: load 000007fef7cc0000 LB 0x0002d000 C:\Windows\system32\GLU32.dll [fFlags=0x0]
  2485. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\glu32.dll
  2486. 1918.1b94: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ddraw.dll
  2487. 1918.1b94: supR3HardenedDllNotificationCallback: load 000007fef7bc0000 LB 0x000f1000 C:\Windows\system32\DDRAW.dll [fFlags=0x0]
  2488. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ddraw.dll
  2489. 1918.1b94: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\dciman32.dll
  2490. 1918.1b94: supR3HardenedDllNotificationCallback: load 000007fef8ca0000 LB 0x00008000 C:\Windows\system32\DCIMAN32.dll [fFlags=0x0]
  2491. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\dciman32.dll
  2492. 1918.1b94: supR3HardenedDllNotificationCallback: load 000007fefd550000 LB 0x001d7000 C:\Windows\system32\SETUPAPI.dll [fFlags=0x0]
  2493. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\setupapi.dll
  2494. 1918.1b94: supR3HardenedDllNotificationCallback: load 000007fefce30000 LB 0x00036000 C:\Windows\system32\CFGMGR32.dll [fFlags=0x0]
  2495. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\cfgmgr32.dll
  2496. 1918.1b94: supR3HardenedDllNotificationCallback: load 000007fefe6a0000 LB 0x000d7000 C:\Windows\system32\OLEAUT32.dll [fFlags=0x0]
  2497. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\oleaut32.dll
  2498. 1918.1b94: supR3HardenedDllNotificationCallback: load 000007fefd320000 LB 0x00203000 C:\Windows\system32\ole32.dll [fFlags=0x0]
  2499. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ole32.dll
  2500. 1918.1b94: supR3HardenedDllNotificationCallback: load 000007fefcc60000 LB 0x0001a000 C:\Windows\system32\DEVOBJ.dll [fFlags=0x0]
  2501. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\devobj.dll
  2502. 1918.1b94: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\dwmapi.dll
  2503. 1918.1b94: supR3HardenedDllNotificationCallback: load 000007fefae40000 LB 0x00018000 C:\Windows\system32\dwmapi.dll [fFlags=0x0]
  2504. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\dwmapi.dll
  2505. 1918.1b94: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
  2506. 1918.1b94: supR3HardenedDllNotificationCallback: load 000000006b320000 LB 0x00565000 C:\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [fFlags=0x0]
  2507. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
  2508. 1918.1b94: supR3HardenedDllNotificationCallback: load 000007fefd730000 LB 0x00d88000 C:\Windows\system32\SHELL32.dll [fFlags=0x0]
  2509. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\shell32.dll
  2510. 1918.1b94: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\mpr.dll
  2511. 1918.1b94: supR3HardenedDllNotificationCallback: load 000007fefcbb0000 LB 0x00018000 C:\Windows\system32\MPR.dll [fFlags=0x0]
  2512. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\mpr.dll
  2513. 1918.1b94: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
  2514. 1918.1b94: supR3HardenedDllNotificationCallback: load 000007feed590000 LB 0x005f7000 C:\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [fFlags=0x0]
  2515. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
  2516. 1918.1b94: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll
  2517. 1918.1b94: supR3HardenedDllNotificationCallback: load 0000000066680000 LB 0x00561000 C:\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [fFlags=0x0]
  2518. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll
  2519. 1918.1b94: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll
  2520. 1918.1b94: supR3HardenedDllNotificationCallback: load 000007fef1760000 LB 0x00051000 C:\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll [fFlags=0x0]
  2521. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll
  2522. 1918.1b94: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\winspool.drv
  2523. 1918.1b94: supR3HardenedDllNotificationCallback: load 000007fef9850000 LB 0x00071000 C:\Windows\system32\WINSPOOL.DRV [fFlags=0x0]
  2524. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\winspool.drv
  2525. 1918.1b94: supR3HardenedDllNotificationCallback: load 000007fefe8d0000 LB 0x00097000 C:\Windows\system32\COMDLG32.dll [fFlags=0x0]
  2526. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\comdlg32.dll
  2527. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'advapi32.dll'.
