VirtualBox

Ticket #19810: VBoxHardening.log

File VBoxHardening.log, 195.5 KB (added by Figgis, 4 years ago)
Line 
1416c.4cc: Log file opened: 6.0.14r133895 g_hStartupLog=0000000000000074 g_uNtVerCombined=0xa047bb00
2416c.4cc: \SystemRoot\System32\ntdll.dll:
3416c.4cc: CreationTime: 2020-04-25T14:04:34.102606900Z
4416c.4cc: LastWriteTime: 2020-04-25T14:04:34.149204200Z
5416c.4cc: ChangeTime: 2020-08-12T01:15:51.432397900Z
6416c.4cc: FileAttributes: 0x20
7416c.4cc: Size: 0x1e8460
8416c.4cc: NT Headers: 0xd8
9416c.4cc: Timestamp: 0xb29ecf52
10416c.4cc: Machine: 0x8664 - amd64
11416c.4cc: Timestamp: 0xb29ecf52
12416c.4cc: Image Version: 10.0
13416c.4cc: SizeOfImage: 0x1f0000 (2031616)
14416c.4cc: Resource Dir: 0x17f000 LB 0x6f310
15416c.4cc: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
16416c.4cc: [Raw version resource data: 0x17f0f0 LB 0x380, codepage 0x0 (reserved 0x0)]
17416c.4cc: ProductName: Microsoft® Windows® Operating System
18416c.4cc: ProductVersion: 10.0.18362.815
19416c.4cc: FileVersion: 10.0.18362.815 (WinBuild.160101.0800)
20416c.4cc: FileDescription: NT Layer DLL
21416c.4cc: \SystemRoot\System32\kernel32.dll:
22416c.4cc: CreationTime: 2020-07-14T22:22:33.967872500Z
23416c.4cc: LastWriteTime: 2020-07-14T22:22:33.988766200Z
24416c.4cc: ChangeTime: 2020-08-12T01:15:50.259080500Z
25416c.4cc: FileAttributes: 0x20
26416c.4cc: Size: 0xb0498
27416c.4cc: NT Headers: 0xe8
28416c.4cc: Timestamp: 0xce6bbd73
29416c.4cc: Machine: 0x8664 - amd64
30416c.4cc: Timestamp: 0xce6bbd73
31416c.4cc: Image Version: 10.0
32416c.4cc: SizeOfImage: 0xb2000 (729088)
33416c.4cc: Resource Dir: 0xb0000 LB 0x520
34416c.4cc: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
35416c.4cc: [Raw version resource data: 0xb00b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
36416c.4cc: ProductName: Microsoft® Windows® Operating System
37416c.4cc: ProductVersion: 10.0.18362.959
38416c.4cc: FileVersion: 10.0.18362.959 (WinBuild.160101.0800)
39416c.4cc: FileDescription: Windows NT BASE API Client DLL
40416c.4cc: \SystemRoot\System32\KernelBase.dll:
41416c.4cc: CreationTime: 2020-08-12T01:14:30.017748800Z
42416c.4cc: LastWriteTime: 2020-08-12T01:14:30.095769900Z
43416c.4cc: ChangeTime: 2020-08-12T03:48:36.759556200Z
44416c.4cc: FileAttributes: 0x20
45416c.4cc: Size: 0x2a3868
46416c.4cc: NT Headers: 0xf8
47416c.4cc: Timestamp: 0x91b9349a
48416c.4cc: Machine: 0x8664 - amd64
49416c.4cc: Timestamp: 0x91b9349a
50416c.4cc: Image Version: 10.0
51416c.4cc: SizeOfImage: 0x2a4000 (2768896)
52416c.4cc: Resource Dir: 0x27e000 LB 0x548
53416c.4cc: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
54416c.4cc: [Raw version resource data: 0x27e0b0 LB 0x3bc, codepage 0x0 (reserved 0x0)]
55416c.4cc: ProductName: Microsoft® Windows® Operating System
56416c.4cc: ProductVersion: 10.0.18362.997
57416c.4cc: FileVersion: 10.0.18362.997 (WinBuild.160101.0800)
58416c.4cc: FileDescription: Windows NT BASE API Client DLL
59416c.4cc: \SystemRoot\System32\apisetschema.dll:
60416c.4cc: CreationTime: 2019-03-19T04:43:54.837151500Z
61416c.4cc: LastWriteTime: 2019-03-19T04:43:54.837151500Z
62416c.4cc: ChangeTime: 2020-08-12T01:15:50.205068400Z
63416c.4cc: FileAttributes: 0x20
64416c.4cc: Size: 0x1d028
65416c.4cc: NT Headers: 0xc8
66416c.4cc: Timestamp: 0xd6ced080
67416c.4cc: Machine: 0x8664 - amd64
68416c.4cc: Timestamp: 0xd6ced080
69416c.4cc: Image Version: 10.0
70416c.4cc: SizeOfImage: 0x1e000 (122880)
71416c.4cc: Resource Dir: 0x1d000 LB 0x408
72416c.4cc: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
73416c.4cc: [Raw version resource data: 0x1d060 LB 0x3a8, codepage 0x0 (reserved 0x0)]
74416c.4cc: ProductName: Microsoft® Windows® Operating System
75416c.4cc: ProductVersion: 10.0.18362.1
76416c.4cc: FileVersion: 10.0.18362.1 (WinBuild.160101.0800)
77416c.4cc: FileDescription: ApiSet Schema DLL
78416c.4cc: NtOpenDirectoryObject failed on \Driver: 0xc0000022
79416c.4cc: supR3HardenedWinFindAdversaries: 0xa0
80416c.4cc: \SystemRoot\System32\drivers\cfwids.sys:
81416c.4cc: CreationTime: 2018-12-10T07:03:26.000000000Z
82416c.4cc: LastWriteTime: 2020-04-09T14:15:22.000000000Z
83416c.4cc: ChangeTime: 2020-07-03T23:00:27.346782600Z
84416c.4cc: FileAttributes: 0x20
85416c.4cc: Size: 0x127b8
86416c.4cc: NT Headers: 0xf0
87416c.4cc: Timestamp: 0x5e7a0da1
88416c.4cc: Machine: 0x8664 - amd64
89416c.4cc: Timestamp: 0x5e7a0da1
90416c.4cc: Image Version: 0.0
91416c.4cc: SizeOfImage: 0x14000 (81920)
92416c.4cc: Resource Dir: 0x12000 LB 0x550
93416c.4cc: [Version info resource found at 0x80! (ID/Name: 0x1; SubID/SubName: 0x409)]
94416c.4cc: [Raw version resource data: 0x120a0 LB 0x318, codepage 0x0 (reserved 0x0)]
95416c.4cc: ProductName: SYSCORE
96416c.4cc: ProductVersion: 20.4.0.155
97416c.4cc: FileVersion: SYSCORE.20.4.0.155
98416c.4cc: PrivateBuild: SYSCORE.20.4.0.155
99416c.4cc: FileDescription: McAfee Personal Firewall IDS Plugin
100416c.4cc: \SystemRoot\System32\drivers\mfeavfk.sys:
101416c.4cc: CreationTime: 2018-12-10T07:03:26.000000000Z
102416c.4cc: LastWriteTime: 2020-04-09T14:15:22.000000000Z
103416c.4cc: ChangeTime: 2020-07-03T23:00:22.931792200Z
104416c.4cc: FileAttributes: 0x20
105416c.4cc: Size: 0x5d5b8
106416c.4cc: NT Headers: 0xe8
107416c.4cc: Timestamp: 0x5e7a0d35
108416c.4cc: Machine: 0x8664 - amd64
109416c.4cc: Timestamp: 0x5e7a0d35
110416c.4cc: Image Version: 0.0
111416c.4cc: SizeOfImage: 0x5e000 (385024)
112416c.4cc: Resource Dir: 0x5c000 LB 0x758
113416c.4cc: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
114416c.4cc: [Raw version resource data: 0x5c110 LB 0x334, codepage 0x0 (reserved 0x0)]
115416c.4cc: ProductName: SYSCORE
116416c.4cc: ProductVersion: 20.4.0.155
117416c.4cc: FileVersion: SYSCORE.20.4.0.155
118416c.4cc: PrivateBuild: SYSCORE.20.4.0.155 F15,F16,F19
119416c.4cc: FileDescription: Anti-Virus File System Filter Driver
120416c.4cc: \SystemRoot\System32\drivers\mfefirek.sys:
121416c.4cc: CreationTime: 2018-12-10T07:03:26.000000000Z
122416c.4cc: LastWriteTime: 2020-04-09T14:15:22.000000000Z
123416c.4cc: ChangeTime: 2020-07-03T23:00:20.962130100Z
124416c.4cc: FileAttributes: 0x20
125416c.4cc: Size: 0x7f5b0
126416c.4cc: NT Headers: 0xe0
127416c.4cc: Timestamp: 0x5e7a0d81
128416c.4cc: Machine: 0x8664 - amd64
129416c.4cc: Timestamp: 0x5e7a0d81
130416c.4cc: Image Version: 0.0
131416c.4cc: SizeOfImage: 0x81000 (528384)
132416c.4cc: Resource Dir: 0x7d000 LB 0x388
133416c.4cc: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
134416c.4cc: [Raw version resource data: 0x7d060 LB 0x328, codepage 0x0 (reserved 0x0)]
135416c.4cc: ProductName: SYSCORE
136416c.4cc: ProductVersion: 20.4.0.155
137416c.4cc: FileVersion: SYSCORE.20.4.0.155
138416c.4cc: PrivateBuild: SYSCORE.20.4.0.155 F17,F18
139416c.4cc: FileDescription: McAfee Core Firewall Engine Driver
140416c.4cc: \SystemRoot\System32\drivers\mfehidk.sys:
