VirtualBox

Ticket #17865: VBoxHardening.log

File VBoxHardening.log, 192.1 KB (added by MarcelloRothery, 6 years ago)

Recent log, with error

Line 
1246c.2fd4: Log file opened: 5.2.14r123301 g_hStartupLog=0000000000000084 g_uNtVerCombined=0xa03fab00
2246c.2fd4: \SystemRoot\System32\ntdll.dll:
3246c.2fd4: CreationTime: 2018-04-10T20:16:27.894129900Z
4246c.2fd4: LastWriteTime: 2018-02-10T06:15:34.902092600Z
5246c.2fd4: ChangeTime: 2018-04-12T11:44:17.563731800Z
6246c.2fd4: FileAttributes: 0x20
7246c.2fd4: Size: 0x1dd100
8246c.2fd4: NT Headers: 0xe0
9246c.2fd4: Timestamp: 0xeffc9126
10246c.2fd4: Machine: 0x8664 - amd64
11246c.2fd4: Timestamp: 0xeffc9126
12246c.2fd4: Image Version: 10.0
13246c.2fd4: SizeOfImage: 0x1e0000 (1966080)
14246c.2fd4: Resource Dir: 0x174000 LB 0x6a1d8
15246c.2fd4: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
16246c.2fd4: [Raw version resource data: 0x1740f0 LB 0x380, codepage 0x0 (reserved 0x0)]
17246c.2fd4: ProductName: Microsoft® Windows® Operating System
18246c.2fd4: ProductVersion: 10.0.16299.248
19246c.2fd4: FileVersion: 10.0.16299.248 (WinBuild.160101.0800)
20246c.2fd4: FileDescription: NT Layer DLL
21246c.2fd4: \SystemRoot\System32\kernel32.dll:
22246c.2fd4: CreationTime: 2017-09-29T13:42:04.954227600Z
23246c.2fd4: LastWriteTime: 2017-09-29T13:42:04.954227600Z
24246c.2fd4: ChangeTime: 2017-11-07T18:41:42.043658100Z
25246c.2fd4: FileAttributes: 0x20
26246c.2fd4: Size: 0xab868
27246c.2fd4: NT Headers: 0xe8
28246c.2fd4: Timestamp: 0xc2cf900
29246c.2fd4: Machine: 0x8664 - amd64
30246c.2fd4: Timestamp: 0xc2cf900
31246c.2fd4: Image Version: 10.0
32246c.2fd4: SizeOfImage: 0xae000 (712704)
33246c.2fd4: Resource Dir: 0xac000 LB 0x520
34246c.2fd4: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
35246c.2fd4: [Raw version resource data: 0xac0b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
36246c.2fd4: ProductName: Microsoft® Windows® Operating System
37246c.2fd4: ProductVersion: 10.0.16299.15
38246c.2fd4: FileVersion: 10.0.16299.15 (WinBuild.160101.0800)
39246c.2fd4: FileDescription: Windows NT BASE API Client DLL
40246c.2fd4: \SystemRoot\System32\KernelBase.dll:
41246c.2fd4: CreationTime: 2018-04-10T20:16:17.823919700Z
42246c.2fd4: LastWriteTime: 2018-03-01T07:40:10.084338900Z
43246c.2fd4: ChangeTime: 2018-04-12T11:44:10.578609700Z
44246c.2fd4: FileAttributes: 0x20
45246c.2fd4: Size: 0x265ff8
46246c.2fd4: NT Headers: 0xf0
47246c.2fd4: Timestamp: 0x90a96867
48246c.2fd4: Machine: 0x8664 - amd64
49246c.2fd4: Timestamp: 0x90a96867
50246c.2fd4: Image Version: 10.0
51246c.2fd4: SizeOfImage: 0x266000 (2514944)
52246c.2fd4: Resource Dir: 0x245000 LB 0x548
53246c.2fd4: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
54246c.2fd4: [Raw version resource data: 0x2450b0 LB 0x3bc, codepage 0x0 (reserved 0x0)]
55246c.2fd4: ProductName: Microsoft® Windows® Operating System
56246c.2fd4: ProductVersion: 10.0.16299.309
57246c.2fd4: FileVersion: 10.0.16299.309 (WinBuild.160101.0800)
58246c.2fd4: FileDescription: Windows NT BASE API Client DLL
59246c.2fd4: \SystemRoot\System32\apisetschema.dll:
60246c.2fd4: CreationTime: 2017-09-29T13:42:07.095026600Z
61246c.2fd4: LastWriteTime: 2017-09-29T13:42:07.095026600Z
62246c.2fd4: ChangeTime: 2018-04-10T20:26:40.643432400Z
63246c.2fd4: FileAttributes: 0x20
64246c.2fd4: Size: 0x1b398
65246c.2fd4: NT Headers: 0xc8
66246c.2fd4: Timestamp: 0xf30abf31
67246c.2fd4: Machine: 0x8664 - amd64
68246c.2fd4: Timestamp: 0xf30abf31
69246c.2fd4: Image Version: 10.0
70246c.2fd4: SizeOfImage: 0x1c000 (114688)
71246c.2fd4: Resource Dir: 0x1b000 LB 0x408
72246c.2fd4: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
73246c.2fd4: [Raw version resource data: 0x1b060 LB 0x3a8, codepage 0x0 (reserved 0x0)]
74246c.2fd4: ProductName: Microsoft® Windows® Operating System
75246c.2fd4: ProductVersion: 10.0.16299.15
76246c.2fd4: FileVersion: 10.0.16299.15 (WinBuild.160101.0800)
77246c.2fd4: FileDescription: ApiSet Schema DLL
78246c.2fd4: NtOpenDirectoryObject failed on \Driver: 0xc0000022
79246c.2fd4: supR3HardenedWinFindAdversaries: 0x8
80246c.2fd4: \SystemRoot\System32\drivers\tmcomm.sys:
81246c.2fd4: CreationTime: 2015-12-09T23:47:56.000000000Z
82246c.2fd4: LastWriteTime: 2015-12-09T23:47:56.000000000Z
83246c.2fd4: ChangeTime: 2017-11-22T17:26:52.735595500Z
84246c.2fd4: FileAttributes: 0x20
85246c.2fd4: Size: 0x4f338
86246c.2fd4: NT Headers: 0xe8
87246c.2fd4: Timestamp: 0x56557dd7
88246c.2fd4: Machine: 0x8664 - amd64
89246c.2fd4: Timestamp: 0x56557dd7
90246c.2fd4: Image Version: 6.0
91246c.2fd4: SizeOfImage: 0x52000 (335872)
92246c.2fd4: Resource Dir: 0x50000 LB 0x760
93246c.2fd4: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
94246c.2fd4: [Raw version resource data: 0x50060 LB 0x700, codepage 0x0 (reserved 0x0)]
95246c.2fd4: ProductName: Trend Micro Eyes
96246c.2fd4: ProductVersion: 6.60
97246c.2fd4: FileVersion: 6.60.0.1049
98246c.2fd4: SpecialBuild: 1049
99246c.2fd4: PrivateBuild: Build 1049 - 11/25/2015
100246c.2fd4: FileDescription: TrendMicro Common Module
101246c.2fd4: \SystemRoot\System32\drivers\tmactmon.sys:
102246c.2fd4: CreationTime: 2016-05-25T14:12:10.000000000Z
103246c.2fd4: LastWriteTime: 2016-05-25T14:12:10.000000000Z
104246c.2fd4: ChangeTime: 2017-11-22T17:26:52.767339100Z
105246c.2fd4: FileAttributes: 0x20
106246c.2fd4: Size: 0x1d740
107246c.2fd4: NT Headers: 0xe0
108246c.2fd4: Timestamp: 0x57060c97
109246c.2fd4: Machine: 0x8664 - amd64
110246c.2fd4: Timestamp: 0x57060c97
111246c.2fd4: Image Version: 6.0
112246c.2fd4: SizeOfImage: 0x23000 (143360)
113246c.2fd4: Resource Dir: 0x21000 LB 0x4d0
114246c.2fd4: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
115246c.2fd4: [Raw version resource data: 0x21060 LB 0x46c, codepage 0x0 (reserved 0x0)]
116246c.2fd4: ProductName: Trend Micro AEGIS
117246c.2fd4: ProductVersion: 2.974
118246c.2fd4: FileVersion: 2.974.0.1105
119246c.2fd4: SpecialBuild: 1105
120246c.2fd4: PrivateBuild: Build 1105 - 4/7/2016
121246c.2fd4: FileDescription: TrendMicro Activity Monitor Module
122246c.2fd4: \SystemRoot\System32\drivers\tmevtmgr.sys:
123246c.2fd4: CreationTime: 2016-05-25T14:12:10.000000000Z
124246c.2fd4: LastWriteTime: 2016-05-25T14:12:10.000000000Z
125246c.2fd4: ChangeTime: 2017-11-22T17:26:52.767339100Z
126246c.2fd4: FileAttributes: 0x20
127246c.2fd4: Size: 0x13540
128246c.2fd4: NT Headers: 0xe0
129246c.2fd4: Timestamp: 0x57060c92
130246c.2fd4: Machine: 0x8664 - amd64
131246c.2fd4: Timestamp: 0x57060c92
132246c.2fd4: Image Version: 6.0
133246c.2fd4: SizeOfImage: 0x16000 (90112)
134246c.2fd4: Resource Dir: 0x14000 LB 0x4d0
135246c.2fd4: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
136246c.2fd4: [Raw version resource data: 0x14060 LB 0x46c, codepage 0x0 (reserved 0x0)]
137246c.2fd4: ProductName: Trend Micro AEGIS
138246c.2fd4: ProductVersion: 2.974
139246c.2fd4: FileVersion: 2.974.0.1105
140246c.2fd4: SpecialBuild: 1105
141246c.2fd4: PrivateBuild: Build 1105 - 4/7/2016
142246c.2fd4: FileDescription: TrendMicro Event Management Module
143246c.2fd4: \SystemRoot\System32\drivers\tmebc64.sys:
144246c.2fd4: CreationTime: 2015-11-19T18:58:04.000000000Z
145246c.2fd4: LastWriteTime: 2015-11-19T18:58:04.000000000Z
146246c.2fd4: ChangeTime: 2017-11-22T17:26:03.498466600Z
147246c.2fd4: FileAttributes: 0x20
148246c.2fd4: Size: 0x11b38
149246c.2fd4: NT Headers: 0xf8
150246c.2fd4: Timestamp: 0x564ac673
151246c.2fd4: Machine: 0x8664 - amd64
152246c.2fd4: Timestamp: 0x564ac673
153246c.2fd4: Image Version: 6.0
154246c.2fd4: SizeOfImage: 0x12000 (73728)
155246c.2fd4: Resource Dir: 0x10000 LB 0x6f8
156246c.2fd4: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
157246c.2fd4: [Raw version resource data: 0x10060 LB 0x694, codepage 0x0 (reserved 0x0)]
158246c.2fd4: ProductName: Trend Micro Early Boot Clean
159246c.2fd4: ProductVersion: 1.5
160246c.2fd4: FileVersion: 1.5.0.1023
161246c.2fd4: SpecialBuild: 1023
162246c.2fd4: PrivateBuild: Build 1023 - 11/17/2015
163246c.2fd4: FileDescription: Trend Micro early boot driver
164246c.2fd4: \SystemRoot\System32\drivers\tmeevw.sys:
165246c.2fd4: CreationTime: 2015-06-08T15:54:40.000000000Z
166246c.2fd4: LastWriteTime: 2015-06-08T15:54:40.000000000Z
167246c.2fd4: ChangeTime: 2017-11-22T17:25:46.834799200Z
168246c.2fd4: FileAttributes: 0x20
169246c.2fd4: Size: 0x1c760
170246c.2fd4: NT Headers: 0xf0
171246c.2fd4: Timestamp: 0x5487bf1b
172246c.2fd4: Machine: 0x8664 - amd64
173246c.2fd4: Timestamp: 0x5487bf1b
174246c.2fd4: Image Version: 6.1
175246c.2fd4: SizeOfImage: 0x1f000 (126976)
176246c.2fd4: Resource Dir: 0x1a000 LB 0x3488
177246c.2fd4: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
178246c.2fd4: [Raw version resource data: 0x1cf9c LB 0x4ec, codepage 0x4e4 (reserved 0x0)]
179246c.2fd4: ProductName: Trend Micro EagleEye
180246c.2fd4: ProductVersion: 2.0
181246c.2fd4: FileVersion: 2.0.0.1017
182246c.2fd4: SpecialBuild: 1017
183246c.2fd4: PrivateBuild: Build 1017 - 12/10/2014
184246c.2fd4: FileDescription: Trend Micro EagleEye Driver (VW) (amd64-fre)
185246c.2fd4: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
186246c.2fd4: Calling main()
187246c.2fd4: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2
188246c.2fd4: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
189246c.2fd4: SUPR3HardenedMain: Respawn #1
190246c.2fd4: System32: \Device\HarddiskVolume2\Windows\System32
191246c.2fd4: WinSxS: \Device\HarddiskVolume2\Windows\WinSxS
192246c.2fd4: KnownDllPath: C:\Windows\System32
193246c.2fd4: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
194246c.2fd4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe)
195246c.2fd4: supR3HardNtEnableThreadCreation:
196246c.2fd4: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffc03b391e0 pvNtTerminateThread=00007ffc03b608d0
197246c.2fd4: supR3HardenedWinDoReSpawn(1): New child 2a0c.28dc [kernel32].
