VirtualBox

Ticket #19282: VBoxHardening.log

File VBoxHardening.log, 189.7 KB (added by FireExit, 5 years ago)

VBoxHardening.log

Line 
165c.1e08: Log file opened: 6.1.2r135662 g_hStartupLog=0000000000000048 g_uNtVerCombined=0xa047ba00
265c.1e08: \SystemRoot\System32\ntdll.dll:
365c.1e08: CreationTime: 2019-10-09T17:33:47.127108100Z
465c.1e08: LastWriteTime: 2019-10-09T17:33:47.271108100Z
565c.1e08: ChangeTime: 2020-01-15T18:02:36.936612500Z
665c.1e08: FileAttributes: 0x20
765c.1e08: Size: 0x1e8528
865c.1e08: NT Headers: 0xd8
965c.1e08: Timestamp: 0x99ca0526
1065c.1e08: Machine: 0x8664 - amd64
1165c.1e08: Timestamp: 0x99ca0526
1265c.1e08: Image Version: 10.0
1365c.1e08: SizeOfImage: 0x1f0000 (2031616)
1465c.1e08: Resource Dir: 0x17f000 LB 0x6f310
1565c.1e08: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
1665c.1e08: [Raw version resource data: 0x17f0f0 LB 0x380, codepage 0x0 (reserved 0x0)]
1765c.1e08: ProductName: Microsoft® Windows® Operating System
1865c.1e08: ProductVersion: 10.0.18362.418
1965c.1e08: FileVersion: 10.0.18362.418 (WinBuild.160101.0800)
2065c.1e08: FileDescription: NT Layer DLL
2165c.1e08: \SystemRoot\System32\kernel32.dll:
2265c.1e08: CreationTime: 2019-09-12T06:12:38.030782600Z
2365c.1e08: LastWriteTime: 2019-09-12T06:12:38.155786400Z
2465c.1e08: ChangeTime: 2020-01-15T18:02:28.687915100Z
2565c.1e08: FileAttributes: 0x20
2665c.1e08: Size: 0xb0570
2765c.1e08: NT Headers: 0xe8
2865c.1e08: Timestamp: 0xd0cecc10
2965c.1e08: Machine: 0x8664 - amd64
3065c.1e08: Timestamp: 0xd0cecc10
3165c.1e08: Image Version: 10.0
3265c.1e08: SizeOfImage: 0xb2000 (729088)
3365c.1e08: Resource Dir: 0xb0000 LB 0x520
3465c.1e08: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
3565c.1e08: [Raw version resource data: 0xb00b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
3665c.1e08: ProductName: Microsoft® Windows® Operating System
3765c.1e08: ProductVersion: 10.0.18362.329
3865c.1e08: FileVersion: 10.0.18362.329 (WinBuild.160101.0800)
3965c.1e08: FileDescription: Windows NT BASE API Client DLL
4065c.1e08: \SystemRoot\System32\KernelBase.dll:
4165c.1e08: CreationTime: 2019-12-12T13:17:51.401391000Z
4265c.1e08: LastWriteTime: 2019-12-12T13:17:51.577389200Z
4365c.1e08: ChangeTime: 2020-01-15T18:02:36.741611200Z
4465c.1e08: FileAttributes: 0x20
4565c.1e08: Size: 0x2a2638
4665c.1e08: NT Headers: 0xf0
4765c.1e08: Timestamp: 0x50cc8d5a
4865c.1e08: Machine: 0x8664 - amd64
4965c.1e08: Timestamp: 0x50cc8d5a
5065c.1e08: Image Version: 10.0
5165c.1e08: SizeOfImage: 0x2a3000 (2764800)
5265c.1e08: Resource Dir: 0x27d000 LB 0x548
5365c.1e08: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
5465c.1e08: [Raw version resource data: 0x27d0b0 LB 0x3bc, codepage 0x0 (reserved 0x0)]
5565c.1e08: ProductName: Microsoft® Windows® Operating System
5665c.1e08: ProductVersion: 10.0.18362.535
5765c.1e08: FileVersion: 10.0.18362.535 (WinBuild.160101.0800)
5865c.1e08: FileDescription: Windows NT BASE API Client DLL
5965c.1e08: \SystemRoot\System32\apisetschema.dll:
6065c.1e08: CreationTime: 2019-03-19T04:43:54.837151500Z
6165c.1e08: LastWriteTime: 2019-03-19T04:43:54.837151500Z
6265c.1e08: ChangeTime: 2020-01-15T18:02:28.519921900Z
6365c.1e08: FileAttributes: 0x20
6465c.1e08: Size: 0x1d028
6565c.1e08: NT Headers: 0xc8
6665c.1e08: Timestamp: 0xd6ced080
6765c.1e08: Machine: 0x8664 - amd64
6865c.1e08: Timestamp: 0xd6ced080
6965c.1e08: Image Version: 10.0
7065c.1e08: SizeOfImage: 0x1e000 (122880)
7165c.1e08: Resource Dir: 0x1d000 LB 0x408
7265c.1e08: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
7365c.1e08: [Raw version resource data: 0x1d060 LB 0x3a8, codepage 0x0 (reserved 0x0)]
7465c.1e08: ProductName: Microsoft® Windows® Operating System
7565c.1e08: ProductVersion: 10.0.18362.1
7665c.1e08: FileVersion: 10.0.18362.1 (WinBuild.160101.0800)
7765c.1e08: FileDescription: ApiSet Schema DLL
7865c.1e08: NtOpenDirectoryObject failed on \Driver: 0xc0000022
7965c.1e08: supR3HardenedWinFindAdversaries: 0x0
8065c.1e08: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
8165c.1e08: Calling main()
8265c.1e08: SUPR3HardenedMain: pszProgName=VirtualBoxVM fFlags=0x2
8365c.1e08: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
8465c.1e08: SUPR3HardenedMain: Respawn #1
8565c.1e08: System32: \Device\HarddiskVolume2\Windows\System32
8665c.1e08: WinSxS: \Device\HarddiskVolume2\Windows\WinSxS
8765c.1e08: KnownDllPath: C:\WINDOWS\System32
8865c.1e08: supR3HardenedWinInit: Performing a limited self purification...
8965c.1e08: supHardNtVpScanVirtualMemory: enmKind=SELF_PURIFICATION
9065c.1e08: *0000000000000000-000000000032ffff 0x0001/0x0000 0x0000000
9165c.1e08: *0000000000330000-000000000033ffff 0x0004/0x0004 0x0040000
9265c.1e08: 0000000000340000-000000000034ffff 0x0001/0x0000 0x0000000
9365c.1e08: *0000000000350000-000000000036afff 0x0002/0x0002 0x0040000
9465c.1e08: 000000000036b000-000000000036ffff 0x0001/0x0000 0x0000000
9565c.1e08: *0000000000370000-0000000000373fff 0x0002/0x0002 0x0040000
9665c.1e08: 0000000000374000-000000000037ffff 0x0001/0x0000 0x0000000
9765c.1e08: *0000000000380000-0000000000381fff 0x0004/0x0004 0x0020000
9865c.1e08: 0000000000382000-000000000038ffff 0x0001/0x0000 0x0000000
9965c.1e08: *0000000000390000-0000000000391fff 0x0004/0x0004 0x0020000
10065c.1e08: 0000000000392000-00000000003a9fff 0x0000/0x0004 0x0020000
10165c.1e08: 00000000003aa000-00000000003fffff 0x0001/0x0000 0x0000000
10265c.1e08: *0000000000400000-0000000000590fff 0x0000/0x0004 0x0020000
10365c.1e08: 0000000000591000-0000000000593fff 0x0004/0x0004 0x0020000
10465c.1e08: 0000000000594000-00000000005fffff 0x0000/0x0004 0x0020000
10565c.1e08: *0000000000600000-00000000006b8fff 0x0000/0x0004 0x0020000
10665c.1e08: 00000000006b9000-00000000006bbfff 0x0104/0x0004 0x0020000
10765c.1e08: 00000000006bc000-00000000006fffff 0x0004/0x0004 0x0020000
10865c.1e08: *0000000000700000-00000000007c6fff 0x0002/0x0002 0x0040000
10965c.1e08: 00000000007c7000-000000000085ffff 0x0001/0x0000 0x0000000
11065c.1e08: *0000000000860000-000000000086efff 0x0004/0x0004 0x0020000
11165c.1e08: 000000000086f000-000000000086ffff 0x0000/0x0004 0x0020000
11265c.1e08: 0000000000870000-00000000008affff 0x0001/0x0000 0x0000000
11365c.1e08: *00000000008b0000-00000000008b4fff 0x0004/0x0004 0x0020000
11465c.1e08: 00000000008b5000-00000000009affff 0x0000/0x0004 0x0020000
11565c.1e08: *00000000009b0000-00000000009bcfff 0x0000/0x0004 0x0020000
11665c.1e08: 00000000009bd000-0000000000badfff 0x0004/0x0004 0x0020000
11765c.1e08: 0000000000bae000-0000000000baefff 0x0000/0x0004 0x0020000
11865c.1e08: 0000000000baf000-0000000000baffff 0x0001/0x0000 0x0000000
11965c.1e08: *0000000000bb0000-0000000000bccfff 0x0004/0x0004 0x0020000
12065c.1e08: 0000000000bcd000-0000000000caffff 0x0000/0x0004 0x0020000
12165c.1e08: 0000000000cb0000-000000007ffdffff 0x0001/0x0000 0x0000000
12265c.1e08: *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000
12365c.1e08: 000000007ffe1000-000000007ffedfff 0x0001/0x0000 0x0000000
12465c.1e08: *000000007ffee000-000000007ffeefff 0x0002/0x0002 0x0020000
12565c.1e08: 000000007ffef000-00007ff4d413ffff 0x0001/0x0000 0x0000000
12665c.1e08: *00007ff4d4140000-00007ff4d4144fff 0x0002/0x0002 0x0040000
12765c.1e08: 00007ff4d4145000-00007ff4d423ffff 0x0000/0x0002 0x0040000
12865c.1e08: *00007ff4d4240000-00007ff5d425ffff 0x0000/0x0004 0x0020000
12965c.1e08: *00007ff5d4260000-00007ff5d625ffff 0x0000/0x0004 0x0020000
13065c.1e08: 00007ff5d6260000-00007ff5d6260fff 0x0004/0x0004 0x0020000
13165c.1e08: 00007ff5d6261000-00007ff5d626ffff 0x0001/0x0000 0x0000000
13265c.1e08: *00007ff5d6270000-00007ff5d6270fff 0x0002/0x0002 0x0040000
13365c.1e08: 00007ff5d6271000-00007ff5d627ffff 0x0001/0x0000 0x0000000
13465c.1e08: *00007ff5d6280000-00007ff5d62a2fff 0x0002/0x0002 0x0040000
13565c.1e08: 00007ff5d62a3000-00007ff66cedffff 0x0001/0x0000 0x0000000
13665c.1e08: *00007ff66cee0000-00007ff66cee0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
13765c.1e08: 00007ff66cee1000-00007ff66cf56fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
13865c.1e08: 00007ff66cf57000-00007ff66cf57fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
13965c.1e08: 00007ff66cf58000-00007ff66cf9ffff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
14065c.1e08: 00007ff66cfa0000-00007ff66cfa2fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
14165c.1e08: 00007ff66cfa3000-00007ff66cfa5fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
14265c.1e08: 00007ff66cfa6000-00007ff66cfa8fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
14365c.1e08: 00007ff66cfa9000-00007ff66cfa9fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
14465c.1e08: 00007ff66cfaa000-00007ff66cfabfff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
14565c.1e08: 00007ff66cfac000-00007ff66cfacfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
14665c.1e08: 00007ff66cfad000-00007ff66cff5fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
14765c.1e08: 00007ff66cff6000-00007ffd697fffff 0x0001/0x0000 0x0000000
14865c.1e08: *00007ffd69800000-00007ffd69800fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\KernelBase.dll
14965c.1e08: 00007ffd69801000-00007ffd69905fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\KernelBase.dll
15065c.1e08: 00007ffd69906000-00007ffd69a67fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\KernelBase.dll
15165c.1e08: 00007ffd69a68000-00007ffd69a6bfff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\KernelBase.dll
15265c.1e08: 00007ffd69a6c000-00007ffd69a6cfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\KernelBase.dll
15365c.1e08: 00007ffd69a6d000-00007ffd69aa2fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\KernelBase.dll
15465c.1e08: 00007ffd69aa3000-00007ffd6b28ffff 0x0001/0x0000 0x0000000
