VirtualBox

Ticket #18175: VBoxHardening.log

File VBoxHardening.log, 182.5 KB (added by Ekanath, 6 years ago)

Log file

Line 
13a2c.3a30: Log file opened: 5.2.22r126460 g_hStartupLog=00000000000001b4 g_uNtVerCombined=0xa03fab00
23a2c.3a30: \SystemRoot\System32\ntdll.dll:
33a2c.3a30: CreationTime: 2018-11-21T09:37:34.894802900Z
43a2c.3a30: LastWriteTime: 2018-11-21T09:37:34.932579900Z
53a2c.3a30: ChangeTime: 2018-12-03T14:25:38.574596500Z
63a2c.3a30: FileAttributes: 0x20
73a2c.3a30: Size: 0x1dd0a8
83a2c.3a30: NT Headers: 0xe0
93a2c.3a30: Timestamp: 0x11105c69
103a2c.3a30: Machine: 0x8664 - amd64
113a2c.3a30: Timestamp: 0x11105c69
123a2c.3a30: Image Version: 10.0
133a2c.3a30: SizeOfImage: 0x1e0000 (1966080)
143a2c.3a30: Resource Dir: 0x174000 LB 0x6a288
153a2c.3a30: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
163a2c.3a30: [Raw version resource data: 0x1740f0 LB 0x380, codepage 0x0 (reserved 0x0)]
173a2c.3a30: ProductName: Microsoft® Windows® Operating System
183a2c.3a30: ProductVersion: 10.0.16299.785
193a2c.3a30: FileVersion: 10.0.16299.785 (WinBuild.160101.0800)
203a2c.3a30: FileDescription: NT Layer DLL
213a2c.3a30: \SystemRoot\System32\kernel32.dll:
223a2c.3a30: CreationTime: 2018-05-10T07:44:14.069270500Z
233a2c.3a30: LastWriteTime: 2018-05-03T07:43:30.892187700Z
243a2c.3a30: ChangeTime: 2018-12-03T14:36:38.382681600Z
253a2c.3a30: FileAttributes: 0x20
263a2c.3a30: Size: 0xab868
273a2c.3a30: NT Headers: 0xe8
283a2c.3a30: Timestamp: 0x309fae94
293a2c.3a30: Machine: 0x8664 - amd64
303a2c.3a30: Timestamp: 0x309fae94
313a2c.3a30: Image Version: 10.0
323a2c.3a30: SizeOfImage: 0xae000 (712704)
333a2c.3a30: Resource Dir: 0xac000 LB 0x520
343a2c.3a30: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
353a2c.3a30: [Raw version resource data: 0xac0b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
363a2c.3a30: ProductName: Microsoft® Windows® Operating System
373a2c.3a30: ProductVersion: 10.0.16299.431
383a2c.3a30: FileVersion: 10.0.16299.431 (WinBuild.160101.0800)
393a2c.3a30: FileDescription: Windows NT BASE API Client DLL
403a2c.3a30: \SystemRoot\System32\KernelBase.dll:
413a2c.3a30: CreationTime: 2018-08-23T12:40:49.613323600Z
423a2c.3a30: LastWriteTime: 2018-08-23T12:40:49.785199600Z
433a2c.3a30: ChangeTime: 2018-12-03T14:36:44.245132100Z
443a2c.3a30: FileAttributes: 0x20
453a2c.3a30: Size: 0x266208
463a2c.3a30: NT Headers: 0xf0
473a2c.3a30: Timestamp: 0x2ef5f131
483a2c.3a30: Machine: 0x8664 - amd64
493a2c.3a30: Timestamp: 0x2ef5f131
503a2c.3a30: Image Version: 10.0
513a2c.3a30: SizeOfImage: 0x266000 (2514944)
523a2c.3a30: Resource Dir: 0x245000 LB 0x548
533a2c.3a30: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
543a2c.3a30: [Raw version resource data: 0x2450b0 LB 0x3bc, codepage 0x0 (reserved 0x0)]
553a2c.3a30: ProductName: Microsoft® Windows® Operating System
563a2c.3a30: ProductVersion: 10.0.16299.611
573a2c.3a30: FileVersion: 10.0.16299.611 (WinBuild.160101.0800)
583a2c.3a30: FileDescription: Windows NT BASE API Client DLL
593a2c.3a30: \SystemRoot\System32\apisetschema.dll:
603a2c.3a30: CreationTime: 2018-08-23T12:40:50.535216500Z
613a2c.3a30: LastWriteTime: 2018-08-23T12:40:50.535216500Z
623a2c.3a30: ChangeTime: 2018-12-03T14:23:33.529845900Z
633a2c.3a30: FileAttributes: 0x20
643a2c.3a30: Size: 0x1b3b8
653a2c.3a30: NT Headers: 0xc8
663a2c.3a30: Timestamp: 0x35fd1902
673a2c.3a30: Machine: 0x8664 - amd64
683a2c.3a30: Timestamp: 0x35fd1902
693a2c.3a30: Image Version: 10.0
703a2c.3a30: SizeOfImage: 0x1c000 (114688)
713a2c.3a30: Resource Dir: 0x1b000 LB 0x408
723a2c.3a30: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
733a2c.3a30: [Raw version resource data: 0x1b060 LB 0x3a8, codepage 0x0 (reserved 0x0)]
743a2c.3a30: ProductName: Microsoft® Windows® Operating System
753a2c.3a30: ProductVersion: 10.0.16299.579
763a2c.3a30: FileVersion: 10.0.16299.579 (WinBuild.160101.0800)
773a2c.3a30: FileDescription: ApiSet Schema DLL
783a2c.3a30: NtOpenDirectoryObject failed on \Driver: 0xc0000022
793a2c.3a30: supR3HardenedWinFindAdversaries: 0x3
803a2c.3a30: \SystemRoot\System32\drivers\SysPlant.sys:
813a2c.3a30: CreationTime: 2018-12-03T15:01:59.370381600Z
823a2c.3a30: LastWriteTime: 2018-12-03T15:01:59.370381600Z
833a2c.3a30: ChangeTime: 2018-12-03T15:01:59.370381600Z
843a2c.3a30: FileAttributes: 0x20
853a2c.3a30: Size: 0x30548
863a2c.3a30: NT Headers: 0xf0
873a2c.3a30: Timestamp: 0x5a1adc8a
883a2c.3a30: Machine: 0x8664 - amd64
893a2c.3a30: Timestamp: 0x5a1adc8a
903a2c.3a30: Image Version: 5.0
913a2c.3a30: SizeOfImage: 0x31000 (200704)
923a2c.3a30: Resource Dir: 0x2f000 LB 0x49c
933a2c.3a30: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
943a2c.3a30: [Raw version resource data: 0x2f0b8 LB 0x3e4, codepage 0x4e4 (reserved 0x0)]
953a2c.3a30: ProductName: Symantec CMC Firewall
963a2c.3a30: ProductVersion: 14.0.3856.1100
973a2c.3a30: FileVersion: 14.0.3856.1100
983a2c.3a30: FileDescription: Symantec CMC Firewall SysPlant
993a2c.3a30: \SystemRoot\System32\sysfer.dll:
1003a2c.3a30: CreationTime: 2018-12-03T15:01:59.354755000Z
1013a2c.3a30: LastWriteTime: 2018-12-03T15:01:59.370381600Z
1023a2c.3a30: ChangeTime: 2018-12-03T15:01:59.370381600Z
1033a2c.3a30: FileAttributes: 0x20
1043a2c.3a30: Size: 0x7cee8
1053a2c.3a30: NT Headers: 0xf8
1063a2c.3a30: Timestamp: 0x5a1adc96
1073a2c.3a30: Machine: 0x8664 - amd64
1083a2c.3a30: Timestamp: 0x5a1adc96
1093a2c.3a30: Image Version: 0.0
1103a2c.3a30: SizeOfImage: 0x95000 (610304)
1113a2c.3a30: Resource Dir: 0x91000 LB 0x490
1123a2c.3a30: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
1133a2c.3a30: [Raw version resource data: 0x910b8 LB 0x3d8, codepage 0x4e4 (reserved 0x0)]
1143a2c.3a30: ProductName: Symantec CMC Firewall
1153a2c.3a30: ProductVersion: 14.0.3856.1100
1163a2c.3a30: FileVersion: 14.0.3856.1100
1173a2c.3a30: FileDescription: Symantec CMC Firewall sysfer
1183a2c.3a30: \SystemRoot\System32\drivers\symevent64x86.sys:
1193a2c.3a30: CreationTime: 2018-12-03T15:04:49.063012000Z
1203a2c.3a30: LastWriteTime: 2018-12-03T15:04:48.761985700Z
1213a2c.3a30: ChangeTime: 2018-12-03T15:04:48.761985700Z
1223a2c.3a30: FileAttributes: 0x20
1233a2c.3a30: Size: 0x19098
1243a2c.3a30: NT Headers: 0xe0
1253a2c.3a30: Timestamp: 0x59fcb42b
1263a2c.3a30: Machine: 0x8664 - amd64
1273a2c.3a30: Timestamp: 0x59fcb42b
1283a2c.3a30: Image Version: 6.2
1293a2c.3a30: SizeOfImage: 0x23000 (143360)
1303a2c.3a30: Resource Dir: 0x21000 LB 0x3c8
1313a2c.3a30: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
1323a2c.3a30: [Raw version resource data: 0x210b8 LB 0x310, codepage 0x4e4 (reserved 0x0)]
1333a2c.3a30: ProductName: SYMEVENT
1343a2c.3a30: ProductVersion: 14.0.5.9
1353a2c.3a30: FileVersion: 14.0.5.9
1363a2c.3a30: FileDescription: Symantec Event Library
1373a2c.3a30: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
1383a2c.3a30: Calling main()
1393a2c.3a30: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2
1403a2c.3a30: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
1413a2c.3a30: SUPR3HardenedMain: Respawn #1
1423a2c.3a30: System32: \Device\HarddiskVolume3\Windows\System32
1433a2c.3a30: WinSxS: \Device\HarddiskVolume3\Windows\WinSxS
1443a2c.3a30: KnownDllPath: C:\WINDOWS\System32
1453a2c.3a30: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
1463a2c.3a30: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe)
1473a2c.3a30: supR3HardNtEnableThreadCreation:
1483a2c.3a30: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ff9b4508e00 pvNtTerminateThread=00007ff9b4530b20
1493a2c.3a30: supR3HardenedWinDoReSpawn(1): New child 3b1c.1f4c [kernel32].
1503a2c.3a30: supR3HardNtChildGatherData: PebBaseAddress=0000000000666000 cbPeb=0x388
1513a2c.3a30: supR3HardNtPuChFindNtdll: uNtDllParentAddr=00007ff9b4490000 uNtDllChildAddr=00007ff9b4490000
1523a2c.3a30: supR3HardenedWinSetupChildInit: uLdrInitThunk=00007ff9b4508e00
1533a2c.3a30: supR3HardenedWinSetupChildInit: Start child.
1543a2c.3a30: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 0 ms.
