VirtualBox

Ticket #18556: VBoxHardening.log

File VBoxHardening.log, 186.2 KB (added by couttolenc, 5 years ago)
Line 
14760.2f40: Log file opened: 6.0.4r128413 g_hStartupLog=0000000000000050 g_uNtVerCombined=0xa042ee00
24760.2f40: \SystemRoot\System32\ntdll.dll:
34760.2f40: CreationTime: 2019-02-13T02:57:22.817792700Z
44760.2f40: LastWriteTime: 2019-01-09T05:39:12.294139300Z
54760.2f40: ChangeTime: 2019-03-28T07:45:25.508708600Z
64760.2f40: FileAttributes: 0x20
74760.2f40: Size: 0x1da658
84760.2f40: NT Headers: 0xe8
94760.2f40: Timestamp: 0x74bed8b0
104760.2f40: Machine: 0x8664 - amd64
114760.2f40: Timestamp: 0x74bed8b0
124760.2f40: Image Version: 10.0
134760.2f40: SizeOfImage: 0x1e1000 (1970176)
144760.2f40: Resource Dir: 0x174000 LB 0x6b3e8
154760.2f40: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
164760.2f40: [Raw version resource data: 0x1740f0 LB 0x380, codepage 0x0 (reserved 0x0)]
174760.2f40: ProductName: Microsoft® Windows® Operating System
184760.2f40: ProductVersion: 10.0.17134.556
194760.2f40: FileVersion: 10.0.17134.556 (WinBuild.160101.0800)
204760.2f40: FileDescription: NT Layer DLL
214760.2f40: \SystemRoot\System32\kernel32.dll:
224760.2f40: CreationTime: 2019-03-28T07:31:15.866242300Z
234760.2f40: LastWriteTime: 2019-03-06T15:39:47.791712200Z
244760.2f40: ChangeTime: 2019-03-28T09:15:56.235767400Z
254760.2f40: FileAttributes: 0x20
264760.2f40: Size: 0xafe98
274760.2f40: NT Headers: 0xe8
284760.2f40: Timestamp: 0x9fa3d270
294760.2f40: Machine: 0x8664 - amd64
304760.2f40: Timestamp: 0x9fa3d270
314760.2f40: Image Version: 10.0
324760.2f40: SizeOfImage: 0xb2000 (729088)
334760.2f40: Resource Dir: 0xb0000 LB 0x520
344760.2f40: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
354760.2f40: [Raw version resource data: 0xb00b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
364760.2f40: ProductName: Microsoft® Windows® Operating System
374760.2f40: ProductVersion: 10.0.17134.648
384760.2f40: FileVersion: 10.0.17134.648 (WinBuild.160101.0800)
394760.2f40: FileDescription: Windows NT BASE API Client DLL
404760.2f40: \SystemRoot\System32\KernelBase.dll:
414760.2f40: CreationTime: 2019-02-13T02:57:54.272259900Z
424760.2f40: LastWriteTime: 2019-01-09T05:39:21.823731200Z
434760.2f40: ChangeTime: 2019-03-28T07:45:25.503701400Z
444760.2f40: FileAttributes: 0x20
454760.2f40: Size: 0x273d70
464760.2f40: NT Headers: 0xf0
474760.2f40: Timestamp: 0xb9f4a0f1
484760.2f40: Machine: 0x8664 - amd64
494760.2f40: Timestamp: 0xb9f4a0f1
504760.2f40: Image Version: 10.0
514760.2f40: SizeOfImage: 0x273000 (2568192)
524760.2f40: Resource Dir: 0x251000 LB 0x548
534760.2f40: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
544760.2f40: [Raw version resource data: 0x2510b0 LB 0x3bc, codepage 0x0 (reserved 0x0)]
554760.2f40: ProductName: Microsoft® Windows® Operating System
564760.2f40: ProductVersion: 10.0.17134.556
574760.2f40: FileVersion: 10.0.17134.556 (WinBuild.160101.0800)
584760.2f40: FileDescription: Windows NT BASE API Client DLL
594760.2f40: \SystemRoot\System32\apisetschema.dll:
604760.2f40: CreationTime: 2018-04-11T23:34:44.042150700Z
614760.2f40: LastWriteTime: 2018-04-11T23:34:44.042150700Z
624760.2f40: ChangeTime: 2018-05-13T01:15:53.138276300Z
634760.2f40: FileAttributes: 0x20
644760.2f40: Size: 0x1bd98
654760.2f40: NT Headers: 0xd0
664760.2f40: Timestamp: 0xd02ff418
674760.2f40: Machine: 0x8664 - amd64
684760.2f40: Timestamp: 0xd02ff418
694760.2f40: Image Version: 10.0
704760.2f40: SizeOfImage: 0x1c000 (114688)
714760.2f40: Resource Dir: 0x1b000 LB 0x408
724760.2f40: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
734760.2f40: [Raw version resource data: 0x1b060 LB 0x3a8, codepage 0x0 (reserved 0x0)]
744760.2f40: ProductName: Microsoft® Windows® Operating System
754760.2f40: ProductVersion: 10.0.17134.1
764760.2f40: FileVersion: 10.0.17134.1 (WinBuild.160101.0800)
774760.2f40: FileDescription: ApiSet Schema DLL
784760.2f40: NtOpenDirectoryObject failed on \Driver: 0xc0000022
794760.2f40: supR3HardenedWinFindAdversaries: 0x4
804760.2f40: \SystemRoot\System32\drivers\aswMonFlt.sys:
814760.2f40: CreationTime: 2018-05-13T02:15:33.170012700Z
824760.2f40: LastWriteTime: 2019-03-17T01:50:48.739543300Z
834760.2f40: ChangeTime: 2019-04-05T19:06:55.354264300Z
844760.2f40: FileAttributes: 0x20
854760.2f40: Size: 0x29490
864760.2f40: NT Headers: 0xe8
874760.2f40: Timestamp: 0x5c80ecbd
884760.2f40: Machine: 0x8664 - amd64
894760.2f40: Timestamp: 0x5c80ecbd
904760.2f40: Image Version: 6.0
914760.2f40: SizeOfImage: 0x31000 (200704)
924760.2f40: Resource Dir: 0x2f000 LB 0x3b0
934760.2f40: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
944760.2f40: [Raw version resource data: 0x2f060 LB 0x34c, codepage 0x0 (reserved 0x0)]
954760.2f40: ProductName: Avast Antivirus
964760.2f40: ProductVersion: 19.3.4239.0
974760.2f40: FileVersion: 19.3.4239.0
984760.2f40: FileDescription: Avast File System Minifilter for Windows 2003/Vista
994760.2f40: \SystemRoot\System32\drivers\aswRdr2.sys:
1004760.2f40: CreationTime: 2018-05-13T02:15:33.179570900Z
1014760.2f40: LastWriteTime: 2019-03-17T01:50:48.699298300Z
1024760.2f40: ChangeTime: 2019-04-05T19:06:55.355477100Z
1034760.2f40: FileAttributes: 0x20
1044760.2f40: Size: 0x1b788
1054760.2f40: NT Headers: 0xe8
1064760.2f40: Timestamp: 0x5c80ecbb
1074760.2f40: Machine: 0x8664 - amd64
1084760.2f40: Timestamp: 0x5c80ecbb
1094760.2f40: Image Version: 6.1
1104760.2f40: SizeOfImage: 0x1a000 (106496)
1114760.2f40: Resource Dir: 0x18000 LB 0x398
1124760.2f40: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
1134760.2f40: [Raw version resource data: 0x18060 LB 0x334, codepage 0x0 (reserved 0x0)]
1144760.2f40: ProductName: Avast Antivirus
1154760.2f40: ProductVersion: 19.3.4239.0
1164760.2f40: FileVersion: 19.3.4239.0 built by: WinDDK
1174760.2f40: FileDescription: Avast WFP Redirect Driver
1184760.2f40: \SystemRoot\System32\drivers\aswRvrt.sys:
1194760.2f40: CreationTime: 2018-05-13T02:15:33.186058600Z
1204760.2f40: LastWriteTime: 2019-03-17T01:50:48.788444800Z
1214760.2f40: ChangeTime: 2019-04-05T19:06:55.355477100Z
1224760.2f40: FileAttributes: 0x20
1234760.2f40: Size: 0x15858
1244760.2f40: NT Headers: 0xe0
1254760.2f40: Timestamp: 0x5c80ecc4
1264760.2f40: Machine: 0x8664 - amd64
1274760.2f40: Timestamp: 0x5c80ecc4
1284760.2f40: Image Version: 6.0
1294760.2f40: SizeOfImage: 0x14000 (81920)
1304760.2f40: Resource Dir: 0x12000 LB 0x388
1314760.2f40: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
1324760.2f40: [Raw version resource data: 0x12060 LB 0x328, codepage 0x0 (reserved 0x0)]
1334760.2f40: ProductName: Avast Antivirus
1344760.2f40: ProductVersion: 19.3.4239.0
1354760.2f40: FileVersion: 19.3.4239.0
1364760.2f40: FileDescription: Avast Revert
1374760.2f40: \SystemRoot\System32\drivers\aswSnx.sys:
1384760.2f40: CreationTime: 2018-05-13T02:15:33.191072300Z
1394760.2f40: LastWriteTime: 2019-03-17T01:50:33.511892100Z
1404760.2f40: ChangeTime: 2019-04-05T19:06:55.355477100Z
1414760.2f40: FileAttributes: 0x20
1424760.2f40: Size: 0xfc990
1434760.2f40: NT Headers: 0xf0
1444760.2f40: Timestamp: 0x5c80ecc8
1454760.2f40: Machine: 0x8664 - amd64
1464760.2f40: Timestamp: 0x5c80ecc8
1474760.2f40: Image Version: 6.0
1484760.2f40: SizeOfImage: 0xfa000 (1024000)
1494760.2f40: Resource Dir: 0xf2000 LB 0x378
1504760.2f40: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
1514760.2f40: [Raw version resource data: 0xf2060 LB 0x314, codepage 0x0 (reserved 0x0)]
1524760.2f40: ProductName: Avast Antivirus
1534760.2f40: ProductVersion: 19.3.4239.0
1544760.2f40: FileVersion: 19.3.4239.0
1554760.2f40: FileDescription: Avast Virtualization Driver
1564760.2f40: \SystemRoot\System32\drivers\aswsp.sys:
1574760.2f40: CreationTime: 2018-05-13T02:15:33.195583500Z
1584760.2f40: LastWriteTime: 2019-03-17T01:50:48.860214500Z
1594760.2f40: ChangeTime: 2019-04-05T19:06:55.356671800Z
1604760.2f40: FileAttributes: 0x20
1614760.2f40: Size: 0x74460
1624760.2f40: NT Headers: 0xf0
1634760.2f40: Timestamp: 0x5c80eccb
1644760.2f40: Machine: 0x8664 - amd64
1654760.2f40: Timestamp: 0x5c80eccb
1664760.2f40: Image Version: 6.1
1674760.2f40: SizeOfImage: 0x76000 (483328)
1684760.2f40: Resource Dir: 0x74000 LB 0x370
1694760.2f40: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
1704760.2f40: [Raw version resource data: 0x74060 LB 0x310, codepage 0x0 (reserved 0x0)]
1714760.2f40: ProductName: Avast Antivirus
1724760.2f40: ProductVersion: 19.3.4239.0
1734760.2f40: FileVersion: 19.3.4239.0
1744760.2f40: FileDescription: Avast self protection module
1754760.2f40: \SystemRoot\System32\drivers\aswStm.sys:
1764760.2f40: CreationTime: 2018-05-13T02:15:33.232804600Z
1774760.2f40: LastWriteTime: 2019-03-17T01:50:49.421884800Z
1784760.2f40: ChangeTime: 2019-04-05T19:06:55.356671800Z
1794760.2f40: FileAttributes: 0x20
1804760.2f40: Size: 0x35dd8
1814760.2f40: NT Headers: 0x108
1824760.2f40: Timestamp: 0x5c80eed8
1834760.2f40: Machine: 0x8664 - amd64
1844760.2f40: Timestamp: 0x5c80eed8
1854760.2f40: Image Version: 10.0
1864760.2f40: SizeOfImage: 0x36000 (221184)
1874760.2f40: Resource Dir: 0x34000 LB 0x350
1884760.2f40: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x405)]
1894760.2f40: [Raw version resource data: 0x34060 LB 0x2f0, codepage 0x0 (reserved 0x0)]
1904760.2f40: ProductName: Avast Antivirus
1914760.2f40: ProductVersion: 19.3.4239.0
1924760.2f40: FileVersion: 19.3.4239.0
1934760.2f40: FileDescription: Stream Filter
1944760.2f40: \SystemRoot\System32\drivers\aswVmm.sys:
1954760.2f40: CreationTime: 2018-05-13T02:15:33.238316900Z
1964760.2f40: LastWriteTime: 2019-03-17T01:50:50.924908200Z
1974760.2f40: ChangeTime: 2019-04-05T19:06:55.356671800Z
1984760.2f40: FileAttributes: 0x20
1994760.2f40: Size: 0x5cd00
2004760.2f40: NT Headers: 0xe8
2014760.2f40: Timestamp: 0x5c80ecbc
2024760.2f40: Machine: 0x8664 - amd64
2034760.2f40: Timestamp: 0x5c80ecbc
2044760.2f40: Image Version: 6.0
2054760.2f40: SizeOfImage: 0x5b000 (372736)
2064760.2f40: Resource Dir: 0x58000 LB 0x390
2074760.2f40: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
2084760.2f40: [Raw version resource data: 0x58060 LB 0x330, codepage 0x0 (reserved 0x0)]
2094760.2f40: ProductName: Avast Antivirus
2104760.2f40: ProductVersion: 19.3.4239.0
2114760.2f40: FileVersion: 19.3.4239.0
2124760.2f40: FileDescription: Avast VM Monitor
2134760.2f40: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
2144760.2f40: Calling main()
2154760.2f40: SUPR3HardenedMain: pszProgName=VirtualBoxVM fFlags=0x2
2164760.2f40: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
2174760.2f40: SUPR3HardenedMain: Respawn #1
2184760.2f40: System32: \Device\HarddiskVolume3\Windows\System32
2194760.2f40: WinSxS: \Device\HarddiskVolume3\Windows\WinSxS
2204760.2f40: KnownDllPath: C:\WINDOWS\System32
2214760.2f40: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
2224760.2f40: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe)
2234760.2f40: supR3HardNtEnableThreadCreation:
2244760.2f40: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007fffc12d4f90 pvNtTerminateThread=00007fffc12fb3f0
2254760.2f40: supR3HardenedWinDoReSpawn(1): New child 405c.4be0 [kernel32].