15565c.1e08: *00007ffd6b290000-00007ffd6b290fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\kernel32.dll
15665c.1e08: 00007ffd6b291000-00007ffd6b305fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\kernel32.dll
15765c.1e08: 00007ffd6b306000-00007ffd6b337fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\kernel32.dll
15865c.1e08: 00007ffd6b338000-00007ffd6b338fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\kernel32.dll
15965c.1e08: 00007ffd6b339000-00007ffd6b339fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\kernel32.dll
16065c.1e08: 00007ffd6b33a000-00007ffd6b341fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\kernel32.dll
16165c.1e08: 00007ffd6b342000-00007ffd6bc1ffff 0x0001/0x0000 0x0000000
16265c.1e08: *00007ffd6bc20000-00007ffd6bc20fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
16365c.1e08: 00007ffd6bc21000-00007ffd6bd37fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
16465c.1e08: 00007ffd6bd38000-00007ffd6bd7efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
16565c.1e08: 00007ffd6bd7f000-00007ffd6bd7ffff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
16665c.1e08: 00007ffd6bd80000-00007ffd6bd81fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
16765c.1e08: 00007ffd6bd82000-00007ffd6bd8afff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
16865c.1e08: 00007ffd6bd8b000-00007ffd6be0ffff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
16965c.1e08: 00007ffd6be10000-00007ffffffeffff 0x0001/0x0000 0x0000000
17065c.1e08: kernel32.dll: timestamp 0xd0cecc10 (rc=VINF_SUCCESS)
17165c.1e08: kernelbase.dll: timestamp 0x50cc8d5a (rc=VINF_SUCCESS)
17265c.1e08: VirtualBoxVM.exe: timestamp 0x5e1f1d0f (rc=VINF_SUCCESS)
17365c.1e08: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
17465c.1e08: '\Device\HarddiskVolume2\Windows\System32\ntdll.dll' has no imports
17565c.1e08: supR3HardenedWinInit: SUPHARDNTVPKIND_SELF_PURIFICATION_LIMITED -> VINF_SUCCESS, cFixes=0
17665c.1e08: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
17765c.1e08: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe)
17865c.1e08: supR3HardNtEnableThreadCreationEx:
17965c.1e08: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffd6bc917f0 pvNtTerminateThread=00007ffd6bcbcb10
18065c.1e08: supR3HardenedWinDoReSpawn(1): New child 2b44.359c [kernel32].
18165c.1e08: supR3HardNtChildGatherData: PebBaseAddress=0000000000dbe000 cbPeb=0x388
18265c.1e08: supR3HardNtPuChFindNtdll: uNtDllParentAddr=00007ffd6bc20000 uNtDllChildAddr=00007ffd6bc20000
18365c.1e08: supR3HardenedWinSetupChildInit: uLdrInitThunk=00007ffd6bc917f0
18465c.1e08: supR3HardenedWinSetupChildInit: Initial context:
185 rax=0000000000000000 rbx=0000000000000000 rcx=00007ff66cee7900 rdx=0000000000dbe000
186 rsi=0000000000000000 rdi=0000000000000000 r8 =0000000000000000 r9 =0000000000000000
187 r10=0000000000000000 r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
188 r14=0000000000000000 r15=0000000000000000 P1=0000000000000000 P2=0000000000000000
189 rip=00007ffd6bc8ceb0 rsp=0000000000effbe8 rbp=0000000000000000 ctxflags=0010001b
190 cs=0033 ss=002b ds=0000 es=0000 fs=0000 gs=0000 eflags=00000200 mxcrx=00001f80
191 P3=0000000000000000 P4=0000000000000000 P5=0000000000000000 P6=0000000000000000
192 dr0=0000000000000000 dr1=0000000000000000 dr2=0000000000000000 dr3=0000000000000000
193 dr6=0000000000000000 dr7=0000000000000000 vcr=0000000000000000 dcr=0000000000000000
194 lbt=0000000000000000 lbf=0000000000000000 lxt=0000000000000000 lxf=0000000000000000
19565c.1e08: supR3HardenedWinSetupChildInit: Start child.
19665c.1e08: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 1 ms.
19765c.1e08: supR3HardNtChildPurify: Startup delay kludge #1/0: 261 ms, 29 sleeps
19865c.1e08: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
19965c.1e08: *0000000000000000-0000000000baffff 0x0001/0x0000 0x0000000
20065c.1e08: *0000000000bb0000-0000000000bcffff 0x0004/0x0004 0x0020000
20165c.1e08: *0000000000bd0000-0000000000beafff 0x0002/0x0002 0x0040000
20265c.1e08: 0000000000beb000-0000000000beffff 0x0001/0x0000 0x0000000
20365c.1e08: *0000000000bf0000-0000000000bf3fff 0x0002/0x0002 0x0040000
20465c.1e08: 0000000000bf4000-0000000000bfffff 0x0001/0x0000 0x0000000
20565c.1e08: *0000000000c00000-0000000000dbdfff 0x0000/0x0004 0x0020000
20665c.1e08: 0000000000dbe000-0000000000dc0fff 0x0004/0x0004 0x0020000
20765c.1e08: 0000000000dc1000-0000000000dfffff 0x0000/0x0004 0x0020000
20865c.1e08: *0000000000e00000-0000000000efafff 0x0000/0x0004 0x0020000
20965c.1e08: 0000000000efb000-0000000000efdfff 0x0104/0x0004 0x0020000
21065c.1e08: 0000000000efe000-0000000000efffff 0x0004/0x0004 0x0020000
21165c.1e08: *0000000000f00000-0000000000f01fff 0x0004/0x0004 0x0020000
21265c.1e08: 0000000000f02000-000000007ffdffff 0x0001/0x0000 0x0000000
21365c.1e08: *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000
21465c.1e08: 000000007ffe1000-000000007ffedfff 0x0001/0x0000 0x0000000
21565c.1e08: *000000007ffee000-000000007ffeefff 0x0002/0x0002 0x0020000
21665c.1e08: 000000007ffef000-00007ff518cdffff 0x0001/0x0000 0x0000000
21765c.1e08: *00007ff518ce0000-00007ff518ce0fff 0x0002/0x0002 0x0040000
21865c.1e08: 00007ff518ce1000-00007ff518ceffff 0x0001/0x0000 0x0000000
21965c.1e08: *00007ff518cf0000-00007ff518d12fff 0x0002/0x0002 0x0040000
22065c.1e08: 00007ff518d13000-00007ff66cedffff 0x0001/0x0000 0x0000000
22165c.1e08: *00007ff66cee0000-00007ff66cee0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
22265c.1e08: 00007ff66cee1000-00007ff66cf56fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
22365c.1e08: 00007ff66cf57000-00007ff66cf57fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
22465c.1e08: 00007ff66cf58000-00007ff66cf9ffff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
22565c.1e08: 00007ff66cfa0000-00007ff66cfa0fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
22665c.1e08: 00007ff66cfa1000-00007ff66cfa1fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
22765c.1e08: 00007ff66cfa2000-00007ff66cfa6fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
22865c.1e08: 00007ff66cfa7000-00007ff66cfa7fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
22965c.1e08: 00007ff66cfa8000-00007ff66cfa8fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
23065c.1e08: 00007ff66cfa9000-00007ff66cfacfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
23165c.1e08: 00007ff66cfad000-00007ff66cff5fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
23265c.1e08: 00007ff66cff6000-00007ffd6bc1ffff 0x0001/0x0000 0x0000000
23365c.1e08: *00007ffd6bc20000-00007ffd6bc20fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
23465c.1e08: 00007ffd6bc21000-00007ffd6bd37fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
23565c.1e08: 00007ffd6bd38000-00007ffd6bd7efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
23665c.1e08: 00007ffd6bd7f000-00007ffd6bd8afff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
23765c.1e08: 00007ffd6bd8b000-00007ffd6bd99fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
23865c.1e08: 00007ffd6bd9a000-00007ffd6bd9afff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
23965c.1e08: 00007ffd6bd9b000-00007ffd6bd9dfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
24065c.1e08: 00007ffd6bd9e000-00007ffd6be0ffff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
24165c.1e08: 00007ffd6be10000-00007ffffffeffff 0x0001/0x0000 0x0000000
24265c.1e08: supR3HardNtChildPurify: Done after 270 ms and 0 fixes (loop #0).
2432b44.359c: Log file opened: 6.1.2r135662 g_hStartupLog=0000000000000004 g_uNtVerCombined=0xa047ba00
2442b44.359c: supR3HardenedVmProcessInit: uNtDllAddr=00007ffd6bc20000 g_uNtVerCombined=0xa047ba00 (stack ~0000000000eff678)
2452b44.359c: ntdll.dll: timestamp 0x99ca0526 (rc=VINF_SUCCESS)
2462b44.359c: New simple heap: #1 0000000001010000 LB 0x400000 (for 2031616 allocation)
24765c.1e08: supR3HardNtEnableThreadCreationEx:
2482b44.359c: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
2492b44.359c: System32: \Device\HarddiskVolume2\Windows\System32
2502b44.359c: WinSxS: \Device\HarddiskVolume2\Windows\WinSxS
2512b44.359c: KnownDllPath: C:\WINDOWS\System32
2522b44.359c: supR3HardenedVmProcessInit: Opening vboxdrv stub...
2532b44.359c: supR3HardenedVmProcessInit: Restoring LdrInitializeThunk...
2542b44.359c: supR3HardenedVmProcessInit: Returning to LdrInitializeThunk...
2552b44.359c: Registered Dll notification callback with NTDLL.
2562b44.359c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\kernel32.dll)
2572b44.359c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\kernel32.dll
2582b44.359c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\KERNEL32.DLL (Input=KERNEL32.DLL, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000004001:<flags> [calling]
2592b44.359c: supR3HardenedDllNotificationCallback: load 00007ffd69800000 LB 0x002a3000 C:\WINDOWS\System32\KERNELBASE.dll [fFlags=0x0]
2602b44.359c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\KernelBase.dll)
2612b44.359c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\KernelBase.dll
2622b44.359c: supR3HardenedDllNotificationCallback: load 00007ffd6b290000 LB 0x000b2000 C:\WINDOWS\System32\KERNEL32.DLL [fFlags=0x0]
2632b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
2642b44.359c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd6b290000 'C:\WINDOWS\System32\KERNEL32.DLL'
2652b44.359c: supR3HardenedDllNotificationCallback: load 00007ff66cee0000 LB 0x00116000 C:\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe [fFlags=0x0]
2662b44.359c: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
2672b44.359c: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe)
2682b44.359c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
26965c.1e08: supR3HardNtChildWaitFor: Found expected request 1 (CloseEvents) after 134 ms.
