VirtualBox

Ticket #14269: VBoxHardening.log

File VBoxHardening.log, 174.7 KB (added by narendra, 4 years ago)
Line 
14e0.2bb0: Log file opened: 6.1.4r136177 g_hStartupLog=0000000000000074 g_uNtVerCombined=0xa047bb00
24e0.2bb0: \SystemRoot\System32\ntdll.dll:
34e0.2bb0: CreationTime: 2020-04-15T03:00:19.915532600Z
44e0.2bb0: LastWriteTime: 2020-04-15T03:00:19.947450300Z
54e0.2bb0: ChangeTime: 2020-04-15T04:36:20.120191300Z
64e0.2bb0: FileAttributes: 0x20
74e0.2bb0: Size: 0x1e8458
84e0.2bb0: NT Headers: 0xd8
94e0.2bb0: Timestamp: 0xc1bb301
104e0.2bb0: Machine: 0x8664 - amd64
114e0.2bb0: Timestamp: 0xc1bb301
124e0.2bb0: Image Version: 10.0
134e0.2bb0: SizeOfImage: 0x1f0000 (2031616)
144e0.2bb0: Resource Dir: 0x17f000 LB 0x6f310
154e0.2bb0: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
164e0.2bb0: [Raw version resource data: 0x17f0f0 LB 0x380, codepage 0x0 (reserved 0x0)]
174e0.2bb0: ProductName: Microsoft® Windows® Operating System
184e0.2bb0: ProductVersion: 10.0.18362.778
194e0.2bb0: FileVersion: 10.0.18362.778 (WinBuild.160101.0800)
204e0.2bb0: FileDescription: NT Layer DLL
214e0.2bb0: \SystemRoot\System32\kernel32.dll:
224e0.2bb0: CreationTime: 2020-04-15T03:00:07.398523600Z
234e0.2bb0: LastWriteTime: 2020-04-15T03:00:07.414523500Z
244e0.2bb0: ChangeTime: 2020-04-15T04:36:17.914585600Z
254e0.2bb0: FileAttributes: 0x20
264e0.2bb0: Size: 0xb0498
274e0.2bb0: NT Headers: 0xe8
284e0.2bb0: Timestamp: 0x21b07e83
294e0.2bb0: Machine: 0x8664 - amd64
304e0.2bb0: Timestamp: 0x21b07e83
314e0.2bb0: Image Version: 10.0
324e0.2bb0: SizeOfImage: 0xb2000 (729088)
334e0.2bb0: Resource Dir: 0xb0000 LB 0x520
344e0.2bb0: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
354e0.2bb0: [Raw version resource data: 0xb00b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
364e0.2bb0: ProductName: Microsoft® Windows® Operating System
374e0.2bb0: ProductVersion: 10.0.18362.778
384e0.2bb0: FileVersion: 10.0.18362.778 (WinBuild.160101.0800)
394e0.2bb0: FileDescription: Windows NT BASE API Client DLL
404e0.2bb0: \SystemRoot\System32\KernelBase.dll:
414e0.2bb0: CreationTime: 2020-04-15T03:00:20.464934900Z
424e0.2bb0: LastWriteTime: 2020-04-15T03:00:20.515799000Z
434e0.2bb0: ChangeTime: 2020-04-15T04:36:19.805905400Z
444e0.2bb0: FileAttributes: 0x20
454e0.2bb0: Size: 0x2a3c38
464e0.2bb0: NT Headers: 0xf0
474e0.2bb0: Timestamp: 0xafa78a6a
484e0.2bb0: Machine: 0x8664 - amd64
494e0.2bb0: Timestamp: 0xafa78a6a
504e0.2bb0: Image Version: 10.0
514e0.2bb0: SizeOfImage: 0x2a3000 (2764800)
524e0.2bb0: Resource Dir: 0x27d000 LB 0x548
534e0.2bb0: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
544e0.2bb0: [Raw version resource data: 0x27d0b0 LB 0x3bc, codepage 0x0 (reserved 0x0)]
554e0.2bb0: ProductName: Microsoft® Windows® Operating System
564e0.2bb0: ProductVersion: 10.0.18362.778
574e0.2bb0: FileVersion: 10.0.18362.778 (WinBuild.160101.0800)
584e0.2bb0: FileDescription: Windows NT BASE API Client DLL
594e0.2bb0: \SystemRoot\System32\apisetschema.dll:
604e0.2bb0: CreationTime: 2019-03-19T04:43:54.837151500Z
614e0.2bb0: LastWriteTime: 2019-03-19T04:43:54.837151500Z
624e0.2bb0: ChangeTime: 2020-04-15T03:01:01.500746400Z
634e0.2bb0: FileAttributes: 0x20
644e0.2bb0: Size: 0x1d028
654e0.2bb0: NT Headers: 0xc8
664e0.2bb0: Timestamp: 0xd6ced080
674e0.2bb0: Machine: 0x8664 - amd64
684e0.2bb0: Timestamp: 0xd6ced080
694e0.2bb0: Image Version: 10.0
704e0.2bb0: SizeOfImage: 0x1e000 (122880)
714e0.2bb0: Resource Dir: 0x1d000 LB 0x408
724e0.2bb0: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
734e0.2bb0: [Raw version resource data: 0x1d060 LB 0x3a8, codepage 0x0 (reserved 0x0)]
744e0.2bb0: ProductName: Microsoft® Windows® Operating System
754e0.2bb0: ProductVersion: 10.0.18362.1
764e0.2bb0: FileVersion: 10.0.18362.1 (WinBuild.160101.0800)
774e0.2bb0: FileDescription: ApiSet Schema DLL
784e0.2bb0: supR3HardenedWinFindAdversaries: 0x0
794e0.2bb0: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
804e0.2bb0: Calling main()
814e0.2bb0: SUPR3HardenedMain: pszProgName=VirtualBoxVM fFlags=0x2
824e0.2bb0: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
834e0.2bb0: SUPR3HardenedMain: Respawn #1
844e0.2bb0: System32: \Device\HarddiskVolume3\Windows\System32
854e0.2bb0: WinSxS: \Device\HarddiskVolume3\Windows\WinSxS
864e0.2bb0: KnownDllPath: C:\windows\System32
874e0.2bb0: supR3HardenedWinInit: Performing a limited self purification...
884e0.2bb0: supHardNtVpScanVirtualMemory: enmKind=SELF_PURIFICATION
894e0.2bb0: *0000000000000000-00000000002effff 0x0001/0x0000 0x0000000
904e0.2bb0: *00000000002f0000-00000000002fffff 0x0004/0x0004 0x0040000
914e0.2bb0: 0000000000300000-000000000030ffff 0x0001/0x0000 0x0000000
924e0.2bb0: *0000000000310000-000000000032afff 0x0002/0x0002 0x0040000
934e0.2bb0: 000000000032b000-000000000032ffff 0x0001/0x0000 0x0000000
944e0.2bb0: *0000000000330000-0000000000333fff 0x0002/0x0002 0x0040000
954e0.2bb0: 0000000000334000-000000000033ffff 0x0001/0x0000 0x0000000
964e0.2bb0: *0000000000340000-0000000000341fff 0x0004/0x0004 0x0020000
974e0.2bb0: 0000000000342000-000000000034ffff 0x0001/0x0000 0x0000000
984e0.2bb0: *0000000000350000-0000000000351fff 0x0004/0x0004 0x0020000
994e0.2bb0: 0000000000352000-0000000000381fff 0x0000/0x0004 0x0020000
1004e0.2bb0: 0000000000382000-00000000003fffff 0x0001/0x0000 0x0000000
1014e0.2bb0: *0000000000400000-000000000044efff 0x0000/0x0004 0x0020000
1024e0.2bb0: 000000000044f000-0000000000451fff 0x0004/0x0004 0x0020000
1034e0.2bb0: 0000000000452000-00000000005fffff 0x0000/0x0004 0x0020000
1044e0.2bb0: *0000000000600000-00000000006b8fff 0x0000/0x0004 0x0020000
1054e0.2bb0: 00000000006b9000-00000000006bbfff 0x0104/0x0004 0x0020000
1064e0.2bb0: 00000000006bc000-00000000006fffff 0x0004/0x0004 0x0020000
1074e0.2bb0: 0000000000700000-00000000007affff 0x0001/0x0000 0x0000000
1084e0.2bb0: *00000000007b0000-00000000007b4fff 0x0004/0x0004 0x0020000
1094e0.2bb0: 00000000007b5000-00000000008affff 0x0000/0x0004 0x0020000
1104e0.2bb0: *00000000008b0000-0000000000976fff 0x0002/0x0002 0x0040000
1114e0.2bb0: 0000000000977000-0000000000a2ffff 0x0001/0x0000 0x0000000
1124e0.2bb0: *0000000000a30000-0000000000a3efff 0x0004/0x0004 0x0020000
1134e0.2bb0: 0000000000a3f000-0000000000a3ffff 0x0000/0x0004 0x0020000
1144e0.2bb0: *0000000000a40000-0000000000a49fff 0x0000/0x0004 0x0020000
1154e0.2bb0: 0000000000a4a000-0000000000c3afff 0x0004/0x0004 0x0020000
1164e0.2bb0: 0000000000c3b000-0000000000c3bfff 0x0000/0x0004 0x0020000
1174e0.2bb0: 0000000000c3c000-0000000000c3ffff 0x0001/0x0000 0x0000000
1184e0.2bb0: *0000000000c40000-0000000000c5cfff 0x0004/0x0004 0x0020000
1194e0.2bb0: 0000000000c5d000-0000000000d3ffff 0x0000/0x0004 0x0020000
1204e0.2bb0: 0000000000d40000-000000007ffdffff 0x0001/0x0000 0x0000000
1214e0.2bb0: *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000
1224e0.2bb0: 000000007ffe1000-000000007ffeafff 0x0001/0x0000 0x0000000
1234e0.2bb0: *000000007ffeb000-000000007ffebfff 0x0002/0x0002 0x0020000
1244e0.2bb0: 000000007ffec000-00007ff4b67bffff 0x0001/0x0000 0x0000000
1254e0.2bb0: *00007ff4b67c0000-00007ff4b67c4fff 0x0002/0x0002 0x0040000
1264e0.2bb0: 00007ff4b67c5000-00007ff4b68bffff 0x0000/0x0002 0x0040000
1274e0.2bb0: *00007ff4b68c0000-00007ff5b68dffff 0x0000/0x0004 0x0020000
1284e0.2bb0: *00007ff5b68e0000-00007ff5b88dffff 0x0000/0x0004 0x0020000
1294e0.2bb0: 00007ff5b88e0000-00007ff5b88e0fff 0x0004/0x0004 0x0020000
1304e0.2bb0: 00007ff5b88e1000-00007ff5b88effff 0x0001/0x0000 0x0000000
1314e0.2bb0: *00007ff5b88f0000-00007ff5b88f0fff 0x0002/0x0002 0x0040000
1324e0.2bb0: 00007ff5b88f1000-00007ff5b88fffff 0x0001/0x0000 0x0000000
1334e0.2bb0: *00007ff5b8900000-00007ff5b8922fff 0x0002/0x0002 0x0040000
1344e0.2bb0: 00007ff5b8923000-00007ff730aaffff 0x0001/0x0000 0x0000000
1354e0.2bb0: *00007ff730ab0000-00007ff730ab0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1364e0.2bb0: 00007ff730ab1000-00007ff730b26fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1374e0.2bb0: 00007ff730b27000-00007ff730b27fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1384e0.2bb0: 00007ff730b28000-00007ff730b6ffff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1394e0.2bb0: 00007ff730b70000-00007ff730b72fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1404e0.2bb0: 00007ff730b73000-00007ff730b75fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1414e0.2bb0: 00007ff730b76000-00007ff730b78fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1424e0.2bb0: 00007ff730b79000-00007ff730b79fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1434e0.2bb0: 00007ff730b7a000-00007ff730b7bfff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1444e0.2bb0: 00007ff730b7c000-00007ff730b7cfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1454e0.2bb0: 00007ff730b7d000-00007ff730bc5fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1464e0.2bb0: 00007ff730bc6000-00007ffc7fefffff 0x0001/0x0000 0x0000000