2264760.2f40: supR3HardNtChildGatherData: PebBaseAddress=000000000114f000 cbPeb=0x388
2274760.2f40: supR3HardNtPuChFindNtdll: uNtDllParentAddr=00007fffc1260000 uNtDllChildAddr=00007fffc1260000
2284760.2f40: supR3HardenedWinSetupChildInit: uLdrInitThunk=00007fffc12d4f90
2294760.2f40: supR3HardenedWinSetupChildInit: Start child.
2304760.2f40: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 1 ms.
2314760.2f40: supR3HardNtChildPurify: Startup delay kludge #1/0: 514 ms, 59 sleeps
2324760.2f40: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
2334760.2f40: *0000000000000000-0000000000edffff 0x0001/0x0000 0x0000000
2344760.2f40: *0000000000ee0000-0000000000efffff 0x0004/0x0004 0x0020000
2354760.2f40: *0000000000f00000-0000000000f18fff 0x0002/0x0002 0x0040000
2364760.2f40: 0000000000f19000-0000000000f1ffff 0x0001/0x0000 0x0000000
2374760.2f40: *0000000000f20000-0000000000f23fff 0x0002/0x0002 0x0040000
2384760.2f40: 0000000000f24000-0000000000f2ffff 0x0001/0x0000 0x0000000
2394760.2f40: *0000000000f30000-0000000000f30fff 0x0004/0x0004 0x0020000
2404760.2f40: 0000000000f31000-0000000000ffffff 0x0001/0x0000 0x0000000
2414760.2f40: *0000000001000000-000000000114efff 0x0000/0x0004 0x0020000
2424760.2f40: 000000000114f000-0000000001151fff 0x0004/0x0004 0x0020000
2434760.2f40: 0000000001152000-00000000011fffff 0x0000/0x0004 0x0020000
2444760.2f40: *0000000001200000-00000000012fafff 0x0000/0x0004 0x0020000
2454760.2f40: 00000000012fb000-00000000012fdfff 0x0104/0x0004 0x0020000
2464760.2f40: 00000000012fe000-00000000012fffff 0x0004/0x0004 0x0020000
2474760.2f40: 0000000001300000-000000007ffdffff 0x0001/0x0000 0x0000000
2484760.2f40: *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000
2494760.2f40: 000000007ffe1000-00007ff52f1dffff 0x0001/0x0000 0x0000000
2504760.2f40: *00007ff52f1e0000-00007ff52f202fff 0x0002/0x0002 0x0040000
2514760.2f40: 00007ff52f203000-00007ff624cbffff 0x0001/0x0000 0x0000000
2524760.2f40: *00007ff624cc0000-00007ff624cc0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2534760.2f40: 00007ff624cc1000-00007ff624d33fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2544760.2f40: 00007ff624d34000-00007ff624d34fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2554760.2f40: 00007ff624d35000-00007ff624d7bfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2564760.2f40: 00007ff624d7c000-00007ff624d7cfff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2574760.2f40: 00007ff624d7d000-00007ff624d7dfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2584760.2f40: 00007ff624d7e000-00007ff624d82fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2594760.2f40: 00007ff624d83000-00007ff624d83fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2604760.2f40: 00007ff624d84000-00007ff624d84fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2614760.2f40: 00007ff624d85000-00007ff624d88fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2624760.2f40: 00007ff624d89000-00007ff624dd1fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2634760.2f40: 00007ff624dd2000-00007fffc125ffff 0x0001/0x0000 0x0000000
2644760.2f40: *00007fffc1260000-00007fffc1260fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
2654760.2f40: 00007fffc1261000-00007fffc136ffff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
2664760.2f40: 00007fffc1370000-00007fffc13b5fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
2674760.2f40: 00007fffc13b6000-00007fffc13c0fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
2684760.2f40: 00007fffc13c1000-00007fffc13cefff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
2694760.2f40: 00007fffc13cf000-00007fffc13cffff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
2704760.2f40: 00007fffc13d0000-00007fffc13d2fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
2714760.2f40: 00007fffc13d3000-00007fffc1440fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
2724760.2f40: 00007fffc1441000-00007ffffffeffff 0x0001/0x0000 0x0000000
2734760.2f40: VirtualBoxVM.exe: timestamp 0x5c4b51f3 (rc=VINF_SUCCESS)
2744760.2f40: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
2754760.2f40: '\Device\HarddiskVolume3\Windows\System32\ntdll.dll' has no imports
2764760.2f40: supR3HardNtChildPurify: Done after 549 ms and 0 fixes (loop #0).
2774760.2f40: supR3HardNtEnableThreadCreation:
278405c.4be0: Log file opened: 6.0.4r128413 g_hStartupLog=0000000000000004 g_uNtVerCombined=0xa042ee00
279405c.4be0: supR3HardenedVmProcessInit: uNtDllAddr=00007fffc1260000 g_uNtVerCombined=0xa042ee00
280405c.4be0: ntdll.dll: timestamp 0x74bed8b0 (rc=VINF_SUCCESS)
281405c.4be0: New simple heap: #1 0000000001400000 LB 0x400000 (for 1970176 allocation)
282405c.4be0: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
283405c.4be0: System32: \Device\HarddiskVolume3\Windows\System32
284405c.4be0: WinSxS: \Device\HarddiskVolume3\Windows\WinSxS
285405c.4be0: KnownDllPath: C:\WINDOWS\System32
286405c.4be0: supR3HardenedVmProcessInit: Opening vboxdrv stub...
287405c.4be0: supR3HardenedVmProcessInit: Restoring LdrInitializeThunk...
288405c.4be0: supR3HardenedVmProcessInit: Returning to LdrInitializeThunk...
289405c.4be0: Registered Dll notification callback with NTDLL.
290405c.4be0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\kernel32.dll)
291405c.4be0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\kernel32.dll
292405c.4be0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\KERNEL32.DLL (Input=KERNEL32.DLL, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000004001:<flags> [calling]
293405c.4be0: supHardenedWinVerifyImageByHandle: -> -626 (\Device\HarddiskVolume3\Program Files\AVAST Software\Avast\aswhook.dll)
294405c.4be0: Error (rc=0):
295405c.4be0: supR3HardenedScreenImage/LdrLoadDll: rc=Unknown Status -626 (0xfffffd8e) fImage=1 fProtect=0x0 fAccess=0x0 \Device\HarddiskVolume3\Program Files\AVAST Software\Avast\aswhook.dll: Unexpected load config dir size of 152 bytes; supported sized: 256, 244, 232, 208, 192, 160, 148, 112, or 112
296405c.4be0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\AVAST Software\Avast\aswhook.dll
297405c.4be0: Error (rc=0):
298405c.4be0: supR3HardenedMonitor_LdrLoadDll: rejecting 'C:\Program Files\AVAST Software\Avast\aswhook.dll' (C:\Program Files\AVAST Software\Avast\aswhook.dll): rcNt=0xc0000190
299405c.4be0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000190 'C:\Program Files\AVAST Software\Avast\aswhook.dll'
300405c.4be0: supR3HardenedDllNotificationCallback: load 00007fffbe300000 LB 0x00273000 C:\WINDOWS\System32\KERNELBASE.dll [fFlags=0x0]
301405c.4be0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\KernelBase.dll)
302405c.4be0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
303405c.4be0: supR3HardenedDllNotificationCallback: load 00007fffc1170000 LB 0x000b2000 C:\WINDOWS\System32\KERNEL32.DLL [fFlags=0x0]
304405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
305405c.4be0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffc1170000 'C:\WINDOWS\System32\KERNEL32.DLL'
306405c.4be0: supR3HardenedDllNotificationCallback: load 00007ff624cc0000 LB 0x00112000 C:\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe [fFlags=0x0]
307405c.4be0: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
308405c.4be0: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe)
309405c.4be0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
310405c.4be0: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007fffc12d4f90 pvNtTerminateThread=00007fffc12fb3f0
3114760.2f40: supR3HardNtChildWaitFor: Found expected request 1 (CloseEvents) after 86 ms.
