VirtualBox

Ticket #17551: VBoxHardening.log

File VBoxHardening.log, 171.1 KB (added by cbr45, 7 years ago)

VM's log

Line 
11598.16a4: Log file opened: 5.2.6r120293 g_hStartupLog=0000000000000058 g_uNtVerCombined=0xa0295a00
21598.16a4: \SystemRoot\System32\ntdll.dll:
31598.16a4: CreationTime: 2016-06-27T06:51:40.991608700Z
41598.16a4: LastWriteTime: 2016-04-23T05:24:28.464629900Z
51598.16a4: ChangeTime: 2016-07-01T15:08:11.412154900Z
61598.16a4: FileAttributes: 0x20
71598.16a4: Size: 0x1bc248
81598.16a4: NT Headers: 0xe0
91598.16a4: Timestamp: 0x571af2eb
101598.16a4: Machine: 0x8664 - amd64
111598.16a4: Timestamp: 0x571af2eb
121598.16a4: Image Version: 10.0
131598.16a4: SizeOfImage: 0x1c1000 (1839104)
141598.16a4: Resource Dir: 0x159000 LB 0x66218
151598.16a4: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
161598.16a4: [Raw version resource data: 0x1590f0 LB 0x390, codepage 0x0 (reserved 0x0)]
171598.16a4: ProductName: Microsoft® Windows® Operating System
181598.16a4: ProductVersion: 10.0.10586.306
191598.16a4: FileVersion: 10.0.10586.306 (th2_release_sec.160422-1850)
201598.16a4: FileDescription: NT Layer DLL
211598.16a4: \SystemRoot\System32\kernel32.dll:
221598.16a4: CreationTime: 2015-10-30T07:17:46.221743200Z
231598.16a4: LastWriteTime: 2015-10-30T07:17:46.221743200Z
241598.16a4: ChangeTime: 2015-11-25T22:08:20.766286700Z
251598.16a4: FileAttributes: 0x20
261598.16a4: Size: 0xac430
271598.16a4: NT Headers: 0xf0
281598.16a4: Timestamp: 0x5632d5aa
291598.16a4: Machine: 0x8664 - amd64
301598.16a4: Timestamp: 0x5632d5aa
311598.16a4: Image Version: 10.0
321598.16a4: SizeOfImage: 0xad000 (708608)
331598.16a4: Resource Dir: 0xab000 LB 0x528
341598.16a4: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
351598.16a4: [Raw version resource data: 0xab0b0 LB 0x3ac, codepage 0x0 (reserved 0x0)]
361598.16a4: ProductName: Microsoft® Windows® Operating System
371598.16a4: ProductVersion: 10.0.10586.0
381598.16a4: FileVersion: 10.0.10586.0 (th2_release.151029-1700)
391598.16a4: FileDescription: Windows NT BASE API Client DLL
401598.16a4: \SystemRoot\System32\KernelBase.dll:
411598.16a4: CreationTime: 2016-07-29T09:44:42.680633300Z
421598.16a4: LastWriteTime: 2016-07-01T04:49:21.864958900Z
431598.16a4: ChangeTime: 2016-07-29T10:18:23.334566300Z
441598.16a4: FileAttributes: 0x20
451598.16a4: Size: 0x1e7a10
461598.16a4: NT Headers: 0xf0
471598.16a4: Timestamp: 0x5775e4c5
481598.16a4: Machine: 0x8664 - amd64
491598.16a4: Timestamp: 0x5775e4c5
501598.16a4: Image Version: 10.0
511598.16a4: SizeOfImage: 0x1e8000 (1998848)
521598.16a4: Resource Dir: 0x1d1000 LB 0x548
531598.16a4: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
541598.16a4: [Raw version resource data: 0x1d10b0 LB 0x3cc, codepage 0x0 (reserved 0x0)]
551598.16a4: ProductName: Microsoft® Windows® Operating System
561598.16a4: ProductVersion: 10.0.10586.494
571598.16a4: FileVersion: 10.0.10586.494 (th2_release_sec.160630-1736)
581598.16a4: FileDescription: Windows NT BASE API Client DLL
591598.16a4: \SystemRoot\System32\apisetschema.dll:
601598.16a4: CreationTime: 2015-10-30T07:17:57.502957900Z
611598.16a4: LastWriteTime: 2015-10-30T07:17:57.502957900Z
621598.16a4: ChangeTime: 2015-11-25T22:08:14.375155000Z
631598.16a4: FileAttributes: 0x20
641598.16a4: Size: 0x16d60
651598.16a4: NT Headers: 0xc8
661598.16a4: Timestamp: 0x5632d94c
671598.16a4: Machine: 0x8664 - amd64
681598.16a4: Timestamp: 0x5632d94c
691598.16a4: Image Version: 10.0
701598.16a4: SizeOfImage: 0x18000 (98304)
711598.16a4: Resource Dir: 0x17000 LB 0x400
721598.16a4: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
731598.16a4: [Raw version resource data: 0x17060 LB 0x3a0, codepage 0x0 (reserved 0x0)]
741598.16a4: ProductName: Microsoft® Windows® Operating System
751598.16a4: ProductVersion: 10.0.10586.0
761598.16a4: FileVersion: 10.0.10586.0 (th2_release.151029-1700)
771598.16a4: FileDescription: ApiSet Schema DLL
781598.16a4: NtOpenDirectoryObject failed on \Driver: 0xc0000022
791598.16a4: supR3HardenedWinFindAdversaries: 0x0
801598.16a4: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox'
811598.16a4: Calling main()
821598.16a4: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2
831598.16a4: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox'
841598.16a4: SUPR3HardenedMain: Respawn #1
851598.16a4: System32: \Device\HarddiskVolume4\Windows\System32
861598.16a4: WinSxS: \Device\HarddiskVolume4\Windows\WinSxS
871598.16a4: KnownDllPath: C:\WINDOWS\system32
881598.16a4: '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
891598.16a4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe)
901598.16a4: supR3HardNtEnableThreadCreation:
911598.16a4: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffa5eae6d50 pvNtTerminateThread=00007ffa5eb15b30
921598.16a4: supR3HardenedWinDoReSpawn(1): New child 1ae0.1814 [kernel32].
931598.16a4: supR3HardNtChildGatherData: PebBaseAddress=00000000003ab000 cbPeb=0x388
941598.16a4: supR3HardNtPuChFindNtdll: uNtDllParentAddr=00007ffa5ea70000 uNtDllChildAddr=00007ffa5ea70000
951598.16a4: supR3HardenedWinSetupChildInit: uLdrInitThunk=00007ffa5eae6d50
961598.16a4: supR3HardenedWinSetupChildInit: Start child.
971598.16a4: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 0 ms.
981598.16a4: supR3HardNtChildPurify: Startup delay kludge #1/0: 266 ms, 16 sleeps
991598.16a4: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
1001598.16a4: *0000000000000000-000000000019ffff 0x0001/0x0000 0x0000000
1011598.16a4: *00000000001a0000-00000000001bffff 0x0004/0x0004 0x0020000
1021598.16a4: *00000000001c0000-00000000001d4fff 0x0002/0x0002 0x0040000
1031598.16a4: 00000000001d5000-00000000001dffff 0x0001/0x0000 0x0000000
1041598.16a4: *00000000001e0000-00000000001e3fff 0x0002/0x0002 0x0040000
1051598.16a4: 00000000001e4000-00000000001effff 0x0001/0x0000 0x0000000
1061598.16a4: *00000000001f0000-00000000001f1fff 0x0004/0x0004 0x0020000
1071598.16a4: 00000000001f2000-00000000001fffff 0x0001/0x0000 0x0000000
1081598.16a4: *0000000000200000-00000000003aafff 0x0000/0x0004 0x0020000
1091598.16a4: 00000000003ab000-00000000003adfff 0x0004/0x0004 0x0020000
1101598.16a4: 00000000003ae000-00000000003fffff 0x0000/0x0004 0x0020000
1111598.16a4: *0000000000400000-00000000004fafff 0x0000/0x0004 0x0020000
1121598.16a4: 00000000004fb000-00000000004fdfff 0x0104/0x0004 0x0020000
1131598.16a4: 00000000004fe000-00000000004fffff 0x0004/0x0004 0x0020000
1141598.16a4: 0000000000500000-000000007ffdffff 0x0001/0x0000 0x0000000
1151598.16a4: *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000
1161598.16a4: 000000007ffe1000-000000007ffeffff 0x0000/0x0002 0x0020000
1171598.16a4: 000000007fff0000-00007ff75748ffff 0x0001/0x0000 0x0000000
1181598.16a4: *00007ff757490000-00007ff7574b2fff 0x0002/0x0002 0x0040000
1191598.16a4: 00007ff7574b3000-00007ff7576dffff 0x0001/0x0000 0x0000000
1201598.16a4: *00007ff7576e0000-00007ff7576e0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
1211598.16a4: 00007ff7576e1000-00007ff757751fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
1221598.16a4: 00007ff757752000-00007ff757752fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
1231598.16a4: 00007ff757753000-00007ff757798fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
1241598.16a4: 00007ff757799000-00007ff757799fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
1251598.16a4: 00007ff75779a000-00007ff75779afff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
1261598.16a4: 00007ff75779b000-00007ff75779ffff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
1271598.16a4: 00007ff7577a0000-00007ff7577a0fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
1281598.16a4: 00007ff7577a1000-00007ff7577a1fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
1291598.16a4: 00007ff7577a2000-00007ff7577a5fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
1301598.16a4: 00007ff7577a6000-00007ff7577edfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
1311598.16a4: 00007ff7577ee000-00007ffa5ea6ffff 0x0001/0x0000 0x0000000
1321598.16a4: *00007ffa5ea70000-00007ffa5ea70fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
1331598.16a4: 00007ffa5ea71000-00007ffa5eb6dfff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
1341598.16a4: 00007ffa5eb6e000-00007ffa5ebaefff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
1351598.16a4: 00007ffa5ebaf000-00007ffa5ebb4fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
1361598.16a4: 00007ffa5ebb5000-00007ffa5ebb5fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
1371598.16a4: 00007ffa5ebb6000-00007ffa5ebb7fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
1381598.16a4: 00007ffa5ebb8000-00007ffa5ebc4fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
1391598.16a4: 00007ffa5ebc5000-00007ffa5ebc5fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
1401598.16a4: 00007ffa5ebc6000-00007ffa5ebc8fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
1411598.16a4: 00007ffa5ebc9000-00007ffa5ec30fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
1421598.16a4: 00007ffa5ec31000-00007ffffffdffff 0x0001/0x0000 0x0000000
1431598.16a4: *00007ffffffe0000-00007ffffffeffff 0x0001/0x0002 0x0020000
1441598.16a4: VirtualBox.exe: timestamp 0x5a5cc1cb (rc=VINF_SUCCESS)
1451598.16a4: '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
1461598.16a4: '\Device\HarddiskVolume4\Windows\System32\ntdll.dll' has no imports
1471598.16a4: supR3HardNtChildPurify: Done after 328 ms and 0 fixes (loop #0).