1474e0.2bb0: *00007ffc7ff00000-00007ffc7ff00fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
1484e0.2bb0: 00007ffc7ff01000-00007ffc80005fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
1494e0.2bb0: 00007ffc80006000-00007ffc80167fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
1504e0.2bb0: 00007ffc80168000-00007ffc8016bfff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
1514e0.2bb0: 00007ffc8016c000-00007ffc8016cfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
1524e0.2bb0: 00007ffc8016d000-00007ffc801a2fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
1534e0.2bb0: 00007ffc801a3000-00007ffc8211ffff 0x0001/0x0000 0x0000000
1544e0.2bb0: *00007ffc82120000-00007ffc82120fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\kernel32.dll
1554e0.2bb0: 00007ffc82121000-00007ffc82195fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\kernel32.dll
1564e0.2bb0: 00007ffc82196000-00007ffc821c7fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\kernel32.dll
1574e0.2bb0: 00007ffc821c8000-00007ffc821c8fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\kernel32.dll
1584e0.2bb0: 00007ffc821c9000-00007ffc821c9fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\kernel32.dll
1594e0.2bb0: 00007ffc821ca000-00007ffc821d1fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\kernel32.dll
1604e0.2bb0: 00007ffc821d2000-00007ffc8297ffff 0x0001/0x0000 0x0000000
1614e0.2bb0: *00007ffc82980000-00007ffc82980fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
1624e0.2bb0: 00007ffc82981000-00007ffc82a97fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
1634e0.2bb0: 00007ffc82a98000-00007ffc82adefff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
1644e0.2bb0: 00007ffc82adf000-00007ffc82adffff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
1654e0.2bb0: 00007ffc82ae0000-00007ffc82ae1fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
1664e0.2bb0: 00007ffc82ae2000-00007ffc82aeafff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
1674e0.2bb0: 00007ffc82aeb000-00007ffc82b6ffff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
1684e0.2bb0: 00007ffc82b70000-00007ffffffeffff 0x0001/0x0000 0x0000000
1694e0.2bb0: kernel32.dll: timestamp 0x21b07e83 (rc=VINF_SUCCESS)
1704e0.2bb0: kernelbase.dll: timestamp 0xafa78a6a (rc=VINF_SUCCESS)
1714e0.2bb0: VirtualBoxVM.exe: timestamp 0x5e4c1d19 (rc=VINF_SUCCESS)
1724e0.2bb0: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
1734e0.2bb0: '\Device\HarddiskVolume3\Windows\System32\ntdll.dll' has no imports
1744e0.2bb0: supR3HardenedWinInit: SUPHARDNTVPKIND_SELF_PURIFICATION_LIMITED -> VINF_SUCCESS, cFixes=0
1754e0.2bb0: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
1764e0.2bb0: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe)
1774e0.2bb0: supR3HardNtEnableThreadCreationEx:
1784e0.2bb0: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffc829f1770 pvNtTerminateThread=00007ffc82a1cac0
1794e0.2bb0: supR3HardenedWinDoReSpawn(1): New child 760.4d0 [kernel32].
1804e0.2bb0: supR3HardNtChildGatherData: PebBaseAddress=0000000000b80000 cbPeb=0x388
1814e0.2bb0: supR3HardNtPuChFindNtdll: uNtDllParentAddr=00007ffc82980000 uNtDllChildAddr=00007ffc82980000
1824e0.2bb0: supR3HardenedWinSetupChildInit: uLdrInitThunk=00007ffc829f1770
1834e0.2bb0: supR3HardenedWinSetupChildInit: Initial context:
184 rax=0000000000000000 rbx=0000000000000000 rcx=00007ff730ab7900 rdx=0000000000b80000
185 rsi=0000000000000000 rdi=0000000000000000 r8 =0000000000000000 r9 =0000000000000000
186 r10=0000000000000000 r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
187 r14=0000000000000000 r15=0000000000000000 P1=0000000000000000 P2=0000000000000000
188 rip=00007ffc829ece30 rsp=0000000000cffe68 rbp=0000000000000000 ctxflags=0010001b
189 cs=0033 ss=002b ds=0000 es=0000 fs=0000 gs=0000 eflags=00000200 mxcrx=00001f80
190 P3=0000000000000000 P4=0000000000000000 P5=0000000000000000 P6=0000000000000000
191 dr0=0000000000000000 dr1=0000000000000000 dr2=0000000000000000 dr3=0000000000000000
192 dr6=0000000000000000 dr7=0000000000000000 vcr=0000000000000000 dcr=0000000000000000
193 lbt=0000000000000000 lbf=0000000000000000 lxt=0000000000000000 lxf=0000000000000000
1944e0.2bb0: supR3HardenedWinSetupChildInit: Start child.
1954e0.2bb0: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 2 ms.
1964e0.2bb0: supR3HardNtChildPurify: Startup delay kludge #1/0: 258 ms, 26 sleeps
1974e0.2bb0: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
1984e0.2bb0: *0000000000000000-000000000099ffff 0x0001/0x0000 0x0000000
1994e0.2bb0: *00000000009a0000-00000000009bffff 0x0004/0x0004 0x0020000
2004e0.2bb0: *00000000009c0000-00000000009dafff 0x0002/0x0002 0x0040000
2014e0.2bb0: 00000000009db000-00000000009dffff 0x0001/0x0000 0x0000000
2024e0.2bb0: *00000000009e0000-00000000009e3fff 0x0002/0x0002 0x0040000
2034e0.2bb0: 00000000009e4000-00000000009effff 0x0001/0x0000 0x0000000
2044e0.2bb0: *00000000009f0000-00000000009f1fff 0x0004/0x0004 0x0020000
2054e0.2bb0: 00000000009f2000-00000000009fffff 0x0001/0x0000 0x0000000
2064e0.2bb0: *0000000000a00000-0000000000b7ffff 0x0000/0x0004 0x0020000
2074e0.2bb0: 0000000000b80000-0000000000b82fff 0x0004/0x0004 0x0020000
2084e0.2bb0: 0000000000b83000-0000000000bfffff 0x0000/0x0004 0x0020000
2094e0.2bb0: *0000000000c00000-0000000000cfafff 0x0000/0x0004 0x0020000
2104e0.2bb0: 0000000000cfb000-0000000000cfdfff 0x0104/0x0004 0x0020000
2114e0.2bb0: 0000000000cfe000-0000000000cfffff 0x0004/0x0004 0x0020000
2124e0.2bb0: 0000000000d00000-000000007ffdffff 0x0001/0x0000 0x0000000
2134e0.2bb0: *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000
2144e0.2bb0: 000000007ffe1000-000000007ffeafff 0x0001/0x0000 0x0000000
2154e0.2bb0: *000000007ffeb000-000000007ffebfff 0x0002/0x0002 0x0020000
2164e0.2bb0: 000000007ffec000-00007ff5b0daffff 0x0001/0x0000 0x0000000
2174e0.2bb0: *00007ff5b0db0000-00007ff5b0db0fff 0x0002/0x0002 0x0040000
2184e0.2bb0: 00007ff5b0db1000-00007ff5b0dbffff 0x0001/0x0000 0x0000000
2194e0.2bb0: *00007ff5b0dc0000-00007ff5b0de2fff 0x0002/0x0002 0x0040000
2204e0.2bb0: 00007ff5b0de3000-00007ff730aaffff 0x0001/0x0000 0x0000000
2214e0.2bb0: *00007ff730ab0000-00007ff730ab0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2224e0.2bb0: 00007ff730ab1000-00007ff730b26fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2234e0.2bb0: 00007ff730b27000-00007ff730b27fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2244e0.2bb0: 00007ff730b28000-00007ff730b6ffff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2254e0.2bb0: 00007ff730b70000-00007ff730b70fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2264e0.2bb0: 00007ff730b71000-00007ff730b71fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2274e0.2bb0: 00007ff730b72000-00007ff730b76fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2284e0.2bb0: 00007ff730b77000-00007ff730b77fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2294e0.2bb0: 00007ff730b78000-00007ff730b78fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2304e0.2bb0: 00007ff730b79000-00007ff730b7cfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2314e0.2bb0: 00007ff730b7d000-00007ff730bc5fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2324e0.2bb0: 00007ff730bc6000-00007ffc8297ffff 0x0001/0x0000 0x0000000
2334e0.2bb0: *00007ffc82980000-00007ffc82980fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
2344e0.2bb0: 00007ffc82981000-00007ffc82a97fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
2354e0.2bb0: 00007ffc82a98000-00007ffc82adefff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
2364e0.2bb0: 00007ffc82adf000-00007ffc82aeafff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
2374e0.2bb0: 00007ffc82aeb000-00007ffc82af9fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
2384e0.2bb0: 00007ffc82afa000-00007ffc82afafff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
2394e0.2bb0: 00007ffc82afb000-00007ffc82afdfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
2404e0.2bb0: 00007ffc82afe000-00007ffc82b6ffff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
2414e0.2bb0: 00007ffc82b70000-00007ffffffeffff 0x0001/0x0000 0x0000000
2424e0.2bb0: supR3HardNtChildPurify: Done after 274 ms and 0 fixes (loop #0).