198246c.2fd4: supR3HardNtChildGatherData: PebBaseAddress=0000000000e49000 cbPeb=0x388
199246c.2fd4: supR3HardNtPuChFindNtdll: uNtDllParentAddr=00007ffc03ac0000 uNtDllChildAddr=00007ffc03ac0000
200246c.2fd4: supR3HardenedWinSetupChildInit: uLdrInitThunk=00007ffc03b391e0
201246c.2fd4: supR3HardenedWinSetupChildInit: Start child.
202246c.2fd4: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 1 ms.
203246c.2fd4: supR3HardNtChildPurify: Startup delay kludge #1/0: 514 ms, 57 sleeps
204246c.2fd4: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
205246c.2fd4: *0000000000000000-0000000000c5ffff 0x0001/0x0000 0x0000000
206246c.2fd4: *0000000000c60000-0000000000c7ffff 0x0004/0x0004 0x0020000
207246c.2fd4: *0000000000c80000-0000000000c98fff 0x0002/0x0002 0x0040000
208246c.2fd4: 0000000000c99000-0000000000c9ffff 0x0001/0x0000 0x0000000
209246c.2fd4: *0000000000ca0000-0000000000d9afff 0x0000/0x0004 0x0020000
210246c.2fd4: 0000000000d9b000-0000000000d9dfff 0x0104/0x0004 0x0020000
211246c.2fd4: 0000000000d9e000-0000000000d9ffff 0x0004/0x0004 0x0020000
212246c.2fd4: *0000000000da0000-0000000000da3fff 0x0002/0x0002 0x0040000
213246c.2fd4: 0000000000da4000-0000000000daffff 0x0001/0x0000 0x0000000
214246c.2fd4: *0000000000db0000-0000000000db0fff 0x0004/0x0004 0x0020000
215246c.2fd4: 0000000000db1000-0000000000dfffff 0x0001/0x0000 0x0000000
216246c.2fd4: *0000000000e00000-0000000000e48fff 0x0000/0x0004 0x0020000
217246c.2fd4: 0000000000e49000-0000000000e4bfff 0x0004/0x0004 0x0020000
218246c.2fd4: 0000000000e4c000-0000000000ffffff 0x0000/0x0004 0x0020000
219246c.2fd4: 0000000001000000-000000007ffdffff 0x0001/0x0000 0x0000000
220246c.2fd4: *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000
221246c.2fd4: *000000007ffe1000-000000007ffeffff 0x0000/0x0002 0x0020000
222246c.2fd4: 000000007fff0000-00007ff782f2ffff 0x0001/0x0000 0x0000000
223246c.2fd4: *00007ff782f30000-00007ff782f52fff 0x0002/0x0002 0x0040000
224246c.2fd4: 00007ff782f53000-00007ff7836cffff 0x0001/0x0000 0x0000000
225246c.2fd4: *00007ff7836d0000-00007ff7836d0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
226246c.2fd4: 00007ff7836d1000-00007ff783741fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
227246c.2fd4: 00007ff783742000-00007ff783742fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
228246c.2fd4: 00007ff783743000-00007ff783788fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
229246c.2fd4: 00007ff783789000-00007ff783789fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
230246c.2fd4: 00007ff78378a000-00007ff78378afff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
231246c.2fd4: 00007ff78378b000-00007ff78378ffff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
232246c.2fd4: 00007ff783790000-00007ff783790fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
233246c.2fd4: 00007ff783791000-00007ff783791fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
234246c.2fd4: 00007ff783792000-00007ff783795fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
235246c.2fd4: 00007ff783796000-00007ff7837ddfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
236246c.2fd4: 00007ff7837de000-00007ffc03abffff 0x0001/0x0000 0x0000000
237246c.2fd4: *00007ffc03ac0000-00007ffc03ac0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
238246c.2fd4: 00007ffc03ac1000-00007ffc03bd2fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
239246c.2fd4: 00007ffc03bd3000-00007ffc03c18fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
240246c.2fd4: 00007ffc03c19000-00007ffc03c20fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
241246c.2fd4: 00007ffc03c21000-00007ffc03c2efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
242246c.2fd4: 00007ffc03c2f000-00007ffc03c2ffff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
243246c.2fd4: 00007ffc03c30000-00007ffc03c32fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
244246c.2fd4: 00007ffc03c33000-00007ffc03c9ffff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
245246c.2fd4: 00007ffc03ca0000-00007ffffffdffff 0x0001/0x0000 0x0000000
246246c.2fd4: *00007ffffffe0000-00007ffffffeffff 0x0001/0x0002 0x0020000
247246c.2fd4: VirtualBox.exe: timestamp 0x5b360ba0 (rc=VINF_SUCCESS)
248246c.2fd4: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
249246c.2fd4: '\Device\HarddiskVolume2\Windows\System32\ntdll.dll' has no imports
250246c.2fd4: supR3HardNtChildPurify: Done after 565 ms and 0 fixes (loop #0).
2512a0c.28dc: Log file opened: 5.2.14r123301 g_hStartupLog=0000000000000004 g_uNtVerCombined=0xa03fab00
2522a0c.28dc: supR3HardenedVmProcessInit: uNtDllAddr=00007ffc03ac0000 g_uNtVerCombined=0xa03fab00
253246c.2fd4: supR3HardNtEnableThreadCreation:
2542a0c.28dc: ntdll.dll: timestamp 0xeffc9126 (rc=VINF_SUCCESS)
2552a0c.28dc: New simple heap: #1 0000000001100000 LB 0x400000 (for 1966080 allocation)
2562a0c.28dc: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
2572a0c.28dc: System32: \Device\HarddiskVolume2\Windows\System32
2582a0c.28dc: WinSxS: \Device\HarddiskVolume2\Windows\WinSxS
2592a0c.28dc: KnownDllPath: C:\Windows\System32
2602a0c.28dc: supR3HardenedVmProcessInit: Opening vboxdrv stub...
2612a0c.28dc: supR3HardenedVmProcessInit: Restoring LdrInitializeThunk...
2622a0c.28dc: supR3HardenedVmProcessInit: Returning to LdrInitializeThunk...
2632a0c.28dc: Registered Dll notification callback with NTDLL.
2642a0c.28dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\kernel32.dll)
2652a0c.28dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\kernel32.dll
2662a0c.28dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\KERNEL32.DLL (Input=KERNEL32.DLL, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000004001:<flags> [calling]
2672a0c.28dc: supR3HardenedDllNotificationCallback: load 00007ffc00900000 LB 0x00266000 C:\Windows\System32\KERNELBASE.dll [fFlags=0x0]
2682a0c.28dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\KernelBase.dll)
2692a0c.28dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\KernelBase.dll
2702a0c.28dc: supR3HardenedDllNotificationCallback: load 00007ffc02c30000 LB 0x000ae000 C:\Windows\System32\KERNEL32.DLL [fFlags=0x0]
2712a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
2722a0c.28dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc02c30000 'C:\Windows\System32\KERNEL32.DLL'
2732a0c.28dc: supR3HardenedDllNotificationCallback: load 00007ff7836d0000 LB 0x0010e000 C:\Program Files\Oracle\VirtualBox\VirtualBox.exe [fFlags=0x0]
2742a0c.28dc: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
2752a0c.28dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe)
2762a0c.28dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
2772a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'advapi32.dll'.
2782a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'shell32.dll'.
2792a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'dnsapi.dll'.
2802a0c.28dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\QIPCAP64.dll)
2812a0c.28dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\QIPCAP64.dll
2822a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dnsapi.dll'...
2832a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'dnsapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\dnsapi.dll' [rcNtRedir=0xc0150008]
2842a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #23 'ws2_32.dll'.
2852a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #25 'nsi.dll'.
2862a0c.28dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\dnsapi.dll)
2872a0c.28dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\dnsapi.dll
2882a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
2892a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume2\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
2902a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
2912a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #73 'user32.dll'.
2922a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #75 'gdi32.dll'.
2932a0c.28dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\shell32.dll)
2942a0c.28dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\shell32.dll
2952a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
2962a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
2972a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
2982a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'sechost.dll'.
2992a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27 'rpcrt4.dll'.
3002a0c.28dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\advapi32.dll)
3012a0c.28dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\advapi32.dll
3022a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
3032a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
3042a0c.28dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll)
3052a0c.28dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll
3062a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'sechost.dll'...
3072a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'sechost.dll' -> '\Device\HarddiskVolume2\Windows\System32\sechost.dll' [rcNtRedir=0xc0150008]
3082a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'rpcrt4.dll'.
3092a0c.28dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\sechost.dll)
3102a0c.28dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\sechost.dll
3112a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
3122a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
3132a0c.28dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\msvcrt.dll)
3142a0c.28dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\msvcrt.dll
3152a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
3162a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
3172a0c.28dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\gdi32.dll)
3182a0c.28dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\gdi32.dll
3192a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
3202a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
3212a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'win32u.dll'.
3222a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'gdi32.dll'.
3232a0c.28dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\user32.dll)
3242a0c.28dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\user32.dll
3252a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
3262a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
3272a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
3282a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'nsi.dll'...
3292a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'nsi.dll' -> '\Device\HarddiskVolume2\Windows\System32\nsi.dll' [rcNtRedir=0xc0150008]
3302a0c.28dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\nsi.dll)
3312a0c.28dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\nsi.dll
3322a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
3332a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
3342a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'rpcrt4.dll'.
3352a0c.28dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\ws2_32.dll)
3362a0c.28dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\ws2_32.dll
3372a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
3382a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
3392a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
3402a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
3412a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
3422a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
3432a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
3442a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume2\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
3452a0c.28dc: '\Device\HarddiskVolume2\Windows\System32\win32u.dll' has no imports
3462a0c.28dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\win32u.dll)
3472a0c.28dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\win32u.dll
3482a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
3492a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
3502a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
3512a0c.28dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\QIPCAP64.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
3522a0c.28dc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\QIPCAP64.dll [lacks WinVerifyTrust]
3532a0c.28dc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\dnsapi.dll [lacks WinVerifyTrust]
3542a0c.28dc: supR3HardenedDllNotificationCallback: load 00007ffc02e50000 LB 0x0009d000 C:\Windows\System32\msvcrt.dll [fFlags=0x0]
3552a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
3562a0c.28dc: supR3HardenedDllNotificationCallback: load 00007ffc02ef0000 LB 0x0011f000 C:\Windows\System32\RPCRT4.dll [fFlags=0x0]
3572a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
3582a0c.28dc: supR3HardenedDllNotificationCallback: load 00007ffc028e0000 LB 0x0005b000 C:\Windows\System32\sechost.dll [fFlags=0x0]
3592a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\sechost.dll [lacks WinVerifyTrust]
3602a0c.28dc: supR3HardenedDllNotificationCallback: load 00007ffc02da0000 LB 0x000a1000 C:\Windows\System32\ADVAPI32.dll [fFlags=0x0]
3612a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
3622a0c.28dc: supR3HardenedDllNotificationCallback: load 00007ffc00cc0000 LB 0x000f6000 C:\Windows\System32\ucrtbase.dll [fFlags=0x0]
3632a0c.28dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\ucrtbase.dll)
3642a0c.28dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\ucrtbase.dll
3652a0c.28dc: supR3HardenedDllNotificationCallback: load 00007ffc00c70000 LB 0x0004a000 C:\Windows\System32\cfgmgr32.dll [fFlags=0x0]
3662a0c.28dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll)
3672a0c.28dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll
3682a0c.28dc: supR3HardenedDllNotificationCallback: load 00007ffc00bf0000 LB 0x00072000 C:\Windows\System32\bcryptPrimitives.dll [fFlags=0x0]
3692a0c.28dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\bcryptprimitives.dll)
3702a0c.28dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\bcryptprimitives.dll
3712a0c.28dc: supR3HardenedDllNotificationCallback: load 00007ffc00f90000 LB 0x00308000 C:\Windows\System32\combase.dll [fFlags=0x0]
3722a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
3732a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #45 'bcryptprimitives.dll'.