2702b44.359c: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffd6bc917f0 pvNtTerminateThread=00007ffd6bcbcb10
2712b44.359c: \SystemRoot\System32\ntdll.dll:
2722b44.359c: CreationTime: 2019-10-09T17:33:47.127108100Z
2732b44.359c: LastWriteTime: 2019-10-09T17:33:47.271108100Z
2742b44.359c: ChangeTime: 2020-01-15T18:02:36.936612500Z
2752b44.359c: FileAttributes: 0x20
2762b44.359c: Size: 0x1e8528
2772b44.359c: NT Headers: 0xd8
2782b44.359c: Timestamp: 0x99ca0526
2792b44.359c: Machine: 0x8664 - amd64
2802b44.359c: Timestamp: 0x99ca0526
2812b44.359c: Image Version: 10.0
2822b44.359c: SizeOfImage: 0x1f0000 (2031616)
2832b44.359c: Resource Dir: 0x17f000 LB 0x6f310
2842b44.359c: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
2852b44.359c: [Raw version resource data: 0x17f0f0 LB 0x380, codepage 0x0 (reserved 0x0)]
2862b44.359c: ProductName: Microsoft® Windows® Operating System
2872b44.359c: ProductVersion: 10.0.18362.418
2882b44.359c: FileVersion: 10.0.18362.418 (WinBuild.160101.0800)
2892b44.359c: FileDescription: NT Layer DLL
2902b44.359c: \SystemRoot\System32\kernel32.dll:
2912b44.359c: CreationTime: 2019-09-12T06:12:38.030782600Z
2922b44.359c: LastWriteTime: 2019-09-12T06:12:38.155786400Z
2932b44.359c: ChangeTime: 2020-01-15T18:02:28.687915100Z
2942b44.359c: FileAttributes: 0x20
2952b44.359c: Size: 0xb0570
2962b44.359c: NT Headers: 0xe8
2972b44.359c: Timestamp: 0xd0cecc10
2982b44.359c: Machine: 0x8664 - amd64
2992b44.359c: Timestamp: 0xd0cecc10
3002b44.359c: Image Version: 10.0
3012b44.359c: SizeOfImage: 0xb2000 (729088)
3022b44.359c: Resource Dir: 0xb0000 LB 0x520
3032b44.359c: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
3042b44.359c: [Raw version resource data: 0xb00b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
3052b44.359c: ProductName: Microsoft® Windows® Operating System
3062b44.359c: ProductVersion: 10.0.18362.329
3072b44.359c: FileVersion: 10.0.18362.329 (WinBuild.160101.0800)
3082b44.359c: FileDescription: Windows NT BASE API Client DLL
3092b44.359c: \SystemRoot\System32\KernelBase.dll:
3102b44.359c: CreationTime: 2019-12-12T13:17:51.401391000Z
3112b44.359c: LastWriteTime: 2019-12-12T13:17:51.577389200Z
3122b44.359c: ChangeTime: 2020-01-15T18:02:36.741611200Z
3132b44.359c: FileAttributes: 0x20
3142b44.359c: Size: 0x2a2638
3152b44.359c: NT Headers: 0xf0
3162b44.359c: Timestamp: 0x50cc8d5a
3172b44.359c: Machine: 0x8664 - amd64
3182b44.359c: Timestamp: 0x50cc8d5a
3192b44.359c: Image Version: 10.0
3202b44.359c: SizeOfImage: 0x2a3000 (2764800)
3212b44.359c: Resource Dir: 0x27d000 LB 0x548
3222b44.359c: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
3232b44.359c: [Raw version resource data: 0x27d0b0 LB 0x3bc, codepage 0x0 (reserved 0x0)]
3242b44.359c: ProductName: Microsoft® Windows® Operating System
3252b44.359c: ProductVersion: 10.0.18362.535
3262b44.359c: FileVersion: 10.0.18362.535 (WinBuild.160101.0800)
3272b44.359c: FileDescription: Windows NT BASE API Client DLL
3282b44.359c: \SystemRoot\System32\apisetschema.dll:
3292b44.359c: CreationTime: 2019-03-19T04:43:54.837151500Z
3302b44.359c: LastWriteTime: 2019-03-19T04:43:54.837151500Z
3312b44.359c: ChangeTime: 2020-01-15T18:02:28.519921900Z
3322b44.359c: FileAttributes: 0x20
3332b44.359c: Size: 0x1d028
3342b44.359c: NT Headers: 0xc8
3352b44.359c: Timestamp: 0xd6ced080
3362b44.359c: Machine: 0x8664 - amd64
3372b44.359c: Timestamp: 0xd6ced080
3382b44.359c: Image Version: 10.0
3392b44.359c: SizeOfImage: 0x1e000 (122880)
3402b44.359c: Resource Dir: 0x1d000 LB 0x408
3412b44.359c: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
3422b44.359c: [Raw version resource data: 0x1d060 LB 0x3a8, codepage 0x0 (reserved 0x0)]
3432b44.359c: ProductName: Microsoft® Windows® Operating System
3442b44.359c: ProductVersion: 10.0.18362.1
3452b44.359c: FileVersion: 10.0.18362.1 (WinBuild.160101.0800)
3462b44.359c: FileDescription: ApiSet Schema DLL
3472b44.359c: NtOpenDirectoryObject failed on \Driver: 0xc0000022
3482b44.359c: supR3HardenedWinFindAdversaries: 0x0
3492b44.359c: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
3502b44.359c: Calling main()
3512b44.359c: SUPR3HardenedMain: pszProgName=VirtualBoxVM fFlags=0x2
3522b44.359c: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
3532b44.359c: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
3542b44.359c: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe)
3552b44.359c: SUPR3HardenedMain: Respawn #2
3562b44.359c: supR3HardNtEnableThreadCreationEx:
3572b44.359c: supR3HardenedDllNotificationCallback: load 00007ffd6a9f0000 LB 0x00120000 C:\WINDOWS\System32\RPCRT4.dll [fFlags=0x0]
3582b44.359c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll)
3592b44.359c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll
3602b44.359c: supR3HardenedDllNotificationCallback: load 00007ffd69cd0000 LB 0x00097000 C:\WINDOWS\System32\sechost.dll [fFlags=0x0]
3612b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'rpcrt4.dll'.
3622b44.359c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\sechost.dll)
3632b44.359c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\sechost.dll
3642b44.359c: '\Device\HarddiskVolume2\Windows\System32\ntdll.dll' has no imports
3652b44.359c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\ntdll.dll)
3662b44.359c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\ntdll.dll
3672b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
3682b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
3692b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
3702b44.359c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\ntdll.dll (Input=ntdll.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
3712b44.359c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd6bc20000 'C:\WINDOWS\System32\ntdll.dll'
3722b44.359c: Error -104 in supR3HardenedWinReSpawn! (enmWhat=5)
3732b44.359c: Error relaunching VirtualBox VM process: 5
374Command line: '60eaff78-4bdd-042d-2e72-669728efd737-suplib-3rdchild --comment orarac1 --startvm 9f32e1e8-db7a-4f67-a941-9c05e8f51d5a --no-startvm-errormsgbox "--sup-hardening-log=C:\Users\Sandesh\VirtualBox VMs\orarac1\Logs\VBoxHardening.log"'
3752b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'opengl32.dll'.
3762b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'uicommon.dll'.
3772b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
3782b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcp100.dll'.
3792b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'msvcr100.dll'.
3802b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'qt5corevbox.dll'.
3812b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'qt5guivbox.dll'.
3822b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'qt5widgetsvbox.dll'.
3832b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'qt5openglvbox.dll'.
3842b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'user32.dll'.
3852b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'ole32.dll'.
3862b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'oleaut32.dll'.
3872b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'winmm.dll'.
3882b44.359c: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll)
3892b44.359c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll
3902b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
3912b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume2\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
3922b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'winmmbase.dll'.
3932b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'msvcrt.dll'.
3942b44.359c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\winmm.dll)
3952b44.359c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\winmm.dll
3962b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
3972b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume2\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
3982b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
3992b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'combase.dll'.
4002b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #23 'rpcrt4.dll'.
4012b44.359c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\oleaut32.dll)
4022b44.359c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\oleaut32.dll
4032b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
4042b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
4052b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #22 'rpcrt4.dll'.
4062b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #56 'gdi32.dll'.
4072b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #57 'user32.dll'.
4082b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #58 'combase.dll'.
4092b44.359c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\ole32.dll)
4102b44.359c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\ole32.dll
4112b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
4122b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
4132b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'win32u.dll'.
4142b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'gdi32.dll'.
4152b44.359c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\user32.dll)
4162b44.359c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\user32.dll
4172b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5openglvbox.dll'...
4182b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5openglvbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5openglvbox.dll' [rcNtRedir=0xc0150008]
4192b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'qt5widgetsvbox.dll'.
4202b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'qt5guivbox.dll'.
4212b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5corevbox.dll'.
4222b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcr100.dll'.
4232b44.359c: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll)
4242b44.359c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll
4252b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
4262b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
4272b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
4282b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
4292b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5guivbox.dll'.
4302b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5corevbox.dll'.
4312b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'shell32.dll'.
4322b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
4332b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
4342b44.359c: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll)
4352b44.359c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll
4362b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
4372b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
4382b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'ole32.dll'.
4392b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'opengl32.dll'.
4402b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
4412b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
4422b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'.
4432b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
4442b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
4452b44.359c: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll)
4462b44.359c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
4472b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
4482b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
4492b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
4502b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'shell32.dll'.
4512b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ole32.dll'.
4522b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'advapi32.dll'.
4532b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ws2_32.dll'.
4542b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'mpr.dll'.
4552b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcp100.dll'.
4562b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'msvcr100.dll'.
4572b44.359c: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll)
4582b44.359c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
4592b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
4602b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
4612b44.359c: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll)
4622b44.359c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll
4632b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
4642b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
4652b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
4662b44.359c: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll)
4672b44.359c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll
4682b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
4692b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
4702b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
4712b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
4722b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
4732b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ws2_32.dll'.
4742b44.359c: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll)
4752b44.359c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll
4762b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'uicommon.dll'...
4772b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'uicommon.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\uicommon.dll' [rcNtRedir=0xc0150008]
4782b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'vboxrt.dll'.
4792b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcr100.dll'.
4802b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5corevbox.dll'.
4812b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5guivbox.dll'.
4822b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5widgetsvbox.dll'.
4832b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'user32.dll'.
4842b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'advapi32.dll'.
4852b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'ole32.dll'.
4862b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'oleaut32.dll'.
4872b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'rpcrt4.dll'.
4882b44.359c: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\UICommon.dll)
4892b44.359c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\UICommon.dll
4902b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
4912b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume2\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
4922b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
4932b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'advapi32.dll'.