141416c.4cc: CreationTime: 2018-12-10T07:03:26.000000000Z
142416c.4cc: LastWriteTime: 2020-04-09T14:15:22.000000000Z
143416c.4cc: ChangeTime: 2020-07-03T23:00:11.638981800Z
144416c.4cc: FileAttributes: 0x20
145416c.4cc: Size: 0xf45b0
146416c.4cc: NT Headers: 0xf8
147416c.4cc: Timestamp: 0x5e7a0d05
148416c.4cc: Machine: 0x8664 - amd64
149416c.4cc: Timestamp: 0x5e7a0d05
150416c.4cc: Image Version: 0.0
151416c.4cc: SizeOfImage: 0xfe000 (1040384)
152416c.4cc: Resource Dir: 0xfa000 LB 0x758
153416c.4cc: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
154416c.4cc: [Raw version resource data: 0xfa110 LB 0x320, codepage 0x0 (reserved 0x0)]
155416c.4cc: ProductName: SYSCORE
156416c.4cc: ProductVersion: 20.4.0.155
157416c.4cc: FileVersion: SYSCORE.20.4.0.155
158416c.4cc: PrivateBuild: SYSCORE.20.4.0.155 F14,F15,F16,F18,F20
159416c.4cc: FileDescription: McAfee Link Driver
160416c.4cc: \SystemRoot\System32\drivers\mfencbdc.sys:
161416c.4cc: CreationTime: 2018-11-19T06:44:58.000000000Z
162416c.4cc: LastWriteTime: 2020-05-01T07:55:06.000000000Z
163416c.4cc: ChangeTime: 2020-07-03T23:03:36.104665700Z
164416c.4cc: FileAttributes: 0x20
165416c.4cc: Size: 0x91688
166416c.4cc: NT Headers: 0xe0
167416c.4cc: Timestamp: 0x5e4d96a0
168416c.4cc: Machine: 0x8664 - amd64
169416c.4cc: Timestamp: 0x5e4d96a0
170416c.4cc: Image Version: 0.0
171416c.4cc: SizeOfImage: 0x95000 (610304)
172416c.4cc: Resource Dir: 0x93000 LB 0x458
173416c.4cc: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
174416c.4cc: [Raw version resource data: 0x93060 LB 0x3f4, codepage 0x0 (reserved 0x0)]
175416c.4cc: ProductName: Anti-Malware Core
176416c.4cc: ProductVersion: 20.3.0
177416c.4cc: FileVersion: Anti-Malware Core.20.3.0.108.x64
178416c.4cc: PrivateBuild: Anti-Malware Core.20.3.0.108.x64
179416c.4cc: FileDescription: Event Driver
180416c.4cc: \SystemRoot\System32\drivers\mfewfpk.sys:
181416c.4cc: CreationTime: 2018-12-10T07:03:26.000000000Z
182416c.4cc: LastWriteTime: 2020-04-09T14:15:22.000000000Z
183416c.4cc: ChangeTime: 2020-07-03T23:00:06.372118900Z
184416c.4cc: FileAttributes: 0x20
185416c.4cc: Size: 0x3d9b0
186416c.4cc: NT Headers: 0xf0
187416c.4cc: Timestamp: 0x5e7a0d11
188416c.4cc: Machine: 0x8664 - amd64
189416c.4cc: Timestamp: 0x5e7a0d11
190416c.4cc: Image Version: 0.0
191416c.4cc: SizeOfImage: 0x59000 (364544)
192416c.4cc: Resource Dir: 0x57000 LB 0x380
193416c.4cc: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
194416c.4cc: [Raw version resource data: 0x57060 LB 0x320, codepage 0x0 (reserved 0x0)]
195416c.4cc: ProductName: SYSCORE
196416c.4cc: ProductVersion: 20.4.0.155
197416c.4cc: FileVersion: SYSCORE.20.4.0.155
198416c.4cc: PrivateBuild: SYSCORE.20.4.0.155 F17,F18
199416c.4cc: FileDescription: Anti-Virus Mini-Firewall Driver
200416c.4cc: \SystemRoot\System32\drivers\MBAMSwissArmy.sys:
201416c.4cc: CreationTime: 2020-05-28T00:36:55.568354000Z
202416c.4cc: LastWriteTime: 2020-06-06T23:47:01.262970400Z
203416c.4cc: ChangeTime: 2020-06-06T23:47:01.294977300Z
204416c.4cc: FileAttributes: 0x20
205416c.4cc: Size: 0x3cc88
206416c.4cc: NT Headers: 0xf0
207416c.4cc: Timestamp: 0x5dd55459
208416c.4cc: Machine: 0x8664 - amd64
209416c.4cc: Timestamp: 0x5dd55459
210416c.4cc: Image Version: 10.0
211416c.4cc: SizeOfImage: 0x3f000 (258048)
212416c.4cc: Resource Dir: 0x3d000 LB 0x3b8
213416c.4cc: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
214416c.4cc: [Raw version resource data: 0x3d060 LB 0x358, codepage 0x0 (reserved 0x0)]
215416c.4cc: ProductName: Malwarebytes SwissArmy
216416c.4cc: ProductVersion: 4.3.0.178
217416c.4cc: FileVersion: 4.3.0.178
218416c.4cc: FileDescription: Malwarebytes SwissArmy
219416c.4cc: \SystemRoot\System32\drivers\mwac.sys:
220416c.4cc: CreationTime: 2020-08-12T03:49:41.344382400Z
221416c.4cc: LastWriteTime: 2020-08-12T03:49:41.344382400Z
222416c.4cc: ChangeTime: 2020-08-12T03:49:41.391260900Z
223416c.4cc: FileAttributes: 0x20
224416c.4cc: Size: 0x200a0
225416c.4cc: NT Headers: 0xe0
226416c.4cc: Timestamp: 0x5ef0c401
227416c.4cc: Machine: 0x8664 - amd64
228416c.4cc: Timestamp: 0x5ef0c401
229416c.4cc: Image Version: 10.0
230416c.4cc: SizeOfImage: 0x22000 (139264)
231416c.4cc: Resource Dir: 0x20000 LB 0x380
232416c.4cc: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
233416c.4cc: [Raw version resource data: 0x20060 LB 0x320, codepage 0x0 (reserved 0x0)]
234416c.4cc: ProductName: Malwarebytes Web Protection
235416c.4cc: ProductVersion: 1.0.0.54
236416c.4cc: FileVersion: 1.0.0.54
237416c.4cc: FileDescription: Malwarebytes Web Protection
238416c.4cc: \SystemRoot\System32\drivers\mbamchameleon.sys:
239416c.4cc: CreationTime: 2020-02-07T23:46:25.185174900Z
240416c.4cc: LastWriteTime: 2020-08-01T00:29:19.290572200Z
241416c.4cc: ChangeTime: 2020-08-01T00:29:19.366589800Z
242416c.4cc: FileAttributes: 0x20
243416c.4cc: Size: 0x34bf8
244416c.4cc: NT Headers: 0xf8
245416c.4cc: Timestamp: 0x5ed916d3
246416c.4cc: Machine: 0x8664 - amd64
247416c.4cc: Timestamp: 0x5ed916d3
248416c.4cc: Image Version: 10.0
249416c.4cc: SizeOfImage: 0x38000 (229376)
250416c.4cc: Resource Dir: 0x36000 LB 0x3b8
251416c.4cc: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
252416c.4cc: [Raw version resource data: 0x36060 LB 0x358, codepage 0x0 (reserved 0x0)]
253416c.4cc: ProductName: Malwarebytes Chameleon
254416c.4cc: ProductVersion: 3.1.0.316
255416c.4cc: FileVersion: 3.1.0.316
256416c.4cc: FileDescription: Malwarebytes Chameleon
257416c.4cc: \SystemRoot\System32\drivers\mbam.sys:
258416c.4cc: CreationTime: 2020-08-12T03:49:46.516603500Z
259416c.4cc: LastWriteTime: 2020-08-12T03:49:46.500977800Z
260416c.4cc: ChangeTime: 2020-08-12T03:49:46.500977800Z
261416c.4cc: FileAttributes: 0x20
262416c.4cc: Size: 0x11e98
263416c.4cc: NT Headers: 0xd8
264416c.4cc: Timestamp: 0x5f04b5a9
265416c.4cc: Machine: 0x8664 - amd64
266416c.4cc: Timestamp: 0x5f04b5a9
267416c.4cc: Image Version: 10.0
268416c.4cc: SizeOfImage: 0x13000 (77824)
269416c.4cc: Resource Dir: 0x11000 LB 0x3c0
270416c.4cc: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
271416c.4cc: [Raw version resource data: 0x11060 LB 0x360, codepage 0x0 (reserved 0x0)]
272416c.4cc: ProductName: Malwarebytes Real-Time Protection
273416c.4cc: ProductVersion: 3.1.0.193
274416c.4cc: FileVersion: 3.1.0.193
275416c.4cc: FileDescription: Malwarebytes Real-Time Protection
276416c.4cc: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox'
277416c.4cc: Calling main()
278416c.4cc: SUPR3HardenedMain: pszProgName=VirtualBoxVM fFlags=0x2
279416c.4cc: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox'
280416c.4cc: SUPR3HardenedMain: Respawn #1
281416c.4cc: System32: \Device\HarddiskVolume4\Windows\System32
282416c.4cc: WinSxS: \Device\HarddiskVolume4\Windows\WinSxS
283416c.4cc: KnownDllPath: C:\WINDOWS\System32
284416c.4cc: supR3HardenedWinInit: Performing a limited self purification...