3742a0c.28dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\combase.dll)
3752a0c.28dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\combase.dll
3762a0c.28dc: supR3HardenedDllNotificationCallback: load 00007ffc02830000 LB 0x000a6000 C:\Windows\System32\shcore.dll [fFlags=0x0]
3772a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
3782a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #37 'rpcrt4.dll'.
3792a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #44 'combase.dll'.
3802a0c.28dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\SHCore.dll)
3812a0c.28dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\SHCore.dll
3822a0c.28dc: supR3HardenedDllNotificationCallback: load 00007ffc00610000 LB 0x0009b000 C:\Windows\System32\msvcp_win.dll [fFlags=0x0]
3832a0c.28dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll)
3842a0c.28dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\msvcp_win.dll
3852a0c.28dc: supR3HardenedDllNotificationCallback: load 00007ffc00bd0000 LB 0x00020000 C:\Windows\System32\win32u.dll [fFlags=0x0]
3862a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\win32u.dll [lacks WinVerifyTrust]
3872a0c.28dc: supR3HardenedDllNotificationCallback: load 00007ffc03200000 LB 0x0018f000 C:\Windows\System32\USER32.dll [fFlags=0x0]
3882a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
3892a0c.28dc: supR3HardenedDllNotificationCallback: load 00007ffc006b0000 LB 0x00193000 C:\Windows\System32\gdi32full.dll [fFlags=0x0]
3902a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
3912a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #33 'gdi32.dll'.
3922a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'user32.dll'.
3932a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'win32u.dll'.
3942a0c.28dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\gdi32full.dll)
3952a0c.28dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\gdi32full.dll
3962a0c.28dc: supR3HardenedDllNotificationCallback: load 00007ffc02d70000 LB 0x00028000 C:\Windows\System32\GDI32.dll [fFlags=0x0]
3972a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
3982a0c.28dc: supR3HardenedDllNotificationCallback: load 00007ffc03010000 LB 0x00051000 C:\Windows\System32\shlwapi.dll [fFlags=0x0]
3992a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'.
4002a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #45 'gdi32.dll'.
4012a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #46 'user32.dll'.
4022a0c.28dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\shlwapi.dll)
4032a0c.28dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\shlwapi.dll
4042a0c.28dc: supR3HardenedDllNotificationCallback: load 00007ffbffe80000 LB 0x00011000 C:\Windows\System32\kernel.appcore.dll [fFlags=0x0]
4052a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcrt.dll'.
4062a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'rpcrt4.dll'.
4072a0c.28dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\kernel.appcore.dll)
4082a0c.28dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\kernel.appcore.dll
4092a0c.28dc: supR3HardenedDllNotificationCallback: load 00007ffbffe10000 LB 0x0004c000 C:\Windows\System32\powrprof.dll [fFlags=0x0]
4102a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'rpcrt4.dll'.
4112a0c.28dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\powrprof.dll)
4122a0c.28dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\powrprof.dll
4132a0c.28dc: supR3HardenedDllNotificationCallback: load 00007ffbffe60000 LB 0x0001b000 C:\Windows\System32\profapi.dll [fFlags=0x0]
4142a0c.28dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\profapi.dll)
4152a0c.28dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\profapi.dll
4162a0c.28dc: supR3HardenedDllNotificationCallback: load 00007ffbffec0000 LB 0x00747000 C:\Windows\System32\windows.storage.dll [fFlags=0x0]
4172a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
4182a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'rpcrt4.dll'.
4192a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #55 'combase.dll'.
4202a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #75 'profapi.dll'.
4212a0c.28dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\windows.storage.dll)
4222a0c.28dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\windows.storage.dll
4232a0c.28dc: supR3HardenedDllNotificationCallback: load 00007ffc012a0000 LB 0x01436000 C:\Windows\System32\SHELL32.dll [fFlags=0x0]
4242a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\shell32.dll [lacks WinVerifyTrust]
4252a0c.28dc: supR3HardenedDllNotificationCallback: load 00007ffc03070000 LB 0x0006c000 C:\Windows\System32\WS2_32.dll [fFlags=0x0]
4262a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ws2_32.dll [lacks WinVerifyTrust]
4272a0c.28dc: supR3HardenedDllNotificationCallback: load 00007ffc03630000 LB 0x00008000 C:\Windows\System32\NSI.dll [fFlags=0x0]
4282a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\nsi.dll [lacks WinVerifyTrust]
4292a0c.28dc: supR3HardenedDllNotificationCallback: load 00007ffbff410000 LB 0x000b6000 C:\Windows\SYSTEM32\DNSAPI.dll [fFlags=0x0]
4302a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\dnsapi.dll [lacks WinVerifyTrust]
4312a0c.28dc: supR3HardenedDllNotificationCallback: load 0000000068000000 LB 0x00059000 C:\Windows\System32\QIPCAP64.dll [fFlags=0x0]
4322a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\QIPCAP64.dll [lacks WinVerifyTrust]
4332a0c.28dc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
4342a0c.28dc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
4352a0c.28dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc00900000 'api-ms-win-core-synch-l1-2-0'
4362a0c.28dc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
4372a0c.28dc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
4382a0c.28dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc00900000 'api-ms-win-core-fibers-l1-1-1'
4392a0c.28dc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
4402a0c.28dc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
4412a0c.28dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc00900000 'api-ms-win-core-fibers-l1-1-1'
4422a0c.28dc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
4432a0c.28dc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
4442a0c.28dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc00900000 'api-ms-win-core-synch-l1-2-0'
4452a0c.28dc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-l1-2-1) -> 0x0, fPresent=1
4462a0c.28dc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-l1-2-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
4472a0c.28dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc00900000 'api-ms-win-core-localization-l1-2-1'
4482a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
4492a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'profapi.dll'...
4502a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'profapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\profapi.dll' [rcNtRedir=0xc0150008]
4512a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\profapi.dll [lacks WinVerifyTrust]
4522a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
4532a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume2\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
4542a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\combase.dll [lacks WinVerifyTrust]
4552a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
4562a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
4572a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
4582a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
4592a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
4602a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
4612a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
4622a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
4632a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
4642a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
4652a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
4662a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
4672a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
4682a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
4692a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
4702a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
4712a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
4722a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
4732a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
4742a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
4752a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
4762a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
4772a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
4782a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
4792a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
4802a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume2\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
4812a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\win32u.dll [lacks WinVerifyTrust]
4822a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
4832a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
4842a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
4852a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
4862a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
4872a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
4882a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
4892a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
4902a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust]
4912a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
4922a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume2\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
4932a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\combase.dll [lacks WinVerifyTrust]
4942a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
4952a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
4962a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
4972a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
4982a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
4992a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
5002a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'...
5012a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume2\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008]
5022a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust]
5032a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
5042a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
5052a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
5062a0c.28dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\kernel32.dll (Input=kernel32, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
5072a0c.28dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc02c30000 'C:\Windows\System32\kernel32.dll'
5082a0c.28dc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-string-l1-1-0) -> 0x0, fPresent=1
5092a0c.28dc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-string-l1-1-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
5102a0c.28dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc00900000 'api-ms-win-core-string-l1-1-0'
5112a0c.28dc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-datetime-l1-1-1) -> 0x0, fPresent=1
5122a0c.28dc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-datetime-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
5132a0c.28dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc00900000 'api-ms-win-core-datetime-l1-1-1'
5142a0c.28dc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-obsolete-l1-2-0) -> 0x0, fPresent=1
5152a0c.28dc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-obsolete-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
5162a0c.28dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc00900000 'api-ms-win-core-localization-obsolete-l1-2-0'
5172a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'user32.dll'.
5182a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'win32u.dll'.
5192a0c.28dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\imm32.dll)
5202a0c.28dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\imm32.dll
5212a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
5222a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume2\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
5232a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\win32u.dll [lacks WinVerifyTrust]
5242a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
5252a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
5262a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
5272a0c.28dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\IMM32.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
5282a0c.28dc: supR3HardenedDllNotificationCallback: load 00007ffc02b40000 LB 0x0002d000 C:\Windows\System32\IMM32.DLL [fFlags=0x0]
5292a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\imm32.dll [lacks WinVerifyTrust]
5302a0c.28dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc02b40000 'C:\Windows\system32\IMM32.DLL'
5312a0c.28dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\IPHLPAPI.DLL)
5322a0c.28dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\IPHLPAPI.DLL
5332a0c.28dc: supR3HardenedDllNotificationCallback: load 00007ffbff3d0000 LB 0x00039000 C:\Windows\SYSTEM32\IPHLPAPI.DLL [fFlags=0x0]
5342a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\IPHLPAPI.DLL [lacks WinVerifyTrust]
5352a0c.28dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=0000000068000000 'C:\Windows\System32\QIPCAP64.dll'
5362a0c.28dc: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffc03b391e0 pvNtTerminateThread=00007ffc03b608d0
537246c.2fd4: supR3HardNtChildWaitFor: Found expected request 1 (CloseEvents) after 531 ms.
