VirtualBox

Ticket #15827: VBoxHardening.log

File VBoxHardening.log, 138.0 KB (added by asdfafds, 8 years ago)
Line 
1130c.ad0: Log file opened: 5.1.4r110228 g_hStartupLog=0000000000000010 g_uNtVerCombined=0x63258000
2130c.ad0: \SystemRoot\System32\ntdll.dll:
3130c.ad0: CreationTime: 2016-05-30T17:43:32.734566100Z
4130c.ad0: LastWriteTime: 2016-02-11T20:17:06.274560400Z
5130c.ad0: ChangeTime: 2016-08-19T12:48:30.517644200Z
6130c.ad0: FileAttributes: 0x20
7130c.ad0: Size: 0x1a8180
8130c.ad0: NT Headers: 0xd8
9130c.ad0: Timestamp: 0x56bb4ebb
10130c.ad0: Machine: 0x8664 - amd64
11130c.ad0: Timestamp: 0x56bb4ebb
12130c.ad0: Image Version: 6.3
13130c.ad0: SizeOfImage: 0x1ad000 (1757184)
14130c.ad0: Resource Dir: 0x149000 LB 0x624a0
15130c.ad0: ProductName: Microsoft® Windows® Operating System
16130c.ad0: ProductVersion: 6.3.9600.18233
17130c.ad0: FileVersion: 6.3.9600.18233 (winblue_ltsb.160210-0600)
18130c.ad0: FileDescription: NT Layer DLL
19130c.ad0: \SystemRoot\System32\kernel32.dll:
20130c.ad0: CreationTime: 2015-01-21T16:54:15.011610800Z
21130c.ad0: LastWriteTime: 2014-10-29T04:09:24.572407200Z
22130c.ad0: ChangeTime: 2016-08-19T01:27:06.225166300Z
23130c.ad0: FileAttributes: 0x20
24130c.ad0: Size: 0x13fc30
25130c.ad0: NT Headers: 0xf8
26130c.ad0: Timestamp: 0x545054ca
27130c.ad0: Machine: 0x8664 - amd64
28130c.ad0: Timestamp: 0x545054ca
29130c.ad0: Image Version: 6.3
30130c.ad0: SizeOfImage: 0x13e000 (1302528)
31130c.ad0: Resource Dir: 0x12e000 LB 0x518
32130c.ad0: ProductName: Microsoft® Windows® Operating System
33130c.ad0: ProductVersion: 6.3.9600.17415
34130c.ad0: FileVersion: 6.3.9600.17415 (winblue_r4.141028-1500)
35130c.ad0: FileDescription: Windows NT BASE API Client DLL
36130c.ad0: \SystemRoot\System32\KernelBase.dll:
37130c.ad0: CreationTime: 2016-02-26T12:37:13.431132800Z
38130c.ad0: LastWriteTime: 2016-01-19T19:12:20.143460800Z
39130c.ad0: ChangeTime: 2016-08-19T12:40:39.682926700Z
40130c.ad0: FileAttributes: 0x20
41130c.ad0: Size: 0x114cb0
42130c.ad0: NT Headers: 0xf0
43130c.ad0: Timestamp: 0x569e7eb1
44130c.ad0: Machine: 0x8664 - amd64
45130c.ad0: Timestamp: 0x569e7eb1
46130c.ad0: Image Version: 6.3
47130c.ad0: SizeOfImage: 0x115000 (1134592)
48130c.ad0: Resource Dir: 0x110000 LB 0x3530
49130c.ad0: ProductName: Microsoft® Windows® Operating System
50130c.ad0: ProductVersion: 6.3.9600.18202
51130c.ad0: FileVersion: 6.3.9600.18202 (winblue_ltsb.160119-0600)
52130c.ad0: FileDescription: Windows NT BASE API Client DLL
53130c.ad0: \SystemRoot\System32\apisetschema.dll:
54130c.ad0: CreationTime: 2013-08-22T12:13:09.745625900Z
55130c.ad0: LastWriteTime: 2013-08-22T12:35:12.091034400Z
56130c.ad0: ChangeTime: 2016-08-19T12:48:30.533266700Z
57130c.ad0: FileAttributes: 0x20
58130c.ad0: Size: 0x11360
59130c.ad0: NT Headers: 0xd0
60130c.ad0: Timestamp: 0x52160049
61130c.ad0: Machine: 0x8664 - amd64
62130c.ad0: Timestamp: 0x52160049
63130c.ad0: Image Version: 6.3
64130c.ad0: SizeOfImage: 0x13000 (77824)
65130c.ad0: Resource Dir: 0x11000 LB 0x3f8
66130c.ad0: ProductName: Microsoft® Windows® Operating System
67130c.ad0: ProductVersion: 6.3.9600.16384
68130c.ad0: FileVersion: 6.3.9600.16384 (winblue_rtm.130821-1623)
69130c.ad0: FileDescription: ApiSet Schema DLL
70130c.ad0: NtOpenDirectoryObject failed on \Driver: 0xc0000022
71130c.ad0: supR3HardenedWinFindAdversaries: 0x20
72130c.ad0: \SystemRoot\System32\drivers\mfeapfk.sys:
73130c.ad0: CreationTime: 2015-07-07T18:51:51.622960600Z
74130c.ad0: LastWriteTime: 2015-07-07T18:51:18.996371900Z
75130c.ad0: ChangeTime: 2016-08-19T01:30:17.601229100Z
76130c.ad0: FileAttributes: 0x20
77130c.ad0: Size: 0x2c030
78130c.ad0: NT Headers: 0xe8
79130c.ad0: Timestamp: 0x52ab7fef
80130c.ad0: Machine: 0x8664 - amd64
81130c.ad0: Timestamp: 0x52ab7fef
82130c.ad0: Image Version: 0.0
83130c.ad0: SizeOfImage: 0x29d00 (171264)
84130c.ad0: Resource Dir: 0x29500 LB 0x340
85130c.ad0: ProductName: SYSCORE
86130c.ad0: FileVersion: SYSCORE.15.1.0.656
87130c.ad0: PrivateBuild: SYSCORE.15.1.0.656 F16
88130c.ad0: FileDescription: Access Protection Filter Driver
89130c.ad0: \SystemRoot\System32\drivers\mfeavfk.sys:
90130c.ad0: CreationTime: 2015-07-07T18:51:51.622960600Z
91130c.ad0: LastWriteTime: 2015-07-07T18:51:19.277634100Z
92130c.ad0: ChangeTime: 2016-08-19T12:48:30.580154000Z
93130c.ad0: FileAttributes: 0x20
94130c.ad0: Size: 0x4c130
95130c.ad0: NT Headers: 0xf0
96130c.ad0: Timestamp: 0x52ab8004
97130c.ad0: Machine: 0x8664 - amd64
98130c.ad0: Timestamp: 0x52ab8004
99130c.ad0: Image Version: 0.0
100130c.ad0: SizeOfImage: 0x49b00 (301824)
101130c.ad0: Resource Dir: 0x48d00 LB 0x718
102130c.ad0: ProductName: SYSCORE
103130c.ad0: FileVersion: SYSCORE.15.1.0.656
104130c.ad0: PrivateBuild: SYSCORE.15.1.0.656 F15,F16,F19
105130c.ad0: FileDescription: Anti-Virus File System Filter Driver
106130c.ad0: \SystemRoot\System32\drivers\mfehidk.sys:
107130c.ad0: CreationTime: 2015-07-07T18:51:51.388575300Z
108130c.ad0: LastWriteTime: 2015-07-07T18:51:20.262053000Z
109130c.ad0: ChangeTime: 2016-08-18T20:20:34.349812600Z
110130c.ad0: FileAttributes: 0x20
111130c.ad0: Size: 0xbf278
112130c.ad0: NT Headers: 0xf0
113130c.ad0: Timestamp: 0x52ab7fc4
114130c.ad0: Machine: 0x8664 - amd64
115130c.ad0: Timestamp: 0x52ab7fc4
116130c.ad0: Image Version: 0.0
117130c.ad0: SizeOfImage: 0xbc180 (770432)
118130c.ad0: Resource Dir: 0xb9b80 LB 0x348
119130c.ad0: ProductName: SYSCORE
120130c.ad0: FileVersion: SYSCORE.15.1.0.656
121130c.ad0: PrivateBuild: SYSCORE.15.1.0.656 F14,F15,F16,F18,F20
122130c.ad0: FileDescription: McAfee Link Driver
123130c.ad0: \SystemRoot\System32\drivers\mfewfpk.sys:
124130c.ad0: CreationTime: 2015-07-07T18:51:31.293843700Z
125130c.ad0: LastWriteTime: 2015-07-07T18:51:21.293352300Z
126130c.ad0: ChangeTime: 2016-08-18T20:20:34.395756200Z
127130c.ad0: FileAttributes: 0x20
128130c.ad0: Size: 0x54070
129130c.ad0: NT Headers: 0xf0
130130c.ad0: Timestamp: 0x52ab7fd3
131130c.ad0: Machine: 0x8664 - amd64
132130c.ad0: Timestamp: 0x52ab7fd3
133130c.ad0: Image Version: 0.0
134130c.ad0: SizeOfImage: 0x51980 (334208)
135130c.ad0: Resource Dir: 0x50e80 LB 0x348
136130c.ad0: ProductName: SYSCORE
137130c.ad0: FileVersion: SYSCORE.15.1.0.656
138130c.ad0: PrivateBuild: SYSCORE.15.1.0.656 F17,F18
139130c.ad0: FileDescription: Anti-Virus Mini-Firewall Driver
140130c.ad0: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
141130c.ad0: Calling main()
142130c.ad0: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2
143130c.ad0: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
144130c.ad0: SUPR3HardenedMain: Respawn #1
145130c.ad0: System32: \Device\HarddiskVolume2\Windows\System32
146130c.ad0: WinSxS: \Device\HarddiskVolume2\Windows\WinSxS
147130c.ad0: KnownDllPath: C:\windows\system32
148130c.ad0: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
149130c.ad0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe)
150130c.ad0: supR3HardNtEnableThreadCreation:
151130c.ad0: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffad8ae8c80 pvNtTerminateThread=00007ffad8b60be0
152130c.ad0: supR3HardenedWinDoReSpawn(1): New child 82c.1cbc [kernel32].