285416c.4cc: supHardNtVpScanVirtualMemory: enmKind=SELF_PURIFICATION
286416c.4cc: *0000000000000000-0000000000e1ffff 0x0001/0x0000 0x0000000
287416c.4cc: *0000000000e20000-0000000000e2ffff 0x0004/0x0004 0x0040000
288416c.4cc: 0000000000e30000-0000000000e3ffff 0x0001/0x0000 0x0000000
289416c.4cc: *0000000000e40000-0000000000e5afff 0x0002/0x0002 0x0040000
290416c.4cc: 0000000000e5b000-0000000000e5ffff 0x0001/0x0000 0x0000000
291416c.4cc: *0000000000e60000-0000000000f10fff 0x0000/0x0004 0x0020000
292416c.4cc: 0000000000f11000-0000000000f13fff 0x0104/0x0004 0x0020000
293416c.4cc: 0000000000f14000-0000000000f5ffff 0x0004/0x0004 0x0020000
294416c.4cc: *0000000000f60000-0000000000f63fff 0x0002/0x0002 0x0040000
295416c.4cc: 0000000000f64000-0000000000f6ffff 0x0001/0x0000 0x0000000
296416c.4cc: *0000000000f70000-0000000000f71fff 0x0004/0x0004 0x0020000
297416c.4cc: 0000000000f72000-0000000000f7ffff 0x0001/0x0000 0x0000000
298416c.4cc: *0000000000f80000-0000000000f81fff 0x0004/0x0004 0x0020000
299416c.4cc: 0000000000f82000-0000000000fe1fff 0x0000/0x0004 0x0020000
300416c.4cc: 0000000000fe2000-0000000000ffffff 0x0001/0x0000 0x0000000
301416c.4cc: *0000000001000000-000000000116cfff 0x0000/0x0004 0x0020000
302416c.4cc: 000000000116d000-000000000116ffff 0x0004/0x0004 0x0020000
303416c.4cc: 0000000001170000-00000000011fffff 0x0000/0x0004 0x0020000
304416c.4cc: *0000000001200000-00000000012c6fff 0x0002/0x0002 0x0040000
305416c.4cc: 00000000012c7000-000000000130ffff 0x0001/0x0000 0x0000000
306416c.4cc: *0000000001310000-0000000001314fff 0x0004/0x0004 0x0020000
307416c.4cc: 0000000001315000-000000000140ffff 0x0000/0x0004 0x0020000
308416c.4cc: 0000000001410000-00000000014cffff 0x0001/0x0000 0x0000000
309416c.4cc: *00000000014d0000-00000000014defff 0x0004/0x0004 0x0020000
310416c.4cc: 00000000014df000-00000000014dffff 0x0000/0x0004 0x0020000
311416c.4cc: *00000000014e0000-00000000014e0fff 0x0000/0x0004 0x0020000
312416c.4cc: 00000000014e1000-00000000016d1fff 0x0004/0x0004 0x0020000
313416c.4cc: 00000000016d2000-00000000016d2fff 0x0000/0x0004 0x0020000
314416c.4cc: 00000000016d3000-00000000016dffff 0x0001/0x0000 0x0000000
315416c.4cc: *00000000016e0000-00000000016fcfff 0x0004/0x0004 0x0020000
316416c.4cc: 00000000016fd000-00000000017dffff 0x0000/0x0004 0x0020000
317416c.4cc: 00000000017e0000-000000007ffdffff 0x0001/0x0000 0x0000000
318416c.4cc: *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000
319416c.4cc: 000000007ffe1000-000000007ffe1fff 0x0001/0x0000 0x0000000
320416c.4cc: *000000007ffe2000-000000007ffe2fff 0x0002/0x0002 0x0020000
321416c.4cc: 000000007ffe3000-00007ff4c0b3ffff 0x0001/0x0000 0x0000000
322416c.4cc: *00007ff4c0b40000-00007ff4c0b44fff 0x0002/0x0002 0x0040000
323416c.4cc: 00007ff4c0b45000-00007ff4c0c3ffff 0x0000/0x0002 0x0040000
324416c.4cc: *00007ff4c0c40000-00007ff5c0c5ffff 0x0000/0x0004 0x0020000
325416c.4cc: *00007ff5c0c60000-00007ff5c2c5ffff 0x0000/0x0004 0x0020000
326416c.4cc: 00007ff5c2c60000-00007ff5c2c60fff 0x0004/0x0004 0x0020000
327416c.4cc: 00007ff5c2c61000-00007ff5c2c6ffff 0x0001/0x0000 0x0000000
328416c.4cc: *00007ff5c2c70000-00007ff5c2c70fff 0x0002/0x0002 0x0040000
329416c.4cc: 00007ff5c2c71000-00007ff5c2c7ffff 0x0001/0x0000 0x0000000
330416c.4cc: *00007ff5c2c80000-00007ff5c2ca2fff 0x0002/0x0002 0x0040000
331416c.4cc: 00007ff5c2ca3000-00007ff72e94ffff 0x0001/0x0000 0x0000000
332416c.4cc: *00007ff72e950000-00007ff72e950fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
333416c.4cc: 00007ff72e951000-00007ff72e9c5fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
334416c.4cc: 00007ff72e9c6000-00007ff72e9c6fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
335416c.4cc: 00007ff72e9c7000-00007ff72ea0efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
336416c.4cc: 00007ff72ea0f000-00007ff72ea11fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
337416c.4cc: 00007ff72ea12000-00007ff72ea14fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
338416c.4cc: 00007ff72ea15000-00007ff72ea17fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
339416c.4cc: 00007ff72ea18000-00007ff72ea18fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
340416c.4cc: 00007ff72ea19000-00007ff72ea1afff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
341416c.4cc: 00007ff72ea1b000-00007ff72ea1bfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
342416c.4cc: 00007ff72ea1c000-00007ff72ea64fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
343416c.4cc: 00007ff72ea65000-00007ffd7652ffff 0x0001/0x0000 0x0000000
344416c.4cc: *00007ffd76530000-00007ffd76530fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\KernelBase.dll
345416c.4cc: 00007ffd76531000-00007ffd76635fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\KernelBase.dll
346416c.4cc: 00007ffd76636000-00007ffd76798fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\KernelBase.dll
347416c.4cc: 00007ffd76799000-00007ffd7679cfff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\KernelBase.dll
348416c.4cc: 00007ffd7679d000-00007ffd7679dfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\KernelBase.dll
349416c.4cc: 00007ffd7679e000-00007ffd767d3fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\KernelBase.dll
350416c.4cc: 00007ffd767d4000-00007ffd7869ffff 0x0001/0x0000 0x0000000
351416c.4cc: *00007ffd786a0000-00007ffd786a0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\kernel32.dll
352416c.4cc: 00007ffd786a1000-00007ffd78715fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\kernel32.dll
353416c.4cc: 00007ffd78716000-00007ffd78747fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\kernel32.dll
354416c.4cc: 00007ffd78748000-00007ffd78748fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\kernel32.dll
355416c.4cc: 00007ffd78749000-00007ffd78749fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\kernel32.dll
356416c.4cc: 00007ffd7874a000-00007ffd78751fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\kernel32.dll
357416c.4cc: 00007ffd78752000-00007ffd78a5ffff 0x0001/0x0000 0x0000000
358416c.4cc: *00007ffd78a60000-00007ffd78a60fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
359416c.4cc: 00007ffd78a61000-00007ffd78b77fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
360416c.4cc: 00007ffd78b78000-00007ffd78bbefff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
361416c.4cc: 00007ffd78bbf000-00007ffd78bbffff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
362416c.4cc: 00007ffd78bc0000-00007ffd78bc1fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
363416c.4cc: 00007ffd78bc2000-00007ffd78bcafff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
364416c.4cc: 00007ffd78bcb000-00007ffd78c4ffff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
365416c.4cc: 00007ffd78c50000-00007ffffffeffff 0x0001/0x0000 0x0000000
366416c.4cc: kernel32.dll: timestamp 0xce6bbd73 (rc=VINF_SUCCESS)
367416c.4cc: kernelbase.dll: timestamp 0x91b9349a (rc=VINF_SUCCESS)
368416c.4cc: VirtualBoxVM.exe: timestamp 0x5d9f7c37 (rc=VINF_SUCCESS)
369416c.4cc: '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
370416c.4cc: '\Device\HarddiskVolume4\Windows\System32\ntdll.dll' has no imports
371416c.4cc: supR3HardenedWinInit: SUPHARDNTVPKIND_SELF_PURIFICATION_LIMITED -> VINF_SUCCESS, cFixes=0
372416c.4cc: '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
373416c.4cc: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe)
374416c.4cc: supR3HardNtEnableThreadCreationEx:
375416c.4cc: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffd78ad1770 pvNtTerminateThread=00007ffd78afcac0
376416c.4cc: supR3HardenedWinDoReSpawn(1): New child a28.27b0 [kernel32].
377416c.4cc: supR3HardNtChildGatherData: PebBaseAddress=0000000000c15000 cbPeb=0x388
378416c.4cc: supR3HardNtPuChFindNtdll: uNtDllParentAddr=00007ffd78a60000 uNtDllChildAddr=00007ffd78a60000
379416c.4cc: supR3HardenedWinSetupChildInit: uLdrInitThunk=00007ffd78ad1770
380416c.4cc: supR3HardenedWinSetupChildInit: Start child.
381416c.4cc: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 0 ms.
