VirtualBox

Ticket #18455: VBoxHardening.log

File VBoxHardening.log, 207.3 KB (added by LMPadolina, 6 years ago)
Line 
16674.5c8c: Log file opened: 5.2.6r120293 g_hStartupLog=000000000000006c g_uNtVerCombined=0xa03ad700
26674.5c8c: \SystemRoot\System32\ntdll.dll:
36674.5c8c: CreationTime: 2017-03-18T20:57:39.201977500Z
46674.5c8c: LastWriteTime: 2018-09-12T18:39:34.215217200Z
56674.5c8c: ChangeTime: 2018-09-12T18:44:11.683982200Z
66674.5c8c: FileAttributes: 0x20
76674.5c8c: Size: 0x1d7450
86674.5c8c: NT Headers: 0xe0
96674.5c8c: Timestamp: 0xb79b6ddb
106674.5c8c: Machine: 0x8664 - amd64
116674.5c8c: Timestamp: 0xb79b6ddb
126674.5c8c: Image Version: 10.0
136674.5c8c: SizeOfImage: 0x1db000 (1945600)
146674.5c8c: Resource Dir: 0x170000 LB 0x69398
156674.5c8c: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
166674.5c8c: [Raw version resource data: 0x1700f0 LB 0x380, codepage 0x0 (reserved 0x0)]
176674.5c8c: ProductName: Microsoft® Windows® Operating System
186674.5c8c: ProductVersion: 10.0.15063.0
196674.5c8c: FileVersion: 10.0.15063.0 (WinBuild.160101.0800)
206674.5c8c: FileDescription: NT Layer DLL
216674.5c8c: \SystemRoot\System32\kernel32.dll:
226674.5c8c: CreationTime: 2017-03-18T20:57:15.887502700Z
236674.5c8c: LastWriteTime: 2018-09-12T18:34:59.800021300Z
246674.5c8c: ChangeTime: 2018-09-12T02:57:32.979381100Z
256674.5c8c: FileAttributes: 0x20
266674.5c8c: Size: 0xad068
276674.5c8c: NT Headers: 0xf8
286674.5c8c: Timestamp: 0x17a3637d
296674.5c8c: Machine: 0x8664 - amd64
306674.5c8c: Timestamp: 0x17a3637d
316674.5c8c: Image Version: 10.0
326674.5c8c: SizeOfImage: 0xae000 (712704)
336674.5c8c: Resource Dir: 0xac000 LB 0x520
346674.5c8c: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
356674.5c8c: [Raw version resource data: 0xac0b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
366674.5c8c: ProductName: Microsoft® Windows® Operating System
376674.5c8c: ProductVersion: 10.0.15063.0
386674.5c8c: FileVersion: 10.0.15063.0 (WinBuild.160101.0800)
396674.5c8c: FileDescription: Windows NT BASE API Client DLL
406674.5c8c: \SystemRoot\System32\KernelBase.dll:
416674.5c8c: CreationTime: 2017-03-18T20:57:35.951701900Z
426674.5c8c: LastWriteTime: 2018-09-12T18:37:42.594005400Z
436674.5c8c: ChangeTime: 2018-09-12T02:57:35.089386700Z
446674.5c8c: FileAttributes: 0x20
456674.5c8c: Size: 0x249bf0
466674.5c8c: NT Headers: 0x100
476674.5c8c: Timestamp: 0x461a0ff5
486674.5c8c: Machine: 0x8664 - amd64
496674.5c8c: Timestamp: 0x461a0ff5
506674.5c8c: Image Version: 10.0
516674.5c8c: SizeOfImage: 0x249000 (2396160)
526674.5c8c: Resource Dir: 0x22a000 LB 0x548
536674.5c8c: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
546674.5c8c: [Raw version resource data: 0x22a0b0 LB 0x3bc, codepage 0x0 (reserved 0x0)]
556674.5c8c: ProductName: Microsoft® Windows® Operating System
566674.5c8c: ProductVersion: 10.0.15063.0
576674.5c8c: FileVersion: 10.0.15063.0 (WinBuild.160101.0800)
586674.5c8c: FileDescription: Windows NT BASE API Client DLL
596674.5c8c: \SystemRoot\System32\apisetschema.dll:
606674.5c8c: CreationTime: 2017-03-18T20:57:35.373527900Z
616674.5c8c: LastWriteTime: 2017-03-18T20:57:35.373527900Z
626674.5c8c: ChangeTime: 2018-09-14T08:35:56.552540200Z
636674.5c8c: FileAttributes: 0x80
646674.5c8c: Size: 0x1ada0
656674.5c8c: NT Headers: 0xc0
666674.5c8c: Timestamp: 0x76544b2
676674.5c8c: Machine: 0x8664 - amd64
686674.5c8c: Timestamp: 0x76544b2
696674.5c8c: Image Version: 10.0
706674.5c8c: SizeOfImage: 0x1b000 (110592)
716674.5c8c: Resource Dir: 0x1a000 LB 0x408
726674.5c8c: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
736674.5c8c: [Raw version resource data: 0x1a060 LB 0x3a8, codepage 0x0 (reserved 0x0)]
746674.5c8c: ProductName: Microsoft® Windows® Operating System
756674.5c8c: ProductVersion: 10.0.15063.0
766674.5c8c: FileVersion: 10.0.15063.0 (WinBuild.160101.0800)
776674.5c8c: FileDescription: ApiSet Schema DLL
786674.5c8c: NtOpenDirectoryObject failed on \Driver: 0xc0000022
796674.5c8c: supR3HardenedWinFindAdversaries: 0x18
806674.5c8c: \SystemRoot\System32\drivers\tmcomm.sys:
816674.5c8c: CreationTime: 2018-09-24T16:02:24.000000000Z
826674.5c8c: LastWriteTime: 2018-09-24T16:02:24.000000000Z
836674.5c8c: ChangeTime: 2018-12-19T09:55:32.419063300Z
846674.5c8c: FileAttributes: 0x20
856674.5c8c: Size: 0x6c0b8
866674.5c8c: NT Headers: 0xf0
876674.5c8c: Timestamp: 0x5ba22a62
886674.5c8c: Machine: 0x8664 - amd64
896674.5c8c: Timestamp: 0x5ba22a62
906674.5c8c: Image Version: 10.0
916674.5c8c: SizeOfImage: 0x6d000 (446464)
926674.5c8c: Resource Dir: 0x6b000 LB 0x568
936674.5c8c: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
946674.5c8c: [Raw version resource data: 0x6b060 LB 0x504, codepage 0x0 (reserved 0x0)]
956674.5c8c: ProductName: Trend Micro Eyes
966674.5c8c: ProductVersion: 7.0
976674.5c8c: FileVersion: 7.0.0.1162
986674.5c8c: SpecialBuild: 1162
996674.5c8c: PrivateBuild: Build 1162 - 9/19/2018
1006674.5c8c: FileDescription: TrendMicro Common Module
1016674.5c8c: \SystemRoot\System32\drivers\tmactmon.sys:
1026674.5c8c: CreationTime: 2018-10-01T18:24:54.000000000Z
1036674.5c8c: LastWriteTime: 2018-10-01T18:24:54.000000000Z
1046674.5c8c: ChangeTime: 2018-12-19T09:55:32.559663200Z
1056674.5c8c: FileAttributes: 0x20
1066674.5c8c: Size: 0x20dd0
1076674.5c8c: NT Headers: 0xe8
1086674.5c8c: Timestamp: 0x5bac4c1c
1096674.5c8c: Machine: 0x8664 - amd64
1106674.5c8c: Timestamp: 0x5bac4c1c
1116674.5c8c: Image Version: 6.0
1126674.5c8c: SizeOfImage: 0x24000 (147456)
1136674.5c8c: Resource Dir: 0x22000 LB 0x590
1146674.5c8c: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
1156674.5c8c: [Raw version resource data: 0x22060 LB 0x52c, codepage 0x0 (reserved 0x0)]
1166674.5c8c: ProductName: Trend Micro AEGIS
1176674.5c8c: ProductVersion: 2.976
1186674.5c8c: FileVersion: 2.976.0.2193
1196674.5c8c: SpecialBuild: 2193
1206674.5c8c: PrivateBuild: Build 2193 - 9/27/2018
1216674.5c8c: FileDescription: TrendMicro Activity Monitor Module
1226674.5c8c: \SystemRoot\System32\drivers\tmevtmgr.sys:
1236674.5c8c: CreationTime: 2018-10-01T18:24:58.000000000Z
1246674.5c8c: LastWriteTime: 2018-10-01T18:24:58.000000000Z
1256674.5c8c: ChangeTime: 2018-12-19T09:55:32.465901000Z
1266674.5c8c: FileAttributes: 0x20
1276674.5c8c: Size: 0x18830
1286674.5c8c: NT Headers: 0xe8
1296674.5c8c: Timestamp: 0x5bac4c1a
1306674.5c8c: Machine: 0x8664 - amd64
1316674.5c8c: Timestamp: 0x5bac4c1a
1326674.5c8c: Image Version: 6.0
1336674.5c8c: SizeOfImage: 0x19000 (102400)
1346674.5c8c: Resource Dir: 0x17000 LB 0x590
1356674.5c8c: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
1366674.5c8c: [Raw version resource data: 0x17060 LB 0x52c, codepage 0x0 (reserved 0x0)]
1376674.5c8c: ProductName: Trend Micro AEGIS
1386674.5c8c: ProductVersion: 2.976
1396674.5c8c: FileVersion: 2.976.0.2193
1406674.5c8c: SpecialBuild: 2193
1416674.5c8c: PrivateBuild: Build 2193 - 9/27/2018
1426674.5c8c: FileDescription: TrendMicro Event Management Module
1436674.5c8c: \SystemRoot\System32\drivers\tmebc64.sys:
1446674.5c8c: CreationTime: 2016-04-21T03:08:10.000000000Z
1456674.5c8c: LastWriteTime: 2016-04-21T03:08:10.000000000Z
1466674.5c8c: ChangeTime: 2018-12-19T09:55:57.328693600Z
1476674.5c8c: FileAttributes: 0x20
1486674.5c8c: Size: 0x11b38
1496674.5c8c: NT Headers: 0xf8
1506674.5c8c: Timestamp: 0x564ac673
1516674.5c8c: Machine: 0x8664 - amd64
1526674.5c8c: Timestamp: 0x564ac673
1536674.5c8c: Image Version: 6.0
1546674.5c8c: SizeOfImage: 0x12000 (73728)
1556674.5c8c: Resource Dir: 0x10000 LB 0x6f8
1566674.5c8c: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
1576674.5c8c: [Raw version resource data: 0x10060 LB 0x694, codepage 0x0 (reserved 0x0)]
1586674.5c8c: ProductName: Trend Micro Early Boot Clean
1596674.5c8c: ProductVersion: 1.5
1606674.5c8c: FileVersion: 1.5.0.1023
1616674.5c8c: SpecialBuild: 1023
1626674.5c8c: PrivateBuild: Build 1023 - 11/17/2015
1636674.5c8c: FileDescription: Trend Micro early boot driver
1646674.5c8c: \SystemRoot\System32\drivers\tmeevw.sys:
1656674.5c8c: CreationTime: 2017-04-25T07:39:52.000000000Z
1666674.5c8c: LastWriteTime: 2017-04-25T07:39:52.000000000Z
1676674.5c8c: ChangeTime: 2018-12-19T09:55:11.635558300Z
1686674.5c8c: FileAttributes: 0x20
1696674.5c8c: Size: 0x22ed8
1706674.5c8c: NT Headers: 0xf8
1716674.5c8c: Timestamp: 0x58f08d99
1726674.5c8c: Machine: 0x8664 - amd64
1736674.5c8c: Timestamp: 0x58f08d99
1746674.5c8c: Image Version: 10.0
1756674.5c8c: SizeOfImage: 0x23000 (143360)
1766674.5c8c: Resource Dir: 0x1d000 LB 0x4df0
1776674.5c8c: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
1786674.5c8c: [Raw version resource data: 0x218fc LB 0x4f4, codepage 0x4e4 (reserved 0x0)]
1796674.5c8c: ProductName: Trend Micro EagleEye
1806674.5c8c: ProductVersion: 3.0
1816674.5c8c: FileVersion: 3.0.0.1005
1826674.5c8c: SpecialBuild: 1005
1836674.5c8c: PrivateBuild: Build 1005 - 4/14/2017
1846674.5c8c: FileDescription: Trend Micro EagleEye Driver (VW) (amd64-fre)
1856674.5c8c: \SystemRoot\System32\drivers\sakfile.sys:
1866674.5c8c: CreationTime: 2018-12-19T13:56:21.051912800Z
1876674.5c8c: LastWriteTime: 2018-09-28T06:38:12.000000000Z
1886674.5c8c: ChangeTime: 2019-01-22T00:16:11.186074400Z
1896674.5c8c: FileAttributes: 0x20
1906674.5c8c: Size: 0x1fdf0
1916674.5c8c: NT Headers: 0xe0
1926674.5c8c: Timestamp: 0x5bab5f62
1936674.5c8c: Machine: 0x8664 - amd64
1946674.5c8c: Timestamp: 0x5bab5f62
1956674.5c8c: Image Version: 0.0
1966674.5c8c: SizeOfImage: 0x20000 (131072)
1976674.5c8c: Resource Dir: 0x1e000 LB 0x558
1986674.5c8c: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
1996674.5c8c: [Raw version resource data: 0x1e060 LB 0x4f4, codepage 0x0 (reserved 0x0)]
2006674.5c8c: ProductName: OfficeScan - Data Protection (DLPE-SDK)
2016674.5c8c: ProductVersion: 6.2
2026674.5c8c: FileVersion: 6.2.0.1235
2036674.5c8c: SpecialBuild: 1235
2046674.5c8c: PrivateBuild: Build 1235 - 9/26/2018
2056674.5c8c: FileDescription: Trend Micro Data Loss Prevention Driver
2066674.5c8c: \SystemRoot\System32\drivers\sakcd.sys:
2076674.5c8c: CreationTime: 2018-12-19T13:56:21.051912800Z
2086674.5c8c: LastWriteTime: 2018-09-28T06:38:12.000000000Z
2096674.5c8c: ChangeTime: 2019-01-22T00:16:11.326719700Z
2106674.5c8c: FileAttributes: 0x20
2116674.5c8c: Size: 0x17278
2126674.5c8c: NT Headers: 0xf0
2136674.5c8c: Timestamp: 0x5aa0b500
2146674.5c8c: Machine: 0x8664 - amd64
2156674.5c8c: Timestamp: 0x5aa0b500
2166674.5c8c: Image Version: 5.0
2176674.5c8c: SizeOfImage: 0x15000 (86016)
2186674.5c8c: Resource Dir: 0x13000 LB 0x518
2196674.5c8c: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
2206674.5c8c: [Raw version resource data: 0x13060 LB 0x4b4, codepage 0x0 (reserved 0x0)]
2216674.5c8c: ProductName: OfficeScan - Data Protection (DLPE-SDK)
2226674.5c8c: ProductVersion: 6.2
2236674.5c8c: FileVersion: 6.2.0.1184
2246674.5c8c: SpecialBuild: 1184
2256674.5c8c: PrivateBuild: Build 1184 - 3/8/2018
2266674.5c8c: FileDescription: Trend Micro Data Loss Prevention Driver
2276674.5c8c: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox'
2286674.5c8c: Calling main()
2296674.5c8c: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2
2306674.5c8c: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox'
2316674.5c8c: SUPR3HardenedMain: Respawn #1
2326674.5c8c: System32: \Device\HarddiskVolume4\Windows\System32
2336674.5c8c: WinSxS: \Device\HarddiskVolume4\Windows\WinSxS
2346674.5c8c: KnownDllPath: C:\WINDOWS\System32
2356674.5c8c: '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
2366674.5c8c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe)
2376674.5c8c: supR3HardNtEnableThreadCreation:
2386674.5c8c: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffe786a9ad0 pvNtTerminateThread=00007ffe786d5e00
2396674.5c8c: supR3HardenedWinDoReSpawn(1): New child 678c.5edc [kernel32].