243760.4d0: Log file opened: 6.1.4r136177 g_hStartupLog=0000000000000004 g_uNtVerCombined=0xa047bb00
244760.4d0: supR3HardenedVmProcessInit: uNtDllAddr=00007ffc82980000 g_uNtVerCombined=0xa047bb00 (stack ~0000000000cff8f8)
245760.4d0: ntdll.dll: timestamp 0xc1bb301 (rc=VINF_SUCCESS)
246760.4d0: New simple heap: #1 0000000000e00000 LB 0x400000 (for 2031616 allocation)
2474e0.2bb0: supR3HardNtEnableThreadCreationEx:
248760.4d0: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
249760.4d0: System32: \Device\HarddiskVolume3\Windows\System32
250760.4d0: WinSxS: \Device\HarddiskVolume3\Windows\WinSxS
251760.4d0: KnownDllPath: C:\windows\System32
252760.4d0: supR3HardenedVmProcessInit: Opening vboxdrv stub...
253760.4d0: supR3HardenedVmProcessInit: Restoring LdrInitializeThunk...
254760.4d0: supR3HardenedVmProcessInit: Returning to LdrInitializeThunk...
255760.4d0: Registered Dll notification callback with NTDLL.
256760.4d0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\kernel32.dll)
257760.4d0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\kernel32.dll
258760.4d0: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\KERNEL32.DLL (Input=KERNEL32.DLL, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000004001:<flags> [calling]
259760.4d0: supR3HardenedDllNotificationCallback: load 00007ffc7ff00000 LB 0x002a3000 C:\windows\System32\KERNELBASE.dll [fFlags=0x0]
260760.4d0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\KernelBase.dll)
261760.4d0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
262760.4d0: supR3HardenedDllNotificationCallback: load 00007ffc82120000 LB 0x000b2000 C:\windows\System32\KERNEL32.DLL [fFlags=0x0]
263760.4d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
264760.4d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc82120000 'C:\windows\System32\KERNEL32.DLL'
265760.4d0: supR3HardenedDllNotificationCallback: load 00007ff730ab0000 LB 0x00116000 C:\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe [fFlags=0x0]
266760.4d0: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
267760.4d0: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe)
268760.4d0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
269760.4d0: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffc829f1770 pvNtTerminateThread=00007ffc82a1cac0
2704e0.2bb0: supR3HardNtChildWaitFor: Found expected request 1 (CloseEvents) after 174 ms.
271760.4d0: \SystemRoot\System32\ntdll.dll:
272760.4d0: CreationTime: 2020-04-15T03:00:19.915532600Z
273760.4d0: LastWriteTime: 2020-04-15T03:00:19.947450300Z
274760.4d0: ChangeTime: 2020-04-15T04:36:20.120191300Z
275760.4d0: FileAttributes: 0x20
276760.4d0: Size: 0x1e8458
277760.4d0: NT Headers: 0xd8
278760.4d0: Timestamp: 0xc1bb301
279760.4d0: Machine: 0x8664 - amd64
280760.4d0: Timestamp: 0xc1bb301
281760.4d0: Image Version: 10.0
282760.4d0: SizeOfImage: 0x1f0000 (2031616)
283760.4d0: Resource Dir: 0x17f000 LB 0x6f310
284760.4d0: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
285760.4d0: [Raw version resource data: 0x17f0f0 LB 0x380, codepage 0x0 (reserved 0x0)]
286760.4d0: ProductName: Microsoft® Windows® Operating System
287760.4d0: ProductVersion: 10.0.18362.778
288760.4d0: FileVersion: 10.0.18362.778 (WinBuild.160101.0800)
289760.4d0: FileDescription: NT Layer DLL
290760.4d0: \SystemRoot\System32\kernel32.dll:
291760.4d0: CreationTime: 2020-04-15T03:00:07.398523600Z
292760.4d0: LastWriteTime: 2020-04-15T03:00:07.414523500Z
293760.4d0: ChangeTime: 2020-04-15T04:36:17.914585600Z
294760.4d0: FileAttributes: 0x20
295760.4d0: Size: 0xb0498
296760.4d0: NT Headers: 0xe8
297760.4d0: Timestamp: 0x21b07e83
298760.4d0: Machine: 0x8664 - amd64
299760.4d0: Timestamp: 0x21b07e83
300760.4d0: Image Version: 10.0
301760.4d0: SizeOfImage: 0xb2000 (729088)
302760.4d0: Resource Dir: 0xb0000 LB 0x520
303760.4d0: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
304760.4d0: [Raw version resource data: 0xb00b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
305760.4d0: ProductName: Microsoft® Windows® Operating System
306760.4d0: ProductVersion: 10.0.18362.778
307760.4d0: FileVersion: 10.0.18362.778 (WinBuild.160101.0800)
308760.4d0: FileDescription: Windows NT BASE API Client DLL
309760.4d0: \SystemRoot\System32\KernelBase.dll:
310760.4d0: CreationTime: 2020-04-15T03:00:20.464934900Z
311760.4d0: LastWriteTime: 2020-04-15T03:00:20.515799000Z
312760.4d0: ChangeTime: 2020-04-15T04:36:19.805905400Z
313760.4d0: FileAttributes: 0x20
314760.4d0: Size: 0x2a3c38
315760.4d0: NT Headers: 0xf0
316760.4d0: Timestamp: 0xafa78a6a
317760.4d0: Machine: 0x8664 - amd64
318760.4d0: Timestamp: 0xafa78a6a
319760.4d0: Image Version: 10.0
320760.4d0: SizeOfImage: 0x2a3000 (2764800)
321760.4d0: Resource Dir: 0x27d000 LB 0x548
322760.4d0: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
323760.4d0: [Raw version resource data: 0x27d0b0 LB 0x3bc, codepage 0x0 (reserved 0x0)]
324760.4d0: ProductName: Microsoft® Windows® Operating System
325760.4d0: ProductVersion: 10.0.18362.778
326760.4d0: FileVersion: 10.0.18362.778 (WinBuild.160101.0800)
327760.4d0: FileDescription: Windows NT BASE API Client DLL
328760.4d0: \SystemRoot\System32\apisetschema.dll:
329760.4d0: CreationTime: 2019-03-19T04:43:54.837151500Z
330760.4d0: LastWriteTime: 2019-03-19T04:43:54.837151500Z
331760.4d0: ChangeTime: 2020-04-15T03:01:01.500746400Z
332760.4d0: FileAttributes: 0x20
333760.4d0: Size: 0x1d028
334760.4d0: NT Headers: 0xc8
335760.4d0: Timestamp: 0xd6ced080
336760.4d0: Machine: 0x8664 - amd64
337760.4d0: Timestamp: 0xd6ced080
338760.4d0: Image Version: 10.0
339760.4d0: SizeOfImage: 0x1e000 (122880)
340760.4d0: Resource Dir: 0x1d000 LB 0x408
341760.4d0: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
342760.4d0: [Raw version resource data: 0x1d060 LB 0x3a8, codepage 0x0 (reserved 0x0)]
343760.4d0: ProductName: Microsoft® Windows® Operating System
344760.4d0: ProductVersion: 10.0.18362.1
345760.4d0: FileVersion: 10.0.18362.1 (WinBuild.160101.0800)
346760.4d0: FileDescription: ApiSet Schema DLL
347760.4d0: supR3HardenedWinFindAdversaries: 0x0
348760.4d0: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
349760.4d0: Calling main()
350760.4d0: SUPR3HardenedMain: pszProgName=VirtualBoxVM fFlags=0x2
351760.4d0: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
352760.4d0: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
353760.4d0: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe)
354760.4d0: SUPR3HardenedMain: Respawn #2
355760.4d0: supR3HardNtEnableThreadCreationEx:
356760.4d0: supR3HardenedDllNotificationCallback: load 00007ffc80c40000 LB 0x00120000 C:\windows\System32\RPCRT4.dll [fFlags=0x0]
357760.4d0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll)
358760.4d0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll
359760.4d0: supR3HardenedDllNotificationCallback: load 00007ffc821e0000 LB 0x00097000 C:\windows\System32\sechost.dll [fFlags=0x0]
360760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'rpcrt4.dll'.
361760.4d0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\sechost.dll)
362760.4d0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\sechost.dll
363760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
364760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'sechost.dll'.
365760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27 'rpcrt4.dll'.
366760.4d0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\advapi32.dll)
367760.4d0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\advapi32.dll
368760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
369760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
370760.4d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
371760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'sechost.dll'...
372760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'sechost.dll' -> '\Device\HarddiskVolume3\Windows\System32\sechost.dll' [rcNtRedir=0xc0150008]
373760.4d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\sechost.dll [lacks WinVerifyTrust]
374760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
375760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
376760.4d0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\msvcrt.dll)
377760.4d0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
378760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
379760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
380760.4d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
381760.4d0: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\ADVAPI32.DLL (Input=ADVAPI32.DLL, rcNtResolve=0xc0150008) *pfFlags=0x1000 pwszSearchPath=0000000000000000:<flags> [calling]
382760.4d0: supR3HardenedDllNotificationCallback: load 00007ffc81e70000 LB 0x0009e000 C:\windows\System32\msvcrt.dll [fFlags=0x0]
383760.4d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
384760.4d0: supR3HardenedDllNotificationCallback: load 00007ffc823b0000 LB 0x000a3000 C:\windows\System32\ADVAPI32.DLL [fFlags=0x0]
385760.4d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
386760.4d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc823b0000 'C:\windows\System32\ADVAPI32.DLL'
387760.4d0: '\Device\HarddiskVolume3\Windows\System32\ntdll.dll' has no imports
388760.4d0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ntdll.dll)
389760.4d0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ntdll.dll
390760.4d0: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\ntdll.dll (Input=ntdll.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
391760.4d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc82980000 'C:\windows\System32\ntdll.dll'
392760.4d0: Error -104 in supR3HardenedWinReSpawn! (enmWhat=5)
393760.4d0: Error relaunching VirtualBox VM process: 5
394Command line: '60eaff78-4bdd-042d-2e72-669728efd737-suplib-3rdchild --comment ORCL-2020x --startvm 355bc22c-9596-422a-8a8e-1e6cd6672aa9 --no-startvm-errormsgbox "--sup-hardening-log=C:\Users\naku01\VirtualBox VMs\cloud\ORCL-2020x\Logs\VBoxHardening.log"'
395760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'opengl32.dll'.