382416c.4cc: supR3HardNtChildPurify: Startup delay kludge #1/0: 516 ms, 61 sleeps
383416c.4cc: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
384416c.4cc: *0000000000000000-0000000000a9ffff 0x0001/0x0000 0x0000000
385416c.4cc: *0000000000aa0000-0000000000abffff 0x0004/0x0004 0x0020000
386416c.4cc: *0000000000ac0000-0000000000adafff 0x0002/0x0002 0x0040000
387416c.4cc: 0000000000adb000-0000000000adffff 0x0001/0x0000 0x0000000
388416c.4cc: *0000000000ae0000-0000000000bdafff 0x0000/0x0004 0x0020000
389416c.4cc: 0000000000bdb000-0000000000bddfff 0x0104/0x0004 0x0020000
390416c.4cc: 0000000000bde000-0000000000bdffff 0x0004/0x0004 0x0020000
391416c.4cc: *0000000000be0000-0000000000be3fff 0x0002/0x0002 0x0040000
392416c.4cc: 0000000000be4000-0000000000beffff 0x0001/0x0000 0x0000000
393416c.4cc: *0000000000bf0000-0000000000bf1fff 0x0004/0x0004 0x0020000
394416c.4cc: 0000000000bf2000-0000000000bfffff 0x0001/0x0000 0x0000000
395416c.4cc: *0000000000c00000-0000000000c14fff 0x0000/0x0004 0x0020000
396416c.4cc: 0000000000c15000-0000000000c17fff 0x0004/0x0004 0x0020000
397416c.4cc: 0000000000c18000-0000000000dfffff 0x0000/0x0004 0x0020000
398416c.4cc: 0000000000e00000-000000007ffdffff 0x0001/0x0000 0x0000000
399416c.4cc: *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000
400416c.4cc: 000000007ffe1000-000000007ffe1fff 0x0001/0x0000 0x0000000
401416c.4cc: *000000007ffe2000-000000007ffe2fff 0x0002/0x0002 0x0020000
402416c.4cc: 000000007ffe3000-00007ff5253cffff 0x0001/0x0000 0x0000000
403416c.4cc: *00007ff5253d0000-00007ff5253d0fff 0x0002/0x0002 0x0040000
404416c.4cc: 00007ff5253d1000-00007ff5253dffff 0x0001/0x0000 0x0000000
405416c.4cc: *00007ff5253e0000-00007ff525402fff 0x0002/0x0002 0x0040000
406416c.4cc: 00007ff525403000-00007ff72e94ffff 0x0001/0x0000 0x0000000
407416c.4cc: *00007ff72e950000-00007ff72e950fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
408416c.4cc: 00007ff72e951000-00007ff72e9c5fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
409416c.4cc: 00007ff72e9c6000-00007ff72e9c6fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
410416c.4cc: 00007ff72e9c7000-00007ff72ea0efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
411416c.4cc: 00007ff72ea0f000-00007ff72ea0ffff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
412416c.4cc: 00007ff72ea10000-00007ff72ea10fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
413416c.4cc: 00007ff72ea11000-00007ff72ea15fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
414416c.4cc: 00007ff72ea16000-00007ff72ea16fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
415416c.4cc: 00007ff72ea17000-00007ff72ea17fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
416416c.4cc: 00007ff72ea18000-00007ff72ea1bfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
417416c.4cc: 00007ff72ea1c000-00007ff72ea64fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
418416c.4cc: 00007ff72ea65000-00007ffd78a5ffff 0x0001/0x0000 0x0000000
419416c.4cc: *00007ffd78a60000-00007ffd78a60fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
420416c.4cc: 00007ffd78a61000-00007ffd78b77fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
421416c.4cc: 00007ffd78b78000-00007ffd78bbefff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
422416c.4cc: 00007ffd78bbf000-00007ffd78bcafff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
423416c.4cc: 00007ffd78bcb000-00007ffd78bd9fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
424416c.4cc: 00007ffd78bda000-00007ffd78bdafff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
425416c.4cc: 00007ffd78bdb000-00007ffd78bddfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
426416c.4cc: 00007ffd78bde000-00007ffd78c4ffff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
427416c.4cc: 00007ffd78c50000-00007ffffffeffff 0x0001/0x0000 0x0000000
428416c.4cc: supR3HardNtChildPurify: Done after 522 ms and 0 fixes (loop #0).
429a28.27b0: Log file opened: 6.0.14r133895 g_hStartupLog=0000000000000004 g_uNtVerCombined=0xa047bb00
430a28.27b0: supR3HardenedVmProcessInit: uNtDllAddr=00007ffd78a60000 g_uNtVerCombined=0xa047bb00
431416c.4cc: supR3HardNtEnableThreadCreationEx:
432a28.27b0: ntdll.dll: timestamp 0xb29ecf52 (rc=VINF_SUCCESS)
433a28.27b0: New simple heap: #1 0000000000f00000 LB 0x400000 (for 2031616 allocation)
434a28.27b0: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox'
435a28.27b0: System32: \Device\HarddiskVolume4\Windows\System32
436a28.27b0: WinSxS: \Device\HarddiskVolume4\Windows\WinSxS
437a28.27b0: KnownDllPath: C:\WINDOWS\System32
438a28.27b0: supR3HardenedVmProcessInit: Opening vboxdrv stub...
439a28.27b0: supR3HardenedVmProcessInit: Restoring LdrInitializeThunk...
440a28.27b0: supR3HardenedVmProcessInit: Returning to LdrInitializeThunk...
441a28.27b0: Registered Dll notification callback with NTDLL.
442a28.27b0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\kernel32.dll)
443a28.27b0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\kernel32.dll
444a28.27b0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\KERNEL32.DLL (Input=KERNEL32.DLL, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000004001:<flags> [calling]
445a28.27b0: supR3HardenedDllNotificationCallback: load 00007ffd76530000 LB 0x002a4000 C:\WINDOWS\System32\KERNELBASE.dll [fFlags=0x0]
446a28.27b0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\KernelBase.dll)
447a28.27b0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\KernelBase.dll
448a28.27b0: supR3HardenedDllNotificationCallback: load 00007ffd786a0000 LB 0x000b2000 C:\WINDOWS\System32\KERNEL32.DLL [fFlags=0x0]
449a28.27b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
450a28.27b0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd786a0000 'C:\WINDOWS\System32\KERNEL32.DLL'
451a28.27b0: supR3HardenedDllNotificationCallback: load 00007ff72e950000 LB 0x00115000 C:\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe [fFlags=0x0]
452a28.27b0: '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
453a28.27b0: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe)
454a28.27b0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
455a28.27b0: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffd78ad1770 pvNtTerminateThread=00007ffd78afcac0
456416c.4cc: supR3HardNtChildWaitFor: Found expected request 1 (CloseEvents) after 88 ms.
457a28.27b0: \SystemRoot\System32\ntdll.dll:
458a28.27b0: CreationTime: 2020-04-25T14:04:34.102606900Z
459a28.27b0: LastWriteTime: 2020-04-25T14:04:34.149204200Z
460a28.27b0: ChangeTime: 2020-08-12T01:15:51.432397900Z
461a28.27b0: FileAttributes: 0x20
462a28.27b0: Size: 0x1e8460
463a28.27b0: NT Headers: 0xd8
464a28.27b0: Timestamp: 0xb29ecf52
465a28.27b0: Machine: 0x8664 - amd64
466a28.27b0: Timestamp: 0xb29ecf52
467a28.27b0: Image Version: 10.0
468a28.27b0: SizeOfImage: 0x1f0000 (2031616)
469a28.27b0: Resource Dir: 0x17f000 LB 0x6f310
470a28.27b0: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
471a28.27b0: [Raw version resource data: 0x17f0f0 LB 0x380, codepage 0x0 (reserved 0x0)]
472a28.27b0: ProductName: Microsoft® Windows® Operating System
473a28.27b0: ProductVersion: 10.0.18362.815
474a28.27b0: FileVersion: 10.0.18362.815 (WinBuild.160101.0800)
475a28.27b0: FileDescription: NT Layer DLL
476a28.27b0: \SystemRoot\System32\kernel32.dll:
477a28.27b0: CreationTime: 2020-07-14T22:22:33.967872500Z
478a28.27b0: LastWriteTime: 2020-07-14T22:22:33.988766200Z
479a28.27b0: ChangeTime: 2020-08-12T01:15:50.259080500Z
480a28.27b0: FileAttributes: 0x20
481a28.27b0: Size: 0xb0498
482a28.27b0: NT Headers: 0xe8
483a28.27b0: Timestamp: 0xce6bbd73
484a28.27b0: Machine: 0x8664 - amd64
485a28.27b0: Timestamp: 0xce6bbd73
486a28.27b0: Image Version: 10.0
487a28.27b0: SizeOfImage: 0xb2000 (729088)
488a28.27b0: Resource Dir: 0xb0000 LB 0x520
489a28.27b0: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
490a28.27b0: [Raw version resource data: 0xb00b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
491a28.27b0: ProductName: Microsoft® Windows® Operating System
492a28.27b0: ProductVersion: 10.0.18362.959
493a28.27b0: FileVersion: 10.0.18362.959 (WinBuild.160101.0800)
494a28.27b0: FileDescription: Windows NT BASE API Client DLL
495a28.27b0: \SystemRoot\System32\KernelBase.dll:
496a28.27b0: CreationTime: 2020-08-12T01:14:30.017748800Z
497a28.27b0: LastWriteTime: 2020-08-12T01:14:30.095769900Z
498a28.27b0: ChangeTime: 2020-08-12T03:48:36.759556200Z
499a28.27b0: FileAttributes: 0x20
500a28.27b0: Size: 0x2a3868
501a28.27b0: NT Headers: 0xf8
502a28.27b0: Timestamp: 0x91b9349a
503a28.27b0: Machine: 0x8664 - amd64
504a28.27b0: Timestamp: 0x91b9349a
505a28.27b0: Image Version: 10.0
506a28.27b0: SizeOfImage: 0x2a4000 (2768896)
507a28.27b0: Resource Dir: 0x27e000 LB 0x548
508a28.27b0: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
509a28.27b0: [Raw version resource data: 0x27e0b0 LB 0x3bc, codepage 0x0 (reserved 0x0)]
510a28.27b0: ProductName: Microsoft® Windows® Operating System
511a28.27b0: ProductVersion: 10.0.18362.997
512a28.27b0: FileVersion: 10.0.18362.997 (WinBuild.160101.0800)
513a28.27b0: FileDescription: Windows NT BASE API Client DLL
514a28.27b0: \SystemRoot\System32\apisetschema.dll:
515a28.27b0: CreationTime: 2019-03-19T04:43:54.837151500Z
516a28.27b0: LastWriteTime: 2019-03-19T04:43:54.837151500Z
517a28.27b0: ChangeTime: 2020-08-12T01:15:50.205068400Z
518a28.27b0: FileAttributes: 0x20
519a28.27b0: Size: 0x1d028
520a28.27b0: NT Headers: 0xc8
521a28.27b0: Timestamp: 0xd6ced080
522a28.27b0: Machine: 0x8664 - amd64
523a28.27b0: Timestamp: 0xd6ced080
524a28.27b0: Image Version: 10.0
525a28.27b0: SizeOfImage: 0x1e000 (122880)
526a28.27b0: Resource Dir: 0x1d000 LB 0x408
527a28.27b0: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
528a28.27b0: [Raw version resource data: 0x1d060 LB 0x3a8, codepage 0x0 (reserved 0x0)]
529a28.27b0: ProductName: Microsoft® Windows® Operating System
530a28.27b0: ProductVersion: 10.0.18362.1
531a28.27b0: FileVersion: 10.0.18362.1 (WinBuild.160101.0800)
532a28.27b0: FileDescription: ApiSet Schema DLL
533a28.27b0: NtOpenDirectoryObject failed on \Driver: 0xc0000022
534a28.27b0: supR3HardenedWinFindAdversaries: 0xa0
535a28.27b0: \SystemRoot\System32\drivers\cfwids.sys:
536a28.27b0: CreationTime: 2018-12-10T07:03:26.000000000Z
537a28.27b0: LastWriteTime: 2020-04-09T14:15:22.000000000Z
538a28.27b0: ChangeTime: 2020-07-03T23:00:27.346782600Z
539a28.27b0: FileAttributes: 0x20
540a28.27b0: Size: 0x127b8
541a28.27b0: NT Headers: 0xf0
542a28.27b0: Timestamp: 0x5e7a0da1
543a28.27b0: Machine: 0x8664 - amd64
544a28.27b0: Timestamp: 0x5e7a0da1
545a28.27b0: Image Version: 0.0
546a28.27b0: SizeOfImage: 0x14000 (81920)
547a28.27b0: Resource Dir: 0x12000 LB 0x550
548a28.27b0: [Version info resource found at 0x80! (ID/Name: 0x1; SubID/SubName: 0x409)]
549a28.27b0: [Raw version resource data: 0x120a0 LB 0x318, codepage 0x0 (reserved 0x0)]
550a28.27b0: ProductName: SYSCORE
551a28.27b0: ProductVersion: 20.4.0.155
552a28.27b0: FileVersion: SYSCORE.20.4.0.155
553a28.27b0: PrivateBuild: SYSCORE.20.4.0.155
554a28.27b0: FileDescription: McAfee Personal Firewall IDS Plugin
555a28.27b0: \SystemRoot\System32\drivers\mfeavfk.sys:
556a28.27b0: CreationTime: 2018-12-10T07:03:26.000000000Z
557a28.27b0: LastWriteTime: 2020-04-09T14:15:22.000000000Z
558a28.27b0: ChangeTime: 2020-07-03T23:00:22.931792200Z
559a28.27b0: FileAttributes: 0x20
560a28.27b0: Size: 0x5d5b8
561a28.27b0: NT Headers: 0xe8
562a28.27b0: Timestamp: 0x5e7a0d35
563a28.27b0: Machine: 0x8664 - amd64
564a28.27b0: Timestamp: 0x5e7a0d35
565a28.27b0: Image Version: 0.0
566a28.27b0: SizeOfImage: 0x5e000 (385024)
567a28.27b0: Resource Dir: 0x5c000 LB 0x758
568a28.27b0: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
569a28.27b0: [Raw version resource data: 0x5c110 LB 0x334, codepage 0x0 (reserved 0x0)]
570a28.27b0: ProductName: SYSCORE
571a28.27b0: ProductVersion: 20.4.0.155
572a28.27b0: FileVersion: SYSCORE.20.4.0.155
573a28.27b0: PrivateBuild: SYSCORE.20.4.0.155 F15,F16,F19
574a28.27b0: FileDescription: Anti-Virus File System Filter Driver
575a28.27b0: \SystemRoot\System32\drivers\mfefirek.sys:
576a28.27b0: CreationTime: 2018-12-10T07:03:26.000000000Z
577a28.27b0: LastWriteTime: 2020-04-09T14:15:22.000000000Z
578a28.27b0: ChangeTime: 2020-07-03T23:00:20.962130100Z
579a28.27b0: FileAttributes: 0x20
580a28.27b0: Size: 0x7f5b0