2406674.5c8c: supR3HardNtChildGatherData: PebBaseAddress=0000000000ffa000 cbPeb=0x388
2416674.5c8c: supR3HardNtPuChFindNtdll: uNtDllParentAddr=00007ffe78630000 uNtDllChildAddr=00007ffe78630000
2426674.5c8c: supR3HardenedWinSetupChildInit: uLdrInitThunk=00007ffe786a9ad0
2436674.5c8c: supR3HardenedWinSetupChildInit: Start child.
2446674.5c8c: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 1 ms.
2456674.5c8c: supR3HardNtChildPurify: Startup delay kludge #1/0: 519 ms, 61 sleeps
2466674.5c8c: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
2476674.5c8c: *0000000000000000-0000000000cbffff 0x0001/0x0000 0x0000000
2486674.5c8c: *0000000000cc0000-0000000000cdffff 0x0004/0x0004 0x0020000
2496674.5c8c: *0000000000ce0000-0000000000cf7fff 0x0002/0x0002 0x0040000
2506674.5c8c: 0000000000cf8000-0000000000cfffff 0x0001/0x0000 0x0000000
2516674.5c8c: *0000000000d00000-0000000000dfafff 0x0000/0x0004 0x0020000
2526674.5c8c: 0000000000dfb000-0000000000dfdfff 0x0104/0x0004 0x0020000
2536674.5c8c: 0000000000dfe000-0000000000dfffff 0x0004/0x0004 0x0020000
2546674.5c8c: *0000000000e00000-0000000000ff9fff 0x0000/0x0004 0x0020000
2556674.5c8c: 0000000000ffa000-0000000000ffcfff 0x0004/0x0004 0x0020000
2566674.5c8c: 0000000000ffd000-0000000000ffffff 0x0000/0x0004 0x0020000
2576674.5c8c: *0000000001000000-0000000001003fff 0x0002/0x0002 0x0040000
2586674.5c8c: 0000000001004000-000000000100ffff 0x0001/0x0000 0x0000000
2596674.5c8c: *0000000001010000-0000000001010fff 0x0004/0x0004 0x0020000
2606674.5c8c: 0000000001011000-000000007ffdffff 0x0001/0x0000 0x0000000
2616674.5c8c: *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000
2626674.5c8c: *000000007ffe1000-000000007ffeffff 0x0000/0x0002 0x0020000
2636674.5c8c: 000000007fff0000-00007ff66bc5ffff 0x0001/0x0000 0x0000000
2646674.5c8c: *00007ff66bc60000-00007ff66bc82fff 0x0002/0x0002 0x0040000
2656674.5c8c: 00007ff66bc83000-00007ff66c86ffff 0x0001/0x0000 0x0000000
2666674.5c8c: *00007ff66c870000-00007ff66c870fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
2676674.5c8c: 00007ff66c871000-00007ff66c8e1fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
2686674.5c8c: 00007ff66c8e2000-00007ff66c8e2fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
2696674.5c8c: 00007ff66c8e3000-00007ff66c928fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
2706674.5c8c: 00007ff66c929000-00007ff66c929fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
2716674.5c8c: 00007ff66c92a000-00007ff66c92afff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
2726674.5c8c: 00007ff66c92b000-00007ff66c92ffff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
2736674.5c8c: 00007ff66c930000-00007ff66c930fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
2746674.5c8c: 00007ff66c931000-00007ff66c931fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
2756674.5c8c: 00007ff66c932000-00007ff66c935fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
2766674.5c8c: 00007ff66c936000-00007ff66c97dfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
2776674.5c8c: 00007ff66c97e000-00007ffe7862ffff 0x0001/0x0000 0x0000000
2786674.5c8c: *00007ffe78630000-00007ffe78630fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
2796674.5c8c: 00007ffe78631000-00007ffe7873ffff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
2806674.5c8c: 00007ffe78740000-00007ffe78784fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
2816674.5c8c: 00007ffe78785000-00007ffe7878afff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
2826674.5c8c: 00007ffe7878b000-00007ffe7878bfff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
2836674.5c8c: 00007ffe7878c000-00007ffe7878cfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
2846674.5c8c: 00007ffe7878d000-00007ffe7879afff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
2856674.5c8c: 00007ffe7879b000-00007ffe7879bfff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
2866674.5c8c: 00007ffe7879c000-00007ffe7879efff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
2876674.5c8c: 00007ffe7879f000-00007ffe7880afff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
2886674.5c8c: 00007ffe7880b000-00007ffffffdffff 0x0001/0x0000 0x0000000
2896674.5c8c: *00007ffffffe0000-00007ffffffeffff 0x0001/0x0002 0x0020000
2906674.5c8c: VirtualBox.exe: timestamp 0x5a5cc1cb (rc=VINF_SUCCESS)
2916674.5c8c: '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
2926674.5c8c: '\Device\HarddiskVolume4\Windows\System32\ntdll.dll' has no imports
2936674.5c8c: supR3HardNtChildPurify: Done after 571 ms and 0 fixes (loop #0).
294678c.5edc: Log file opened: 5.2.6r120293 g_hStartupLog=0000000000000004 g_uNtVerCombined=0xa03ad700
295678c.5edc: supR3HardenedVmProcessInit: uNtDllAddr=00007ffe78630000 g_uNtVerCombined=0xa03ad700
2966674.5c8c: supR3HardNtEnableThreadCreation:
297678c.5edc: ntdll.dll: timestamp 0xb79b6ddb (rc=VINF_SUCCESS)
298678c.5edc: New simple heap: #1 0000000001120000 LB 0x400000 (for 1945600 allocation)
299678c.5edc: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox'
300678c.5edc: System32: \Device\HarddiskVolume4\Windows\System32
301678c.5edc: WinSxS: \Device\HarddiskVolume4\Windows\WinSxS
302678c.5edc: KnownDllPath: C:\WINDOWS\System32
303678c.5edc: supR3HardenedVmProcessInit: Opening vboxdrv stub...
304678c.5edc: supR3HardenedVmProcessInit: Restoring LdrInitializeThunk...
305678c.5edc: supR3HardenedVmProcessInit: Returning to LdrInitializeThunk...
306678c.5edc: Registered Dll notification callback with NTDLL.
307678c.5edc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\kernel32.dll)
308678c.5edc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\kernel32.dll
309678c.5edc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\KERNEL32.DLL (Input=KERNEL32.DLL, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000004001:<flags> [calling]
310678c.5edc: supR3HardenedDllNotificationCallback: load 00007ffe75890000 LB 0x00249000 C:\WINDOWS\System32\KERNELBASE.dll [fFlags=0x0]
311678c.5edc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\KernelBase.dll)
312678c.5edc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\KernelBase.dll
313678c.5edc: supR3HardenedDllNotificationCallback: load 00007ffe76030000 LB 0x000ae000 C:\WINDOWS\System32\KERNEL32.DLL [fFlags=0x0]
314678c.5edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
315678c.5edc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe76030000 'C:\WINDOWS\System32\KERNEL32.DLL'
316678c.5edc: supR3HardenedDllNotificationCallback: load 00007ff66c870000 LB 0x0010e000 C:\Program Files\Oracle\VirtualBox\VirtualBox.exe [fFlags=0x0]
317678c.5edc: '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
318678c.5edc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe)
319678c.5edc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
320678c.5edc: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffe786a9ad0 pvNtTerminateThread=00007ffe786d5e00
3216674.5c8c: supR3HardNtChildWaitFor: Found expected request 1 (CloseEvents) after 166 ms.