396760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'uicommon.dll'.
397760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
398760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcp100.dll'.
399760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'msvcr100.dll'.
400760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'qt5corevbox.dll'.
401760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'qt5guivbox.dll'.
402760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'qt5widgetsvbox.dll'.
403760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'qt5openglvbox.dll'.
404760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'user32.dll'.
405760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'ole32.dll'.
406760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'oleaut32.dll'.
407760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'winmm.dll'.
408760.4d0: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll)
409760.4d0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll
410760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
411760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume3\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
412760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'winmmbase.dll'.
413760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'msvcrt.dll'.
414760.4d0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\winmm.dll)
415760.4d0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\winmm.dll
416760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
417760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
418760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
419760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'combase.dll'.
420760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #23 'rpcrt4.dll'.
421760.4d0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\oleaut32.dll)
422760.4d0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\oleaut32.dll
423760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
424760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
425760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #22 'rpcrt4.dll'.
426760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #56 'gdi32.dll'.
427760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #57 'user32.dll'.
428760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #58 'combase.dll'.
429760.4d0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ole32.dll)
430760.4d0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ole32.dll
431760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
432760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
433760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'win32u.dll'.
434760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'gdi32.dll'.
435760.4d0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\user32.dll)
436760.4d0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\user32.dll
437760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5openglvbox.dll'...
438760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5openglvbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5openglvbox.dll' [rcNtRedir=0xc0150008]
439760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'qt5widgetsvbox.dll'.
440760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'qt5guivbox.dll'.
441760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5corevbox.dll'.
442760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcr100.dll'.
443760.4d0: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll)
444760.4d0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll
445760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
446760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
447760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
448760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
449760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5guivbox.dll'.
450760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5corevbox.dll'.
451760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'shell32.dll'.
452760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
453760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
454760.4d0: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll)
455760.4d0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll
456760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
457760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
458760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'ole32.dll'.
459760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'opengl32.dll'.
460760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
461760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
462760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'.
463760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
464760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
465760.4d0: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll)
466760.4d0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
467760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
468760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
469760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
470760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'shell32.dll'.
471760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ole32.dll'.
472760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'advapi32.dll'.
473760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ws2_32.dll'.
474760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'mpr.dll'.
475760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcp100.dll'.
476760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'msvcr100.dll'.
477760.4d0: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll)
478760.4d0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
479760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
480760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
481760.4d0: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll)
482760.4d0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll
483760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
484760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
485760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
486760.4d0: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll)
487760.4d0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll
488760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
489760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
490760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
491760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
492760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
493760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ws2_32.dll'.
494760.4d0: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll)
495760.4d0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
496760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'uicommon.dll'...
497760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'uicommon.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\uicommon.dll' [rcNtRedir=0xc0150008]
498760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'vboxrt.dll'.
499760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcr100.dll'.
500760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5corevbox.dll'.
501760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5guivbox.dll'.
502760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5widgetsvbox.dll'.
503760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'user32.dll'.
504760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'advapi32.dll'.
505760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'ole32.dll'.
506760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'oleaut32.dll'.
507760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'rpcrt4.dll'.
508760.4d0: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\UICommon.dll)
509760.4d0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\UICommon.dll
510760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
511760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume3\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
512760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
513760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'advapi32.dll'.
514760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
515760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'gdi32.dll'.
516760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'glu32.dll'.
517760.4d0: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\opengl32.dll)
518760.4d0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\opengl32.dll
519760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'glu32.dll'...
520760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'glu32.dll' -> '\Device\HarddiskVolume3\Windows\System32\glu32.dll' [rcNtRedir=0xc0150008]
521760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
522760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
523760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'opengl32.dll'.
524760.4d0: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\glu32.dll)
525760.4d0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\glu32.dll
526760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
527760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
528760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'win32u.dll'.
529760.4d0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\gdi32.dll)
530760.4d0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\gdi32.dll
531760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
532760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
533760.4d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
534760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
535760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
536760.4d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
537760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
538760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
539760.4d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
540760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
541760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
542760.4d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
543760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
544760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
545760.4d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
546760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
547760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
548760.4d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll [lacks WinVerifyTrust]
549760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
550760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
551760.4d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
552760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
553760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
554760.4d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
555760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
556760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
557760.4d0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
558760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
559760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
560760.4d0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
561760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
562760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
563760.4d0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
564760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
565760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
566760.4d0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
567760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
568760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
569760.4d0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
570760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
571760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
572760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'rpcrt4.dll'.
573760.4d0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ws2_32.dll)
574760.4d0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ws2_32.dll
575760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
576760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
577760.4d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
578760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
579760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
580760.4d0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
581760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
582760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
583760.4d0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
584760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
585760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
586760.4d0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
587760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
588760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
589760.4d0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
590760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
591760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
592760.4d0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
593760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mpr.dll'...
594760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'mpr.dll' -> '\Device\HarddiskVolume3\Windows\System32\mpr.dll' [rcNtRedir=0xc0150008]
595760.4d0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\mpr.dll)
596760.4d0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\mpr.dll
597760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
598760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
599760.4d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ws2_32.dll [lacks WinVerifyTrust]
600760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
601760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
602760.4d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
603760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
604760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
605760.4d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll [lacks WinVerifyTrust]
606760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
607760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
608760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #77 'user32.dll'.
609760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #79 'gdi32.dll'.
610760.4d0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\shell32.dll)
611760.4d0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\shell32.dll
612760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
613760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
614760.4d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
615760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
616760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
617760.4d0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
618760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
619760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
620760.4d0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
621760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
622760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
623760.4d0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
624760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
625760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
626760.4d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
627760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
628760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
629760.4d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
630760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
631760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume3\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
632760.4d0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
633760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
634760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
635760.4d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll [lacks WinVerifyTrust]
636760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
637760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
638760.4d0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
639760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
640760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
641760.4d0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
642760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
643760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
644760.4d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll [lacks WinVerifyTrust]
645760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
646760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
647760.4d0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
648760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
649760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
650760.4d0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
651760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
652760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
653760.4d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
654760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
655760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
656760.4d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
657760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
658760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
659760.4d0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
660760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
661760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
662760.4d0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
663760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
664760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
665760.4d0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
666760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
667760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
668760.4d0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
669760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
670760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
671760.4d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
672760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
673760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
674760.4d0: '\Device\HarddiskVolume3\Windows\System32\win32u.dll' has no imports
675760.4d0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\win32u.dll)
676760.4d0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\win32u.dll
677760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
678760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
679760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
680760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #45 'bcryptprimitives.dll'.
681760.4d0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\combase.dll)
682760.4d0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\combase.dll
683760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
684760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
685760.4d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
686760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
687760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
688760.4d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
689760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
690760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
691760.4d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
692760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
693760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
694760.4d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
695760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
696760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
697760.4d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [lacks WinVerifyTrust]
698760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
699760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
700760.4d0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll)
701760.4d0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll
702760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
703760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
704760.4d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
705760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmmbase.dll'...
706760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmmbase.dll' -> '\Device\HarddiskVolume3\Windows\System32\winmmbase.dll' [rcNtRedir=0xc0150008]
707760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
708760.4d0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\winmmbase.dll)
709760.4d0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\winmmbase.dll
710760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
711760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
712760.4d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
713760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'...
714760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008]
715760.4d0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll)
716760.4d0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll
717760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
718760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
719760.4d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
720760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
721760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
722760.4d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
723760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
724760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
725760.4d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
726760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
727760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
728760.4d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
729760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
730760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
731760.4d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [lacks WinVerifyTrust]
732760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
733760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume3\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
734760.4d0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
735760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
736760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
737760.4d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
738760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
739760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
740760.4d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
741760.4d0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000a01:<flags> [calling]
742760.4d0: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll [lacks WinVerifyTrust]
743760.4d0: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
744760.4d0: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\UICommon.dll [lacks WinVerifyTrust]
745760.4d0: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
746760.4d0: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
747760.4d0: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
748760.4d0: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
749760.4d0: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
750760.4d0: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
751760.4d0: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll [lacks WinVerifyTrust]
752760.4d0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll [lacks WinVerifyTrust]
753760.4d0: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\glu32.dll [lacks WinVerifyTrust]
754760.4d0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\mpr.dll [lacks WinVerifyTrust]
755760.4d0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmmbase.dll [lacks WinVerifyTrust]
756760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
757760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #22 'win32u.dll'.
758760.4d0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\DXCore.dll)
759760.4d0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\DXCore.dll
760760.4d0: supR3HardenedDllNotificationCallback: load 00007ffc7fa10000 LB 0x00021000 C:\windows\System32\win32u.dll [fFlags=0x0]
761760.4d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [lacks WinVerifyTrust]
762760.4d0: supR3HardenedDllNotificationCallback: load 00007ffc7f910000 LB 0x000fa000 C:\windows\System32\ucrtbase.dll [fFlags=0x0]
763760.4d0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ucrtbase.dll)
764760.4d0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll
765760.4d0: supR3HardenedDllNotificationCallback: load 00007ffc7fe60000 LB 0x0009e000 C:\windows\System32\msvcp_win.dll [fFlags=0x0]
766760.4d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust]
767760.4d0: supR3HardenedDllNotificationCallback: load 00007ffc7fc10000 LB 0x00194000 C:\windows\System32\gdi32full.dll [fFlags=0x0]
768760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
769760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #33 'gdi32.dll'.
770760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'user32.dll'.
771760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'win32u.dll'.