1481ae0.1814: Log file opened: 5.2.6r120293 g_hStartupLog=0000000000000004 g_uNtVerCombined=0xa0295a00
1491ae0.1814: supR3HardenedVmProcessInit: uNtDllAddr=00007ffa5ea70000 g_uNtVerCombined=0xa0295a00
1501ae0.1814: ntdll.dll: timestamp 0x571af2eb (rc=VINF_SUCCESS)
1511ae0.1814: New simple heap: #1 0000000000600000 LB 0x400000 (for 1839104 allocation)
1521598.16a4: supR3HardNtEnableThreadCreation:
1531ae0.1814: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox'
1541ae0.1814: System32: \Device\HarddiskVolume4\Windows\System32
1551ae0.1814: WinSxS: \Device\HarddiskVolume4\Windows\WinSxS
1561ae0.1814: KnownDllPath: C:\WINDOWS\system32
1571ae0.1814: supR3HardenedVmProcessInit: Opening vboxdrv stub...
1581ae0.1814: supR3HardenedVmProcessInit: Restoring LdrInitializeThunk...
1591ae0.1814: supR3HardenedVmProcessInit: Returning to LdrInitializeThunk...
1601ae0.1814: Registered Dll notification callback with NTDLL.
1611ae0.1814: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\kernel32.dll)
1621ae0.1814: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\kernel32.dll
1631ae0.1814: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\KERNEL32.DLL (Input=KERNEL32.DLL, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000000801:<flags> [calling]
1641ae0.1814: supR3HardenedDllNotificationCallback: load 00007ffa5b950000 LB 0x001e8000 C:\WINDOWS\system32\KERNELBASE.dll [fFlags=0x0]
1651ae0.1814: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\KernelBase.dll)
1661ae0.1814: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\KernelBase.dll
1671ae0.1814: supR3HardenedDllNotificationCallback: load 00007ffa5be70000 LB 0x000ad000 C:\WINDOWS\system32\KERNEL32.DLL [fFlags=0x0]
1681ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
1691ae0.1814: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa5be70000 'C:\WINDOWS\system32\KERNEL32.DLL'
1701ae0.1814: supR3HardenedDllNotificationCallback: load 00007ff7576e0000 LB 0x0010e000 C:\Program Files\Oracle\VirtualBox\VirtualBox.exe [fFlags=0x0]
1711ae0.1814: '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
1721ae0.1814: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe)
1731ae0.1814: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
1741ae0.1814: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffa5eae6d50 pvNtTerminateThread=00007ffa5eb15b30
1751598.16a4: supR3HardNtChildWaitFor: Found expected request 1 (CloseEvents) after 78 ms.
1761ae0.1814: \SystemRoot\System32\ntdll.dll:
1771ae0.1814: CreationTime: 2016-06-27T06:51:40.991608700Z
1781ae0.1814: LastWriteTime: 2016-04-23T05:24:28.464629900Z
1791ae0.1814: ChangeTime: 2016-07-01T15:08:11.412154900Z
1801ae0.1814: FileAttributes: 0x20
1811ae0.1814: Size: 0x1bc248
1821ae0.1814: NT Headers: 0xe0
1831ae0.1814: Timestamp: 0x571af2eb
1841ae0.1814: Machine: 0x8664 - amd64
1851ae0.1814: Timestamp: 0x571af2eb
1861ae0.1814: Image Version: 10.0
1871ae0.1814: SizeOfImage: 0x1c1000 (1839104)
1881ae0.1814: Resource Dir: 0x159000 LB 0x66218
1891ae0.1814: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
1901ae0.1814: [Raw version resource data: 0x1590f0 LB 0x390, codepage 0x0 (reserved 0x0)]
1911ae0.1814: ProductName: Microsoft® Windows® Operating System
1921ae0.1814: ProductVersion: 10.0.10586.306
1931ae0.1814: FileVersion: 10.0.10586.306 (th2_release_sec.160422-1850)
1941ae0.1814: FileDescription: NT Layer DLL
1951ae0.1814: \SystemRoot\System32\kernel32.dll:
1961ae0.1814: CreationTime: 2015-10-30T07:17:46.221743200Z
1971ae0.1814: LastWriteTime: 2015-10-30T07:17:46.221743200Z
1981ae0.1814: ChangeTime: 2015-11-25T22:08:20.766286700Z
1991ae0.1814: FileAttributes: 0x20
2001ae0.1814: Size: 0xac430
2011ae0.1814: NT Headers: 0xf0
2021ae0.1814: Timestamp: 0x5632d5aa
2031ae0.1814: Machine: 0x8664 - amd64
2041ae0.1814: Timestamp: 0x5632d5aa
2051ae0.1814: Image Version: 10.0
2061ae0.1814: SizeOfImage: 0xad000 (708608)
2071ae0.1814: Resource Dir: 0xab000 LB 0x528
2081ae0.1814: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
2091ae0.1814: [Raw version resource data: 0xab0b0 LB 0x3ac, codepage 0x0 (reserved 0x0)]
2101ae0.1814: ProductName: Microsoft® Windows® Operating System
2111ae0.1814: ProductVersion: 10.0.10586.0
2121ae0.1814: FileVersion: 10.0.10586.0 (th2_release.151029-1700)
2131ae0.1814: FileDescription: Windows NT BASE API Client DLL
2141ae0.1814: \SystemRoot\System32\KernelBase.dll:
2151ae0.1814: CreationTime: 2016-07-29T09:44:42.680633300Z
2161ae0.1814: LastWriteTime: 2016-07-01T04:49:21.864958900Z
2171ae0.1814: ChangeTime: 2016-07-29T10:18:23.334566300Z
2181ae0.1814: FileAttributes: 0x20
2191ae0.1814: Size: 0x1e7a10
2201ae0.1814: NT Headers: 0xf0
2211ae0.1814: Timestamp: 0x5775e4c5
2221ae0.1814: Machine: 0x8664 - amd64
2231ae0.1814: Timestamp: 0x5775e4c5
2241ae0.1814: Image Version: 10.0
2251ae0.1814: SizeOfImage: 0x1e8000 (1998848)
2261ae0.1814: Resource Dir: 0x1d1000 LB 0x548
2271ae0.1814: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
2281ae0.1814: [Raw version resource data: 0x1d10b0 LB 0x3cc, codepage 0x0 (reserved 0x0)]
2291ae0.1814: ProductName: Microsoft® Windows® Operating System
2301ae0.1814: ProductVersion: 10.0.10586.494
2311ae0.1814: FileVersion: 10.0.10586.494 (th2_release_sec.160630-1736)
2321ae0.1814: FileDescription: Windows NT BASE API Client DLL
2331ae0.1814: \SystemRoot\System32\apisetschema.dll:
2341ae0.1814: CreationTime: 2015-10-30T07:17:57.502957900Z
2351ae0.1814: LastWriteTime: 2015-10-30T07:17:57.502957900Z
2361ae0.1814: ChangeTime: 2015-11-25T22:08:14.375155000Z
2371ae0.1814: FileAttributes: 0x20
2381ae0.1814: Size: 0x16d60
2391ae0.1814: NT Headers: 0xc8
2401ae0.1814: Timestamp: 0x5632d94c
2411ae0.1814: Machine: 0x8664 - amd64
2421ae0.1814: Timestamp: 0x5632d94c
2431ae0.1814: Image Version: 10.0
2441ae0.1814: SizeOfImage: 0x18000 (98304)
2451ae0.1814: Resource Dir: 0x17000 LB 0x400
2461ae0.1814: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
2471ae0.1814: [Raw version resource data: 0x17060 LB 0x3a0, codepage 0x0 (reserved 0x0)]
2481ae0.1814: ProductName: Microsoft® Windows® Operating System
2491ae0.1814: ProductVersion: 10.0.10586.0
2501ae0.1814: FileVersion: 10.0.10586.0 (th2_release.151029-1700)
2511ae0.1814: FileDescription: ApiSet Schema DLL
2521ae0.1814: NtOpenDirectoryObject failed on \Driver: 0xc0000022
2531ae0.1814: supR3HardenedWinFindAdversaries: 0x0
2541ae0.1814: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox'
2551ae0.1814: Calling main()
2561ae0.1814: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2
2571ae0.1814: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox'
2581ae0.1814: '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
2591ae0.1814: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe)
2601ae0.1814: SUPR3HardenedMain: Respawn #2
2611ae0.1814: supR3HardNtEnableThreadCreation:
2621ae0.1814: Error -104 in supR3HardenedWinReSpawn! (enmWhat=5)
2631ae0.1814: Error relaunching VirtualBox VM process: 5
264Command line: '60eaff78-4bdd-042d-2e72-669728efd737-suplib-3rdchild --comment "controleur de domaine" --startvm 2877ae3f-8038-4eea-87f8-fdacf324a55d --no-startvm-errormsgbox "--sup-hardening-log=C:\Users\clementbr\VirtualBox VMs\controleur de domaine\Logs\VBoxHardening.log"'
2651ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'opengl32.dll'.