322678c.5edc: \SystemRoot\System32\ntdll.dll:
323678c.5edc: CreationTime: 2017-03-18T20:57:39.201977500Z
324678c.5edc: LastWriteTime: 2018-09-12T18:39:34.215217200Z
325678c.5edc: ChangeTime: 2018-09-12T18:44:11.683982200Z
326678c.5edc: FileAttributes: 0x20
327678c.5edc: Size: 0x1d7450
328678c.5edc: NT Headers: 0xe0
329678c.5edc: Timestamp: 0xb79b6ddb
330678c.5edc: Machine: 0x8664 - amd64
331678c.5edc: Timestamp: 0xb79b6ddb
332678c.5edc: Image Version: 10.0
333678c.5edc: SizeOfImage: 0x1db000 (1945600)
334678c.5edc: Resource Dir: 0x170000 LB 0x69398
335678c.5edc: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
336678c.5edc: [Raw version resource data: 0x1700f0 LB 0x380, codepage 0x0 (reserved 0x0)]
337678c.5edc: ProductName: Microsoft® Windows® Operating System
338678c.5edc: ProductVersion: 10.0.15063.0
339678c.5edc: FileVersion: 10.0.15063.0 (WinBuild.160101.0800)
340678c.5edc: FileDescription: NT Layer DLL
341678c.5edc: \SystemRoot\System32\kernel32.dll:
342678c.5edc: CreationTime: 2017-03-18T20:57:15.887502700Z
343678c.5edc: LastWriteTime: 2018-09-12T18:34:59.800021300Z
344678c.5edc: ChangeTime: 2018-09-12T02:57:32.979381100Z
345678c.5edc: FileAttributes: 0x20
346678c.5edc: Size: 0xad068
347678c.5edc: NT Headers: 0xf8
348678c.5edc: Timestamp: 0x17a3637d
349678c.5edc: Machine: 0x8664 - amd64
350678c.5edc: Timestamp: 0x17a3637d
351678c.5edc: Image Version: 10.0
352678c.5edc: SizeOfImage: 0xae000 (712704)
353678c.5edc: Resource Dir: 0xac000 LB 0x520
354678c.5edc: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
355678c.5edc: [Raw version resource data: 0xac0b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
356678c.5edc: ProductName: Microsoft® Windows® Operating System
357678c.5edc: ProductVersion: 10.0.15063.0
358678c.5edc: FileVersion: 10.0.15063.0 (WinBuild.160101.0800)
359678c.5edc: FileDescription: Windows NT BASE API Client DLL
360678c.5edc: \SystemRoot\System32\KernelBase.dll:
361678c.5edc: CreationTime: 2017-03-18T20:57:35.951701900Z
362678c.5edc: LastWriteTime: 2018-09-12T18:37:42.594005400Z
363678c.5edc: ChangeTime: 2018-09-12T02:57:35.089386700Z
364678c.5edc: FileAttributes: 0x20
365678c.5edc: Size: 0x249bf0
366678c.5edc: NT Headers: 0x100
367678c.5edc: Timestamp: 0x461a0ff5
368678c.5edc: Machine: 0x8664 - amd64
369678c.5edc: Timestamp: 0x461a0ff5
370678c.5edc: Image Version: 10.0
371678c.5edc: SizeOfImage: 0x249000 (2396160)
372678c.5edc: Resource Dir: 0x22a000 LB 0x548
373678c.5edc: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
374678c.5edc: [Raw version resource data: 0x22a0b0 LB 0x3bc, codepage 0x0 (reserved 0x0)]
375678c.5edc: ProductName: Microsoft® Windows® Operating System
376678c.5edc: ProductVersion: 10.0.15063.0
377678c.5edc: FileVersion: 10.0.15063.0 (WinBuild.160101.0800)
378678c.5edc: FileDescription: Windows NT BASE API Client DLL
379678c.5edc: \SystemRoot\System32\apisetschema.dll:
380678c.5edc: CreationTime: 2017-03-18T20:57:35.373527900Z
381678c.5edc: LastWriteTime: 2017-03-18T20:57:35.373527900Z
382678c.5edc: ChangeTime: 2018-09-14T08:35:56.552540200Z
383678c.5edc: FileAttributes: 0x80
384678c.5edc: Size: 0x1ada0
385678c.5edc: NT Headers: 0xc0
386678c.5edc: Timestamp: 0x76544b2
387678c.5edc: Machine: 0x8664 - amd64
388678c.5edc: Timestamp: 0x76544b2
389678c.5edc: Image Version: 10.0
390678c.5edc: SizeOfImage: 0x1b000 (110592)
391678c.5edc: Resource Dir: 0x1a000 LB 0x408
392678c.5edc: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
393678c.5edc: [Raw version resource data: 0x1a060 LB 0x3a8, codepage 0x0 (reserved 0x0)]
394678c.5edc: ProductName: Microsoft® Windows® Operating System
395678c.5edc: ProductVersion: 10.0.15063.0
396678c.5edc: FileVersion: 10.0.15063.0 (WinBuild.160101.0800)
397678c.5edc: FileDescription: ApiSet Schema DLL
398678c.5edc: NtOpenDirectoryObject failed on \Driver: 0xc0000022
399678c.5edc: supR3HardenedWinFindAdversaries: 0x18
400678c.5edc: \SystemRoot\System32\drivers\tmcomm.sys:
401678c.5edc: CreationTime: 2018-09-24T16:02:24.000000000Z
402678c.5edc: LastWriteTime: 2018-09-24T16:02:24.000000000Z
403678c.5edc: ChangeTime: 2018-12-19T09:55:32.419063300Z
404678c.5edc: FileAttributes: 0x20
405678c.5edc: Size: 0x6c0b8
406678c.5edc: NT Headers: 0xf0
407678c.5edc: Timestamp: 0x5ba22a62
408678c.5edc: Machine: 0x8664 - amd64
409678c.5edc: Timestamp: 0x5ba22a62
410678c.5edc: Image Version: 10.0
411678c.5edc: SizeOfImage: 0x6d000 (446464)
412678c.5edc: Resource Dir: 0x6b000 LB 0x568
413678c.5edc: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
414678c.5edc: [Raw version resource data: 0x6b060 LB 0x504, codepage 0x0 (reserved 0x0)]
415678c.5edc: ProductName: Trend Micro Eyes
416678c.5edc: ProductVersion: 7.0
417678c.5edc: FileVersion: 7.0.0.1162
418678c.5edc: SpecialBuild: 1162
419678c.5edc: PrivateBuild: Build 1162 - 9/19/2018
420678c.5edc: FileDescription: TrendMicro Common Module
421678c.5edc: \SystemRoot\System32\drivers\tmactmon.sys:
422678c.5edc: CreationTime: 2018-10-01T18:24:54.000000000Z
423678c.5edc: LastWriteTime: 2018-10-01T18:24:54.000000000Z
424678c.5edc: ChangeTime: 2018-12-19T09:55:32.559663200Z
425678c.5edc: FileAttributes: 0x20
426678c.5edc: Size: 0x20dd0
427678c.5edc: NT Headers: 0xe8
428678c.5edc: Timestamp: 0x5bac4c1c
429678c.5edc: Machine: 0x8664 - amd64
430678c.5edc: Timestamp: 0x5bac4c1c
431678c.5edc: Image Version: 6.0
432678c.5edc: SizeOfImage: 0x24000 (147456)
433678c.5edc: Resource Dir: 0x22000 LB 0x590
434678c.5edc: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
435678c.5edc: [Raw version resource data: 0x22060 LB 0x52c, codepage 0x0 (reserved 0x0)]
436678c.5edc: ProductName: Trend Micro AEGIS
437678c.5edc: ProductVersion: 2.976
438678c.5edc: FileVersion: 2.976.0.2193
439678c.5edc: SpecialBuild: 2193
440678c.5edc: PrivateBuild: Build 2193 - 9/27/2018
441678c.5edc: FileDescription: TrendMicro Activity Monitor Module
442678c.5edc: \SystemRoot\System32\drivers\tmevtmgr.sys:
443678c.5edc: CreationTime: 2018-10-01T18:24:58.000000000Z
444678c.5edc: LastWriteTime: 2018-10-01T18:24:58.000000000Z
445678c.5edc: ChangeTime: 2018-12-19T09:55:32.465901000Z
446678c.5edc: FileAttributes: 0x20
447678c.5edc: Size: 0x18830
448678c.5edc: NT Headers: 0xe8
449678c.5edc: Timestamp: 0x5bac4c1a
450678c.5edc: Machine: 0x8664 - amd64
451678c.5edc: Timestamp: 0x5bac4c1a
452678c.5edc: Image Version: 6.0
453678c.5edc: SizeOfImage: 0x19000 (102400)
454678c.5edc: Resource Dir: 0x17000 LB 0x590
455678c.5edc: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
456678c.5edc: [Raw version resource data: 0x17060 LB 0x52c, codepage 0x0 (reserved 0x0)]
457678c.5edc: ProductName: Trend Micro AEGIS
458678c.5edc: ProductVersion: 2.976
459678c.5edc: FileVersion: 2.976.0.2193
460678c.5edc: SpecialBuild: 2193
461678c.5edc: PrivateBuild: Build 2193 - 9/27/2018
462678c.5edc: FileDescription: TrendMicro Event Management Module
463678c.5edc: \SystemRoot\System32\drivers\tmebc64.sys:
464678c.5edc: CreationTime: 2016-04-21T03:08:10.000000000Z
465678c.5edc: LastWriteTime: 2016-04-21T03:08:10.000000000Z
466678c.5edc: ChangeTime: 2018-12-19T09:55:57.328693600Z
467678c.5edc: FileAttributes: 0x20
468678c.5edc: Size: 0x11b38
469678c.5edc: NT Headers: 0xf8
470678c.5edc: Timestamp: 0x564ac673
471678c.5edc: Machine: 0x8664 - amd64
472678c.5edc: Timestamp: 0x564ac673
473678c.5edc: Image Version: 6.0
474678c.5edc: SizeOfImage: 0x12000 (73728)
475678c.5edc: Resource Dir: 0x10000 LB 0x6f8
476678c.5edc: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
477678c.5edc: [Raw version resource data: 0x10060 LB 0x694, codepage 0x0 (reserved 0x0)]
478678c.5edc: ProductName: Trend Micro Early Boot Clean
479678c.5edc: ProductVersion: 1.5
480678c.5edc: FileVersion: 1.5.0.1023
481678c.5edc: SpecialBuild: 1023
482678c.5edc: PrivateBuild: Build 1023 - 11/17/2015
483678c.5edc: FileDescription: Trend Micro early boot driver
484678c.5edc: \SystemRoot\System32\drivers\tmeevw.sys:
485678c.5edc: CreationTime: 2017-04-25T07:39:52.000000000Z
486678c.5edc: LastWriteTime: 2017-04-25T07:39:52.000000000Z
487678c.5edc: ChangeTime: 2018-12-19T09:55:11.635558300Z
488678c.5edc: FileAttributes: 0x20
489678c.5edc: Size: 0x22ed8
490678c.5edc: NT Headers: 0xf8
491678c.5edc: Timestamp: 0x58f08d99
492678c.5edc: Machine: 0x8664 - amd64
493678c.5edc: Timestamp: 0x58f08d99
494678c.5edc: Image Version: 10.0
495678c.5edc: SizeOfImage: 0x23000 (143360)
496678c.5edc: Resource Dir: 0x1d000 LB 0x4df0
497678c.5edc: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
498678c.5edc: [Raw version resource data: 0x218fc LB 0x4f4, codepage 0x4e4 (reserved 0x0)]
499678c.5edc: ProductName: Trend Micro EagleEye
500678c.5edc: ProductVersion: 3.0
501678c.5edc: FileVersion: 3.0.0.1005
502678c.5edc: SpecialBuild: 1005
503678c.5edc: PrivateBuild: Build 1005 - 4/14/2017
504678c.5edc: FileDescription: Trend Micro EagleEye Driver (VW) (amd64-fre)
505678c.5edc: \SystemRoot\System32\drivers\sakfile.sys:
506678c.5edc: CreationTime: 2018-12-19T13:56:21.051912800Z
507678c.5edc: LastWriteTime: 2018-09-28T06:38:12.000000000Z
508678c.5edc: ChangeTime: 2019-01-22T00:16:11.186074400Z
509678c.5edc: FileAttributes: 0x20
510678c.5edc: Size: 0x1fdf0
511678c.5edc: NT Headers: 0xe0
512678c.5edc: Timestamp: 0x5bab5f62
513678c.5edc: Machine: 0x8664 - amd64
514678c.5edc: Timestamp: 0x5bab5f62
515678c.5edc: Image Version: 0.0
516678c.5edc: SizeOfImage: 0x20000 (131072)
517678c.5edc: Resource Dir: 0x1e000 LB 0x558
518678c.5edc: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
519678c.5edc: [Raw version resource data: 0x1e060 LB 0x4f4, codepage 0x0 (reserved 0x0)]
520678c.5edc: ProductName: OfficeScan - Data Protection (DLPE-SDK)
521678c.5edc: ProductVersion: 6.2
522678c.5edc: FileVersion: 6.2.0.1235
523678c.5edc: SpecialBuild: 1235
524678c.5edc: PrivateBuild: Build 1235 - 9/26/2018
525678c.5edc: FileDescription: Trend Micro Data Loss Prevention Driver
526678c.5edc: \SystemRoot\System32\drivers\sakcd.sys:
527678c.5edc: CreationTime: 2018-12-19T13:56:21.051912800Z
528678c.5edc: LastWriteTime: 2018-09-28T06:38:12.000000000Z
529678c.5edc: ChangeTime: 2019-01-22T00:16:11.326719700Z
530678c.5edc: FileAttributes: 0x20
531678c.5edc: Size: 0x17278
532678c.5edc: NT Headers: 0xf0
533678c.5edc: Timestamp: 0x5aa0b500
534678c.5edc: Machine: 0x8664 - amd64
535678c.5edc: Timestamp: 0x5aa0b500
536678c.5edc: Image Version: 5.0
537678c.5edc: SizeOfImage: 0x15000 (86016)
538678c.5edc: Resource Dir: 0x13000 LB 0x518
539678c.5edc: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
540678c.5edc: [Raw version resource data: 0x13060 LB 0x4b4, codepage 0x0 (reserved 0x0)]
541678c.5edc: ProductName: OfficeScan - Data Protection (DLPE-SDK)
542678c.5edc: ProductVersion: 6.2
543678c.5edc: FileVersion: 6.2.0.1184
544678c.5edc: SpecialBuild: 1184
545678c.5edc: PrivateBuild: Build 1184 - 3/8/2018
546678c.5edc: FileDescription: Trend Micro Data Loss Prevention Driver
547678c.5edc: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox'
548678c.5edc: Calling main()
549678c.5edc: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2
550678c.5edc: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox'
551678c.37bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'advapi32.dll'.
552678c.37bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'rpcrt4.dll'.
553678c.37bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'secur32.dll'.
554678c.37bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
555678c.37bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ole32.dll'.
556678c.37bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcp120.dll'.
557678c.37bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcr120.dll'.
558678c.37bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'psapi.dll'.
559678c.37bc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Manufacturer\Endpoint Agent\clpbm64.dll)
560678c.37bc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Manufacturer\Endpoint Agent\clpbm64.dll
561678c.37bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'psapi.dll'...
562678c.5edc: '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
563678c.5edc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe)
564678c.5edc: SUPR3HardenedMain: Respawn #2
565678c.5edc: Error (rc=-5640):
566678c.5edc: More than one thread in process
567678c.5edc: Error -5640 in supR3HardenedWinReSpawn! (enmWhat=1)
568678c.5edc: More than one thread in process
569678c.37bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'psapi.dll' -> '\Device\HarddiskVolume4\Windows\System32\psapi.dll' [rcNtRedir=0xc0150008]
570678c.5edc: supR3HardNtEnableThreadCreation:
571678c.37bc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\psapi.dll)
572678c.37bc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\psapi.dll
573678c.37bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr120.dll'...
574678c.37bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr120.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcr120.dll' [rcNtRedir=0xc0150008]
575678c.37bc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\msvcr120.dll)
576678c.37bc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\msvcr120.dll
577678c.37bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp120.dll'...
578678c.37bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp120.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcp120.dll' [rcNtRedir=0xc0150008]
579678c.37bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr120.dll'.
580678c.37bc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\msvcp120.dll)
581678c.37bc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\msvcp120.dll
582678c.37bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
583678c.37bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume4\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
584678c.37bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #19 'rpcrt4.dll'.
585678c.37bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #43 'gdi32.dll'.
586678c.37bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #44 'user32.dll'.
587678c.37bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #45 'combase.dll'.
588678c.37bc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\ole32.dll)
589678c.37bc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\ole32.dll
590678c.37bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
591678c.37bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
592678c.37bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'win32u.dll'.