772760.4d0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\gdi32full.dll)
773760.4d0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\gdi32full.dll
774760.4d0: supR3HardenedDllNotificationCallback: load 00007ffc80d60000 LB 0x00026000 C:\windows\System32\GDI32.dll [fFlags=0x0]
775760.4d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
776760.4d0: supR3HardenedDllNotificationCallback: load 00007ffc80a30000 LB 0x00194000 C:\windows\System32\USER32.dll [fFlags=0x0]
777760.4d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
778760.4d0: supR3HardenedDllNotificationCallback: load 00007ffc7fa40000 LB 0x00080000 C:\windows\System32\bcryptPrimitives.dll [fFlags=0x0]
779760.4d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust]
780760.4d0: supR3HardenedDllNotificationCallback: load 00007ffc825d0000 LB 0x00336000 C:\windows\System32\combase.dll [fFlags=0x0]
781760.4d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [lacks WinVerifyTrust]
782760.4d0: supR3HardenedDllNotificationCallback: load 00007ffc80260000 LB 0x0004a000 C:\windows\System32\cfgmgr32.dll [fFlags=0x0]
783760.4d0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll)
784760.4d0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll
785760.4d0: supR3HardenedDllNotificationCallback: load 00007ffc7e370000 LB 0x00020000 C:\windows\SYSTEM32\dxcore.dll [fFlags=0x0]
786760.4d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DXCore.dll [lacks WinVerifyTrust]
787760.4d0: supR3HardenedDllNotificationCallback: load 00007ffc56370000 LB 0x0002c000 C:\windows\SYSTEM32\GLU32.dll [fFlags=0x0]
788760.4d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\glu32.dll [lacks WinVerifyTrust]
789760.4d0: supR3HardenedDllNotificationCallback: load 00007ffc563a0000 LB 0x00156000 C:\windows\SYSTEM32\OPENGL32.dll [fFlags=0x0]
790760.4d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
791760.4d0: supR3HardenedDllNotificationCallback: load 0000000060cb0000 LB 0x000d2000 C:\Program Files\Oracle\VirtualBox\MSVCR100.dll [fFlags=0x0]
792760.4d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
793760.4d0: supR3HardenedDllNotificationCallback: load 00000000606a0000 LB 0x00098000 C:\Program Files\Oracle\VirtualBox\MSVCP100.dll [fFlags=0x0]
794760.4d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
795760.4d0: supR3HardenedDllNotificationCallback: load 00007ffc81c40000 LB 0x0006f000 C:\windows\System32\WS2_32.dll [fFlags=0x0]
796760.4d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ws2_32.dll [lacks WinVerifyTrust]
797760.4d0: supR3HardenedDllNotificationCallback: load 00007ffc44b20000 LB 0x005ed000 C:\Program Files\Oracle\VirtualBox\VBoxRT.dll [fFlags=0x0]
798760.4d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
799760.4d0: supR3HardenedDllNotificationCallback: load 00007ffc80d90000 LB 0x000a9000 C:\windows\System32\shcore.dll [fFlags=0x0]
800760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
801760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'rpcrt4.dll'.
802760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #43 'combase.dll'.
803760.4d0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\SHCore.dll)
804760.4d0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\SHCore.dll
805760.4d0: supR3HardenedDllNotificationCallback: load 00007ffc7f890000 LB 0x00023000 C:\windows\System32\profapi.dll [fFlags=0x0]
806760.4d0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\profapi.dll)
807760.4d0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\profapi.dll
808760.4d0: supR3HardenedDllNotificationCallback: load 00007ffc7f840000 LB 0x00010000 C:\windows\System32\UMPDC.dll [fFlags=0x0]
809760.4d0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\umpdc.dll)
810760.4d0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\umpdc.dll
811760.4d0: supR3HardenedDllNotificationCallback: load 00007ffc7f8c0000 LB 0x0004a000 C:\windows\System32\powrprof.dll [fFlags=0x0]
812760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'rpcrt4.dll'.
813760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #19 'umpdc.dll'.
814760.4d0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\powrprof.dll)
815760.4d0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\powrprof.dll
816760.4d0: supR3HardenedDllNotificationCallback: load 00007ffc81cd0000 LB 0x00052000 C:\windows\System32\shlwapi.dll [fFlags=0x0]
817760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'.
818760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #44 'gdi32.dll'.
819760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #45 'user32.dll'.
820760.4d0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\shlwapi.dll)
821760.4d0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\shlwapi.dll
822760.4d0: supR3HardenedDllNotificationCallback: load 00007ffc7f870000 LB 0x00011000 C:\windows\System32\kernel.appcore.dll [fFlags=0x0]
823760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcrt.dll'.
824760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'rpcrt4.dll'.
825760.4d0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll)
826760.4d0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll
827760.4d0: supR3HardenedDllNotificationCallback: load 00007ffc802b0000 LB 0x00780000 C:\windows\System32\windows.storage.dll [fFlags=0x0]
828760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #31 'combase.dll'.
829760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #32 'msvcp_win.dll'.
830760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #39 'rpcrt4.dll'.
831760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #56 'profapi.dll'.
832760.4d0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\windows.storage.dll)
833760.4d0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\windows.storage.dll
834760.4d0: supR3HardenedDllNotificationCallback: load 00007ffc7fde0000 LB 0x00017000 C:\windows\System32\cryptsp.dll [fFlags=0x0]
835760.4d0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\cryptsp.dll)
836760.4d0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\cryptsp.dll
837760.4d0: supR3HardenedDllNotificationCallback: load 00007ffc80fa0000 LB 0x006e5000 C:\windows\System32\SHELL32.dll [fFlags=0x0]
838760.4d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll [lacks WinVerifyTrust]
839760.4d0: supR3HardenedDllNotificationCallback: load 00007ffc80e40000 LB 0x00157000 C:\windows\System32\ole32.dll [fFlags=0x0]
840760.4d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll [lacks WinVerifyTrust]
841760.4d0: supR3HardenedDllNotificationCallback: load 00007ffc5aaf0000 LB 0x0001b000 C:\windows\SYSTEM32\MPR.dll [fFlags=0x0]
842760.4d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\mpr.dll [lacks WinVerifyTrust]
843760.4d0: supR3HardenedDllNotificationCallback: load 0000000060130000 LB 0x00565000 C:\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [fFlags=0x0]
844760.4d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
845760.4d0: supR3HardenedDllNotificationCallback: load 00007ffc41ce0000 LB 0x005f7000 C:\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [fFlags=0x0]
846760.4d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
847760.4d0: supR3HardenedDllNotificationCallback: load 000000005fbc0000 LB 0x00561000 C:\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [fFlags=0x0]
848760.4d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
849760.4d0: supR3HardenedDllNotificationCallback: load 00007ffc82470000 LB 0x000c4000 C:\windows\System32\OLEAUT32.dll [fFlags=0x0]
850760.4d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
851760.4d0: supR3HardenedDllNotificationCallback: load 00007ffc422e0000 LB 0x02614000 C:\Program Files\Oracle\VirtualBox\UICommon.dll [fFlags=0x0]
852760.4d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\UICommon.dll [lacks WinVerifyTrust]
853760.4d0: supR3HardenedDllNotificationCallback: load 0000000060b80000 LB 0x00054000 C:\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll [fFlags=0x0]
854760.4d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll [lacks WinVerifyTrust]
855760.4d0: supR3HardenedDllNotificationCallback: load 00007ffc7cdd0000 LB 0x0002d000 C:\windows\SYSTEM32\WINMMBASE.dll [fFlags=0x0]
856760.4d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmmbase.dll [lacks WinVerifyTrust]
857760.4d0: supR3HardenedDllNotificationCallback: load 00007ffc7ce00000 LB 0x00024000 C:\windows\SYSTEM32\WINMM.dll [fFlags=0x0]
858760.4d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll [lacks WinVerifyTrust]
859760.4d0: supR3HardenedDllNotificationCallback: load 00007ffc5ddd0000 LB 0x001c8000 C:\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll [fFlags=0x0]
860760.4d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll [lacks WinVerifyTrust]
861760.4d0: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
862760.4d0: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
863760.4d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc7ff00000 'api-ms-win-core-synch-l1-2-0'
864760.4d0: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
865760.4d0: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
866760.4d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc7ff00000 'api-ms-win-core-fibers-l1-1-1'
867760.4d0: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
868760.4d0: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
869760.4d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc7ff00000 'api-ms-win-core-fibers-l1-1-1'
870760.4d0: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
871760.4d0: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
872760.4d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc7ff00000 'api-ms-win-core-synch-l1-2-0'
873760.4d0: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-l1-2-1) -> 0x0, fPresent=1
874760.4d0: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-l1-2-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
875760.4d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc7ff00000 'api-ms-win-core-localization-l1-2-1'
876760.4d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
877760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'profapi.dll'...
878760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'profapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\profapi.dll' [rcNtRedir=0xc0150008]
879760.4d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\profapi.dll [lacks WinVerifyTrust]
880760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
881760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
882760.4d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
883760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
884760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
885760.4d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust]
886760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
887760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
888760.4d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [lacks WinVerifyTrust]
889760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
890760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
891760.4d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
892760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
893760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
894760.4d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
895760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
896760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
897760.4d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
898760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
899760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
900760.4d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
901760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
902760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
903760.4d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
904760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'umpdc.dll'...
905760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'umpdc.dll' -> '\Device\HarddiskVolume3\Windows\System32\umpdc.dll' [rcNtRedir=0xc0150008]
906760.4d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\umpdc.dll [lacks WinVerifyTrust]
907760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
908760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
909760.4d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
910760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
911760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
912760.4d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [lacks WinVerifyTrust]
913760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
914760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
915760.4d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
916760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
917760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
918760.4d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
919760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
920760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
921760.4d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [lacks WinVerifyTrust]
922760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
923760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
924760.4d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
925760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
926760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
927760.4d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
928760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
929760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
930760.4d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust]
931760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
932760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
933760.4d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [lacks WinVerifyTrust]
934760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
935760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
936760.4d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust]
937760.4d0: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\kernel32.dll (Input=kernel32, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
938760.4d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc82120000 'C:\windows\System32\kernel32.dll'
939760.4d0: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-string-l1-1-0) -> 0x0, fPresent=1
940760.4d0: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-string-l1-1-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
941760.4d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc7ff00000 'api-ms-win-core-string-l1-1-0'
942760.4d0: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-datetime-l1-1-1) -> 0x0, fPresent=1
943760.4d0: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-datetime-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
944760.4d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc7ff00000 'api-ms-win-core-datetime-l1-1-1'
945760.4d0: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-obsolete-l1-2-0) -> 0x0, fPresent=1
946760.4d0: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-obsolete-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
947760.4d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc7ff00000 'api-ms-win-core-localization-obsolete-l1-2-0'
948760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'user32.dll'.