5382a0c.28dc: \SystemRoot\System32\ntdll.dll:
5392a0c.28dc: CreationTime: 2018-04-10T20:16:27.894129900Z
5402a0c.28dc: LastWriteTime: 2018-02-10T06:15:34.902092600Z
5412a0c.28dc: ChangeTime: 2018-04-12T11:44:17.563731800Z
5422a0c.28dc: FileAttributes: 0x20
5432a0c.28dc: Size: 0x1dd100
5442a0c.28dc: NT Headers: 0xe0
5452a0c.28dc: Timestamp: 0xeffc9126
5462a0c.28dc: Machine: 0x8664 - amd64
5472a0c.28dc: Timestamp: 0xeffc9126
5482a0c.28dc: Image Version: 10.0
5492a0c.28dc: SizeOfImage: 0x1e0000 (1966080)
5502a0c.28dc: Resource Dir: 0x174000 LB 0x6a1d8
5512a0c.28dc: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
5522a0c.28dc: [Raw version resource data: 0x1740f0 LB 0x380, codepage 0x0 (reserved 0x0)]
5532a0c.28dc: ProductName: Microsoft® Windows® Operating System
5542a0c.28dc: ProductVersion: 10.0.16299.248
5552a0c.28dc: FileVersion: 10.0.16299.248 (WinBuild.160101.0800)
5562a0c.28dc: FileDescription: NT Layer DLL
5572a0c.28dc: \SystemRoot\System32\kernel32.dll:
5582a0c.28dc: CreationTime: 2017-09-29T13:42:04.954227600Z
5592a0c.28dc: LastWriteTime: 2017-09-29T13:42:04.954227600Z
5602a0c.28dc: ChangeTime: 2017-11-07T18:41:42.043658100Z
5612a0c.28dc: FileAttributes: 0x20
5622a0c.28dc: Size: 0xab868
5632a0c.28dc: NT Headers: 0xe8
5642a0c.28dc: Timestamp: 0xc2cf900
5652a0c.28dc: Machine: 0x8664 - amd64
5662a0c.28dc: Timestamp: 0xc2cf900
5672a0c.28dc: Image Version: 10.0
5682a0c.28dc: SizeOfImage: 0xae000 (712704)
5692a0c.28dc: Resource Dir: 0xac000 LB 0x520
5702a0c.28dc: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
5712a0c.28dc: [Raw version resource data: 0xac0b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
5722a0c.28dc: ProductName: Microsoft® Windows® Operating System
5732a0c.28dc: ProductVersion: 10.0.16299.15
5742a0c.28dc: FileVersion: 10.0.16299.15 (WinBuild.160101.0800)
5752a0c.28dc: FileDescription: Windows NT BASE API Client DLL
5762a0c.28dc: \SystemRoot\System32\KernelBase.dll:
5772a0c.28dc: CreationTime: 2018-04-10T20:16:17.823919700Z
5782a0c.28dc: LastWriteTime: 2018-03-01T07:40:10.084338900Z
5792a0c.28dc: ChangeTime: 2018-04-12T11:44:10.578609700Z
5802a0c.28dc: FileAttributes: 0x20
5812a0c.28dc: Size: 0x265ff8
5822a0c.28dc: NT Headers: 0xf0
5832a0c.28dc: Timestamp: 0x90a96867
5842a0c.28dc: Machine: 0x8664 - amd64
5852a0c.28dc: Timestamp: 0x90a96867
5862a0c.28dc: Image Version: 10.0
5872a0c.28dc: SizeOfImage: 0x266000 (2514944)
5882a0c.28dc: Resource Dir: 0x245000 LB 0x548
5892a0c.28dc: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
5902a0c.28dc: [Raw version resource data: 0x2450b0 LB 0x3bc, codepage 0x0 (reserved 0x0)]
5912a0c.28dc: ProductName: Microsoft® Windows® Operating System
5922a0c.28dc: ProductVersion: 10.0.16299.309
5932a0c.28dc: FileVersion: 10.0.16299.309 (WinBuild.160101.0800)
5942a0c.28dc: FileDescription: Windows NT BASE API Client DLL
5952a0c.28dc: \SystemRoot\System32\apisetschema.dll:
5962a0c.28dc: CreationTime: 2017-09-29T13:42:07.095026600Z
5972a0c.28dc: LastWriteTime: 2017-09-29T13:42:07.095026600Z
5982a0c.28dc: ChangeTime: 2018-04-10T20:26:40.643432400Z
5992a0c.28dc: FileAttributes: 0x20
6002a0c.28dc: Size: 0x1b398
6012a0c.28dc: NT Headers: 0xc8
6022a0c.28dc: Timestamp: 0xf30abf31
6032a0c.28dc: Machine: 0x8664 - amd64
6042a0c.28dc: Timestamp: 0xf30abf31
6052a0c.28dc: Image Version: 10.0
6062a0c.28dc: SizeOfImage: 0x1c000 (114688)
6072a0c.28dc: Resource Dir: 0x1b000 LB 0x408
6082a0c.28dc: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
6092a0c.28dc: [Raw version resource data: 0x1b060 LB 0x3a8, codepage 0x0 (reserved 0x0)]
6102a0c.28dc: ProductName: Microsoft® Windows® Operating System
6112a0c.28dc: ProductVersion: 10.0.16299.15
6122a0c.28dc: FileVersion: 10.0.16299.15 (WinBuild.160101.0800)
6132a0c.28dc: FileDescription: ApiSet Schema DLL
6142a0c.28dc: NtOpenDirectoryObject failed on \Driver: 0xc0000022
6152a0c.28dc: supR3HardenedWinFindAdversaries: 0x8
6162a0c.28dc: \SystemRoot\System32\drivers\tmcomm.sys:
6172a0c.28dc: CreationTime: 2015-12-09T23:47:56.000000000Z
6182a0c.28dc: LastWriteTime: 2015-12-09T23:47:56.000000000Z
6192a0c.28dc: ChangeTime: 2017-11-22T17:26:52.735595500Z
6202a0c.28dc: FileAttributes: 0x20
6212a0c.28dc: Size: 0x4f338
6222a0c.28dc: NT Headers: 0xe8
6232a0c.28dc: Timestamp: 0x56557dd7
6242a0c.28dc: Machine: 0x8664 - amd64
6252a0c.28dc: Timestamp: 0x56557dd7
6262a0c.28dc: Image Version: 6.0
6272a0c.28dc: SizeOfImage: 0x52000 (335872)
6282a0c.28dc: Resource Dir: 0x50000 LB 0x760
6292a0c.28dc: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
6302a0c.28dc: [Raw version resource data: 0x50060 LB 0x700, codepage 0x0 (reserved 0x0)]
6312a0c.28dc: ProductName: Trend Micro Eyes
6322a0c.28dc: ProductVersion: 6.60
6332a0c.28dc: FileVersion: 6.60.0.1049
6342a0c.28dc: SpecialBuild: 1049
6352a0c.28dc: PrivateBuild: Build 1049 - 11/25/2015
6362a0c.28dc: FileDescription: TrendMicro Common Module
6372a0c.28dc: \SystemRoot\System32\drivers\tmactmon.sys:
6382a0c.28dc: CreationTime: 2016-05-25T14:12:10.000000000Z
6392a0c.28dc: LastWriteTime: 2016-05-25T14:12:10.000000000Z
6402a0c.28dc: ChangeTime: 2017-11-22T17:26:52.767339100Z
6412a0c.28dc: FileAttributes: 0x20
6422a0c.28dc: Size: 0x1d740
6432a0c.28dc: NT Headers: 0xe0
6442a0c.28dc: Timestamp: 0x57060c97
6452a0c.28dc: Machine: 0x8664 - amd64
6462a0c.28dc: Timestamp: 0x57060c97
6472a0c.28dc: Image Version: 6.0
6482a0c.28dc: SizeOfImage: 0x23000 (143360)
6492a0c.28dc: Resource Dir: 0x21000 LB 0x4d0
6502a0c.28dc: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
6512a0c.28dc: [Raw version resource data: 0x21060 LB 0x46c, codepage 0x0 (reserved 0x0)]
6522a0c.28dc: ProductName: Trend Micro AEGIS
6532a0c.28dc: ProductVersion: 2.974
6542a0c.28dc: FileVersion: 2.974.0.1105
6552a0c.28dc: SpecialBuild: 1105
6562a0c.28dc: PrivateBuild: Build 1105 - 4/7/2016
6572a0c.28dc: FileDescription: TrendMicro Activity Monitor Module
6582a0c.28dc: \SystemRoot\System32\drivers\tmevtmgr.sys:
6592a0c.28dc: CreationTime: 2016-05-25T14:12:10.000000000Z
6602a0c.28dc: LastWriteTime: 2016-05-25T14:12:10.000000000Z
6612a0c.28dc: ChangeTime: 2017-11-22T17:26:52.767339100Z
6622a0c.28dc: FileAttributes: 0x20
6632a0c.28dc: Size: 0x13540
6642a0c.28dc: NT Headers: 0xe0
6652a0c.28dc: Timestamp: 0x57060c92
6662a0c.28dc: Machine: 0x8664 - amd64
6672a0c.28dc: Timestamp: 0x57060c92
6682a0c.28dc: Image Version: 6.0
6692a0c.28dc: SizeOfImage: 0x16000 (90112)
6702a0c.28dc: Resource Dir: 0x14000 LB 0x4d0
6712a0c.28dc: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
6722a0c.28dc: [Raw version resource data: 0x14060 LB 0x46c, codepage 0x0 (reserved 0x0)]
6732a0c.28dc: ProductName: Trend Micro AEGIS
6742a0c.28dc: ProductVersion: 2.974
6752a0c.28dc: FileVersion: 2.974.0.1105
6762a0c.28dc: SpecialBuild: 1105
6772a0c.28dc: PrivateBuild: Build 1105 - 4/7/2016
6782a0c.28dc: FileDescription: TrendMicro Event Management Module
6792a0c.28dc: \SystemRoot\System32\drivers\tmebc64.sys:
6802a0c.28dc: CreationTime: 2015-11-19T18:58:04.000000000Z
6812a0c.28dc: LastWriteTime: 2015-11-19T18:58:04.000000000Z
6822a0c.28dc: ChangeTime: 2017-11-22T17:26:03.498466600Z
6832a0c.28dc: FileAttributes: 0x20
6842a0c.28dc: Size: 0x11b38
6852a0c.28dc: NT Headers: 0xf8
6862a0c.28dc: Timestamp: 0x564ac673
6872a0c.28dc: Machine: 0x8664 - amd64
6882a0c.28dc: Timestamp: 0x564ac673
6892a0c.28dc: Image Version: 6.0
6902a0c.28dc: SizeOfImage: 0x12000 (73728)
6912a0c.28dc: Resource Dir: 0x10000 LB 0x6f8
6922a0c.28dc: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
6932a0c.28dc: [Raw version resource data: 0x10060 LB 0x694, codepage 0x0 (reserved 0x0)]
6942a0c.28dc: ProductName: Trend Micro Early Boot Clean
6952a0c.28dc: ProductVersion: 1.5
6962a0c.28dc: FileVersion: 1.5.0.1023
6972a0c.28dc: SpecialBuild: 1023
6982a0c.28dc: PrivateBuild: Build 1023 - 11/17/2015
6992a0c.28dc: FileDescription: Trend Micro early boot driver
7002a0c.28dc: \SystemRoot\System32\drivers\tmeevw.sys:
7012a0c.28dc: CreationTime: 2015-06-08T15:54:40.000000000Z
7022a0c.28dc: LastWriteTime: 2015-06-08T15:54:40.000000000Z
7032a0c.28dc: ChangeTime: 2017-11-22T17:25:46.834799200Z
7042a0c.28dc: FileAttributes: 0x20
7052a0c.28dc: Size: 0x1c760
7062a0c.28dc: NT Headers: 0xf0
7072a0c.28dc: Timestamp: 0x5487bf1b
7082a0c.28dc: Machine: 0x8664 - amd64
7092a0c.28dc: Timestamp: 0x5487bf1b
7102a0c.28dc: Image Version: 6.1
7112a0c.28dc: SizeOfImage: 0x1f000 (126976)
7122a0c.28dc: Resource Dir: 0x1a000 LB 0x3488
7132a0c.28dc: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
7142a0c.28dc: [Raw version resource data: 0x1cf9c LB 0x4ec, codepage 0x4e4 (reserved 0x0)]
7152a0c.28dc: ProductName: Trend Micro EagleEye
7162a0c.28dc: ProductVersion: 2.0
7172a0c.28dc: FileVersion: 2.0.0.1017
7182a0c.28dc: SpecialBuild: 1017
7192a0c.28dc: PrivateBuild: Build 1017 - 12/10/2014
7202a0c.28dc: FileDescription: Trend Micro EagleEye Driver (VW) (amd64-fre)
7212a0c.28dc: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
7222a0c.28dc: Calling main()
7232a0c.28dc: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2
7242a0c.28dc: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
7252a0c.28dc: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
7262a0c.28dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe)
7272a0c.28dc: SUPR3HardenedMain: Respawn #2
7282a0c.28dc: Error (rc=-5640):
7292a0c.28dc: More than one thread in process
7302a0c.28dc: Error -5640 in supR3HardenedWinReSpawn! (enmWhat=1)
7312a0c.28dc: More than one thread in process
7322a0c.28dc: supR3HardNtEnableThreadCreation:
7332a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'opengl32.dll'.
7342a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
7352a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'msvcp100.dll'.
7362a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcr100.dll'.
7372a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'.
7382a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'qt5guivbox.dll'.
7392a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'qt5widgetsvbox.dll'.
7402a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'qt5printsupportvbox.dll'.
7412a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'qt5openglvbox.dll'.
7422a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'user32.dll'.
7432a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'advapi32.dll'.
7442a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'shell32.dll'.
7452a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'ole32.dll'.
7462a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'oleaut32.dll'.
7472a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #15 'winmm.dll'.