593678c.37bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #32 'gdi32.dll'.
594678c.37bc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\user32.dll)
595678c.37bc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\user32.dll
596678c.37bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'secur32.dll'...
597678c.37bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'secur32.dll' -> '\Device\HarddiskVolume4\Windows\System32\secur32.dll' [rcNtRedir=0xc0150008]
598678c.37bc: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\secur32.dll)
599678c.37bc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\secur32.dll
600678c.37bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
601678c.37bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
602678c.37bc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll)
603678c.37bc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll
604678c.37bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
605678c.37bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
606678c.37bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
607678c.37bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'sechost.dll'.
608678c.37bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #21 'rpcrt4.dll'.
609678c.37bc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\advapi32.dll)
610678c.37bc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\advapi32.dll
611678c.37bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
612678c.37bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
613678c.37bc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
614678c.37bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'sechost.dll'...
615678c.37bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'sechost.dll' -> '\Device\HarddiskVolume4\Windows\System32\sechost.dll' [rcNtRedir=0xc0150008]
616678c.37bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'rpcrt4.dll'.
617678c.37bc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\sechost.dll)
618678c.37bc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\sechost.dll
619678c.37bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
620678c.37bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
621678c.37bc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\msvcrt.dll)
622678c.37bc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\msvcrt.dll
623678c.37bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
624678c.37bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
625678c.37bc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\gdi32.dll)
626678c.37bc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\gdi32.dll
627678c.37bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
628678c.37bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume4\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
629678c.37bc: '\Device\HarddiskVolume4\Windows\System32\win32u.dll' has no imports
630678c.37bc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\win32u.dll)
631678c.37bc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\win32u.dll
632678c.37bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
633678c.37bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume4\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
634678c.37bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
635678c.37bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #37 'bcryptprimitives.dll'.
636678c.37bc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\combase.dll)
637678c.37bc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\combase.dll
638678c.37bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
639678c.37bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
640678c.37bc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
641678c.37bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
642678c.37bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
643678c.37bc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
644678c.37bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
645678c.37bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
646678c.37bc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
647678c.37bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr120.dll'...
648678c.37bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr120.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcr120.dll' [rcNtRedir=0xc0150008]
649678c.37bc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcr120.dll [lacks WinVerifyTrust]
650678c.37bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'...
651678c.37bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume4\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008]
652678c.37bc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\bcryptprimitives.dll)
653678c.37bc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\bcryptprimitives.dll
654678c.37bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
655678c.37bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
656678c.37bc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
657678c.37bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
658678c.37bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
659678c.37bc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
660678c.37bc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Manufacturer\Endpoint Agent\clpbm64.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
661678c.37bc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Manufacturer\Endpoint Agent\clpbm64.dll [lacks WinVerifyTrust]
662678c.37bc: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\secur32.dll [lacks WinVerifyTrust]
663678c.37bc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcp120.dll [lacks WinVerifyTrust]
664678c.37bc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcr120.dll [lacks WinVerifyTrust]
665678c.37bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
666678c.37bc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\sspicli.dll)
667678c.37bc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\sspicli.dll
668678c.37bc: supR3HardenedDllNotificationCallback: load 00007ffe78030000 LB 0x0009d000 C:\WINDOWS\System32\msvcrt.dll [fFlags=0x0]
669678c.37bc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
670678c.37bc: supR3HardenedDllNotificationCallback: load 00007ffe77da0000 LB 0x00125000 C:\WINDOWS\System32\RPCRT4.dll [fFlags=0x0]
671678c.37bc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
672678c.37bc: supR3HardenedDllNotificationCallback: load 00007ffe77c20000 LB 0x00059000 C:\WINDOWS\System32\sechost.dll [fFlags=0x0]
673678c.37bc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\sechost.dll [lacks WinVerifyTrust]
674678c.37bc: supR3HardenedDllNotificationCallback: load 00007ffe77ed0000 LB 0x000a1000 C:\WINDOWS\System32\ADVAPI32.dll [fFlags=0x0]
675678c.37bc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
676678c.37bc: supR3HardenedDllNotificationCallback: load 00007ffe6b360000 LB 0x0000c000 C:\WINDOWS\SYSTEM32\Secur32.dll [fFlags=0x0]
677678c.37bc: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\secur32.dll [lacks WinVerifyTrust]
678678c.37bc: supR3HardenedDllNotificationCallback: load 00007ffe74cb0000 LB 0x0001e000 C:\WINDOWS\System32\win32u.dll [fFlags=0x0]
679678c.37bc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\win32u.dll [lacks WinVerifyTrust]
680678c.37bc: supR3HardenedDllNotificationCallback: load 00007ffe74b50000 LB 0x000f6000 C:\WINDOWS\System32\ucrtbase.dll [fFlags=0x0]
681678c.37bc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\ucrtbase.dll)
682678c.37bc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\ucrtbase.dll
683678c.37bc: supR3HardenedDllNotificationCallback: load 00007ffe75780000 LB 0x0009a000 C:\WINDOWS\System32\msvcp_win.dll [fFlags=0x0]
684678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'opengl32.dll'.
685678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
686678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'msvcp100.dll'.
687678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcr100.dll'.
688678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'.
689678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'qt5guivbox.dll'.
690678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'qt5widgetsvbox.dll'.
691678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'qt5printsupportvbox.dll'.
692678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'qt5openglvbox.dll'.
693678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'user32.dll'.
694678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'advapi32.dll'.
695678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'shell32.dll'.
696678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'ole32.dll'.
697678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'oleaut32.dll'.
698678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #15 'winmm.dll'.
699678c.5edc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.dll)
700678c.5edc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.dll
701678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
702678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume4\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
703678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'winmmbase.dll'.
704678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'msvcrt.dll'.
705678c.5edc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\winmm.dll)
706678c.5edc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\winmm.dll
707678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
708678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume4\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
709678c.37bc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\msvcp_win.dll)
710678c.37bc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\msvcp_win.dll
711678c.37bc: supR3HardenedDllNotificationCallback: load 00007ffe755a0000 LB 0x00189000 C:\WINDOWS\System32\gdi32full.dll [fFlags=0x0]
712678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
713678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'combase.dll'.
714678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #22 'rpcrt4.dll'.
715678c.5edc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\oleaut32.dll)
716678c.5edc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\oleaut32.dll
717678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
718678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume4\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
719678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ole32.dll [lacks WinVerifyTrust]
720678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
721678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume4\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
722678c.37bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
723678c.37bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #28 'gdi32.dll'.
724678c.37bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #30 'user32.dll'.
725678c.37bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #31 'win32u.dll'.
726678c.37bc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\gdi32full.dll)
727678c.37bc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\gdi32full.dll
728678c.37bc: supR3HardenedDllNotificationCallback: load 00007ffe760e0000 LB 0x00027000 C:\WINDOWS\System32\GDI32.dll [fFlags=0x0]
729678c.37bc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
730678c.37bc: supR3HardenedDllNotificationCallback: load 00007ffe777d0000 LB 0x0014a000 C:\WINDOWS\System32\USER32.dll [fFlags=0x0]
731678c.37bc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
732678c.37bc: supR3HardenedDllNotificationCallback: load 00007ffe75820000 LB 0x0006a000 C:\WINDOWS\System32\bcryptPrimitives.dll [fFlags=0x0]
733678c.37bc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust]
734678c.37bc: supR3HardenedDllNotificationCallback: load 00007ffe77920000 LB 0x002f9000 C:\WINDOWS\System32\combase.dll [fFlags=0x0]
735678c.37bc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\combase.dll [lacks WinVerifyTrust]
736678c.37bc: supR3HardenedDllNotificationCallback: load 00007ffe78190000 LB 0x00143000 C:\WINDOWS\System32\ole32.dll [fFlags=0x0]
737678c.37bc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ole32.dll [lacks WinVerifyTrust]
738678c.37bc: supR3HardenedDllNotificationCallback: load 00007ffe66450000 LB 0x000ef000 C:\WINDOWS\SYSTEM32\MSVCR120.dll [fFlags=0x0]
739678c.37bc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcr120.dll [lacks WinVerifyTrust]
740678c.37bc: supR3HardenedDllNotificationCallback: load 00007ffe667c0000 LB 0x000a6000 C:\WINDOWS\SYSTEM32\MSVCP120.dll [fFlags=0x0]
741678c.37bc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcp120.dll [lacks WinVerifyTrust]
742678c.37bc: supR3HardenedDllNotificationCallback: load 00007ffe78150000 LB 0x00008000 C:\WINDOWS\System32\PSAPI.DLL [fFlags=0x0]
743678c.37bc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\psapi.dll [lacks WinVerifyTrust]
744678c.37bc: supR3HardenedDllNotificationCallback: load 00007ffe749a0000 LB 0x00030000 C:\WINDOWS\SYSTEM32\SSPICLI.DLL [fFlags=0x0]
745678c.37bc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\sspicli.dll [lacks WinVerifyTrust]
746678c.37bc: supR3HardenedDllNotificationCallback: load 00007ffe59d50000 LB 0x00066000 C:\Program Files\Manufacturer\Endpoint Agent\clpbm64.dll [fFlags=0x0]
747678c.37bc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Manufacturer\Endpoint Agent\clpbm64.dll [lacks WinVerifyTrust]
748678c.37bc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
749678c.37bc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
750678c.37bc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe75890000 'api-ms-win-core-synch-l1-2-0'
751678c.37bc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
752678c.37bc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
753678c.37bc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe75890000 'api-ms-win-core-fibers-l1-1-1'
754678c.37bc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
755678c.37bc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
756678c.37bc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe75890000 'api-ms-win-core-fibers-l1-1-1'
757678c.37bc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
758678c.37bc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
759678c.37bc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe75890000 'api-ms-win-core-synch-l1-2-0'
760678c.37bc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-l1-2-1) -> 0x0, fPresent=1
761678c.37bc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-l1-2-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
762678c.37bc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe75890000 'api-ms-win-core-localization-l1-2-1'
763678c.37bc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
764678c.37bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
765678c.37bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume4\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
766678c.37bc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\win32u.dll [lacks WinVerifyTrust]
767678c.37bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
768678c.37bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
769678c.37bc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
770678c.37bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
771678c.37bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
772678c.37bc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
773678c.37bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
774678c.37bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
775678c.37bc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust]
776678c.37bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
777678c.37bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
778678c.37bc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
779678c.37bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
780678c.37bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume4\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
781678c.37bc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\combase.dll [lacks WinVerifyTrust]
782678c.37bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
783678c.37bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
784678c.37bc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust]
785678c.37bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
786678c.37bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
787678c.37bc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
788678c.37bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmmbase.dll'...
789678c.37bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmmbase.dll' -> '\Device\HarddiskVolume4\Windows\System32\winmmbase.dll' [rcNtRedir=0xc0150008]
790678c.37bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
791678c.37bc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\winmmbase.dll)
792678c.37bc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\winmmbase.dll
793678c.37bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
794678c.37bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
795678c.37bc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
796678c.37bc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\kernel32.dll (Input=kernel32, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
797678c.37bc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe76030000 'C:\WINDOWS\System32\kernel32.dll'
798678c.37bc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-string-l1-1-0) -> 0x0, fPresent=1
799678c.37bc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-string-l1-1-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
800678c.37bc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe75890000 'api-ms-win-core-string-l1-1-0'
801678c.37bc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-datetime-l1-1-1) -> 0x0, fPresent=1
802678c.37bc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-datetime-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
803678c.37bc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe75890000 'api-ms-win-core-datetime-l1-1-1'
804678c.37bc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-obsolete-l1-2-0) -> 0x0, fPresent=1
805678c.37bc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-obsolete-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
806678c.37bc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe75890000 'api-ms-win-core-localization-obsolete-l1-2-0'
807678c.37bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'user32.dll'.
808678c.37bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #23 'win32u.dll'.
809678c.37bc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\imm32.dll)
810678c.37bc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\imm32.dll
811678c.37bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
812678c.37bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume4\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
813678c.37bc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\win32u.dll [lacks WinVerifyTrust]
814678c.37bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
815678c.37bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
816678c.37bc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
817678c.37bc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\IMM32.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
818678c.37bc: supR3HardenedDllNotificationCallback: load 00007ffe78160000 LB 0x0002d000 C:\WINDOWS\System32\IMM32.DLL [fFlags=0x0]
819678c.37bc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\imm32.dll [lacks WinVerifyTrust]
820678c.37bc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe78160000 'C:\WINDOWS\system32\IMM32.DLL'
821678c.37bc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe59d50000 'C:\Program Files\Manufacturer\Endpoint Agent\clpbm64.dll'
822678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
823678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #67 'user32.dll'.
824678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #69 'gdi32.dll'.
825678c.5edc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\shell32.dll)
826678c.5edc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\shell32.dll
827678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
828678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
829678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
830678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
831678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
832678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
833678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5openglvbox.dll'...
834678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5openglvbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5openglvbox.dll' [rcNtRedir=0xc0150008]
835678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'qt5widgetsvbox.dll'.
836678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'qt5guivbox.dll'.
837678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5corevbox.dll'.
838678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcr100.dll'.
839678c.5edc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll)
840678c.5edc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll
841678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5printsupportvbox.dll'...
842678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5printsupportvbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5printsupportvbox.dll' [rcNtRedir=0xc0150008]
843678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
844678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
845678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5widgetsvbox.dll'.
846678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5guivbox.dll'.
847678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'.
848678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'winspool.drv'.
849678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'comdlg32.dll'.