153130c.ad0: supR3HardNtChildGatherData: PebBaseAddress=00007ff7ca3cf000 cbPeb=0x388
154130c.ad0: supR3HardNtPuChFindNtdll: uNtDllParentAddr=00007ffad8ad0000 uNtDllChildAddr=00007ffad8ad0000
155130c.ad0: supR3HardenedWinSetupChildInit: uLdrInitThunk=00007ffad8ae8c80
156130c.ad0: supR3HardenedWinSetupChildInit: Start child.
157130c.ad0: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 0 ms.
158130c.ad0: supR3HardNtChildPurify: Startup delay kludge #1/0: 516 ms, 33 sleeps
159130c.ad0: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
160130c.ad0: *0000000000000000-ffffffffffd7ffff 0x0001/0x0000 0x0000000
161130c.ad0: *0000000000280000-000000000025ffff 0x0004/0x0004 0x0020000
162130c.ad0: *00000000002a0000-0000000000290fff 0x0002/0x0002 0x0040000
163130c.ad0: 00000000002af000-00000000002adfff 0x0001/0x0000 0x0000000
164130c.ad0: *00000000002b0000-00000000001b4fff 0x0000/0x0004 0x0020000
165130c.ad0: 00000000003ab000-00000000003a7fff 0x0104/0x0004 0x0020000
166130c.ad0: 00000000003ae000-00000000003abfff 0x0004/0x0004 0x0020000
167130c.ad0: *00000000003b0000-00000000003abfff 0x0002/0x0002 0x0040000
168130c.ad0: 00000000003b4000-00000000003a7fff 0x0001/0x0000 0x0000000
169130c.ad0: *00000000003c0000-00000000003bdfff 0x0004/0x0004 0x0020000
170130c.ad0: 00000000003c2000-ffffffff807a3fff 0x0001/0x0000 0x0000000
171130c.ad0: *000000007ffe0000-000000007ffdefff 0x0002/0x0002 0x0020000
172130c.ad0: 000000007ffe1000-000000007ffd1fff 0x0000/0x0002 0x0020000
173130c.ad0: 000000007fff0000-ffff800935c3ffff 0x0001/0x0000 0x0000000
174130c.ad0: *00007ff7ca3a0000-00007ff7ca37cfff 0x0002/0x0002 0x0040000
175130c.ad0: 00007ff7ca3c3000-00007ff7ca3b8fff 0x0001/0x0000 0x0000000
176130c.ad0: *00007ff7ca3cd000-00007ff7ca3cafff 0x0004/0x0004 0x0020000
177130c.ad0: *00007ff7ca3cf000-00007ff7ca3cdfff 0x0004/0x0004 0x0020000
178130c.ad0: 00007ff7ca3d0000-00007ff7c9ffffff 0x0001/0x0000 0x0000000
179130c.ad0: *00007ff7ca7a0000-00007ff7ca7a0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
180130c.ad0: 00007ff7ca7a1000-00007ff7ca80ffff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
181130c.ad0: 00007ff7ca810000-00007ff7ca810fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
182130c.ad0: 00007ff7ca811000-00007ff7ca855fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
183130c.ad0: 00007ff7ca856000-00007ff7ca856fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
184130c.ad0: 00007ff7ca857000-00007ff7ca857fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
185130c.ad0: 00007ff7ca858000-00007ff7ca85cfff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
186130c.ad0: 00007ff7ca85d000-00007ff7ca85dfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
187130c.ad0: 00007ff7ca85e000-00007ff7ca85efff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
188130c.ad0: 00007ff7ca85f000-00007ff7ca862fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
189130c.ad0: 00007ff7ca863000-00007ff7ca8aafff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
190130c.ad0: 00007ff7ca8ab000-00007ff4bc685fff 0x0001/0x0000 0x0000000
191130c.ad0: *00007ffad8ad0000-00007ffad8ad0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
192130c.ad0: 00007ffad8ad1000-00007ffad8bfdfff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
193130c.ad0: 00007ffad8bfe000-00007ffad8c00fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
194130c.ad0: 00007ffad8c01000-00007ffad8c01fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
195130c.ad0: 00007ffad8c02000-00007ffad8c03fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
196130c.ad0: 00007ffad8c04000-00007ffad8c10fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
197130c.ad0: 00007ffad8c11000-00007ffad8c11fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
198130c.ad0: 00007ffad8c12000-00007ffad8c14fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
199130c.ad0: 00007ffad8c15000-00007ffad8c15fff 0x0010/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
200130c.ad0: 00007ffad8c16000-00007ffad8c7cfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
201130c.ad0: 00007ffad8c7d000-00007ff5b1919fff 0x0001/0x0000 0x0000000
202130c.ad0: *00007ffffffe0000-00007ffffffcffff 0x0001/0x0002 0x0020000
203130c.ad0: VirtualBox.exe: timestamp 0x57b358f8 (rc=VINF_SUCCESS)
204130c.ad0: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
205130c.ad0: '\Device\HarddiskVolume2\Windows\System32\ntdll.dll' has no imports
206130c.ad0: supR3HardNtChildPurify: Done after 563 ms and 0 fixes (loop #0).
207130c.ad0: supR3HardNtEnableThreadCreation:
20882c.1cbc: Log file opened: 5.1.4r110228 g_hStartupLog=0000000000000004 g_uNtVerCombined=0x63258000
20982c.1cbc: supR3HardenedVmProcessInit: uNtDllAddr=00007ffad8ad0000 g_uNtVerCombined=0x63258000
21082c.1cbc: ntdll.dll: timestamp 0x56bb4ebb (rc=VINF_SUCCESS)
21182c.1cbc: New simple heap: #1 00000000004d0000 LB 0x400000 (for 1757184 allocation)
21282c.1cbc: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
21382c.1cbc: System32: \Device\HarddiskVolume2\Windows\System32
21482c.1cbc: WinSxS: \Device\HarddiskVolume2\Windows\WinSxS
21582c.1cbc: KnownDllPath: C:\windows\system32
21682c.1cbc: supR3HardenedVmProcessInit: Opening vboxdrv stub...
21782c.1cbc: supR3HardenedVmProcessInit: Restoring LdrInitializeThunk...
21882c.1cbc: supR3HardenedVmProcessInit: Returning to LdrInitializeThunk...
21982c.1cbc: Registered Dll notification callback with NTDLL.
22082c.1cbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\kernel32.dll)
22182c.1cbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\kernel32.dll
22282c.1cbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\system32\KERNEL32.DLL (Input=KERNEL32.DLL, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000000801:<flags> [calling]
22382c.1cbc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
22482c.1cbc: supR3HardenedDllNotificationCallback: load 00007ffad5eb0000 LB 0x00115000 C:\windows\system32\KERNELBASE.dll [fFlags=0x0]
22582c.1cbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\KernelBase.dll)
22682c.1cbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\KernelBase.dll
22782c.1cbc: supR3HardenedDllNotificationCallback: load 00007ffad7ad0000 LB 0x0013e000 C:\windows\system32\KERNEL32.DLL [fFlags=0x0]
22882c.1cbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
22982c.1cbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffad7ad0000 'C:\windows\system32\KERNEL32.DLL'
23082c.1cbc: supR3HardenedDllNotificationCallback: load 00007ff7ca7a0000 LB 0x0010b000 C:\Program Files\Oracle\VirtualBox\VirtualBox.exe [fFlags=0x0]
23182c.1cbc: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
23282c.1cbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe)
23382c.1cbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
23482c.1cbc: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffad8ae8c80 pvNtTerminateThread=00007ffad8b60be0
235130c.ad0: supR3HardNtChildWaitFor: Found expected request 1 (CloseEvents) after 62 ms.