949760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #25 'win32u.dll'.
950760.4d0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\imm32.dll)
951760.4d0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\imm32.dll
952760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
953760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
954760.4d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [lacks WinVerifyTrust]
955760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
956760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
957760.4d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
958760.4d0: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\system32\IMM32.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
959760.4d0: supR3HardenedDllNotificationCallback: load 00007ffc82910000 LB 0x0002e000 C:\windows\System32\IMM32.DLL [fFlags=0x0]
960760.4d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\imm32.dll [lacks WinVerifyTrust]
961760.4d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc82910000 'C:\windows\system32\IMM32.DLL'
962760.4d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
963760.4d0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
964760.4d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc44b20000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
965760.4d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
966760.4d0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
967760.4d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc44b20000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
968760.4d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
969760.4d0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
970760.4d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc44b20000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
971760.4d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
972760.4d0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
973760.4d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc44b20000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
974760.4d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
975760.4d0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
976760.4d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc44b20000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
977760.4d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
978760.4d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc44b20000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
979760.4d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
980760.4d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc44b20000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
981760.4d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
982760.4d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc44b20000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
983760.4d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
984760.4d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc44b20000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
985760.4d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
986760.4d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc44b20000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
987760.4d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
988760.4d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc44b20000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
989760.4d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
990760.4d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc44b20000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
991760.4d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
992760.4d0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
993760.4d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc44b20000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
994760.4d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
995760.4d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc44b20000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
996760.4d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
997760.4d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc44b20000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
998760.4d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
999760.4d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc44b20000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1000760.4d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1001760.4d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc44b20000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1002760.4d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1003760.4d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc44b20000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1004760.4d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1005760.4d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc44b20000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1006760.4d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1007760.4d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc44b20000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1008760.4d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1009760.4d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc44b20000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1010760.4d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1011760.4d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc44b20000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1012760.4d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1013760.4d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc44b20000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1014760.4d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1015760.4d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc44b20000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1016760.4d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1017760.4d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc44b20000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1018760.4d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1019760.4d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc44b20000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1020760.4d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1021760.4d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc44b20000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1022760.4d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1023760.4d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc44b20000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1024760.4d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1025760.4d0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
1026760.4d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc44b20000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1027760.4d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1028760.4d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc44b20000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1029760.4d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1030760.4d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc44b20000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1031760.4d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1032760.4d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc44b20000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1033760.4d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
1034760.4d0: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\ADVAPI32.DLL (Input=ADVAPI32.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
1035760.4d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc823b0000 'C:\windows\System32\ADVAPI32.DLL'
1036760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'bcryptprimitives.dll'.
1037760.4d0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\cryptbase.dll)
1038760.4d0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\cryptbase.dll
1039760.4d0: supR3HardenedDllNotificationCallback: load 00007ffc7f280000 LB 0x0000c000 C:\windows\SYSTEM32\CRYPTBASE.DLL [fFlags=0x0]
1040760.4d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\cryptbase.dll [lacks WinVerifyTrust]
1041760.4d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc5ddd0000 'C:\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll'
1042760.4d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
1043760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'...
1044760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008]
1045760.4d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust]
1046760.4d0: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\kernel32.dll (Input=kernel32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
1047760.4d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc82120000 'C:\windows\System32\kernel32.dll'
1048760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
1049760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'ole32.dll'.
1050760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
1051760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'imm32.dll'.
1052760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'winmm.dll'.
1053760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'oleaut32.dll'.
1054760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'shell32.dll'.
1055760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'advapi32.dll'.
1056760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'qt5guivbox.dll'.
1057760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'qt5corevbox.dll'.
1058760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'msvcr100.dll'.
1059760.4d0: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\platforms\qwindows.dll)
1060760.4d0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\platforms\qwindows.dll
1061760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
1062760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
1063760.4d0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
1064760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
1065760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
1066760.4d0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
1067760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
1068760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
1069760.4d0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
1070760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
1071760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
1072760.4d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
1073760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
1074760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
1075760.4d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll [lacks WinVerifyTrust]
1076760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
1077760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
1078760.4d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
1079760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
1080760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume3\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
1081760.4d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll [lacks WinVerifyTrust]
1082760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'...
1083760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume3\Windows\System32\imm32.dll' [rcNtRedir=0xc0150008]
1084760.4d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\imm32.dll [lacks WinVerifyTrust]
1085760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
1086760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
1087760.4d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
1088760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
1089760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
1090760.4d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll [lacks WinVerifyTrust]
1091760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
1092760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
1093760.4d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
1094760.4d0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
1095760.4d0: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\platforms\qwindows.dll [lacks WinVerifyTrust]
1096760.4d0: supR3HardenedDllNotificationCallback: load 00007ffc46350000 LB 0x0012e000 C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll [fFlags=0x0]
1097760.4d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\platforms\qwindows.dll [lacks WinVerifyTrust]
1098760.4d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc46350000 'C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll'
1099760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1100760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #33 'gdi32.dll'.
1101760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'user32.dll'.
1102760.4d0: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\uxtheme.dll)
1103760.4d0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\uxtheme.dll
1104760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
1105760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
1106760.4d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
1107760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
1108760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
1109760.4d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
1110760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1111760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1112760.4d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1113760.4d0: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
1114760.4d0: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\uxtheme.dll [lacks WinVerifyTrust]
1115760.4d0: supR3HardenedDllNotificationCallback: load 00007ffc7d370000 LB 0x00099000 C:\windows\system32\uxtheme.dll [fFlags=0x0]
1116760.4d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\uxtheme.dll [lacks WinVerifyTrust]
1117760.4d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc7d370000 'C:\windows\system32\uxtheme.dll'
1118760.4d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
1119760.4d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc80a30000 'C:\windows\system32\user32.dll'
1120760.4d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll [lacks WinVerifyTrust]
1121760.4d0: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
1122760.4d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc80fa0000 'C:\windows\system32\shell32.dll'
1123760.4d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\SHCore.dll [lacks WinVerifyTrust]
1124760.4d0: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\system32\SHCore.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
1125760.4d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc80d90000 'C:\windows\system32\SHCore.dll'
1126760.4d0: supR3HardenedMonitor_LdrLoadDll: error opening 'C:\windows\system32\wintab32.dll': 0 (NtPath=\??\C:\windows\system32\wintab32.dll; Input=C:\windows\system32\wintab32.dll; rcNtGetDll=0x0
1127760.4d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000034 'C:\windows\system32\wintab32.dll'
1128760.4d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll [lacks WinVerifyTrust]
1129760.4d0: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\system32\winmm.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
1130760.4d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc7ce00000 'C:\windows\system32\winmm.dll'
1131760.4d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll [lacks WinVerifyTrust]
1132760.4d0: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\system32\winmm.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
1133760.4d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc7ce00000 'C:\windows\system32\winmm.dll'
1134760.4d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll [lacks WinVerifyTrust]
1135760.4d0: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
1136760.4d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc80fa0000 'C:\windows\system32\shell32.dll'
1137760.4d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\uxtheme.dll [lacks WinVerifyTrust]
1138760.4d0: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
1139760.4d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc7d370000 'C:\windows\system32\uxtheme.dll'
1140760.4d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
1141760.4d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc80d60000 'C:\windows\system32\gdi32.dll'
1142760.4d0: supR3HardenedDllNotificationCallback: load 00007ffc81690000 LB 0x00136000 C:\windows\System32\MSCTF.dll [fFlags=0x0]
1143760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1144760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'oleaut32.dll'.
1145760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #38 'user32.dll'.
1146760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #39 'gdi32.dll'.
1147760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #40 'imm32.dll'.
1148760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #41 'advapi32.dll'.
1149760.4d0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\msctf.dll)
1150760.4d0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msctf.dll
1151760.4d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
1152760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
1153760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
1154760.4d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
1155760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'...
1156760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume3\Windows\System32\imm32.dll' [rcNtRedir=0xc0150008]
1157760.4d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\imm32.dll [lacks WinVerifyTrust]
1158760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
1159760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
1160760.4d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
1161760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
1162760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
1163760.4d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
1164760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
1165760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
1166760.4d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
1167760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1168760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1169760.4d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1170760.4d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc80c40000 'C:\windows\System32\rpcrt4.dll'
1171760.4d0: supR3HardenedDllNotificationCallback: load 00007ffc81d40000 LB 0x000a2000 C:\windows\System32\clbcatq.dll [fFlags=0x0]
1172760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1173760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #30 'rpcrt4.dll'.
1174760.4d0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\clbcatq.dll)
1175760.4d0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\clbcatq.dll
1176760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1177760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'shcore.dll'.
1178760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #29 'combase.dll'.
1179760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'd3d11.dll'.
1180760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'dcomp.dll'.
1181760.4d0: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\DataExchange.dll)
1182760.4d0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\DataExchange.dll
1183760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dcomp.dll'...
1184760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'dcomp.dll' -> '\Device\HarddiskVolume3\Windows\System32\dcomp.dll' [rcNtRedir=0xc0150008]
1185760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'win32u.dll'.
1186760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp_win.dll'.
1187760.4d0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\dcomp.dll)
1188760.4d0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\dcomp.dll
1189760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'd3d11.dll'...
1190760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'd3d11.dll' -> '\Device\HarddiskVolume3\Windows\System32\d3d11.dll' [rcNtRedir=0xc0150008]
1191760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1192760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #24 'dxgi.dll'.
1193760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27 'win32u.dll'.
1194760.4d0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\d3d11.dll)
1195760.4d0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\d3d11.dll
1196760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
1197760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
1198760.4d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [lacks WinVerifyTrust]
1199760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shcore.dll'...
1200760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'shcore.dll' -> '\Device\HarddiskVolume3\Windows\System32\shcore.dll' [rcNtRedir=0xc0150008]
1201760.4d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\SHCore.dll [lacks WinVerifyTrust]
1202760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1203760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1204760.4d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1205760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
1206760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
1207760.4d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
1208760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1209760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1210760.4d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1211760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
1212760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
1213760.4d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [lacks WinVerifyTrust]
1214760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dxgi.dll'...