4942b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
4952b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'gdi32.dll'.
4962b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'glu32.dll'.
4972b44.359c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\opengl32.dll)
4982b44.359c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\opengl32.dll
4992b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'glu32.dll'...
5002b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'glu32.dll' -> '\Device\HarddiskVolume2\Windows\System32\glu32.dll' [rcNtRedir=0xc0150008]
5012b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
5022b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
5032b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'opengl32.dll'.
5042b44.359c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\glu32.dll)
5052b44.359c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\glu32.dll
5062b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
5072b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
5082b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'win32u.dll'.
5092b44.359c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\gdi32.dll)
5102b44.359c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\gdi32.dll
5112b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
5122b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
5132b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
5142b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
5152b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
5162b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
5172b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'sechost.dll'.
5182b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27 'rpcrt4.dll'.
5192b44.359c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\advapi32.dll)
5202b44.359c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\advapi32.dll
5212b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
5222b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
5232b44.359c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\msvcrt.dll)
5242b44.359c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\msvcrt.dll
5252b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
5262b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
5272b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
5282b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
5292b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume2\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
5302b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
5312b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
5322b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
5332b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ole32.dll [lacks WinVerifyTrust]
5342b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
5352b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
5362b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
5372b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
5382b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
5392b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
5402b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
5412b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
5422b44.359c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
5432b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
5442b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
5452b44.359c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
5462b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
5472b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
5482b44.359c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
5492b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
5502b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
5512b44.359c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
5522b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
5532b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
5542b44.359c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
5552b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
5562b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
5572b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'rpcrt4.dll'.
5582b44.359c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\ws2_32.dll)
5592b44.359c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\ws2_32.dll
5602b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
5612b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
5622b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
5632b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
5642b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
5652b44.359c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
5662b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
5672b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
5682b44.359c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
5692b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
5702b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
5712b44.359c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
5722b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
5732b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
5742b44.359c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
5752b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
5762b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
5772b44.359c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
5782b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mpr.dll'...
5792b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'mpr.dll' -> '\Device\HarddiskVolume2\Windows\System32\mpr.dll' [rcNtRedir=0xc0150008]
5802b44.359c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\mpr.dll)
5812b44.359c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\mpr.dll
5822b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
5832b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
5842b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ws2_32.dll [lacks WinVerifyTrust]
5852b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
5862b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
5872b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
5882b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
5892b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
5902b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ole32.dll [lacks WinVerifyTrust]
5912b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
5922b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume2\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
5932b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #77 'user32.dll'.
5942b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #79 'gdi32.dll'.
5952b44.359c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\shell32.dll)
5962b44.359c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\shell32.dll
5972b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
5982b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
5992b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
6002b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
6012b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
6022b44.359c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
6032b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
6042b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
6052b44.359c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
6062b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
6072b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
6082b44.359c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
6092b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
6102b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
6112b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
6122b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
6132b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
6142b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
6152b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
6162b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume2\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
6172b44.359c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
6182b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
6192b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
6202b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ole32.dll [lacks WinVerifyTrust]
6212b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
6222b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
6232b44.359c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
6242b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
6252b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
6262b44.359c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
6272b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
6282b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume2\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
6292b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\shell32.dll [lacks WinVerifyTrust]
6302b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
6312b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
6322b44.359c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
6332b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
6342b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
6352b44.359c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
6362b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
6372b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
6382b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
6392b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
6402b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
6412b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
6422b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
6432b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
6442b44.359c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
6452b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
6462b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
6472b44.359c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
6482b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
6492b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
6502b44.359c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
6512b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
6522b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
6532b44.359c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
6542b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
6552b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
6562b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
6572b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
6582b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume2\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
6592b44.359c: '\Device\HarddiskVolume2\Windows\System32\win32u.dll' has no imports
6602b44.359c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\win32u.dll)
6612b44.359c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\win32u.dll
6622b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
6632b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume2\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
6642b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
6652b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #46 'bcryptprimitives.dll'.
6662b44.359c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\combase.dll)
6672b44.359c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\combase.dll
6682b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
6692b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
6702b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
6712b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
6722b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
6732b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
6742b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
6752b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
6762b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
6772b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
6782b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
6792b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
6802b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
6812b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume2\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
6822b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\combase.dll [lacks WinVerifyTrust]
6832b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
6842b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
6852b44.359c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll)
6862b44.359c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\msvcp_win.dll
6872b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
6882b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
6892b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
6902b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmmbase.dll'...
6912b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmmbase.dll' -> '\Device\HarddiskVolume2\Windows\System32\winmmbase.dll' [rcNtRedir=0xc0150008]
6922b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
6932b44.359c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\winmmbase.dll)
6942b44.359c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\winmmbase.dll
6952b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
6962b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
6972b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
6982b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'...
6992b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume2\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008]
7002b44.359c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\bcryptprimitives.dll)
7012b44.359c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\bcryptprimitives.dll
7022b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
7032b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
7042b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
7052b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
7062b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
7072b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
7082b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
7092b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
7102b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
7112b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
7122b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
7132b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
7142b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
7152b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
7162b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
7172b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'sechost.dll'...
7182b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'sechost.dll' -> '\Device\HarddiskVolume2\Windows\System32\sechost.dll' [rcNtRedir=0xc0150008]
7192b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\sechost.dll [lacks WinVerifyTrust]
7202b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
7212b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
7222b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
7232b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
7242b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume2\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
7252b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\win32u.dll [lacks WinVerifyTrust]
7262b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
7272b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume2\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
7282b44.359c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
7292b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
7302b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
7312b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
7322b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
7332b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
7342b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
7352b44.359c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000a01:<flags> [calling]
7362b44.359c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll [lacks WinVerifyTrust]
7372b44.359c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
7382b44.359c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\UICommon.dll [lacks WinVerifyTrust]
7392b44.359c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
7402b44.359c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
7412b44.359c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
7422b44.359c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
7432b44.359c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
7442b44.359c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
7452b44.359c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll [lacks WinVerifyTrust]
7462b44.359c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winmm.dll [lacks WinVerifyTrust]
7472b44.359c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\glu32.dll [lacks WinVerifyTrust]
7482b44.359c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\mpr.dll [lacks WinVerifyTrust]
7492b44.359c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winmmbase.dll [lacks WinVerifyTrust]
7502b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
7512b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #22 'win32u.dll'.
7522b44.359c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\DXCore.dll)
7532b44.359c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\DXCore.dll
7542b44.359c: supR3HardenedDllNotificationCallback: load 00007ffd6b5a0000 LB 0x0009e000 C:\WINDOWS\System32\msvcrt.dll [fFlags=0x0]
7552b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
7562b44.359c: supR3HardenedDllNotificationCallback: load 00007ffd6a020000 LB 0x000a3000 C:\WINDOWS\System32\advapi32.dll [fFlags=0x0]
7572b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
7582b44.359c: supR3HardenedDllNotificationCallback: load 00007ffd697d0000 LB 0x00021000 C:\WINDOWS\System32\win32u.dll [fFlags=0x0]
7592b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\win32u.dll [lacks WinVerifyTrust]
7602b44.359c: supR3HardenedDllNotificationCallback: load 00007ffd68bb0000 LB 0x000fa000 C:\WINDOWS\System32\ucrtbase.dll [fFlags=0x0]
7612b44.359c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\ucrtbase.dll)
7622b44.359c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\ucrtbase.dll
7632b44.359c: supR3HardenedDllNotificationCallback: load 00007ffd68d80000 LB 0x0009e000 C:\WINDOWS\System32\msvcp_win.dll [fFlags=0x0]
7642b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust]
7652b44.359c: supR3HardenedDllNotificationCallback: load 00007ffd69b30000 LB 0x00194000 C:\WINDOWS\System32\gdi32full.dll [fFlags=0x0]
7662b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
7672b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #33 'gdi32.dll'.
7682b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'user32.dll'.
7692b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'win32u.dll'.
7702b44.359c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\gdi32full.dll)
7712b44.359c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\gdi32full.dll
7722b44.359c: supR3HardenedDllNotificationCallback: load 00007ffd6a230000 LB 0x00026000 C:\WINDOWS\System32\GDI32.dll [fFlags=0x0]
7732b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
7742b44.359c: supR3HardenedDllNotificationCallback: load 00007ffd6b700000 LB 0x00194000 C:\WINDOWS\System32\USER32.dll [fFlags=0x0]
7752b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
7762b44.359c: supR3HardenedDllNotificationCallback: load 00007ffd68cb0000 LB 0x00080000 C:\WINDOWS\System32\bcryptPrimitives.dll [fFlags=0x0]
7772b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust]
7782b44.359c: supR3HardenedDllNotificationCallback: load 00007ffd6b8a0000 LB 0x00336000 C:\WINDOWS\System32\combase.dll [fFlags=0x0]
7792b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\combase.dll [lacks WinVerifyTrust]
7802b44.359c: supR3HardenedDllNotificationCallback: load 00007ffd68d30000 LB 0x0004a000 C:\WINDOWS\System32\cfgmgr32.dll [fFlags=0x0]
7812b44.359c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll)
7822b44.359c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll
7832b44.359c: supR3HardenedDllNotificationCallback: load 00007ffd677d0000 LB 0x00020000 C:\WINDOWS\SYSTEM32\dxcore.dll [fFlags=0x0]
7842b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\DXCore.dll [lacks WinVerifyTrust]
7852b44.359c: supR3HardenedDllNotificationCallback: load 00007ffd5af20000 LB 0x0002c000 C:\WINDOWS\SYSTEM32\GLU32.dll [fFlags=0x0]
7862b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\glu32.dll [lacks WinVerifyTrust]
7872b44.359c: supR3HardenedDllNotificationCallback: load 00007ffd345f0000 LB 0x00156000 C:\WINDOWS\SYSTEM32\OPENGL32.dll [fFlags=0x0]
7882b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
7892b44.359c: supR3HardenedDllNotificationCallback: load 000000005b210000 LB 0x000d2000 C:\Program Files\Oracle\VirtualBox\MSVCR100.dll [fFlags=0x0]
7902b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
7912b44.359c: supR3HardenedDllNotificationCallback: load 000000005b170000 LB 0x00098000 C:\Program Files\Oracle\VirtualBox\MSVCP100.dll [fFlags=0x0]
7922b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
7932b44.359c: supR3HardenedDllNotificationCallback: load 00007ffd6b400000 LB 0x0006f000 C:\WINDOWS\System32\WS2_32.dll [fFlags=0x0]
7942b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ws2_32.dll [lacks WinVerifyTrust]
7952b44.359c: supR3HardenedDllNotificationCallback: load 00007ffd23aa0000 LB 0x005e9000 C:\Program Files\Oracle\VirtualBox\VBoxRT.dll [fFlags=0x0]
7962b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
7972b44.359c: supR3HardenedDllNotificationCallback: load 00007ffd6b650000 LB 0x000a9000 C:\WINDOWS\System32\shcore.dll [fFlags=0x0]
7982b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
7992b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'rpcrt4.dll'.
8002b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #43 'combase.dll'.