23682c.1cbc: \SystemRoot\System32\ntdll.dll:
23782c.1cbc: CreationTime: 2016-05-30T17:43:32.734566100Z
23882c.1cbc: LastWriteTime: 2016-02-11T20:17:06.274560400Z
23982c.1cbc: ChangeTime: 2016-08-19T12:48:30.517644200Z
24082c.1cbc: FileAttributes: 0x20
24182c.1cbc: Size: 0x1a8180
24282c.1cbc: NT Headers: 0xd8
24382c.1cbc: Timestamp: 0x56bb4ebb
24482c.1cbc: Machine: 0x8664 - amd64
24582c.1cbc: Timestamp: 0x56bb4ebb
24682c.1cbc: Image Version: 6.3
24782c.1cbc: SizeOfImage: 0x1ad000 (1757184)
24882c.1cbc: Resource Dir: 0x149000 LB 0x624a0
24982c.1cbc: ProductName: Microsoft® Windows® Operating System
25082c.1cbc: ProductVersion: 6.3.9600.18233
25182c.1cbc: FileVersion: 6.3.9600.18233 (winblue_ltsb.160210-0600)
25282c.1cbc: FileDescription: NT Layer DLL
25382c.1cbc: \SystemRoot\System32\kernel32.dll:
25482c.1cbc: CreationTime: 2015-01-21T16:54:15.011610800Z
25582c.1cbc: LastWriteTime: 2014-10-29T04:09:24.572407200Z
25682c.1cbc: ChangeTime: 2016-08-19T01:27:06.225166300Z
25782c.1cbc: FileAttributes: 0x20
25882c.1cbc: Size: 0x13fc30
25982c.1cbc: NT Headers: 0xf8
26082c.1cbc: Timestamp: 0x545054ca
26182c.1cbc: Machine: 0x8664 - amd64
26282c.1cbc: Timestamp: 0x545054ca
26382c.1cbc: Image Version: 6.3
26482c.1cbc: SizeOfImage: 0x13e000 (1302528)
26582c.1cbc: Resource Dir: 0x12e000 LB 0x518
26682c.1cbc: ProductName: Microsoft® Windows® Operating System
26782c.1cbc: ProductVersion: 6.3.9600.17415
26882c.1cbc: FileVersion: 6.3.9600.17415 (winblue_r4.141028-1500)
26982c.1cbc: FileDescription: Windows NT BASE API Client DLL
27082c.1cbc: \SystemRoot\System32\KernelBase.dll:
27182c.1cbc: CreationTime: 2016-02-26T12:37:13.431132800Z
27282c.1cbc: LastWriteTime: 2016-01-19T19:12:20.143460800Z
27382c.1cbc: ChangeTime: 2016-08-19T12:40:39.682926700Z
27482c.1cbc: FileAttributes: 0x20
27582c.1cbc: Size: 0x114cb0
27682c.1cbc: NT Headers: 0xf0
27782c.1cbc: Timestamp: 0x569e7eb1
27882c.1cbc: Machine: 0x8664 - amd64
27982c.1cbc: Timestamp: 0x569e7eb1
28082c.1cbc: Image Version: 6.3
28182c.1cbc: SizeOfImage: 0x115000 (1134592)
28282c.1cbc: Resource Dir: 0x110000 LB 0x3530
28382c.1cbc: ProductName: Microsoft® Windows® Operating System
28482c.1cbc: ProductVersion: 6.3.9600.18202
28582c.1cbc: FileVersion: 6.3.9600.18202 (winblue_ltsb.160119-0600)
28682c.1cbc: FileDescription: Windows NT BASE API Client DLL
28782c.1cbc: \SystemRoot\System32\apisetschema.dll:
28882c.1cbc: CreationTime: 2013-08-22T12:13:09.745625900Z
28982c.1cbc: LastWriteTime: 2013-08-22T12:35:12.091034400Z
29082c.1cbc: ChangeTime: 2016-08-19T12:48:30.533266700Z
29182c.1cbc: FileAttributes: 0x20
29282c.1cbc: Size: 0x11360
29382c.1cbc: NT Headers: 0xd0
29482c.1cbc: Timestamp: 0x52160049
29582c.1cbc: Machine: 0x8664 - amd64
29682c.1cbc: Timestamp: 0x52160049
29782c.1cbc: Image Version: 6.3
29882c.1cbc: SizeOfImage: 0x13000 (77824)
29982c.1cbc: Resource Dir: 0x11000 LB 0x3f8
30082c.1cbc: ProductName: Microsoft® Windows® Operating System
30182c.1cbc: ProductVersion: 6.3.9600.16384
30282c.1cbc: FileVersion: 6.3.9600.16384 (winblue_rtm.130821-1623)
30382c.1cbc: FileDescription: ApiSet Schema DLL
30482c.1cbc: NtOpenDirectoryObject failed on \Driver: 0xc0000022
30582c.1cbc: supR3HardenedWinFindAdversaries: 0x20
30682c.1cbc: \SystemRoot\System32\drivers\mfeapfk.sys:
30782c.1cbc: CreationTime: 2015-07-07T18:51:51.622960600Z
30882c.1cbc: LastWriteTime: 2015-07-07T18:51:18.996371900Z
30982c.1cbc: ChangeTime: 2016-08-19T01:30:17.601229100Z
31082c.1cbc: FileAttributes: 0x20
31182c.1cbc: Size: 0x2c030
31282c.1cbc: NT Headers: 0xe8
31382c.1cbc: Timestamp: 0x52ab7fef
31482c.1cbc: Machine: 0x8664 - amd64
31582c.1cbc: Timestamp: 0x52ab7fef
31682c.1cbc: Image Version: 0.0
31782c.1cbc: SizeOfImage: 0x29d00 (171264)
31882c.1cbc: Resource Dir: 0x29500 LB 0x340
31982c.1cbc: ProductName: SYSCORE
32082c.1cbc: FileVersion: SYSCORE.15.1.0.656
32182c.1cbc: PrivateBuild: SYSCORE.15.1.0.656 F16
32282c.1cbc: FileDescription: Access Protection Filter Driver
32382c.1cbc: \SystemRoot\System32\drivers\mfeavfk.sys:
32482c.1cbc: CreationTime: 2015-07-07T18:51:51.622960600Z
32582c.1cbc: LastWriteTime: 2015-07-07T18:51:19.277634100Z
32682c.1cbc: ChangeTime: 2016-08-19T12:48:30.580154000Z
32782c.1cbc: FileAttributes: 0x20
32882c.1cbc: Size: 0x4c130
32982c.1cbc: NT Headers: 0xf0
33082c.1cbc: Timestamp: 0x52ab8004
33182c.1cbc: Machine: 0x8664 - amd64
33282c.1cbc: Timestamp: 0x52ab8004
33382c.1cbc: Image Version: 0.0
33482c.1cbc: SizeOfImage: 0x49b00 (301824)
33582c.1cbc: Resource Dir: 0x48d00 LB 0x718
33682c.1cbc: ProductName: SYSCORE
33782c.1cbc: FileVersion: SYSCORE.15.1.0.656
33882c.1cbc: PrivateBuild: SYSCORE.15.1.0.656 F15,F16,F19
33982c.1cbc: FileDescription: Anti-Virus File System Filter Driver
34082c.1cbc: \SystemRoot\System32\drivers\mfehidk.sys:
34182c.1cbc: CreationTime: 2015-07-07T18:51:51.388575300Z
34282c.1cbc: LastWriteTime: 2015-07-07T18:51:20.262053000Z
34382c.1cbc: ChangeTime: 2016-08-18T20:20:34.349812600Z
34482c.1cbc: FileAttributes: 0x20
34582c.1cbc: Size: 0xbf278
34682c.1cbc: NT Headers: 0xf0
34782c.1cbc: Timestamp: 0x52ab7fc4
34882c.1cbc: Machine: 0x8664 - amd64
34982c.1cbc: Timestamp: 0x52ab7fc4
35082c.1cbc: Image Version: 0.0
35182c.1cbc: SizeOfImage: 0xbc180 (770432)
35282c.1cbc: Resource Dir: 0xb9b80 LB 0x348
35382c.1cbc: ProductName: SYSCORE
35482c.1cbc: FileVersion: SYSCORE.15.1.0.656
35582c.1cbc: PrivateBuild: SYSCORE.15.1.0.656 F14,F15,F16,F18,F20
35682c.1cbc: FileDescription: McAfee Link Driver
35782c.1cbc: \SystemRoot\System32\drivers\mfewfpk.sys:
35882c.1cbc: CreationTime: 2015-07-07T18:51:31.293843700Z
35982c.1cbc: LastWriteTime: 2015-07-07T18:51:21.293352300Z
36082c.1cbc: ChangeTime: 2016-08-18T20:20:34.395756200Z
36182c.1cbc: FileAttributes: 0x20
36282c.1cbc: Size: 0x54070
36382c.1cbc: NT Headers: 0xf0
36482c.1cbc: Timestamp: 0x52ab7fd3
36582c.1cbc: Machine: 0x8664 - amd64
36682c.1cbc: Timestamp: 0x52ab7fd3
36782c.1cbc: Image Version: 0.0
36882c.1cbc: SizeOfImage: 0x51980 (334208)
36982c.1cbc: Resource Dir: 0x50e80 LB 0x348
37082c.1cbc: ProductName: SYSCORE
37182c.1cbc: FileVersion: SYSCORE.15.1.0.656
37282c.1cbc: PrivateBuild: SYSCORE.15.1.0.656 F17,F18
37382c.1cbc: FileDescription: Anti-Virus Mini-Firewall Driver
37482c.1cbc: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
37582c.1cbc: Calling main()
37682c.1cbc: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2
37782c.1cbc: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
37882c.1cbc: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
37982c.1cbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe)
38082c.1cbc: SUPR3HardenedMain: Respawn #2
38182c.1cbc: Error (rc=-5640):
38282c.1cbc: More than one thread in process
38382c.1cbc: Error -5640 in supR3HardenedWinReSpawn! (enmWhat=1)
38482c.1cbc: More than one thread in process
38582c.1cbc: supR3HardNtEnableThreadCreation:
38682c.1cb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'secur32.dll'.