312405c.4be0: \SystemRoot\System32\ntdll.dll:
313405c.4be0: CreationTime: 2019-02-13T02:57:22.817792700Z
314405c.4be0: LastWriteTime: 2019-01-09T05:39:12.294139300Z
315405c.4be0: ChangeTime: 2019-03-28T07:45:25.508708600Z
316405c.4be0: FileAttributes: 0x20
317405c.4be0: Size: 0x1da658
318405c.4be0: NT Headers: 0xe8
319405c.4be0: Timestamp: 0x74bed8b0
320405c.4be0: Machine: 0x8664 - amd64
321405c.4be0: Timestamp: 0x74bed8b0
322405c.4be0: Image Version: 10.0
323405c.4be0: SizeOfImage: 0x1e1000 (1970176)
324405c.4be0: Resource Dir: 0x174000 LB 0x6b3e8
325405c.4be0: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
326405c.4be0: [Raw version resource data: 0x1740f0 LB 0x380, codepage 0x0 (reserved 0x0)]
327405c.4be0: ProductName: Microsoft® Windows® Operating System
328405c.4be0: ProductVersion: 10.0.17134.556
329405c.4be0: FileVersion: 10.0.17134.556 (WinBuild.160101.0800)
330405c.4be0: FileDescription: NT Layer DLL
331405c.4be0: \SystemRoot\System32\kernel32.dll:
332405c.4be0: CreationTime: 2019-03-28T07:31:15.866242300Z
333405c.4be0: LastWriteTime: 2019-03-06T15:39:47.791712200Z
334405c.4be0: ChangeTime: 2019-03-28T09:15:56.235767400Z
335405c.4be0: FileAttributes: 0x20
336405c.4be0: Size: 0xafe98
337405c.4be0: NT Headers: 0xe8
338405c.4be0: Timestamp: 0x9fa3d270
339405c.4be0: Machine: 0x8664 - amd64
340405c.4be0: Timestamp: 0x9fa3d270
341405c.4be0: Image Version: 10.0
342405c.4be0: SizeOfImage: 0xb2000 (729088)
343405c.4be0: Resource Dir: 0xb0000 LB 0x520
344405c.4be0: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
345405c.4be0: [Raw version resource data: 0xb00b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
346405c.4be0: ProductName: Microsoft® Windows® Operating System
347405c.4be0: ProductVersion: 10.0.17134.648
348405c.4be0: FileVersion: 10.0.17134.648 (WinBuild.160101.0800)
349405c.4be0: FileDescription: Windows NT BASE API Client DLL
350405c.4be0: \SystemRoot\System32\KernelBase.dll:
351405c.4be0: CreationTime: 2019-02-13T02:57:54.272259900Z
352405c.4be0: LastWriteTime: 2019-01-09T05:39:21.823731200Z
353405c.4be0: ChangeTime: 2019-03-28T07:45:25.503701400Z
354405c.4be0: FileAttributes: 0x20
355405c.4be0: Size: 0x273d70
356405c.4be0: NT Headers: 0xf0
357405c.4be0: Timestamp: 0xb9f4a0f1
358405c.4be0: Machine: 0x8664 - amd64
359405c.4be0: Timestamp: 0xb9f4a0f1
360405c.4be0: Image Version: 10.0
361405c.4be0: SizeOfImage: 0x273000 (2568192)
362405c.4be0: Resource Dir: 0x251000 LB 0x548
363405c.4be0: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
364405c.4be0: [Raw version resource data: 0x2510b0 LB 0x3bc, codepage 0x0 (reserved 0x0)]
365405c.4be0: ProductName: Microsoft® Windows® Operating System
366405c.4be0: ProductVersion: 10.0.17134.556
367405c.4be0: FileVersion: 10.0.17134.556 (WinBuild.160101.0800)
368405c.4be0: FileDescription: Windows NT BASE API Client DLL
369405c.4be0: \SystemRoot\System32\apisetschema.dll:
370405c.4be0: CreationTime: 2018-04-11T23:34:44.042150700Z
371405c.4be0: LastWriteTime: 2018-04-11T23:34:44.042150700Z
372405c.4be0: ChangeTime: 2018-05-13T01:15:53.138276300Z
373405c.4be0: FileAttributes: 0x20
374405c.4be0: Size: 0x1bd98
375405c.4be0: NT Headers: 0xd0
376405c.4be0: Timestamp: 0xd02ff418
377405c.4be0: Machine: 0x8664 - amd64
378405c.4be0: Timestamp: 0xd02ff418
379405c.4be0: Image Version: 10.0
380405c.4be0: SizeOfImage: 0x1c000 (114688)
381405c.4be0: Resource Dir: 0x1b000 LB 0x408
382405c.4be0: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
383405c.4be0: [Raw version resource data: 0x1b060 LB 0x3a8, codepage 0x0 (reserved 0x0)]
384405c.4be0: ProductName: Microsoft® Windows® Operating System
385405c.4be0: ProductVersion: 10.0.17134.1
386405c.4be0: FileVersion: 10.0.17134.1 (WinBuild.160101.0800)
387405c.4be0: FileDescription: ApiSet Schema DLL
388405c.4be0: NtOpenDirectoryObject failed on \Driver: 0xc0000022
389405c.4be0: supR3HardenedWinFindAdversaries: 0x4
390405c.4be0: \SystemRoot\System32\drivers\aswMonFlt.sys:
391405c.4be0: CreationTime: 2018-05-13T02:15:33.170012700Z
392405c.4be0: LastWriteTime: 2019-03-17T01:50:48.739543300Z
393405c.4be0: ChangeTime: 2019-04-05T19:06:55.354264300Z
394405c.4be0: FileAttributes: 0x20
395405c.4be0: Size: 0x29490
396405c.4be0: NT Headers: 0xe8
397405c.4be0: Timestamp: 0x5c80ecbd
398405c.4be0: Machine: 0x8664 - amd64
399405c.4be0: Timestamp: 0x5c80ecbd
400405c.4be0: Image Version: 6.0
401405c.4be0: SizeOfImage: 0x31000 (200704)
402405c.4be0: Resource Dir: 0x2f000 LB 0x3b0
403405c.4be0: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
404405c.4be0: [Raw version resource data: 0x2f060 LB 0x34c, codepage 0x0 (reserved 0x0)]
405405c.4be0: ProductName: Avast Antivirus
406405c.4be0: ProductVersion: 19.3.4239.0
407405c.4be0: FileVersion: 19.3.4239.0
408405c.4be0: FileDescription: Avast File System Minifilter for Windows 2003/Vista
409405c.4be0: \SystemRoot\System32\drivers\aswRdr2.sys:
410405c.4be0: CreationTime: 2018-05-13T02:15:33.179570900Z
411405c.4be0: LastWriteTime: 2019-03-17T01:50:48.699298300Z
412405c.4be0: ChangeTime: 2019-04-05T19:06:55.355477100Z
413405c.4be0: FileAttributes: 0x20
414405c.4be0: Size: 0x1b788
415405c.4be0: NT Headers: 0xe8
416405c.4be0: Timestamp: 0x5c80ecbb
417405c.4be0: Machine: 0x8664 - amd64
418405c.4be0: Timestamp: 0x5c80ecbb
419405c.4be0: Image Version: 6.1
420405c.4be0: SizeOfImage: 0x1a000 (106496)
421405c.4be0: Resource Dir: 0x18000 LB 0x398
422405c.4be0: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
423405c.4be0: [Raw version resource data: 0x18060 LB 0x334, codepage 0x0 (reserved 0x0)]
424405c.4be0: ProductName: Avast Antivirus
425405c.4be0: ProductVersion: 19.3.4239.0
426405c.4be0: FileVersion: 19.3.4239.0 built by: WinDDK
427405c.4be0: FileDescription: Avast WFP Redirect Driver
428405c.4be0: \SystemRoot\System32\drivers\aswRvrt.sys:
429405c.4be0: CreationTime: 2018-05-13T02:15:33.186058600Z
430405c.4be0: LastWriteTime: 2019-03-17T01:50:48.788444800Z
431405c.4be0: ChangeTime: 2019-04-05T19:06:55.355477100Z
432405c.4be0: FileAttributes: 0x20
433405c.4be0: Size: 0x15858
434405c.4be0: NT Headers: 0xe0
435405c.4be0: Timestamp: 0x5c80ecc4
436405c.4be0: Machine: 0x8664 - amd64
437405c.4be0: Timestamp: 0x5c80ecc4
438405c.4be0: Image Version: 6.0
439405c.4be0: SizeOfImage: 0x14000 (81920)
440405c.4be0: Resource Dir: 0x12000 LB 0x388
441405c.4be0: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
442405c.4be0: [Raw version resource data: 0x12060 LB 0x328, codepage 0x0 (reserved 0x0)]
443405c.4be0: ProductName: Avast Antivirus
444405c.4be0: ProductVersion: 19.3.4239.0
445405c.4be0: FileVersion: 19.3.4239.0
446405c.4be0: FileDescription: Avast Revert
447405c.4be0: \SystemRoot\System32\drivers\aswSnx.sys:
448405c.4be0: CreationTime: 2018-05-13T02:15:33.191072300Z
449405c.4be0: LastWriteTime: 2019-03-17T01:50:33.511892100Z
450405c.4be0: ChangeTime: 2019-04-05T19:06:55.355477100Z
451405c.4be0: FileAttributes: 0x20
452405c.4be0: Size: 0xfc990
453405c.4be0: NT Headers: 0xf0
454405c.4be0: Timestamp: 0x5c80ecc8
455405c.4be0: Machine: 0x8664 - amd64
456405c.4be0: Timestamp: 0x5c80ecc8
457405c.4be0: Image Version: 6.0
458405c.4be0: SizeOfImage: 0xfa000 (1024000)
459405c.4be0: Resource Dir: 0xf2000 LB 0x378
460405c.4be0: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
461405c.4be0: [Raw version resource data: 0xf2060 LB 0x314, codepage 0x0 (reserved 0x0)]
462405c.4be0: ProductName: Avast Antivirus
463405c.4be0: ProductVersion: 19.3.4239.0
464405c.4be0: FileVersion: 19.3.4239.0
465405c.4be0: FileDescription: Avast Virtualization Driver
466405c.4be0: \SystemRoot\System32\drivers\aswsp.sys:
467405c.4be0: CreationTime: 2018-05-13T02:15:33.195583500Z
468405c.4be0: LastWriteTime: 2019-03-17T01:50:48.860214500Z
469405c.4be0: ChangeTime: 2019-04-05T19:06:55.356671800Z
470405c.4be0: FileAttributes: 0x20
471405c.4be0: Size: 0x74460
472405c.4be0: NT Headers: 0xf0
473405c.4be0: Timestamp: 0x5c80eccb
474405c.4be0: Machine: 0x8664 - amd64
475405c.4be0: Timestamp: 0x5c80eccb
476405c.4be0: Image Version: 6.1
477405c.4be0: SizeOfImage: 0x76000 (483328)
478405c.4be0: Resource Dir: 0x74000 LB 0x370
479405c.4be0: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
480405c.4be0: [Raw version resource data: 0x74060 LB 0x310, codepage 0x0 (reserved 0x0)]
481405c.4be0: ProductName: Avast Antivirus
482405c.4be0: ProductVersion: 19.3.4239.0
483405c.4be0: FileVersion: 19.3.4239.0
484405c.4be0: FileDescription: Avast self protection module
485405c.4be0: \SystemRoot\System32\drivers\aswStm.sys:
486405c.4be0: CreationTime: 2018-05-13T02:15:33.232804600Z
487405c.4be0: LastWriteTime: 2019-03-17T01:50:49.421884800Z
488405c.4be0: ChangeTime: 2019-04-05T19:06:55.356671800Z
489405c.4be0: FileAttributes: 0x20
490405c.4be0: Size: 0x35dd8
491405c.4be0: NT Headers: 0x108
492405c.4be0: Timestamp: 0x5c80eed8
493405c.4be0: Machine: 0x8664 - amd64
494405c.4be0: Timestamp: 0x5c80eed8
495405c.4be0: Image Version: 10.0
496405c.4be0: SizeOfImage: 0x36000 (221184)
497405c.4be0: Resource Dir: 0x34000 LB 0x350
498405c.4be0: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x405)]
499405c.4be0: [Raw version resource data: 0x34060 LB 0x2f0, codepage 0x0 (reserved 0x0)]
500405c.4be0: ProductName: Avast Antivirus
501405c.4be0: ProductVersion: 19.3.4239.0
502405c.4be0: FileVersion: 19.3.4239.0
503405c.4be0: FileDescription: Stream Filter
504405c.4be0: \SystemRoot\System32\drivers\aswVmm.sys:
505405c.4be0: CreationTime: 2018-05-13T02:15:33.238316900Z
506405c.4be0: LastWriteTime: 2019-03-17T01:50:50.924908200Z
507405c.4be0: ChangeTime: 2019-04-05T19:06:55.356671800Z
508405c.4be0: FileAttributes: 0x20
509405c.4be0: Size: 0x5cd00
510405c.4be0: NT Headers: 0xe8
511405c.4be0: Timestamp: 0x5c80ecbc
512405c.4be0: Machine: 0x8664 - amd64
513405c.4be0: Timestamp: 0x5c80ecbc
514405c.4be0: Image Version: 6.0
515405c.4be0: SizeOfImage: 0x5b000 (372736)
516405c.4be0: Resource Dir: 0x58000 LB 0x390
517405c.4be0: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
518405c.4be0: [Raw version resource data: 0x58060 LB 0x330, codepage 0x0 (reserved 0x0)]
519405c.4be0: ProductName: Avast Antivirus
520405c.4be0: ProductVersion: 19.3.4239.0
521405c.4be0: FileVersion: 19.3.4239.0
522405c.4be0: FileDescription: Avast VM Monitor
523405c.4be0: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
524405c.4be0: Calling main()
525405c.4be0: SUPR3HardenedMain: pszProgName=VirtualBoxVM fFlags=0x2
526405c.4be0: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
527405c.4be0: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
528405c.4be0: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe)
529405c.4be0: SUPR3HardenedMain: Respawn #2
530405c.4be0: supR3HardNtEnableThreadCreation:
531405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
532405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'sechost.dll'.