581a28.27b0: NT Headers: 0xe0
582a28.27b0: Timestamp: 0x5e7a0d81
583a28.27b0: Machine: 0x8664 - amd64
584a28.27b0: Timestamp: 0x5e7a0d81
585a28.27b0: Image Version: 0.0
586a28.27b0: SizeOfImage: 0x81000 (528384)
587a28.27b0: Resource Dir: 0x7d000 LB 0x388
588a28.27b0: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
589a28.27b0: [Raw version resource data: 0x7d060 LB 0x328, codepage 0x0 (reserved 0x0)]
590a28.27b0: ProductName: SYSCORE
591a28.27b0: ProductVersion: 20.4.0.155
592a28.27b0: FileVersion: SYSCORE.20.4.0.155
593a28.27b0: PrivateBuild: SYSCORE.20.4.0.155 F17,F18
594a28.27b0: FileDescription: McAfee Core Firewall Engine Driver
595a28.27b0: \SystemRoot\System32\drivers\mfehidk.sys:
596a28.27b0: CreationTime: 2018-12-10T07:03:26.000000000Z
597a28.27b0: LastWriteTime: 2020-04-09T14:15:22.000000000Z
598a28.27b0: ChangeTime: 2020-07-03T23:00:11.638981800Z
599a28.27b0: FileAttributes: 0x20
600a28.27b0: Size: 0xf45b0
601a28.27b0: NT Headers: 0xf8
602a28.27b0: Timestamp: 0x5e7a0d05
603a28.27b0: Machine: 0x8664 - amd64
604a28.27b0: Timestamp: 0x5e7a0d05
605a28.27b0: Image Version: 0.0
606a28.27b0: SizeOfImage: 0xfe000 (1040384)
607a28.27b0: Resource Dir: 0xfa000 LB 0x758
608a28.27b0: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
609a28.27b0: [Raw version resource data: 0xfa110 LB 0x320, codepage 0x0 (reserved 0x0)]
610a28.27b0: ProductName: SYSCORE
611a28.27b0: ProductVersion: 20.4.0.155
612a28.27b0: FileVersion: SYSCORE.20.4.0.155
613a28.27b0: PrivateBuild: SYSCORE.20.4.0.155 F14,F15,F16,F18,F20
614a28.27b0: FileDescription: McAfee Link Driver
615a28.27b0: \SystemRoot\System32\drivers\mfencbdc.sys:
616a28.27b0: CreationTime: 2018-11-19T06:44:58.000000000Z
617a28.27b0: LastWriteTime: 2020-05-01T07:55:06.000000000Z
618a28.27b0: ChangeTime: 2020-07-03T23:03:36.104665700Z
619a28.27b0: FileAttributes: 0x20
620a28.27b0: Size: 0x91688
621a28.27b0: NT Headers: 0xe0
622a28.27b0: Timestamp: 0x5e4d96a0
623a28.27b0: Machine: 0x8664 - amd64
624a28.27b0: Timestamp: 0x5e4d96a0
625a28.27b0: Image Version: 0.0
626a28.27b0: SizeOfImage: 0x95000 (610304)
627a28.27b0: Resource Dir: 0x93000 LB 0x458
628a28.27b0: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
629a28.27b0: [Raw version resource data: 0x93060 LB 0x3f4, codepage 0x0 (reserved 0x0)]
630a28.27b0: ProductName: Anti-Malware Core
631a28.27b0: ProductVersion: 20.3.0
632a28.27b0: FileVersion: Anti-Malware Core.20.3.0.108.x64
633a28.27b0: PrivateBuild: Anti-Malware Core.20.3.0.108.x64
634a28.27b0: FileDescription: Event Driver
635a28.27b0: \SystemRoot\System32\drivers\mfewfpk.sys:
636a28.27b0: CreationTime: 2018-12-10T07:03:26.000000000Z
637a28.27b0: LastWriteTime: 2020-04-09T14:15:22.000000000Z
638a28.27b0: ChangeTime: 2020-07-03T23:00:06.372118900Z
639a28.27b0: FileAttributes: 0x20
640a28.27b0: Size: 0x3d9b0
641a28.27b0: NT Headers: 0xf0
642a28.27b0: Timestamp: 0x5e7a0d11
643a28.27b0: Machine: 0x8664 - amd64
644a28.27b0: Timestamp: 0x5e7a0d11
645a28.27b0: Image Version: 0.0
646a28.27b0: SizeOfImage: 0x59000 (364544)
647a28.27b0: Resource Dir: 0x57000 LB 0x380
648a28.27b0: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
649a28.27b0: [Raw version resource data: 0x57060 LB 0x320, codepage 0x0 (reserved 0x0)]
650a28.27b0: ProductName: SYSCORE
651a28.27b0: ProductVersion: 20.4.0.155
652a28.27b0: FileVersion: SYSCORE.20.4.0.155
653a28.27b0: PrivateBuild: SYSCORE.20.4.0.155 F17,F18
654a28.27b0: FileDescription: Anti-Virus Mini-Firewall Driver
655a28.27b0: \SystemRoot\System32\drivers\MBAMSwissArmy.sys:
656a28.27b0: CreationTime: 2020-05-28T00:36:55.568354000Z
657a28.27b0: LastWriteTime: 2020-06-06T23:47:01.262970400Z
658a28.27b0: ChangeTime: 2020-06-06T23:47:01.294977300Z
659a28.27b0: FileAttributes: 0x20
660a28.27b0: Size: 0x3cc88
661a28.27b0: NT Headers: 0xf0
662a28.27b0: Timestamp: 0x5dd55459
663a28.27b0: Machine: 0x8664 - amd64
664a28.27b0: Timestamp: 0x5dd55459
665a28.27b0: Image Version: 10.0
666a28.27b0: SizeOfImage: 0x3f000 (258048)
667a28.27b0: Resource Dir: 0x3d000 LB 0x3b8
668a28.27b0: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
669a28.27b0: [Raw version resource data: 0x3d060 LB 0x358, codepage 0x0 (reserved 0x0)]
670a28.27b0: ProductName: Malwarebytes SwissArmy
671a28.27b0: ProductVersion: 4.3.0.178
672a28.27b0: FileVersion: 4.3.0.178
673a28.27b0: FileDescription: Malwarebytes SwissArmy
674a28.27b0: \SystemRoot\System32\drivers\mwac.sys:
675a28.27b0: CreationTime: 2020-08-12T03:49:41.344382400Z
676a28.27b0: LastWriteTime: 2020-08-12T03:49:41.344382400Z
677a28.27b0: ChangeTime: 2020-08-12T03:49:41.391260900Z
678a28.27b0: FileAttributes: 0x20
679a28.27b0: Size: 0x200a0
680a28.27b0: NT Headers: 0xe0
681a28.27b0: Timestamp: 0x5ef0c401
682a28.27b0: Machine: 0x8664 - amd64
683a28.27b0: Timestamp: 0x5ef0c401
684a28.27b0: Image Version: 10.0
685a28.27b0: SizeOfImage: 0x22000 (139264)
686a28.27b0: Resource Dir: 0x20000 LB 0x380
687a28.27b0: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
688a28.27b0: [Raw version resource data: 0x20060 LB 0x320, codepage 0x0 (reserved 0x0)]
689a28.27b0: ProductName: Malwarebytes Web Protection
690a28.27b0: ProductVersion: 1.0.0.54
691a28.27b0: FileVersion: 1.0.0.54
692a28.27b0: FileDescription: Malwarebytes Web Protection
693a28.27b0: \SystemRoot\System32\drivers\mbamchameleon.sys:
694a28.27b0: CreationTime: 2020-02-07T23:46:25.185174900Z
695a28.27b0: LastWriteTime: 2020-08-01T00:29:19.290572200Z
696a28.27b0: ChangeTime: 2020-08-01T00:29:19.366589800Z
697a28.27b0: FileAttributes: 0x20
698a28.27b0: Size: 0x34bf8
699a28.27b0: NT Headers: 0xf8
700a28.27b0: Timestamp: 0x5ed916d3
701a28.27b0: Machine: 0x8664 - amd64
702a28.27b0: Timestamp: 0x5ed916d3
703a28.27b0: Image Version: 10.0
704a28.27b0: SizeOfImage: 0x38000 (229376)
705a28.27b0: Resource Dir: 0x36000 LB 0x3b8
706a28.27b0: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
707a28.27b0: [Raw version resource data: 0x36060 LB 0x358, codepage 0x0 (reserved 0x0)]
708a28.27b0: ProductName: Malwarebytes Chameleon
709a28.27b0: ProductVersion: 3.1.0.316
710a28.27b0: FileVersion: 3.1.0.316
711a28.27b0: FileDescription: Malwarebytes Chameleon
712a28.27b0: \SystemRoot\System32\drivers\mbam.sys:
713a28.27b0: CreationTime: 2020-08-12T03:49:46.516603500Z
714a28.27b0: LastWriteTime: 2020-08-12T03:49:46.500977800Z
715a28.27b0: ChangeTime: 2020-08-12T03:49:46.500977800Z
716a28.27b0: FileAttributes: 0x20
717a28.27b0: Size: 0x11e98
718a28.27b0: NT Headers: 0xd8
719a28.27b0: Timestamp: 0x5f04b5a9
720a28.27b0: Machine: 0x8664 - amd64
721a28.27b0: Timestamp: 0x5f04b5a9
722a28.27b0: Image Version: 10.0
723a28.27b0: SizeOfImage: 0x13000 (77824)
724a28.27b0: Resource Dir: 0x11000 LB 0x3c0
725a28.27b0: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
726a28.27b0: [Raw version resource data: 0x11060 LB 0x360, codepage 0x0 (reserved 0x0)]
727a28.27b0: ProductName: Malwarebytes Real-Time Protection
728a28.27b0: ProductVersion: 3.1.0.193
729a28.27b0: FileVersion: 3.1.0.193
730a28.27b0: FileDescription: Malwarebytes Real-Time Protection
731a28.27b0: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox'
732a28.27b0: Calling main()
733a28.27b0: SUPR3HardenedMain: pszProgName=VirtualBoxVM fFlags=0x2
734a28.27b0: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox'
735a28.27b0: '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
736a28.27b0: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe)
737a28.27b0: SUPR3HardenedMain: Respawn #2
738a28.27b0: supR3HardNtEnableThreadCreationEx:
739a28.27b0: supR3HardenedDllNotificationCallback: load 00007ffd77d30000 LB 0x00120000 C:\WINDOWS\System32\RPCRT4.dll [fFlags=0x0]
740a28.27b0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll)
741a28.27b0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll
742a28.27b0: supR3HardenedDllNotificationCallback: load 00007ffd78910000 LB 0x00097000 C:\WINDOWS\System32\sechost.dll [fFlags=0x0]
743a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'rpcrt4.dll'.
744a28.27b0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\sechost.dll)
745a28.27b0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\sechost.dll
746a28.27b0: '\Device\HarddiskVolume4\Windows\System32\ntdll.dll' has no imports
747a28.27b0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\ntdll.dll)
748a28.27b0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\ntdll.dll
749a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
750a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
751a28.27b0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
752a28.27b0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\ntdll.dll (Input=ntdll.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
753a28.27b0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd78a60000 'C:\WINDOWS\System32\ntdll.dll'
754a28.27b0: Error -104 in supR3HardenedWinReSpawn! (enmWhat=5)
755a28.27b0: Error relaunching VirtualBox VM process: 5
756Command line: '60eaff78-4bdd-042d-2e72-669728efd737-suplib-3rdchild --comment "Server 2003" --startvm 192061b8-05a6-407d-ad04-f630af1563c5 --no-startvm-errormsgbox "--sup-hardening-log=D:\VirtualBox VMs\Server 2003\Logs\VBoxHardening.log"'
757a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'opengl32.dll'.
758a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxglobal.dll'.
759a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
760a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcp100.dll'.
761a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'msvcr100.dll'.
762a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'qt5corevbox.dll'.
763a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'qt5guivbox.dll'.
764a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'qt5widgetsvbox.dll'.
765a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'qt5openglvbox.dll'.
766a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'user32.dll'.
767a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'ole32.dll'.
768a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'oleaut32.dll'.
769a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'winmm.dll'.
770a28.27b0: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll)
771a28.27b0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll
772a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
773a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume4\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
774a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'winmmbase.dll'.
775a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'msvcrt.dll'.
776a28.27b0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\winmm.dll)
777a28.27b0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\winmm.dll
778a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
779a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume4\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
780a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
781a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'combase.dll'.
782a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #23 'rpcrt4.dll'.
783a28.27b0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\oleaut32.dll)
784a28.27b0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\oleaut32.dll
785a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
786a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume4\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
787a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #22 'rpcrt4.dll'.
788a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #56 'gdi32.dll'.
789a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #57 'user32.dll'.
790a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #58 'combase.dll'.
791a28.27b0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\ole32.dll)
792a28.27b0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\ole32.dll
793a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
794a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
795a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'win32u.dll'.
796a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'gdi32.dll'.
797a28.27b0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\user32.dll)
798a28.27b0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\user32.dll
799a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5openglvbox.dll'...