38782c.1cb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'shlwapi.dll'.
38882c.1cb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
38982c.1cb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'gdi32.dll'.
39082c.1cb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'winspool.drv'.
39182c.1cb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
39282c.1cb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcp100.dll'.
39382c.1cb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'advapi32.dll'.
39482c.1cb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'ole32.dll'.
39582c.1cb4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Manufacturer\Endpoint Agent\prntm64.dll)
39682c.1cb4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Manufacturer\Endpoint Agent\prntm64.dll
39782c.1cb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
39882c.1cb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
39982c.1cb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'.
40082c.1cb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #17 'rpcrt4.dll'.
40182c.1cb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'gdi32.dll'.
40282c.1cb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #37 'user32.dll'.
40382c.1cb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #38 'combase.dll'.
40482c.1cb4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\ole32.dll)
40582c.1cb4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\ole32.dll
40682c.1cb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
40782c.1cb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
40882c.1cb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
40982c.1cb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'sechost.dll'.
41082c.1cb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'rpcrt4.dll'.
41182c.1cb4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\advapi32.dll)
41282c.1cb4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\advapi32.dll
41382c.1cb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
41482c.1cb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
41582c.1cb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
41682c.1cb4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll)
41782c.1cb4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll
41882c.1cb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
41982c.1cb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
42082c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'opengl32.dll'.
42182c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
42282c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'msvcp100.dll'.
42382c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcr100.dll'.
42482c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'.
42582c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'qt5guivbox.dll'.
42682c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'qt5widgetsvbox.dll'.
42782c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'qt5printsupportvbox.dll'.
42882c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'qt5openglvbox.dll'.
42982c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'user32.dll'.
43082c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'advapi32.dll'.
43182c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'shell32.dll'.
43282c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'ole32.dll'.
43382c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'oleaut32.dll'.
43482c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #15 'winmm.dll'.
43582c.1cbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.dll)
43682c.1cbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.dll
43782c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
43882c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume2\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
43982c.1cb4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll)
44082c.1cb4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll
44182c.1cb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winspool.drv'...
44282c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'winmmbase.dll'.
44382c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcrt.dll'.
44482c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'user32.dll'.
44582c.1cb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'winspool.drv' -> '\Device\HarddiskVolume2\Windows\System32\winspool.drv' [rcNtRedir=0xc0150008]
44682c.1cbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\winmm.dll)
44782c.1cbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\winmm.dll
44882c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
44982c.1cb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
45082c.1cb4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\winspool.drv)
45182c.1cb4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\winspool.drv
45282c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume2\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
45382c.1cb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
45482c.1cb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
45582c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
45682c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'combase.dll'.
45782c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #17 'rpcrt4.dll'.
45882c.1cbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\oleaut32.dll)
45982c.1cbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\oleaut32.dll
46082c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
46182c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
46282c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ole32.dll [lacks WinVerifyTrust]
46382c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
46482c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume2\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
46582c.1cb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #21 'user32.dll'.
46682c.1cb4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\gdi32.dll)
46782c.1cb4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\gdi32.dll
46882c.1cb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
46982c.1cb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
47082c.1cb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #29 'gdi32.dll'.
47182c.1cb4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\user32.dll)
47282c.1cb4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\user32.dll
47382c.1cb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shlwapi.dll'...
47482c.1cb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'shlwapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\shlwapi.dll' [rcNtRedir=0xc0150008]
47582c.1cb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'.
47682c.1cb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #37 'user32.dll'.
47782c.1cb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #38 'gdi32.dll'.
47882c.1cb4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\shlwapi.dll)
47982c.1cb4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\shlwapi.dll
48082c.1cb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'secur32.dll'...
48182c.1cb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'secur32.dll' -> '\Device\HarddiskVolume2\Windows\System32\secur32.dll' [rcNtRedir=0xc0150008]
48282c.1cb4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\secur32.dll)
48382c.1cb4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\secur32.dll
48482c.1cb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
48582c.1cb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
48682c.1cb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
48782c.1cb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
48882c.1cb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
48982c.1cb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
49082c.1cb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
49182c.1cb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
49282c.1cb4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\msvcrt.dll)
49382c.1cb4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\msvcrt.dll
49482c.1cb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
49582c.1cb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
49682c.1cb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
49782c.1cb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
49882c.1cb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
49982c.1cb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
50082c.1cb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
50182c.1cb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
50282c.1cb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #22 'sspicli.dll'.
50382c.1cb4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll)
50482c.1cb4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll
50582c.1cb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
50682c.1cb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume2\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
50782c.1cb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
50882c.1cb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'rpcrt4.dll'.
50982c.1cb4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\combase.dll)
51082c.1cb4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\combase.dll
51182c.1cb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
51282c.1cb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
51382c.1cb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
51482c.1cb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
51582c.1cb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
51682c.1cb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
51782c.1cb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
51882c.1cb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
51982c.1cb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
52082c.1cb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
52182c.1cb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
52282c.1cb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
52382c.1cb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmmbase.dll'...
52482c.1cb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmmbase.dll' -> '\Device\HarddiskVolume2\Windows\System32\winmmbase.dll' [rcNtRedir=0xc0150008]
52582c.1cb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'.
52682c.1cb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #22 'devobj.dll'.
52782c.1cb4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\winmmbase.dll)
52882c.1cb4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\winmmbase.dll
52982c.1cb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'devobj.dll'...
53082c.1cb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'devobj.dll' -> '\Device\HarddiskVolume2\Windows\System32\devobj.dll' [rcNtRedir=0xc0150008]
53182c.1cb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
53282c.1cb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'cfgmgr32.dll'.
53382c.1cb4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\devobj.dll)
53482c.1cb4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\devobj.dll
53582c.1cb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
53682c.1cb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
53782c.1cb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
53882c.1cb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
53982c.1cb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
54082c.1cb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
54182c.1cb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
54282c.1cb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
54382c.1cb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
54482c.1cb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'sspicli.dll'...
54582c.1cb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'sspicli.dll' -> '\Device\HarddiskVolume2\Windows\System32\sspicli.dll' [rcNtRedir=0xc0150008]
54682c.1cb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
54782c.1cb4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\sspicli.dll)
54882c.1cb4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\sspicli.dll
54982c.1cb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
55082c.1cb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
55182c.1cb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
55282c.1cb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'cfgmgr32.dll'...