2661ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
2671ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'msvcp100.dll'.
2681ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcr100.dll'.
2691ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'.
2701ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'qt5guivbox.dll'.
2711ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'qt5widgetsvbox.dll'.
2721ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'qt5printsupportvbox.dll'.
2731ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'qt5openglvbox.dll'.
2741ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'user32.dll'.
2751ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'advapi32.dll'.
2761ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'shell32.dll'.
2771ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'ole32.dll'.
2781ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'oleaut32.dll'.
2791ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #15 'winmm.dll'.
2801ae0.1814: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.dll)
2811ae0.1814: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.dll
2821ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
2831ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume4\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
2841ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'winmmbase.dll'.
2851ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcrt.dll'.
2861ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #31 'user32.dll'.
2871ae0.1814: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\winmm.dll)
2881ae0.1814: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\winmm.dll
2891ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
2901ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume4\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
2911ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
2921ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'combase.dll'.
2931ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #17 'rpcrt4.dll'.
2941ae0.1814: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\oleaut32.dll)
2951ae0.1814: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\oleaut32.dll
2961ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
2971ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume4\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
2981ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'.
2991ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'rpcrt4.dll'.
3001ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #43 'gdi32.dll'.
3011ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #44 'user32.dll'.
3021ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #45 'combase.dll'.
3031ae0.1814: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\ole32.dll)
3041ae0.1814: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\ole32.dll
3051ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
3061ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume4\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
3071ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
3081ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #65 'user32.dll'.
3091ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #67 'gdi32.dll'.
3101ae0.1814: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\shell32.dll)
3111ae0.1814: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\shell32.dll
3121ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
3131ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
3141ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
3151ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'sechost.dll'.
3161ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #21 'rpcrt4.dll'.
3171ae0.1814: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\advapi32.dll)
3181ae0.1814: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\advapi32.dll
3191ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
3201ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
3211ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #31 'gdi32.dll'.
3221ae0.1814: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\user32.dll)
3231ae0.1814: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\user32.dll
3241ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5openglvbox.dll'...
3251ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5openglvbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5openglvbox.dll' [rcNtRedir=0xc0150008]
3261ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'qt5widgetsvbox.dll'.
3271ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'qt5guivbox.dll'.
3281ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5corevbox.dll'.
3291ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcr100.dll'.
3301ae0.1814: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll)
3311ae0.1814: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll
3321ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5printsupportvbox.dll'...
3331ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5printsupportvbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5printsupportvbox.dll' [rcNtRedir=0xc0150008]
3341ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
3351ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
3361ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5widgetsvbox.dll'.
3371ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5guivbox.dll'.
3381ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'.
3391ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'winspool.drv'.
3401ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'comdlg32.dll'.
3411ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcr100.dll'.
3421ae0.1814: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll)
3431ae0.1814: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll
3441ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
3451ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
3461ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
3471ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
3481ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5guivbox.dll'.
3491ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5corevbox.dll'.
3501ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'shell32.dll'.
3511ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
3521ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
3531ae0.1814: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll)
3541ae0.1814: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll
3551ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
3561ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
3571ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'ole32.dll'.
3581ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'opengl32.dll'.
3591ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
3601ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
3611ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'.
3621ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
3631ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
3641ae0.1814: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll)
3651ae0.1814: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
3661ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
3671ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
3681ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
3691ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'shell32.dll'.
3701ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ole32.dll'.
3711ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'advapi32.dll'.
3721ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ws2_32.dll'.
3731ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'mpr.dll'.
3741ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcp100.dll'.
3751ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'msvcr100.dll'.
3761ae0.1814: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll)
3771ae0.1814: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
3781ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
3791ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
3801ae0.1814: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll)
3811ae0.1814: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll
3821ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
3831ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
3841ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
3851ae0.1814: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll)
3861ae0.1814: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll
3871ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
3881ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
3891ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
3901ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
3911ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ws2_32.dll'.
3921ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'rpcrt4.dll'.
3931ae0.1814: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll)
3941ae0.1814: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll
3951ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
3961ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume4\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
3971ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
3981ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'advapi32.dll'.
3991ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'gdi32.dll'.
4001ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'glu32.dll'.
4011ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'ddraw.dll'.
4021ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'user32.dll'.
4031ae0.1814: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\opengl32.dll)
4041ae0.1814: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\opengl32.dll
4051ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
4061ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
4071ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
4081ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ddraw.dll'...
4091ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'ddraw.dll' -> '\Device\HarddiskVolume4\Windows\System32\ddraw.dll' [rcNtRedir=0xc0150008]
4101ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
4111ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'user32.dll'.
4121ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #19 'gdi32.dll'.
4131ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #20 'dciman32.dll'.
4141ae0.1814: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\ddraw.dll)
4151ae0.1814: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\ddraw.dll
4161ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'glu32.dll'...
4171ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'glu32.dll' -> '\Device\HarddiskVolume4\Windows\System32\glu32.dll' [rcNtRedir=0xc0150008]
4181ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
4191ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'opengl32.dll'.
4201ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
4211ae0.1814: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\glu32.dll)
4221ae0.1814: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\glu32.dll
4231ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
4241ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
4251ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #22 'user32.dll'.
4261ae0.1814: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\gdi32.dll)
4271ae0.1814: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\gdi32.dll
4281ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
4291ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
4301ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
4311ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
4321ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
4331ae0.1814: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\msvcrt.dll)
4341ae0.1814: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\msvcrt.dll
4351ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
4361ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
4371ae0.1814: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll)
4381ae0.1814: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll
4391ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
4401ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume4\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
4411ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'rpcrt4.dll'.
4421ae0.1814: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\ws2_32.dll)
4431ae0.1814: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\ws2_32.dll
4441ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
4451ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
4461ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
4471ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
4481ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
4491ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
4501ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
4511ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
4521ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
4531ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
4541ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
4551ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
4561ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
4571ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
4581ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
4591ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mpr.dll'...
4601ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'mpr.dll' -> '\Device\HarddiskVolume4\Windows\System32\mpr.dll' [rcNtRedir=0xc0150008]
4611ae0.1814: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\mpr.dll)
4621ae0.1814: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\mpr.dll
4631ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
4641ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume4\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
4651ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ws2_32.dll [lacks WinVerifyTrust]
4661ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
4671ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
4681ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
4691ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
4701ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume4\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
4711ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ole32.dll [lacks WinVerifyTrust]
4721ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
4731ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume4\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
4741ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\shell32.dll [lacks WinVerifyTrust]
4751ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
4761ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
4771ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
4781ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
4791ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
4801ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
4811ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
4821ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
4831ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
4841ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
4851ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
4861ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
4871ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
4881ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
4891ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
4901ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
4911ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
4921ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
4931ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
4941ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume4\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
4951ae0.1814: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
4961ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
4971ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume4\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
4981ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ole32.dll [lacks WinVerifyTrust]
4991ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
5001ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
5011ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
5021ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
5031ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
5041ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
5051ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
5061ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume4\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
5071ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\shell32.dll [lacks WinVerifyTrust]
5081ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
5091ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
5101ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
5111ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
5121ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
5131ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
5141ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
5151ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
5161ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
5171ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
5181ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
5191ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
5201ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
5211ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
5221ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
5231ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'comdlg32.dll'...
5241ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'comdlg32.dll' -> '\Device\HarddiskVolume4\Windows\System32\comdlg32.dll' [rcNtRedir=0xc0150008]
5251ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
5261ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #28 'user32.dll'.
5271ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #29 'shlwapi.dll'.
5281ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #30 'gdi32.dll'.
5291ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #31 'comctl32.dll'.
5301ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #32 'shell32.dll'.
5311ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'firewallapi.dll'.
5321ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'netapi32.dll'.
5331ae0.1814: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\comdlg32.dll)
5341ae0.1814: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\comdlg32.dll
5351ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winspool.drv'...
5361ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'winspool.drv' -> '\Device\HarddiskVolume4\Windows\System32\winspool.drv' [rcNtRedir=0xc0150008]
5371ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
5381ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #24 'bcrypt.dll'.
5391ae0.1814: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\winspool.drv)
5401ae0.1814: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\winspool.drv
5411ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
5421ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
5431ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
5441ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
5451ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
5461ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
5471ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
5481ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
5491ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
5501ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
5511ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
5521ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
5531ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
5541ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
5551ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
5561ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
5571ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
5581ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
5591ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
5601ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
5611ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
5621ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
5631ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
5641ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
5651ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
5661ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
5671ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
5681ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
5691ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
5701ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
5711ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
5721ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
5731ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
5741ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'sechost.dll'...