800a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5openglvbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5openglvbox.dll' [rcNtRedir=0xc0150008]
801a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'qt5widgetsvbox.dll'.
802a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'qt5guivbox.dll'.
803a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5corevbox.dll'.
804a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcr100.dll'.
805a28.27b0: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll)
806a28.27b0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll
807a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
808a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
809a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
810a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
811a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5guivbox.dll'.
812a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5corevbox.dll'.
813a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'shell32.dll'.
814a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
815a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
816a28.27b0: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll)
817a28.27b0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll
818a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
819a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
820a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'ole32.dll'.
821a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'opengl32.dll'.
822a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
823a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
824a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'.
825a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
826a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
827a28.27b0: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll)
828a28.27b0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
829a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
830a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
831a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
832a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'shell32.dll'.
833a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ole32.dll'.
834a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'advapi32.dll'.
835a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ws2_32.dll'.
836a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'mpr.dll'.
837a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcp100.dll'.
838a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'msvcr100.dll'.
839a28.27b0: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll)
840a28.27b0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
841a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
842a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
843a28.27b0: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll)
844a28.27b0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll
845a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
846a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
847a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
848a28.27b0: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll)
849a28.27b0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll
850a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
851a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
852a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
853a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
854a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
855a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ws2_32.dll'.
856a28.27b0: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll)
857a28.27b0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll
858a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxglobal.dll'...
859a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxglobal.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\vboxglobal.dll' [rcNtRedir=0xc0150008]
860a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'vboxrt.dll'.
861a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcr100.dll'.
862a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5corevbox.dll'.
863a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5guivbox.dll'.
864a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5widgetsvbox.dll'.
865a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'user32.dll'.
866a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'advapi32.dll'.
867a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'ole32.dll'.
868a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'oleaut32.dll'.
869a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'rpcrt4.dll'.
870a28.27b0: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxGlobal.dll)
871a28.27b0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxGlobal.dll
872a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
873a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume4\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
874a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
875a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'advapi32.dll'.
876a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
877a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'gdi32.dll'.
878a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'glu32.dll'.
879a28.27b0: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\opengl32.dll)
880a28.27b0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\opengl32.dll
881a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'glu32.dll'...
882a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'glu32.dll' -> '\Device\HarddiskVolume4\Windows\System32\glu32.dll' [rcNtRedir=0xc0150008]
883a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
884a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
885a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'opengl32.dll'.
886a28.27b0: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\glu32.dll)
887a28.27b0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\glu32.dll
888a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
889a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
890a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'win32u.dll'.
891a28.27b0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\gdi32.dll)
892a28.27b0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\gdi32.dll
893a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
894a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
895a28.27b0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
896a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
897a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
898a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
899a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'sechost.dll'.
900a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27 'rpcrt4.dll'.
901a28.27b0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\advapi32.dll)
902a28.27b0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\advapi32.dll
903a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
904a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
905a28.27b0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\msvcrt.dll)
906a28.27b0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\msvcrt.dll
907a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
908a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
909a28.27b0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
910a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
911a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume4\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
912a28.27b0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
913a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
914a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume4\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
915a28.27b0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ole32.dll [lacks WinVerifyTrust]
916a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
917a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
918a28.27b0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
919a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
920a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
921a28.27b0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
922a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
923a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
924a28.27b0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
925a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
926a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
927a28.27b0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
928a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
929a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
930a28.27b0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
931a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
932a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
933a28.27b0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
934a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
935a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
936a28.27b0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
937a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
938a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume4\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
939a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'rpcrt4.dll'.
940a28.27b0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\ws2_32.dll)
941a28.27b0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\ws2_32.dll
942a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
943a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
944a28.27b0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
945a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
946a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
947a28.27b0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
948a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
949a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
950a28.27b0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
951a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
952a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
953a28.27b0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
954a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
955a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
956a28.27b0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
957a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
958a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
959a28.27b0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
960a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mpr.dll'...
961a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'mpr.dll' -> '\Device\HarddiskVolume4\Windows\System32\mpr.dll' [rcNtRedir=0xc0150008]
962a28.27b0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\mpr.dll)
963a28.27b0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\mpr.dll
964a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
965a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume4\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
966a28.27b0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ws2_32.dll [lacks WinVerifyTrust]
967a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
968a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
969a28.27b0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
970a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
971a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume4\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
972a28.27b0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ole32.dll [lacks WinVerifyTrust]
973a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
974a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume4\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
975a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #77 'user32.dll'.
976a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #79 'gdi32.dll'.