850678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcr100.dll'.
851678c.5edc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll)
852678c.5edc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll
853678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
854678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
855678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
856678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
857678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5guivbox.dll'.
858678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5corevbox.dll'.
859678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'shell32.dll'.
860678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
861678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
862678c.5edc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll)
863678c.5edc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll
864678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
865678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
866678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'ole32.dll'.
867678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'opengl32.dll'.
868678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
869678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
870678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'.
871678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
872678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
873678c.5edc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll)
874678c.5edc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
875678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
876678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
877678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
878678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'shell32.dll'.
879678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ole32.dll'.
880678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'advapi32.dll'.
881678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ws2_32.dll'.
882678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'mpr.dll'.
883678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcp100.dll'.
884678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'msvcr100.dll'.
885678c.5edc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll)
886678c.5edc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
887678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
888678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
889678c.5edc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll)
890678c.5edc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll
891678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
892678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
893678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
894678c.5edc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll)
895678c.5edc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll
896678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
897678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
898678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
899678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
900678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ws2_32.dll'.
901678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'rpcrt4.dll'.
902678c.5edc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll)
903678c.5edc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll
904678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
905678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume4\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
906678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
907678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'advapi32.dll'.
908678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
909678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'gdi32.dll'.
910678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'glu32.dll'.
911678c.5edc: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\opengl32.dll)
912678c.5edc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\opengl32.dll
913678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
914678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
915678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
916678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'glu32.dll'...
917678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'glu32.dll' -> '\Device\HarddiskVolume4\Windows\System32\glu32.dll' [rcNtRedir=0xc0150008]
918678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
919678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
920678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'opengl32.dll'.
921678c.5edc: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\glu32.dll)
922678c.5edc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\glu32.dll
923678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
924678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
925678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
926678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
927678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
928678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
929678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
930678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
931678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
932678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
933678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
934678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
935678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
936678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
937678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
938678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
939678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume4\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
940678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'rpcrt4.dll'.
941678c.5edc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\ws2_32.dll)
942678c.5edc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\ws2_32.dll
943678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
944678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
945678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
946678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
947678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
948678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
949678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
950678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
951678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
952678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
953678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
954678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
955678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
956678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
957678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
958678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mpr.dll'...
959678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'mpr.dll' -> '\Device\HarddiskVolume4\Windows\System32\mpr.dll' [rcNtRedir=0xc0150008]
960678c.5edc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\mpr.dll)
961678c.5edc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\mpr.dll
962678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
963678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume4\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
964678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ws2_32.dll [lacks WinVerifyTrust]
965678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
966678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
967678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
968678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
969678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume4\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
970678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ole32.dll [lacks WinVerifyTrust]
971678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
972678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume4\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
973678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\shell32.dll [lacks WinVerifyTrust]
974678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
975678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
976678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
977678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
978678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
979678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
980678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
981678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
982678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
983678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
984678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
985678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
986678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
987678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
988678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
989678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
990678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
991678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
992678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
993678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume4\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
994678c.5edc: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
995678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
996678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume4\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
997678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ole32.dll [lacks WinVerifyTrust]
998678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
999678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
1000678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
1001678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
1002678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
1003678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
1004678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
1005678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume4\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
1006678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\shell32.dll [lacks WinVerifyTrust]
1007678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
1008678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
1009678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
1010678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
1011678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
1012678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
1013678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
1014678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
1015678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
1016678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
1017678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
1018678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
1019678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
1020678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
1021678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
1022678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'comdlg32.dll'...
1023678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'comdlg32.dll' -> '\Device\HarddiskVolume4\Windows\System32\comdlg32.dll' [rcNtRedir=0xc0150008]
1024678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1025678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #32 'user32.dll'.
1026678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #33 'shlwapi.dll'.
1027678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'gdi32.dll'.
1028678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'comctl32.dll'.
1029678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'shell32.dll'.
1030678c.5edc: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\comdlg32.dll)
1031678c.5edc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\comdlg32.dll
1032678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winspool.drv'...
1033678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'winspool.drv' -> '\Device\HarddiskVolume4\Windows\System32\winspool.drv' [rcNtRedir=0xc0150008]
1034678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1035678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #28 'bcrypt.dll'.
1036678c.5edc: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\winspool.drv)
1037678c.5edc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\winspool.drv
1038678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
1039678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
1040678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
1041678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
1042678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
1043678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
1044678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
1045678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
1046678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
1047678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
1048678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
1049678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
1050678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
1051678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
1052678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
1053678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
1054678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
1055678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
1056678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
1057678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
1058678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
1059678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
1060678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
1061678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
1062678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
1063678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
1064678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
1065678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
1066678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
1067678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
1068678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
1069678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
1070678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
1071678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1072678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1073678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1074678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcrypt.dll'...
1075678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcrypt.dll' -> '\Device\HarddiskVolume4\Windows\System32\bcrypt.dll' [rcNtRedir=0xc0150008]
1076678c.5edc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\bcrypt.dll)
1077678c.5edc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\bcrypt.dll
1078678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1079678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1080678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1081678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
1082678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume4\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
1083678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\shell32.dll [lacks WinVerifyTrust]
1084678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'comctl32.dll'...
1085678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'comctl32.dll' -> '\Device\HarddiskVolume4\Windows\System32\comctl32.dll' [rcNtRedir=0x0]
1086678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'advapi32.dll'.
1087678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
1088678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
1089678c.5edc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\comctl32.dll)
1090678c.5edc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\comctl32.dll
1091678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
1092678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
1093678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
1094678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shlwapi.dll'...
1095678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'shlwapi.dll' -> '\Device\HarddiskVolume4\Windows\System32\shlwapi.dll' [rcNtRedir=0xc0150008]
1096678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'.
1097678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #42 'gdi32.dll'.
1098678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #43 'user32.dll'.
1099678c.5edc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\shlwapi.dll)
1100678c.5edc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\shlwapi.dll
1101678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
1102678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
1103678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
1104678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1105678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1106678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1107678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
1108678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
1109678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
1110678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
1111678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume4\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
1112678c.5edc: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
1113678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
1114678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
1115678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
1116678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1117678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1118678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1119678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
1120678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
1121678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
1122678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
1123678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
1124678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
1125678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1126678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1127678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1128678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
1129678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
1130678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
1131678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
1132678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
1133678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
1134678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
1135678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
1136678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
1137678c.5edc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VirtualBox.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000a01:<flags> [calling]
1138678c.5edc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.dll [lacks WinVerifyTrust]
1139678c.5edc: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
1140678c.5edc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1141678c.5edc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
1142678c.5edc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
1143678c.5edc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
1144678c.5edc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
1145678c.5edc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
1146678c.5edc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll [lacks WinVerifyTrust]
1147678c.5edc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll [lacks WinVerifyTrust]
1148678c.5edc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\winmm.dll [lacks WinVerifyTrust]
1149678c.5edc: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\glu32.dll [lacks WinVerifyTrust]
1150678c.5edc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\mpr.dll [lacks WinVerifyTrust]
1151678c.5edc: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\winspool.drv [lacks WinVerifyTrust]
1152678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'advapi32.dll'.
1153678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
1154678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
1155678c.5edc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.15063.0_none_43a14f3b47f396e6\comctl32.dll)
1156678c.5edc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.15063.0_none_43a14f3b47f396e6\comctl32.dll
1157678c.5edc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\winmmbase.dll [lacks WinVerifyTrust]
1158678c.5edc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
1159678c.5edc: supR3HardenedDllNotificationCallback: load 00007ffe69460000 LB 0x0002c000 C:\WINDOWS\SYSTEM32\GLU32.dll [fFlags=0x0]
1160678c.5edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\glu32.dll [lacks WinVerifyTrust]
1161678c.5edc: supR3HardenedDllNotificationCallback: load 00007ffe576c0000 LB 0x00121000 C:\WINDOWS\SYSTEM32\OPENGL32.dll [fFlags=0x0]
1162678c.5edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
1163678c.5edc: supR3HardenedDllNotificationCallback: load 0000000052960000 LB 0x000d2000 C:\Program Files\Oracle\VirtualBox\MSVCR100.dll [fFlags=0x0]
1164678c.5edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
1165678c.5edc: supR3HardenedDllNotificationCallback: load 00000000528c0000 LB 0x00098000 C:\Program Files\Oracle\VirtualBox\MSVCP100.dll [fFlags=0x0]
1166678c.5edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
1167678c.5edc: supR3HardenedDllNotificationCallback: load 00007ffe780e0000 LB 0x0006c000 C:\WINDOWS\System32\WS2_32.dll [fFlags=0x0]
1168678c.5edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ws2_32.dll [lacks WinVerifyTrust]
1169678c.5edc: supR3HardenedDllNotificationCallback: load 00007ffe23190000 LB 0x00590000 C:\Program Files\Oracle\VirtualBox\VBoxRT.dll [fFlags=0x0]
1170678c.5edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1171678c.5edc: supR3HardenedDllNotificationCallback: load 00007ffe75730000 LB 0x00049000 C:\WINDOWS\System32\cfgmgr32.dll [fFlags=0x0]
1172678c.5edc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\cfgmgr32.dll)
1173678c.5edc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\cfgmgr32.dll
1174678c.5edc: supR3HardenedDllNotificationCallback: load 00007ffe77f80000 LB 0x000aa000 C:\WINDOWS\System32\shcore.dll [fFlags=0x0]
1175678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1176678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #33 'rpcrt4.dll'.
1177678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #40 'combase.dll'.
1178678c.5edc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\SHCore.dll)
1179678c.5edc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\SHCore.dll
1180678c.5edc: supR3HardenedDllNotificationCallback: load 00007ffe77d40000 LB 0x00051000 C:\WINDOWS\System32\shlwapi.dll [fFlags=0x0]
1181678c.5edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\shlwapi.dll [lacks WinVerifyTrust]
1182678c.5edc: supR3HardenedDllNotificationCallback: load 00007ffe74aa0000 LB 0x00011000 C:\WINDOWS\System32\kernel.appcore.dll [fFlags=0x0]
1183678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcrt.dll'.
1184678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'rpcrt4.dll'.
1185678c.5edc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\kernel.appcore.dll)
1186678c.5edc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\kernel.appcore.dll
1187678c.5edc: supR3HardenedDllNotificationCallback: load 00007ffe74ac0000 LB 0x0004c000 C:\WINDOWS\System32\powrprof.dll [fFlags=0x0]
1188678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'rpcrt4.dll'.
1189678c.5edc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\powrprof.dll)
1190678c.5edc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\powrprof.dll
1191678c.5edc: supR3HardenedDllNotificationCallback: load 00007ffe74b30000 LB 0x00015000 C:\WINDOWS\System32\profapi.dll [fFlags=0x0]
1192678c.5edc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\profapi.dll)
1193678c.5edc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\profapi.dll
1194678c.5edc: supR3HardenedDllNotificationCallback: load 00007ffe74cd0000 LB 0x006f2000 C:\WINDOWS\System32\windows.storage.dll [fFlags=0x0]
1195678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1196678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #25 'rpcrt4.dll'.
1197678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #50 'combase.dll'.
1198678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #63 'profapi.dll'.
1199678c.5edc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\windows.storage.dll)
1200678c.5edc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\windows.storage.dll
1201678c.5edc: supR3HardenedDllNotificationCallback: load 00007ffe76110000 LB 0x01437000 C:\WINDOWS\System32\SHELL32.dll [fFlags=0x0]
1202678c.5edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\shell32.dll [lacks WinVerifyTrust]
1203678c.5edc: supR3HardenedDllNotificationCallback: load 00007ffe62d10000 LB 0x0001b000 C:\WINDOWS\SYSTEM32\MPR.dll [fFlags=0x0]
1204678c.5edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\mpr.dll [lacks WinVerifyTrust]
1205678c.5edc: supR3HardenedDllNotificationCallback: load 00000000515d0000 LB 0x00565000 C:\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [fFlags=0x0]
1206678c.5edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
1207678c.5edc: supR3HardenedDllNotificationCallback: load 00007ffe21200000 LB 0x005f7000 C:\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [fFlags=0x0]
1208678c.5edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
1209678c.5edc: supR3HardenedDllNotificationCallback: load 0000000051b40000 LB 0x00561000 C:\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [fFlags=0x0]
1210678c.5edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
1211678c.5edc: supR3HardenedDllNotificationCallback: load 00007ffe74660000 LB 0x00025000 C:\WINDOWS\SYSTEM32\bcrypt.dll [fFlags=0x0]
1212678c.5edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
1213678c.5edc: supR3HardenedDllNotificationCallback: load 00007ffe6a410000 LB 0x00089000 C:\WINDOWS\SYSTEM32\WINSPOOL.DRV [fFlags=0x0]
1214678c.5edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\winspool.drv [lacks WinVerifyTrust]
1215678c.5edc: supR3HardenedDllNotificationCallback: load 00007ffe66fa0000 LB 0x000a6000 C:\WINDOWS\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.15063.0_none_43a14f3b47f396e6\COMCTL32.dll [fFlags=0x0]
1216678c.5edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.15063.0_none_43a14f3b47f396e6\comctl32.dll [lacks WinVerifyTrust]
1217678c.5edc: supR3HardenedDllNotificationCallback: load 00007ffe77550000 LB 0x00108000 C:\WINDOWS\System32\COMDLG32.dll [fFlags=0x0]
1218678c.5edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\comdlg32.dll [lacks WinVerifyTrust]
1219678c.5edc: supR3HardenedDllNotificationCallback: load 00007ffe396c0000 LB 0x00051000 C:\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll [fFlags=0x0]
1220678c.5edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll [lacks WinVerifyTrust]
1221678c.5edc: supR3HardenedDllNotificationCallback: load 0000000052860000 LB 0x00054000 C:\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll [fFlags=0x0]
1222678c.5edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll [lacks WinVerifyTrust]
1223678c.5edc: supR3HardenedDllNotificationCallback: load 00007ffe78570000 LB 0x000bf000 C:\WINDOWS\System32\OLEAUT32.dll [fFlags=0x0]
1224678c.5edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
1225678c.5edc: supR3HardenedDllNotificationCallback: load 00007ffe72eb0000 LB 0x0002b000 C:\WINDOWS\SYSTEM32\WINMMBASE.dll [fFlags=0x0]
1226678c.5edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\winmmbase.dll [lacks WinVerifyTrust]
1227678c.5edc: supR3HardenedDllNotificationCallback: load 00007ffe72ee0000 LB 0x00023000 C:\WINDOWS\SYSTEM32\WINMM.dll [fFlags=0x0]
1228678c.5edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\winmm.dll [lacks WinVerifyTrust]
1229678c.5edc: supR3HardenedDllNotificationCallback: load 00007ffe21800000 LB 0x00a33000 C:\Program Files\Oracle\VirtualBox\VirtualBox.dll [fFlags=0x0]
1230678c.5edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.dll [lacks WinVerifyTrust]
1231678c.5edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1232678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'profapi.dll'...