1215760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'dxgi.dll' -> '\Device\HarddiskVolume3\Windows\System32\dxgi.dll' [rcNtRedir=0xc0150008]
1216760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1217760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'win32u.dll'.
1218760.4d0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\dxgi.dll)
1219760.4d0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\dxgi.dll
1220760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1221760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1222760.4d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1223760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
1224760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
1225760.4d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust]
1226760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
1227760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
1228760.4d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [lacks WinVerifyTrust]
1229760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
1230760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
1231760.4d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [lacks WinVerifyTrust]
1232760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1233760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1234760.4d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1235760.4d0: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\system32\dataexchange.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
1236760.4d0: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\DataExchange.dll [lacks WinVerifyTrust]
1237760.4d0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\d3d11.dll [lacks WinVerifyTrust]
1238760.4d0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dcomp.dll [lacks WinVerifyTrust]
1239760.4d0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dxgi.dll [lacks WinVerifyTrust]
1240760.4d0: supR3HardenedDllNotificationCallback: load 00007ffc7e400000 LB 0x000eb000 C:\windows\system32\dxgi.dll [fFlags=0x0]
1241760.4d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dxgi.dll [lacks WinVerifyTrust]
1242760.4d0: supR3HardenedDllNotificationCallback: load 00007ffc7bc30000 LB 0x0025b000 C:\windows\system32\d3d11.dll [fFlags=0x0]
1243760.4d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\d3d11.dll [lacks WinVerifyTrust]
1244760.4d0: supR3HardenedDllNotificationCallback: load 00007ffc7c2f0000 LB 0x001dc000 C:\windows\system32\dcomp.dll [fFlags=0x0]
1245760.4d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dcomp.dll [lacks WinVerifyTrust]
1246760.4d0: supR3HardenedDllNotificationCallback: load 00007ffc54bc0000 LB 0x0003a000 C:\windows\system32\dataexchange.dll [fFlags=0x0]
1247760.4d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\DataExchange.dll [lacks WinVerifyTrust]
1248760.4d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
1249760.4d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc80d60000 'C:\windows\System32\gdi32.dll'
1250760.4d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc54bc0000 'C:\windows\system32\dataexchange.dll'
1251760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rmclient.dll'.
1252760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #31 'rpcrt4.dll'.
1253760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #47 'combase.dll'.
1254760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #50 'msvcp_win.dll'.
1255760.4d0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll)
1256760.4d0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll
1257760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1258760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'rpcrt4.dll'.
1259760.4d0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\rmclient.dll)
1260760.4d0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\rmclient.dll
1261760.4d0: supR3HardenedDllNotificationCallback: load 00007ffc7d7c0000 LB 0x00029000 C:\windows\system32\RMCLIENT.dll [fFlags=0x0]
1262760.4d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rmclient.dll [lacks WinVerifyTrust]
1263760.4d0: supR3HardenedDllNotificationCallback: load 00007ffc7d440000 LB 0x0025a000 C:\windows\system32\twinapi.appcore.dll [fFlags=0x0]
1264760.4d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll [lacks WinVerifyTrust]
1265760.744: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
1266760.744: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #16 'rpcrt4.dll'.
1267760.744: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #28 'devobj.dll'.
1268760.744: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll)
1269760.744: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll
1270760.744: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'cfgmgr32.dll'.
1271760.744: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\devobj.dll)
1272760.744: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\devobj.dll
1273760.744: supR3HardenedDllNotificationCallback: load 00007ffc7f640000 LB 0x0002a000 C:\windows\SYSTEM32\DEVOBJ.dll [fFlags=0x0]
1274760.744: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\devobj.dll [lacks WinVerifyTrust]
1275760.744: supR3HardenedDllNotificationCallback: load 00007ffc74fe0000 LB 0x00072000 C:\windows\SYSTEM32\MMDevAPI.DLL [fFlags=0x0]
1276760.744: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
1277760.744: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1278760.744: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'mmdevapi.dll'.
1279760.744: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27 'ksuser.dll'.
1280760.744: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #28 'avrt.dll'.
1281760.744: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\wdmaud.drv)
1282760.744: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\wdmaud.drv
1283760.744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'avrt.dll'...
1284760.744: supR3HardenedWinVerifyCacheProcessImportTodos: 'avrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\avrt.dll' [rcNtRedir=0xc0150008]
1285760.744: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\avrt.dll)
1286760.744: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\avrt.dll
1287760.744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ksuser.dll'...
1288760.744: supR3HardenedWinVerifyCacheProcessImportTodos: 'ksuser.dll' -> '\Device\HarddiskVolume3\Windows\System32\ksuser.dll' [rcNtRedir=0xc0150008]
1289760.744: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1290760.744: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ksuser.dll)
1291760.744: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ksuser.dll
1292760.744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mmdevapi.dll'...
1293760.744: supR3HardenedWinVerifyCacheProcessImportTodos: 'mmdevapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\mmdevapi.dll' [rcNtRedir=0xc0150008]
1294760.744: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
1295760.744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1296760.744: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1297760.744: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1298760.744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'cfgmgr32.dll'...
1299760.744: supR3HardenedWinVerifyCacheProcessImportTodos: 'cfgmgr32.dll' -> '\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll' [rcNtRedir=0xc0150008]
1300760.744: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll [lacks WinVerifyTrust]
1301760.744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'devobj.dll'...
1302760.744: supR3HardenedWinVerifyCacheProcessImportTodos: 'devobj.dll' -> '\Device\HarddiskVolume3\Windows\System32\devobj.dll' [rcNtRedir=0xc0150008]
1303760.744: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\devobj.dll [lacks WinVerifyTrust]
1304760.744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
1305760.744: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
1306760.744: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
1307760.744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
1308760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1309760.744: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
1310760.744: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust]
1311760.744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
1312760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #15 'rpcrt4.dll'.
1313760.744: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
1314760.744: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
1315760.744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1316760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #19 'coreuicomponents.dll'.
1317760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #20 'coremessaging.dll'.
1318760.744: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1319760.744: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1320760.744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
1321760.4d0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\TextInputFramework.dll)
1322760.4d0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\TextInputFramework.dll
1323760.744: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
1324760.744: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust]
1325760.744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
1326760.744: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
1327760.744: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [lacks WinVerifyTrust]
1328760.744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
1329760.744: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
1330760.744: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
1331760.744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rmclient.dll'...
1332760.744: supR3HardenedWinVerifyCacheProcessImportTodos: 'rmclient.dll' -> '\Device\HarddiskVolume3\Windows\System32\rmclient.dll' [rcNtRedir=0xc0150008]
1333760.744: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rmclient.dll [lacks WinVerifyTrust]
1334760.744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coremessaging.dll'...
1335760.744: supR3HardenedWinVerifyCacheProcessImportTodos: 'coremessaging.dll' -> '\Device\HarddiskVolume3\Windows\System32\coremessaging.dll' [rcNtRedir=0xc0150008]
1336760.744: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1337760.744: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll)
1338760.744: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll
1339760.744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coreuicomponents.dll'...
1340760.744: supR3HardenedWinVerifyCacheProcessImportTodos: 'coreuicomponents.dll' -> '\Device\HarddiskVolume3\Windows\System32\coreuicomponents.dll' [rcNtRedir=0xc0150008]
1341760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1342760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'coremessaging.dll'.
1343760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #47 'shcore.dll'.
1344760.4d0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\CoreUIComponents.dll)
1345760.4d0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\CoreUIComponents.dll
1346760.4d0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll [lacks WinVerifyTrust]
1347760.4d0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ntmarta.dll)
1348760.4d0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ntmarta.dll
1349760.744: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1350760.744: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'coremessaging.dll'.
1351760.744: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #47 'shcore.dll'.
1352760.744: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\CoreUIComponents.dll)
1353760.744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
1354760.744: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
1355760.744: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
1356760.744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1357760.744: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1358760.744: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1359760.744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1360760.744: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1361760.744: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1362760.744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shcore.dll'...
1363760.744: supR3HardenedWinVerifyCacheProcessImportTodos: 'shcore.dll' -> '\Device\HarddiskVolume3\Windows\System32\shcore.dll' [rcNtRedir=0xc0150008]
1364760.744: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\SHCore.dll [lacks WinVerifyTrust]
1365760.744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coremessaging.dll'...
1366760.744: supR3HardenedWinVerifyCacheProcessImportTodos: 'coremessaging.dll' -> '\Device\HarddiskVolume3\Windows\System32\coremessaging.dll' [rcNtRedir=0xc0150008]
1367760.744: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll [lacks WinVerifyTrust]
1368760.744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1369760.744: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1370760.744: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1371760.744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shcore.dll'...
1372760.744: supR3HardenedWinVerifyCacheProcessImportTodos: 'shcore.dll' -> '\Device\HarddiskVolume3\Windows\System32\shcore.dll' [rcNtRedir=0xc0150008]
1373760.744: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\SHCore.dll [lacks WinVerifyTrust]
1374760.744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coremessaging.dll'...
1375760.744: supR3HardenedWinVerifyCacheProcessImportTodos: 'coremessaging.dll' -> '\Device\HarddiskVolume3\Windows\System32\coremessaging.dll' [rcNtRedir=0xc0150008]
1376760.744: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll [lacks WinVerifyTrust]
1377760.744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1378760.744: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1379760.744: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1380760.744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1381760.744: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1382760.744: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1383760.744: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
1384760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'combase.dll'.
1385760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #24 'rpcrt4.dll'.
1386760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #32 'bcryptprimitives.dll'.