5751ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'sechost.dll' -> '\Device\HarddiskVolume4\Windows\System32\sechost.dll' [rcNtRedir=0xc0150008]
5761ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'rpcrt4.dll'.
5771ae0.1814: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\sechost.dll)
5781ae0.1814: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\sechost.dll
5791ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
5801ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
5811ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
5821ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
5831ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
5841ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
5851ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
5861ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
5871ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
5881ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
5891ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
5901ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
5911ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
5921ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume4\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
5931ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
5941ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'rpcrt4.dll'.
5951ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #31 'bcryptprimitives.dll'.
5961ae0.1814: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\combase.dll)
5971ae0.1814: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\combase.dll
5981ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
5991ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
6001ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
6011ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
6021ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
6031ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
6041ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
6051ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
6061ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
6071ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
6081ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
6091ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
6101ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
6111ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
6121ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
6131ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
6141ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume4\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
6151ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\combase.dll [lacks WinVerifyTrust]
6161ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
6171ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
6181ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
6191ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
6201ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
6211ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
6221ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
6231ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
6241ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
6251ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmmbase.dll'...
6261ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmmbase.dll' -> '\Device\HarddiskVolume4\Windows\System32\winmmbase.dll' [rcNtRedir=0xc0150008]
6271ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'.
6281ae0.1814: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\winmmbase.dll)
6291ae0.1814: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\winmmbase.dll
6301ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
6311ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
6321ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
6331ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'...
6341ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume4\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008]
6351ae0.1814: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\bcryptprimitives.dll)
6361ae0.1814: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\bcryptprimitives.dll
6371ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
6381ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
6391ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
6401ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
6411ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
6421ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
6431ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
6441ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
6451ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
6461ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcrypt.dll'...
6471ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcrypt.dll' -> '\Device\HarddiskVolume4\Windows\System32\bcrypt.dll' [rcNtRedir=0xc0150008]
6481ae0.1814: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\bcrypt.dll)
6491ae0.1814: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\bcrypt.dll
6501ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
6511ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
6521ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
6531ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'netapi32.dll'...
6541ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'netapi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\netapi32.dll' [rcNtRedir=0xc0150008]
6551ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
6561ae0.1814: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\netapi32.dll)
6571ae0.1814: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\netapi32.dll
6581ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'firewallapi.dll'...
6591ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'firewallapi.dll' -> '\Device\HarddiskVolume4\Windows\System32\firewallapi.dll' [rcNtRedir=0xc0150008]
6601ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
6611ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'rpcrt4.dll'.
6621ae0.1814: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\FirewallAPI.dll)
6631ae0.1814: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\FirewallAPI.dll
6641ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
6651ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume4\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
6661ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\shell32.dll [lacks WinVerifyTrust]
6671ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'comctl32.dll'...
6681ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'comctl32.dll' -> '\Device\HarddiskVolume4\Windows\System32\comctl32.dll' [rcNtRedir=0x0]
6691ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'advapi32.dll'.
6701ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
6711ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
6721ae0.1814: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\comctl32.dll)
6731ae0.1814: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\comctl32.dll
6741ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
6751ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
6761ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
6771ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shlwapi.dll'...
6781ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'shlwapi.dll' -> '\Device\HarddiskVolume4\Windows\System32\shlwapi.dll' [rcNtRedir=0xc0150008]
6791ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'.
6801ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #41 'gdi32.dll'.
6811ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #42 'user32.dll'.
6821ae0.1814: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\shlwapi.dll)
6831ae0.1814: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\shlwapi.dll
6841ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
6851ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
6861ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
6871ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
6881ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
6891ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
6901ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
6911ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
6921ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
6931ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
6941ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
6951ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
6961ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
6971ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
6981ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
6991ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
7001ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume4\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
7011ae0.1814: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
7021ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
7031ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
7041ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
7051ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dciman32.dll'...
7061ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'dciman32.dll' -> '\Device\HarddiskVolume4\Windows\System32\dciman32.dll' [rcNtRedir=0xc0150008]
7071ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
7081ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'gdi32.dll'.
7091ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
7101ae0.1814: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\dciman32.dll)
7111ae0.1814: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\dciman32.dll
7121ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
7131ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
7141ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
7151ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
7161ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
7171ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
7181ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
7191ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
7201ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
7211ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
7221ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
7231ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
7241ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
7251ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
7261ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
7271ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
7281ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
7291ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
7301ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
7311ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
7321ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
7331ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
7341ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
7351ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
7361ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
7371ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
7381ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
7391ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
7401ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
7411ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
7421ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
7431ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
7441ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
7451ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
7461ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
7471ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
7481ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
7491ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
7501ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
7511ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
7521ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
7531ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
7541ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
7551ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
7561ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
7571ae0.1814: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VirtualBox.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000a01:<flags> [calling]
7581ae0.1814: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.dll [lacks WinVerifyTrust]
7591ae0.1814: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
7601ae0.1814: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
7611ae0.1814: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
7621ae0.1814: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
7631ae0.1814: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
7641ae0.1814: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
7651ae0.1814: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
7661ae0.1814: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll [lacks WinVerifyTrust]
7671ae0.1814: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll [lacks WinVerifyTrust]
7681ae0.1814: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\winmm.dll [lacks WinVerifyTrust]
7691ae0.1814: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\glu32.dll [lacks WinVerifyTrust]
7701ae0.1814: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\ddraw.dll [lacks WinVerifyTrust]
7711ae0.1814: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\mpr.dll [lacks WinVerifyTrust]
7721ae0.1814: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\winspool.drv [lacks WinVerifyTrust]
7731ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'advapi32.dll'.
7741ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
7751ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
7761ae0.1814: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.10586.0_none_396e892957c7fb25\comctl32.dll)
7771ae0.1814: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.10586.0_none_396e892957c7fb25\comctl32.dll
7781ae0.1814: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\winmmbase.dll [lacks WinVerifyTrust]
7791ae0.1814: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\dciman32.dll [lacks WinVerifyTrust]
7801ae0.1814: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
7811ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
7821ae0.1814: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\davhlpr.dll)
7831ae0.1814: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\davhlpr.dll
7841ae0.1814: supR3HardenedDllNotificationCallback: load 00007ffa5e670000 LB 0x0009d000 C:\WINDOWS\system32\msvcrt.dll [fFlags=0x0]
7851ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
7861ae0.1814: supR3HardenedDllNotificationCallback: load 00007ffa5ce70000 LB 0x0011c000 C:\WINDOWS\system32\RPCRT4.dll [fFlags=0x0]
7871ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
7881ae0.1814: supR3HardenedDllNotificationCallback: load 00007ffa5c7c0000 LB 0x0005b000 C:\WINDOWS\system32\sechost.dll [fFlags=0x0]
7891ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\sechost.dll [lacks WinVerifyTrust]
7901ae0.1814: supR3HardenedDllNotificationCallback: load 00007ffa5c840000 LB 0x000a7000 C:\WINDOWS\system32\ADVAPI32.dll [fFlags=0x0]
7911ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
7921ae0.1814: supR3HardenedDllNotificationCallback: load 00007ffa5c8f0000 LB 0x00156000 C:\WINDOWS\system32\USER32.dll [fFlags=0x0]
7931ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
7941ae0.1814: supR3HardenedDllNotificationCallback: load 00007ffa5cce0000 LB 0x00186000 C:\WINDOWS\system32\GDI32.dll [fFlags=0x0]
7951ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
7961ae0.1814: supR3HardenedDllNotificationCallback: load 00007ffa4d8c0000 LB 0x00008000 C:\WINDOWS\SYSTEM32\DCIMAN32.dll [fFlags=0x0]
7971ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\dciman32.dll [lacks WinVerifyTrust]
7981ae0.1814: supR3HardenedDllNotificationCallback: load 00007ffa35ac0000 LB 0x000fa000 C:\WINDOWS\SYSTEM32\DDRAW.dll [fFlags=0x0]
7991ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\ddraw.dll [lacks WinVerifyTrust]
8001ae0.1814: supR3HardenedDllNotificationCallback: load 00007ffa4da40000 LB 0x0002e000 C:\WINDOWS\SYSTEM32\GLU32.dll [fFlags=0x0]
8011ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\glu32.dll [lacks WinVerifyTrust]
8021ae0.1814: supR3HardenedDllNotificationCallback: load 00007ffa361c0000 LB 0x00129000 C:\WINDOWS\SYSTEM32\OPENGL32.dll [fFlags=0x0]
8031ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
8041ae0.1814: supR3HardenedDllNotificationCallback: load 0000000051300000 LB 0x000d2000 C:\Program Files\Oracle\VirtualBox\MSVCR100.dll [fFlags=0x0]
8051ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
8061ae0.1814: supR3HardenedDllNotificationCallback: load 00000000513e0000 LB 0x00098000 C:\Program Files\Oracle\VirtualBox\MSVCP100.dll [fFlags=0x0]
8071ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
8081ae0.1814: supR3HardenedDllNotificationCallback: load 00007ffa5ca50000 LB 0x0006b000 C:\WINDOWS\system32\WS2_32.dll [fFlags=0x0]
8091ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ws2_32.dll [lacks WinVerifyTrust]
8101ae0.1814: supR3HardenedDllNotificationCallback: load 00007ffa36d30000 LB 0x00590000 C:\Program Files\Oracle\VirtualBox\VBoxRT.dll [fFlags=0x0]
8111ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
8121ae0.1814: supR3HardenedDllNotificationCallback: load 00007ffa5b820000 LB 0x00043000 C:\WINDOWS\system32\cfgmgr32.dll [fFlags=0x0]
8131ae0.1814: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\cfgmgr32.dll)
8141ae0.1814: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\cfgmgr32.dll
8151ae0.1814: supR3HardenedDllNotificationCallback: load 00007ffa5bb40000 LB 0x0006a000 C:\WINDOWS\system32\bcryptPrimitives.dll [fFlags=0x0]
8161ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust]
8171ae0.1814: supR3HardenedDllNotificationCallback: load 00007ffa5e7f0000 LB 0x0027d000 C:\WINDOWS\system32\combase.dll [fFlags=0x0]
8181ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\combase.dll [lacks WinVerifyTrust]
8191ae0.1814: supR3HardenedDllNotificationCallback: load 00007ffa5d0a0000 LB 0x00052000 C:\WINDOWS\system32\shlwapi.dll [fFlags=0x0]
8201ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\shlwapi.dll [lacks WinVerifyTrust]
8211ae0.1814: supR3HardenedDllNotificationCallback: load 00007ffa5b090000 LB 0x0000f000 C:\WINDOWS\system32\kernel.appcore.dll [fFlags=0x0]
8221ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcrt.dll'.