1553a2c.3a30: supR3HardNtChildPurify: Startup delay kludge #1/0: 515 ms, 33 sleeps
1563a2c.3a30: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
1573a2c.3a30: *0000000000000000-000000000049ffff 0x0001/0x0000 0x0000000
1583a2c.3a30: *00000000004a0000-00000000004bffff 0x0004/0x0004 0x0020000
1593a2c.3a30: *00000000004c0000-00000000004d8fff 0x0002/0x0002 0x0040000
1603a2c.3a30: 00000000004d9000-00000000004dffff 0x0001/0x0000 0x0000000
1613a2c.3a30: *00000000004e0000-00000000005dafff 0x0000/0x0004 0x0020000
1623a2c.3a30: 00000000005db000-00000000005ddfff 0x0104/0x0004 0x0020000
1633a2c.3a30: 00000000005de000-00000000005dffff 0x0004/0x0004 0x0020000
1643a2c.3a30: *00000000005e0000-00000000005e3fff 0x0002/0x0002 0x0040000
1653a2c.3a30: 00000000005e4000-00000000005effff 0x0001/0x0000 0x0000000
1663a2c.3a30: *00000000005f0000-00000000005f0fff 0x0004/0x0004 0x0020000
1673a2c.3a30: 00000000005f1000-00000000005fffff 0x0001/0x0000 0x0000000
1683a2c.3a30: *0000000000600000-0000000000665fff 0x0000/0x0004 0x0020000
1693a2c.3a30: 0000000000666000-0000000000668fff 0x0004/0x0004 0x0020000
1703a2c.3a30: 0000000000669000-00000000007fffff 0x0000/0x0004 0x0020000
1713a2c.3a30: 0000000000800000-000000007ffdffff 0x0001/0x0000 0x0000000
1723a2c.3a30: *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000
1733a2c.3a30: *000000007ffe1000-000000007ffeffff 0x0000/0x0002 0x0020000
1743a2c.3a30: 000000007fff0000-00007ff6eefeffff 0x0001/0x0000 0x0000000
1753a2c.3a30: *00007ff6eeff0000-00007ff6ef012fff 0x0002/0x0002 0x0040000
1763a2c.3a30: 00007ff6ef013000-00007ff6ef58ffff 0x0001/0x0000 0x0000000
1773a2c.3a30: *00007ff6ef590000-00007ff6ef590fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
1783a2c.3a30: 00007ff6ef591000-00007ff6ef601fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
1793a2c.3a30: 00007ff6ef602000-00007ff6ef602fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
1803a2c.3a30: 00007ff6ef603000-00007ff6ef648fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
1813a2c.3a30: 00007ff6ef649000-00007ff6ef649fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
1823a2c.3a30: 00007ff6ef64a000-00007ff6ef64afff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
1833a2c.3a30: 00007ff6ef64b000-00007ff6ef64ffff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
1843a2c.3a30: 00007ff6ef650000-00007ff6ef650fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
1853a2c.3a30: 00007ff6ef651000-00007ff6ef651fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
1863a2c.3a30: 00007ff6ef652000-00007ff6ef655fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
1873a2c.3a30: 00007ff6ef656000-00007ff6ef69dfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
1883a2c.3a30: 00007ff6ef69e000-00007ff9b448ffff 0x0001/0x0000 0x0000000
1893a2c.3a30: *00007ff9b4490000-00007ff9b4490fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
1903a2c.3a30: 00007ff9b4491000-00007ff9b45a2fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
1913a2c.3a30: 00007ff9b45a3000-00007ff9b45e8fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
1923a2c.3a30: 00007ff9b45e9000-00007ff9b45f0fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
1933a2c.3a30: 00007ff9b45f1000-00007ff9b45fefff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
1943a2c.3a30: 00007ff9b45ff000-00007ff9b45fffff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
1953a2c.3a30: 00007ff9b4600000-00007ff9b4602fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
1963a2c.3a30: 00007ff9b4603000-00007ff9b466ffff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
1973a2c.3a30: 00007ff9b4670000-00007ffffffdffff 0x0001/0x0000 0x0000000
1983a2c.3a30: *00007ffffffe0000-00007ffffffeffff 0x0001/0x0002 0x0020000
1993a2c.3a30: VirtualBox.exe: timestamp 0x5be4900d (rc=VINF_SUCCESS)
2003a2c.3a30: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
2013a2c.3a30: '\Device\HarddiskVolume3\Windows\System32\ntdll.dll' has no imports
2023a2c.3a30: supR3HardNtChildPurify: Done after 547 ms and 0 fixes (loop #0).
2033a2c.3a30: supR3HardNtEnableThreadCreation:
2043b1c.1f4c: Log file opened: 5.2.22r126460 g_hStartupLog=0000000000000004 g_uNtVerCombined=0xa03fab00
2053b1c.1f4c: supR3HardenedVmProcessInit: uNtDllAddr=00007ff9b4490000 g_uNtVerCombined=0xa03fab00
2063b1c.1f4c: ntdll.dll: timestamp 0x11105c69 (rc=VINF_SUCCESS)
2073b1c.1f4c: New simple heap: #1 0000000000900000 LB 0x400000 (for 1966080 allocation)
2083b1c.1f4c: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
2093b1c.1f4c: System32: \Device\HarddiskVolume3\Windows\System32
2103b1c.1f4c: WinSxS: \Device\HarddiskVolume3\Windows\WinSxS
2113b1c.1f4c: KnownDllPath: C:\WINDOWS\System32
2123b1c.1f4c: supR3HardenedVmProcessInit: Opening vboxdrv stub...
2133b1c.1f4c: supR3HardenedVmProcessInit: Restoring LdrInitializeThunk...
2143b1c.1f4c: supR3HardenedVmProcessInit: Returning to LdrInitializeThunk...
2153b1c.1f4c: Registered Dll notification callback with NTDLL.
2163b1c.1f4c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\kernel32.dll)
2173b1c.1f4c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\kernel32.dll
2183b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\KERNEL32.DLL (Input=KERNEL32.DLL, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000004001:<flags> [calling]
2193b1c.1f4c: supR3HardenedDllNotificationCallback: load 00007ff9b16a0000 LB 0x00266000 C:\WINDOWS\System32\KERNELBASE.dll [fFlags=0x0]
2203b1c.1f4c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\KernelBase.dll)
2213b1c.1f4c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
2223b1c.1f4c: supR3HardenedDllNotificationCallback: load 00007ff9b3a90000 LB 0x000ae000 C:\WINDOWS\System32\KERNEL32.DLL [fFlags=0x0]
2233b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
2243b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9b3a90000 'C:\WINDOWS\System32\KERNEL32.DLL'
2253b1c.1f4c: supR3HardenedDllNotificationCallback: load 00007ff6ef590000 LB 0x0010e000 C:\Program Files\Oracle\VirtualBox\VirtualBox.exe [fFlags=0x0]
2263b1c.1f4c: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
2273b1c.1f4c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe)
2283b1c.1f4c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
2293b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'advapi32.dll'.
2303b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'shell32.dll'.
2313b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'dnsapi.dll'.
2323b1c.1f4c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\QIPCAP64.dll)
2333b1c.1f4c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\QIPCAP64.dll
2343b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dnsapi.dll'...
2353b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'dnsapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\dnsapi.dll' [rcNtRedir=0xc0150008]
2363b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #23 'ws2_32.dll'.
2373b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #25 'nsi.dll'.
2383b1c.1f4c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\dnsapi.dll)
2393b1c.1f4c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\dnsapi.dll
2403b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
2413b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
2423b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
2433b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #73 'user32.dll'.
2443b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #75 'gdi32.dll'.
2453b1c.1f4c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\shell32.dll)
2463b1c.1f4c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\shell32.dll
2473b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
2483b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
2493b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
2503b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'sechost.dll'.
2513b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27 'rpcrt4.dll'.
2523b1c.1f4c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\advapi32.dll)
2533b1c.1f4c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\advapi32.dll
2543b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
2553b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
2563b1c.1f4c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll)
2573b1c.1f4c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll
2583b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'sechost.dll'...
2593b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'sechost.dll' -> '\Device\HarddiskVolume3\Windows\System32\sechost.dll' [rcNtRedir=0xc0150008]
2603b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'rpcrt4.dll'.
2613b1c.1f4c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\sechost.dll)
2623b1c.1f4c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\sechost.dll
2633b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
2643b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
2653b1c.1f4c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\msvcrt.dll)
2663b1c.1f4c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
2673b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
2683b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
2693b1c.1f4c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\gdi32.dll)
2703b1c.1f4c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\gdi32.dll
2713b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
2723b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
2733b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'win32u.dll'.
2743b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'gdi32.dll'.
2753b1c.1f4c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\user32.dll)
2763b1c.1f4c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\user32.dll
2773b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
2783b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
2793b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
2803b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'nsi.dll'...
2813b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'nsi.dll' -> '\Device\HarddiskVolume3\Windows\System32\nsi.dll' [rcNtRedir=0xc0150008]
2823b1c.1f4c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\nsi.dll)
2833b1c.1f4c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\nsi.dll
2843b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
2853b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
2863b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'rpcrt4.dll'.
2873b1c.1f4c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ws2_32.dll)
2883b1c.1f4c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ws2_32.dll
2893b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
2903b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
2913b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
2923b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
2933b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
2943b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
2953b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
2963b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
2973b1c.1f4c: '\Device\HarddiskVolume3\Windows\System32\win32u.dll' has no imports
2983b1c.1f4c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\win32u.dll)
2993b1c.1f4c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\win32u.dll
3003b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
3013b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
3023b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
3033b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\QIPCAP64.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
3043b1c.1f4c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\QIPCAP64.dll [lacks WinVerifyTrust]
3053b1c.1f4c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dnsapi.dll [lacks WinVerifyTrust]
3063b1c.1f4c: supR3HardenedDllNotificationCallback: load 00007ff9b1990000 LB 0x0009d000 C:\WINDOWS\System32\msvcrt.dll [fFlags=0x0]
3073b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
3083b1c.1f4c: supR3HardenedDllNotificationCallback: load 00007ff9b3710000 LB 0x0011f000 C:\WINDOWS\System32\RPCRT4.dll [fFlags=0x0]
3093b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
3103b1c.1f4c: supR3HardenedDllNotificationCallback: load 00007ff9b1ac0000 LB 0x0005b000 C:\WINDOWS\System32\sechost.dll [fFlags=0x0]
3113b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\sechost.dll [lacks WinVerifyTrust]
3123b1c.1f4c: supR3HardenedDllNotificationCallback: load 00007ff9b3370000 LB 0x000a1000 C:\WINDOWS\System32\ADVAPI32.dll [fFlags=0x0]
3133b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
3143b1c.1f4c: supR3HardenedDllNotificationCallback: load 00007ff9b15a0000 LB 0x000f5000 C:\WINDOWS\System32\ucrtbase.dll [fFlags=0x0]
3153b1c.1f4c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ucrtbase.dll)
3163b1c.1f4c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll
3173b1c.1f4c: supR3HardenedDllNotificationCallback: load 00007ff9b1910000 LB 0x0004a000 C:\WINDOWS\System32\cfgmgr32.dll [fFlags=0x0]
3183b1c.1f4c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll)
3193b1c.1f4c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll
3203b1c.1f4c: supR3HardenedDllNotificationCallback: load 00007ff9b0a60000 LB 0x00072000 C:\WINDOWS\System32\bcryptPrimitives.dll [fFlags=0x0]
3213b1c.1f4c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll)
3223b1c.1f4c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll
3233b1c.1f4c: supR3HardenedDllNotificationCallback: load 00007ff9b3f90000 LB 0x00306000 C:\WINDOWS\System32\combase.dll [fFlags=0x0]
3243b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
3253b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #45 'bcryptprimitives.dll'.