55382c.1cb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'cfgmgr32.dll' -> '\Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll' [rcNtRedir=0xc0150008]
55482c.1cb4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll)
55582c.1cb4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll
55682c.1cb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
55782c.1cb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
55882c.1cb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
55982c.1cb4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Manufacturer\Endpoint Agent\prntm64.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
56082c.1cb4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Manufacturer\Endpoint Agent\prntm64.dll [lacks WinVerifyTrust]
56182c.1cb4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\secur32.dll [lacks WinVerifyTrust]
56282c.1cb4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\winspool.drv [lacks WinVerifyTrust]
56382c.1cb4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
56482c.1cb4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
56582c.1cb4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\combase.dll [lacks WinVerifyTrust]
56682c.1cb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'rpcrt4.dll'.
56782c.1cb4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\sechost.dll)
56882c.1cb4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\sechost.dll
56982c.1cb4: supR3HardenedDllNotificationCallback: load 00007ffacda50000 LB 0x0000c000 C:\windows\SYSTEM32\Secur32.dll [fFlags=0x0]
57082c.1cb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\secur32.dll [lacks WinVerifyTrust]
57182c.1cb4: supR3HardenedDllNotificationCallback: load 00007ffad7fe0000 LB 0x000aa000 C:\windows\system32\msvcrt.dll [fFlags=0x0]
57282c.1cb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
57382c.1cb4: supR3HardenedDllNotificationCallback: load 00007ffad8420000 LB 0x00059000 C:\windows\SYSTEM32\sechost.dll [fFlags=0x0]
57482c.1cb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\sechost.dll [lacks WinVerifyTrust]
57582c.1cb4: supR3HardenedDllNotificationCallback: load 00007ffad6080000 LB 0x0002e000 C:\windows\system32\SspiCli.dll [fFlags=0x0]
57682c.1cb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\sspicli.dll [lacks WinVerifyTrust]
57782c.1cb4: supR3HardenedDllNotificationCallback: load 00007ffad6460000 LB 0x00140000 C:\windows\system32\RPCRT4.dll [fFlags=0x0]
57882c.1cb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
57982c.1cb4: supR3HardenedDllNotificationCallback: load 00007ffad87e0000 LB 0x00211000 C:\windows\SYSTEM32\combase.dll [fFlags=0x0]
58082c.1cb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\combase.dll [lacks WinVerifyTrust]
58182c.1cb4: supR3HardenedDllNotificationCallback: load 00007ffad8210000 LB 0x0014f000 C:\windows\system32\GDI32.dll [fFlags=0x0]
58282c.1cb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
58382c.1cb4: supR3HardenedDllNotificationCallback: load 00007ffad7df0000 LB 0x00177000 C:\windows\system32\USER32.dll [fFlags=0x0]
58482c.1cb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
58582c.1cb4: supR3HardenedDllNotificationCallback: load 00007ffad7f80000 LB 0x00054000 C:\windows\system32\SHLWAPI.dll [fFlags=0x0]
58682c.1cb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\shlwapi.dll [lacks WinVerifyTrust]
58782c.1cb4: supR3HardenedDllNotificationCallback: load 00007ffac5a60000 LB 0x00082000 C:\windows\SYSTEM32\WINSPOOL.DRV [fFlags=0x0]
58882c.1cb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\winspool.drv [lacks WinVerifyTrust]
58982c.1cb4: supR3HardenedDllNotificationCallback: load 000000005a7a0000 LB 0x000d2000 C:\Program Files\Oracle\VirtualBox\MSVCR100.dll [fFlags=0x0]
59082c.1cb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
59182c.1cb4: supR3HardenedDllNotificationCallback: load 000000005a700000 LB 0x00098000 C:\Program Files\Oracle\VirtualBox\MSVCP100.dll [fFlags=0x0]
59282c.1cb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
59382c.1cb4: supR3HardenedDllNotificationCallback: load 00007ffad8090000 LB 0x000aa000 C:\windows\system32\ADVAPI32.dll [fFlags=0x0]
59482c.1cb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
59582c.1cb4: supR3HardenedDllNotificationCallback: load 00007ffad8640000 LB 0x00194000 C:\windows\system32\ole32.dll [fFlags=0x0]
59682c.1cb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ole32.dll [lacks WinVerifyTrust]
59782c.1cb4: supR3HardenedDllNotificationCallback: load 00007ffac0c60000 LB 0x00062000 C:\Program Files\Manufacturer\Endpoint Agent\prntm64.dll [fFlags=0x0]
59882c.1cb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Manufacturer\Endpoint Agent\prntm64.dll [lacks WinVerifyTrust]
59982c.1cb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'user32.dll'.
60082c.1cb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #21 'msctf.dll'.
60182c.1cb4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\imm32.dll)
60282c.1cb4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\imm32.dll
60382c.1cb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msctf.dll'...
60482c.1cb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msctf.dll' -> '\Device\HarddiskVolume2\Windows\System32\msctf.dll' [rcNtRedir=0xc0150008]
60582c.1cb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
60682c.1cb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #23 'user32.dll'.
60782c.1cb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #24 'gdi32.dll'.
60882c.1cb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #25 'imm32.dll'.
60982c.1cb4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\msctf.dll)
61082c.1cb4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\msctf.dll
61182c.1cb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
61282c.1cb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
61382c.1cb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
61482c.1cb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
61582c.1cb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
61682c.1cb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
61782c.1cb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'...
61882c.1cb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume2\Windows\System32\imm32.dll' [rcNtRedir=0xc0150008]
61982c.1cb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\imm32.dll [lacks WinVerifyTrust]
62082c.1cb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
62182c.1cb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
62282c.1cb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
62382c.1cb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
62482c.1cb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
62582c.1cb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
62682c.1cb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
62782c.1cb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
62882c.1cb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
62982c.1cb4: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\system32\IMM32.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
63082c.1cb4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\imm32.dll [lacks WinVerifyTrust]
63182c.1cb4: supR3HardenedDllNotificationCallback: load 00007ffad7c90000 LB 0x00152000 C:\windows\system32\MSCTF.dll [fFlags=0x0]
63282c.1cb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msctf.dll [lacks WinVerifyTrust]
63382c.1cb4: supR3HardenedDllNotificationCallback: load 00007ffad6420000 LB 0x00036000 C:\windows\system32\IMM32.DLL [fFlags=0x0]
63482c.1cb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\imm32.dll [lacks WinVerifyTrust]
63582c.1cb4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffad6420000 'C:\windows\system32\IMM32.DLL'
63682c.1cb4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffac0c60000 'C:\Program Files\Manufacturer\Endpoint Agent\prntm64.dll'
63782c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
63882c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #55 'user32.dll'.
63982c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #57 'shlwapi.dll'.
64082c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #59 'gdi32.dll'.
64182c.1cbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\shell32.dll)
64282c.1cbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\shell32.dll
64382c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
64482c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
64582c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
64682c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
64782c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
64882c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
64982c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5openglvbox.dll'...
65082c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5openglvbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5openglvbox.dll' [rcNtRedir=0xc0150008]
65182c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'qt5widgetsvbox.dll'.
65282c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'qt5guivbox.dll'.
65382c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5corevbox.dll'.
65482c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcr100.dll'.
65582c.1cbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll)
65682c.1cbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll
65782c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5printsupportvbox.dll'...
65882c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5printsupportvbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5printsupportvbox.dll' [rcNtRedir=0xc0150008]
65982c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
66082c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
66182c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5widgetsvbox.dll'.
66282c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5guivbox.dll'.
66382c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'.
66482c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'winspool.drv'.
66582c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'comdlg32.dll'.
66682c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcr100.dll'.
66782c.1cbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll)
66882c.1cbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll
66982c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
67082c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
67182c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
67282c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
67382c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5guivbox.dll'.
67482c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5corevbox.dll'.
67582c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'shell32.dll'.
67682c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcr100.dll'.
67782c.1cbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll)
67882c.1cbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll
67982c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
68082c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
68182c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'opengl32.dll'.
68282c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'gdi32.dll'.
68382c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
68482c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5corevbox.dll'.
68582c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'msvcp100.dll'.
68682c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcr100.dll'.
68782c.1cbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll)
68882c.1cbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
68982c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
69082c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
69182c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
69282c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'shell32.dll'.
69382c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ole32.dll'.
69482c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'advapi32.dll'.
69582c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ws2_32.dll'.
69682c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'mpr.dll'.
69782c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcp100.dll'.
69882c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'msvcr100.dll'.
69982c.1cbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll)
70082c.1cbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
70182c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
70282c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
70382c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
70482c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
70582c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
70682c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
70782c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
70882c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
70982c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
71082c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
71182c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ws2_32.dll'.
71282c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'rpcrt4.dll'.