8231ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'rpcrt4.dll'.
8241ae0.1814: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\kernel.appcore.dll)
8251ae0.1814: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\kernel.appcore.dll
8261ae0.1814: supR3HardenedDllNotificationCallback: load 00007ffa5b890000 LB 0x000b5000 C:\WINDOWS\system32\shcore.dll [fFlags=0x0]
8271ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
8281ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #28 'rpcrt4.dll'.
8291ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #38 'combase.dll'.
8301ae0.1814: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\SHCore.dll)
8311ae0.1814: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\SHCore.dll
8321ae0.1814: supR3HardenedDllNotificationCallback: load 00007ffa5b0d0000 LB 0x0004b000 C:\WINDOWS\system32\powrprof.dll [fFlags=0x0]
8331ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
8341ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'rpcrt4.dll'.
8351ae0.1814: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\powrprof.dll)
8361ae0.1814: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\powrprof.dll
8371ae0.1814: supR3HardenedDllNotificationCallback: load 00007ffa5b0b0000 LB 0x00014000 C:\WINDOWS\system32\profapi.dll [fFlags=0x0]
8381ae0.1814: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\profapi.dll)
8391ae0.1814: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\profapi.dll
8401ae0.1814: supR3HardenedDllNotificationCallback: load 00007ffa5b1d0000 LB 0x00645000 C:\WINDOWS\system32\windows.storage.dll [fFlags=0x0]
8411ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
8421ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #30 'rpcrt4.dll'.
8431ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #59 'combase.dll'.
8441ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #66 'profapi.dll'.
8451ae0.1814: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\windows.storage.dll)
8461ae0.1814: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\windows.storage.dll
8471ae0.1814: supR3HardenedDllNotificationCallback: load 00007ffa5d100000 LB 0x0155c000 C:\WINDOWS\system32\SHELL32.dll [fFlags=0x0]
8481ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\shell32.dll [lacks WinVerifyTrust]
8491ae0.1814: supR3HardenedDllNotificationCallback: load 00007ffa5c080000 LB 0x00143000 C:\WINDOWS\system32\ole32.dll [fFlags=0x0]
8501ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ole32.dll [lacks WinVerifyTrust]
8511ae0.1814: supR3HardenedDllNotificationCallback: load 00007ffa497a0000 LB 0x0001b000 C:\WINDOWS\SYSTEM32\MPR.dll [fFlags=0x0]
8521ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\mpr.dll [lacks WinVerifyTrust]
8531ae0.1814: supR3HardenedDllNotificationCallback: load 0000000050d90000 LB 0x00565000 C:\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [fFlags=0x0]
8541ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
8551ae0.1814: supR3HardenedDllNotificationCallback: load 00007ffa35bc0000 LB 0x005f7000 C:\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [fFlags=0x0]
8561ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
8571ae0.1814: supR3HardenedDllNotificationCallback: load 0000000050820000 LB 0x00561000 C:\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [fFlags=0x0]
8581ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
8591ae0.1814: supR3HardenedDllNotificationCallback: load 00007ffa5ac90000 LB 0x00029000 C:\WINDOWS\SYSTEM32\bcrypt.dll [fFlags=0x0]
8601ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
8611ae0.1814: supR3HardenedDllNotificationCallback: load 00007ffa4c4f0000 LB 0x00084000 C:\WINDOWS\SYSTEM32\WINSPOOL.DRV [fFlags=0x0]
8621ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\winspool.drv [lacks WinVerifyTrust]
8631ae0.1814: supR3HardenedDllNotificationCallback: load 00007ffa35a10000 LB 0x000aa000 C:\WINDOWS\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.10586.0_none_396e892957c7fb25\COMCTL32.dll [fFlags=0x0]
8641ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.10586.0_none_396e892957c7fb25\comctl32.dll [lacks WinVerifyTrust]
8651ae0.1814: supR3HardenedDllNotificationCallback: load 00007ffa5bbb0000 LB 0x00086000 C:\WINDOWS\system32\FirewallAPI.dll [fFlags=0x0]
8661ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\FirewallAPI.dll [lacks WinVerifyTrust]
8671ae0.1814: supR3HardenedDllNotificationCallback: load 00007ffa5b870000 LB 0x00017000 C:\WINDOWS\system32\NETAPI32.dll [fFlags=0x0]
8681ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\netapi32.dll [lacks WinVerifyTrust]
8691ae0.1814: supR3HardenedDllNotificationCallback: load 00007ffa4c5f0000 LB 0x0000c000 C:\WINDOWS\SYSTEM32\DAVHLPR.DLL [fFlags=0x0]
8701ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\davhlpr.dll [lacks WinVerifyTrust]
8711ae0.1814: supR3HardenedDllNotificationCallback: load 00007ffa5cf90000 LB 0x0010b000 C:\WINDOWS\system32\COMDLG32.dll [fFlags=0x0]
8721ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\comdlg32.dll [lacks WinVerifyTrust]
8731ae0.1814: supR3HardenedDllNotificationCallback: load 00007ffa38270000 LB 0x00051000 C:\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll [fFlags=0x0]
8741ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll [lacks WinVerifyTrust]
8751ae0.1814: supR3HardenedDllNotificationCallback: load 00000000507c0000 LB 0x00054000 C:\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll [fFlags=0x0]
8761ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll [lacks WinVerifyTrust]
8771ae0.1814: supR3HardenedDllNotificationCallback: load 00007ffa5e720000 LB 0x000c1000 C:\WINDOWS\system32\OLEAUT32.dll [fFlags=0x0]
8781ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
8791ae0.1814: supR3HardenedDllNotificationCallback: load 00007ffa59530000 LB 0x0002c000 C:\WINDOWS\SYSTEM32\WINMMBASE.dll [fFlags=0x0]
8801ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\winmmbase.dll [lacks WinVerifyTrust]
8811ae0.1814: supR3HardenedDllNotificationCallback: load 00007ffa59590000 LB 0x00023000 C:\WINDOWS\SYSTEM32\WINMM.dll [fFlags=0x0]
8821ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\winmm.dll [lacks WinVerifyTrust]
8831ae0.1814: supR3HardenedDllNotificationCallback: load 00007ffa362f0000 LB 0x00a33000 C:\Program Files\Oracle\VirtualBox\VirtualBox.dll [fFlags=0x0]
8841ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.dll [lacks WinVerifyTrust]
8851ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'user32.dll'.
8861ae0.1814: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\imm32.dll)
8871ae0.1814: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\imm32.dll
8881ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
8891ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
8901ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
8911ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'profapi.dll'...
8921ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'profapi.dll' -> '\Device\HarddiskVolume4\Windows\System32\profapi.dll' [rcNtRedir=0xc0150008]
8931ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\profapi.dll [lacks WinVerifyTrust]
8941ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
8951ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume4\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
8961ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\combase.dll [lacks WinVerifyTrust]
8971ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
8981ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
8991ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
9001ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
9011ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
9021ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
9031ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
9041ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
9051ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
9061ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
9071ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
9081ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
9091ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
9101ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume4\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
9111ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\combase.dll [lacks WinVerifyTrust]
9121ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
9131ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
9141ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
9151ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
9161ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
9171ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
9181ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
9191ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
9201ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
9211ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
9221ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
9231ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
9241ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
9251ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
9261ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
9271ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
9281ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
9291ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
9301ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
9311ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
9321ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
9331ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
9341ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
9351ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
9361ae0.1814: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\IMM32.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
9371ae0.1814: supR3HardenedDllNotificationCallback: load 00007ffa5c1d0000 LB 0x0003b000 C:\WINDOWS\system32\IMM32.DLL [fFlags=0x0]
9381ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\imm32.dll [lacks WinVerifyTrust]
9391ae0.1814: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa5c1d0000 'C:\WINDOWS\system32\IMM32.DLL'
9401ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
9411ae0.1814: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
9421ae0.1814: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa36d30000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9431ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
9441ae0.1814: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
9451ae0.1814: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa36d30000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9461ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
9471ae0.1814: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
9481ae0.1814: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa36d30000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9491ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
9501ae0.1814: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
9511ae0.1814: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa36d30000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9521ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
9531ae0.1814: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
9541ae0.1814: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa36d30000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9551ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
9561ae0.1814: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
9571ae0.1814: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa36d30000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9581ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
9591ae0.1814: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa36d30000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9601ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
9611ae0.1814: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa36d30000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9621ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
9631ae0.1814: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa36d30000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9641ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
9651ae0.1814: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa36d30000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9661ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
9671ae0.1814: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa36d30000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9681ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
9691ae0.1814: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa36d30000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9701ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
9711ae0.1814: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa36d30000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9721ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
9731ae0.1814: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
9741ae0.1814: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa36d30000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9751ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
9761ae0.1814: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa36d30000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9771ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
9781ae0.1814: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa36d30000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9791ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
9801ae0.1814: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa36d30000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9811ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
9821ae0.1814: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa36d30000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9831ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
9841ae0.1814: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa36d30000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9851ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
9861ae0.1814: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa36d30000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9871ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
9881ae0.1814: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa36d30000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9891ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
9901ae0.1814: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa36d30000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9911ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
9921ae0.1814: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa36d30000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9931ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
9941ae0.1814: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa36d30000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9951ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
9961ae0.1814: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa36d30000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9971ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
9981ae0.1814: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa36d30000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9991ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
10001ae0.1814: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa36d30000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10011ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
10021ae0.1814: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa36d30000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10031ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
10041ae0.1814: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa36d30000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10051ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
10061ae0.1814: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
10071ae0.1814: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa36d30000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10081ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
10091ae0.1814: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa36d30000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10101ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
10111ae0.1814: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa36d30000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10121ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\imm32.dll [lacks WinVerifyTrust]
10131ae0.1814: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\imm32.dll (Input=imm32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
10141ae0.1814: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa5c1d0000 'C:\WINDOWS\system32\imm32.dll'
10151ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
10161ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'rpcrt4.dll'.