3263b1c.1f4c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\combase.dll)
3273b1c.1f4c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\combase.dll
3283b1c.1f4c: supR3HardenedDllNotificationCallback: load 00007ff9b3480000 LB 0x000a6000 C:\WINDOWS\System32\shcore.dll [fFlags=0x0]
3293b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
3303b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #37 'rpcrt4.dll'.
3313b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #44 'combase.dll'.
3323b1c.1f4c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\SHCore.dll)
3333b1c.1f4c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\SHCore.dll
3343b1c.1f4c: supR3HardenedDllNotificationCallback: load 00007ff9b0b90000 LB 0x0009b000 C:\WINDOWS\System32\msvcp_win.dll [fFlags=0x0]
3353b1c.1f4c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll)
3363b1c.1f4c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll
3373b1c.1f4c: supR3HardenedDllNotificationCallback: load 00007ff9b1580000 LB 0x00020000 C:\WINDOWS\System32\win32u.dll [fFlags=0x0]
3383b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [lacks WinVerifyTrust]
3393b1c.1f4c: supR3HardenedDllNotificationCallback: load 00007ff9b42a0000 LB 0x0018f000 C:\WINDOWS\System32\USER32.dll [fFlags=0x0]
3403b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
3413b1c.1f4c: supR3HardenedDllNotificationCallback: load 00007ff9b1380000 LB 0x00193000 C:\WINDOWS\System32\gdi32full.dll [fFlags=0x0]
3423b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
3433b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #33 'gdi32.dll'.
3443b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'user32.dll'.
3453b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'win32u.dll'.
3463b1c.1f4c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\gdi32full.dll)
3473b1c.1f4c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\gdi32full.dll
3483b1c.1f4c: supR3HardenedDllNotificationCallback: load 00007ff9b1960000 LB 0x00028000 C:\WINDOWS\System32\GDI32.dll [fFlags=0x0]
3493b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
3503b1c.1f4c: supR3HardenedDllNotificationCallback: load 00007ff9b3310000 LB 0x00051000 C:\WINDOWS\System32\shlwapi.dll [fFlags=0x0]
3513b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'.
3523b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #45 'gdi32.dll'.
3533b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #46 'user32.dll'.
3543b1c.1f4c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\shlwapi.dll)
3553b1c.1f4c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\shlwapi.dll
3563b1c.1f4c: supR3HardenedDllNotificationCallback: load 00007ff9b0800000 LB 0x00011000 C:\WINDOWS\System32\kernel.appcore.dll [fFlags=0x0]
3573b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcrt.dll'.
3583b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'rpcrt4.dll'.
3593b1c.1f4c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll)
3603b1c.1f4c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll
3613b1c.1f4c: supR3HardenedDllNotificationCallback: load 00007ff9b0840000 LB 0x0004c000 C:\WINDOWS\System32\powrprof.dll [fFlags=0x0]
3623b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'rpcrt4.dll'.
3633b1c.1f4c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\powrprof.dll)
3643b1c.1f4c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\powrprof.dll
3653b1c.1f4c: supR3HardenedDllNotificationCallback: load 00007ff9b0820000 LB 0x0001b000 C:\WINDOWS\System32\profapi.dll [fFlags=0x0]
3663b1c.1f4c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\profapi.dll)
3673b1c.1f4c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\profapi.dll
3683b1c.1f4c: supR3HardenedDllNotificationCallback: load 00007ff9b0c30000 LB 0x00747000 C:\WINDOWS\System32\windows.storage.dll [fFlags=0x0]
3693b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
3703b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'rpcrt4.dll'.
3713b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #55 'combase.dll'.
3723b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #75 'profapi.dll'.
3733b1c.1f4c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\windows.storage.dll)
3743b1c.1f4c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\windows.storage.dll
3753b1c.1f4c: supR3HardenedDllNotificationCallback: load 00007ff9b1b20000 LB 0x01438000 C:\WINDOWS\System32\SHELL32.dll [fFlags=0x0]
3763b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll [lacks WinVerifyTrust]
3773b1c.1f4c: supR3HardenedDllNotificationCallback: load 00007ff9b3540000 LB 0x0006c000 C:\WINDOWS\System32\WS2_32.dll [fFlags=0x0]
3783b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ws2_32.dll [lacks WinVerifyTrust]
3793b1c.1f4c: supR3HardenedDllNotificationCallback: load 00007ff9b1ab0000 LB 0x00008000 C:\WINDOWS\System32\NSI.dll [fFlags=0x0]
3803b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\nsi.dll [lacks WinVerifyTrust]
3813b1c.1f4c: supR3HardenedDllNotificationCallback: load 00007ff9afdf0000 LB 0x000b6000 C:\WINDOWS\SYSTEM32\DNSAPI.dll [fFlags=0x0]
3823b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dnsapi.dll [lacks WinVerifyTrust]
3833b1c.1f4c: supR3HardenedDllNotificationCallback: load 0000000068000000 LB 0x00058000 C:\WINDOWS\System32\QIPCAP64.dll [fFlags=0x0]
3843b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\QIPCAP64.dll [lacks WinVerifyTrust]
3853b1c.1f4c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
3863b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
3873b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9b16a0000 'api-ms-win-core-synch-l1-2-0'
3883b1c.1f4c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
3893b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
3903b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9b16a0000 'api-ms-win-core-fibers-l1-1-1'
3913b1c.1f4c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
3923b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
3933b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9b16a0000 'api-ms-win-core-fibers-l1-1-1'
3943b1c.1f4c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
3953b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
3963b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9b16a0000 'api-ms-win-core-synch-l1-2-0'
3973b1c.1f4c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-l1-2-1) -> 0x0, fPresent=1
3983b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-l1-2-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
3993b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9b16a0000 'api-ms-win-core-localization-l1-2-1'
4003b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
4013b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'profapi.dll'...
4023b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'profapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\profapi.dll' [rcNtRedir=0xc0150008]
4033b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\profapi.dll [lacks WinVerifyTrust]
4043b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
4053b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
4063b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [lacks WinVerifyTrust]
4073b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
4083b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
4093b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
4103b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
4113b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
4123b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
4133b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
4143b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
4153b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
4163b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
4173b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
4183b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
4193b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
4203b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
4213b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
4223b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
4233b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
4243b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
4253b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
4263b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
4273b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
4283b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
4293b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
4303b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
4313b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
4323b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
4333b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [lacks WinVerifyTrust]
4343b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
4353b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
4363b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
4373b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
4383b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
4393b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
4403b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
4413b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
4423b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust]
4433b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
4443b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
4453b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [lacks WinVerifyTrust]
4463b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
4473b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
4483b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
4493b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
4503b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
4513b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
4523b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'...
4533b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008]
4543b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust]
4553b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
4563b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
4573b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
4583b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\kernel32.dll (Input=kernel32, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
4593b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9b3a90000 'C:\WINDOWS\System32\kernel32.dll'
4603b1c.1f4c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-string-l1-1-0) -> 0x0, fPresent=1
4613b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-string-l1-1-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
4623b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9b16a0000 'api-ms-win-core-string-l1-1-0'
4633b1c.1f4c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-datetime-l1-1-1) -> 0x0, fPresent=1
4643b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-datetime-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
4653b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9b16a0000 'api-ms-win-core-datetime-l1-1-1'
4663b1c.1f4c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-obsolete-l1-2-0) -> 0x0, fPresent=1
4673b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-obsolete-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
4683b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9b16a0000 'api-ms-win-core-localization-obsolete-l1-2-0'
4693b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'user32.dll'.
4703b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'win32u.dll'.
4713b1c.1f4c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\imm32.dll)
4723b1c.1f4c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\imm32.dll
4733b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
4743b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
4753b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [lacks WinVerifyTrust]
4763b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
4773b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
4783b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
4793b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\IMM32.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
4803b1c.1f4c: supR3HardenedDllNotificationCallback: load 00007ff9b4430000 LB 0x0002d000 C:\WINDOWS\System32\IMM32.DLL [fFlags=0x0]
4813b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\imm32.dll [lacks WinVerifyTrust]
4823b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9b4430000 'C:\WINDOWS\system32\IMM32.DLL'
4833b1c.1f4c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL)
4843b1c.1f4c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL
4853b1c.1f4c: supR3HardenedDllNotificationCallback: load 00007ff9afda0000 LB 0x00039000 C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL [fFlags=0x0]
4863b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL [lacks WinVerifyTrust]
4873b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=0000000068000000 'C:\WINDOWS\System32\QIPCAP64.dll'
4883b1c.1f4c: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ff9b4508e00 pvNtTerminateThread=00007ff9b4530b20
4893a2c.3a30: supR3HardNtChildWaitFor: Found expected request 1 (CloseEvents) after 696 ms.