  2528. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
  2529. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
  2530. 1918.1b94: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.18201_none_a4d3b9377117c3df\comctl32.dll)
  2531. 1918.1b94: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.18201_none_a4d3b9377117c3df\comctl32.dll
  2532. 1918.1b94: supR3HardenedDllNotificationCallback: load 000007fef98f0000 LB 0x000a0000 C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.18201_none_a4d3b9377117c3df\COMCTL32.dll [fFlags=0x0]
  2533. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.18201_none_a4d3b9377117c3df\comctl32.dll [avoiding WinVerifyTrust]
  2534. 1918.1b94: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll
  2535. 1918.1b94: supR3HardenedDllNotificationCallback: load 000000006bc50000 LB 0x00054000 C:\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll [fFlags=0x0]
  2536. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll
  2537. 1918.1b94: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\winmm.dll
  2538. 1918.1b94: supR3HardenedDllNotificationCallback: load 000007fefa680000 LB 0x0003b000 C:\Windows\system32\WINMM.dll [fFlags=0x0]
  2539. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\winmm.dll
  2540. 1918.1b94: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume4\Windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.18201_none_a4d3b9377117c3df\comctl32.dll'.
  2541. 1918.1b94: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.18201_none_a4d3b9377117c3df\comctl32.dll' [rescheduled]
  2542. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\imm32.dll
  2543. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  2544. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  2545. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  2546. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  2547. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
  2548. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
  2549. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\imm32.dll (Input=imm32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000007c4b10:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
  2550. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefe670000 'C:\Windows\system32\imm32.dll'
  2551. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefe780000 'C:\Windows\system32\ADVAPI32.DLL'
  2552. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\cryptbase.dll
  2553. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\cryptbase.dll (Input=cryptbase.dll, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000000000:<flags> [calling]
  2554. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefc7f0000 'C:\Windows\system32\cryptbase.dll'
  2555. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feedb90000 'C:\Program Files\Oracle\VirtualBox\VirtualBox.dll'
  2556. 1918.1b94: SUPR3HardenedMain: Calling TrustedMain (000007feedb91610)...
  2557. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ole32.dll
  2558. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\ole32.dll (Input=ole32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000007c4a80:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
  2559. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefd320000 'C:\Windows\system32\ole32.dll'
  2560. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefe780000 'C:\Windows\system32\ADVAPI32.dll'
  2561. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\profapi.dll
  2562. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\profapi.dll (Input=profapi.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000007c4a80:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
  2563. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefca90000 'C:\Windows\system32\profapi.dll'
  2564. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
  2565. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'ole32.dll'.
  2566. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
  2567. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'imm32.dll'.
  2568. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'winmm.dll'.
  2569. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'oleaut32.dll'.
  2570. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'shell32.dll'.
  2571. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'advapi32.dll'.
  2572. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'qt5guivbox.dll'.
  2573. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'qt5corevbox.dll'.
  2574. 1918.1b94: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'msvcr100.dll'.
  2575. 1918.1b94: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\platforms\qwindows.dll) WinVerifyTrust
  2576. 1918.1b94: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\platforms\qwindows.dll
  2577. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
  2578. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
  2579. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
  2580. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
  2581. 1918.1b94: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
  2582. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
  2583. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
  2584. 1918.1b94: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
  2585. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
  2586. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
  2587. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
  2588. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume4\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
  2589. 1918.1b94: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\shell32.dll
  2590. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
  2591. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume4\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
  2592. 1918.1b94: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\oleaut32.dll
  2593. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
  2594. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume4\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
  2595. 1918.1b94: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\winmm.dll
  2596. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'...
  2597. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume4\Windows\System32\imm32.dll' [rcNtRedir=0xc0150008]
  2598. 1918.1b94: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\imm32.dll
  2599. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  2600. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  2601. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
  2602. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume4\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
  2603. 1918.1b94: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ole32.dll
  2604. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  2605. 1918.1b94: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  2606. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000007c4a80:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
  2607. 1918.1b94: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\platforms\qwindows.dll
  2608. 1918.1b94: supR3HardenedDllNotificationCallback: load 000007feed460000 LB 0x0012e000 C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll [fFlags=0x0]
  2609. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\platforms\qwindows.dll
  2610. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feed460000 'C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll'
  2611. 1918.1b94: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\cryptbase.dll
  2612. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\CRYPTBASE.dll (Input=CRYPTBASE.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000007c4a80:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
  2613. 1918.1b94: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefc7f0000 'C:\Windows\system32\CRYPTBASE.dll'
  2614. 1014.18c0: supR3HardNtChildWaitFor[2]: Quitting: ExitCode=0x1 (rcNtWait=0x0, rcNt1=0x0, rcNt2=0x103, rcNt3=0x103, 1279 ms, the end);
  2615. 15dc.1be0: supR3HardNtChildWaitFor[1]: Quitting: ExitCode=0x1 (rcNtWait=0x0, rcNt1=0x0, rcNt2=0x103, rcNt3=0x103, 1912 ms, the end);
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!