533405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27 'rpcrt4.dll'.
534405c.4be0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\advapi32.dll)
535405c.4be0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\advapi32.dll
536405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
537405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
538405c.4be0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll)
539405c.4be0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll
540405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'sechost.dll'...
541405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'sechost.dll' -> '\Device\HarddiskVolume3\Windows\System32\sechost.dll' [rcNtRedir=0xc0150008]
542405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'rpcrt4.dll'.
543405c.4be0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\sechost.dll)
544405c.4be0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\sechost.dll
545405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
546405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
547405c.4be0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\msvcrt.dll)
548405c.4be0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
549405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
550405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
551405c.4be0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
552405c.4be0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\ADVAPI32.DLL (Input=ADVAPI32.DLL, rcNtResolve=0xc0150008) *pfFlags=0x1000 pwszSearchPath=0000000000000000:<flags> [calling]
553405c.4be0: supR3HardenedDllNotificationCallback: load 00007fffc06e0000 LB 0x0009e000 C:\WINDOWS\System32\msvcrt.dll [fFlags=0x0]
554405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
555405c.4be0: supR3HardenedDllNotificationCallback: load 00007fffc0850000 LB 0x00124000 C:\WINDOWS\System32\RPCRT4.dll [fFlags=0x0]
556405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
557405c.4be0: supR3HardenedDllNotificationCallback: load 00007fffc0650000 LB 0x0005b000 C:\WINDOWS\System32\sechost.dll [fFlags=0x0]
558405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\sechost.dll [lacks WinVerifyTrust]
559405c.4be0: supR3HardenedDllNotificationCallback: load 00007fffbe8f0000 LB 0x000a1000 C:\WINDOWS\System32\ADVAPI32.DLL [fFlags=0x0]
560405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
561405c.4be0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffbe8f0000 'C:\WINDOWS\System32\ADVAPI32.DLL'
562405c.4be0: '\Device\HarddiskVolume3\Windows\System32\ntdll.dll' has no imports
563405c.4be0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ntdll.dll)
564405c.4be0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ntdll.dll
565405c.4be0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\ntdll.dll (Input=ntdll.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
566405c.4be0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffc1260000 'C:\WINDOWS\System32\ntdll.dll'
567405c.4be0: Error -104 in supR3HardenedWinReSpawn! (enmWhat=5)
568405c.4be0: Error relaunching VirtualBox VM process: 5
569Command line: '60eaff78-4bdd-042d-2e72-669728efd737-suplib-3rdchild --comment "SAS University Edition" --startvm da9998c9-df1b-4ae9-96ae-e74c17a262e1 --no-startvm-errormsgbox "--sup-hardening-log=C:\Users\e_cou\VirtualBox VMs\SAS University Edition\Logs\VBoxHardening.log"'
570405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'opengl32.dll'.
571405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxglobal.dll'.
572405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
573405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcp100.dll'.
574405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'msvcr100.dll'.
575405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'qt5corevbox.dll'.
576405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'qt5guivbox.dll'.
577405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'qt5widgetsvbox.dll'.
578405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'qt5openglvbox.dll'.
579405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'user32.dll'.
580405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'ole32.dll'.
581405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'oleaut32.dll'.
582405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'winmm.dll'.
583405c.4be0: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll)
584405c.4be0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll
585405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
586405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume3\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
587405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'winmmbase.dll'.
588405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'msvcrt.dll'.
589405c.4be0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\winmm.dll)
590405c.4be0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\winmm.dll
591405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
592405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
593405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
594405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'combase.dll'.
595405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #23 'rpcrt4.dll'.
596405c.4be0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\oleaut32.dll)
597405c.4be0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\oleaut32.dll
598405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
599405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
600405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #23 'rpcrt4.dll'.
601405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #48 'gdi32.dll'.
602405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #49 'user32.dll'.
603405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #50 'combase.dll'.
604405c.4be0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ole32.dll)
605405c.4be0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ole32.dll
606405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
607405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
608405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'win32u.dll'.
609405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'gdi32.dll'.
610405c.4be0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\user32.dll)
611405c.4be0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\user32.dll
612405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5openglvbox.dll'...
613405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5openglvbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5openglvbox.dll' [rcNtRedir=0xc0150008]
614405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'qt5widgetsvbox.dll'.
615405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'qt5guivbox.dll'.
616405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5corevbox.dll'.
617405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcr100.dll'.
618405c.4be0: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll)
619405c.4be0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll
620405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
621405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
622405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
623405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
624405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5guivbox.dll'.
625405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5corevbox.dll'.
626405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'shell32.dll'.
627405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
628405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
629405c.4be0: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll)
630405c.4be0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll
631405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
632405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
633405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'ole32.dll'.
634405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'opengl32.dll'.
635405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
636405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
637405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'.
638405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
639405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
640405c.4be0: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll)
641405c.4be0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
642405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
643405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
644405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
645405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'shell32.dll'.
646405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ole32.dll'.
647405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'advapi32.dll'.
648405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ws2_32.dll'.
649405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'mpr.dll'.
650405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcp100.dll'.
651405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'msvcr100.dll'.
652405c.4be0: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll)
653405c.4be0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
654405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
655405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
656405c.4be0: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll)
657405c.4be0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll
658405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
659405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
660405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
661405c.4be0: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll)
662405c.4be0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll
663405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
664405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
665405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
666405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
667405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
668405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ws2_32.dll'.
669405c.4be0: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll)
670405c.4be0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
671405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxglobal.dll'...
672405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxglobal.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxglobal.dll' [rcNtRedir=0xc0150008]
673405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'vboxrt.dll'.
674405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcr100.dll'.
675405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5corevbox.dll'.
676405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5guivbox.dll'.
677405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5widgetsvbox.dll'.
678405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'user32.dll'.
679405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'advapi32.dll'.
680405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'ole32.dll'.
681405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'oleaut32.dll'.
682405c.4be0: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxGlobal.dll)
683405c.4be0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxGlobal.dll
684405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
685405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume3\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
686405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
687405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'advapi32.dll'.
688405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
689405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'gdi32.dll'.
690405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'glu32.dll'.
691405c.4be0: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\opengl32.dll)
692405c.4be0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\opengl32.dll
693405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'glu32.dll'...
694405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'glu32.dll' -> '\Device\HarddiskVolume3\Windows\System32\glu32.dll' [rcNtRedir=0xc0150008]
695405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
696405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
697405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'opengl32.dll'.
698405c.4be0: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\glu32.dll)
699405c.4be0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\glu32.dll
700405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
701405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
702405c.4be0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\gdi32.dll)
703405c.4be0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\gdi32.dll
704405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
705405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
706405c.4be0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
707405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
708405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
709405c.4be0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
710405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
711405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
712405c.4be0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
713405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
714405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
715405c.4be0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
716405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
717405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
718405c.4be0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll [lacks WinVerifyTrust]
719405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
720405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
721405c.4be0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
722405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
723405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
724405c.4be0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
725405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
726405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
727405c.4be0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
728405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
729405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
730405c.4be0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
731405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
732405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
733405c.4be0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
734405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
735405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
736405c.4be0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
737405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
738405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
739405c.4be0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
740405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
741405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
742405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'rpcrt4.dll'.
743405c.4be0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ws2_32.dll)
744405c.4be0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ws2_32.dll
745405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
746405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
747405c.4be0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
748405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
749405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
750405c.4be0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
751405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
752405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
753405c.4be0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
754405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
755405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
756405c.4be0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
757405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
758405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
759405c.4be0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
760405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
761405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
762405c.4be0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
763405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mpr.dll'...
764405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'mpr.dll' -> '\Device\HarddiskVolume3\Windows\System32\mpr.dll' [rcNtRedir=0xc0150008]
765405c.4be0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\mpr.dll)
766405c.4be0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\mpr.dll
767405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
768405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
769405c.4be0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ws2_32.dll [lacks WinVerifyTrust]
770405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
771405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
772405c.4be0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
773405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
774405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
775405c.4be0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll [lacks WinVerifyTrust]
776405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
777405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
778405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
779405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #74 'user32.dll'.
780405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #76 'gdi32.dll'.
781405c.4be0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\shell32.dll)
782405c.4be0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\shell32.dll
783405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
784405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
785405c.4be0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
786405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
787405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
788405c.4be0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
789405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
790405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
791405c.4be0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
792405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
793405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
794405c.4be0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
795405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
796405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
797405c.4be0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
798405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
799405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
800405c.4be0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
801405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
802405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume3\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
803405c.4be0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
804405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
805405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
806405c.4be0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll [lacks WinVerifyTrust]
807405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
808405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
809405c.4be0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
810405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
811405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
812405c.4be0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
813405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
814405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
815405c.4be0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll [lacks WinVerifyTrust]
816405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
817405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
818405c.4be0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
819405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
820405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
821405c.4be0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
822405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
823405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
824405c.4be0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
825405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
826405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
827405c.4be0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
828405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
829405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
830405c.4be0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
831405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
832405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
833405c.4be0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
834405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
835405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
836405c.4be0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
837405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
838405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
839405c.4be0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
840405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
841405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
842405c.4be0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
843405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
844405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
845405c.4be0: '\Device\HarddiskVolume3\Windows\System32\win32u.dll' has no imports
846405c.4be0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\win32u.dll)
847405c.4be0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\win32u.dll
848405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
849405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
850405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
851405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #45 'bcryptprimitives.dll'.
852405c.4be0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\combase.dll)
853405c.4be0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\combase.dll
854405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
855405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
856405c.4be0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
857405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
858405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
859405c.4be0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
860405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
861405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
862405c.4be0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
863405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
864405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
865405c.4be0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
866405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
867405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
868405c.4be0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [lacks WinVerifyTrust]
869405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
870405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
871405c.4be0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll)
872405c.4be0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll
873405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
874405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
875405c.4be0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
876405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmmbase.dll'...
877405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmmbase.dll' -> '\Device\HarddiskVolume3\Windows\System32\winmmbase.dll' [rcNtRedir=0xc0150008]
878405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
879405c.4be0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\winmmbase.dll)
880405c.4be0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\winmmbase.dll
881405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
882405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
883405c.4be0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
884405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'...