4903b1c.1f4c: \SystemRoot\System32\ntdll.dll:
4913b1c.1f4c: CreationTime: 2018-11-21T09:37:34.894802900Z
4923b1c.1f4c: LastWriteTime: 2018-11-21T09:37:34.932579900Z
4933b1c.1f4c: ChangeTime: 2018-12-03T14:25:38.574596500Z
4943b1c.1f4c: FileAttributes: 0x20
4953b1c.1f4c: Size: 0x1dd0a8
4963b1c.1f4c: NT Headers: 0xe0
4973b1c.1f4c: Timestamp: 0x11105c69
4983b1c.1f4c: Machine: 0x8664 - amd64
4993b1c.1f4c: Timestamp: 0x11105c69
5003b1c.1f4c: Image Version: 10.0
5013b1c.1f4c: SizeOfImage: 0x1e0000 (1966080)
5023b1c.1f4c: Resource Dir: 0x174000 LB 0x6a288
5033b1c.1f4c: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
5043b1c.1f4c: [Raw version resource data: 0x1740f0 LB 0x380, codepage 0x0 (reserved 0x0)]
5053b1c.1f4c: ProductName: Microsoft® Windows® Operating System
5063b1c.1f4c: ProductVersion: 10.0.16299.785
5073b1c.1f4c: FileVersion: 10.0.16299.785 (WinBuild.160101.0800)
5083b1c.1f4c: FileDescription: NT Layer DLL
5093b1c.1f4c: \SystemRoot\System32\kernel32.dll:
5103b1c.1f4c: CreationTime: 2018-05-10T07:44:14.069270500Z
5113b1c.1f4c: LastWriteTime: 2018-05-03T07:43:30.892187700Z
5123b1c.1f4c: ChangeTime: 2018-12-03T14:36:38.382681600Z
5133b1c.1f4c: FileAttributes: 0x20
5143b1c.1f4c: Size: 0xab868
5153b1c.1f4c: NT Headers: 0xe8
5163b1c.1f4c: Timestamp: 0x309fae94
5173b1c.1f4c: Machine: 0x8664 - amd64
5183b1c.1f4c: Timestamp: 0x309fae94
5193b1c.1f4c: Image Version: 10.0
5203b1c.1f4c: SizeOfImage: 0xae000 (712704)
5213b1c.1f4c: Resource Dir: 0xac000 LB 0x520
5223b1c.1f4c: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
5233b1c.1f4c: [Raw version resource data: 0xac0b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
5243b1c.1f4c: ProductName: Microsoft® Windows® Operating System
5253b1c.1f4c: ProductVersion: 10.0.16299.431
5263b1c.1f4c: FileVersion: 10.0.16299.431 (WinBuild.160101.0800)
5273b1c.1f4c: FileDescription: Windows NT BASE API Client DLL
5283b1c.1f4c: \SystemRoot\System32\KernelBase.dll:
5293b1c.1f4c: CreationTime: 2018-08-23T12:40:49.613323600Z
5303b1c.1f4c: LastWriteTime: 2018-08-23T12:40:49.785199600Z
5313b1c.1f4c: ChangeTime: 2018-12-03T14:36:44.245132100Z
5323b1c.1f4c: FileAttributes: 0x20
5333b1c.1f4c: Size: 0x266208
5343b1c.1f4c: NT Headers: 0xf0
5353b1c.1f4c: Timestamp: 0x2ef5f131
5363b1c.1f4c: Machine: 0x8664 - amd64
5373b1c.1f4c: Timestamp: 0x2ef5f131
5383b1c.1f4c: Image Version: 10.0
5393b1c.1f4c: SizeOfImage: 0x266000 (2514944)
5403b1c.1f4c: Resource Dir: 0x245000 LB 0x548
5413b1c.1f4c: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
5423b1c.1f4c: [Raw version resource data: 0x2450b0 LB 0x3bc, codepage 0x0 (reserved 0x0)]
5433b1c.1f4c: ProductName: Microsoft® Windows® Operating System
5443b1c.1f4c: ProductVersion: 10.0.16299.611
5453b1c.1f4c: FileVersion: 10.0.16299.611 (WinBuild.160101.0800)
5463b1c.1f4c: FileDescription: Windows NT BASE API Client DLL
5473b1c.1f4c: \SystemRoot\System32\apisetschema.dll:
5483b1c.1f4c: CreationTime: 2018-08-23T12:40:50.535216500Z
5493b1c.1f4c: LastWriteTime: 2018-08-23T12:40:50.535216500Z
5503b1c.1f4c: ChangeTime: 2018-12-03T14:23:33.529845900Z
5513b1c.1f4c: FileAttributes: 0x20
5523b1c.1f4c: Size: 0x1b3b8
5533b1c.1f4c: NT Headers: 0xc8
5543b1c.1f4c: Timestamp: 0x35fd1902
5553b1c.1f4c: Machine: 0x8664 - amd64
5563b1c.1f4c: Timestamp: 0x35fd1902
5573b1c.1f4c: Image Version: 10.0
5583b1c.1f4c: SizeOfImage: 0x1c000 (114688)
5593b1c.1f4c: Resource Dir: 0x1b000 LB 0x408
5603b1c.1f4c: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
5613b1c.1f4c: [Raw version resource data: 0x1b060 LB 0x3a8, codepage 0x0 (reserved 0x0)]
5623b1c.1f4c: ProductName: Microsoft® Windows® Operating System
5633b1c.1f4c: ProductVersion: 10.0.16299.579
5643b1c.1f4c: FileVersion: 10.0.16299.579 (WinBuild.160101.0800)
5653b1c.1f4c: FileDescription: ApiSet Schema DLL
5663b1c.1f4c: NtOpenDirectoryObject failed on \Driver: 0xc0000022
5673b1c.1f4c: supR3HardenedWinFindAdversaries: 0x3
5683b1c.1f4c: \SystemRoot\System32\drivers\SysPlant.sys:
5693b1c.1f4c: CreationTime: 2018-12-03T15:01:59.370381600Z
5703b1c.1f4c: LastWriteTime: 2018-12-03T15:01:59.370381600Z
5713b1c.1f4c: ChangeTime: 2018-12-03T15:01:59.370381600Z
5723b1c.1f4c: FileAttributes: 0x20
5733b1c.1f4c: Size: 0x30548
5743b1c.1f4c: NT Headers: 0xf0
5753b1c.1f4c: Timestamp: 0x5a1adc8a
5763b1c.1f4c: Machine: 0x8664 - amd64
5773b1c.1f4c: Timestamp: 0x5a1adc8a
5783b1c.1f4c: Image Version: 5.0
5793b1c.1f4c: SizeOfImage: 0x31000 (200704)
5803b1c.1f4c: Resource Dir: 0x2f000 LB 0x49c
5813b1c.1f4c: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
5823b1c.1f4c: [Raw version resource data: 0x2f0b8 LB 0x3e4, codepage 0x4e4 (reserved 0x0)]
5833b1c.1f4c: ProductName: Symantec CMC Firewall
5843b1c.1f4c: ProductVersion: 14.0.3856.1100
5853b1c.1f4c: FileVersion: 14.0.3856.1100
5863b1c.1f4c: FileDescription: Symantec CMC Firewall SysPlant
5873b1c.1f4c: \SystemRoot\System32\sysfer.dll:
5883b1c.1f4c: CreationTime: 2018-12-03T15:01:59.354755000Z
5893b1c.1f4c: LastWriteTime: 2018-12-03T15:01:59.370381600Z
5903b1c.1f4c: ChangeTime: 2018-12-03T15:01:59.370381600Z
5913b1c.1f4c: FileAttributes: 0x20
5923b1c.1f4c: Size: 0x7cee8
5933b1c.1f4c: NT Headers: 0xf8
5943b1c.1f4c: Timestamp: 0x5a1adc96
5953b1c.1f4c: Machine: 0x8664 - amd64
5963b1c.1f4c: Timestamp: 0x5a1adc96
5973b1c.1f4c: Image Version: 0.0
5983b1c.1f4c: SizeOfImage: 0x95000 (610304)
5993b1c.1f4c: Resource Dir: 0x91000 LB 0x490
6003b1c.1f4c: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
6013b1c.1f4c: [Raw version resource data: 0x910b8 LB 0x3d8, codepage 0x4e4 (reserved 0x0)]
6023b1c.1f4c: ProductName: Symantec CMC Firewall
6033b1c.1f4c: ProductVersion: 14.0.3856.1100
6043b1c.1f4c: FileVersion: 14.0.3856.1100
6053b1c.1f4c: FileDescription: Symantec CMC Firewall sysfer
6063b1c.1f4c: \SystemRoot\System32\drivers\symevent64x86.sys:
6073b1c.1f4c: CreationTime: 2018-12-03T15:04:49.063012000Z
6083b1c.1f4c: LastWriteTime: 2018-12-03T15:04:48.761985700Z
6093b1c.1f4c: ChangeTime: 2018-12-03T15:04:48.761985700Z
6103b1c.1f4c: FileAttributes: 0x20
6113b1c.1f4c: Size: 0x19098
6123b1c.1f4c: NT Headers: 0xe0
6133b1c.1f4c: Timestamp: 0x59fcb42b
6143b1c.1f4c: Machine: 0x8664 - amd64
6153b1c.1f4c: Timestamp: 0x59fcb42b
6163b1c.1f4c: Image Version: 6.2
6173b1c.1f4c: SizeOfImage: 0x23000 (143360)
6183b1c.1f4c: Resource Dir: 0x21000 LB 0x3c8
6193b1c.1f4c: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
6203b1c.1f4c: [Raw version resource data: 0x210b8 LB 0x310, codepage 0x4e4 (reserved 0x0)]
6213b1c.1f4c: ProductName: SYMEVENT
6223b1c.1f4c: ProductVersion: 14.0.5.9
6233b1c.1f4c: FileVersion: 14.0.5.9
6243b1c.1f4c: FileDescription: Symantec Event Library
6253b1c.1f4c: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
6263b1c.1f4c: Calling main()
6273b1c.1f4c: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2
6283b1c.1f4c: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
6293b1c.1f4c: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
6303b1c.1f4c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe)
6313b1c.1f4c: SUPR3HardenedMain: Respawn #2
6323b1c.1f4c: Error (rc=-5640):
6333b1c.1f4c: More than one thread in process
6343b1c.1f4c: Error -5640 in supR3HardenedWinReSpawn! (enmWhat=1)
6353b1c.1f4c: More than one thread in process
6363b1c.1f4c: supR3HardNtEnableThreadCreation:
6373b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'opengl32.dll'.
6383b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
6393b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'msvcp100.dll'.
6403b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcr100.dll'.
6413b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'.
6423b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'qt5guivbox.dll'.
6433b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'qt5widgetsvbox.dll'.
6443b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'qt5printsupportvbox.dll'.
6453b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'qt5openglvbox.dll'.
6463b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'user32.dll'.
6473b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'advapi32.dll'.
6483b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'shell32.dll'.
6493b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'ole32.dll'.
6503b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'oleaut32.dll'.
6513b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #15 'winmm.dll'.
6523b1c.1f4c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.dll)
6533b1c.1f4c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.dll
6543b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
6553b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume3\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
6563b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'winmmbase.dll'.
6573b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'msvcrt.dll'.
6583b1c.1f4c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\winmm.dll)
6593b1c.1f4c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\winmm.dll
6603b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
6613b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
6623b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
6633b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'combase.dll'.
6643b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #23 'rpcrt4.dll'.
6653b1c.1f4c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\oleaut32.dll)
6663b1c.1f4c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\oleaut32.dll
6673b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
6683b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
6693b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #22 'rpcrt4.dll'.
6703b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #46 'gdi32.dll'.
6713b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #47 'user32.dll'.
6723b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #48 'combase.dll'.
6733b1c.1f4c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ole32.dll)
6743b1c.1f4c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ole32.dll
6753b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
6763b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
6773b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll [lacks WinVerifyTrust]
6783b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
6793b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
6803b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
6813b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
6823b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
6833b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
6843b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5openglvbox.dll'...
6853b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5openglvbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5openglvbox.dll' [rcNtRedir=0xc0150008]
6863b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'qt5widgetsvbox.dll'.
6873b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'qt5guivbox.dll'.
6883b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5corevbox.dll'.
6893b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcr100.dll'.
6903b1c.1f4c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll)
6913b1c.1f4c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll
6923b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5printsupportvbox.dll'...