977a28.27b0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\shell32.dll)
978a28.27b0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\shell32.dll
979a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
980a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
981a28.27b0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
982a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
983a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
984a28.27b0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
985a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
986a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
987a28.27b0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
988a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
989a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
990a28.27b0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
991a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
992a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
993a28.27b0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
994a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
995a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
996a28.27b0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
997a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
998a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume4\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
999a28.27b0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
1000a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
1001a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume4\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
1002a28.27b0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ole32.dll [lacks WinVerifyTrust]
1003a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
1004a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
1005a28.27b0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
1006a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
1007a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
1008a28.27b0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
1009a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
1010a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume4\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
1011a28.27b0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\shell32.dll [lacks WinVerifyTrust]
1012a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
1013a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
1014a28.27b0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
1015a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
1016a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
1017a28.27b0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
1018a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
1019a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
1020a28.27b0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
1021a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
1022a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
1023a28.27b0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
1024a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
1025a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
1026a28.27b0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
1027a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
1028a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
1029a28.27b0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
1030a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
1031a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
1032a28.27b0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
1033a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
1034a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
1035a28.27b0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
1036a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
1037a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
1038a28.27b0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
1039a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
1040a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume4\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
1041a28.27b0: '\Device\HarddiskVolume4\Windows\System32\win32u.dll' has no imports
1042a28.27b0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\win32u.dll)
1043a28.27b0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\win32u.dll
1044a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
1045a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume4\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
1046a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
1047a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #45 'bcryptprimitives.dll'.
1048a28.27b0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\combase.dll)
1049a28.27b0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\combase.dll
1050a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
1051a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
1052a28.27b0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
1053a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
1054a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
1055a28.27b0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
1056a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
1057a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
1058a28.27b0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
1059a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
1060a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
1061a28.27b0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
1062a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
1063a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume4\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
1064a28.27b0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\combase.dll [lacks WinVerifyTrust]
1065a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
1066a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
1067a28.27b0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\msvcp_win.dll)
1068a28.27b0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\msvcp_win.dll
1069a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1070a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1071a28.27b0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1072a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmmbase.dll'...
1073a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmmbase.dll' -> '\Device\HarddiskVolume4\Windows\System32\winmmbase.dll' [rcNtRedir=0xc0150008]
1074a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1075a28.27b0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\winmmbase.dll)
1076a28.27b0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\winmmbase.dll
1077a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1078a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1079a28.27b0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1080a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'...
1081a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume4\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008]
1082a28.27b0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\bcryptprimitives.dll)
1083a28.27b0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\bcryptprimitives.dll
1084a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
1085a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
1086a28.27b0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
1087a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
1088a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
1089a28.27b0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
1090a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
1091a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
1092a28.27b0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
1093a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
1094a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
1095a28.27b0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
1096a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
1097a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
1098a28.27b0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
1099a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'sechost.dll'...
1100a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'sechost.dll' -> '\Device\HarddiskVolume4\Windows\System32\sechost.dll' [rcNtRedir=0xc0150008]
1101a28.27b0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\sechost.dll [lacks WinVerifyTrust]
1102a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1103a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1104a28.27b0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1105a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
1106a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume4\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
1107a28.27b0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\win32u.dll [lacks WinVerifyTrust]
1108a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
1109a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume4\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
1110a28.27b0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
1111a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
1112a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
1113a28.27b0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
1114a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1115a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1116a28.27b0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1117a28.27b0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000a01:<flags> [calling]
1118a28.27b0: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll [lacks WinVerifyTrust]
1119a28.27b0: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
1120a28.27b0: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxGlobal.dll [lacks WinVerifyTrust]
1121a28.27b0: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1122a28.27b0: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
1123a28.27b0: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
1124a28.27b0: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
1125a28.27b0: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
1126a28.27b0: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
1127a28.27b0: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll [lacks WinVerifyTrust]
1128a28.27b0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\winmm.dll [lacks WinVerifyTrust]
1129a28.27b0: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\glu32.dll [lacks WinVerifyTrust]
1130a28.27b0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\mpr.dll [lacks WinVerifyTrust]
1131a28.27b0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\winmmbase.dll [lacks WinVerifyTrust]
1132a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
1133a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #22 'win32u.dll'.
1134a28.27b0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\DXCore.dll)
1135a28.27b0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\DXCore.dll
1136a28.27b0: supR3HardenedDllNotificationCallback: load 00007ffd77e50000 LB 0x0009e000 C:\WINDOWS\System32\msvcrt.dll [fFlags=0x0]
1137a28.27b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1138a28.27b0: supR3HardenedDllNotificationCallback: load 00007ffd76b80000 LB 0x000a3000 C:\WINDOWS\System32\advapi32.dll [fFlags=0x0]
1139a28.27b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
1140a28.27b0: supR3HardenedDllNotificationCallback: load 00007ffd767e0000 LB 0x00021000 C:\WINDOWS\System32\win32u.dll [fFlags=0x0]
1141a28.27b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\win32u.dll [lacks WinVerifyTrust]
1142a28.27b0: supR3HardenedDllNotificationCallback: load 00007ffd76810000 LB 0x000fa000 C:\WINDOWS\System32\ucrtbase.dll [fFlags=0x0]
1143a28.27b0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\ucrtbase.dll)
1144a28.27b0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\ucrtbase.dll
1145a28.27b0: supR3HardenedDllNotificationCallback: load 00007ffd75b10000 LB 0x0009e000 C:\WINDOWS\System32\msvcp_win.dll [fFlags=0x0]
1146a28.27b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust]
1147a28.27b0: supR3HardenedDllNotificationCallback: load 00007ffd76390000 LB 0x00196000 C:\WINDOWS\System32\gdi32full.dll [fFlags=0x0]
1148a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
1149a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #33 'gdi32.dll'.
1150a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'user32.dll'.
1151a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'win32u.dll'.
1152a28.27b0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\gdi32full.dll)
1153a28.27b0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\gdi32full.dll
1154a28.27b0: supR3HardenedDllNotificationCallback: load 00007ffd770b0000 LB 0x00026000 C:\WINDOWS\System32\GDI32.dll [fFlags=0x0]
1155a28.27b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
1156a28.27b0: supR3HardenedDllNotificationCallback: load 00007ffd77b20000 LB 0x00195000 C:\WINDOWS\System32\USER32.dll [fFlags=0x0]
1157a28.27b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
1158a28.27b0: supR3HardenedDllNotificationCallback: load 00007ffd75a10000 LB 0x00080000 C:\WINDOWS\System32\bcryptPrimitives.dll [fFlags=0x0]
1159a28.27b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust]
1160a28.27b0: supR3HardenedDllNotificationCallback: load 00007ffd770e0000 LB 0x00335000 C:\WINDOWS\System32\combase.dll [fFlags=0x0]
1161a28.27b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\combase.dll [lacks WinVerifyTrust]
1162a28.27b0: supR3HardenedDllNotificationCallback: load 00007ffd76340000 LB 0x0004a000 C:\WINDOWS\System32\cfgmgr32.dll [fFlags=0x0]
1163a28.27b0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\cfgmgr32.dll)
1164a28.27b0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\cfgmgr32.dll
1165a28.27b0: supR3HardenedDllNotificationCallback: load 00007ffd74570000 LB 0x00020000 C:\WINDOWS\SYSTEM32\dxcore.dll [fFlags=0x0]
1166a28.27b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\DXCore.dll [lacks WinVerifyTrust]
1167a28.27b0: supR3HardenedDllNotificationCallback: load 00007ffd72410000 LB 0x0002c000 C:\WINDOWS\SYSTEM32\GLU32.dll [fFlags=0x0]
1168a28.27b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\glu32.dll [lacks WinVerifyTrust]
1169a28.27b0: supR3HardenedDllNotificationCallback: load 00007ffd4cfa0000 LB 0x00156000 C:\WINDOWS\SYSTEM32\OPENGL32.dll [fFlags=0x0]
1170a28.27b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
1171a28.27b0: supR3HardenedDllNotificationCallback: load 0000000053eb0000 LB 0x000d2000 C:\Program Files\Oracle\VirtualBox\MSVCR100.dll [fFlags=0x0]
1172a28.27b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
1173a28.27b0: supR3HardenedDllNotificationCallback: load 00000000545e0000 LB 0x00098000 C:\Program Files\Oracle\VirtualBox\MSVCP100.dll [fFlags=0x0]
1174a28.27b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
1175a28.27b0: supR3HardenedDllNotificationCallback: load 00007ffd77cc0000 LB 0x0006f000 C:\WINDOWS\System32\WS2_32.dll [fFlags=0x0]
1176a28.27b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ws2_32.dll [lacks WinVerifyTrust]
1177a28.27b0: supR3HardenedDllNotificationCallback: load 00007ffd23230000 LB 0x005e2000 C:\Program Files\Oracle\VirtualBox\VBoxRT.dll [fFlags=0x0]
1178a28.27b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1179a28.27b0: supR3HardenedDllNotificationCallback: load 00007ffd76e50000 LB 0x000a9000 C:\WINDOWS\System32\shcore.dll [fFlags=0x0]
1180a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1181a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'rpcrt4.dll'.
1182a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #43 'combase.dll'.
1183a28.27b0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\SHCore.dll)
1184a28.27b0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\SHCore.dll
1185a28.27b0: supR3HardenedDllNotificationCallback: load 00007ffd75940000 LB 0x00023000 C:\WINDOWS\System32\profapi.dll [fFlags=0x0]
1186a28.27b0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\profapi.dll)
1187a28.27b0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\profapi.dll
1188a28.27b0: supR3HardenedDllNotificationCallback: load 00007ffd75910000 LB 0x00010000 C:\WINDOWS\System32\UMPDC.dll [fFlags=0x0]
1189a28.27b0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\umpdc.dll)
1190a28.27b0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\umpdc.dll
1191a28.27b0: supR3HardenedDllNotificationCallback: load 00007ffd75990000 LB 0x0004a000 C:\WINDOWS\System32\powrprof.dll [fFlags=0x0]
1192a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'rpcrt4.dll'.
1193a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #19 'umpdc.dll'.
1194a28.27b0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\powrprof.dll)
1195a28.27b0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\powrprof.dll
1196a28.27b0: supR3HardenedDllNotificationCallback: load 00007ffd76b20000 LB 0x00052000 C:\WINDOWS\System32\shlwapi.dll [fFlags=0x0]
1197a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'.