885405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008]
886405c.4be0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll)
887405c.4be0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll
888405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
889405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
890405c.4be0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
891405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
892405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
893405c.4be0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
894405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
895405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
896405c.4be0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
897405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
898405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
899405c.4be0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
900405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
901405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
902405c.4be0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
903405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
904405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume3\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
905405c.4be0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
906405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
907405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
908405c.4be0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
909405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
910405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
911405c.4be0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
912405c.4be0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000a01:<flags> [calling]
913405c.4be0: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll [lacks WinVerifyTrust]
914405c.4be0: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
915405c.4be0: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxGlobal.dll [lacks WinVerifyTrust]
916405c.4be0: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
917405c.4be0: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
918405c.4be0: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
919405c.4be0: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
920405c.4be0: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
921405c.4be0: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
922405c.4be0: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll [lacks WinVerifyTrust]
923405c.4be0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll [lacks WinVerifyTrust]
924405c.4be0: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\glu32.dll [lacks WinVerifyTrust]
925405c.4be0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\mpr.dll [lacks WinVerifyTrust]
926405c.4be0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmmbase.dll [lacks WinVerifyTrust]
927405c.4be0: supR3HardenedDllNotificationCallback: load 00007fffbe580000 LB 0x00020000 C:\WINDOWS\System32\win32u.dll [fFlags=0x0]
928405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [lacks WinVerifyTrust]
929405c.4be0: supR3HardenedDllNotificationCallback: load 00007fffbe010000 LB 0x000f8000 C:\WINDOWS\System32\ucrtbase.dll [fFlags=0x0]
930405c.4be0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ucrtbase.dll)
931405c.4be0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll
932405c.4be0: supR3HardenedDllNotificationCallback: load 00007fffbe5f0000 LB 0x0009f000 C:\WINDOWS\System32\msvcp_win.dll [fFlags=0x0]
933405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust]
934405c.4be0: supR3HardenedDllNotificationCallback: load 00007fffbddc0000 LB 0x00192000 C:\WINDOWS\System32\gdi32full.dll [fFlags=0x0]
935405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
936405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #33 'gdi32.dll'.
937405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'user32.dll'.
938405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'win32u.dll'.
939405c.4be0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\gdi32full.dll)
940405c.4be0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\gdi32full.dll
941405c.4be0: supR3HardenedDllNotificationCallback: load 00007fffc06b0000 LB 0x00028000 C:\WINDOWS\System32\GDI32.dll [fFlags=0x0]
942405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
943405c.4be0: supR3HardenedDllNotificationCallback: load 00007fffc0340000 LB 0x00190000 C:\WINDOWS\System32\USER32.dll [fFlags=0x0]
944405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
945405c.4be0: supR3HardenedDllNotificationCallback: load 00007fffb3910000 LB 0x0002c000 C:\WINDOWS\SYSTEM32\GLU32.dll [fFlags=0x0]
946405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\glu32.dll [lacks WinVerifyTrust]
947405c.4be0: supR3HardenedDllNotificationCallback: load 00007fffa1aa0000 LB 0x00120000 C:\WINDOWS\SYSTEM32\OPENGL32.dll [fFlags=0x0]
948405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
949405c.4be0: supR3HardenedDllNotificationCallback: load 0000000074a50000 LB 0x000d2000 C:\Program Files\Oracle\VirtualBox\MSVCR100.dll [fFlags=0x0]
950405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
951405c.4be0: supR3HardenedDllNotificationCallback: load 0000000073ed0000 LB 0x00098000 C:\Program Files\Oracle\VirtualBox\MSVCP100.dll [fFlags=0x0]
952405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
953405c.4be0: supR3HardenedDllNotificationCallback: load 00007fffc0980000 LB 0x0006c000 C:\WINDOWS\System32\WS2_32.dll [fFlags=0x0]
954405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ws2_32.dll [lacks WinVerifyTrust]
955405c.4be0: supR3HardenedDllNotificationCallback: load 00007fff43770000 LB 0x0052d000 C:\Program Files\Oracle\VirtualBox\VBoxRT.dll [fFlags=0x0]
956405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
957405c.4be0: supR3HardenedDllNotificationCallback: load 00007fffbe5a0000 LB 0x00049000 C:\WINDOWS\System32\cfgmgr32.dll [fFlags=0x0]
958405c.4be0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll)
959405c.4be0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll
960405c.4be0: supR3HardenedDllNotificationCallback: load 00007fffbd630000 LB 0x0007a000 C:\WINDOWS\System32\bcryptPrimitives.dll [fFlags=0x0]
961405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust]
962405c.4be0: supR3HardenedDllNotificationCallback: load 00007fffbea80000 LB 0x00322000 C:\WINDOWS\System32\combase.dll [fFlags=0x0]
963405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [lacks WinVerifyTrust]
964405c.4be0: supR3HardenedDllNotificationCallback: load 00007fffc1030000 LB 0x000a9000 C:\WINDOWS\System32\shcore.dll [fFlags=0x0]
965405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
966405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #37 'rpcrt4.dll'.
967405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #44 'combase.dll'.
968405c.4be0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\SHCore.dll)
969405c.4be0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\SHCore.dll
970405c.4be0: supR3HardenedDllNotificationCallback: load 00007fffbedb0000 LB 0x00051000 C:\WINDOWS\System32\shlwapi.dll [fFlags=0x0]
971405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'.
972405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #44 'gdi32.dll'.
973405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #45 'user32.dll'.
974405c.4be0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\shlwapi.dll)
975405c.4be0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\shlwapi.dll
976405c.4be0: supR3HardenedDllNotificationCallback: load 00007fffbd610000 LB 0x00011000 C:\WINDOWS\System32\kernel.appcore.dll [fFlags=0x0]
977405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcrt.dll'.
978405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'rpcrt4.dll'.
979405c.4be0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll)
980405c.4be0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll
981405c.4be0: supR3HardenedDllNotificationCallback: load 00007fffbd5c0000 LB 0x0001f000 C:\WINDOWS\System32\profapi.dll [fFlags=0x0]
982405c.4be0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\profapi.dll)
983405c.4be0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\profapi.dll
984405c.4be0: supR3HardenedDllNotificationCallback: load 00007fffbd570000 LB 0x0004c000 C:\WINDOWS\System32\powrprof.dll [fFlags=0x0]
985405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'rpcrt4.dll'.
986405c.4be0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\powrprof.dll)
987405c.4be0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\powrprof.dll
988405c.4be0: supR3HardenedDllNotificationCallback: load 00007fffbd5e0000 LB 0x0000a000 C:\WINDOWS\System32\FLTLIB.DLL [fFlags=0x0]
989405c.4be0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\fltLib.dll)
990405c.4be0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\fltLib.dll
991405c.4be0: supR3HardenedDllNotificationCallback: load 00007fffbd6b0000 LB 0x0070d000 C:\WINDOWS\System32\windows.storage.dll [fFlags=0x0]
992405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
993405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'rpcrt4.dll'.
994405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #54 'combase.dll'.
995405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #58 'profapi.dll'.
996405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #81 'fltlib.dll'.
997405c.4be0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\windows.storage.dll)
998405c.4be0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\windows.storage.dll
999405c.4be0: supR3HardenedDllNotificationCallback: load 00007fffbef00000 LB 0x01440000 C:\WINDOWS\System32\SHELL32.dll [fFlags=0x0]
1000405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll [lacks WinVerifyTrust]
1001405c.4be0: supR3HardenedDllNotificationCallback: load 00007fffc0a20000 LB 0x00151000 C:\WINDOWS\System32\ole32.dll [fFlags=0x0]
1002405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll [lacks WinVerifyTrust]
1003405c.4be0: supR3HardenedDllNotificationCallback: load 00007fffb7590000 LB 0x0001a000 C:\WINDOWS\SYSTEM32\MPR.dll [fFlags=0x0]
1004405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\mpr.dll [lacks WinVerifyTrust]
1005405c.4be0: supR3HardenedDllNotificationCallback: load 0000000073f70000 LB 0x00565000 C:\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [fFlags=0x0]
1006405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
1007405c.4be0: supR3HardenedDllNotificationCallback: load 00007fff43170000 LB 0x005f7000 C:\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [fFlags=0x0]
1008405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
1009405c.4be0: supR3HardenedDllNotificationCallback: load 00000000744e0000 LB 0x00561000 C:\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [fFlags=0x0]
1010405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
1011405c.4be0: supR3HardenedDllNotificationCallback: load 00007fffc0780000 LB 0x000c3000 C:\WINDOWS\System32\OLEAUT32.dll [fFlags=0x0]
1012405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
1013405c.4be0: supR3HardenedDllNotificationCallback: load 00007fff43ca0000 LB 0x005b3000 C:\Program Files\Oracle\VirtualBox\VBoxGlobal.dll [fFlags=0x0]
1014405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxGlobal.dll [lacks WinVerifyTrust]
1015405c.4be0: supR3HardenedDllNotificationCallback: load 0000000075450000 LB 0x00054000 C:\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll [fFlags=0x0]
1016405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll [lacks WinVerifyTrust]
1017405c.4be0: supR3HardenedDllNotificationCallback: load 00007fffbb4b0000 LB 0x0002a000 C:\WINDOWS\SYSTEM32\WINMMBASE.dll [fFlags=0x0]
1018405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmmbase.dll [lacks WinVerifyTrust]
1019405c.4be0: supR3HardenedDllNotificationCallback: load 00007fffbb5d0000 LB 0x00023000 C:\WINDOWS\SYSTEM32\WINMM.dll [fFlags=0x0]
1020405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll [lacks WinVerifyTrust]
1021405c.4be0: supR3HardenedDllNotificationCallback: load 00007fff403d0000 LB 0x01f3c000 C:\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll [fFlags=0x0]
1022405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll [lacks WinVerifyTrust]
1023405c.4be0: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
1024405c.4be0: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
1025405c.4be0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffbe300000 'api-ms-win-core-synch-l1-2-0'
1026405c.4be0: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
1027405c.4be0: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
1028405c.4be0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffbe300000 'api-ms-win-core-fibers-l1-1-1'
1029405c.4be0: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
1030405c.4be0: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
1031405c.4be0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffbe300000 'api-ms-win-core-fibers-l1-1-1'
1032405c.4be0: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
1033405c.4be0: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
1034405c.4be0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffbe300000 'api-ms-win-core-synch-l1-2-0'
1035405c.4be0: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-l1-2-1) -> 0x0, fPresent=1
1036405c.4be0: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-l1-2-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
1037405c.4be0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffbe300000 'api-ms-win-core-localization-l1-2-1'
1038405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
1039405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'fltlib.dll'...
1040405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'fltlib.dll' -> '\Device\HarddiskVolume3\Windows\System32\fltlib.dll' [rcNtRedir=0xc0150008]
1041405c.4be0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\fltLib.dll [lacks WinVerifyTrust]
1042405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'profapi.dll'...
1043405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'profapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\profapi.dll' [rcNtRedir=0xc0150008]
1044405c.4be0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\profapi.dll [lacks WinVerifyTrust]
1045405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
1046405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
1047405c.4be0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [lacks WinVerifyTrust]
1048405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
1049405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
1050405c.4be0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
1051405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1052405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1053405c.4be0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1054405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
1055405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
1056405c.4be0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
1057405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
1058405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
1059405c.4be0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
1060405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1061405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1062405c.4be0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1063405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
1064405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
1065405c.4be0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
1066405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
1067405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
1068405c.4be0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
1069405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1070405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1071405c.4be0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1072405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
1073405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
1074405c.4be0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [lacks WinVerifyTrust]
1075405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
1076405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
1077405c.4be0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
1078405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1079405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1080405c.4be0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1081405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
1082405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
1083405c.4be0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [lacks WinVerifyTrust]
1084405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
1085405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
1086405c.4be0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
1087405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
1088405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
1089405c.4be0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
1090405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
1091405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
1092405c.4be0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust]
1093405c.4be0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\kernel32.dll (Input=kernel32, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
1094405c.4be0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffc1170000 'C:\WINDOWS\System32\kernel32.dll'
1095405c.4be0: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-string-l1-1-0) -> 0x0, fPresent=1
1096405c.4be0: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-string-l1-1-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
1097405c.4be0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffbe300000 'api-ms-win-core-string-l1-1-0'
1098405c.4be0: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-datetime-l1-1-1) -> 0x0, fPresent=1
1099405c.4be0: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-datetime-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
1100405c.4be0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffbe300000 'api-ms-win-core-datetime-l1-1-1'
1101405c.4be0: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-obsolete-l1-2-0) -> 0x0, fPresent=1
1102405c.4be0: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-obsolete-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
1103405c.4be0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffbe300000 'api-ms-win-core-localization-obsolete-l1-2-0'
1104405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'user32.dll'.