6933b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5printsupportvbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5printsupportvbox.dll' [rcNtRedir=0xc0150008]
6943b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
6953b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
6963b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5widgetsvbox.dll'.
6973b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5guivbox.dll'.
6983b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'.
6993b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'winspool.drv'.
7003b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'comdlg32.dll'.
7013b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcr100.dll'.
7023b1c.1f4c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll)
7033b1c.1f4c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll
7043b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
7053b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
7063b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
7073b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
7083b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5guivbox.dll'.
7093b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5corevbox.dll'.
7103b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'shell32.dll'.
7113b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
7123b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
7133b1c.1f4c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll)
7143b1c.1f4c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll
7153b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
7163b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
7173b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'ole32.dll'.
7183b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'opengl32.dll'.
7193b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
7203b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
7213b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'.
7223b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
7233b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
7243b1c.1f4c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll)
7253b1c.1f4c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
7263b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
7273b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
7283b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
7293b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'shell32.dll'.
7303b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ole32.dll'.
7313b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'advapi32.dll'.
7323b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ws2_32.dll'.
7333b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'mpr.dll'.
7343b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcp100.dll'.
7353b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'msvcr100.dll'.
7363b1c.1f4c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll)
7373b1c.1f4c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
7383b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
7393b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
7403b1c.1f4c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll)
7413b1c.1f4c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll
7423b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
7433b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
7443b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
7453b1c.1f4c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll)
7463b1c.1f4c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll
7473b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
7483b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
7493b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
7503b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
7513b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ws2_32.dll'.
7523b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'rpcrt4.dll'.
7533b1c.1f4c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll)
7543b1c.1f4c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
7553b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
7563b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume3\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
7573b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
7583b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'advapi32.dll'.
7593b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
7603b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'gdi32.dll'.
7613b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'glu32.dll'.
7623b1c.1f4c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\opengl32.dll)
7633b1c.1f4c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\opengl32.dll
7643b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'glu32.dll'...
7653b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'glu32.dll' -> '\Device\HarddiskVolume3\Windows\System32\glu32.dll' [rcNtRedir=0xc0150008]
7663b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
7673b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
7683b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'opengl32.dll'.
7693b1c.1f4c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\glu32.dll)
7703b1c.1f4c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\glu32.dll
7713b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
7723b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
7733b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
7743b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
7753b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
7763b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
7773b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
7783b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
7793b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
7803b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
7813b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
7823b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
7833b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
7843b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
7853b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
7863b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
7873b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
7883b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ws2_32.dll [lacks WinVerifyTrust]
7893b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
7903b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
7913b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
7923b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
7933b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
7943b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
7953b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
7963b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
7973b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
7983b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
7993b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
8003b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
8013b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
8023b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
8033b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
8043b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mpr.dll'...
8053b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'mpr.dll' -> '\Device\HarddiskVolume3\Windows\System32\mpr.dll' [rcNtRedir=0xc0150008]
8063b1c.1f4c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\mpr.dll)
8073b1c.1f4c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\mpr.dll
8083b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
8093b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
8103b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ws2_32.dll [lacks WinVerifyTrust]
8113b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
8123b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
8133b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
8143b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
8153b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
8163b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll [lacks WinVerifyTrust]
8173b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
8183b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
8193b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll [lacks WinVerifyTrust]
8203b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
8213b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
8223b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
8233b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
8243b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
8253b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
8263b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
8273b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
8283b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
8293b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
8303b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
8313b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
8323b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
8333b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
8343b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
8353b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
8363b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
8373b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
8383b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
8393b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume3\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
8403b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
8413b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
8423b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
8433b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll [lacks WinVerifyTrust]
8443b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
8453b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
8463b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
8473b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
8483b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
8493b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
8503b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
8513b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
8523b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll [lacks WinVerifyTrust]
8533b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
8543b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
8553b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
8563b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
8573b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
8583b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
8593b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
8603b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
8613b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
8623b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
8633b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
8643b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
8653b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
8663b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
8673b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
8683b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'comdlg32.dll'...
8693b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'comdlg32.dll' -> '\Device\HarddiskVolume3\Windows\System32\comdlg32.dll' [rcNtRedir=0xc0150008]
8703b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
8713b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'user32.dll'.
8723b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #37 'shlwapi.dll'.
8733b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #38 'gdi32.dll'.
8743b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #39 'comctl32.dll'.
8753b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #40 'shell32.dll'.
8763b1c.1f4c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\comdlg32.dll)
8773b1c.1f4c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\comdlg32.dll
8783b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winspool.drv'...
8793b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'winspool.drv' -> '\Device\HarddiskVolume3\Windows\System32\winspool.drv' [rcNtRedir=0xc0150008]
8803b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
8813b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #25 'iphlpapi.dll'.
8823b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'bcrypt.dll'.
8833b1c.1f4c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\winspool.drv)
8843b1c.1f4c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\winspool.drv
8853b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
8863b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
8873b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
8883b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
8893b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
8903b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
8913b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
8923b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
8933b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
8943b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
8953b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
8963b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
8973b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
8983b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
8993b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
9003b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
9013b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
9023b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
9033b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
9043b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
9053b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
9063b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
9073b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
9083b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
9093b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
9103b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
9113b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
9123b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
9133b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
9143b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [lacks WinVerifyTrust]
9153b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
9163b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
9173b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
9183b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
9193b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
9203b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
9213b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
9223b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
9233b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
9243b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
9253b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
9263b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
9273b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
9283b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
9293b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [lacks WinVerifyTrust]
9303b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
9313b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
9323b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust]
9333b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
9343b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
9353b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
9363b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmmbase.dll'...
9373b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmmbase.dll' -> '\Device\HarddiskVolume3\Windows\System32\winmmbase.dll' [rcNtRedir=0xc0150008]
9383b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
9393b1c.1f4c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\winmmbase.dll)
9403b1c.1f4c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\winmmbase.dll
9413b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
9423b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
9433b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
9443b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcrypt.dll'...
9453b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcrypt.dll' -> '\Device\HarddiskVolume3\Windows\System32\bcrypt.dll' [rcNtRedir=0xc0150008]
9463b1c.1f4c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\bcrypt.dll)
9473b1c.1f4c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\bcrypt.dll
9483b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'iphlpapi.dll'...
9493b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'iphlpapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\iphlpapi.dll' [rcNtRedir=0xc0150008]
9503b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL [lacks WinVerifyTrust]
9513b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
9523b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
9533b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
9543b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
9553b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
9563b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll [lacks WinVerifyTrust]
9573b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'comctl32.dll'...
9583b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'comctl32.dll' -> '\Device\HarddiskVolume3\Windows\System32\comctl32.dll' [rcNtRedir=0x0]
9593b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'advapi32.dll'.
9603b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
9613b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
9623b1c.1f4c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\comctl32.dll)
9633b1c.1f4c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\comctl32.dll
9643b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
9653b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
9663b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
9673b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shlwapi.dll'...
9683b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'shlwapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\shlwapi.dll' [rcNtRedir=0xc0150008]
9693b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shlwapi.dll [lacks WinVerifyTrust]
9703b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
9713b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
9723b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
9733b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
9743b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
9753b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
9763b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
9773b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume3\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
9783b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
9793b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
9803b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
9813b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
9823b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
9833b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
9843b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
9853b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
9863b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
9873b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
9883b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
9893b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
9903b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
9913b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
9923b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
9933b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
9943b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VirtualBox.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000a01:<flags> [calling]
9953b1c.1f4c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.dll [lacks WinVerifyTrust]
9963b1c.1f4c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
9973b1c.1f4c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
9983b1c.1f4c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
9993b1c.1f4c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
10003b1c.1f4c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
10013b1c.1f4c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
10023b1c.1f4c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
10033b1c.1f4c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll [lacks WinVerifyTrust]
10043b1c.1f4c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll [lacks WinVerifyTrust]
10053b1c.1f4c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll [lacks WinVerifyTrust]
10063b1c.1f4c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\glu32.dll [lacks WinVerifyTrust]
10073b1c.1f4c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\mpr.dll [lacks WinVerifyTrust]
10083b1c.1f4c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\winspool.drv [lacks WinVerifyTrust]
10093b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'advapi32.dll'.