8012b44.359c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\SHCore.dll)
8022b44.359c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\SHCore.dll
8032b44.359c: supR3HardenedDllNotificationCallback: load 00007ffd68b00000 LB 0x0001f000 C:\WINDOWS\System32\profapi.dll [fFlags=0x0]
8042b44.359c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\profapi.dll)
8052b44.359c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\profapi.dll
8062b44.359c: supR3HardenedDllNotificationCallback: load 00007ffd68af0000 LB 0x00010000 C:\WINDOWS\System32\UMPDC.dll [fFlags=0x0]
8072b44.359c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\umpdc.dll)
8082b44.359c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\umpdc.dll
8092b44.359c: supR3HardenedDllNotificationCallback: load 00007ffd68b60000 LB 0x0004a000 C:\WINDOWS\System32\powrprof.dll [fFlags=0x0]
8102b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'rpcrt4.dll'.
8112b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #19 'umpdc.dll'.
8122b44.359c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\powrprof.dll)
8132b44.359c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\powrprof.dll
8142b44.359c: supR3HardenedDllNotificationCallback: load 00007ffd69f90000 LB 0x00052000 C:\WINDOWS\System32\shlwapi.dll [fFlags=0x0]
8152b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'.
8162b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #44 'gdi32.dll'.
8172b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #45 'user32.dll'.
8182b44.359c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\shlwapi.dll)
8192b44.359c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\shlwapi.dll
8202b44.359c: supR3HardenedDllNotificationCallback: load 00007ffd68b20000 LB 0x00011000 C:\WINDOWS\System32\kernel.appcore.dll [fFlags=0x0]
8212b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcrt.dll'.
8222b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'rpcrt4.dll'.
8232b44.359c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\kernel.appcore.dll)
8242b44.359c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\kernel.appcore.dll
8252b44.359c: supR3HardenedDllNotificationCallback: load 00007ffd68f70000 LB 0x0077f000 C:\WINDOWS\System32\windows.storage.dll [fFlags=0x0]
8262b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #31 'combase.dll'.
8272b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #32 'msvcp_win.dll'.
8282b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #39 'rpcrt4.dll'.
8292b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #56 'profapi.dll'.
8302b44.359c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\windows.storage.dll)
8312b44.359c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\windows.storage.dll
8322b44.359c: supR3HardenedDllNotificationCallback: load 00007ffd69ab0000 LB 0x00017000 C:\WINDOWS\System32\cryptsp.dll [fFlags=0x0]
8332b44.359c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\cryptsp.dll)
8342b44.359c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\cryptsp.dll
8352b44.359c: supR3HardenedDllNotificationCallback: load 00007ffd6aba0000 LB 0x006e5000 C:\WINDOWS\System32\SHELL32.dll [fFlags=0x0]
8362b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\shell32.dll [lacks WinVerifyTrust]
8372b44.359c: supR3HardenedDllNotificationCallback: load 00007ffd6a0d0000 LB 0x00156000 C:\WINDOWS\System32\ole32.dll [fFlags=0x0]
8382b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ole32.dll [lacks WinVerifyTrust]
8392b44.359c: supR3HardenedDllNotificationCallback: load 00007ffd504f0000 LB 0x0001b000 C:\WINDOWS\SYSTEM32\MPR.dll [fFlags=0x0]
8402b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\mpr.dll [lacks WinVerifyTrust]
8412b44.359c: supR3HardenedDllNotificationCallback: load 000000005a980000 LB 0x00565000 C:\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [fFlags=0x0]
8422b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
8432b44.359c: supR3HardenedDllNotificationCallback: load 00007ffd234a0000 LB 0x005f7000 C:\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [fFlags=0x0]
8442b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
8452b44.359c: supR3HardenedDllNotificationCallback: load 000000005a410000 LB 0x00561000 C:\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [fFlags=0x0]
8462b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
8472b44.359c: supR3HardenedDllNotificationCallback: load 00007ffd6b470000 LB 0x000c4000 C:\WINDOWS\System32\OLEAUT32.dll [fFlags=0x0]
8482b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
8492b44.359c: supR3HardenedDllNotificationCallback: load 00007ffd1fcc0000 LB 0x02609000 C:\Program Files\Oracle\VirtualBox\UICommon.dll [fFlags=0x0]
8502b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\UICommon.dll [lacks WinVerifyTrust]
8512b44.359c: supR3HardenedDllNotificationCallback: load 000000005b0e0000 LB 0x00054000 C:\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll [fFlags=0x0]
8522b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll [lacks WinVerifyTrust]
8532b44.359c: supR3HardenedDllNotificationCallback: load 00007ffd66b60000 LB 0x0002d000 C:\WINDOWS\SYSTEM32\WINMMBASE.dll [fFlags=0x0]
8542b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winmmbase.dll [lacks WinVerifyTrust]
8552b44.359c: supR3HardenedDllNotificationCallback: load 00007ffd66b90000 LB 0x00024000 C:\WINDOWS\SYSTEM32\WINMM.dll [fFlags=0x0]
8562b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winmm.dll [lacks WinVerifyTrust]
8572b44.359c: supR3HardenedDllNotificationCallback: load 00007ffd31e80000 LB 0x001c8000 C:\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll [fFlags=0x0]
8582b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll [lacks WinVerifyTrust]
8592b44.359c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
8602b44.359c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
8612b44.359c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd69800000 'api-ms-win-core-synch-l1-2-0'
8622b44.359c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
8632b44.359c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
8642b44.359c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd69800000 'api-ms-win-core-fibers-l1-1-1'
8652b44.359c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
8662b44.359c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
8672b44.359c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd69800000 'api-ms-win-core-fibers-l1-1-1'
8682b44.359c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
8692b44.359c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
8702b44.359c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd69800000 'api-ms-win-core-synch-l1-2-0'
8712b44.359c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-l1-2-1) -> 0x0, fPresent=1
8722b44.359c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-l1-2-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
8732b44.359c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd69800000 'api-ms-win-core-localization-l1-2-1'
8742b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
8752b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'profapi.dll'...
8762b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'profapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\profapi.dll' [rcNtRedir=0xc0150008]
8772b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\profapi.dll [lacks WinVerifyTrust]
8782b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
8792b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
8802b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
8812b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
8822b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
8832b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust]
8842b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
8852b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume2\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
8862b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\combase.dll [lacks WinVerifyTrust]
8872b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
8882b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
8892b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
8902b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
8912b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
8922b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
8932b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
8942b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
8952b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
8962b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
8972b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
8982b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
8992b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
9002b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
9012b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
9022b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'umpdc.dll'...
9032b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'umpdc.dll' -> '\Device\HarddiskVolume2\Windows\System32\umpdc.dll' [rcNtRedir=0xc0150008]
9042b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\umpdc.dll [lacks WinVerifyTrust]
9052b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
9062b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
9072b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
9082b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
9092b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume2\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
9102b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\combase.dll [lacks WinVerifyTrust]
9112b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
9122b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
9132b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
9142b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
9152b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
9162b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
9172b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
9182b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume2\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
9192b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\win32u.dll [lacks WinVerifyTrust]
9202b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
9212b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
9222b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
9232b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
9242b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
9252b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
9262b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
9272b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
9282b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust]
9292b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
9302b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume2\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
9312b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\win32u.dll [lacks WinVerifyTrust]
9322b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
9332b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
9342b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust]
9352b44.359c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\kernel32.dll (Input=kernel32, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
9362b44.359c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd6b290000 'C:\WINDOWS\System32\kernel32.dll'
9372b44.359c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-string-l1-1-0) -> 0x0, fPresent=1
9382b44.359c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-string-l1-1-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
9392b44.359c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd69800000 'api-ms-win-core-string-l1-1-0'
9402b44.359c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-datetime-l1-1-1) -> 0x0, fPresent=1
9412b44.359c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-datetime-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
9422b44.359c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd69800000 'api-ms-win-core-datetime-l1-1-1'
9432b44.359c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-obsolete-l1-2-0) -> 0x0, fPresent=1
9442b44.359c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-obsolete-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
9452b44.359c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd69800000 'api-ms-win-core-localization-obsolete-l1-2-0'
9462b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'user32.dll'.
9472b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #25 'win32u.dll'.
9482b44.359c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\imm32.dll)
9492b44.359c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\imm32.dll
9502b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
9512b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume2\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
9522b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\win32u.dll [lacks WinVerifyTrust]
9532b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
9542b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
9552b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
9562b44.359c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\IMM32.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
9572b44.359c: supR3HardenedDllNotificationCallback: load 00007ffd69ff0000 LB 0x0002e000 C:\WINDOWS\System32\IMM32.DLL [fFlags=0x0]
9582b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\imm32.dll [lacks WinVerifyTrust]
9592b44.359c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd69ff0000 'C:\WINDOWS\system32\IMM32.DLL'
9602b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
9612b44.359c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
9622b44.359c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd23aa0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9632b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
9642b44.359c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
9652b44.359c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd23aa0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9662b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
9672b44.359c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
9682b44.359c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd23aa0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9692b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
9702b44.359c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
9712b44.359c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd23aa0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9722b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
9732b44.359c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
9742b44.359c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd23aa0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9752b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
9762b44.359c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd23aa0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9772b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
9782b44.359c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd23aa0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9792b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
9802b44.359c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd23aa0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9812b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
9822b44.359c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd23aa0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9832b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
9842b44.359c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd23aa0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9852b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
9862b44.359c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd23aa0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9872b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
9882b44.359c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd23aa0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9892b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
9902b44.359c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
9912b44.359c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd23aa0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9922b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
9932b44.359c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd23aa0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9942b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
9952b44.359c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd23aa0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9962b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
9972b44.359c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd23aa0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9982b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
9992b44.359c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd23aa0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10002b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
10012b44.359c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd23aa0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10022b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
10032b44.359c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd23aa0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10042b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
10052b44.359c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd23aa0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10062b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
10072b44.359c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd23aa0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10082b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
10092b44.359c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd23aa0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10102b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
10112b44.359c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd23aa0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10122b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
10132b44.359c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd23aa0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10142b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
10152b44.359c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd23aa0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10162b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
10172b44.359c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd23aa0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10182b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
10192b44.359c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd23aa0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10202b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
10212b44.359c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd23aa0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10222b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
10232b44.359c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
10242b44.359c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd23aa0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10252b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
10262b44.359c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd23aa0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10272b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
10282b44.359c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd23aa0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10292b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
10302b44.359c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd23aa0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10312b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
10322b44.359c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\ADVAPI32.DLL (Input=ADVAPI32.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
10332b44.359c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd6a020000 'C:\WINDOWS\System32\ADVAPI32.DLL'
10342b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'bcryptprimitives.dll'.
10352b44.359c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\cryptbase.dll)
10362b44.359c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\cryptbase.dll
10372b44.359c: supR3HardenedDllNotificationCallback: load 00007ffd684d0000 LB 0x0000c000 C:\WINDOWS\SYSTEM32\CRYPTBASE.DLL [fFlags=0x0]
10382b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\cryptbase.dll [lacks WinVerifyTrust]
10392b44.359c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd31e80000 'C:\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll'
10402b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
10412b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'...
10422b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume2\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008]
10432b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust]
10442b44.359c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\kernel32.dll (Input=kernel32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
10452b44.359c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd6b290000 'C:\WINDOWS\System32\kernel32.dll'
10462b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
10472b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'ole32.dll'.
10482b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
10492b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'imm32.dll'.
10502b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'winmm.dll'.
10512b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'oleaut32.dll'.
10522b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'shell32.dll'.