1105405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #25 'win32u.dll'.
1106405c.4be0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\imm32.dll)
1107405c.4be0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\imm32.dll
1108405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
1109405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
1110405c.4be0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [lacks WinVerifyTrust]
1111405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
1112405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
1113405c.4be0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
1114405c.4be0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\IMM32.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
1115405c.4be0: supR3HardenedDllNotificationCallback: load 00007fffc09f0000 LB 0x0002d000 C:\WINDOWS\System32\IMM32.DLL [fFlags=0x0]
1116405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\imm32.dll [lacks WinVerifyTrust]
1117405c.4be0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffc09f0000 'C:\WINDOWS\system32\IMM32.DLL'
1118405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1119405c.4be0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
1120405c.4be0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff43770000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1121405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1122405c.4be0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
1123405c.4be0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff43770000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1124405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1125405c.4be0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
1126405c.4be0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff43770000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1127405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1128405c.4be0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
1129405c.4be0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff43770000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1130405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1131405c.4be0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
1132405c.4be0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff43770000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1133405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1134405c.4be0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff43770000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1135405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1136405c.4be0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff43770000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1137405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1138405c.4be0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff43770000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1139405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1140405c.4be0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff43770000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1141405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1142405c.4be0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff43770000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1143405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1144405c.4be0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff43770000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1145405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1146405c.4be0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff43770000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1147405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1148405c.4be0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
1149405c.4be0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff43770000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1150405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1151405c.4be0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff43770000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1152405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1153405c.4be0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff43770000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1154405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1155405c.4be0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff43770000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1156405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1157405c.4be0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff43770000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1158405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1159405c.4be0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff43770000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1160405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1161405c.4be0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff43770000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1162405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1163405c.4be0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff43770000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1164405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1165405c.4be0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff43770000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1166405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1167405c.4be0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff43770000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1168405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1169405c.4be0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff43770000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1170405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1171405c.4be0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff43770000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1172405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1173405c.4be0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff43770000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1174405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1175405c.4be0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff43770000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1176405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1177405c.4be0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff43770000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1178405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1179405c.4be0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff43770000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1180405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1181405c.4be0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
1182405c.4be0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff43770000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1183405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1184405c.4be0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff43770000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1185405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1186405c.4be0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff43770000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1187405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1188405c.4be0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff43770000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1189405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
1190405c.4be0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\ADVAPI32.DLL (Input=ADVAPI32.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
1191405c.4be0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffbe8f0000 'C:\WINDOWS\System32\ADVAPI32.DLL'
1192405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'bcryptprimitives.dll'.
1193405c.4be0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\cryptbase.dll)
1194405c.4be0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\cryptbase.dll
1195405c.4be0: supR3HardenedDllNotificationCallback: load 00007fffbcf60000 LB 0x0000b000 C:\WINDOWS\SYSTEM32\CRYPTBASE.DLL [fFlags=0x0]
1196405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\cryptbase.dll [lacks WinVerifyTrust]
1197405c.4be0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff403d0000 'C:\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll'
1198405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
1199405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'...
1200405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008]
1201405c.4be0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust]
1202405c.4be0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\kernel32.dll (Input=kernel32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
1203405c.4be0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffc1170000 'C:\WINDOWS\System32\kernel32.dll'
1204405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
1205405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'ole32.dll'.
1206405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
1207405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'imm32.dll'.
1208405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'winmm.dll'.
1209405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'oleaut32.dll'.
1210405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'shell32.dll'.
1211405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'advapi32.dll'.
1212405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'qt5guivbox.dll'.
1213405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'qt5corevbox.dll'.
1214405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'msvcr100.dll'.
1215405c.4be0: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\platforms\qwindows.dll)
1216405c.4be0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\platforms\qwindows.dll
1217405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
1218405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
1219405c.4be0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
1220405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
1221405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
1222405c.4be0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
1223405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
1224405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
1225405c.4be0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
1226405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
1227405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
1228405c.4be0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
1229405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
1230405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
1231405c.4be0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll [lacks WinVerifyTrust]
1232405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
1233405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
1234405c.4be0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
1235405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
1236405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume3\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
1237405c.4be0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll [lacks WinVerifyTrust]
1238405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'...
1239405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume3\Windows\System32\imm32.dll' [rcNtRedir=0xc0150008]
1240405c.4be0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\imm32.dll [lacks WinVerifyTrust]
1241405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
1242405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
1243405c.4be0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
1244405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
1245405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
1246405c.4be0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll [lacks WinVerifyTrust]
1247405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
1248405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
1249405c.4be0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
1250405c.4be0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
1251405c.4be0: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\platforms\qwindows.dll [lacks WinVerifyTrust]
1252405c.4be0: supR3HardenedDllNotificationCallback: load 00007fff73940000 LB 0x0012e000 C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll [fFlags=0x0]
1253405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\platforms\qwindows.dll [lacks WinVerifyTrust]
1254405c.4be0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff73940000 'C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll'
1255405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1256405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #33 'gdi32.dll'.
1257405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'user32.dll'.
1258405c.4be0: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\uxtheme.dll)
1259405c.4be0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\uxtheme.dll
1260405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
1261405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
1262405c.4be0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
1263405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
1264405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
1265405c.4be0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
1266405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1267405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1268405c.4be0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1269405c.4be0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
1270405c.4be0: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\uxtheme.dll [lacks WinVerifyTrust]
1271405c.4be0: supR3HardenedDllNotificationCallback: load 00007fffbb850000 LB 0x00098000 C:\WINDOWS\system32\uxtheme.dll [fFlags=0x0]
1272405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\uxtheme.dll [lacks WinVerifyTrust]
1273405c.4be0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffbb850000 'C:\WINDOWS\system32\uxtheme.dll'
1274405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
1275405c.4be0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffc0340000 'C:\WINDOWS\system32\user32.dll'
1276405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll [lacks WinVerifyTrust]
1277405c.4be0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
1278405c.4be0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffbef00000 'C:\WINDOWS\system32\shell32.dll'
1279405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\SHCore.dll [lacks WinVerifyTrust]
1280405c.4be0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\SHCore.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
1281405c.4be0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffc1030000 'C:\WINDOWS\system32\SHCore.dll'
1282405c.4be0: supR3HardenedMonitor_LdrLoadDll: error opening 'C:\WINDOWS\system32\wintab32.dll': 0 (NtPath=\??\C:\WINDOWS\system32\wintab32.dll; Input=C:\WINDOWS\system32\wintab32.dll; rcNtGetDll=0x0
1283405c.4be0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000034 'C:\WINDOWS\system32\wintab32.dll'
1284405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1285405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #21 'win32u.dll'.
1286405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #22 'user32.dll'.
1287405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #23 'gdi32.dll'.
1288405c.4be0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\dwmapi.dll)
1289405c.4be0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\dwmapi.dll
1290405c.4be0: supR3HardenedDllNotificationCallback: load 00007fffbbb90000 LB 0x00029000 C:\WINDOWS\system32\dwmapi.dll [fFlags=0x0]
1291405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dwmapi.dll [lacks WinVerifyTrust]
1292405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll [lacks WinVerifyTrust]
1293405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
1294405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
1295405c.4be0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
1296405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
1297405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
1298405c.4be0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
1299405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
1300405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
1301405c.4be0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [lacks WinVerifyTrust]
1302405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1303405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1304405c.4be0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1305405c.4be0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\winmm.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
1306405c.4be0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffbb5d0000 'C:\WINDOWS\system32\winmm.dll'
1307405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll [lacks WinVerifyTrust]
1308405c.4be0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\winmm.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
1309405c.4be0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffbb5d0000 'C:\WINDOWS\system32\winmm.dll'
1310405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll [lacks WinVerifyTrust]
1311405c.4be0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
1312405c.4be0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffbef00000 'C:\WINDOWS\system32\shell32.dll'
1313405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\uxtheme.dll [lacks WinVerifyTrust]
1314405c.4be0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
1315405c.4be0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffbb850000 'C:\WINDOWS\system32\uxtheme.dll'
1316405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
1317405c.4be0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffc06b0000 'C:\WINDOWS\system32\gdi32.dll'
1318405c.4be0: supR3HardenedDllNotificationCallback: load 00007fffc04d0000 LB 0x00173000 C:\WINDOWS\System32\MSCTF.dll [fFlags=0x0]
1319405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1320405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'oleaut32.dll'.
1321405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #38 'user32.dll'.
1322405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #39 'gdi32.dll'.
1323405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #40 'imm32.dll'.
1324405c.4be0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\msctf.dll)
1325405c.4be0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msctf.dll
1326405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
1327405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'...
1328405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume3\Windows\System32\imm32.dll' [rcNtRedir=0xc0150008]
1329405c.4be0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\imm32.dll [lacks WinVerifyTrust]
1330405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
1331405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
1332405c.4be0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
1333405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
1334405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
1335405c.4be0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
1336405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
1337405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
1338405c.4be0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
1339405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1340405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1341405c.4be0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1342405c.4be0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffc0850000 'C:\WINDOWS\System32\rpcrt4.dll'
1343405c.4be0: supR3HardenedDllNotificationCallback: load 00007fffbe9e0000 LB 0x000a0000 C:\WINDOWS\System32\clbcatq.dll [fFlags=0x0]
1344405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1345405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #28 'rpcrt4.dll'.
1346405c.4be0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\clbcatq.dll)
1347405c.4be0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\clbcatq.dll
1348405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1349405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'shcore.dll'.
1350405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #29 'combase.dll'.
1351405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'd3d11.dll'.
1352405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'dcomp.dll'.
1353405c.4be0: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\DataExchange.dll)
1354405c.4be0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\DataExchange.dll
1355405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dcomp.dll'...
1356405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'dcomp.dll' -> '\Device\HarddiskVolume3\Windows\System32\dcomp.dll' [rcNtRedir=0xc0150008]
1357405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'win32u.dll'.
1358405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp_win.dll'.
1359405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'oleaut32.dll'.
1360405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #37 'dxgi.dll'.
1361405c.4be0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\dcomp.dll)
1362405c.4be0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\dcomp.dll
1363405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'd3d11.dll'...
1364405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'd3d11.dll' -> '\Device\HarddiskVolume3\Windows\System32\d3d11.dll' [rcNtRedir=0xc0150008]
1365405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1366405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'dxgi.dll'.
1367405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'win32u.dll'.
1368405c.4be0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\d3d11.dll)
1369405c.4be0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\d3d11.dll
1370405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
1371405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
1372405c.4be0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [lacks WinVerifyTrust]
1373405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shcore.dll'...
1374405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'shcore.dll' -> '\Device\HarddiskVolume3\Windows\System32\shcore.dll' [rcNtRedir=0xc0150008]
1375405c.4be0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\SHCore.dll [lacks WinVerifyTrust]
1376405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1377405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1378405c.4be0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1379405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
1380405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
1381405c.4be0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
1382405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1383405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1384405c.4be0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1385405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
1386405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
1387405c.4be0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [lacks WinVerifyTrust]
1388405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dxgi.dll'...
1389405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'dxgi.dll' -> '\Device\HarddiskVolume3\Windows\System32\dxgi.dll' [rcNtRedir=0xc0150008]
1390405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1391405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'win32u.dll'.
1392405c.4be0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\dxgi.dll)
1393405c.4be0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\dxgi.dll
1394405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1395405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1396405c.4be0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1397405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dxgi.dll'...