71382c.1cbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll)
71482c.1cbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll
71582c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
71682c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume2\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
71782c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
71882c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'advapi32.dll'.
71982c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'gdi32.dll'.
72082c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'glu32.dll'.
72182c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'ddraw.dll'.
72282c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'user32.dll'.
72382c.1cbc: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\opengl32.dll)
72482c.1cbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\opengl32.dll
72582c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
72682c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
72782c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
72882c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
72982c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
73082c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
73182c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'sechost.dll'...
73282c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'sechost.dll' -> '\Device\HarddiskVolume2\Windows\System32\sechost.dll' [rcNtRedir=0xc0150008]
73382c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\sechost.dll [lacks WinVerifyTrust]
73482c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
73582c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
73682c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
73782c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
73882c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume2\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
73982c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\combase.dll [lacks WinVerifyTrust]
74082c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
74182c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
74282c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
74382c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
74482c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
74582c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
74682c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
74782c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
74882c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
74982c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
75082c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
75182c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
75282c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
75382c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
75482c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
75582c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ddraw.dll'...
75682c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'ddraw.dll' -> '\Device\HarddiskVolume2\Windows\System32\ddraw.dll' [rcNtRedir=0xc0150008]
75782c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
75882c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #16 'user32.dll'.
75982c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #17 'gdi32.dll'.
76082c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'dciman32.dll'.
76182c.1cbc: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\ddraw.dll)
76282c.1cbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\ddraw.dll
76382c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'glu32.dll'...
76482c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'glu32.dll' -> '\Device\HarddiskVolume2\Windows\System32\glu32.dll' [rcNtRedir=0xc0150008]
76582c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
76682c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'opengl32.dll'.
76782c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
76882c.1cbc: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\glu32.dll)
76982c.1cbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\glu32.dll
77082c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
77182c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
77282c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
77382c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
77482c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
77582c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
77682c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
77782c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
77882c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
77982c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
78082c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
78182c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
78282c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
78382c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
78482c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #22 'nsi.dll'.
78582c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #24 'rpcrt4.dll'.
78682c.1cbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\ws2_32.dll)
78782c.1cbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\ws2_32.dll
78882c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
78982c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
79082c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
79182c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
79282c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
79382c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
79482c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
79582c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
79682c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
79782c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
79882c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
79982c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
80082c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mpr.dll'...
80182c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'mpr.dll' -> '\Device\HarddiskVolume2\Windows\System32\mpr.dll' [rcNtRedir=0xc0150008]
80282c.1cbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\mpr.dll)
80382c.1cbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\mpr.dll
80482c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
80582c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
80682c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ws2_32.dll [lacks WinVerifyTrust]
80782c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
80882c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
80982c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
81082c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
81182c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
81282c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ole32.dll [lacks WinVerifyTrust]
81382c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
81482c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume2\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
81582c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\shell32.dll [lacks WinVerifyTrust]
81682c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
81782c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
81882c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
81982c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
82082c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
82182c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
82282c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
82382c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
82482c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
82582c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
82682c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
82782c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
82882c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
82982c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
83082c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
83182c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
83282c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
83382c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
83482c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
83582c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume2\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
83682c.1cbc: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
83782c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
83882c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
83982c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
84082c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
84182c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume2\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
84282c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\shell32.dll [lacks WinVerifyTrust]
84382c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
84482c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
84582c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
84682c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
84782c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
84882c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
84982c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
85082c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
85182c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
85282c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
85382c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
85482c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
85582c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
85682c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
85782c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
85882c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'comdlg32.dll'...
85982c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'comdlg32.dll' -> '\Device\HarddiskVolume2\Windows\System32\comdlg32.dll' [rcNtRedir=0xc0150008]
86082c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
86182c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'shlwapi.dll'.
86282c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
86382c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'gdi32.dll'.
86482c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'comctl32.dll'.
86582c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'shell32.dll'.
86682c.1cbc: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\comdlg32.dll)
86782c.1cbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\comdlg32.dll
86882c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winspool.drv'...
86982c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'winspool.drv' -> '\Device\HarddiskVolume2\Windows\System32\winspool.drv' [rcNtRedir=0xc0150008]
87082c.1cbc: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\winspool.drv [lacks WinVerifyTrust]
87182c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
87282c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
87382c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
87482c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
87582c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
87682c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
87782c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
87882c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
87982c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
88082c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
88182c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
88282c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
88382c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
88482c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
88582c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
88682c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
88782c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
88882c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
88982c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
89082c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
89182c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
89282c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
89382c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
89482c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
89582c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
89682c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
89782c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
89882c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
89982c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
90082c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
90182c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shlwapi.dll'...
90282c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'shlwapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\shlwapi.dll' [rcNtRedir=0xc0150008]
90382c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\shlwapi.dll [lacks WinVerifyTrust]
90482c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
90582c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
90682c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
90782c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
90882c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
90982c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
91082c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
91182c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume2\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
91282c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\shell32.dll [lacks WinVerifyTrust]
91382c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'comctl32.dll'...
91482c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'comctl32.dll' -> '\Device\HarddiskVolume2\Windows\System32\comctl32.dll' [rcNtRedir=0x0]
91582c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'advapi32.dll'.
91682c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
91782c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
91882c.1cbc: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\comctl32.dll)
91982c.1cbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\comctl32.dll
92082c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
92182c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
92282c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
92382c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
92482c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
92582c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
92682c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shlwapi.dll'...
92782c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'shlwapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\shlwapi.dll' [rcNtRedir=0xc0150008]
92882c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\shlwapi.dll [lacks WinVerifyTrust]
92982c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
93082c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
93182c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
93282c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
93382c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
93482c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
93582c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'nsi.dll'...
93682c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'nsi.dll' -> '\Device\HarddiskVolume2\Windows\System32\nsi.dll' [rcNtRedir=0xc0150008]
93782c.1cbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\nsi.dll)
93882c.1cbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\nsi.dll
93982c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
94082c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
94182c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
94282c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
94382c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume2\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
94482c.1cbc: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
94582c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
94682c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
94782c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
94882c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dciman32.dll'...
94982c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'dciman32.dll' -> '\Device\HarddiskVolume2\Windows\System32\dciman32.dll' [rcNtRedir=0xc0150008]
95082c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
95182c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'gdi32.dll'.
95282c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
95382c.1cbc: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\dciman32.dll)
95482c.1cbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\dciman32.dll
95582c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
95682c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
95782c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
95882c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
95982c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
96082c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
96182c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
96282c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
96382c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
96482c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
96582c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
96682c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
96782c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
96882c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
96982c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
97082c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
97182c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
97282c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
97382c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
97482c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
97582c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
97682c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
97782c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
97882c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
97982c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
98082c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
98182c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
98282c.1cbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VirtualBox.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000a01:<flags> [calling]
98382c.1cbc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.dll [lacks WinVerifyTrust]
98482c.1cbc: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
98582c.1cbc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
98682c.1cbc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
98782c.1cbc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
98882c.1cbc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
98982c.1cbc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll [lacks WinVerifyTrust]
99082c.1cbc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll [lacks WinVerifyTrust]
99182c.1cbc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winmm.dll [lacks WinVerifyTrust]
99282c.1cbc: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\glu32.dll [lacks WinVerifyTrust]
99382c.1cbc: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\ddraw.dll [lacks WinVerifyTrust]
99482c.1cbc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\mpr.dll [lacks WinVerifyTrust]
99582c.1cbc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winmmbase.dll [lacks WinVerifyTrust]
99682c.1cbc: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\dciman32.dll [lacks WinVerifyTrust]
99782c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'advapi32.dll'.
99882c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
99982c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
100082c.1cbc: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.9600.17810_none_34ae2abd958aedeb\comctl32.dll)
100182c.1cbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.9600.17810_none_34ae2abd958aedeb\comctl32.dll
100282c.1cbc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll [lacks WinVerifyTrust]
100382c.1cbc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\devobj.dll [lacks WinVerifyTrust]
100482c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
100582c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #33 'combase.dll'.