7482a0c.28dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.dll)
7492a0c.28dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.dll
7502a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
7512a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume2\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
7522a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'winmmbase.dll'.
7532a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'msvcrt.dll'.
7542a0c.28dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\winmm.dll)
7552a0c.28dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\winmm.dll
7562a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
7572a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume2\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
7582a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
7592a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'combase.dll'.
7602a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #23 'rpcrt4.dll'.
7612a0c.28dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\oleaut32.dll)
7622a0c.28dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\oleaut32.dll
7632a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
7642a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
7652a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #22 'rpcrt4.dll'.
7662a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #46 'gdi32.dll'.
7672a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #47 'user32.dll'.
7682a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #48 'combase.dll'.
7692a0c.28dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\ole32.dll)
7702a0c.28dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\ole32.dll
7712a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
7722a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume2\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
7732a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\shell32.dll [lacks WinVerifyTrust]
7742a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
7752a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
7762a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
7772a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
7782a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
7792a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
7802a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5openglvbox.dll'...
7812a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5openglvbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5openglvbox.dll' [rcNtRedir=0xc0150008]
7822a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'qt5widgetsvbox.dll'.
7832a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'qt5guivbox.dll'.
7842a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5corevbox.dll'.
7852a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcr100.dll'.
7862a0c.28dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll)
7872a0c.28dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll
7882a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5printsupportvbox.dll'...
7892a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5printsupportvbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5printsupportvbox.dll' [rcNtRedir=0xc0150008]
7902a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
7912a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
7922a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5widgetsvbox.dll'.
7932a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5guivbox.dll'.
7942a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'.
7952a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'winspool.drv'.
7962a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'comdlg32.dll'.
7972a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcr100.dll'.
7982a0c.28dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll)
7992a0c.28dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll
8002a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
8012a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
8022a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
8032a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
8042a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5guivbox.dll'.
8052a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5corevbox.dll'.
8062a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'shell32.dll'.
8072a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
8082a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
8092a0c.28dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll)
8102a0c.28dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll
8112a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
8122a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
8132a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'ole32.dll'.
8142a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'opengl32.dll'.
8152a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
8162a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
8172a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'.
8182a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
8192a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
8202a0c.28dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll)
8212a0c.28dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
8222a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
8232a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
8242a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
8252a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'shell32.dll'.
8262a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ole32.dll'.
8272a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'advapi32.dll'.
8282a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ws2_32.dll'.
8292a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'mpr.dll'.
8302a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcp100.dll'.
8312a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'msvcr100.dll'.
8322a0c.28dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll)
8332a0c.28dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
8342a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
8352a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
8362a0c.28dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll)
8372a0c.28dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll
8382a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
8392a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
8402a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
8412a0c.28dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll)
8422a0c.28dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll
8432a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
8442a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
8452a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
8462a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
8472a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ws2_32.dll'.
8482a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'rpcrt4.dll'.
8492a0c.28dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll)
8502a0c.28dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll
8512a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
8522a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume2\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
8532a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
8542a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'advapi32.dll'.
8552a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
8562a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'gdi32.dll'.
8572a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'glu32.dll'.
8582a0c.28dc: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\opengl32.dll)
8592a0c.28dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\opengl32.dll
8602a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'glu32.dll'...
8612a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'glu32.dll' -> '\Device\HarddiskVolume2\Windows\System32\glu32.dll' [rcNtRedir=0xc0150008]
8622a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
8632a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
8642a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'opengl32.dll'.
8652a0c.28dc: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\glu32.dll)
8662a0c.28dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\glu32.dll
8672a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
8682a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
8692a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
8702a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
8712a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
8722a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
8732a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
8742a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
8752a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
8762a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
8772a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
8782a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
8792a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
8802a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
8812a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
8822a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
8832a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
8842a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ws2_32.dll [lacks WinVerifyTrust]
8852a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
8862a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
8872a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
8882a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
8892a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
8902a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
8912a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
8922a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
8932a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
8942a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
8952a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
8962a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
8972a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
8982a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
8992a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
9002a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mpr.dll'...
9012a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'mpr.dll' -> '\Device\HarddiskVolume2\Windows\System32\mpr.dll' [rcNtRedir=0xc0150008]
9022a0c.28dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\mpr.dll)
9032a0c.28dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\mpr.dll
9042a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
9052a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
9062a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ws2_32.dll [lacks WinVerifyTrust]
9072a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
9082a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
9092a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
9102a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
9112a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
9122a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ole32.dll [lacks WinVerifyTrust]
9132a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
9142a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume2\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
9152a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\shell32.dll [lacks WinVerifyTrust]
9162a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
9172a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
9182a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
9192a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
9202a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
9212a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
9222a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
9232a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
9242a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
9252a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
9262a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
9272a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
9282a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
9292a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
9302a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
9312a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
9322a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
9332a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
9342a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
9352a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume2\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
9362a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
9372a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
9382a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
9392a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ole32.dll [lacks WinVerifyTrust]
9402a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
9412a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
9422a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
9432a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
9442a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
9452a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
9462a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
9472a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume2\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
9482a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\shell32.dll [lacks WinVerifyTrust]
9492a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
9502a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
9512a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
9522a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
9532a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
9542a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
9552a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
9562a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
9572a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
9582a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
9592a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
9602a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
9612a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
9622a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
9632a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
9642a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'comdlg32.dll'...
9652a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'comdlg32.dll' -> '\Device\HarddiskVolume2\Windows\System32\comdlg32.dll' [rcNtRedir=0xc0150008]
9662a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
9672a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'user32.dll'.
9682a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #37 'shlwapi.dll'.
9692a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #38 'gdi32.dll'.
9702a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #39 'comctl32.dll'.
9712a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #40 'shell32.dll'.
9722a0c.28dc: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\comdlg32.dll)
9732a0c.28dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\comdlg32.dll
9742a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winspool.drv'...
9752a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'winspool.drv' -> '\Device\HarddiskVolume2\Windows\System32\winspool.drv' [rcNtRedir=0xc0150008]
9762a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
9772a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #25 'iphlpapi.dll'.
9782a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'bcrypt.dll'.
9792a0c.28dc: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\winspool.drv)
9802a0c.28dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\winspool.drv
9812a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
9822a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
9832a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
9842a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
9852a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
9862a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
9872a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
9882a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
9892a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
9902a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
9912a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
9922a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
9932a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
9942a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
9952a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
9962a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
9972a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
9982a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
9992a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
10002a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
10012a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
10022a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
10032a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
10042a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
10052a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
10062a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
10072a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
10082a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
10092a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume2\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
10102a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\combase.dll [lacks WinVerifyTrust]
10112a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
10122a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
10132a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
10142a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
10152a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
10162a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
10172a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
10182a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
10192a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
10202a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
10212a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
10222a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
10232a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
10242a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume2\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
10252a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\combase.dll [lacks WinVerifyTrust]
10262a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
10272a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
10282a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust]
10292a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
10302a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
10312a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
10322a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmmbase.dll'...
10332a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmmbase.dll' -> '\Device\HarddiskVolume2\Windows\System32\winmmbase.dll' [rcNtRedir=0xc0150008]
10342a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
10352a0c.28dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\winmmbase.dll)
10362a0c.28dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\winmmbase.dll
10372a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
10382a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
10392a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
10402a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcrypt.dll'...
10412a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcrypt.dll' -> '\Device\HarddiskVolume2\Windows\System32\bcrypt.dll' [rcNtRedir=0xc0150008]
10422a0c.28dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\bcrypt.dll)
10432a0c.28dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\bcrypt.dll
10442a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'iphlpapi.dll'...
10452a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'iphlpapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\iphlpapi.dll' [rcNtRedir=0xc0150008]
10462a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\IPHLPAPI.DLL [lacks WinVerifyTrust]
10472a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
10482a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
10492a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
10502a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
10512a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume2\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
10522a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\shell32.dll [lacks WinVerifyTrust]
10532a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'comctl32.dll'...
10542a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'comctl32.dll' -> '\Device\HarddiskVolume2\Windows\System32\comctl32.dll' [rcNtRedir=0x0]
10552a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'advapi32.dll'.
10562a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
10572a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
10582a0c.28dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\comctl32.dll)
10592a0c.28dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\comctl32.dll
10602a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
10612a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
10622a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
10632a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shlwapi.dll'...
10642a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'shlwapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\shlwapi.dll' [rcNtRedir=0xc0150008]
10652a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\shlwapi.dll [lacks WinVerifyTrust]
10662a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
10672a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
10682a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
10692a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
10702a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
10712a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
10722a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
10732a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume2\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
10742a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
10752a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
10762a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
10772a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
10782a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
10792a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
10802a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
10812a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
10822a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
10832a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
10842a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
10852a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
10862a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
10872a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
10882a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
10892a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
10902a0c.28dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VirtualBox.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000a01:<flags> [calling]
10912a0c.28dc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.dll [lacks WinVerifyTrust]
10922a0c.28dc: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
10932a0c.28dc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
10942a0c.28dc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
10952a0c.28dc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
10962a0c.28dc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
10972a0c.28dc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
10982a0c.28dc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
10992a0c.28dc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll [lacks WinVerifyTrust]
11002a0c.28dc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll [lacks WinVerifyTrust]
11012a0c.28dc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winmm.dll [lacks WinVerifyTrust]
11022a0c.28dc: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\glu32.dll [lacks WinVerifyTrust]
11032a0c.28dc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\mpr.dll [lacks WinVerifyTrust]
11042a0c.28dc: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\winspool.drv [lacks WinVerifyTrust]
11052a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'advapi32.dll'.