10532b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'advapi32.dll'.
10542b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'qt5guivbox.dll'.
10552b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'qt5corevbox.dll'.
10562b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'msvcr100.dll'.
10572b44.359c: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\platforms\qwindows.dll)
10582b44.359c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\platforms\qwindows.dll
10592b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
10602b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
10612b44.359c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
10622b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
10632b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
10642b44.359c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
10652b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
10662b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
10672b44.359c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
10682b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
10692b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
10702b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
10712b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
10722b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume2\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
10732b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\shell32.dll [lacks WinVerifyTrust]
10742b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
10752b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume2\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
10762b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
10772b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
10782b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume2\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
10792b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winmm.dll [lacks WinVerifyTrust]
10802b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'...
10812b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume2\Windows\System32\imm32.dll' [rcNtRedir=0xc0150008]
10822b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\imm32.dll [lacks WinVerifyTrust]
10832b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
10842b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
10852b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
10862b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
10872b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
10882b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ole32.dll [lacks WinVerifyTrust]
10892b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
10902b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
10912b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
10922b44.359c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
10932b44.359c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\platforms\qwindows.dll [lacks WinVerifyTrust]
10942b44.359c: supR3HardenedDllNotificationCallback: load 00007ffd57a60000 LB 0x0012e000 C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll [fFlags=0x0]
10952b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\platforms\qwindows.dll [lacks WinVerifyTrust]
10962b44.359c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd57a60000 'C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll'
10972b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
10982b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #33 'gdi32.dll'.
10992b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'user32.dll'.
11002b44.359c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\uxtheme.dll)
11012b44.359c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\uxtheme.dll
11022b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
11032b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
11042b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
11052b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
11062b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
11072b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
11082b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
11092b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
11102b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
11112b44.359c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
11122b44.359c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\uxtheme.dll [lacks WinVerifyTrust]
11132b44.359c: supR3HardenedDllNotificationCallback: load 00007ffd66e70000 LB 0x00099000 C:\WINDOWS\system32\uxtheme.dll [fFlags=0x0]
11142b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\uxtheme.dll [lacks WinVerifyTrust]
11152b44.359c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd66e70000 'C:\WINDOWS\system32\uxtheme.dll'
11162b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
11172b44.359c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd6b700000 'C:\WINDOWS\system32\user32.dll'
11182b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\shell32.dll [lacks WinVerifyTrust]
11192b44.359c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
11202b44.359c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd6aba0000 'C:\WINDOWS\system32\shell32.dll'
11212b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\SHCore.dll [lacks WinVerifyTrust]
11222b44.359c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\SHCore.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
11232b44.359c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd6b650000 'C:\WINDOWS\system32\SHCore.dll'
11242b44.359c: supR3HardenedMonitor_LdrLoadDll: error opening 'C:\WINDOWS\system32\wintab32.dll': 0 (NtPath=\??\C:\WINDOWS\system32\wintab32.dll; Input=C:\WINDOWS\system32\wintab32.dll; rcNtGetDll=0x0
11252b44.359c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000034 'C:\WINDOWS\system32\wintab32.dll'
11262b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winmm.dll [lacks WinVerifyTrust]
11272b44.359c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\winmm.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
11282b44.359c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd66b90000 'C:\WINDOWS\system32\winmm.dll'
11292b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winmm.dll [lacks WinVerifyTrust]
11302b44.359c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\winmm.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
11312b44.359c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd66b90000 'C:\WINDOWS\system32\winmm.dll'
11322b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\shell32.dll [lacks WinVerifyTrust]
11332b44.359c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
11342b44.359c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd6aba0000 'C:\WINDOWS\system32\shell32.dll'
11352b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\uxtheme.dll [lacks WinVerifyTrust]
11362b44.359c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
11372b44.359c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd66e70000 'C:\WINDOWS\system32\uxtheme.dll'
11382b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
11392b44.359c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd6a230000 'C:\WINDOWS\system32\gdi32.dll'
11402b44.359c: supR3HardenedDllNotificationCallback: load 00007ffd6a760000 LB 0x00135000 C:\WINDOWS\System32\MSCTF.dll [fFlags=0x0]
11412b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
11422b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'oleaut32.dll'.
11432b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #38 'user32.dll'.
11442b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #39 'gdi32.dll'.
11452b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #40 'imm32.dll'.
11462b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #41 'advapi32.dll'.
11472b44.359c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\msctf.dll)
11482b44.359c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\msctf.dll
11492b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
11502b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
11512b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
11522b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
11532b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'...
11542b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume2\Windows\System32\imm32.dll' [rcNtRedir=0xc0150008]
11552b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\imm32.dll [lacks WinVerifyTrust]
11562b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
11572b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
11582b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
11592b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
11602b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
11612b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
11622b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
11632b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume2\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
11642b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
11652b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
11662b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
11672b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
11682b44.359c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd6a9f0000 'C:\WINDOWS\System32\rpcrt4.dll'
11692b44.359c: supR3HardenedDllNotificationCallback: load 00007ffd6b350000 LB 0x000a2000 C:\WINDOWS\System32\clbcatq.dll [fFlags=0x0]
11702b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
11712b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #30 'rpcrt4.dll'.
11722b44.359c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\clbcatq.dll)
11732b44.359c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\clbcatq.dll
11742b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
11752b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'shcore.dll'.
11762b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #29 'combase.dll'.
11772b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'd3d11.dll'.
11782b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'dcomp.dll'.
11792b44.359c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\DataExchange.dll)
11802b44.359c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\DataExchange.dll
11812b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dcomp.dll'...
11822b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'dcomp.dll' -> '\Device\HarddiskVolume2\Windows\System32\dcomp.dll' [rcNtRedir=0xc0150008]
11832b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'win32u.dll'.
11842b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp_win.dll'.
11852b44.359c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\dcomp.dll)
11862b44.359c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\dcomp.dll
11872b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'd3d11.dll'...
11882b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'd3d11.dll' -> '\Device\HarddiskVolume2\Windows\System32\d3d11.dll' [rcNtRedir=0xc0150008]
11892b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
11902b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #24 'dxgi.dll'.
11912b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27 'win32u.dll'.
11922b44.359c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\d3d11.dll)
11932b44.359c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\d3d11.dll
11942b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
11952b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume2\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
11962b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\combase.dll [lacks WinVerifyTrust]
11972b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shcore.dll'...
11982b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'shcore.dll' -> '\Device\HarddiskVolume2\Windows\System32\shcore.dll' [rcNtRedir=0xc0150008]
11992b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\SHCore.dll [lacks WinVerifyTrust]
12002b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
12012b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
12022b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
12032b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
12042b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
12052b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
12062b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
12072b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
12082b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
12092b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
12102b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume2\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
12112b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\win32u.dll [lacks WinVerifyTrust]
12122b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dxgi.dll'...
12132b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'dxgi.dll' -> '\Device\HarddiskVolume2\Windows\System32\dxgi.dll' [rcNtRedir=0xc0150008]
12142b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
12152b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'win32u.dll'.
12162b44.359c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\dxgi.dll)
12172b44.359c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\dxgi.dll
12182b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
12192b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
12202b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
12212b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
12222b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
12232b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust]
12242b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
12252b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume2\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
12262b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\win32u.dll [lacks WinVerifyTrust]
12272b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
12282b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume2\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
12292b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\win32u.dll [lacks WinVerifyTrust]
12302b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
12312b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
12322b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
12332b44.359c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\dataexchange.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
12342b44.359c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\DataExchange.dll [lacks WinVerifyTrust]
12352b44.359c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\d3d11.dll [lacks WinVerifyTrust]
12362b44.359c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\dcomp.dll [lacks WinVerifyTrust]
12372b44.359c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\dxgi.dll [lacks WinVerifyTrust]
12382b44.359c: supR3HardenedDllNotificationCallback: load 00007ffd677f0000 LB 0x000eb000 C:\WINDOWS\system32\dxgi.dll [fFlags=0x0]
12392b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\dxgi.dll [lacks WinVerifyTrust]
12402b44.359c: supR3HardenedDllNotificationCallback: load 00007ffd661a0000 LB 0x0025b000 C:\WINDOWS\system32\d3d11.dll [fFlags=0x0]
12412b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\d3d11.dll [lacks WinVerifyTrust]
12422b44.359c: supR3HardenedDllNotificationCallback: load 00007ffd66400000 LB 0x001db000 C:\WINDOWS\system32\dcomp.dll [fFlags=0x0]
12432b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\dcomp.dll [lacks WinVerifyTrust]
12442b44.359c: supR3HardenedDllNotificationCallback: load 00007ffd4bfb0000 LB 0x0003a000 C:\WINDOWS\system32\dataexchange.dll [fFlags=0x0]
12452b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\DataExchange.dll [lacks WinVerifyTrust]
12462b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
12472b44.359c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd6a230000 'C:\WINDOWS\System32\gdi32.dll'
12482b44.359c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd4bfb0000 'C:\WINDOWS\system32\dataexchange.dll'
12492b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rmclient.dll'.
12502b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #31 'rpcrt4.dll'.
12512b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #47 'combase.dll'.
12522b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #50 'msvcp_win.dll'.
12532b44.359c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\twinapi.appcore.dll)
12542b44.359c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\twinapi.appcore.dll
12552b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
12562b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'rpcrt4.dll'.
12572b44.359c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\rmclient.dll)
12582b44.359c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\rmclient.dll
12592b44.359c: supR3HardenedDllNotificationCallback: load 00007ffd67290000 LB 0x00029000 C:\WINDOWS\system32\RMCLIENT.dll [fFlags=0x0]
12602b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rmclient.dll [lacks WinVerifyTrust]
12612b44.359c: supR3HardenedDllNotificationCallback: load 00007ffd66f40000 LB 0x0025a000 C:\WINDOWS\system32\twinapi.appcore.dll [fFlags=0x0]
12622b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\twinapi.appcore.dll [lacks WinVerifyTrust]
12632b44.35c8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
12642b44.35c8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #16 'rpcrt4.dll'.
12652b44.35c8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #28 'devobj.dll'.
12662b44.35c8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\MMDevAPI.dll)
12672b44.35c8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\MMDevAPI.dll
12682b44.35c8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'cfgmgr32.dll'.
12692b44.35c8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\devobj.dll)
12702b44.35c8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\devobj.dll
12712b44.35c8: supR3HardenedDllNotificationCallback: load 00007ffd688f0000 LB 0x0002a000 C:\WINDOWS\SYSTEM32\DEVOBJ.dll [fFlags=0x0]
12722b44.35c8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\devobj.dll [lacks WinVerifyTrust]
12732b44.35c8: supR3HardenedDllNotificationCallback: load 00007ffd64c10000 LB 0x00072000 C:\WINDOWS\SYSTEM32\MMDevAPI.DLL [fFlags=0x0]
12742b44.35c8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
12752b44.35c8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
12762b44.35c8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'mmdevapi.dll'.
12772b44.35c8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27 'ksuser.dll'.
12782b44.35c8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #28 'avrt.dll'.
12792b44.35c8: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\wdmaud.drv)
12802b44.35c8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\wdmaud.drv
12812b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'avrt.dll'...
12822b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: 'avrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\avrt.dll' [rcNtRedir=0xc0150008]
12832b44.35c8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\avrt.dll)
12842b44.35c8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\avrt.dll
12852b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ksuser.dll'...