10103b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
10113b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
10123b1c.1f4c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.16299.785_none_887e2b084ab6e650\comctl32.dll)
10133b1c.1f4c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.16299.785_none_887e2b084ab6e650\comctl32.dll
10143b1c.1f4c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmmbase.dll [lacks WinVerifyTrust]
10153b1c.1f4c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
10163b1c.1f4c: supR3HardenedDllNotificationCallback: load 00007ff98db90000 LB 0x0002c000 C:\WINDOWS\SYSTEM32\GLU32.dll [fFlags=0x0]
10173b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\glu32.dll [lacks WinVerifyTrust]
10183b1c.1f4c: supR3HardenedDllNotificationCallback: load 00007ff98d290000 LB 0x0011e000 C:\WINDOWS\SYSTEM32\OPENGL32.dll [fFlags=0x0]
10193b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
10203b1c.1f4c: supR3HardenedDllNotificationCallback: load 0000000069a50000 LB 0x000d2000 C:\Program Files\Oracle\VirtualBox\MSVCR100.dll [fFlags=0x0]
10213b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
10223b1c.1f4c: supR3HardenedDllNotificationCallback: load 0000000069b30000 LB 0x00098000 C:\Program Files\Oracle\VirtualBox\MSVCP100.dll [fFlags=0x0]
10233b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
10243b1c.1f4c: supR3HardenedDllNotificationCallback: load 00007ff951280000 LB 0x00595000 C:\Program Files\Oracle\VirtualBox\VBoxRT.dll [fFlags=0x0]
10253b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
10263b1c.1f4c: supR3HardenedDllNotificationCallback: load 00007ff9b35b0000 LB 0x00149000 C:\WINDOWS\System32\ole32.dll [fFlags=0x0]
10273b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll [lacks WinVerifyTrust]
10283b1c.1f4c: supR3HardenedDllNotificationCallback: load 00007ff9a0c70000 LB 0x0001b000 C:\WINDOWS\SYSTEM32\MPR.dll [fFlags=0x0]
10293b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\mpr.dll [lacks WinVerifyTrust]
10303b1c.1f4c: supR3HardenedDllNotificationCallback: load 00000000681d0000 LB 0x00565000 C:\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [fFlags=0x0]
10313b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
10323b1c.1f4c: supR3HardenedDllNotificationCallback: load 00007ff950270000 LB 0x005f7000 C:\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [fFlags=0x0]
10333b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
10343b1c.1f4c: supR3HardenedDllNotificationCallback: load 0000000068740000 LB 0x00561000 C:\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [fFlags=0x0]
10353b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
10363b1c.1f4c: supR3HardenedDllNotificationCallback: load 00007ff9b02e0000 LB 0x00025000 C:\WINDOWS\SYSTEM32\bcrypt.dll [fFlags=0x0]
10373b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
10383b1c.1f4c: supR3HardenedDllNotificationCallback: load 00007ff9aaaf0000 LB 0x00086000 C:\WINDOWS\SYSTEM32\WINSPOOL.DRV [fFlags=0x0]
10393b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\winspool.drv [lacks WinVerifyTrust]
10403b1c.1f4c: supR3HardenedDllNotificationCallback: load 00007ff992030000 LB 0x000a6000 C:\WINDOWS\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.16299.785_none_887e2b084ab6e650\COMCTL32.dll [fFlags=0x0]
10413b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.16299.785_none_887e2b084ab6e650\comctl32.dll [lacks WinVerifyTrust]
10423b1c.1f4c: supR3HardenedDllNotificationCallback: load 00007ff9b2fc0000 LB 0x0010a000 C:\WINDOWS\System32\COMDLG32.dll [fFlags=0x0]
10433b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\comdlg32.dll [lacks WinVerifyTrust]
10443b1c.1f4c: supR3HardenedDllNotificationCallback: load 00007ff984990000 LB 0x00051000 C:\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll [fFlags=0x0]
10453b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll [lacks WinVerifyTrust]
10463b1c.1f4c: supR3HardenedDllNotificationCallback: load 000000006a780000 LB 0x00054000 C:\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll [fFlags=0x0]
10473b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll [lacks WinVerifyTrust]
10483b1c.1f4c: supR3HardenedDllNotificationCallback: load 00007ff9b39c0000 LB 0x000c5000 C:\WINDOWS\System32\OLEAUT32.dll [fFlags=0x0]
10493b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
10503b1c.1f4c: supR3HardenedDllNotificationCallback: load 00007ff9aa7b0000 LB 0x0002a000 C:\WINDOWS\SYSTEM32\WINMMBASE.dll [fFlags=0x0]
10513b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmmbase.dll [lacks WinVerifyTrust]
10523b1c.1f4c: supR3HardenedDllNotificationCallback: load 00007ff9aaa00000 LB 0x00023000 C:\WINDOWS\SYSTEM32\WINMM.dll [fFlags=0x0]
10533b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll [lacks WinVerifyTrust]
10543b1c.1f4c: supR3HardenedDllNotificationCallback: load 00007ff950870000 LB 0x00a06000 C:\Program Files\Oracle\VirtualBox\VirtualBox.dll [fFlags=0x0]
10553b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.dll [lacks WinVerifyTrust]
10563b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
10573b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
10583b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
10593b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
10603b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
10613b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
10623b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
10633b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
10643b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
10653b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
10663b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
10673b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff951280000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10683b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
10693b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
10703b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff951280000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10713b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
10723b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
10733b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff951280000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10743b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
10753b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
10763b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff951280000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10773b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
10783b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
10793b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff951280000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10803b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
10813b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
10823b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff951280000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10833b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
10843b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff951280000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10853b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
10863b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff951280000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10873b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
10883b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff951280000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10893b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
10903b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff951280000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10913b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
10923b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff951280000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10933b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
10943b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff951280000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10953b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
10963b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff951280000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10973b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
10983b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
10993b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff951280000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11003b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
11013b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff951280000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11023b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
11033b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff951280000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11043b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
11053b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff951280000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11063b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
11073b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff951280000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11083b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
11093b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff951280000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11103b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
11113b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff951280000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11123b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
11133b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff951280000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11143b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
11153b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff951280000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11163b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
11173b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff951280000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11183b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
11193b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff951280000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11203b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
11213b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff951280000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11223b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
11233b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff951280000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11243b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
11253b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff951280000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11263b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
11273b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff951280000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11283b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
11293b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff951280000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11303b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
11313b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
11323b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff951280000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11333b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
11343b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff951280000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11353b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
11363b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff951280000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11373b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\imm32.dll [lacks WinVerifyTrust]
11383b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\imm32.dll (Input=imm32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
11393b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9b4430000 'C:\WINDOWS\System32\imm32.dll'
11403b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
11413b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\ADVAPI32.DLL (Input=ADVAPI32.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
11423b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9b3370000 'C:\WINDOWS\System32\ADVAPI32.DLL'
11433b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'bcryptprimitives.dll'.
11443b1c.1f4c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\cryptbase.dll)
11453b1c.1f4c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\cryptbase.dll
11463b1c.1f4c: supR3HardenedDllNotificationCallback: load 00007ff9b01f0000 LB 0x0000b000 C:\WINDOWS\SYSTEM32\CRYPTBASE.DLL [fFlags=0x0]
11473b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\cryptbase.dll [lacks WinVerifyTrust]
11483b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff950870000 'C:\Program Files\Oracle\VirtualBox\VirtualBox.dll'
11493b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
11503b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'...
11513b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008]
11523b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust]
11533b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\kernel32.dll (Input=kernel32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
11543b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9b3a90000 'C:\WINDOWS\System32\kernel32.dll'
11553b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
11563b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'ole32.dll'.
11573b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
11583b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'imm32.dll'.
11593b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'winmm.dll'.
11603b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'oleaut32.dll'.
11613b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'shell32.dll'.
11623b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'advapi32.dll'.
11633b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'qt5guivbox.dll'.
11643b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'qt5corevbox.dll'.
11653b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'msvcr100.dll'.
11663b1c.1f4c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\platforms\qwindows.dll)
11673b1c.1f4c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\platforms\qwindows.dll
11683b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
11693b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
11703b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
11713b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
11723b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
11733b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
11743b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
11753b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
11763b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
11773b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
11783b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
11793b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
11803b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
11813b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
11823b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll [lacks WinVerifyTrust]
11833b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
11843b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
11853b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
11863b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
11873b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume3\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
11883b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll [lacks WinVerifyTrust]
11893b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'...
11903b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume3\Windows\System32\imm32.dll' [rcNtRedir=0xc0150008]
11913b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\imm32.dll [lacks WinVerifyTrust]
11923b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
11933b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
11943b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
11953b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
11963b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
11973b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll [lacks WinVerifyTrust]
11983b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
11993b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
12003b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
12013b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
12023b1c.1f4c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\platforms\qwindows.dll [lacks WinVerifyTrust]
12033b1c.1f4c: supR3HardenedDllNotificationCallback: load 00007ff984810000 LB 0x0012e000 C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll [fFlags=0x0]
12043b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\platforms\qwindows.dll [lacks WinVerifyTrust]
12053b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff984810000 'C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll'
12063b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
12073b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #33 'gdi32.dll'.
12083b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'user32.dll'.
12093b1c.1f4c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\uxtheme.dll)
12103b1c.1f4c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\uxtheme.dll
12113b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
12123b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
12133b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
12143b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
12153b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
12163b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
12173b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
12183b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
12193b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
12203b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
12213b1c.1f4c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\uxtheme.dll [lacks WinVerifyTrust]
12223b1c.1f4c: supR3HardenedDllNotificationCallback: load 00007ff9aed70000 LB 0x00095000 C:\WINDOWS\system32\uxtheme.dll [fFlags=0x0]
12233b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\uxtheme.dll [lacks WinVerifyTrust]
12243b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9aed70000 'C:\WINDOWS\system32\uxtheme.dll'
12253b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
12263b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9b42a0000 'C:\WINDOWS\system32\user32.dll'
12273b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll [lacks WinVerifyTrust]
12283b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
12293b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9b1b20000 'C:\WINDOWS\system32\shell32.dll'
12303b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\SHCore.dll [lacks WinVerifyTrust]
12313b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\SHCore.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
12323b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9b3480000 'C:\WINDOWS\system32\SHCore.dll'
12333b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: error opening 'C:\WINDOWS\system32\wintab32.dll': 126 (NtPath=\??\C:\WINDOWS\system32\wintab32.dll; Input=C:\WINDOWS\system32\wintab32.dll; rcNtGetDll=0x0
12343b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000034 'C:\WINDOWS\system32\wintab32.dll'
12353b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
12363b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #22 'win32u.dll'.
12373b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #23 'user32.dll'.
12383b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #24 'gdi32.dll'.
12393b1c.1f4c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\dwmapi.dll)
12403b1c.1f4c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\dwmapi.dll
12413b1c.1f4c: supR3HardenedDllNotificationCallback: load 00007ff9af050000 LB 0x0002a000 C:\WINDOWS\system32\dwmapi.dll [fFlags=0x0]
12423b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dwmapi.dll [lacks WinVerifyTrust]
12433b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll [lacks WinVerifyTrust]
12443b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
12453b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
12463b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
12473b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
12483b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
12493b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
12503b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
12513b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
12523b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [lacks WinVerifyTrust]
12533b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
12543b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
12553b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
12563b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\winmm.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
12573b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9aaa00000 'C:\WINDOWS\system32\winmm.dll'
12583b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll [lacks WinVerifyTrust]
12593b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\winmm.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
12603b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9aaa00000 'C:\WINDOWS\system32\winmm.dll'
12613b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll [lacks WinVerifyTrust]
12623b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
12633b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9b1b20000 'C:\WINDOWS\system32\shell32.dll'
12643b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\uxtheme.dll [lacks WinVerifyTrust]
12653b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
12663b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9aed70000 'C:\WINDOWS\system32\uxtheme.dll'
12673b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
12683b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\gdi32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
12693b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9b1960000 'C:\WINDOWS\system32\gdi32.dll'
12703b1c.1f4c: supR3HardenedDllNotificationCallback: load 00007ff9b3830000 LB 0x00167000 C:\WINDOWS\System32\MSCTF.dll [fFlags=0x0]
12713b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
12723b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #19 'oleaut32.dll'.
12733b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'user32.dll'.
12743b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #37 'gdi32.dll'.
12753b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #38 'imm32.dll'.
12763b1c.1f4c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\msctf.dll)
12773b1c.1f4c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msctf.dll
12783b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
12793b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'...
12803b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume3\Windows\System32\imm32.dll' [rcNtRedir=0xc0150008]
12813b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\imm32.dll [lacks WinVerifyTrust]
12823b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
12833b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
12843b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
12853b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
12863b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
12873b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
12883b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
12893b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
12903b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
12913b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
12923b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
12933b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
12943b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9b3710000 'C:\WINDOWS\System32\rpcrt4.dll'
12953b1c.1f4c: supR3HardenedDllNotificationCallback: load 00007ff9b3270000 LB 0x0009e000 C:\WINDOWS\System32\clbcatq.dll [fFlags=0x0]
12963b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
12973b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #28 'rpcrt4.dll'.
12983b1c.1f4c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\clbcatq.dll)
12993b1c.1f4c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\clbcatq.dll
13003b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
13013b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'shcore.dll'.
13023b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #28 'combase.dll'.
13033b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #31 'd3d11.dll'.
13043b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #32 'dcomp.dll'.
13053b1c.1f4c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\DataExchange.dll)
13063b1c.1f4c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\DataExchange.dll
13073b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dcomp.dll'...
13083b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'dcomp.dll' -> '\Device\HarddiskVolume3\Windows\System32\dcomp.dll' [rcNtRedir=0xc0150008]
13093b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'win32u.dll'.