10171ae0.1814: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\fwbase.dll)
10181ae0.1814: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\fwbase.dll
10191ae0.1814: supR3HardenedDllNotificationCallback: load 00007ffa59c10000 LB 0x00032000 C:\WINDOWS\SYSTEM32\fwbase.dll [fFlags=0x0]
10201ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\fwbase.dll [lacks WinVerifyTrust]
10211ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
10221ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
10231ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
10241ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
10251ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
10261ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
10271ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
10281ae0.1814: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\ADVAPI32.DLL (Input=ADVAPI32.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
10291ae0.1814: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa5c840000 'C:\WINDOWS\system32\ADVAPI32.DLL'
10301ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'bcryptprimitives.dll'.
10311ae0.1814: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\cryptbase.dll)
10321ae0.1814: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\cryptbase.dll
10331ae0.1814: supR3HardenedDllNotificationCallback: load 00007ffa5ab90000 LB 0x0000b000 C:\WINDOWS\SYSTEM32\CRYPTBASE.DLL [fFlags=0x0]
10341ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\cryptbase.dll [lacks WinVerifyTrust]
10351ae0.1814: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa362f0000 'C:\Program Files\Oracle\VirtualBox\VirtualBox.dll'
10361ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
10371ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'...
10381ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume4\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008]
10391ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust]
10401ae0.1814: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\kernel32.dll (Input=kernel32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
10411ae0.1814: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa5be70000 'C:\WINDOWS\system32\kernel32.dll'
10421ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
10431ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'ole32.dll'.
10441ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
10451ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'imm32.dll'.
10461ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'winmm.dll'.
10471ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'oleaut32.dll'.
10481ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'shell32.dll'.
10491ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'advapi32.dll'.
10501ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'qt5guivbox.dll'.
10511ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'qt5corevbox.dll'.
10521ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'msvcr100.dll'.
10531ae0.1814: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\platforms\qwindows.dll)
10541ae0.1814: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\platforms\qwindows.dll
10551ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
10561ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
10571ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
10581ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
10591ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
10601ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
10611ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
10621ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
10631ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
10641ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
10651ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
10661ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
10671ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
10681ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume4\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
10691ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\shell32.dll [lacks WinVerifyTrust]
10701ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
10711ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume4\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
10721ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
10731ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
10741ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume4\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
10751ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\winmm.dll [lacks WinVerifyTrust]
10761ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'...
10771ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume4\Windows\System32\imm32.dll' [rcNtRedir=0xc0150008]
10781ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\imm32.dll [lacks WinVerifyTrust]
10791ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
10801ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
10811ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
10821ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
10831ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume4\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
10841ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ole32.dll [lacks WinVerifyTrust]
10851ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
10861ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
10871ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
10881ae0.1814: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
10891ae0.1814: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\platforms\qwindows.dll [lacks WinVerifyTrust]
10901ae0.1814: supR3HardenedDllNotificationCallback: load 00007ffa358e0000 LB 0x0012e000 C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll [fFlags=0x0]
10911ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\platforms\qwindows.dll [lacks WinVerifyTrust]
10921ae0.1814: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa358e0000 'C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll'
10931ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
10941ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #31 'gdi32.dll'.
10951ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #32 'user32.dll'.
10961ae0.1814: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\uxtheme.dll)
10971ae0.1814: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\uxtheme.dll
10981ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
10991ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
11001ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
11011ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
11021ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
11031ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
11041ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
11051ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
11061ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
11071ae0.1814: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
11081ae0.1814: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\uxtheme.dll [lacks WinVerifyTrust]
11091ae0.1814: supR3HardenedDllNotificationCallback: load 00007ffa599c0000 LB 0x00096000 C:\WINDOWS\system32\uxtheme.dll [fFlags=0x0]
11101ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\uxtheme.dll [lacks WinVerifyTrust]
11111ae0.1814: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa599c0000 'C:\WINDOWS\system32\uxtheme.dll'
11121ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
11131ae0.1814: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa5c8f0000 'C:\WINDOWS\system32\user32.dll'
11141ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\shell32.dll [lacks WinVerifyTrust]
11151ae0.1814: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
11161ae0.1814: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa5d100000 'C:\WINDOWS\system32\shell32.dll'
11171ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\SHCore.dll [lacks WinVerifyTrust]
11181ae0.1814: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\SHCore.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
11191ae0.1814: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa5b890000 'C:\WINDOWS\system32\SHCore.dll'
11201ae0.1814: supR3HardenedMonitor_LdrLoadDll: error opening 'C:\WINDOWS\system32\wintab32.dll': 0 (NtPath=\??\C:\WINDOWS\system32\wintab32.dll; Input=C:\WINDOWS\system32\wintab32.dll; rcNtGetDll=0x0
11211ae0.1814: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000034 'C:\WINDOWS\system32\wintab32.dll'
11221ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
11231ae0.1814: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa5c8f0000 'C:\WINDOWS\system32\user32.dll'
11241ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
11251ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'user32.dll'.
11261ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'gdi32.dll'.
11271ae0.1814: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\dwmapi.dll)
11281ae0.1814: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\dwmapi.dll
11291ae0.1814: supR3HardenedDllNotificationCallback: load 00007ffa58a80000 LB 0x00022000 C:\WINDOWS\system32\dwmapi.dll [fFlags=0x0]
11301ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\dwmapi.dll [lacks WinVerifyTrust]
11311ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\winmm.dll [lacks WinVerifyTrust]
11321ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
11331ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
11341ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
11351ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
11361ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
11371ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
11381ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
11391ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
11401ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
11411ae0.1814: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\winmm.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
11421ae0.1814: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa59590000 'C:\WINDOWS\system32\winmm.dll'
11431ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\winmm.dll [lacks WinVerifyTrust]
11441ae0.1814: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\winmm.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
11451ae0.1814: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa59590000 'C:\WINDOWS\system32\winmm.dll'
11461ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\shell32.dll [lacks WinVerifyTrust]
11471ae0.1814: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
11481ae0.1814: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa5d100000 'C:\WINDOWS\system32\shell32.dll'
11491ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\uxtheme.dll [lacks WinVerifyTrust]
11501ae0.1814: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
11511ae0.1814: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa599c0000 'C:\WINDOWS\system32\uxtheme.dll'
11521ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
11531ae0.1814: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa5cce0000 'C:\WINDOWS\system32\gdi32.dll'
11541ae0.1814: supR3HardenedDllNotificationCallback: load 00007ffa5bf20000 LB 0x0015a000 C:\WINDOWS\system32\MSCTF.dll [fFlags=0x0]
11551ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
11561ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #25 'user32.dll'.
11571ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'gdi32.dll'.
11581ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27 'imm32.dll'.
11591ae0.1814: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\msctf.dll)
11601ae0.1814: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\msctf.dll
11611ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
11621ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'...
11631ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume4\Windows\System32\imm32.dll' [rcNtRedir=0xc0150008]
11641ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\imm32.dll [lacks WinVerifyTrust]
11651ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
11661ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
11671ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
11681ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
11691ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
11701ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
11711ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
11721ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
11731ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
11741ae0.1814: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa5ce70000 'C:\WINDOWS\system32\rpcrt4.dll'
11751ae0.1814: supR3HardenedDllNotificationCallback: load 00007ffa5c700000 LB 0x000a7000 C:\WINDOWS\system32\clbcatq.dll [fFlags=0x0]
11761ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
11771ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'rpcrt4.dll'.
11781ae0.1814: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\clbcatq.dll)
11791ae0.1814: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\clbcatq.dll
11801ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
11811ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'shcore.dll'.
11821ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #23 'combase.dll'.
11831ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #25 'd3d11.dll'.
11841ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'dcomp.dll'.
11851ae0.1814: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\DataExchange.dll)
11861ae0.1814: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\DataExchange.dll
11871ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dcomp.dll'...
11881ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'dcomp.dll' -> '\Device\HarddiskVolume4\Windows\System32\dcomp.dll' [rcNtRedir=0xc0150008]
11891ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
11901ae0.1814: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\dcomp.dll)
11911ae0.1814: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\dcomp.dll
11921ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'd3d11.dll'...
11931ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'd3d11.dll' -> '\Device\HarddiskVolume4\Windows\System32\d3d11.dll' [rcNtRedir=0xc0150008]
11941ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
11951ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #23 'dxgi.dll'.