11062a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
11072a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
11082a0c.28dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.16299.309_none_8875ce284abe80d8\comctl32.dll)
11092a0c.28dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.16299.309_none_8875ce284abe80d8\comctl32.dll
11102a0c.28dc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winmmbase.dll [lacks WinVerifyTrust]
11112a0c.28dc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
11122a0c.28dc: supR3HardenedDllNotificationCallback: load 00007ffbe2460000 LB 0x0002c000 C:\Windows\SYSTEM32\GLU32.dll [fFlags=0x0]
11132a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\glu32.dll [lacks WinVerifyTrust]
11142a0c.28dc: supR3HardenedDllNotificationCallback: load 00007ffbe1cc0000 LB 0x0011e000 C:\Windows\SYSTEM32\OPENGL32.dll [fFlags=0x0]
11152a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
11162a0c.28dc: supR3HardenedDllNotificationCallback: load 000000005a1a0000 LB 0x000d2000 C:\Program Files\Oracle\VirtualBox\MSVCR100.dll [fFlags=0x0]
11172a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
11182a0c.28dc: supR3HardenedDllNotificationCallback: load 000000005ae90000 LB 0x00098000 C:\Program Files\Oracle\VirtualBox\MSVCP100.dll [fFlags=0x0]
11192a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
11202a0c.28dc: supR3HardenedDllNotificationCallback: load 00007ffbd37b0000 LB 0x00590000 C:\Program Files\Oracle\VirtualBox\VBoxRT.dll [fFlags=0x0]
11212a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
11222a0c.28dc: supR3HardenedDllNotificationCallback: load 00007ffc026e0000 LB 0x00149000 C:\Windows\System32\ole32.dll [fFlags=0x0]
11232a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ole32.dll [lacks WinVerifyTrust]
11242a0c.28dc: supR3HardenedDllNotificationCallback: load 00007ffbf3b20000 LB 0x0001b000 C:\Windows\SYSTEM32\MPR.dll [fFlags=0x0]
11252a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\mpr.dll [lacks WinVerifyTrust]
11262a0c.28dc: supR3HardenedDllNotificationCallback: load 0000000059c30000 LB 0x00565000 C:\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [fFlags=0x0]
11272a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
11282a0c.28dc: supR3HardenedDllNotificationCallback: load 00007ffbd27a0000 LB 0x005f7000 C:\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [fFlags=0x0]
11292a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
11302a0c.28dc: supR3HardenedDllNotificationCallback: load 00000000596c0000 LB 0x00561000 C:\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [fFlags=0x0]
11312a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
11322a0c.28dc: supR3HardenedDllNotificationCallback: load 00007ffbff970000 LB 0x00025000 C:\Windows\SYSTEM32\bcrypt.dll [fFlags=0x0]
11332a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
11342a0c.28dc: supR3HardenedDllNotificationCallback: load 00007ffbf3b40000 LB 0x00086000 C:\Windows\SYSTEM32\WINSPOOL.DRV [fFlags=0x0]
11352a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\winspool.drv [lacks WinVerifyTrust]
11362a0c.28dc: supR3HardenedDllNotificationCallback: load 00007ffbef880000 LB 0x000a6000 C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.16299.309_none_8875ce284abe80d8\COMCTL32.dll [fFlags=0x0]
11372a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.16299.309_none_8875ce284abe80d8\comctl32.dll [lacks WinVerifyTrust]
11382a0c.28dc: supR3HardenedDllNotificationCallback: load 00000000052e0000 LB 0x0010a000 C:\Windows\System32\COMDLG32.dll [fFlags=0x0]
11392a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\comdlg32.dll [lacks WinVerifyTrust]
11402a0c.28dc: supR3HardenedDllNotificationCallback: load 00007ffbe6470000 LB 0x00051000 C:\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll [fFlags=0x0]
11412a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll [lacks WinVerifyTrust]
11422a0c.28dc: supR3HardenedDllNotificationCallback: load 000000005aba0000 LB 0x00054000 C:\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll [fFlags=0x0]
11432a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll [lacks WinVerifyTrust]
11442a0c.28dc: supR3HardenedDllNotificationCallback: load 00007ffc03560000 LB 0x000c5000 C:\Windows\System32\OLEAUT32.dll [fFlags=0x0]
11452a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
11462a0c.28dc: supR3HardenedDllNotificationCallback: load 00007ffbf3980000 LB 0x0002a000 C:\Windows\SYSTEM32\WINMMBASE.dll [fFlags=0x0]
11472a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winmmbase.dll [lacks WinVerifyTrust]
11482a0c.28dc: supR3HardenedDllNotificationCallback: load 00007ffbf4080000 LB 0x00023000 C:\Windows\SYSTEM32\WINMM.dll [fFlags=0x0]
11492a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winmm.dll [lacks WinVerifyTrust]
11502a0c.28dc: supR3HardenedDllNotificationCallback: load 00007ffbd2da0000 LB 0x00a06000 C:\Program Files\Oracle\VirtualBox\VirtualBox.dll [fFlags=0x0]
11512a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.dll [lacks WinVerifyTrust]
11522a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
11532a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
11542a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
11552a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
11562a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
11572a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
11582a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
11592a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
11602a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
11612a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
11622a0c.28dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
11632a0c.28dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbd37b0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11642a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
11652a0c.28dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
11662a0c.28dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbd37b0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11672a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
11682a0c.28dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
11692a0c.28dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbd37b0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11702a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
11712a0c.28dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
11722a0c.28dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbd37b0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11732a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
11742a0c.28dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
11752a0c.28dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbd37b0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11762a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
11772a0c.28dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
11782a0c.28dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbd37b0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11792a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
11802a0c.28dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbd37b0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11812a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
11822a0c.28dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbd37b0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11832a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
11842a0c.28dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbd37b0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11852a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
11862a0c.28dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbd37b0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11872a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
11882a0c.28dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbd37b0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11892a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
11902a0c.28dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbd37b0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11912a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
11922a0c.28dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbd37b0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11932a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
11942a0c.28dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
11952a0c.28dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbd37b0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11962a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
11972a0c.28dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbd37b0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11982a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
11992a0c.28dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbd37b0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
12002a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
12012a0c.28dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbd37b0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
12022a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
12032a0c.28dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbd37b0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
12042a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
12052a0c.28dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbd37b0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
12062a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
12072a0c.28dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbd37b0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
12082a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
12092a0c.28dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbd37b0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
12102a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
12112a0c.28dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbd37b0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
12122a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
12132a0c.28dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbd37b0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
12142a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
12152a0c.28dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbd37b0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
12162a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
12172a0c.28dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbd37b0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
12182a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
12192a0c.28dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbd37b0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
12202a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
12212a0c.28dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbd37b0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
12222a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
12232a0c.28dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbd37b0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
12242a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
12252a0c.28dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbd37b0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
12262a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
12272a0c.28dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
12282a0c.28dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbd37b0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
12292a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
12302a0c.28dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbd37b0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
12312a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
12322a0c.28dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbd37b0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
12332a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\imm32.dll [lacks WinVerifyTrust]
12342a0c.28dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\imm32.dll (Input=imm32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
12352a0c.28dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc02b40000 'C:\Windows\System32\imm32.dll'
12362a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
12372a0c.28dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\ADVAPI32.DLL (Input=ADVAPI32.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
12382a0c.28dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc02da0000 'C:\Windows\System32\ADVAPI32.DLL'
12392a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'bcryptprimitives.dll'.
12402a0c.28dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\cryptbase.dll)
12412a0c.28dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\cryptbase.dll
12422a0c.28dc: supR3HardenedDllNotificationCallback: load 00007ffbff820000 LB 0x0000b000 C:\Windows\SYSTEM32\CRYPTBASE.DLL [fFlags=0x0]
12432a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\cryptbase.dll [lacks WinVerifyTrust]
12442a0c.28dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbd2da0000 'C:\Program Files\Oracle\VirtualBox\VirtualBox.dll'
12452a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
12462a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'...
12472a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume2\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008]
12482a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust]
12492a0c.28dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\kernel32.dll (Input=kernel32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
12502a0c.28dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc02c30000 'C:\Windows\System32\kernel32.dll'
12512a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
12522a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'ole32.dll'.
12532a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
12542a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'imm32.dll'.
12552a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'winmm.dll'.
12562a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'oleaut32.dll'.
12572a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'shell32.dll'.
12582a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'advapi32.dll'.
12592a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'qt5guivbox.dll'.
12602a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'qt5corevbox.dll'.
12612a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'msvcr100.dll'.
12622a0c.28dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\platforms\qwindows.dll)
12632a0c.28dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\platforms\qwindows.dll
12642a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
12652a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
12662a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
12672a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
12682a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
12692a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
12702a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
12712a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
12722a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
12732a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
12742a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
12752a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
12762a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
12772a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume2\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
12782a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\shell32.dll [lacks WinVerifyTrust]
12792a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
12802a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume2\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
12812a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
12822a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
12832a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume2\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
12842a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winmm.dll [lacks WinVerifyTrust]
12852a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'...
12862a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume2\Windows\System32\imm32.dll' [rcNtRedir=0xc0150008]
12872a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\imm32.dll [lacks WinVerifyTrust]
12882a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
12892a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
12902a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
12912a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
12922a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
12932a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ole32.dll [lacks WinVerifyTrust]
12942a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
12952a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
12962a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
12972a0c.28dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
12982a0c.28dc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\platforms\qwindows.dll [lacks WinVerifyTrust]
12992a0c.28dc: supR3HardenedDllNotificationCallback: load 00007ffbde860000 LB 0x0012e000 C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll [fFlags=0x0]
13002a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\platforms\qwindows.dll [lacks WinVerifyTrust]
13012a0c.28dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbde860000 'C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll'
13022a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
13032a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #33 'gdi32.dll'.
13042a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'user32.dll'.
13052a0c.28dc: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\uxtheme.dll)
13062a0c.28dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\uxtheme.dll
13072a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
13082a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
13092a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
13102a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
13112a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
13122a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
13132a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
13142a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
13152a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
13162a0c.28dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
13172a0c.28dc: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\uxtheme.dll [lacks WinVerifyTrust]
13182a0c.28dc: supR3HardenedDllNotificationCallback: load 00007ffbfe5e0000 LB 0x00095000 C:\Windows\system32\uxtheme.dll [fFlags=0x0]
13192a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\uxtheme.dll [lacks WinVerifyTrust]
13202a0c.28dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfe5e0000 'C:\Windows\system32\uxtheme.dll'
13212a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
13222a0c.28dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc03200000 'C:\Windows\system32\user32.dll'
13232a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\shell32.dll [lacks WinVerifyTrust]
13242a0c.28dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
13252a0c.28dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc012a0000 'C:\Windows\system32\shell32.dll'
13262a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\SHCore.dll [lacks WinVerifyTrust]
13272a0c.28dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\SHCore.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
13282a0c.28dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc02830000 'C:\Windows\system32\SHCore.dll'
13292a0c.28dc: supR3HardenedMonitor_LdrLoadDll: error opening 'C:\Windows\system32\wintab32.dll': 126 (NtPath=\??\C:\Windows\system32\wintab32.dll; Input=C:\Windows\system32\wintab32.dll; rcNtGetDll=0x0
13302a0c.28dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000034 'C:\Windows\system32\wintab32.dll'
13312a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
13322a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #22 'win32u.dll'.
13332a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #23 'user32.dll'.
13342a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #24 'gdi32.dll'.
13352a0c.28dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\dwmapi.dll)
13362a0c.28dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\dwmapi.dll
13372a0c.28dc: supR3HardenedDllNotificationCallback: load 00007ffbfe8c0000 LB 0x0002a000 C:\Windows\system32\dwmapi.dll [fFlags=0x0]
13382a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\dwmapi.dll [lacks WinVerifyTrust]
13392a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winmm.dll [lacks WinVerifyTrust]
13402a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
13412a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
13422a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
13432a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
13442a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
13452a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
13462a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
13472a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume2\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
13482a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\win32u.dll [lacks WinVerifyTrust]
13492a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
13502a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
13512a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
13522a0c.28dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\winmm.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
13532a0c.28dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbf4080000 'C:\Windows\system32\winmm.dll'
13542a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winmm.dll [lacks WinVerifyTrust]
13552a0c.28dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\winmm.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
13562a0c.28dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbf4080000 'C:\Windows\system32\winmm.dll'
13572a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\shell32.dll [lacks WinVerifyTrust]
13582a0c.28dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
13592a0c.28dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc012a0000 'C:\Windows\system32\shell32.dll'
13602a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\uxtheme.dll [lacks WinVerifyTrust]
13612a0c.28dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
13622a0c.28dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfe5e0000 'C:\Windows\system32\uxtheme.dll'
13632a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
13642a0c.28dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\gdi32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
13652a0c.28dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc02d70000 'C:\Windows\system32\gdi32.dll'
13662a0c.28dc: supR3HardenedDllNotificationCallback: load 00007ffc033f0000 LB 0x00167000 C:\Windows\System32\MSCTF.dll [fFlags=0x0]
13672a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
13682a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #19 'oleaut32.dll'.
13692a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'user32.dll'.
13702a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #37 'gdi32.dll'.
13712a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #38 'imm32.dll'.
13722a0c.28dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\msctf.dll)
13732a0c.28dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\msctf.dll
13742a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
13752a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'...
13762a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume2\Windows\System32\imm32.dll' [rcNtRedir=0xc0150008]
13772a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\imm32.dll [lacks WinVerifyTrust]
13782a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
13792a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
13802a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
13812a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
13822a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
13832a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
13842a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
13852a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume2\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
13862a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
13872a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
13882a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
13892a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
13902a0c.28dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc02ef0000 'C:\Windows\System32\rpcrt4.dll'
13912a0c.28dc: supR3HardenedDllNotificationCallback: load 0000000006480000 LB 0x0009e000 C:\Windows\System32\clbcatq.dll [fFlags=0x0]
13922a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
13932a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #28 'rpcrt4.dll'.
13942a0c.28dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\clbcatq.dll)
13952a0c.28dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\clbcatq.dll
13962a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
13972a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'shcore.dll'.
13982a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #28 'combase.dll'.
13992a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #31 'd3d11.dll'.
14002a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #32 'dcomp.dll'.
14012a0c.28dc: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\DataExchange.dll)
14022a0c.28dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\DataExchange.dll
14032a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dcomp.dll'...
14042a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'dcomp.dll' -> '\Device\HarddiskVolume2\Windows\System32\dcomp.dll' [rcNtRedir=0xc0150008]
14052a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'win32u.dll'.