12862b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: 'ksuser.dll' -> '\Device\HarddiskVolume2\Windows\System32\ksuser.dll' [rcNtRedir=0xc0150008]
12872b44.35c8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
12882b44.35c8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\ksuser.dll)
12892b44.35c8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\ksuser.dll
12902b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mmdevapi.dll'...
12912b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: 'mmdevapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\mmdevapi.dll' [rcNtRedir=0xc0150008]
12922b44.35c8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
12932b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
12942b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
12952b44.35c8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
12962b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'cfgmgr32.dll'...
12972b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: 'cfgmgr32.dll' -> '\Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll' [rcNtRedir=0xc0150008]
12982b44.35c8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll [lacks WinVerifyTrust]
12992b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'devobj.dll'...
13002b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: 'devobj.dll' -> '\Device\HarddiskVolume2\Windows\System32\devobj.dll' [rcNtRedir=0xc0150008]
13012b44.35c8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\devobj.dll [lacks WinVerifyTrust]
13022b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
13032b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
13042b44.35c8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
13052b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
13062b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
13072b44.35c8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust]
13082b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
13092b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
13102b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
13112b44.35c8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
13122b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #15 'rpcrt4.dll'.
13132b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #19 'coreuicomponents.dll'.
13142b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #20 'coremessaging.dll'.
13152b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
13162b44.359c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\TextInputFramework.dll)
13172b44.359c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\TextInputFramework.dll
13182b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
13192b44.35c8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
13202b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
13212b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
13222b44.35c8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust]
13232b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
13242b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume2\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
13252b44.35c8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\combase.dll [lacks WinVerifyTrust]
13262b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
13272b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
13282b44.35c8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
13292b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rmclient.dll'...
13302b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rmclient.dll' -> '\Device\HarddiskVolume2\Windows\System32\rmclient.dll' [rcNtRedir=0xc0150008]
13312b44.35c8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rmclient.dll [lacks WinVerifyTrust]
13322b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coremessaging.dll'...
13332b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: 'coremessaging.dll' -> '\Device\HarddiskVolume2\Windows\System32\coremessaging.dll' [rcNtRedir=0xc0150008]
13342b44.35c8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
13352b44.35c8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\CoreMessaging.dll)
13362b44.35c8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\CoreMessaging.dll
13372b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coreuicomponents.dll'...
13382b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: 'coreuicomponents.dll' -> '\Device\HarddiskVolume2\Windows\System32\coreuicomponents.dll' [rcNtRedir=0xc0150008]
13392b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
13402b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'coremessaging.dll'.
13412b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #47 'shcore.dll'.
13422b44.359c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\CoreUIComponents.dll)
13432b44.359c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\CoreUIComponents.dll
13442b44.359c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\CoreMessaging.dll [lacks WinVerifyTrust]
13452b44.359c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\ntmarta.dll)
13462b44.359c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\ntmarta.dll
13472b44.35c8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
13482b44.35c8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'coremessaging.dll'.
13492b44.35c8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #47 'shcore.dll'.
13502b44.35c8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\CoreUIComponents.dll)
13512b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
13522b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
13532b44.35c8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
13542b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
13552b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
13562b44.35c8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
13572b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
13582b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
13592b44.35c8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
13602b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shcore.dll'...
13612b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: 'shcore.dll' -> '\Device\HarddiskVolume2\Windows\System32\shcore.dll' [rcNtRedir=0xc0150008]
13622b44.35c8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\SHCore.dll [lacks WinVerifyTrust]
13632b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coremessaging.dll'...
13642b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: 'coremessaging.dll' -> '\Device\HarddiskVolume2\Windows\System32\coremessaging.dll' [rcNtRedir=0xc0150008]
13652b44.35c8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\CoreMessaging.dll [lacks WinVerifyTrust]
13662b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
13672b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
13682b44.35c8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
13692b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shcore.dll'...
13702b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: 'shcore.dll' -> '\Device\HarddiskVolume2\Windows\System32\shcore.dll' [rcNtRedir=0xc0150008]
13712b44.35c8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\SHCore.dll [lacks WinVerifyTrust]
13722b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coremessaging.dll'...
13732b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: 'coremessaging.dll' -> '\Device\HarddiskVolume2\Windows\System32\coremessaging.dll' [rcNtRedir=0xc0150008]
13742b44.35c8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\CoreMessaging.dll [lacks WinVerifyTrust]
13752b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
13762b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
13772b44.35c8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
13782b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
13792b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
13802b44.35c8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
13812b44.35c8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
13822b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'combase.dll'.
13832b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #24 'rpcrt4.dll'.
13842b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #32 'bcryptprimitives.dll'.
13852b44.359c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\WinTypes.dll)
13862b44.359c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\WinTypes.dll
13872b44.359c: supR3HardenedDllNotificationCallback: load 00007ffd67b50000 LB 0x00031000 C:\WINDOWS\SYSTEM32\ntmarta.dll [fFlags=0x0]
13882b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ntmarta.dll [lacks WinVerifyTrust]
13892b44.359c: supR3HardenedDllNotificationCallback: load 00007ffd66950000 LB 0x000d4000 C:\WINDOWS\System32\CoreMessaging.dll [fFlags=0x0]
13902b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\CoreMessaging.dll [lacks WinVerifyTrust]
13912b44.359c: supR3HardenedDllNotificationCallback: load 00007ffd64ee0000 LB 0x00153000 C:\WINDOWS\SYSTEM32\wintypes.dll [fFlags=0x0]
13922b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\WinTypes.dll [lacks WinVerifyTrust]
13932b44.359c: supR3HardenedDllNotificationCallback: load 00007ffd637a0000 LB 0x0032a000 C:\WINDOWS\System32\CoreUIComponents.dll [fFlags=0x0]
13942b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\CoreUIComponents.dll [lacks WinVerifyTrust]
13952b44.359c: supR3HardenedDllNotificationCallback: load 00007ffd611a0000 LB 0x0009e000 C:\WINDOWS\System32\TextInputFramework.dll [fFlags=0x0]
13962b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\TextInputFramework.dll [lacks WinVerifyTrust]
13972b44.35c8: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
13982b44.359c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(ext-ms-win-rtcore-ntuser-window-ext-l1-1-0.dll) -> 0x0, fPresent=1
13992b44.359c: supR3HardenedMonitor_LdrLoadDll: pName=ext-ms-win-rtcore-ntuser-window-ext-l1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
14002b44.359c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd6b700000 'ext-ms-win-rtcore-ntuser-window-ext-l1-1-0.dll'
14012b44.359c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(ext-ms-win-rtcore-ntuser-integration-l1-1-0.dll) -> 0x0, fPresent=1
14022b44.359c: supR3HardenedMonitor_LdrLoadDll: pName=ext-ms-win-rtcore-ntuser-integration-l1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
14032b44.359c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd6b700000 'ext-ms-win-rtcore-ntuser-integration-l1-1-0.dll'
14042b44.359c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-com-l1-1-0.dll) -> 0x0, fPresent=1
14052b44.359c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-com-l1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
14062b44.359c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd6b8a0000 'api-ms-win-core-com-l1-1-0.dll'
14072b44.35c8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ksuser.dll [lacks WinVerifyTrust]
14082b44.35c8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\avrt.dll [lacks WinVerifyTrust]
14092b44.35c8: supR3HardenedDllNotificationCallback: load 00007ffd5a460000 LB 0x00009000 C:\WINDOWS\SYSTEM32\ksuser.dll [fFlags=0x0]
14102b44.35c8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ksuser.dll [lacks WinVerifyTrust]
14112b44.35c8: supR3HardenedDllNotificationCallback: load 00007ffd63e90000 LB 0x0000a000 C:\WINDOWS\SYSTEM32\AVRT.dll [fFlags=0x0]
14122b44.35c8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\avrt.dll [lacks WinVerifyTrust]
14132b44.35c8: supR3HardenedDllNotificationCallback: load 00007ffd3cf10000 LB 0x00044000 C:\WINDOWS\System32\wdmaud.drv [fFlags=0x0]
14142b44.35c8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
14152b44.35c8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd3cf10000 'C:\WINDOWS\System32\wdmaud.drv'
14162b44.35c8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
14172b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'...
14182b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume2\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008]
14192b44.35c8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust]
14202b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
14212b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
14222b44.35c8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
14232b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
14242b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume2\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
14252b44.35c8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\combase.dll [lacks WinVerifyTrust]
14262b44.35c8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
14272b44.35c8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd3cf10000 'C:\WINDOWS\System32\wdmaud.drv'
14282b44.35c8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
14292b44.35c8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\MMDEVAPI.DLL (Input=MMDEVAPI.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
14302b44.35c8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd64c10000 'C:\WINDOWS\System32\MMDEVAPI.DLL'
14312b44.35c8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
14322b44.35c8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
14332b44.35c8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd3cf10000 'C:\WINDOWS\System32\wdmaud.drv'
14342b44.35c8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
14352b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
14362b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
14372b44.359c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\iertutil.dll)
14382b44.359c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\iertutil.dll
14392b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
14402b44.35c8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
14412b44.35c8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
14422b44.35c8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd3cf10000 'C:\WINDOWS\System32\wdmaud.drv'
14432b44.359c: supR3HardenedDllNotificationCallback: load 00007ffd5de80000 LB 0x002a6000 C:\WINDOWS\System32\iertutil.dll [fFlags=0x0]
14442b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\iertutil.dll [lacks WinVerifyTrust]
14452b44.35c8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
14462b44.35c8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
14472b44.35c8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd3cf10000 'C:\WINDOWS\System32\wdmaud.drv'
14482b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msctf.dll [lacks WinVerifyTrust]
14492b44.359c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\MSCTF.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
14502b44.359c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd6a760000 'C:\WINDOWS\System32\MSCTF.dll'
14512b44.35c8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
14522b44.35c8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'rpcrt4.dll'.
14532b44.35c8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'oleaut32.dll'.
14542b44.35c8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #29 'mmdevapi.dll'.
14552b44.35c8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\AudioSes.dll)
14562b44.35c8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\AudioSes.dll
14572b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mmdevapi.dll'...
14582b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: 'mmdevapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\mmdevapi.dll' [rcNtRedir=0xc0150008]
14592b44.35c8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
14602b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
14612b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume2\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
14622b44.35c8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
14632b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
14642b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
14652b44.35c8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
14662b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
14672b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
14682b44.35c8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust]
14692b44.35c8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\AUDIOSES.DLL (Input=AUDIOSES.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
14702b44.35c8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\AudioSes.dll [lacks WinVerifyTrust]
14712b44.35c8: supR3HardenedDllNotificationCallback: load 00007ffd64c90000 LB 0x0015d000 C:\WINDOWS\System32\AUDIOSES.DLL [fFlags=0x0]
14722b44.35c8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\AudioSes.dll [lacks WinVerifyTrust]
14732b44.35c8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd64c90000 'C:\WINDOWS\System32\AUDIOSES.DLL'
14742b44.35c8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
14752b44.35c8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
14762b44.35c8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd3cf10000 'C:\WINDOWS\System32\wdmaud.drv'
14772b44.35c8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
14782b44.35c8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
14792b44.35c8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd3cf10000 'C:\WINDOWS\System32\wdmaud.drv'
14802b44.35c8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
14812b44.35c8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd3cf10000 'C:\WINDOWS\System32\wdmaud.drv'
14822b44.35c8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
14832b44.35c8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd3cf10000 'C:\WINDOWS\System32\wdmaud.drv'
14842b44.35c8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
14852b44.35c8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd3cf10000 'C:\WINDOWS\System32\wdmaud.drv'
14862b44.35c8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
14872b44.35c8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd3cf10000 'C:\WINDOWS\System32\wdmaud.drv'
14882b44.35c8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
14892b44.35c8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd3cf10000 'C:\WINDOWS\System32\wdmaud.drv'
14902b44.35c8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
14912b44.35c8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd3cf10000 'C:\WINDOWS\System32\wdmaud.drv'
14922b44.35c8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
14932b44.35c8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd3cf10000 'C:\WINDOWS\System32\wdmaud.drv'
14942b44.35c8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
14952b44.35c8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'mmdevapi.dll'.