1233678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'profapi.dll' -> '\Device\HarddiskVolume4\Windows\System32\profapi.dll' [rcNtRedir=0xc0150008]
1234678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\profapi.dll [lacks WinVerifyTrust]
1235678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
1236678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume4\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
1237678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\combase.dll [lacks WinVerifyTrust]
1238678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
1239678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
1240678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
1241678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1242678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1243678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1244678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
1245678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
1246678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
1247678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
1248678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
1249678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
1250678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1251678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1252678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1253678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
1254678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume4\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
1255678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\combase.dll [lacks WinVerifyTrust]
1256678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
1257678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
1258678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
1259678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1260678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1261678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1262678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
1263678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
1264678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
1265678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
1266678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
1267678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
1268678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
1269678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
1270678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
1271678c.5edc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
1272678c.5edc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe23190000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1273678c.5edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1274678c.5edc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
1275678c.5edc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe23190000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1276678c.5edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1277678c.5edc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
1278678c.5edc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe23190000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1279678c.5edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1280678c.5edc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
1281678c.5edc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe23190000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1282678c.5edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1283678c.5edc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
1284678c.5edc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe23190000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1285678c.5edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1286678c.5edc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
1287678c.5edc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe23190000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1288678c.5edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1289678c.5edc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe23190000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1290678c.5edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1291678c.5edc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe23190000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1292678c.5edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1293678c.5edc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe23190000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1294678c.5edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1295678c.5edc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe23190000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1296678c.5edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1297678c.5edc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe23190000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1298678c.5edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1299678c.5edc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe23190000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1300678c.5edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1301678c.5edc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe23190000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1302678c.5edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1303678c.5edc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
1304678c.5edc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe23190000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1305678c.5edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1306678c.5edc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe23190000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1307678c.5edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1308678c.5edc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe23190000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1309678c.5edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1310678c.5edc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe23190000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1311678c.5edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1312678c.5edc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe23190000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1313678c.5edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1314678c.5edc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe23190000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1315678c.5edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1316678c.5edc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe23190000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1317678c.5edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1318678c.5edc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe23190000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1319678c.5edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1320678c.5edc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe23190000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1321678c.5edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1322678c.5edc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe23190000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1323678c.5edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1324678c.5edc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe23190000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1325678c.5edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1326678c.5edc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe23190000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1327678c.5edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1328678c.5edc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe23190000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1329678c.5edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1330678c.5edc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe23190000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1331678c.5edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1332678c.5edc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe23190000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1333678c.5edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1334678c.5edc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe23190000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1335678c.5edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1336678c.5edc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
1337678c.5edc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe23190000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1338678c.5edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1339678c.5edc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe23190000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1340678c.5edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1341678c.5edc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe23190000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1342678c.5edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\imm32.dll [lacks WinVerifyTrust]
1343678c.5edc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\imm32.dll (Input=imm32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
1344678c.5edc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe78160000 'C:\WINDOWS\System32\imm32.dll'
1345678c.5edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
1346678c.5edc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\ADVAPI32.DLL (Input=ADVAPI32.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
1347678c.5edc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe77ed0000 'C:\WINDOWS\System32\ADVAPI32.DLL'
1348678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'bcryptprimitives.dll'.
1349678c.5edc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\cryptbase.dll)
1350678c.5edc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\cryptbase.dll
1351678c.5edc: supR3HardenedDllNotificationCallback: load 00007ffe74570000 LB 0x0000b000 C:\WINDOWS\SYSTEM32\CRYPTBASE.DLL [fFlags=0x0]
1352678c.5edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\cryptbase.dll [lacks WinVerifyTrust]
1353678c.5edc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe21800000 'C:\Program Files\Oracle\VirtualBox\VirtualBox.dll'
1354678c.5edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
1355678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'...
1356678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume4\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008]
1357678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust]
1358678c.5edc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\kernel32.dll (Input=kernel32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
1359678c.5edc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe76030000 'C:\WINDOWS\System32\kernel32.dll'
1360678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
1361678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'ole32.dll'.
1362678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
1363678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'imm32.dll'.
1364678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'winmm.dll'.
1365678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'oleaut32.dll'.
1366678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'shell32.dll'.
1367678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'advapi32.dll'.
1368678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'qt5guivbox.dll'.
1369678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'qt5corevbox.dll'.
1370678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'msvcr100.dll'.
1371678c.5edc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\platforms\qwindows.dll)
1372678c.5edc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\platforms\qwindows.dll
1373678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
1374678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
1375678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
1376678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
1377678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
1378678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
1379678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
1380678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
1381678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
1382678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
1383678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
1384678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
1385678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
1386678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume4\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
1387678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\shell32.dll [lacks WinVerifyTrust]
1388678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
1389678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume4\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
1390678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
1391678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
1392678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume4\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
1393678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\winmm.dll [lacks WinVerifyTrust]
1394678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'...
1395678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume4\Windows\System32\imm32.dll' [rcNtRedir=0xc0150008]
1396678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\imm32.dll [lacks WinVerifyTrust]
1397678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
1398678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
1399678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
1400678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
1401678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume4\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
1402678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ole32.dll [lacks WinVerifyTrust]
1403678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
1404678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
1405678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
1406678c.5edc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
1407678c.5edc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\platforms\qwindows.dll [lacks WinVerifyTrust]
1408678c.5edc: supR3HardenedDllNotificationCallback: load 00007ffe301b0000 LB 0x0012e000 C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll [fFlags=0x0]
1409678c.5edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\platforms\qwindows.dll [lacks WinVerifyTrust]
1410678c.5edc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe301b0000 'C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll'
1411678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1412678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #31 'gdi32.dll'.
1413678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #32 'user32.dll'.
1414678c.5edc: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\uxtheme.dll)
1415678c.5edc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\uxtheme.dll
1416678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
1417678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
1418678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
1419678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
1420678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
1421678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
1422678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1423678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1424678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1425678c.5edc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
1426678c.5edc: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\uxtheme.dll [lacks WinVerifyTrust]
1427678c.5edc: supR3HardenedDllNotificationCallback: load 00007ffe73240000 LB 0x00095000 C:\WINDOWS\system32\uxtheme.dll [fFlags=0x0]
1428678c.5edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\uxtheme.dll [lacks WinVerifyTrust]
1429678c.5edc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe73240000 'C:\WINDOWS\system32\uxtheme.dll'
1430678c.5edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
1431678c.5edc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe777d0000 'C:\WINDOWS\system32\user32.dll'
1432678c.5edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\shell32.dll [lacks WinVerifyTrust]
1433678c.5edc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
1434678c.5edc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe76110000 'C:\WINDOWS\system32\shell32.dll'
1435678c.5edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\SHCore.dll [lacks WinVerifyTrust]
1436678c.5edc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\SHCore.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
1437678c.5edc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe77f80000 'C:\WINDOWS\system32\SHCore.dll'
1438678c.5edc: supR3HardenedMonitor_LdrLoadDll: error opening 'C:\WINDOWS\system32\wintab32.dll': 0 (NtPath=\??\C:\WINDOWS\system32\wintab32.dll; Input=C:\WINDOWS\system32\wintab32.dll; rcNtGetDll=0x0
1439678c.5edc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000034 'C:\WINDOWS\system32\wintab32.dll'
1440678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1441678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #17 'win32u.dll'.
1442678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'user32.dll'.
1443678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #19 'gdi32.dll'.
1444678c.5edc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\dwmapi.dll)
1445678c.5edc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\dwmapi.dll
1446678c.5edc: supR3HardenedDllNotificationCallback: load 00007ffe72a40000 LB 0x0002a000 C:\WINDOWS\system32\dwmapi.dll [fFlags=0x0]
1447678c.5edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\dwmapi.dll [lacks WinVerifyTrust]
1448678c.5edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\winmm.dll [lacks WinVerifyTrust]
1449678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
1450678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
1451678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
1452678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
1453678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
1454678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
1455678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
1456678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume4\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
1457678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\win32u.dll [lacks WinVerifyTrust]
1458678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1459678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1460678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1461678c.5edc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\winmm.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
1462678c.5edc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe72ee0000 'C:\WINDOWS\system32\winmm.dll'
1463678c.5edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\winmm.dll [lacks WinVerifyTrust]
1464678c.5edc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\winmm.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
1465678c.5edc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe72ee0000 'C:\WINDOWS\system32\winmm.dll'
1466678c.5edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\shell32.dll [lacks WinVerifyTrust]
1467678c.5edc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
1468678c.5edc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe76110000 'C:\WINDOWS\system32\shell32.dll'
1469678c.5edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\uxtheme.dll [lacks WinVerifyTrust]
1470678c.5edc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
1471678c.5edc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe73240000 'C:\WINDOWS\system32\uxtheme.dll'
1472678c.5edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
1473678c.5edc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\gdi32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
1474678c.5edc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe760e0000 'C:\WINDOWS\system32\gdi32.dll'
1475678c.5edc: supR3HardenedDllNotificationCallback: load 00007ffe77660000 LB 0x00166000 C:\WINDOWS\System32\MSCTF.dll [fFlags=0x0]
1476678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1477678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #19 'oleaut32.dll'.
1478678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'user32.dll'.
1479678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'gdi32.dll'.
1480678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'imm32.dll'.
1481678c.5edc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\msctf.dll)
1482678c.5edc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\msctf.dll
1483678c.5edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
1484678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'...
1485678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume4\Windows\System32\imm32.dll' [rcNtRedir=0xc0150008]
1486678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\imm32.dll [lacks WinVerifyTrust]
1487678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
1488678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
1489678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
1490678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
1491678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
1492678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
1493678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
1494678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume4\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
1495678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
1496678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1497678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1498678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1499678c.5edc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe77da0000 'C:\WINDOWS\System32\rpcrt4.dll'
1500678c.5edc: supR3HardenedDllNotificationCallback: load 00007ffe77c80000 LB 0x0009e000 C:\WINDOWS\System32\clbcatq.dll [fFlags=0x0]
1501678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1502678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #25 'rpcrt4.dll'.
1503678c.5edc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\clbcatq.dll)
1504678c.5edc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\clbcatq.dll
1505678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1506678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'shcore.dll'.
1507678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #23 'combase.dll'.
1508678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #25 'd3d11.dll'.
1509678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'dcomp.dll'.
1510678c.5edc: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\DataExchange.dll)
1511678c.5edc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\DataExchange.dll
1512678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dcomp.dll'...
1513678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'dcomp.dll' -> '\Device\HarddiskVolume4\Windows\System32\dcomp.dll' [rcNtRedir=0xc0150008]
1514678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'win32u.dll'.
1515678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'.
1516678c.5edc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\dcomp.dll)
1517678c.5edc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\dcomp.dll
1518678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'd3d11.dll'...
1519678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'd3d11.dll' -> '\Device\HarddiskVolume4\Windows\System32\d3d11.dll' [rcNtRedir=0xc0150008]
1520678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1521678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'dxgi.dll'.
1522678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #32 'win32u.dll'.
1523678c.5edc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\d3d11.dll)
1524678c.5edc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\d3d11.dll
1525678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
1526678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume4\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
1527678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\combase.dll [lacks WinVerifyTrust]
1528678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shcore.dll'...
1529678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'shcore.dll' -> '\Device\HarddiskVolume4\Windows\System32\shcore.dll' [rcNtRedir=0xc0150008]
1530678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\SHCore.dll [lacks WinVerifyTrust]
1531678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1532678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1533678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1534678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
1535678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
1536678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
1537678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1538678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1539678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1540678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
1541678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume4\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
1542678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\win32u.dll [lacks WinVerifyTrust]
1543678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dxgi.dll'...
1544678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'dxgi.dll' -> '\Device\HarddiskVolume4\Windows\System32\dxgi.dll' [rcNtRedir=0xc0150008]
1545678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1546678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'win32u.dll'.