1398405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'dxgi.dll' -> '\Device\HarddiskVolume3\Windows\System32\dxgi.dll' [rcNtRedir=0xc0150008]
1399405c.4be0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dxgi.dll [lacks WinVerifyTrust]
1400405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
1401405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
1402405c.4be0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
1403405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
1404405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
1405405c.4be0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust]
1406405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
1407405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
1408405c.4be0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [lacks WinVerifyTrust]
1409405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
1410405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
1411405c.4be0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [lacks WinVerifyTrust]
1412405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1413405c.4be0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1414405c.4be0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1415405c.4be0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\dataexchange.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
1416405c.4be0: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\DataExchange.dll [lacks WinVerifyTrust]
1417405c.4be0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\d3d11.dll [lacks WinVerifyTrust]
1418405c.4be0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dcomp.dll [lacks WinVerifyTrust]
1419405c.4be0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dxgi.dll [lacks WinVerifyTrust]
1420405c.4be0: supR3HardenedDllNotificationCallback: load 00007fffbc330000 LB 0x000bb000 C:\WINDOWS\system32\dxgi.dll [fFlags=0x0]
1421405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dxgi.dll [lacks WinVerifyTrust]
1422405c.4be0: supR3HardenedDllNotificationCallback: load 00007fffba390000 LB 0x0030b000 C:\WINDOWS\system32\d3d11.dll [fFlags=0x0]
1423405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\d3d11.dll [lacks WinVerifyTrust]
1424405c.4be0: supR3HardenedDllNotificationCallback: load 00007fffbacb0000 LB 0x0019c000 C:\WINDOWS\system32\dcomp.dll [fFlags=0x0]
1425405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dcomp.dll [lacks WinVerifyTrust]
1426405c.4be0: supR3HardenedDllNotificationCallback: load 00007fff96240000 LB 0x00058000 C:\WINDOWS\system32\dataexchange.dll [fFlags=0x0]
1427405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\DataExchange.dll [lacks WinVerifyTrust]
1428405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
1429405c.4be0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffc06b0000 'C:\WINDOWS\System32\gdi32.dll'
1430405c.4be0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff96240000 'C:\WINDOWS\system32\dataexchange.dll'
1431405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1432405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'rmclient.dll'.
1433405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #30 'rpcrt4.dll'.
1434405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #44 'combase.dll'.
1435405c.4be0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll)
1436405c.4be0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll
1437405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1438405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'rpcrt4.dll'.
1439405c.4be0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\rmclient.dll)
1440405c.4be0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\rmclient.dll
1441405c.4be0: supR3HardenedDllNotificationCallback: load 00007fffbb920000 LB 0x00029000 C:\WINDOWS\system32\RMCLIENT.dll [fFlags=0x0]
1442405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rmclient.dll [lacks WinVerifyTrust]
1443405c.4be0: supR3HardenedDllNotificationCallback: load 00007fffbb9d0000 LB 0x001b8000 C:\WINDOWS\system32\twinapi.appcore.dll [fFlags=0x0]
1444405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll [lacks WinVerifyTrust]
1445405c.d74: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #16 'rpcrt4.dll'.
1446405c.d74: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'devobj.dll'.
1447405c.d74: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'propsys.dll'.
1448405c.d74: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll)
1449405c.d74: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll
1450405c.d74: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #17 'cfgmgr32.dll'.
1451405c.d74: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\devobj.dll)
1452405c.d74: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\devobj.dll
1453405c.d74: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1454405c.d74: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #15 'oleaut32.dll'.
1455405c.d74: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #31 'rpcrt4.dll'.
1456405c.d74: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\propsys.dll)
1457405c.d74: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\propsys.dll
1458405c.d74: supR3HardenedDllNotificationCallback: load 00007fffbd380000 LB 0x00027000 C:\WINDOWS\SYSTEM32\DEVOBJ.dll [fFlags=0x0]
1459405c.d74: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\devobj.dll [lacks WinVerifyTrust]
1460405c.d74: supR3HardenedDllNotificationCallback: load 00007fffb9c80000 LB 0x001b4000 C:\WINDOWS\SYSTEM32\PROPSYS.dll [fFlags=0x0]
1461405c.d74: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\propsys.dll [lacks WinVerifyTrust]
1462405c.d74: supR3HardenedDllNotificationCallback: load 00007fffad410000 LB 0x00076000 C:\WINDOWS\SYSTEM32\MMDevAPI.DLL [fFlags=0x0]
1463405c.d74: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
1464405c.d74: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1465405c.d74: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'mmdevapi.dll'.
1466405c.d74: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27 'ksuser.dll'.
1467405c.d74: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #28 'avrt.dll'.
1468405c.d74: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\wdmaud.drv)
1469405c.d74: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\wdmaud.drv
1470405c.d74: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'avrt.dll'...
1471405c.d74: supR3HardenedWinVerifyCacheProcessImportTodos: 'avrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\avrt.dll' [rcNtRedir=0xc0150008]
1472405c.d74: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\avrt.dll)
1473405c.d74: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\avrt.dll
1474405c.d74: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ksuser.dll'...
1475405c.d74: supR3HardenedWinVerifyCacheProcessImportTodos: 'ksuser.dll' -> '\Device\HarddiskVolume3\Windows\System32\ksuser.dll' [rcNtRedir=0xc0150008]
1476405c.d74: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1477405c.d74: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ksuser.dll)
1478405c.d74: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ksuser.dll
1479405c.d74: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mmdevapi.dll'...
1480405c.d74: supR3HardenedWinVerifyCacheProcessImportTodos: 'mmdevapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\mmdevapi.dll' [rcNtRedir=0xc0150008]
1481405c.d74: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
1482405c.d74: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1483405c.d74: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1484405c.d74: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1485405c.d74: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
1486405c.d74: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
1487405c.d74: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
1488405c.d74: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
1489405c.d74: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
1490405c.d74: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
1491405c.d74: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1492405c.d74: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1493405c.d74: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1494405c.d74: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'cfgmgr32.dll'...
1495405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1496405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #15 'coreuicomponents.dll'.
1497405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #16 'coremessaging.dll'.
1498405c.d74: supR3HardenedWinVerifyCacheProcessImportTodos: 'cfgmgr32.dll' -> '\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll' [rcNtRedir=0xc0150008]
1499405c.d74: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll [lacks WinVerifyTrust]
1500405c.4be0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\TextInputFramework.dll)
1501405c.4be0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\TextInputFramework.dll
1502405c.d74: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'propsys.dll'...
1503405c.d74: supR3HardenedWinVerifyCacheProcessImportTodos: 'propsys.dll' -> '\Device\HarddiskVolume3\Windows\System32\propsys.dll' [rcNtRedir=0xc0150008]
1504405c.d74: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\propsys.dll [lacks WinVerifyTrust]
1505405c.d74: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'devobj.dll'...
1506405c.d74: supR3HardenedWinVerifyCacheProcessImportTodos: 'devobj.dll' -> '\Device\HarddiskVolume3\Windows\System32\devobj.dll' [rcNtRedir=0xc0150008]
1507405c.d74: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\devobj.dll [lacks WinVerifyTrust]
1508405c.d74: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
1509405c.d74: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
1510405c.d74: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
1511405c.d74: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
1512405c.d74: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
1513405c.d74: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
1514405c.d74: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1515405c.d74: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1516405c.d74: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1517405c.d74: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
1518405c.d74: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
1519405c.d74: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [lacks WinVerifyTrust]
1520405c.d74: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
1521405c.d74: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
1522405c.d74: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
1523405c.d74: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rmclient.dll'...
1524405c.d74: supR3HardenedWinVerifyCacheProcessImportTodos: 'rmclient.dll' -> '\Device\HarddiskVolume3\Windows\System32\rmclient.dll' [rcNtRedir=0xc0150008]
1525405c.d74: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rmclient.dll [lacks WinVerifyTrust]
1526405c.d74: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1527405c.d74: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1528405c.d74: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1529405c.d74: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coremessaging.dll'...
1530405c.d74: supR3HardenedWinVerifyCacheProcessImportTodos: 'coremessaging.dll' -> '\Device\HarddiskVolume3\Windows\System32\coremessaging.dll' [rcNtRedir=0xc0150008]
1531405c.d74: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1532405c.d74: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #24 'rpcrt4.dll'.
1533405c.d74: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll)
1534405c.d74: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll
1535405c.d74: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coreuicomponents.dll'...
1536405c.d74: supR3HardenedWinVerifyCacheProcessImportTodos: 'coreuicomponents.dll' -> '\Device\HarddiskVolume3\Windows\System32\coreuicomponents.dll' [rcNtRedir=0xc0150008]
1537405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1538405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'coremessaging.dll'.
1539405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #48 'shcore.dll'.
1540405c.4be0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\CoreUIComponents.dll)
1541405c.4be0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\CoreUIComponents.dll
1542405c.4be0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll [lacks WinVerifyTrust]
1543405c.4be0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ntmarta.dll)
1544405c.4be0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ntmarta.dll
1545405c.d74: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1546405c.d74: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'coremessaging.dll'.
1547405c.d74: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #48 'shcore.dll'.
1548405c.d74: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\CoreUIComponents.dll)
1549405c.d74: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1550405c.d74: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1551405c.d74: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1552405c.d74: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1553405c.d74: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1554405c.d74: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1555405c.d74: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shcore.dll'...
1556405c.d74: supR3HardenedWinVerifyCacheProcessImportTodos: 'shcore.dll' -> '\Device\HarddiskVolume3\Windows\System32\shcore.dll' [rcNtRedir=0xc0150008]
1557405c.d74: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\SHCore.dll [lacks WinVerifyTrust]
1558405c.d74: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coremessaging.dll'...
1559405c.d74: supR3HardenedWinVerifyCacheProcessImportTodos: 'coremessaging.dll' -> '\Device\HarddiskVolume3\Windows\System32\coremessaging.dll' [rcNtRedir=0xc0150008]
1560405c.d74: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll [lacks WinVerifyTrust]
1561405c.d74: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1562405c.d74: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1563405c.d74: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1564405c.d74: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shcore.dll'...
1565405c.d74: supR3HardenedWinVerifyCacheProcessImportTodos: 'shcore.dll' -> '\Device\HarddiskVolume3\Windows\System32\shcore.dll' [rcNtRedir=0xc0150008]
1566405c.d74: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\SHCore.dll [lacks WinVerifyTrust]
1567405c.d74: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coremessaging.dll'...
1568405c.d74: supR3HardenedWinVerifyCacheProcessImportTodos: 'coremessaging.dll' -> '\Device\HarddiskVolume3\Windows\System32\coremessaging.dll' [rcNtRedir=0xc0150008]
1569405c.d74: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll [lacks WinVerifyTrust]
1570405c.d74: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1571405c.d74: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1572405c.d74: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1573405c.d74: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
1574405c.d74: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
1575405c.d74: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
1576405c.d74: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1577405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'combase.dll'.
1578405c.d74: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1579405c.d74: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1580405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #22 'rpcrt4.dll'.
1581405c.4be0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #29 'bcryptprimitives.dll'.
1582405c.d74: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'...