11961ae0.1814: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\d3d11.dll)
11971ae0.1814: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\d3d11.dll
11981ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
11991ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume4\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
12001ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\combase.dll [lacks WinVerifyTrust]
12011ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shcore.dll'...
12021ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'shcore.dll' -> '\Device\HarddiskVolume4\Windows\System32\shcore.dll' [rcNtRedir=0xc0150008]
12031ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\SHCore.dll [lacks WinVerifyTrust]
12041ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
12051ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
12061ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
12071ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
12081ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
12091ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
12101ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
12111ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
12121ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
12131ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dxgi.dll'...
12141ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'dxgi.dll' -> '\Device\HarddiskVolume4\Windows\System32\dxgi.dll' [rcNtRedir=0xc0150008]
12151ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
12161ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #23 'user32.dll'.
12171ae0.1814: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\dxgi.dll)
12181ae0.1814: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\dxgi.dll
12191ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
12201ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
12211ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
12221ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
12231ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
12241ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
12251ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
12261ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
12271ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
12281ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
12291ae0.1814: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
12301ae0.1814: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
12311ae0.1814: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\dataexchange.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
12321ae0.1814: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\DataExchange.dll [lacks WinVerifyTrust]
12331ae0.1814: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\d3d11.dll [lacks WinVerifyTrust]
12341ae0.1814: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\dcomp.dll [lacks WinVerifyTrust]
12351ae0.1814: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\dxgi.dll [lacks WinVerifyTrust]
12361ae0.1814: supR3HardenedDllNotificationCallback: load 00007ffa586e0000 LB 0x000a2000 C:\WINDOWS\system32\dxgi.dll [fFlags=0x0]
12371ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\dxgi.dll [lacks WinVerifyTrust]
12381ae0.1814: supR3HardenedDllNotificationCallback: load 00007ffa587b0000 LB 0x002a8000 C:\WINDOWS\system32\d3d11.dll [fFlags=0x0]
12391ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\d3d11.dll [lacks WinVerifyTrust]
12401ae0.1814: supR3HardenedDllNotificationCallback: load 00007ffa590c0000 LB 0x000e3000 C:\WINDOWS\system32\dcomp.dll [fFlags=0x0]
12411ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\dcomp.dll [lacks WinVerifyTrust]
12421ae0.1814: supR3HardenedDllNotificationCallback: load 00007ffa3fd40000 LB 0x0004a000 C:\WINDOWS\system32\dataexchange.dll [fFlags=0x0]
12431ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\DataExchange.dll [lacks WinVerifyTrust]
12441ae0.1814: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa3fd40000 'C:\WINDOWS\system32\dataexchange.dll'
12451ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
12461ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #28 'bcrypt.dll'.
12471ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #29 'rpcrt4.dll'.
12481ae0.1814: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #38 'combase.dll'.
12491ae0.1814: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\twinapi.appcore.dll)
12501ae0.1814: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\twinapi.appcore.dll
12511ae0.1814: supR3HardenedDllNotificationCallback: load 00007ffa598c0000 LB 0x00100000 C:\WINDOWS\system32\twinapi.appcore.dll [fFlags=0x0]
12521ae0.1814: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\twinapi.appcore.dll [lacks WinVerifyTrust]
12531ae0.10a8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
12541ae0.10a8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'rpcrt4.dll'.
12551ae0.10a8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #23 'devobj.dll'.
12561ae0.10a8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #31 'propsys.dll'.
12571ae0.10a8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\MMDevAPI.dll)
12581ae0.10a8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\MMDevAPI.dll
12591ae0.10a8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
12601ae0.10a8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'cfgmgr32.dll'.
12611ae0.10a8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\devobj.dll)
12621ae0.10a8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\devobj.dll
12631ae0.10a8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
12641ae0.10a8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'oleaut32.dll'.
12651ae0.10a8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #17 'rpcrt4.dll'.
12661ae0.10a8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\propsys.dll)
12671ae0.10a8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\propsys.dll
12681ae0.10a8: supR3HardenedDllNotificationCallback: load 00007ffa59890000 LB 0x00027000 C:\WINDOWS\SYSTEM32\DEVOBJ.dll [fFlags=0x0]
12691ae0.10a8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\devobj.dll [lacks WinVerifyTrust]
12701ae0.10a8: supR3HardenedDllNotificationCallback: load 00007ffa56d60000 LB 0x00186000 C:\WINDOWS\SYSTEM32\PROPSYS.dll [fFlags=0x0]
12711ae0.10a8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\propsys.dll [lacks WinVerifyTrust]
12721ae0.10a8: supR3HardenedDllNotificationCallback: load 00007ffa57a30000 LB 0x00070000 C:\WINDOWS\SYSTEM32\MMDevAPI.DLL [fFlags=0x0]
12731ae0.10a8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
12741ae0.10a8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
12751ae0.10a8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #21 'ksuser.dll'.
12761ae0.10a8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #22 'user32.dll'.
12771ae0.10a8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #23 'winmm.dll'.
12781ae0.10a8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #25 'avrt.dll'.
12791ae0.10a8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'mmdevapi.dll'.
12801ae0.10a8: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\wdmaud.drv)
12811ae0.10a8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\wdmaud.drv
12821ae0.10a8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mmdevapi.dll'...
12831ae0.10a8: supR3HardenedWinVerifyCacheProcessImportTodos: 'mmdevapi.dll' -> '\Device\HarddiskVolume4\Windows\System32\mmdevapi.dll' [rcNtRedir=0xc0150008]
12841ae0.10a8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
12851ae0.10a8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'avrt.dll'...
12861ae0.10a8: supR3HardenedWinVerifyCacheProcessImportTodos: 'avrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\avrt.dll' [rcNtRedir=0xc0150008]
12871ae0.10a8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\avrt.dll)
12881ae0.10a8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\avrt.dll
12891ae0.10a8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
12901ae0.10a8: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume4\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
12911ae0.10a8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\winmm.dll [lacks WinVerifyTrust]
12921ae0.10a8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
12931ae0.10a8: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
12941ae0.10a8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
12951ae0.10a8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ksuser.dll'...
12961ae0.10a8: supR3HardenedWinVerifyCacheProcessImportTodos: 'ksuser.dll' -> '\Device\HarddiskVolume4\Windows\System32\ksuser.dll' [rcNtRedir=0xc0150008]
12971ae0.10a8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
12981ae0.10a8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\ksuser.dll)
12991ae0.10a8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\ksuser.dll
13001ae0.10a8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
13011ae0.10a8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
13021ae0.10a8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
13031ae0.10a8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
13041ae0.10a8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
13051ae0.10a8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
13061ae0.10a8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
13071ae0.10a8: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume4\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
13081ae0.10a8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
13091ae0.10a8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
13101ae0.10a8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
13111ae0.10a8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
13121ae0.10a8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'cfgmgr32.dll'...
13131ae0.10a8: supR3HardenedWinVerifyCacheProcessImportTodos: 'cfgmgr32.dll' -> '\Device\HarddiskVolume4\Windows\System32\cfgmgr32.dll' [rcNtRedir=0xc0150008]
13141ae0.10a8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\cfgmgr32.dll [lacks WinVerifyTrust]
13151ae0.10a8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
13161ae0.10a8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
13171ae0.10a8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
13181ae0.10a8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'propsys.dll'...
13191ae0.10a8: supR3HardenedWinVerifyCacheProcessImportTodos: 'propsys.dll' -> '\Device\HarddiskVolume4\Windows\System32\propsys.dll' [rcNtRedir=0xc0150008]
13201ae0.10a8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\propsys.dll [lacks WinVerifyTrust]
13211ae0.10a8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'devobj.dll'...
13221ae0.10a8: supR3HardenedWinVerifyCacheProcessImportTodos: 'devobj.dll' -> '\Device\HarddiskVolume4\Windows\System32\devobj.dll' [rcNtRedir=0xc0150008]
13231ae0.10a8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\devobj.dll [lacks WinVerifyTrust]
13241ae0.10a8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
13251ae0.10a8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
13261ae0.10a8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
13271ae0.10a8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
13281ae0.10a8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
13291ae0.10a8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
13301ae0.10a8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
13311ae0.10a8: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume4\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
13321ae0.10a8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\combase.dll [lacks WinVerifyTrust]
13331ae0.10a8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
13341ae0.10a8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
13351ae0.10a8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
13361ae0.10a8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcrypt.dll'...