13103b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'.
13113b1c.1f4c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\dcomp.dll)
13123b1c.1f4c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\dcomp.dll
13133b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'd3d11.dll'...
13143b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'd3d11.dll' -> '\Device\HarddiskVolume3\Windows\System32\d3d11.dll' [rcNtRedir=0xc0150008]
13153b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
13163b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'dxgi.dll'.
13173b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'win32u.dll'.
13183b1c.1f4c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\d3d11.dll)
13193b1c.1f4c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\d3d11.dll
13203b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
13213b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
13223b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [lacks WinVerifyTrust]
13233b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shcore.dll'...
13243b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'shcore.dll' -> '\Device\HarddiskVolume3\Windows\System32\shcore.dll' [rcNtRedir=0xc0150008]
13253b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\SHCore.dll [lacks WinVerifyTrust]
13263b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
13273b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
13283b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
13293b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
13303b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
13313b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
13323b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
13333b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
13343b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
13353b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
13363b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
13373b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [lacks WinVerifyTrust]
13383b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dxgi.dll'...
13393b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'dxgi.dll' -> '\Device\HarddiskVolume3\Windows\System32\dxgi.dll' [rcNtRedir=0xc0150008]
13403b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
13413b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'win32u.dll'.
13423b1c.1f4c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\dxgi.dll)
13433b1c.1f4c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\dxgi.dll
13443b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
13453b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
13463b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
13473b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
13483b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
13493b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
13503b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
13513b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
13523b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [lacks WinVerifyTrust]
13533b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
13543b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
13553b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [lacks WinVerifyTrust]
13563b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
13573b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
13583b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
13593b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\dataexchange.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
13603b1c.1f4c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\DataExchange.dll [lacks WinVerifyTrust]
13613b1c.1f4c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\d3d11.dll [lacks WinVerifyTrust]
13623b1c.1f4c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dcomp.dll [lacks WinVerifyTrust]
13633b1c.1f4c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dxgi.dll [lacks WinVerifyTrust]
13643b1c.1f4c: supR3HardenedDllNotificationCallback: load 00007ff9af420000 LB 0x000af000 C:\WINDOWS\system32\dxgi.dll [fFlags=0x0]
13653b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dxgi.dll [lacks WinVerifyTrust]
13663b1c.1f4c: supR3HardenedDllNotificationCallback: load 00007ff9ad8a0000 LB 0x002e2000 C:\WINDOWS\system32\d3d11.dll [fFlags=0x0]
13673b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\d3d11.dll [lacks WinVerifyTrust]
13683b1c.1f4c: supR3HardenedDllNotificationCallback: load 00007ff9adfb0000 LB 0x00142000 C:\WINDOWS\system32\dcomp.dll [fFlags=0x0]
13693b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dcomp.dll [lacks WinVerifyTrust]
13703b1c.1f4c: supR3HardenedDllNotificationCallback: load 00007ff98ea30000 LB 0x0004f000 C:\WINDOWS\system32\dataexchange.dll [fFlags=0x0]
13713b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\DataExchange.dll [lacks WinVerifyTrust]
13723b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
13733b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9b1960000 'C:\WINDOWS\System32\gdi32.dll'
13743b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff98ea30000 'C:\WINDOWS\system32\dataexchange.dll'
13753b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
13763b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'rmclient.dll'.
13773b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #30 'rpcrt4.dll'.
13783b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #32 'bcrypt.dll'.
13793b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #45 'combase.dll'.
13803b1c.1f4c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll)
13813b1c.1f4c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll
13823b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
13833b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'rpcrt4.dll'.
13843b1c.1f4c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\rmclient.dll)
13853b1c.1f4c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\rmclient.dll
13863b1c.1f4c: supR3HardenedDllNotificationCallback: load 00007ff9aee70000 LB 0x00020000 C:\WINDOWS\system32\RMCLIENT.dll [fFlags=0x0]
13873b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rmclient.dll [lacks WinVerifyTrust]
13883b1c.1f4c: supR3HardenedDllNotificationCallback: load 00007ff9aeed0000 LB 0x0017b000 C:\WINDOWS\system32\twinapi.appcore.dll [fFlags=0x0]
13893b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll [lacks WinVerifyTrust]
13903b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msctf.dll [lacks WinVerifyTrust]
13913b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
13923b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
13933b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
13943b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
13953b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
13963b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
13973b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
13983b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
13993b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [lacks WinVerifyTrust]
14003b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcrypt.dll'...
14013b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcrypt.dll' -> '\Device\HarddiskVolume3\Windows\System32\bcrypt.dll' [rcNtRedir=0xc0150008]
14023b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
14033b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
14043b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
14053b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
14063b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rmclient.dll'...
14073b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rmclient.dll' -> '\Device\HarddiskVolume3\Windows\System32\rmclient.dll' [rcNtRedir=0xc0150008]
14083b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rmclient.dll [lacks WinVerifyTrust]
14093b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
14103b1c.1f4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
14113b1c.1f4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
14123b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\MSCTF.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
14133b1c.1f4c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9b3830000 'C:\WINDOWS\System32\MSCTF.dll'
14143b1c.3b20: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
14153b1c.3b20: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'rpcrt4.dll'.
14163b1c.3b20: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #32 'devobj.dll'.
14173b1c.3b20: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #33 'propsys.dll'.
14183b1c.3b20: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll)
14193b1c.3b20: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll
14203b1c.3b20: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #16 'cfgmgr32.dll'.
14213b1c.3b20: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\devobj.dll)
14223b1c.3b20: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\devobj.dll
14233b1c.3b20: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
14243b1c.3b20: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #15 'oleaut32.dll'.
14253b1c.3b20: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #31 'rpcrt4.dll'.
14263b1c.3b20: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\propsys.dll)
14273b1c.3b20: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\propsys.dll
14283b1c.3b20: supR3HardenedDllNotificationCallback: load 00007ff9b0400000 LB 0x00027000 C:\WINDOWS\SYSTEM32\DEVOBJ.dll [fFlags=0x0]
14293b1c.3b20: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\devobj.dll [lacks WinVerifyTrust]
14303b1c.3b20: supR3HardenedDllNotificationCallback: load 00007ff9abf00000 LB 0x001b1000 C:\WINDOWS\SYSTEM32\PROPSYS.dll [fFlags=0x0]
14313b1c.3b20: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\propsys.dll [lacks WinVerifyTrust]
14323b1c.3b20: supR3HardenedDllNotificationCallback: load 00007ff9a97e0000 LB 0x0006f000 C:\WINDOWS\SYSTEM32\MMDevAPI.DLL [fFlags=0x0]
14333b1c.3b20: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
14343b1c.3b20: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
14353b1c.3b20: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'mmdevapi.dll'.
14363b1c.3b20: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27 'ksuser.dll'.
14373b1c.3b20: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #28 'avrt.dll'.
14383b1c.3b20: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\wdmaud.drv)
14393b1c.3b20: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\wdmaud.drv
14403b1c.3b20: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'avrt.dll'...
14413b1c.3b20: supR3HardenedWinVerifyCacheProcessImportTodos: 'avrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\avrt.dll' [rcNtRedir=0xc0150008]
14423b1c.3b20: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\avrt.dll)
14433b1c.3b20: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\avrt.dll
14443b1c.3b20: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ksuser.dll'...
14453b1c.3b20: supR3HardenedWinVerifyCacheProcessImportTodos: 'ksuser.dll' -> '\Device\HarddiskVolume3\Windows\System32\ksuser.dll' [rcNtRedir=0xc0150008]
14463b1c.3b20: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
14473b1c.3b20: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ksuser.dll)
14483b1c.3b20: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ksuser.dll
14493b1c.3b20: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mmdevapi.dll'...
14503b1c.3b20: supR3HardenedWinVerifyCacheProcessImportTodos: 'mmdevapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\mmdevapi.dll' [rcNtRedir=0xc0150008]
14513b1c.3b20: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
14523b1c.3b20: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
14533b1c.3b20: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
14543b1c.3b20: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
14553b1c.3b20: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
14563b1c.3b20: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
14573b1c.3b20: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
14583b1c.3b20: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
14593b1c.3b20: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
14603b1c.3b20: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
14613b1c.3b20: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
14623b1c.3b20: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
14633b1c.3b20: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
14643b1c.3b20: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'cfgmgr32.dll'...
14653b1c.3b20: supR3HardenedWinVerifyCacheProcessImportTodos: 'cfgmgr32.dll' -> '\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll' [rcNtRedir=0xc0150008]
14663b1c.3b20: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll [lacks WinVerifyTrust]
14673b1c.3b20: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'propsys.dll'...
14683b1c.3b20: supR3HardenedWinVerifyCacheProcessImportTodos: 'propsys.dll' -> '\Device\HarddiskVolume3\Windows\System32\propsys.dll' [rcNtRedir=0xc0150008]
14693b1c.3b20: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\propsys.dll [lacks WinVerifyTrust]
14703b1c.3b20: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'devobj.dll'...
14713b1c.3b20: supR3HardenedWinVerifyCacheProcessImportTodos: 'devobj.dll' -> '\Device\HarddiskVolume3\Windows\System32\devobj.dll' [rcNtRedir=0xc0150008]
14723b1c.3b20: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\devobj.dll [lacks WinVerifyTrust]
14733b1c.3b20: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
14743b1c.3b20: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
14753b1c.3b20: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
14763b1c.3b20: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
14773b1c.3b20: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
14783b1c.3b20: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
14793b1c.3b20: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
14803b1c.3b20: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
14813b1c.3b20: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
14823b1c.3b20: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
14833b1c.3b20: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
14843b1c.3b20: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ksuser.dll [lacks WinVerifyTrust]
14853b1c.3b20: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\avrt.dll [lacks WinVerifyTrust]
14863b1c.3b20: supR3HardenedDllNotificationCallback: load 00007ff9acc30000 LB 0x00009000 C:\WINDOWS\SYSTEM32\ksuser.dll [fFlags=0x0]
14873b1c.3b20: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ksuser.dll [lacks WinVerifyTrust]
14883b1c.3b20: supR3HardenedDllNotificationCallback: load 00007ff9ab3f0000 LB 0x0000a000 C:\WINDOWS\SYSTEM32\AVRT.dll [fFlags=0x0]
14893b1c.3b20: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\avrt.dll [lacks WinVerifyTrust]
14903b1c.3b20: supR3HardenedDllNotificationCallback: load 00007ff999370000 LB 0x00042000 C:\WINDOWS\System32\wdmaud.drv [fFlags=0x0]
14913b1c.3b20: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
14923b1c.3b20: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff999370000 'C:\WINDOWS\System32\wdmaud.drv'
14933b1c.3b20: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
14943b1c.3b20: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
14953b1c.3b20: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff999370000 'C:\WINDOWS\System32\wdmaud.drv'
14963b1c.3b20: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
14973b1c.3b20: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\MMDEVAPI.DLL (Input=MMDEVAPI.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
14983b1c.3b20: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9a97e0000 'C:\WINDOWS\System32\MMDEVAPI.DLL'
14993b1c.3b20: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
15003b1c.3b20: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
15013b1c.3b20: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff999370000 'C:\WINDOWS\System32\wdmaud.drv'
15023b1c.3b20: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
15033b1c.3b20: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
15043b1c.3b20: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff999370000 'C:\WINDOWS\System32\wdmaud.drv'
15053b1c.3b20: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
15063b1c.3b20: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
15073b1c.3b20: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff999370000 'C:\WINDOWS\System32\wdmaud.drv'
15083b1c.3b20: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
15093b1c.3b20: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'rpcrt4.dll'.