100682c.1cbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\SHCore.dll)
100782c.1cbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\SHCore.dll
100882c.1cbc: supR3HardenedDllNotificationCallback: load 00007ffac5c60000 LB 0x00009000 C:\windows\SYSTEM32\DCIMAN32.dll [fFlags=0x0]
100982c.1cbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\dciman32.dll [lacks WinVerifyTrust]
101082c.1cbc: supR3HardenedDllNotificationCallback: load 00007ffabba70000 LB 0x000f8000 C:\windows\SYSTEM32\DDRAW.dll [fFlags=0x0]
101182c.1cbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\ddraw.dll [lacks WinVerifyTrust]
101282c.1cbc: supR3HardenedDllNotificationCallback: load 00007ffac2ce0000 LB 0x0002e000 C:\windows\SYSTEM32\GLU32.dll [fFlags=0x0]
101382c.1cbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\glu32.dll [lacks WinVerifyTrust]
101482c.1cbc: supR3HardenedDllNotificationCallback: load 00007ffabbb70000 LB 0x0012b000 C:\windows\SYSTEM32\OPENGL32.dll [fFlags=0x0]
101582c.1cbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
101682c.1cbc: supR3HardenedDllNotificationCallback: load 00007ffad7c10000 LB 0x00009000 C:\windows\system32\NSI.dll [fFlags=0x0]
101782c.1cbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\nsi.dll [lacks WinVerifyTrust]
101882c.1cbc: supR3HardenedDllNotificationCallback: load 00007ffad7c20000 LB 0x0005a000 C:\windows\system32\WS2_32.dll [fFlags=0x0]
101982c.1cbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ws2_32.dll [lacks WinVerifyTrust]
102082c.1cbc: supR3HardenedDllNotificationCallback: load 00007ffaa8420000 LB 0x0051f000 C:\Program Files\Oracle\VirtualBox\VBoxRT.dll [fFlags=0x0]
102182c.1cbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
102282c.1cbc: supR3HardenedDllNotificationCallback: load 00007ffad65a0000 LB 0x0152b000 C:\windows\system32\SHELL32.dll [fFlags=0x0]
102382c.1cbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\shell32.dll [lacks WinVerifyTrust]
102482c.1cbc: supR3HardenedDllNotificationCallback: load 00007ffacdac0000 LB 0x0001e000 C:\windows\SYSTEM32\MPR.dll [fFlags=0x0]
102582c.1cbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\mpr.dll [lacks WinVerifyTrust]
102682c.1cbc: supR3HardenedDllNotificationCallback: load 000000005a1a0000 LB 0x00553000 C:\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [fFlags=0x0]
102782c.1cbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
102882c.1cbc: supR3HardenedDllNotificationCallback: load 00007ffaa7580000 LB 0x005a1000 C:\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [fFlags=0x0]
102982c.1cbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
103082c.1cbc: supR3HardenedDllNotificationCallback: load 0000000059c50000 LB 0x0054f000 C:\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [fFlags=0x0]
103182c.1cbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
103282c.1cbc: supR3HardenedDllNotificationCallback: load 00007fface160000 LB 0x000a4000 C:\windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.9600.17810_none_34ae2abd958aedeb\COMCTL32.dll [fFlags=0x0]
103382c.1cbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.9600.17810_none_34ae2abd958aedeb\comctl32.dll [lacks WinVerifyTrust]
103482c.1cbc: supR3HardenedDllNotificationCallback: load 00007ffad4440000 LB 0x000b2000 C:\windows\SYSTEM32\SHCORE.DLL [fFlags=0x0]
103582c.1cbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\SHCore.dll [lacks WinVerifyTrust]
103682c.1cbc: supR3HardenedDllNotificationCallback: load 00007ffad8360000 LB 0x000b6000 C:\windows\system32\COMDLG32.dll [fFlags=0x0]
103782c.1cbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\comdlg32.dll [lacks WinVerifyTrust]
103882c.1cbc: supR3HardenedDllNotificationCallback: load 00007ffab6f60000 LB 0x00051000 C:\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll [fFlags=0x0]
103982c.1cbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll [lacks WinVerifyTrust]
104082c.1cbc: supR3HardenedDllNotificationCallback: load 000000005b2a0000 LB 0x00054000 C:\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll [fFlags=0x0]
104182c.1cbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll [lacks WinVerifyTrust]
104282c.1cbc: supR3HardenedDllNotificationCallback: load 00007ffad8a00000 LB 0x000c1000 C:\windows\system32\OLEAUT32.dll [fFlags=0x0]
104382c.1cbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
104482c.1cbc: supR3HardenedDllNotificationCallback: load 00007ffad6110000 LB 0x0004f000 C:\windows\SYSTEM32\cfgmgr32.dll [fFlags=0x0]
104582c.1cbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll [lacks WinVerifyTrust]
104682c.1cbc: supR3HardenedDllNotificationCallback: load 00007ffad4a20000 LB 0x00028000 C:\windows\SYSTEM32\DEVOBJ.dll [fFlags=0x0]
104782c.1cbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\devobj.dll [lacks WinVerifyTrust]
104882c.1cbc: supR3HardenedDllNotificationCallback: load 00007ffacdf30000 LB 0x0002a000 C:\windows\SYSTEM32\WINMMBASE.dll [fFlags=0x0]
104982c.1cbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winmmbase.dll [lacks WinVerifyTrust]
105082c.1cbc: supR3HardenedDllNotificationCallback: load 00007ffacdf80000 LB 0x00022000 C:\windows\SYSTEM32\WINMM.dll [fFlags=0x0]
105182c.1cbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winmm.dll [lacks WinVerifyTrust]
105282c.1cbc: supR3HardenedDllNotificationCallback: load 00007ffaa7b30000 LB 0x008e1000 C:\Program Files\Oracle\VirtualBox\VirtualBox.dll [fFlags=0x0]
105382c.1cbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.dll [lacks WinVerifyTrust]
105482c.1cbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
105582c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
105682c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume2\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
105782c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\combase.dll [lacks WinVerifyTrust]
105882c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
105982c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
106082c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
106182c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
106282c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
106382c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
106482c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
106582c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
106682c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
106782c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
106882c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
106982c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
107082c.1cbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
107182c.1cbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffaa8420000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
107282c.1cbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
107382c.1cbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
107482c.1cbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffaa8420000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
107582c.1cbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
107682c.1cbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
107782c.1cbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffaa8420000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
107882c.1cbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
107982c.1cbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
108082c.1cbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffaa8420000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
108182c.1cbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
108282c.1cbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
108382c.1cbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffaa8420000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
108482c.1cbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
108582c.1cbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
108682c.1cbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffaa8420000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
108782c.1cbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
108882c.1cbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffaa8420000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
108982c.1cbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
109082c.1cbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffaa8420000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
109182c.1cbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
109282c.1cbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffaa8420000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
109382c.1cbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
109482c.1cbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffaa8420000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
109582c.1cbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
109682c.1cbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffaa8420000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
109782c.1cbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
109882c.1cbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffaa8420000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
109982c.1cbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
110082c.1cbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffaa8420000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
110182c.1cbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
110282c.1cbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
110382c.1cbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffaa8420000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
110482c.1cbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
110582c.1cbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffaa8420000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
110682c.1cbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
110782c.1cbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffaa8420000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
110882c.1cbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
110982c.1cbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffaa8420000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
111082c.1cbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
111182c.1cbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffaa8420000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
111282c.1cbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
111382c.1cbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffaa8420000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
111482c.1cbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
111582c.1cbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffaa8420000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
111682c.1cbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
111782c.1cbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffaa8420000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
111882c.1cbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
111982c.1cbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffaa8420000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
112082c.1cbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
112182c.1cbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffaa8420000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
112282c.1cbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
112382c.1cbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffaa8420000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
112482c.1cbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
112582c.1cbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffaa8420000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
112682c.1cbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
112782c.1cbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffaa8420000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
112882c.1cbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
112982c.1cbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffaa8420000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
113082c.1cbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
113182c.1cbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffaa8420000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
113282c.1cbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
113382c.1cbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffaa8420000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
113482c.1cbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
113582c.1cbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
113682c.1cbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffaa8420000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
113782c.1cbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
113882c.1cbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffaa8420000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
113982c.1cbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
114082c.1cbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffaa8420000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
114182c.1cbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\imm32.dll [lacks WinVerifyTrust]
114282c.1cbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\system32\imm32.dll (Input=imm32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
114382c.1cbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffad6420000 'C:\windows\system32\imm32.dll'
114482c.1cbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
114582c.1cbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\system32\ADVAPI32.DLL (Input=ADVAPI32.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
114682c.1cbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffad8090000 'C:\windows\system32\ADVAPI32.DLL'
114782c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'bcryptprimitives.dll'.
114882c.1cbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\cryptbase.dll)
114982c.1cbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\cryptbase.dll
115082c.1cbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\bcryptprimitives.dll)
115182c.1cbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\bcryptprimitives.dll
115282c.1cbc: supR3HardenedDllNotificationCallback: load 00007ffad5a00000 LB 0x00063000 C:\windows\SYSTEM32\bcryptPrimitives.dll [fFlags=0x0]
115382c.1cbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust]
115482c.1cbc: supR3HardenedDllNotificationCallback: load 00007ffad5a70000 LB 0x0000b000 C:\windows\SYSTEM32\CRYPTBASE.DLL [fFlags=0x0]
115582c.1cbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\cryptbase.dll [lacks WinVerifyTrust]
115682c.1cbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffaa7b30000 'C:\Program Files\Oracle\VirtualBox\VirtualBox.dll'
115782c.1cbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
115882c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'...