13371ae0.10a8: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcrypt.dll' -> '\Device\HarddiskVolume4\Windows\System32\bcrypt.dll' [rcNtRedir=0xc0150008]
13381ae0.10a8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
13391ae0.10a8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
13401ae0.10a8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
13411ae0.10a8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
13421ae0.10a8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
13431ae0.10a8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
13441ae0.10a8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
13451ae0.10a8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
13461ae0.10a8: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
13471ae0.10a8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ksuser.dll [lacks WinVerifyTrust]
13481ae0.10a8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\avrt.dll [lacks WinVerifyTrust]
13491ae0.10a8: supR3HardenedDllNotificationCallback: load 00007ffa56860000 LB 0x00008000 C:\WINDOWS\SYSTEM32\ksuser.dll [fFlags=0x0]
13501ae0.10a8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ksuser.dll [lacks WinVerifyTrust]
13511ae0.10a8: supR3HardenedDllNotificationCallback: load 00007ffa56f10000 LB 0x0000b000 C:\WINDOWS\SYSTEM32\AVRT.dll [fFlags=0x0]
13521ae0.10a8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\avrt.dll [lacks WinVerifyTrust]
13531ae0.10a8: supR3HardenedDllNotificationCallback: load 00007ffa595f0000 LB 0x00042000 C:\WINDOWS\system32\wdmaud.drv [fFlags=0x0]
13541ae0.10a8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
13551ae0.10a8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa595f0000 'C:\WINDOWS\system32\wdmaud.drv'
13561ae0.10a8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
13571ae0.10a8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
13581ae0.10a8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa595f0000 'C:\WINDOWS\system32\wdmaud.drv'
13591ae0.10a8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
13601ae0.10a8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\MMDEVAPI.DLL (Input=MMDEVAPI.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
13611ae0.10a8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa57a30000 'C:\WINDOWS\system32\MMDEVAPI.DLL'
13621ae0.10a8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
13631ae0.10a8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
13641ae0.10a8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa595f0000 'C:\WINDOWS\system32\wdmaud.drv'
13651ae0.10a8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
13661ae0.10a8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
13671ae0.10a8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa595f0000 'C:\WINDOWS\system32\wdmaud.drv'
13681ae0.10a8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
13691ae0.10a8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
13701ae0.10a8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa595f0000 'C:\WINDOWS\system32\wdmaud.drv'
13711ae0.10a8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
13721ae0.10a8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'rpcrt4.dll'.
13731ae0.10a8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'oleaut32.dll'.
13741ae0.10a8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'mmdevapi.dll'.
13751ae0.10a8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\AudioSes.dll)
13761ae0.10a8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\AudioSes.dll
13771ae0.10a8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mmdevapi.dll'...
13781ae0.10a8: supR3HardenedWinVerifyCacheProcessImportTodos: 'mmdevapi.dll' -> '\Device\HarddiskVolume4\Windows\System32\mmdevapi.dll' [rcNtRedir=0xc0150008]
13791ae0.10a8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
13801ae0.10a8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
13811ae0.10a8: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume4\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
13821ae0.10a8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
13831ae0.10a8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
13841ae0.10a8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
13851ae0.10a8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
13861ae0.10a8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
13871ae0.10a8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
13881ae0.10a8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
13891ae0.10a8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\AUDIOSES.DLL (Input=AUDIOSES.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
13901ae0.10a8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\AudioSes.dll [lacks WinVerifyTrust]
13911ae0.10a8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
13921ae0.10a8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'combase.dll'.
13931ae0.10a8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'rpcrt4.dll'.
13941ae0.10a8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\WinTypes.dll)
13951ae0.10a8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\WinTypes.dll
13961ae0.10a8: supR3HardenedDllNotificationCallback: load 00007ffa5a1a0000 LB 0x00136000 C:\WINDOWS\SYSTEM32\wintypes.dll [fFlags=0x0]
13971ae0.10a8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\WinTypes.dll [lacks WinVerifyTrust]
13981ae0.10a8: supR3HardenedDllNotificationCallback: load 00007ffa4b380000 LB 0x00088000 C:\WINDOWS\system32\AUDIOSES.DLL [fFlags=0x0]
13991ae0.10a8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\AudioSes.dll [lacks WinVerifyTrust]
14001ae0.10a8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa4b380000 'C:\WINDOWS\system32\AUDIOSES.DLL'
14011ae0.10a8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
14021ae0.10a8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
14031ae0.10a8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
14041ae0.10a8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
14051ae0.10a8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
14061ae0.10a8: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume4\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
14071ae0.10a8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\combase.dll [lacks WinVerifyTrust]
14081ae0.10a8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
14091ae0.10a8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
14101ae0.10a8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
14111ae0.10a8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
14121ae0.10a8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa595f0000 'C:\WINDOWS\system32\wdmaud.drv'
14131ae0.10a8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
14141ae0.10a8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
14151ae0.10a8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa595f0000 'C:\WINDOWS\system32\wdmaud.drv'
14161ae0.10a8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
14171ae0.10a8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa595f0000 'C:\WINDOWS\system32\wdmaud.drv'
14181ae0.10a8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
14191ae0.10a8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'mmdevapi.dll'.
14201ae0.10a8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'msacm32.dll'.
14211ae0.10a8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'user32.dll'.
14221ae0.10a8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'winmm.dll'.
14231ae0.10a8: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\msacm32.drv)
14241ae0.10a8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\msacm32.drv
14251ae0.10a8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
14261ae0.10a8: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume4\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
14271ae0.10a8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\winmm.dll [lacks WinVerifyTrust]
14281ae0.10a8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
14291ae0.10a8: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
14301ae0.10a8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
14311ae0.10a8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msacm32.dll'...
14321ae0.10a8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msacm32.dll' -> '\Device\HarddiskVolume4\Windows\System32\msacm32.dll' [rcNtRedir=0xc0150008]
14331ae0.10a8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
14341ae0.10a8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\msacm32.dll)
14351ae0.10a8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\msacm32.dll
14361ae0.10a8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mmdevapi.dll'...
14371ae0.10a8: supR3HardenedWinVerifyCacheProcessImportTodos: 'mmdevapi.dll' -> '\Device\HarddiskVolume4\Windows\System32\mmdevapi.dll' [rcNtRedir=0xc0150008]
14381ae0.10a8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
14391ae0.10a8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
14401ae0.10a8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
14411ae0.10a8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
14421ae0.10a8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
14431ae0.10a8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
14441ae0.10a8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
14451ae0.10a8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
14461ae0.10a8: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
14471ae0.10a8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msacm32.dll [lacks WinVerifyTrust]
14481ae0.10a8: supR3HardenedDllNotificationCallback: load 00007ffa56a60000 LB 0x0001c000 C:\WINDOWS\SYSTEM32\MSACM32.dll [fFlags=0x0]
14491ae0.10a8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msacm32.dll [lacks WinVerifyTrust]
14501ae0.10a8: supR3HardenedDllNotificationCallback: load 00007ffa595e0000 LB 0x0000c000 C:\WINDOWS\system32\msacm32.drv [fFlags=0x0]
14511ae0.10a8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
14521ae0.10a8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa595e0000 'C:\WINDOWS\system32\msacm32.drv'
14531ae0.10a8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
14541ae0.10a8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
14551ae0.10a8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa595e0000 'C:\WINDOWS\system32\msacm32.drv'
14561ae0.10a8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
14571ae0.10a8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
14581ae0.10a8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa595e0000 'C:\WINDOWS\system32\msacm32.drv'
14591ae0.10a8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
14601ae0.10a8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
14611ae0.10a8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa595e0000 'C:\WINDOWS\system32\msacm32.drv'
14621ae0.10a8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
14631ae0.10a8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
14641ae0.10a8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa595e0000 'C:\WINDOWS\system32\msacm32.drv'
14651ae0.10a8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
14661ae0.10a8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
14671ae0.10a8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa595e0000 'C:\WINDOWS\system32\msacm32.drv'
14681ae0.10a8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
14691ae0.10a8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
14701ae0.10a8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa595e0000 'C:\WINDOWS\system32\msacm32.drv'
14711ae0.10a8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
14721ae0.10a8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa595e0000 'C:\WINDOWS\system32\msacm32.drv'
14731ae0.10a8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
14741ae0.10a8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa595e0000 'C:\WINDOWS\system32\msacm32.drv'
14751ae0.10a8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
14761ae0.10a8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa595e0000 'C:\WINDOWS\system32\msacm32.drv'
14771ae0.10a8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
14781ae0.10a8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'winmm.dll'.
14791ae0.10a8: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\midimap.dll)
14801ae0.10a8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\midimap.dll
14811ae0.10a8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
14821ae0.10a8: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume4\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
14831ae0.10a8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\winmm.dll [lacks WinVerifyTrust]
14841ae0.10a8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
14851ae0.10a8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
14861ae0.10a8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
14871ae0.10a8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
14881ae0.10a8: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\midimap.dll [lacks WinVerifyTrust]
14891ae0.10a8: supR3HardenedDllNotificationCallback: load 00007ffa595d0000 LB 0x0000a000 C:\WINDOWS\system32\midimap.dll [fFlags=0x0]
14901ae0.10a8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\midimap.dll [lacks WinVerifyTrust]
14911ae0.10a8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa595d0000 'C:\WINDOWS\system32\midimap.dll'
14921ae0.10a8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\midimap.dll [lacks WinVerifyTrust]
14931ae0.10a8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
14941ae0.10a8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa595d0000 'C:\WINDOWS\system32\midimap.dll'
14951ae0.10a8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\midimap.dll [lacks WinVerifyTrust]
14961ae0.10a8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
14971ae0.10a8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa595d0000 'C:\WINDOWS\system32\midimap.dll'
14981ae0.10a8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\midimap.dll [lacks WinVerifyTrust]
14991ae0.10a8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
15001ae0.10a8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa595d0000 'C:\WINDOWS\system32\midimap.dll'
15011ae0.1280: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
15021ae0.1280: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\MMDevApi.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
15031ae0.1280: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa57a30000 'C:\WINDOWS\System32\MMDevApi.dll'
15041598.16a4: supR3HardNtChildWaitFor[1]: Quitting: ExitCode=0x1 (rcNtWait=0x0, rcNt1=0x0, rcNt2=0x103, rcNt3=0x103, 62331 ms, the end);

© 2024 Oracle Support Privacy / Do Not Sell My Info Terms of Use Trademark Policy