1547678c.5edc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\dxgi.dll)
1548678c.5edc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\dxgi.dll
1549678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1550678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1551678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1552678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1553678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1554678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1555678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
1556678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume4\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
1557678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\win32u.dll [lacks WinVerifyTrust]
1558678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
1559678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume4\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
1560678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\win32u.dll [lacks WinVerifyTrust]
1561678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1562678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1563678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1564678c.5edc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\dataexchange.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
1565678c.5edc: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\DataExchange.dll [lacks WinVerifyTrust]
1566678c.5edc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\d3d11.dll [lacks WinVerifyTrust]
1567678c.5edc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\dcomp.dll [lacks WinVerifyTrust]
1568678c.5edc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\dxgi.dll [lacks WinVerifyTrust]
1569678c.5edc: supR3HardenedDllNotificationCallback: load 00007ffe739d0000 LB 0x000a4000 C:\WINDOWS\system32\dxgi.dll [fFlags=0x0]
1570678c.5edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\dxgi.dll [lacks WinVerifyTrust]
1571678c.5edc: supR3HardenedDllNotificationCallback: load 00007ffe71ac0000 LB 0x002df000 C:\WINDOWS\system32\d3d11.dll [fFlags=0x0]
1572678c.5edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\d3d11.dll [lacks WinVerifyTrust]
1573678c.5edc: supR3HardenedDllNotificationCallback: load 00007ffe713e0000 LB 0x00122000 C:\WINDOWS\system32\dcomp.dll [fFlags=0x0]
1574678c.5edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\dcomp.dll [lacks WinVerifyTrust]
1575678c.5edc: supR3HardenedDllNotificationCallback: load 00007ffe578e0000 LB 0x00047000 C:\WINDOWS\system32\dataexchange.dll [fFlags=0x0]
1576678c.5edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\DataExchange.dll [lacks WinVerifyTrust]
1577678c.5edc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe578e0000 'C:\WINDOWS\system32\dataexchange.dll'
1578678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1579678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'rpcrt4.dll'.
1580678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27 'bcrypt.dll'.
1581678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #39 'combase.dll'.
1582678c.5edc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\twinapi.appcore.dll)
1583678c.5edc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\twinapi.appcore.dll
1584678c.5edc: supR3HardenedDllNotificationCallback: load 00007ffe73470000 LB 0x00170000 C:\WINDOWS\system32\twinapi.appcore.dll [fFlags=0x0]
1585678c.5edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\twinapi.appcore.dll [lacks WinVerifyTrust]
1586678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1587678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'coreuicomponents.dll'.
1588678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'coremessaging.dll'.
1589678c.5edc: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\TextInputFramework.dll)
1590678c.5edc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\TextInputFramework.dll
1591678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1592678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #31 'coremessaging.dll'.
1593678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #44 'shcore.dll'.
1594678c.5edc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\CoreUIComponents.dll)
1595678c.5edc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\CoreUIComponents.dll
1596678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1597678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #24 'rpcrt4.dll'.
1598678c.5edc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\CoreMessaging.dll)
1599678c.5edc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\CoreMessaging.dll
1600678c.5edc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\ntmarta.dll)
1601678c.5edc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\ntmarta.dll
1602678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'combase.dll'.
1603678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #16 'rpcrt4.dll'.
1604678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'bcryptprimitives.dll'.
1605678c.5edc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\WinTypes.dll)
1606678c.5edc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\WinTypes.dll
1607678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1608678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'rpcrt4.dll'.
1609678c.5edc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\usermgrcli.dll)
1610678c.5edc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\usermgrcli.dll
1611678c.5edc: supR3HardenedDllNotificationCallback: load 00007ffe73d80000 LB 0x00031000 C:\WINDOWS\SYSTEM32\ntmarta.dll [fFlags=0x0]
1612678c.5edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ntmarta.dll [lacks WinVerifyTrust]
1613678c.5edc: supR3HardenedDllNotificationCallback: load 00007ffe721e0000 LB 0x000e3000 C:\WINDOWS\System32\CoreMessaging.dll [fFlags=0x0]
1614678c.5edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\CoreMessaging.dll [lacks WinVerifyTrust]
1615678c.5edc: supR3HardenedDllNotificationCallback: load 00007ffe71da0000 LB 0x00139000 C:\WINDOWS\SYSTEM32\wintypes.dll [fFlags=0x0]
1616678c.5edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\WinTypes.dll [lacks WinVerifyTrust]
1617678c.5edc: supR3HardenedDllNotificationCallback: load 00007ffe71ee0000 LB 0x00015000 C:\WINDOWS\SYSTEM32\usermgrcli.dll [fFlags=0x0]
1618678c.5edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\usermgrcli.dll [lacks WinVerifyTrust]
1619678c.5edc: supR3HardenedDllNotificationCallback: load 00007ffe71f00000 LB 0x002d2000 C:\WINDOWS\System32\CoreUIComponents.dll [fFlags=0x0]
1620678c.5edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\CoreUIComponents.dll [lacks WinVerifyTrust]
1621678c.5edc: supR3HardenedDllNotificationCallback: load 00007ffe72580000 LB 0x00082000 C:\WINDOWS\System32\TextInputFramework.dll [fFlags=0x0]
1622678c.5edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\TextInputFramework.dll [lacks WinVerifyTrust]
1623678c.5edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
1624678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
1625678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
1626678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
1627678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1628678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1629678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1630678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'...
1631678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume4\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008]
1632678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust]
1633678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
1634678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
1635678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
1636678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
1637678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume4\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
1638678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\combase.dll [lacks WinVerifyTrust]
1639678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
1640678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
1641678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
1642678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1643678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1644678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1645678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shcore.dll'...
1646678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'shcore.dll' -> '\Device\HarddiskVolume4\Windows\System32\shcore.dll' [rcNtRedir=0xc0150008]
1647678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\SHCore.dll [lacks WinVerifyTrust]
1648678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coremessaging.dll'...
1649678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'coremessaging.dll' -> '\Device\HarddiskVolume4\Windows\System32\coremessaging.dll' [rcNtRedir=0xc0150008]
1650678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\CoreMessaging.dll [lacks WinVerifyTrust]
1651678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1652678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1653678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1654678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coremessaging.dll'...
1655678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'coremessaging.dll' -> '\Device\HarddiskVolume4\Windows\System32\coremessaging.dll' [rcNtRedir=0xc0150008]
1656678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\CoreMessaging.dll [lacks WinVerifyTrust]
1657678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coreuicomponents.dll'...
1658678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'coreuicomponents.dll' -> '\Device\HarddiskVolume4\Windows\System32\coreuicomponents.dll' [rcNtRedir=0xc0150008]
1659678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\CoreUIComponents.dll [lacks WinVerifyTrust]
1660678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1661678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1662678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1663678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
1664678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume4\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
1665678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\combase.dll [lacks WinVerifyTrust]
1666678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcrypt.dll'...
1667678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcrypt.dll' -> '\Device\HarddiskVolume4\Windows\System32\bcrypt.dll' [rcNtRedir=0xc0150008]
1668678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
1669678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
1670678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
1671678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
1672678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1673678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1674678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1675678c.5edc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\OLEAUT32.DLL (Input=OLEAUT32.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
1676678c.5edc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe78570000 'C:\WINDOWS\System32\OLEAUT32.DLL'
1677678c.5edc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(ext-ms-win-rtcore-ntuser-window-ext-l1-1-0.dll) -> 0x0, fPresent=1
1678678c.5edc: supR3HardenedMonitor_LdrLoadDll: pName=ext-ms-win-rtcore-ntuser-window-ext-l1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
1679678c.5edc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe777d0000 'ext-ms-win-rtcore-ntuser-window-ext-l1-1-0.dll'
1680678c.5edc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(ext-ms-win-rtcore-ntuser-integration-l1-1-0.dll) -> 0x0, fPresent=1
1681678c.5edc: supR3HardenedMonitor_LdrLoadDll: pName=ext-ms-win-rtcore-ntuser-integration-l1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
1682678c.5edc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe777d0000 'ext-ms-win-rtcore-ntuser-integration-l1-1-0.dll'
1683678c.5edc: supR3HardenedMonitor_LdrLoadDll: error opening 'C:\WINDOWS\System32\secruntime.dll': 0 (NtPath=\??\C:\WINDOWS\System32\secruntime.dll; Input=secruntime.dll; rcNtGetDll=0xc0000135
1684678c.5edc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000034 'C:\WINDOWS\System32\secruntime.dll'
1685678c.5edc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-com-l1-1-1.dll) -> 0x0, fPresent=1
1686678c.5edc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-com-l1-1-1.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
1687678c.5edc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe77920000 'api-ms-win-core-com-l1-1-1.dll'
1688678c.5edc: supR3HardenedMonitor_LdrLoadDll: error opening 'C:\WINDOWS\System32\secruntime.dll': 0 (NtPath=\??\C:\WINDOWS\System32\secruntime.dll; Input=secruntime.dll; rcNtGetDll=0xc0000135
1689678c.5edc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000034 'C:\WINDOWS\System32\secruntime.dll'
1690678c.5edc: supR3HardenedMonitor_LdrLoadDll: error opening 'C:\WINDOWS\System32\secruntime.dll': 0 (NtPath=\??\C:\WINDOWS\System32\secruntime.dll; Input=secruntime.dll; rcNtGetDll=0xc0000135
1691678c.5edc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000034 'C:\WINDOWS\System32\secruntime.dll'
1692678c.5edc: supR3HardenedMonitor_LdrLoadDll: error opening 'C:\WINDOWS\System32\secruntime.dll': 0 (NtPath=\??\C:\WINDOWS\System32\secruntime.dll; Input=secruntime.dll; rcNtGetDll=0xc0000135
1693678c.5edc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000034 'C:\WINDOWS\System32\secruntime.dll'
1694678c.5edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msctf.dll [lacks WinVerifyTrust]
1695678c.5edc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\MSCTF.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
1696678c.5edc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe77660000 'C:\WINDOWS\System32\MSCTF.dll'
1697678c.5084: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1698678c.5084: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'rpcrt4.dll'.
1699678c.5084: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #30 'devobj.dll'.
1700678c.5084: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #31 'propsys.dll'.
1701678c.5084: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\MMDevAPI.dll)
1702678c.5084: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\MMDevAPI.dll
1703678c.5084: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #15 'cfgmgr32.dll'.
1704678c.5084: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\devobj.dll)
1705678c.5084: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\devobj.dll
1706678c.5084: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1707678c.5084: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'oleaut32.dll'.
1708678c.5084: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #30 'rpcrt4.dll'.
1709678c.5084: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\propsys.dll)
1710678c.5084: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\propsys.dll
1711678c.5084: supR3HardenedDllNotificationCallback: load 00007ffe73620000 LB 0x00028000 C:\WINDOWS\SYSTEM32\DEVOBJ.dll [fFlags=0x0]
1712678c.5084: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\devobj.dll [lacks WinVerifyTrust]
1713678c.5084: supR3HardenedDllNotificationCallback: load 00007ffe6f0f0000 LB 0x00196000 C:\WINDOWS\SYSTEM32\PROPSYS.dll [fFlags=0x0]
1714678c.5084: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\propsys.dll [lacks WinVerifyTrust]
1715678c.5084: supR3HardenedDllNotificationCallback: load 00007ffe68b00000 LB 0x00067000 C:\WINDOWS\SYSTEM32\MMDevAPI.DLL [fFlags=0x0]
1716678c.5084: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
1717678c.5084: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1718678c.5084: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'mmdevapi.dll'.
1719678c.5084: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'ksuser.dll'.
1720678c.5084: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27 'avrt.dll'.
1721678c.5084: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\wdmaud.drv)
1722678c.5084: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\wdmaud.drv
1723678c.5084: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'avrt.dll'...
1724678c.5084: supR3HardenedWinVerifyCacheProcessImportTodos: 'avrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\avrt.dll' [rcNtRedir=0xc0150008]
1725678c.5084: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\avrt.dll)
1726678c.5084: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\avrt.dll
1727678c.5084: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ksuser.dll'...
1728678c.5084: supR3HardenedWinVerifyCacheProcessImportTodos: 'ksuser.dll' -> '\Device\HarddiskVolume4\Windows\System32\ksuser.dll' [rcNtRedir=0xc0150008]
1729678c.5084: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1730678c.5084: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\ksuser.dll)
1731678c.5084: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\ksuser.dll
1732678c.5084: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mmdevapi.dll'...
1733678c.5084: supR3HardenedWinVerifyCacheProcessImportTodos: 'mmdevapi.dll' -> '\Device\HarddiskVolume4\Windows\System32\mmdevapi.dll' [rcNtRedir=0xc0150008]
1734678c.5084: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
1735678c.5084: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1736678c.5084: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1737678c.5084: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1738678c.5084: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
1739678c.5084: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
1740678c.5084: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
1741678c.5084: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
1742678c.5084: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume4\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
1743678c.5084: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
1744678c.5084: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1745678c.5084: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1746678c.5084: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1747678c.5084: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'cfgmgr32.dll'...
1748678c.5084: supR3HardenedWinVerifyCacheProcessImportTodos: 'cfgmgr32.dll' -> '\Device\HarddiskVolume4\Windows\System32\cfgmgr32.dll' [rcNtRedir=0xc0150008]
1749678c.5084: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\cfgmgr32.dll [lacks WinVerifyTrust]
1750678c.5084: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'propsys.dll'...