1583405c.4be0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\WinTypes.dll)
1584405c.4be0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\WinTypes.dll
1585405c.d74: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008]
1586405c.d74: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust]
1587405c.d74: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
1588405c.d74: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
1589405c.d74: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
1590405c.d74: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
1591405c.d74: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
1592405c.d74: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [lacks WinVerifyTrust]
1593405c.d74: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
1594405c.4be0: supR3HardenedDllNotificationCallback: load 00007fffbc660000 LB 0x00031000 C:\WINDOWS\SYSTEM32\ntmarta.dll [fFlags=0x0]
1595405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ntmarta.dll [lacks WinVerifyTrust]
1596405c.4be0: supR3HardenedDllNotificationCallback: load 00007fffbae60000 LB 0x000da000 C:\WINDOWS\System32\CoreMessaging.dll [fFlags=0x0]
1597405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll [lacks WinVerifyTrust]
1598405c.4be0: supR3HardenedDllNotificationCallback: load 00007fffb9280000 LB 0x0014d000 C:\WINDOWS\SYSTEM32\wintypes.dll [fFlags=0x0]
1599405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\WinTypes.dll [lacks WinVerifyTrust]
1600405c.4be0: supR3HardenedDllNotificationCallback: load 00007fffb78c0000 LB 0x0031e000 C:\WINDOWS\System32\CoreUIComponents.dll [fFlags=0x0]
1601405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\CoreUIComponents.dll [lacks WinVerifyTrust]
1602405c.4be0: supR3HardenedDllNotificationCallback: load 00007fffb7ce0000 LB 0x00096000 C:\WINDOWS\System32\TextInputFramework.dll [fFlags=0x0]
1603405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\TextInputFramework.dll [lacks WinVerifyTrust]
1604405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
1605405c.4be0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\OLEAUT32.DLL (Input=OLEAUT32.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
1606405c.4be0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffc0780000 'C:\WINDOWS\System32\OLEAUT32.DLL'
1607405c.d74: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
1608405c.4be0: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(ext-ms-win-rtcore-ntuser-window-ext-l1-1-0.dll) -> 0x0, fPresent=1
1609405c.4be0: supR3HardenedMonitor_LdrLoadDll: pName=ext-ms-win-rtcore-ntuser-window-ext-l1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
1610405c.4be0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffc0340000 'ext-ms-win-rtcore-ntuser-window-ext-l1-1-0.dll'
1611405c.d74: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ksuser.dll [lacks WinVerifyTrust]
1612405c.4be0: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(ext-ms-win-rtcore-ntuser-integration-l1-1-0.dll) -> 0x0, fPresent=1
1613405c.4be0: supR3HardenedMonitor_LdrLoadDll: pName=ext-ms-win-rtcore-ntuser-integration-l1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
1614405c.4be0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffc0340000 'ext-ms-win-rtcore-ntuser-integration-l1-1-0.dll'
1615405c.4be0: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-com-l1-1-0.dll) -> 0x0, fPresent=1
1616405c.4be0: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-com-l1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
1617405c.4be0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffbea80000 'api-ms-win-core-com-l1-1-0.dll'
1618405c.d74: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\avrt.dll [lacks WinVerifyTrust]
1619405c.d74: supR3HardenedDllNotificationCallback: load 00007fffb6fa0000 LB 0x00009000 C:\WINDOWS\SYSTEM32\ksuser.dll [fFlags=0x0]
1620405c.d74: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ksuser.dll [lacks WinVerifyTrust]
1621405c.d74: supR3HardenedDllNotificationCallback: load 00007fffb7810000 LB 0x0000a000 C:\WINDOWS\SYSTEM32\AVRT.dll [fFlags=0x0]
1622405c.d74: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\avrt.dll [lacks WinVerifyTrust]
1623405c.d74: supR3HardenedDllNotificationCallback: load 00007fff97a30000 LB 0x00044000 C:\WINDOWS\System32\wdmaud.drv [fFlags=0x0]
1624405c.d74: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
1625405c.d74: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff97a30000 'C:\WINDOWS\System32\wdmaud.drv'
1626405c.d74: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
1627405c.d74: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
1628405c.d74: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff97a30000 'C:\WINDOWS\System32\wdmaud.drv'
1629405c.d74: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
1630405c.d74: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\MMDEVAPI.DLL (Input=MMDEVAPI.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
1631405c.d74: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffad410000 'C:\WINDOWS\System32\MMDEVAPI.DLL'
1632405c.4be0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msctf.dll [lacks WinVerifyTrust]
1633405c.4be0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\MSCTF.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
1634405c.4be0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffc04d0000 'C:\WINDOWS\System32\MSCTF.dll'
1635405c.d74: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
1636405c.d74: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
1637405c.d74: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff97a30000 'C:\WINDOWS\System32\wdmaud.drv'
1638405c.d74: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
1639405c.d74: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
1640405c.d74: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff97a30000 'C:\WINDOWS\System32\wdmaud.drv'
1641405c.d74: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
1642405c.d74: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
1643405c.d74: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff97a30000 'C:\WINDOWS\System32\wdmaud.drv'
1644405c.d74: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
1645405c.d74: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'rpcrt4.dll'.
1646405c.d74: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'oleaut32.dll'.
1647405c.d74: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #55 'mmdevapi.dll'.
1648405c.d74: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #56 'avrt.dll'.
1649405c.d74: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\AudioSes.dll)
1650405c.d74: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\AudioSes.dll
1651405c.d74: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'avrt.dll'...
1652405c.d74: supR3HardenedWinVerifyCacheProcessImportTodos: 'avrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\avrt.dll' [rcNtRedir=0xc0150008]
1653405c.d74: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\avrt.dll [lacks WinVerifyTrust]
1654405c.d74: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mmdevapi.dll'...
1655405c.d74: supR3HardenedWinVerifyCacheProcessImportTodos: 'mmdevapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\mmdevapi.dll' [rcNtRedir=0xc0150008]
1656405c.d74: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
1657405c.d74: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
1658405c.d74: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
1659405c.d74: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
1660405c.d74: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
1661405c.d74: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
1662405c.d74: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
1663405c.d74: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
1664405c.d74: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
1665405c.d74: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust]
1666405c.d74: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\AUDIOSES.DLL (Input=AUDIOSES.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
1667405c.d74: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\AudioSes.dll [lacks WinVerifyTrust]
1668405c.d74: supR3HardenedDllNotificationCallback: load 00007fff97b10000 LB 0x0012c000 C:\WINDOWS\System32\AUDIOSES.DLL [fFlags=0x0]
1669405c.d74: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\AudioSes.dll [lacks WinVerifyTrust]
1670405c.d74: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff97b10000 'C:\WINDOWS\System32\AUDIOSES.DLL'
1671405c.d74: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
1672405c.d74: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
1673405c.d74: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff97a30000 'C:\WINDOWS\System32\wdmaud.drv'
1674405c.d74: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
1675405c.d74: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
1676405c.d74: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff97a30000 'C:\WINDOWS\System32\wdmaud.drv'
1677405c.d74: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
1678405c.d74: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff97a30000 'C:\WINDOWS\System32\wdmaud.drv'
1679405c.d74: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
1680405c.d74: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff97a30000 'C:\WINDOWS\System32\wdmaud.drv'
1681405c.d74: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
1682405c.d74: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff97a30000 'C:\WINDOWS\System32\wdmaud.drv'
1683405c.d74: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
1684405c.d74: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff97a30000 'C:\WINDOWS\System32\wdmaud.drv'
1685405c.d74: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1686405c.d74: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'mmdevapi.dll'.
1687405c.d74: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'msacm32.dll'.
1688405c.d74: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'winmmbase.dll'.
1689405c.d74: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\msacm32.drv)
1690405c.d74: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msacm32.drv
1691405c.d74: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmmbase.dll'...
1692405c.d74: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmmbase.dll' -> '\Device\HarddiskVolume3\Windows\System32\winmmbase.dll' [rcNtRedir=0xc0150008]
1693405c.d74: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmmbase.dll [lacks WinVerifyTrust]
1694405c.d74: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msacm32.dll'...
1695405c.d74: supR3HardenedWinVerifyCacheProcessImportTodos: 'msacm32.dll' -> '\Device\HarddiskVolume3\Windows\System32\msacm32.dll' [rcNtRedir=0xc0150008]
1696405c.d74: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1697405c.d74: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\msacm32.dll)
1698405c.d74: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msacm32.dll
1699405c.d74: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mmdevapi.dll'...
1700405c.d74: supR3HardenedWinVerifyCacheProcessImportTodos: 'mmdevapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\mmdevapi.dll' [rcNtRedir=0xc0150008]
1701405c.d74: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
1702405c.d74: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1703405c.d74: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1704405c.d74: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1705405c.d74: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1706405c.d74: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1707405c.d74: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1708405c.d74: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
1709405c.d74: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
1710405c.d74: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msacm32.dll [lacks WinVerifyTrust]
1711405c.d74: supR3HardenedDllNotificationCallback: load 00007fff986d0000 LB 0x0001c000 C:\WINDOWS\SYSTEM32\MSACM32.dll [fFlags=0x0]
1712405c.d74: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msacm32.dll [lacks WinVerifyTrust]
1713405c.d74: supR3HardenedDllNotificationCallback: load 00007fffad160000 LB 0x0000d000 C:\WINDOWS\System32\msacm32.drv [fFlags=0x0]
1714405c.d74: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
1715405c.d74: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffad160000 'C:\WINDOWS\System32\msacm32.drv'
1716405c.d74: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
1717405c.d74: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
1718405c.d74: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffad160000 'C:\WINDOWS\System32\msacm32.drv'
1719405c.d74: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
1720405c.d74: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
1721405c.d74: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffad160000 'C:\WINDOWS\System32\msacm32.drv'
1722405c.d74: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
1723405c.d74: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
1724405c.d74: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffad160000 'C:\WINDOWS\System32\msacm32.drv'
1725405c.d74: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
1726405c.d74: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
1727405c.d74: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffad160000 'C:\WINDOWS\System32\msacm32.drv'
1728405c.d74: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
1729405c.d74: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
1730405c.d74: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffad160000 'C:\WINDOWS\System32\msacm32.drv'
1731405c.d74: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
1732405c.d74: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
1733405c.d74: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffad160000 'C:\WINDOWS\System32\msacm32.drv'
1734405c.d74: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
1735405c.d74: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffad160000 'C:\WINDOWS\System32\msacm32.drv'
1736405c.d74: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
1737405c.d74: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffad160000 'C:\WINDOWS\System32\msacm32.drv'
1738405c.d74: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
1739405c.d74: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffad160000 'C:\WINDOWS\System32\msacm32.drv'
1740405c.d74: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1741405c.d74: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'winmm.dll'.
1742405c.d74: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\midimap.dll)
1743405c.d74: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\midimap.dll
1744405c.d74: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
1745405c.d74: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume3\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
1746405c.d74: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll [lacks WinVerifyTrust]
1747405c.d74: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1748405c.d74: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1749405c.d74: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1750405c.d74: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
1751405c.d74: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\midimap.dll [lacks WinVerifyTrust]
1752405c.d74: supR3HardenedDllNotificationCallback: load 00007fffab4c0000 LB 0x0000a000 C:\WINDOWS\System32\midimap.dll [fFlags=0x0]
1753405c.d74: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\midimap.dll [lacks WinVerifyTrust]
1754405c.d74: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffab4c0000 'C:\WINDOWS\System32\midimap.dll'
1755405c.d74: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\midimap.dll [lacks WinVerifyTrust]
1756405c.d74: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
1757405c.d74: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffab4c0000 'C:\WINDOWS\System32\midimap.dll'
1758405c.d74: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\midimap.dll [lacks WinVerifyTrust]
1759405c.d74: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
1760405c.d74: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffab4c0000 'C:\WINDOWS\System32\midimap.dll'
1761405c.d74: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\midimap.dll [lacks WinVerifyTrust]
1762405c.d74: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
1763405c.d74: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffab4c0000 'C:\WINDOWS\System32\midimap.dll'
1764405c.20b8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
1765405c.20b8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\MMDevApi.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
1766405c.20b8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffad410000 'C:\WINDOWS\System32\MMDevApi.dll'
17674760.2f40: supR3HardNtChildWaitFor[1]: Quitting: ExitCode=0x1 (rcNtWait=0x0, rcNt1=0x0, rcNt2=0x103, rcNt3=0x103, 170141 ms, the end);

© 2024 Oracle Support Privacy / Do Not Sell My Info Terms of Use Trademark Policy