115982c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume2\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008]
116082c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust]
116182c.1cbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\system32\kernel32.dll (Input=kernel32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
116282c.1cbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffad7ad0000 'C:\windows\system32\kernel32.dll'
116382c.1cbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\shell32.dll [lacks WinVerifyTrust]
116482c.1cbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
116582c.1cbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffad65a0000 'C:\windows\system32\shell32.dll'
116682c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'ole32.dll'.
116782c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'imm32.dll'.
116882c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'winmm.dll'.
116982c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'oleaut32.dll'.
117082c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'shell32.dll'.
117182c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'advapi32.dll'.
117282c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'gdi32.dll'.
117382c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'user32.dll'.
117482c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'qt5guivbox.dll'.
117582c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'qt5corevbox.dll'.
117682c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'msvcr100.dll'.
117782c.1cbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\platforms\qwindows.dll)
117882c.1cbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\platforms\qwindows.dll
117982c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
118082c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
118182c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
118282c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
118382c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
118482c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
118582c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
118682c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
118782c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
118882c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
118982c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
119082c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
119182c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
119282c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
119382c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
119482c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
119582c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
119682c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
119782c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
119882c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume2\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
119982c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\shell32.dll [lacks WinVerifyTrust]
120082c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
120182c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume2\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
120282c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
120382c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
120482c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume2\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
120582c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winmm.dll [lacks WinVerifyTrust]
120682c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'...
120782c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume2\Windows\System32\imm32.dll' [rcNtRedir=0xc0150008]
120882c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\imm32.dll [lacks WinVerifyTrust]
120982c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
121082c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
121182c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ole32.dll [lacks WinVerifyTrust]
121282c.1cbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
121382c.1cbc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\platforms\qwindows.dll [lacks WinVerifyTrust]
121482c.1cbc: supR3HardenedDllNotificationCallback: load 00007ffaaef20000 LB 0x00127000 C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll [fFlags=0x0]
121582c.1cbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\platforms\qwindows.dll [lacks WinVerifyTrust]
121682c.1cbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffaaef20000 'C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll'
121782c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
121882c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #25 'user32.dll'.
121982c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'gdi32.dll'.
122082c.1cbc: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\uxtheme.dll)
122182c.1cbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\uxtheme.dll
122282c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
122382c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
122482c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
122582c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
122682c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
122782c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
122882c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
122982c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
123082c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
123182c.1cbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
123282c.1cbc: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\uxtheme.dll [lacks WinVerifyTrust]
123382c.1cbc: supR3HardenedDllNotificationCallback: load 00007ffad4890000 LB 0x00129000 C:\windows\system32\uxtheme.dll [fFlags=0x0]
123482c.1cbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\uxtheme.dll [lacks WinVerifyTrust]
123582c.1cbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffad4890000 'C:\windows\system32\uxtheme.dll'
123682c.1cbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\uxtheme.dll [lacks WinVerifyTrust]
123782c.1cbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
123882c.1cbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffad4890000 'C:\windows\system32\uxtheme.dll'
123982c.1cbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\uxtheme.dll [lacks WinVerifyTrust]
124082c.1cbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
124182c.1cbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffad4890000 'C:\windows\system32\uxtheme.dll'
124282c.1cbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\uxtheme.dll [lacks WinVerifyTrust]
124382c.1cbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
124482c.1cbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffad4890000 'C:\windows\system32\uxtheme.dll'
124582c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcrt.dll'.
124682c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'rpcrt4.dll'.
124782c.1cbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\kernel.appcore.dll)
124882c.1cbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\kernel.appcore.dll
124982c.1cbc: supR3HardenedDllNotificationCallback: load 00007ffad4a70000 LB 0x0000b000 C:\windows\SYSTEM32\kernel.appcore.dll [fFlags=0x0]
125082c.1cbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\kernel.appcore.dll [lacks WinVerifyTrust]
125182c.1cbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
125282c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
125382c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
125482c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
125582c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
125682c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
125782c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
125882c.1cbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffad7df0000 'C:\windows\system32\user32.dll'
125982c.1cbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\shell32.dll [lacks WinVerifyTrust]
126082c.1cbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
126182c.1cbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffad65a0000 'C:\windows\system32\shell32.dll'
126282c.1cbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\SHCore.dll [lacks WinVerifyTrust]
126382c.1cbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\system32\SHCore.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
126482c.1cbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffad4440000 'C:\windows\system32\SHCore.dll'
126582c.1cbc: supR3HardenedMonitor_LdrLoadDll: error opening 'C:\windows\system32\wintab32.dll': 0 (NtPath=\??\C:\windows\system32\wintab32.dll; Input=C:\windows\system32\wintab32.dll; rcNtGetDll=0x0
126682c.1cbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\system32\wintab32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
126782c.1cbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000135 'C:\windows\system32\wintab32.dll'
126882c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
126982c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'user32.dll'.
127082c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #15 'gdi32.dll'.
127182c.1cbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\dwmapi.dll)
127282c.1cbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\dwmapi.dll
127382c.1cbc: supR3HardenedDllNotificationCallback: load 00007ffad4240000 LB 0x00021000 C:\windows\system32\dwmapi.dll [fFlags=0x0]
127482c.1cbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\dwmapi.dll [lacks WinVerifyTrust]
127582c.1cbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winmm.dll [lacks WinVerifyTrust]
127682c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
127782c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
127882c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
127982c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
128082c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
128182c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
128282c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
128382c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
128482c.1cbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
128582c.1cbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\system32\winmm.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
128682c.1cbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffacdf80000 'C:\windows\system32\winmm.dll'
128782c.1cbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winmm.dll [lacks WinVerifyTrust]
128882c.1cbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\system32\winmm.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
128982c.1cbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffacdf80000 'C:\windows\system32\winmm.dll'
129082c.1cbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\shell32.dll [lacks WinVerifyTrust]
129182c.1cbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
129282c.1cbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffad65a0000 'C:\windows\system32\shell32.dll'
129382c.1cbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\uxtheme.dll [lacks WinVerifyTrust]
129482c.1cbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
129582c.1cbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffad4890000 'C:\windows\system32\uxtheme.dll'
129682c.1cbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
129782c.1cbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffad8210000 'C:\windows\system32\gdi32.dll'
129882c.1cbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
129982c.1cbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffad6460000 'C:\windows\system32\rpcrt4.dll'
130082c.1cbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\cryptsp.dll)
130182c.1cbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\cryptsp.dll
130282c.1cbc: supR3HardenedDllNotificationCallback: load 00007ffad54a0000 LB 0x00020000 C:\windows\SYSTEM32\CRYPTSP.dll [fFlags=0x0]
130382c.1cbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\cryptsp.dll [lacks WinVerifyTrust]
130482c.1cbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'bcrypt.dll'.
130582c.1cbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\rsaenh.dll)
130682c.1cbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\rsaenh.dll
130782c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcrypt.dll'...
130882c.1cbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcrypt.dll' -> '\Device\HarddiskVolume2\Windows\System32\bcrypt.dll' [rcNtRedir=0xc0150008]
130982c.1cbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\bcrypt.dll)
131082c.1cbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\bcrypt.dll
131182c.1cbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
131282c.1cbc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
131382c.1cbc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
131482c.1cbc: supR3HardenedDllNotificationCallback: load 00007ffad56e0000 LB 0x00026000 C:\windows\SYSTEM32\bcrypt.dll [fFlags=0x0]
131582c.1cbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
131682c.1cbc: supR3HardenedDllNotificationCallback: load 00007ffad50c0000 LB 0x00036000 C:\windows\system32\rsaenh.dll [fFlags=0x0]
131782c.1cbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
131882c.1cbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffad50c0000 'C:\windows\system32\rsaenh.dll'
131982c.1cbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ole32.dll [lacks WinVerifyTrust]
132082c.1cbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\system32\ole32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
132182c.1cbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffad8640000 'C:\windows\system32\ole32.dll'
1322130c.ad0: supR3HardNtChildWaitFor[1]: Quitting: ExitCode=0x1 (rcNtWait=0x0, rcNt1=0x0, rcNt2=0x103, rcNt3=0x103, 23970 ms, the end);

© 2024 Oracle Support Privacy / Do Not Sell My Info Terms of Use Trademark Policy