15103b1c.3b20: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'oleaut32.dll'.
15113b1c.3b20: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #55 'mmdevapi.dll'.
15123b1c.3b20: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #56 'avrt.dll'.
15133b1c.3b20: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\AudioSes.dll)
15143b1c.3b20: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\AudioSes.dll
15153b1c.3b20: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'avrt.dll'...
15163b1c.3b20: supR3HardenedWinVerifyCacheProcessImportTodos: 'avrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\avrt.dll' [rcNtRedir=0xc0150008]
15173b1c.3b20: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\avrt.dll [lacks WinVerifyTrust]
15183b1c.3b20: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mmdevapi.dll'...
15193b1c.3b20: supR3HardenedWinVerifyCacheProcessImportTodos: 'mmdevapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\mmdevapi.dll' [rcNtRedir=0xc0150008]
15203b1c.3b20: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
15213b1c.3b20: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
15223b1c.3b20: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
15233b1c.3b20: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
15243b1c.3b20: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
15253b1c.3b20: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
15263b1c.3b20: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
15273b1c.3b20: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
15283b1c.3b20: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
15293b1c.3b20: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust]
15303b1c.3b20: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\AUDIOSES.DLL (Input=AUDIOSES.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
15313b1c.3b20: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\AudioSes.dll [lacks WinVerifyTrust]
15323b1c.3b20: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'combase.dll'.
15333b1c.3b20: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #21 'rpcrt4.dll'.
15343b1c.3b20: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #28 'bcryptprimitives.dll'.
15353b1c.3b20: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\WinTypes.dll)
15363b1c.3b20: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\WinTypes.dll
15373b1c.3b20: supR3HardenedDllNotificationCallback: load 00007ff9aca40000 LB 0x00136000 C:\WINDOWS\SYSTEM32\wintypes.dll [fFlags=0x0]
15383b1c.3b20: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\WinTypes.dll [lacks WinVerifyTrust]
15393b1c.3b20: supR3HardenedDllNotificationCallback: load 00007ff98edc0000 LB 0x00122000 C:\WINDOWS\System32\AUDIOSES.DLL [fFlags=0x0]
15403b1c.3b20: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\AudioSes.dll [lacks WinVerifyTrust]
15413b1c.3b20: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff98edc0000 'C:\WINDOWS\System32\AUDIOSES.DLL'
15423b1c.3b20: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
15433b1c.3b20: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'...
15443b1c.3b20: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008]
15453b1c.3b20: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust]
15463b1c.3b20: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
15473b1c.3b20: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
15483b1c.3b20: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
15493b1c.3b20: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
15503b1c.3b20: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
15513b1c.3b20: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [lacks WinVerifyTrust]
15523b1c.3b20: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
15533b1c.3b20: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff999370000 'C:\WINDOWS\System32\wdmaud.drv'
15543b1c.3b20: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
15553b1c.3b20: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
15563b1c.3b20: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff999370000 'C:\WINDOWS\System32\wdmaud.drv'
15573b1c.3b20: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
15583b1c.3b20: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff999370000 'C:\WINDOWS\System32\wdmaud.drv'
15593b1c.3b20: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
15603b1c.3b20: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'mmdevapi.dll'.
15613b1c.3b20: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'msacm32.dll'.
15623b1c.3b20: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'winmmbase.dll'.
15633b1c.3b20: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\msacm32.drv)
15643b1c.3b20: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msacm32.drv
15653b1c.3b20: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmmbase.dll'...
15663b1c.3b20: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmmbase.dll' -> '\Device\HarddiskVolume3\Windows\System32\winmmbase.dll' [rcNtRedir=0xc0150008]
15673b1c.3b20: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmmbase.dll [lacks WinVerifyTrust]
15683b1c.3b20: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msacm32.dll'...
15693b1c.3b20: supR3HardenedWinVerifyCacheProcessImportTodos: 'msacm32.dll' -> '\Device\HarddiskVolume3\Windows\System32\msacm32.dll' [rcNtRedir=0xc0150008]
15703b1c.3b20: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
15713b1c.3b20: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\msacm32.dll)
15723b1c.3b20: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msacm32.dll
15733b1c.3b20: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mmdevapi.dll'...
15743b1c.3b20: supR3HardenedWinVerifyCacheProcessImportTodos: 'mmdevapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\mmdevapi.dll' [rcNtRedir=0xc0150008]
15753b1c.3b20: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
15763b1c.3b20: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
15773b1c.3b20: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
15783b1c.3b20: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
15793b1c.3b20: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
15803b1c.3b20: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
15813b1c.3b20: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
15823b1c.3b20: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
15833b1c.3b20: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
15843b1c.3b20: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msacm32.dll [lacks WinVerifyTrust]
15853b1c.3b20: supR3HardenedDllNotificationCallback: load 00007ff999340000 LB 0x0001c000 C:\WINDOWS\SYSTEM32\MSACM32.dll [fFlags=0x0]
15863b1c.3b20: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msacm32.dll [lacks WinVerifyTrust]
15873b1c.3b20: supR3HardenedDllNotificationCallback: load 00007ff999360000 LB 0x0000c000 C:\WINDOWS\System32\msacm32.drv [fFlags=0x0]
15883b1c.3b20: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
15893b1c.3b20: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff999360000 'C:\WINDOWS\System32\msacm32.drv'
15903b1c.3b20: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
15913b1c.3b20: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
15923b1c.3b20: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff999360000 'C:\WINDOWS\System32\msacm32.drv'
15933b1c.3b20: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
15943b1c.3b20: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
15953b1c.3b20: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff999360000 'C:\WINDOWS\System32\msacm32.drv'
15963b1c.3b20: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
15973b1c.3b20: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
15983b1c.3b20: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff999360000 'C:\WINDOWS\System32\msacm32.drv'
15993b1c.3b20: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
16003b1c.3b20: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
16013b1c.3b20: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff999360000 'C:\WINDOWS\System32\msacm32.drv'
16023b1c.3b20: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
16033b1c.3b20: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
16043b1c.3b20: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff999360000 'C:\WINDOWS\System32\msacm32.drv'
16053b1c.3b20: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
16063b1c.3b20: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
16073b1c.3b20: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff999360000 'C:\WINDOWS\System32\msacm32.drv'
16083b1c.3b20: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
16093b1c.3b20: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff999360000 'C:\WINDOWS\System32\msacm32.drv'
16103b1c.3b20: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
16113b1c.3b20: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff999360000 'C:\WINDOWS\System32\msacm32.drv'
16123b1c.3b20: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
16133b1c.3b20: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff999360000 'C:\WINDOWS\System32\msacm32.drv'
16143b1c.3b20: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
16153b1c.3b20: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'winmm.dll'.
16163b1c.3b20: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\midimap.dll)
16173b1c.3b20: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\midimap.dll
16183b1c.3b20: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
16193b1c.3b20: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume3\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
16203b1c.3b20: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll [lacks WinVerifyTrust]
16213b1c.3b20: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
16223b1c.3b20: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
16233b1c.3b20: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
16243b1c.3b20: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
16253b1c.3b20: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\midimap.dll [lacks WinVerifyTrust]
16263b1c.3b20: supR3HardenedDllNotificationCallback: load 00007ff999330000 LB 0x0000a000 C:\WINDOWS\System32\midimap.dll [fFlags=0x0]
16273b1c.3b20: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\midimap.dll [lacks WinVerifyTrust]
16283b1c.3b20: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff999330000 'C:\WINDOWS\System32\midimap.dll'
16293b1c.3b20: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\midimap.dll [lacks WinVerifyTrust]
16303b1c.3b20: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
16313b1c.3b20: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff999330000 'C:\WINDOWS\System32\midimap.dll'
16323b1c.3b20: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\midimap.dll [lacks WinVerifyTrust]
16333b1c.3b20: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
16343b1c.3b20: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff999330000 'C:\WINDOWS\System32\midimap.dll'
16353b1c.3b20: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\midimap.dll [lacks WinVerifyTrust]
16363b1c.3b20: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
16373b1c.3b20: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff999330000 'C:\WINDOWS\System32\midimap.dll'
16383b1c.30d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
16393b1c.30d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\MMDevApi.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
16403b1c.30d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9a97e0000 'C:\WINDOWS\System32\MMDevApi.dll'
16413b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
16423b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #17 'coreuicomponents.dll'.
16433b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'coremessaging.dll'.
16443b1c.1f4c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\TextInputFramework.dll)
16453b1c.1f4c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\TextInputFramework.dll
16463b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
16473b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'coremessaging.dll'.
16483b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #48 'shcore.dll'.
16493b1c.1f4c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\CoreUIComponents.dll)
16503b1c.1f4c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\CoreUIComponents.dll
16513b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
16523b1c.1f4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #24 'rpcrt4.dll'.
16533b1c.1f4c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll)
16543b1c.1f4c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll
16553b1c.1f4c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ntmarta.dll)
16563b1c.1f4c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ntmarta.dll
16573b1c.1f4c: supR3HardenedDllNotificationCallback: load 00007ff9af6f0000 LB 0x00031000 C:\WINDOWS\SYSTEM32\ntmarta.dll [fFlags=0x0]
16583b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ntmarta.dll [lacks WinVerifyTrust]
16593b1c.1f4c: supR3HardenedDllNotificationCallback: load 00007ff9adb90000 LB 0x000dc000 C:\WINDOWS\System32\CoreMessaging.dll [fFlags=0x0]
16603b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll [lacks WinVerifyTrust]
16613b1c.1f4c: supR3HardenedDllNotificationCallback: load 00007ff9a9880000 LB 0x002ee000 C:\WINDOWS\System32\CoreUIComponents.dll [fFlags=0x0]
16623b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\CoreUIComponents.dll [lacks WinVerifyTrust]
16633b1c.1f4c: supR3HardenedDllNotificationCallback: load 00007ff9a9ee0000 LB 0x00098000 C:\WINDOWS\System32\TextInputFramework.dll [fFlags=0x0]
16643b1c.1f4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\TextInputFramework.dll [lacks WinVerifyTrust]
16653a2c.3a30: supR3HardNtChildWaitFor[1]: Quitting: ExitCode=0x1 (rcNtWait=0x0, rcNt1=0x0, rcNt2=0x103, rcNt3=0x103, 8779 ms, the end);

© 2024 Oracle Support Privacy / Do Not Sell My Info Terms of Use Trademark Policy