1751678c.5084: supR3HardenedWinVerifyCacheProcessImportTodos: 'propsys.dll' -> '\Device\HarddiskVolume4\Windows\System32\propsys.dll' [rcNtRedir=0xc0150008]
1752678c.5084: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\propsys.dll [lacks WinVerifyTrust]
1753678c.5084: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'devobj.dll'...
1754678c.5084: supR3HardenedWinVerifyCacheProcessImportTodos: 'devobj.dll' -> '\Device\HarddiskVolume4\Windows\System32\devobj.dll' [rcNtRedir=0xc0150008]
1755678c.5084: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\devobj.dll [lacks WinVerifyTrust]
1756678c.5084: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
1757678c.5084: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
1758678c.5084: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
1759678c.5084: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1760678c.5084: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1761678c.5084: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1762678c.5084: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1763678c.5084: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1764678c.5084: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1765678c.5084: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
1766678c.5084: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
1767678c.5084: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ksuser.dll [lacks WinVerifyTrust]
1768678c.5084: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\avrt.dll [lacks WinVerifyTrust]
1769678c.5084: supR3HardenedDllNotificationCallback: load 00007ffe3e700000 LB 0x00009000 C:\WINDOWS\SYSTEM32\ksuser.dll [fFlags=0x0]
1770678c.5084: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ksuser.dll [lacks WinVerifyTrust]
1771678c.5084: supR3HardenedDllNotificationCallback: load 00007ffe6b660000 LB 0x0000b000 C:\WINDOWS\SYSTEM32\AVRT.dll [fFlags=0x0]
1772678c.5084: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\avrt.dll [lacks WinVerifyTrust]
1773678c.5084: supR3HardenedDllNotificationCallback: load 00007ffe4ed10000 LB 0x00041000 C:\WINDOWS\System32\wdmaud.drv [fFlags=0x0]
1774678c.5084: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
1775678c.5084: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe4ed10000 'C:\WINDOWS\System32\wdmaud.drv'
1776678c.5084: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
1777678c.5084: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
1778678c.5084: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe4ed10000 'C:\WINDOWS\System32\wdmaud.drv'
1779678c.5084: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
1780678c.5084: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\MMDEVAPI.DLL (Input=MMDEVAPI.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
1781678c.5084: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe68b00000 'C:\WINDOWS\System32\MMDEVAPI.DLL'
1782678c.5084: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
1783678c.5084: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
1784678c.5084: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe4ed10000 'C:\WINDOWS\System32\wdmaud.drv'
1785678c.5084: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
1786678c.5084: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
1787678c.5084: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe4ed10000 'C:\WINDOWS\System32\wdmaud.drv'
1788678c.5084: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
1789678c.5084: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
1790678c.5084: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe4ed10000 'C:\WINDOWS\System32\wdmaud.drv'
1791678c.5084: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
1792678c.5084: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'rpcrt4.dll'.
1793678c.5084: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'oleaut32.dll'.
1794678c.5084: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #47 'mmdevapi.dll'.
1795678c.5084: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #48 'avrt.dll'.
1796678c.5084: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\AudioSes.dll)
1797678c.5084: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\AudioSes.dll
1798678c.5084: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'avrt.dll'...
1799678c.5084: supR3HardenedWinVerifyCacheProcessImportTodos: 'avrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\avrt.dll' [rcNtRedir=0xc0150008]
1800678c.5084: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\avrt.dll [lacks WinVerifyTrust]
1801678c.5084: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mmdevapi.dll'...
1802678c.5084: supR3HardenedWinVerifyCacheProcessImportTodos: 'mmdevapi.dll' -> '\Device\HarddiskVolume4\Windows\System32\mmdevapi.dll' [rcNtRedir=0xc0150008]
1803678c.5084: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
1804678c.5084: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
1805678c.5084: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume4\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
1806678c.5084: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
1807678c.5084: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
1808678c.5084: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
1809678c.5084: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
1810678c.5084: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
1811678c.5084: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
1812678c.5084: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust]
1813678c.5084: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\AUDIOSES.DLL (Input=AUDIOSES.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
1814678c.5084: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\AudioSes.dll [lacks WinVerifyTrust]
1815678c.5084: supR3HardenedDllNotificationCallback: load 00007ffe68010000 LB 0x00105000 C:\WINDOWS\System32\AUDIOSES.DLL [fFlags=0x0]
1816678c.5084: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\AudioSes.dll [lacks WinVerifyTrust]
1817678c.5084: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe68010000 'C:\WINDOWS\System32\AUDIOSES.DLL'
1818678c.5084: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
1819678c.5084: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
1820678c.5084: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe4ed10000 'C:\WINDOWS\System32\wdmaud.drv'
1821678c.5084: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
1822678c.5084: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
1823678c.5084: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe4ed10000 'C:\WINDOWS\System32\wdmaud.drv'
1824678c.5084: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
1825678c.5084: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe4ed10000 'C:\WINDOWS\System32\wdmaud.drv'
1826678c.5084: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
1827678c.5084: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe4ed10000 'C:\WINDOWS\System32\wdmaud.drv'
1828678c.5084: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
1829678c.5084: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe4ed10000 'C:\WINDOWS\System32\wdmaud.drv'
1830678c.5084: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
1831678c.5084: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe4ed10000 'C:\WINDOWS\System32\wdmaud.drv'
1832678c.5084: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
1833678c.5084: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe4ed10000 'C:\WINDOWS\System32\wdmaud.drv'
1834678c.5084: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
1835678c.5084: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe4ed10000 'C:\WINDOWS\System32\wdmaud.drv'
1836678c.5084: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
1837678c.5084: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe4ed10000 'C:\WINDOWS\System32\wdmaud.drv'
1838678c.5084: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
1839678c.5084: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
1840678c.5084: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe4ed10000 'C:\WINDOWS\System32\wdmaud.drv'
1841678c.5084: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
1842678c.5084: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe4ed10000 'C:\WINDOWS\System32\wdmaud.drv'
1843678c.5084: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
1844678c.5084: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe4ed10000 'C:\WINDOWS\System32\wdmaud.drv'
1845678c.5084: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1846678c.5084: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'mmdevapi.dll'.
1847678c.5084: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'msacm32.dll'.
1848678c.5084: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'winmmbase.dll'.
1849678c.5084: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\msacm32.drv)
1850678c.5084: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\msacm32.drv
1851678c.5084: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmmbase.dll'...
1852678c.5084: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmmbase.dll' -> '\Device\HarddiskVolume4\Windows\System32\winmmbase.dll' [rcNtRedir=0xc0150008]
1853678c.5084: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\winmmbase.dll [lacks WinVerifyTrust]
1854678c.5084: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msacm32.dll'...
1855678c.5084: supR3HardenedWinVerifyCacheProcessImportTodos: 'msacm32.dll' -> '\Device\HarddiskVolume4\Windows\System32\msacm32.dll' [rcNtRedir=0xc0150008]
1856678c.5084: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1857678c.5084: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\msacm32.dll)
1858678c.5084: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\msacm32.dll
1859678c.5084: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mmdevapi.dll'...
1860678c.5084: supR3HardenedWinVerifyCacheProcessImportTodos: 'mmdevapi.dll' -> '\Device\HarddiskVolume4\Windows\System32\mmdevapi.dll' [rcNtRedir=0xc0150008]
1861678c.5084: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
1862678c.5084: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1863678c.5084: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1864678c.5084: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1865678c.5084: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1866678c.5084: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1867678c.5084: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1868678c.5084: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
1869678c.5084: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
1870678c.5084: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msacm32.dll [lacks WinVerifyTrust]
1871678c.5084: supR3HardenedDllNotificationCallback: load 00007ffe39690000 LB 0x0001c000 C:\WINDOWS\SYSTEM32\MSACM32.dll [fFlags=0x0]
1872678c.5084: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msacm32.dll [lacks WinVerifyTrust]
1873678c.5084: supR3HardenedDllNotificationCallback: load 00007ffe70710000 LB 0x0000d000 C:\WINDOWS\System32\msacm32.drv [fFlags=0x0]
1874678c.5084: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
1875678c.5084: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe70710000 'C:\WINDOWS\System32\msacm32.drv'
1876678c.5084: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
1877678c.5084: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
1878678c.5084: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe70710000 'C:\WINDOWS\System32\msacm32.drv'
1879678c.5084: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
1880678c.5084: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
1881678c.5084: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe70710000 'C:\WINDOWS\System32\msacm32.drv'
1882678c.5084: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
1883678c.5084: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
1884678c.5084: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe70710000 'C:\WINDOWS\System32\msacm32.drv'
1885678c.5084: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
1886678c.5084: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
1887678c.5084: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe70710000 'C:\WINDOWS\System32\msacm32.drv'
1888678c.5084: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
1889678c.5084: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
1890678c.5084: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe70710000 'C:\WINDOWS\System32\msacm32.drv'
1891678c.5084: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
1892678c.5084: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
1893678c.5084: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe70710000 'C:\WINDOWS\System32\msacm32.drv'
1894678c.5084: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
1895678c.5084: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe70710000 'C:\WINDOWS\System32\msacm32.drv'
1896678c.5084: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
1897678c.5084: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe70710000 'C:\WINDOWS\System32\msacm32.drv'
1898678c.5084: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
1899678c.5084: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe70710000 'C:\WINDOWS\System32\msacm32.drv'
1900678c.5084: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1901678c.5084: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'winmm.dll'.
1902678c.5084: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\midimap.dll)
1903678c.5084: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\midimap.dll
1904678c.5084: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
1905678c.5084: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume4\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
1906678c.5084: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\winmm.dll [lacks WinVerifyTrust]
1907678c.5084: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1908678c.5084: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1909678c.5084: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1910678c.5084: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
1911678c.5084: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\midimap.dll [lacks WinVerifyTrust]
1912678c.5084: supR3HardenedDllNotificationCallback: load 00007ffe6b0a0000 LB 0x0000a000 C:\WINDOWS\System32\midimap.dll [fFlags=0x0]
1913678c.5084: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\midimap.dll [lacks WinVerifyTrust]
1914678c.5084: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe6b0a0000 'C:\WINDOWS\System32\midimap.dll'
1915678c.5084: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\midimap.dll [lacks WinVerifyTrust]
1916678c.5084: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
1917678c.5084: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe6b0a0000 'C:\WINDOWS\System32\midimap.dll'
1918678c.5084: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\midimap.dll [lacks WinVerifyTrust]
1919678c.5084: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
1920678c.5084: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe6b0a0000 'C:\WINDOWS\System32\midimap.dll'
1921678c.5084: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\midimap.dll [lacks WinVerifyTrust]
1922678c.5084: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
1923678c.5084: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe6b0a0000 'C:\WINDOWS\System32\midimap.dll'
1924678c.1d38: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
1925678c.1d38: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\MMDevApi.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
1926678c.1d38: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe68b00000 'C:\WINDOWS\System32\MMDevApi.dll'
1927678c.27e8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
1928678c.27e8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe77ed0000 'C:\WINDOWS\System32\ADVAPI32.DLL'
1929678c.27e8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\sspicli.dll [lacks WinVerifyTrust]
1930678c.27e8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\sspicli.dll (Input=sspicli.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
1931678c.27e8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe749a0000 'C:\WINDOWS\System32\sspicli.dll'
1932678c.5edc: \Device\HarddiskVolume4\Program Files (x86)\Samsung\Easy Printer Manager\SmartScreenPrint\CDAKEYMonitor64.dll: Owner is administrators group.
1933678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
1934678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'advapi32.dll'.
1935678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'shell32.dll'.
1936678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'ole32.dll'.
1937678c.5edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'oleaut32.dll'.
1938678c.5edc: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Program Files (x86)\Samsung\Easy Printer Manager\SmartScreenPrint\CDAKEYMonitor64.dll)
1939678c.5edc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files (x86)\Samsung\Easy Printer Manager\SmartScreenPrint\CDAKEYMonitor64.dll
1940678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
1941678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume4\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
1942678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
1943678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
1944678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume4\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
1945678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ole32.dll [lacks WinVerifyTrust]
1946678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
1947678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume4\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
1948678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\shell32.dll [lacks WinVerifyTrust]
1949678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
1950678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
1951678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
1952678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
1953678c.5edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
1954678c.5edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
1955678c.5edc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files (x86)\Samsung\Easy Printer Manager\SmartScreenPrint\CDAKEYMonitor64.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
1956678c.5edc: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Program Files (x86)\Samsung\Easy Printer Manager\SmartScreenPrint\CDAKEYMonitor64.dll [lacks WinVerifyTrust]
1957678c.5edc: supR3HardenedDllNotificationCallback: load 00007ffe70980000 LB 0x00025000 C:\Program Files (x86)\Samsung\Easy Printer Manager\SmartScreenPrint\CDAKEYMonitor64.dll [fFlags=0x0]
1958678c.5edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Program Files (x86)\Samsung\Easy Printer Manager\SmartScreenPrint\CDAKEYMonitor64.dll [lacks WinVerifyTrust]
1959678c.5edc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe70980000 'C:\Program Files (x86)\Samsung\Easy Printer Manager\SmartScreenPrint\CDAKEYMonitor64.dll'
19606674.5c8c: supR3HardNtChildWaitFor[1]: Quitting: ExitCode=0x1 (rcNtWait=0x0, rcNt1=0x0, rcNt2=0x103, rcNt3=0x103, 897249 ms, the end);

© 2024 Oracle Support Privacy / Do Not Sell My Info Terms of Use Trademark Policy