1387760.4d0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\WinTypes.dll)
1388760.4d0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\WinTypes.dll
1389760.4d0: supR3HardenedDllNotificationCallback: load 00007ffc7e870000 LB 0x00031000 C:\windows\SYSTEM32\ntmarta.dll [fFlags=0x0]
1390760.4d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ntmarta.dll [lacks WinVerifyTrust]
1391760.4d0: supR3HardenedDllNotificationCallback: load 00007ffc7c840000 LB 0x000d4000 C:\windows\System32\CoreMessaging.dll [fFlags=0x0]
1392760.4d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll [lacks WinVerifyTrust]
1393760.4d0: supR3HardenedDllNotificationCallback: load 00007ffc7b130000 LB 0x00153000 C:\windows\SYSTEM32\wintypes.dll [fFlags=0x0]
1394760.4d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\WinTypes.dll [lacks WinVerifyTrust]
1395760.4d0: supR3HardenedDllNotificationCallback: load 00007ffc79fa0000 LB 0x0032a000 C:\windows\System32\CoreUIComponents.dll [fFlags=0x0]
1396760.4d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\CoreUIComponents.dll [lacks WinVerifyTrust]
1397760.4d0: supR3HardenedDllNotificationCallback: load 00007ffc6bb30000 LB 0x0009e000 C:\windows\System32\TextInputFramework.dll [fFlags=0x0]
1398760.4d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\TextInputFramework.dll [lacks WinVerifyTrust]
1399760.744: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
1400760.4d0: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(ext-ms-win-rtcore-ntuser-window-ext-l1-1-0.dll) -> 0x0, fPresent=1
1401760.4d0: supR3HardenedMonitor_LdrLoadDll: pName=ext-ms-win-rtcore-ntuser-window-ext-l1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
1402760.4d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc80a30000 'ext-ms-win-rtcore-ntuser-window-ext-l1-1-0.dll'
1403760.744: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ksuser.dll [lacks WinVerifyTrust]
1404760.4d0: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(ext-ms-win-rtcore-ntuser-integration-l1-1-0.dll) -> 0x0, fPresent=1
1405760.4d0: supR3HardenedMonitor_LdrLoadDll: pName=ext-ms-win-rtcore-ntuser-integration-l1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
1406760.4d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc80a30000 'ext-ms-win-rtcore-ntuser-integration-l1-1-0.dll'
1407760.4d0: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-com-l1-1-0.dll) -> 0x0, fPresent=1
1408760.4d0: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-com-l1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
1409760.4d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc825d0000 'api-ms-win-core-com-l1-1-0.dll'
1410760.744: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\avrt.dll [lacks WinVerifyTrust]
1411760.744: supR3HardenedDllNotificationCallback: load 00007ffc77f40000 LB 0x00009000 C:\windows\SYSTEM32\ksuser.dll [fFlags=0x0]
1412760.744: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ksuser.dll [lacks WinVerifyTrust]
1413760.744: supR3HardenedDllNotificationCallback: load 00007ffc7a820000 LB 0x0000a000 C:\windows\SYSTEM32\AVRT.dll [fFlags=0x0]
1414760.744: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\avrt.dll [lacks WinVerifyTrust]
1415760.744: supR3HardenedDllNotificationCallback: load 00007ffc56f90000 LB 0x00044000 C:\windows\System32\wdmaud.drv [fFlags=0x0]
1416760.744: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
1417760.744: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc56f90000 'C:\windows\System32\wdmaud.drv'
1418760.744: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
1419760.744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'...
1420760.744: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008]
1421760.744: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust]
1422760.744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
1423760.744: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
1424760.744: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
1425760.744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
1426760.744: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
1427760.744: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [lacks WinVerifyTrust]
1428760.744: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
1429760.744: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc56f90000 'C:\windows\System32\wdmaud.drv'
1430760.744: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
1431760.744: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\MMDEVAPI.DLL (Input=MMDEVAPI.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
1432760.744: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc74fe0000 'C:\windows\System32\MMDEVAPI.DLL'
1433760.744: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
1434760.744: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
1435760.744: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc56f90000 'C:\windows\System32\wdmaud.drv'
1436760.744: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
1437760.744: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
1438760.744: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc56f90000 'C:\windows\System32\wdmaud.drv'
1439760.744: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
1440760.744: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
1441760.744: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc56f90000 'C:\windows\System32\wdmaud.drv'
1442760.4d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1443760.4d0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\iertutil.dll)
1444760.4d0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\iertutil.dll
1445760.4d0: supR3HardenedDllNotificationCallback: load 00007ffc6a520000 LB 0x002a6000 C:\windows\System32\iertutil.dll [fFlags=0x0]
1446760.4d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\iertutil.dll [lacks WinVerifyTrust]
1447760.4d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msctf.dll [lacks WinVerifyTrust]
1448760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1449760.4d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1450760.4d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1451760.4d0: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\MSCTF.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
1452760.4d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc81690000 'C:\windows\System32\MSCTF.dll'
1453760.744: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
1454760.744: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'rpcrt4.dll'.
1455760.744: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'oleaut32.dll'.
1456760.744: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #29 'mmdevapi.dll'.
1457760.744: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\AudioSes.dll)
1458760.744: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\AudioSes.dll
1459760.744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mmdevapi.dll'...
1460760.744: supR3HardenedWinVerifyCacheProcessImportTodos: 'mmdevapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\mmdevapi.dll' [rcNtRedir=0xc0150008]
1461760.744: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
1462760.744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
1463760.744: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
1464760.744: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
1465760.744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
1466760.744: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
1467760.744: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
1468760.744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
1469760.744: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
1470760.744: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust]
1471760.744: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\AUDIOSES.DLL (Input=AUDIOSES.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
1472760.744: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\AudioSes.dll [lacks WinVerifyTrust]
1473760.744: supR3HardenedDllNotificationCallback: load 00007ffc750d0000 LB 0x0015d000 C:\windows\System32\AUDIOSES.DLL [fFlags=0x0]
1474760.744: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\AudioSes.dll [lacks WinVerifyTrust]
1475760.744: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc750d0000 'C:\windows\System32\AUDIOSES.DLL'
1476760.744: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
1477760.744: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
1478760.744: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc56f90000 'C:\windows\System32\wdmaud.drv'
1479760.744: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
1480760.744: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
1481760.744: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc56f90000 'C:\windows\System32\wdmaud.drv'
1482760.744: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
1483760.744: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc56f90000 'C:\windows\System32\wdmaud.drv'
1484760.744: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1485760.744: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'mmdevapi.dll'.
1486760.744: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'msacm32.dll'.
1487760.744: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'winmmbase.dll'.
1488760.744: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\msacm32.drv)
1489760.744: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msacm32.drv
1490760.744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmmbase.dll'...
1491760.744: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmmbase.dll' -> '\Device\HarddiskVolume3\Windows\System32\winmmbase.dll' [rcNtRedir=0xc0150008]
1492760.744: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmmbase.dll [lacks WinVerifyTrust]
1493760.744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msacm32.dll'...
1494760.744: supR3HardenedWinVerifyCacheProcessImportTodos: 'msacm32.dll' -> '\Device\HarddiskVolume3\Windows\System32\msacm32.dll' [rcNtRedir=0xc0150008]
1495760.744: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1496760.744: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\msacm32.dll)
1497760.744: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msacm32.dll
1498760.744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mmdevapi.dll'...
1499760.744: supR3HardenedWinVerifyCacheProcessImportTodos: 'mmdevapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\mmdevapi.dll' [rcNtRedir=0xc0150008]
1500760.744: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
1501760.744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1502760.744: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1503760.744: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1504760.744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1505760.744: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1506760.744: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1507760.744: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
1508760.744: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
1509760.744: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msacm32.dll [lacks WinVerifyTrust]
1510760.744: supR3HardenedDllNotificationCallback: load 00007ffc5ba10000 LB 0x0001c000 C:\windows\SYSTEM32\MSACM32.dll [fFlags=0x0]
1511760.744: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msacm32.dll [lacks WinVerifyTrust]
1512760.744: supR3HardenedDllNotificationCallback: load 00007ffc75230000 LB 0x0000d000 C:\windows\System32\msacm32.drv [fFlags=0x0]
1513760.744: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
1514760.744: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc75230000 'C:\windows\System32\msacm32.drv'
1515760.744: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
1516760.744: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
1517760.744: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc75230000 'C:\windows\System32\msacm32.drv'
1518760.744: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
1519760.744: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
1520760.744: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc75230000 'C:\windows\System32\msacm32.drv'
1521760.744: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
1522760.744: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
1523760.744: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc75230000 'C:\windows\System32\msacm32.drv'
1524760.744: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
1525760.744: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
1526760.744: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc75230000 'C:\windows\System32\msacm32.drv'
1527760.744: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
1528760.744: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
1529760.744: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc75230000 'C:\windows\System32\msacm32.drv'
1530760.744: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
1531760.744: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
1532760.744: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc75230000 'C:\windows\System32\msacm32.drv'
1533760.744: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
1534760.744: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc75230000 'C:\windows\System32\msacm32.drv'
1535760.744: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
1536760.744: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc75230000 'C:\windows\System32\msacm32.drv'
1537760.744: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
1538760.744: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc75230000 'C:\windows\System32\msacm32.drv'
1539760.744: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1540760.744: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'winmm.dll'.
1541760.744: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\midimap.dll)
1542760.744: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\midimap.dll
1543760.744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
1544760.744: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume3\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
1545760.744: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll [lacks WinVerifyTrust]
1546760.744: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1547760.744: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1548760.744: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1549760.744: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
1550760.744: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\midimap.dll [lacks WinVerifyTrust]
1551760.744: supR3HardenedDllNotificationCallback: load 00007ffc74b70000 LB 0x0000a000 C:\windows\System32\midimap.dll [fFlags=0x0]
1552760.744: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\midimap.dll [lacks WinVerifyTrust]
1553760.744: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc74b70000 'C:\windows\System32\midimap.dll'
1554760.744: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\midimap.dll [lacks WinVerifyTrust]
1555760.744: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
1556760.744: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc74b70000 'C:\windows\System32\midimap.dll'
1557760.744: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\midimap.dll [lacks WinVerifyTrust]
1558760.744: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
1559760.744: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc74b70000 'C:\windows\System32\midimap.dll'
1560760.744: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\midimap.dll [lacks WinVerifyTrust]
1561760.744: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
1562760.744: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc74b70000 'C:\windows\System32\midimap.dll'
1563760.7bc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
1564760.7bc: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\MMDevApi.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
1565760.7bc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc74fe0000 'C:\windows\System32\MMDevApi.dll'
15664e0.2bb0: supR3HardNtChildWaitFor[1]: Quitting: ExitCode=0x1 (rcNtWait=0x0, rcNt1=0x0, rcNt2=0x103, rcNt3=0x103, 8468 ms, the end);

© 2024 Oracle Support Privacy / Do Not Sell My Info Terms of Use Trademark Policy