14062a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'.
14072a0c.28dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\dcomp.dll)
14082a0c.28dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\dcomp.dll
14092a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'd3d11.dll'...
14102a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'd3d11.dll' -> '\Device\HarddiskVolume2\Windows\System32\d3d11.dll' [rcNtRedir=0xc0150008]
14112a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
14122a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'dxgi.dll'.
14132a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'win32u.dll'.
14142a0c.28dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\d3d11.dll)
14152a0c.28dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\d3d11.dll
14162a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
14172a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume2\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
14182a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\combase.dll [lacks WinVerifyTrust]
14192a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shcore.dll'...
14202a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'shcore.dll' -> '\Device\HarddiskVolume2\Windows\System32\shcore.dll' [rcNtRedir=0xc0150008]
14212a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\SHCore.dll [lacks WinVerifyTrust]
14222a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
14232a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
14242a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
14252a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
14262a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
14272a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
14282a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
14292a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
14302a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
14312a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
14322a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume2\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
14332a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\win32u.dll [lacks WinVerifyTrust]
14342a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dxgi.dll'...
14352a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'dxgi.dll' -> '\Device\HarddiskVolume2\Windows\System32\dxgi.dll' [rcNtRedir=0xc0150008]
14362a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
14372a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'win32u.dll'.
14382a0c.28dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\dxgi.dll)
14392a0c.28dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\dxgi.dll
14402a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
14412a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
14422a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
14432a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
14442a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
14452a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
14462a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
14472a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume2\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
14482a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\win32u.dll [lacks WinVerifyTrust]
14492a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
14502a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume2\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
14512a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\win32u.dll [lacks WinVerifyTrust]
14522a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
14532a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
14542a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
14552a0c.28dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\dataexchange.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
14562a0c.28dc: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\DataExchange.dll [lacks WinVerifyTrust]
14572a0c.28dc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\d3d11.dll [lacks WinVerifyTrust]
14582a0c.28dc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\dcomp.dll [lacks WinVerifyTrust]
14592a0c.28dc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\dxgi.dll [lacks WinVerifyTrust]
14602a0c.28dc: supR3HardenedDllNotificationCallback: load 00007ffbfec20000 LB 0x000af000 C:\Windows\system32\dxgi.dll [fFlags=0x0]
14612a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\dxgi.dll [lacks WinVerifyTrust]
14622a0c.28dc: supR3HardenedDllNotificationCallback: load 00007ffbfd430000 LB 0x002e2000 C:\Windows\system32\d3d11.dll [fFlags=0x0]
14632a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\d3d11.dll [lacks WinVerifyTrust]
14642a0c.28dc: supR3HardenedDllNotificationCallback: load 00007ffbfddc0000 LB 0x00142000 C:\Windows\system32\dcomp.dll [fFlags=0x0]
14652a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\dcomp.dll [lacks WinVerifyTrust]
14662a0c.28dc: supR3HardenedDllNotificationCallback: load 00007ffbe5b80000 LB 0x0004f000 C:\Windows\system32\dataexchange.dll [fFlags=0x0]
14672a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\DataExchange.dll [lacks WinVerifyTrust]
14682a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
14692a0c.28dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc02d70000 'C:\Windows\System32\gdi32.dll'
14702a0c.28dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbe5b80000 'C:\Windows\system32\dataexchange.dll'
14712a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
14722a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'rmclient.dll'.
14732a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #30 'rpcrt4.dll'.
14742a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #32 'bcrypt.dll'.
14752a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #45 'combase.dll'.
14762a0c.28dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\twinapi.appcore.dll)
14772a0c.28dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\twinapi.appcore.dll
14782a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
14792a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'rpcrt4.dll'.
14802a0c.28dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\rmclient.dll)
14812a0c.28dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\rmclient.dll
14822a0c.28dc: supR3HardenedDllNotificationCallback: load 00007ffbfe860000 LB 0x00020000 C:\Windows\system32\RMCLIENT.dll [fFlags=0x0]
14832a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rmclient.dll [lacks WinVerifyTrust]
14842a0c.28dc: supR3HardenedDllNotificationCallback: load 00007ffbfe680000 LB 0x0017b000 C:\Windows\system32\twinapi.appcore.dll [fFlags=0x0]
14852a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\twinapi.appcore.dll [lacks WinVerifyTrust]
14862a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
14872a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #17 'coreuicomponents.dll'.
14882a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'coremessaging.dll'.
14892a0c.28dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\TextInputFramework.dll)
14902a0c.28dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\TextInputFramework.dll
14912a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
14922a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'coremessaging.dll'.
14932a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #48 'shcore.dll'.
14942a0c.28dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\CoreUIComponents.dll)
14952a0c.28dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\CoreUIComponents.dll
14962a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
14972a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #24 'rpcrt4.dll'.
14982a0c.28dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\CoreMessaging.dll)
14992a0c.28dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\CoreMessaging.dll
15002a0c.28dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\ntmarta.dll)
15012a0c.28dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\ntmarta.dll
15022a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'combase.dll'.
15032a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #21 'rpcrt4.dll'.
15042a0c.28dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #28 'bcryptprimitives.dll'.
15052a0c.28dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\WinTypes.dll)
15062a0c.28dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\WinTypes.dll
15072a0c.28dc: supR3HardenedDllNotificationCallback: load 00007ffbfeef0000 LB 0x00031000 C:\Windows\SYSTEM32\ntmarta.dll [fFlags=0x0]
15082a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ntmarta.dll [lacks WinVerifyTrust]
15092a0c.28dc: supR3HardenedDllNotificationCallback: load 00007ffbfd720000 LB 0x000dc000 C:\Windows\System32\CoreMessaging.dll [fFlags=0x0]
15102a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\CoreMessaging.dll [lacks WinVerifyTrust]
15112a0c.28dc: supR3HardenedDllNotificationCallback: load 00007ffbfc4a0000 LB 0x00136000 C:\Windows\SYSTEM32\wintypes.dll [fFlags=0x0]
15122a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\WinTypes.dll [lacks WinVerifyTrust]
15132a0c.28dc: supR3HardenedDllNotificationCallback: load 00007ffbef3e0000 LB 0x002ee000 C:\Windows\System32\CoreUIComponents.dll [fFlags=0x0]
15142a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\CoreUIComponents.dll [lacks WinVerifyTrust]
15152a0c.28dc: supR3HardenedDllNotificationCallback: load 00007ffbef6d0000 LB 0x00098000 C:\Windows\System32\TextInputFramework.dll [fFlags=0x0]
15162a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\TextInputFramework.dll [lacks WinVerifyTrust]
15172a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
15182a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'...
15192a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume2\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008]
15202a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust]
15212a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
15222a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
15232a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
15242a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
15252a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume2\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
15262a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\combase.dll [lacks WinVerifyTrust]
15272a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
15282a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
15292a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
15302a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
15312a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
15322a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
15332a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shcore.dll'...
15342a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'shcore.dll' -> '\Device\HarddiskVolume2\Windows\System32\shcore.dll' [rcNtRedir=0xc0150008]
15352a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\SHCore.dll [lacks WinVerifyTrust]
15362a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coremessaging.dll'...
15372a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'coremessaging.dll' -> '\Device\HarddiskVolume2\Windows\System32\coremessaging.dll' [rcNtRedir=0xc0150008]
15382a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\CoreMessaging.dll [lacks WinVerifyTrust]
15392a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
15402a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
15412a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
15422a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coremessaging.dll'...
15432a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'coremessaging.dll' -> '\Device\HarddiskVolume2\Windows\System32\coremessaging.dll' [rcNtRedir=0xc0150008]
15442a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\CoreMessaging.dll [lacks WinVerifyTrust]
15452a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coreuicomponents.dll'...
15462a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'coreuicomponents.dll' -> '\Device\HarddiskVolume2\Windows\System32\coreuicomponents.dll' [rcNtRedir=0xc0150008]
15472a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\CoreUIComponents.dll [lacks WinVerifyTrust]
15482a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
15492a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
15502a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
15512a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
15522a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
15532a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
15542a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
15552a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
15562a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
15572a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
15582a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume2\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
15592a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\combase.dll [lacks WinVerifyTrust]
15602a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcrypt.dll'...
15612a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcrypt.dll' -> '\Device\HarddiskVolume2\Windows\System32\bcrypt.dll' [rcNtRedir=0xc0150008]
15622a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
15632a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
15642a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
15652a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
15662a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rmclient.dll'...
15672a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rmclient.dll' -> '\Device\HarddiskVolume2\Windows\System32\rmclient.dll' [rcNtRedir=0xc0150008]
15682a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rmclient.dll [lacks WinVerifyTrust]
15692a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
15702a0c.28dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
15712a0c.28dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
15722a0c.28dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\OLEAUT32.DLL (Input=OLEAUT32.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
15732a0c.28dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc03560000 'C:\Windows\System32\OLEAUT32.DLL'
15742a0c.28dc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(ext-ms-win-rtcore-ntuser-window-ext-l1-1-0.dll) -> 0x0, fPresent=1
15752a0c.28dc: supR3HardenedMonitor_LdrLoadDll: pName=ext-ms-win-rtcore-ntuser-window-ext-l1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
15762a0c.28dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc03200000 'ext-ms-win-rtcore-ntuser-window-ext-l1-1-0.dll'
15772a0c.28dc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(ext-ms-win-rtcore-ntuser-integration-l1-1-0.dll) -> 0x0, fPresent=1
15782a0c.28dc: supR3HardenedMonitor_LdrLoadDll: pName=ext-ms-win-rtcore-ntuser-integration-l1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
15792a0c.28dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc03200000 'ext-ms-win-rtcore-ntuser-integration-l1-1-0.dll'
15802a0c.28dc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-com-l1-1-0.dll) -> 0x0, fPresent=1
15812a0c.28dc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-com-l1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
15822a0c.28dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc00f90000 'api-ms-win-core-com-l1-1-0.dll'
15832a0c.28dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msctf.dll [lacks WinVerifyTrust]
15842a0c.28dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\MSCTF.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
15852a0c.28dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc033f0000 'C:\Windows\System32\MSCTF.dll'
15862a0c.2aa8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
15872a0c.2aa8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'rpcrt4.dll'.
15882a0c.2aa8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #32 'devobj.dll'.
15892a0c.2aa8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #33 'propsys.dll'.
15902a0c.2aa8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\MMDevAPI.dll)
15912a0c.2aa8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\MMDevAPI.dll
15922a0c.2aa8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #16 'cfgmgr32.dll'.
15932a0c.2aa8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\devobj.dll)
15942a0c.2aa8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\devobj.dll
15952a0c.2aa8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
15962a0c.2aa8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #15 'oleaut32.dll'.
15972a0c.2aa8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #31 'rpcrt4.dll'.
15982a0c.2aa8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\propsys.dll)
15992a0c.2aa8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\propsys.dll
16002a0c.2aa8: supR3HardenedDllNotificationCallback: load 00007ffbffc20000 LB 0x00027000 C:\Windows\SYSTEM32\DEVOBJ.dll [fFlags=0x0]
16012a0c.2aa8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\devobj.dll [lacks WinVerifyTrust]
16022a0c.2aa8: supR3HardenedDllNotificationCallback: load 00007ffbfb580000 LB 0x001b1000 C:\Windows\SYSTEM32\PROPSYS.dll [fFlags=0x0]
16032a0c.2aa8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\propsys.dll [lacks WinVerifyTrust]
16042a0c.2aa8: supR3HardenedDllNotificationCallback: load 00007ffbf9900000 LB 0x0006f000 C:\Windows\SYSTEM32\MMDevAPI.DLL [fFlags=0x0]
16052a0c.2aa8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
16062a0c.2aa8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
16072a0c.2aa8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'mmdevapi.dll'.
16082a0c.2aa8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27 'ksuser.dll'.
16092a0c.2aa8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #28 'avrt.dll'.
16102a0c.2aa8: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\wdmaud.drv)
16112a0c.2aa8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\wdmaud.drv
16122a0c.2aa8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'avrt.dll'...