14962b44.35c8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'msacm32.dll'.
14972b44.35c8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'winmmbase.dll'.
14982b44.35c8: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\msacm32.drv)
14992b44.35c8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\msacm32.drv
15002b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmmbase.dll'...
15012b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmmbase.dll' -> '\Device\HarddiskVolume2\Windows\System32\winmmbase.dll' [rcNtRedir=0xc0150008]
15022b44.35c8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winmmbase.dll [lacks WinVerifyTrust]
15032b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msacm32.dll'...
15042b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msacm32.dll' -> '\Device\HarddiskVolume2\Windows\System32\msacm32.dll' [rcNtRedir=0xc0150008]
15052b44.35c8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
15062b44.35c8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\msacm32.dll)
15072b44.35c8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\msacm32.dll
15082b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mmdevapi.dll'...
15092b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: 'mmdevapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\mmdevapi.dll' [rcNtRedir=0xc0150008]
15102b44.35c8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
15112b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
15122b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
15132b44.35c8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
15142b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
15152b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
15162b44.35c8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
15172b44.35c8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
15182b44.35c8: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
15192b44.35c8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msacm32.dll [lacks WinVerifyTrust]
15202b44.35c8: supR3HardenedDllNotificationCallback: load 00007ffd4adf0000 LB 0x0001c000 C:\WINDOWS\SYSTEM32\MSACM32.dll [fFlags=0x0]
15212b44.35c8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msacm32.dll [lacks WinVerifyTrust]
15222b44.35c8: supR3HardenedDllNotificationCallback: load 00007ffd4d580000 LB 0x0000d000 C:\WINDOWS\System32\msacm32.drv [fFlags=0x0]
15232b44.35c8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
15242b44.35c8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd4d580000 'C:\WINDOWS\System32\msacm32.drv'
15252b44.35c8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
15262b44.35c8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
15272b44.35c8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd4d580000 'C:\WINDOWS\System32\msacm32.drv'
15282b44.35c8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
15292b44.35c8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
15302b44.35c8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd4d580000 'C:\WINDOWS\System32\msacm32.drv'
15312b44.35c8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
15322b44.35c8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
15332b44.35c8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd4d580000 'C:\WINDOWS\System32\msacm32.drv'
15342b44.35c8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
15352b44.35c8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
15362b44.35c8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd4d580000 'C:\WINDOWS\System32\msacm32.drv'
15372b44.35c8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
15382b44.35c8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
15392b44.35c8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd4d580000 'C:\WINDOWS\System32\msacm32.drv'
15402b44.35c8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
15412b44.35c8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
15422b44.35c8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd4d580000 'C:\WINDOWS\System32\msacm32.drv'
15432b44.35c8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
15442b44.35c8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd4d580000 'C:\WINDOWS\System32\msacm32.drv'
15452b44.35c8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
15462b44.35c8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd4d580000 'C:\WINDOWS\System32\msacm32.drv'
15472b44.35c8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
15482b44.35c8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd4d580000 'C:\WINDOWS\System32\msacm32.drv'
15492b44.35c8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
15502b44.35c8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'winmm.dll'.
15512b44.35c8: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\midimap.dll)
15522b44.35c8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\midimap.dll
15532b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
15542b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume2\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
15552b44.35c8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winmm.dll [lacks WinVerifyTrust]
15562b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
15572b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
15582b44.35c8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
15592b44.35c8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
15602b44.35c8: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\midimap.dll [lacks WinVerifyTrust]
15612b44.35c8: supR3HardenedDllNotificationCallback: load 00007ffd4bf40000 LB 0x0000a000 C:\WINDOWS\System32\midimap.dll [fFlags=0x0]
15622b44.35c8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\midimap.dll [lacks WinVerifyTrust]
15632b44.35c8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd4bf40000 'C:\WINDOWS\System32\midimap.dll'
15642b44.35c8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\midimap.dll [lacks WinVerifyTrust]
15652b44.35c8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
15662b44.35c8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd4bf40000 'C:\WINDOWS\System32\midimap.dll'
15672b44.35c8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\midimap.dll [lacks WinVerifyTrust]
15682b44.35c8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
15692b44.35c8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd4bf40000 'C:\WINDOWS\System32\midimap.dll'
15702b44.35c8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\midimap.dll [lacks WinVerifyTrust]
15712b44.35c8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
15722b44.35c8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd4bf40000 'C:\WINDOWS\System32\midimap.dll'
15732b44.35c8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
15742b44.35c8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\MMDevApi.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
15752b44.35c8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd64c10000 'C:\WINDOWS\System32\MMDevApi.dll'
15762b44.35c8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
15772b44.35c8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\imaadp32.acm)
15782b44.35c8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\imaadp32.acm
15792b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
15802b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
15812b44.35c8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
15822b44.35c8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\imaadp32.acm (Input=imaadp32.acm, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
15832b44.35c8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\imaadp32.acm [lacks WinVerifyTrust]
15842b44.35c8: supR3HardenedDllNotificationCallback: load 00007ffd5cbf0000 LB 0x0000c000 C:\WINDOWS\System32\imaadp32.acm [fFlags=0x0]
15852b44.35c8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\imaadp32.acm [lacks WinVerifyTrust]
15862b44.35c8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd5cbf0000 'C:\WINDOWS\System32\imaadp32.acm'
15872b44.35c8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
15882b44.35c8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\msadp32.acm)
15892b44.35c8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\msadp32.acm
15902b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
15912b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
15922b44.35c8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
15932b44.35c8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msadp32.acm (Input=msadp32.acm, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
15942b44.35c8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msadp32.acm [lacks WinVerifyTrust]
15952b44.35c8: supR3HardenedDllNotificationCallback: load 00007ffd5cbe0000 LB 0x0000b000 C:\WINDOWS\System32\msadp32.acm [fFlags=0x0]
15962b44.35c8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msadp32.acm [lacks WinVerifyTrust]
15972b44.35c8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd5cbe0000 'C:\WINDOWS\System32\msadp32.acm'
15982b44.35c8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
15992b44.35c8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\msg711.acm)
16002b44.35c8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\msg711.acm
16012b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
16022b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
16032b44.35c8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
16042b44.35c8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msg711.acm (Input=msg711.acm, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
16052b44.35c8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msg711.acm [lacks WinVerifyTrust]
16062b44.35c8: supR3HardenedDllNotificationCallback: load 00007ffd5cbd0000 LB 0x00009000 C:\WINDOWS\System32\msg711.acm [fFlags=0x0]
16072b44.35c8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msg711.acm [lacks WinVerifyTrust]
16082b44.35c8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd5cbd0000 'C:\WINDOWS\System32\msg711.acm'
16092b44.35c8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
16102b44.35c8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\msgsm32.acm)
16112b44.35c8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\msgsm32.acm
16122b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
16132b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
16142b44.35c8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
16152b44.35c8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msgsm32.acm (Input=msgsm32.acm, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
16162b44.35c8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msgsm32.acm [lacks WinVerifyTrust]
16172b44.35c8: supR3HardenedDllNotificationCallback: load 00007ffd5cbc0000 LB 0x0000e000 C:\WINDOWS\System32\msgsm32.acm [fFlags=0x0]
16182b44.35c8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msgsm32.acm [lacks WinVerifyTrust]
16192b44.35c8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd5cbc0000 'C:\WINDOWS\System32\msgsm32.acm'
16202b44.35c8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
16212b44.35c8: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\l3codeca.acm)
16222b44.35c8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\l3codeca.acm
16232b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
16242b44.35c8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
16252b44.35c8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
16262b44.35c8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\l3codeca.acm (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
16272b44.35c8: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\l3codeca.acm [lacks WinVerifyTrust]
16282b44.35c8: supR3HardenedDllNotificationCallback: load 00007ffd5cba0000 LB 0x0001b000 C:\Windows\System32\l3codeca.acm [fFlags=0x0]
16292b44.35c8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\l3codeca.acm [lacks WinVerifyTrust]
16302b44.35c8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd5cba0000 'C:\Windows\System32\l3codeca.acm'
16312b44.35c8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\l3codeca.acm [lacks WinVerifyTrust]
16322b44.35c8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\l3codeca.acm (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
16332b44.35c8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd5cba0000 'C:\Windows\System32\l3codeca.acm'
16342b44.359c: \Device\HarddiskVolume2\Program Files (x86)\Samsung\Easy Printer Manager\SmartScreenPrint\CDAKEYMonitor64.dll: Owner is administrators group.
16352b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
16362b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'advapi32.dll'.
16372b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'shell32.dll'.
16382b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'ole32.dll'.
16392b44.359c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'oleaut32.dll'.
16402b44.359c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Program Files (x86)\Samsung\Easy Printer Manager\SmartScreenPrint\CDAKEYMonitor64.dll)
16412b44.359c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files (x86)\Samsung\Easy Printer Manager\SmartScreenPrint\CDAKEYMonitor64.dll
16422b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
16432b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume2\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
16442b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
16452b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
16462b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
16472b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ole32.dll [lacks WinVerifyTrust]
16482b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
16492b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume2\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
16502b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\shell32.dll [lacks WinVerifyTrust]
16512b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
16522b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
16532b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
16542b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
16552b44.359c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
16562b44.359c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
16572b44.359c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files (x86)\Samsung\Easy Printer Manager\SmartScreenPrint\CDAKEYMonitor64.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
16582b44.359c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Program Files (x86)\Samsung\Easy Printer Manager\SmartScreenPrint\CDAKEYMonitor64.dll [lacks WinVerifyTrust]
16592b44.359c: supR3HardenedDllNotificationCallback: load 00007ffd5c000000 LB 0x00025000 C:\Program Files (x86)\Samsung\Easy Printer Manager\SmartScreenPrint\CDAKEYMonitor64.dll [fFlags=0x0]
16602b44.359c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Program Files (x86)\Samsung\Easy Printer Manager\SmartScreenPrint\CDAKEYMonitor64.dll [lacks WinVerifyTrust]
16612b44.359c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd5c000000 'C:\Program Files (x86)\Samsung\Easy Printer Manager\SmartScreenPrint\CDAKEYMonitor64.dll'
166265c.1e08: supR3HardNtChildWaitFor[1]: Quitting: ExitCode=0x1 (rcNtWait=0x0, rcNt1=0x0, rcNt2=0x103, rcNt3=0x103, 232818 ms, the end);

© 2024 Oracle Support Privacy / Do Not Sell My Info Terms of Use Trademark Policy