16132a0c.2aa8: supR3HardenedWinVerifyCacheProcessImportTodos: 'avrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\avrt.dll' [rcNtRedir=0xc0150008]
16142a0c.2aa8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\avrt.dll)
16152a0c.2aa8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\avrt.dll
16162a0c.2aa8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ksuser.dll'...
16172a0c.2aa8: supR3HardenedWinVerifyCacheProcessImportTodos: 'ksuser.dll' -> '\Device\HarddiskVolume2\Windows\System32\ksuser.dll' [rcNtRedir=0xc0150008]
16182a0c.2aa8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
16192a0c.2aa8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\ksuser.dll)
16202a0c.2aa8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\ksuser.dll
16212a0c.2aa8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mmdevapi.dll'...
16222a0c.2aa8: supR3HardenedWinVerifyCacheProcessImportTodos: 'mmdevapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\mmdevapi.dll' [rcNtRedir=0xc0150008]
16232a0c.2aa8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
16242a0c.2aa8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
16252a0c.2aa8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
16262a0c.2aa8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
16272a0c.2aa8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
16282a0c.2aa8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
16292a0c.2aa8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
16302a0c.2aa8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
16312a0c.2aa8: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume2\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
16322a0c.2aa8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
16332a0c.2aa8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
16342a0c.2aa8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
16352a0c.2aa8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
16362a0c.2aa8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'cfgmgr32.dll'...
16372a0c.2aa8: supR3HardenedWinVerifyCacheProcessImportTodos: 'cfgmgr32.dll' -> '\Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll' [rcNtRedir=0xc0150008]
16382a0c.2aa8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll [lacks WinVerifyTrust]
16392a0c.2aa8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'propsys.dll'...
16402a0c.2aa8: supR3HardenedWinVerifyCacheProcessImportTodos: 'propsys.dll' -> '\Device\HarddiskVolume2\Windows\System32\propsys.dll' [rcNtRedir=0xc0150008]
16412a0c.2aa8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\propsys.dll [lacks WinVerifyTrust]
16422a0c.2aa8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'devobj.dll'...
16432a0c.2aa8: supR3HardenedWinVerifyCacheProcessImportTodos: 'devobj.dll' -> '\Device\HarddiskVolume2\Windows\System32\devobj.dll' [rcNtRedir=0xc0150008]
16442a0c.2aa8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\devobj.dll [lacks WinVerifyTrust]
16452a0c.2aa8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
16462a0c.2aa8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
16472a0c.2aa8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
16482a0c.2aa8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
16492a0c.2aa8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
16502a0c.2aa8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
16512a0c.2aa8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
16522a0c.2aa8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
16532a0c.2aa8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
16542a0c.2aa8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
16552a0c.2aa8: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
16562a0c.2aa8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ksuser.dll [lacks WinVerifyTrust]
16572a0c.2aa8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\avrt.dll [lacks WinVerifyTrust]
16582a0c.2aa8: supR3HardenedDllNotificationCallback: load 00007ffbeba90000 LB 0x00009000 C:\Windows\SYSTEM32\ksuser.dll [fFlags=0x0]
16592a0c.2aa8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ksuser.dll [lacks WinVerifyTrust]
16602a0c.2aa8: supR3HardenedDllNotificationCallback: load 00007ffbfb180000 LB 0x0000a000 C:\Windows\SYSTEM32\AVRT.dll [fFlags=0x0]
16612a0c.2aa8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\avrt.dll [lacks WinVerifyTrust]
16622a0c.2aa8: supR3HardenedDllNotificationCallback: load 00007ffbe8e50000 LB 0x00042000 C:\Windows\System32\wdmaud.drv [fFlags=0x0]
16632a0c.2aa8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
16642a0c.2aa8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbe8e50000 'C:\Windows\System32\wdmaud.drv'
16652a0c.2aa8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
16662a0c.2aa8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
16672a0c.2aa8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbe8e50000 'C:\Windows\System32\wdmaud.drv'
16682a0c.2aa8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
16692a0c.2aa8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\MMDEVAPI.DLL (Input=MMDEVAPI.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
16702a0c.2aa8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbf9900000 'C:\Windows\System32\MMDEVAPI.DLL'
16712a0c.2aa8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
16722a0c.2aa8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
16732a0c.2aa8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbe8e50000 'C:\Windows\System32\wdmaud.drv'
16742a0c.2aa8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
16752a0c.2aa8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
16762a0c.2aa8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbe8e50000 'C:\Windows\System32\wdmaud.drv'
16772a0c.2aa8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
16782a0c.2aa8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
16792a0c.2aa8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbe8e50000 'C:\Windows\System32\wdmaud.drv'
16802a0c.2aa8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
16812a0c.2aa8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'rpcrt4.dll'.
16822a0c.2aa8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'oleaut32.dll'.
16832a0c.2aa8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #55 'mmdevapi.dll'.
16842a0c.2aa8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #56 'avrt.dll'.
16852a0c.2aa8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\AudioSes.dll)
16862a0c.2aa8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\AudioSes.dll
16872a0c.2aa8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'avrt.dll'...
16882a0c.2aa8: supR3HardenedWinVerifyCacheProcessImportTodos: 'avrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\avrt.dll' [rcNtRedir=0xc0150008]
16892a0c.2aa8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\avrt.dll [lacks WinVerifyTrust]
16902a0c.2aa8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mmdevapi.dll'...
16912a0c.2aa8: supR3HardenedWinVerifyCacheProcessImportTodos: 'mmdevapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\mmdevapi.dll' [rcNtRedir=0xc0150008]
16922a0c.2aa8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
16932a0c.2aa8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
16942a0c.2aa8: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume2\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
16952a0c.2aa8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
16962a0c.2aa8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
16972a0c.2aa8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
16982a0c.2aa8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
16992a0c.2aa8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
17002a0c.2aa8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
17012a0c.2aa8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust]
17022a0c.2aa8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\AUDIOSES.DLL (Input=AUDIOSES.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
17032a0c.2aa8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\AudioSes.dll [lacks WinVerifyTrust]
17042a0c.2aa8: supR3HardenedDllNotificationCallback: load 00007ffbf1c50000 LB 0x00122000 C:\Windows\System32\AUDIOSES.DLL [fFlags=0x0]
17052a0c.2aa8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\AudioSes.dll [lacks WinVerifyTrust]
17062a0c.2aa8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbf1c50000 'C:\Windows\System32\AUDIOSES.DLL'
17072a0c.2aa8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
17082a0c.2aa8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
17092a0c.2aa8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbe8e50000 'C:\Windows\System32\wdmaud.drv'
17102a0c.2aa8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
17112a0c.2aa8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
17122a0c.2aa8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbe8e50000 'C:\Windows\System32\wdmaud.drv'
17132a0c.2aa8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
17142a0c.2aa8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbe8e50000 'C:\Windows\System32\wdmaud.drv'
17152a0c.2aa8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
17162a0c.2aa8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'mmdevapi.dll'.
17172a0c.2aa8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'msacm32.dll'.
17182a0c.2aa8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'winmmbase.dll'.
17192a0c.2aa8: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\msacm32.drv)
17202a0c.2aa8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\msacm32.drv
17212a0c.2aa8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmmbase.dll'...
17222a0c.2aa8: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmmbase.dll' -> '\Device\HarddiskVolume2\Windows\System32\winmmbase.dll' [rcNtRedir=0xc0150008]
17232a0c.2aa8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winmmbase.dll [lacks WinVerifyTrust]
17242a0c.2aa8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msacm32.dll'...
17252a0c.2aa8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msacm32.dll' -> '\Device\HarddiskVolume2\Windows\System32\msacm32.dll' [rcNtRedir=0xc0150008]
17262a0c.2aa8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
17272a0c.2aa8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\msacm32.dll)
17282a0c.2aa8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\msacm32.dll
17292a0c.2aa8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mmdevapi.dll'...
17302a0c.2aa8: supR3HardenedWinVerifyCacheProcessImportTodos: 'mmdevapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\mmdevapi.dll' [rcNtRedir=0xc0150008]
17312a0c.2aa8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
17322a0c.2aa8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
17332a0c.2aa8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
17342a0c.2aa8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
17352a0c.2aa8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
17362a0c.2aa8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
17372a0c.2aa8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
17382a0c.2aa8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
17392a0c.2aa8: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
17402a0c.2aa8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msacm32.dll [lacks WinVerifyTrust]
17412a0c.2aa8: supR3HardenedDllNotificationCallback: load 00007ffbe8dc0000 LB 0x0001c000 C:\Windows\SYSTEM32\MSACM32.dll [fFlags=0x0]
17422a0c.2aa8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msacm32.dll [lacks WinVerifyTrust]
17432a0c.2aa8: supR3HardenedDllNotificationCallback: load 00007ffbef960000 LB 0x0000c000 C:\Windows\System32\msacm32.drv [fFlags=0x0]
17442a0c.2aa8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
17452a0c.2aa8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbef960000 'C:\Windows\System32\msacm32.drv'
17462a0c.2aa8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
17472a0c.2aa8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
17482a0c.2aa8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbef960000 'C:\Windows\System32\msacm32.drv'
17492a0c.2aa8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
17502a0c.2aa8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
17512a0c.2aa8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbef960000 'C:\Windows\System32\msacm32.drv'
17522a0c.2aa8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
17532a0c.2aa8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
17542a0c.2aa8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbef960000 'C:\Windows\System32\msacm32.drv'
17552a0c.2aa8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
17562a0c.2aa8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
17572a0c.2aa8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbef960000 'C:\Windows\System32\msacm32.drv'
17582a0c.2aa8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
17592a0c.2aa8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
17602a0c.2aa8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbef960000 'C:\Windows\System32\msacm32.drv'
17612a0c.2aa8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
17622a0c.2aa8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
17632a0c.2aa8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbef960000 'C:\Windows\System32\msacm32.drv'
17642a0c.2aa8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
17652a0c.2aa8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbef960000 'C:\Windows\System32\msacm32.drv'
17662a0c.2aa8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
17672a0c.2aa8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbef960000 'C:\Windows\System32\msacm32.drv'
17682a0c.2aa8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
17692a0c.2aa8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbef960000 'C:\Windows\System32\msacm32.drv'
17702a0c.2aa8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
17712a0c.2aa8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'winmm.dll'.
17722a0c.2aa8: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\midimap.dll)
17732a0c.2aa8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\midimap.dll
17742a0c.2aa8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
17752a0c.2aa8: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume2\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
17762a0c.2aa8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winmm.dll [lacks WinVerifyTrust]
17772a0c.2aa8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
17782a0c.2aa8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
17792a0c.2aa8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
17802a0c.2aa8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
17812a0c.2aa8: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\midimap.dll [lacks WinVerifyTrust]
17822a0c.2aa8: supR3HardenedDllNotificationCallback: load 00007ffbe8fd0000 LB 0x0000a000 C:\Windows\System32\midimap.dll [fFlags=0x0]
17832a0c.2aa8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\midimap.dll [lacks WinVerifyTrust]
17842a0c.2aa8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbe8fd0000 'C:\Windows\System32\midimap.dll'
17852a0c.2aa8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\midimap.dll [lacks WinVerifyTrust]
17862a0c.2aa8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
17872a0c.2aa8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbe8fd0000 'C:\Windows\System32\midimap.dll'
17882a0c.2aa8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\midimap.dll [lacks WinVerifyTrust]
17892a0c.2aa8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
17902a0c.2aa8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbe8fd0000 'C:\Windows\System32\midimap.dll'
17912a0c.2aa8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\midimap.dll [lacks WinVerifyTrust]
17922a0c.2aa8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
17932a0c.2aa8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbe8fd0000 'C:\Windows\System32\midimap.dll'
17942a0c.2f34: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
17952a0c.2f34: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\MMDevApi.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
17962a0c.2f34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbf9900000 'C:\Windows\System32\MMDevApi.dll'
1797246c.2fd4: supR3HardNtChildWaitFor[1]: Quitting: ExitCode=0x1 (rcNtWait=0x0, rcNt1=0x0, rcNt2=0x103, rcNt3=0x103, 7385 ms, the end);

© 2024 Oracle Support Privacy / Do Not Sell My Info Terms of Use Trademark Policy