1198a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #44 'gdi32.dll'.
1199a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #45 'user32.dll'.
1200a28.27b0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\shlwapi.dll)
1201a28.27b0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\shlwapi.dll
1202a28.27b0: supR3HardenedDllNotificationCallback: load 00007ffd75970000 LB 0x00011000 C:\WINDOWS\System32\kernel.appcore.dll [fFlags=0x0]
1203a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcrt.dll'.
1204a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'rpcrt4.dll'.
1205a28.27b0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\kernel.appcore.dll)
1206a28.27b0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\kernel.appcore.dll
1207a28.27b0: supR3HardenedDllNotificationCallback: load 00007ffd75bb0000 LB 0x00782000 C:\WINDOWS\System32\windows.storage.dll [fFlags=0x0]
1208a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #31 'combase.dll'.
1209a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #32 'msvcp_win.dll'.
1210a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #39 'rpcrt4.dll'.
1211a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #56 'profapi.dll'.
1212a28.27b0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\windows.storage.dll)
1213a28.27b0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\windows.storage.dll
1214a28.27b0: supR3HardenedDllNotificationCallback: load 00007ffd75af0000 LB 0x00017000 C:\WINDOWS\System32\cryptsp.dll [fFlags=0x0]
1215a28.27b0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\cryptsp.dll)
1216a28.27b0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\cryptsp.dll
1217a28.27b0: supR3HardenedDllNotificationCallback: load 00007ffd77fb0000 LB 0x006e7000 C:\WINDOWS\System32\SHELL32.dll [fFlags=0x0]
1218a28.27b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\shell32.dll [lacks WinVerifyTrust]
1219a28.27b0: supR3HardenedDllNotificationCallback: load 00007ffd77890000 LB 0x00157000 C:\WINDOWS\System32\ole32.dll [fFlags=0x0]
1220a28.27b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ole32.dll [lacks WinVerifyTrust]
1221a28.27b0: supR3HardenedDllNotificationCallback: load 00007ffd64df0000 LB 0x0001b000 C:\WINDOWS\SYSTEM32\MPR.dll [fFlags=0x0]
1222a28.27b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\mpr.dll [lacks WinVerifyTrust]
1223a28.27b0: supR3HardenedDllNotificationCallback: load 0000000053940000 LB 0x00565000 C:\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [fFlags=0x0]
1224a28.27b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
1225a28.27b0: supR3HardenedDllNotificationCallback: load 00007ffd23820000 LB 0x005f7000 C:\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [fFlags=0x0]
1226a28.27b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
1227a28.27b0: supR3HardenedDllNotificationCallback: load 00000000533d0000 LB 0x00561000 C:\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [fFlags=0x0]
1228a28.27b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
1229a28.27b0: supR3HardenedDllNotificationCallback: load 00007ffd76d70000 LB 0x000c5000 C:\WINDOWS\System32\OLEAUT32.dll [fFlags=0x0]
1230a28.27b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
1231a28.27b0: supR3HardenedDllNotificationCallback: load 00007ffd1a550000 LB 0x02387000 C:\Program Files\Oracle\VirtualBox\VBoxGlobal.dll [fFlags=0x0]
1232a28.27b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxGlobal.dll [lacks WinVerifyTrust]
1233a28.27b0: supR3HardenedDllNotificationCallback: load 00000000532f0000 LB 0x00054000 C:\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll [fFlags=0x0]
1234a28.27b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll [lacks WinVerifyTrust]
1235a28.27b0: supR3HardenedDllNotificationCallback: load 00007ffd6cb40000 LB 0x0002d000 C:\WINDOWS\SYSTEM32\WINMMBASE.dll [fFlags=0x0]
1236a28.27b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\winmmbase.dll [lacks WinVerifyTrust]
1237a28.27b0: supR3HardenedDllNotificationCallback: load 00007ffd6cbf0000 LB 0x00024000 C:\WINDOWS\SYSTEM32\WINMM.dll [fFlags=0x0]
1238a28.27b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\winmm.dll [lacks WinVerifyTrust]
1239a28.27b0: supR3HardenedDllNotificationCallback: load 00007ffd37810000 LB 0x00188000 C:\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll [fFlags=0x0]
1240a28.27b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll [lacks WinVerifyTrust]
1241a28.27b0: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
1242a28.27b0: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
1243a28.27b0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd76530000 'api-ms-win-core-synch-l1-2-0'
1244a28.27b0: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
1245a28.27b0: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
1246a28.27b0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd76530000 'api-ms-win-core-fibers-l1-1-1'
1247a28.27b0: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
1248a28.27b0: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
1249a28.27b0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd76530000 'api-ms-win-core-fibers-l1-1-1'
1250a28.27b0: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
1251a28.27b0: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
1252a28.27b0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd76530000 'api-ms-win-core-synch-l1-2-0'
1253a28.27b0: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-l1-2-1) -> 0x0, fPresent=1
1254a28.27b0: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-l1-2-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
1255a28.27b0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd76530000 'api-ms-win-core-localization-l1-2-1'
1256a28.27b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
1257a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'profapi.dll'...
1258a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'profapi.dll' -> '\Device\HarddiskVolume4\Windows\System32\profapi.dll' [rcNtRedir=0xc0150008]
1259a28.27b0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\profapi.dll [lacks WinVerifyTrust]
1260a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
1261a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
1262a28.27b0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
1263a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
1264a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
1265a28.27b0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust]
1266a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
1267a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume4\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
1268a28.27b0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\combase.dll [lacks WinVerifyTrust]
1269a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
1270a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
1271a28.27b0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
1272a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1273a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1274a28.27b0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1275a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
1276a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
1277a28.27b0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
1278a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
1279a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
1280a28.27b0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
1281a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1282a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1283a28.27b0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1284a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'umpdc.dll'...
1285a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'umpdc.dll' -> '\Device\HarddiskVolume4\Windows\System32\umpdc.dll' [rcNtRedir=0xc0150008]
1286a28.27b0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\umpdc.dll [lacks WinVerifyTrust]
1287a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
1288a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
1289a28.27b0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
1290a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
1291a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume4\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
1292a28.27b0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\combase.dll [lacks WinVerifyTrust]
1293a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
1294a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
1295a28.27b0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
1296a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1297a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1298a28.27b0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1299a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
1300a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume4\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
1301a28.27b0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\win32u.dll [lacks WinVerifyTrust]
1302a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
1303a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
1304a28.27b0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
1305a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
1306a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
1307a28.27b0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
1308a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
1309a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
1310a28.27b0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust]
1311a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
1312a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume4\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
1313a28.27b0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\win32u.dll [lacks WinVerifyTrust]
1314a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
1315a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
1316a28.27b0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust]
1317a28.27b0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\kernel32.dll (Input=kernel32, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
1318a28.27b0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd786a0000 'C:\WINDOWS\System32\kernel32.dll'
1319a28.27b0: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-string-l1-1-0) -> 0x0, fPresent=1
1320a28.27b0: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-string-l1-1-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
1321a28.27b0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd76530000 'api-ms-win-core-string-l1-1-0'
1322a28.27b0: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-datetime-l1-1-1) -> 0x0, fPresent=1
1323a28.27b0: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-datetime-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
1324a28.27b0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd76530000 'api-ms-win-core-datetime-l1-1-1'
1325a28.27b0: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-obsolete-l1-2-0) -> 0x0, fPresent=1
1326a28.27b0: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-obsolete-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
1327a28.27b0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd76530000 'api-ms-win-core-localization-obsolete-l1-2-0'
1328a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'user32.dll'.
1329a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #25 'win32u.dll'.
1330a28.27b0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\imm32.dll)
1331a28.27b0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\imm32.dll
1332a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
1333a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume4\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
1334a28.27b0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\win32u.dll [lacks WinVerifyTrust]
1335a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
1336a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
1337a28.27b0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
1338a28.27b0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\IMM32.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
1339a28.27b0: supR3HardenedDllNotificationCallback: load 00007ffd77af0000 LB 0x0002e000 C:\WINDOWS\System32\IMM32.DLL [fFlags=0x0]
1340a28.27b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\imm32.dll [lacks WinVerifyTrust]
1341a28.27b0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd77af0000 'C:\WINDOWS\system32\IMM32.DLL'
1342a28.27b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1343a28.27b0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
1344a28.27b0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd23230000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1345a28.27b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1346a28.27b0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
1347a28.27b0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd23230000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1348a28.27b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1349a28.27b0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
1350a28.27b0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd23230000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1351a28.27b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1352a28.27b0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
1353a28.27b0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd23230000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1354a28.27b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1355a28.27b0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
1356a28.27b0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd23230000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1357a28.27b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1358a28.27b0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd23230000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1359a28.27b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1360a28.27b0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd23230000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1361a28.27b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1362a28.27b0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd23230000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1363a28.27b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1364a28.27b0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd23230000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1365a28.27b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1366a28.27b0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd23230000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1367a28.27b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1368a28.27b0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd23230000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1369a28.27b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1370a28.27b0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd23230000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1371a28.27b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1372a28.27b0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
1373a28.27b0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd23230000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1374a28.27b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1375a28.27b0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd23230000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1376a28.27b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1377a28.27b0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd23230000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1378a28.27b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1379a28.27b0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd23230000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1380a28.27b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1381a28.27b0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd23230000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1382a28.27b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1383a28.27b0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd23230000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1384a28.27b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1385a28.27b0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd23230000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1386a28.27b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1387a28.27b0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd23230000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1388a28.27b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1389a28.27b0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd23230000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1390a28.27b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1391a28.27b0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd23230000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1392a28.27b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1393a28.27b0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd23230000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1394a28.27b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1395a28.27b0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd23230000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1396a28.27b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1397a28.27b0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd23230000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1398a28.27b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1399a28.27b0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd23230000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1400a28.27b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1401a28.27b0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd23230000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1402a28.27b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1403a28.27b0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd23230000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1404a28.27b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1405a28.27b0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
1406a28.27b0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd23230000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1407a28.27b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1408a28.27b0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd23230000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1409a28.27b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1410a28.27b0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd23230000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1411a28.27b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1412a28.27b0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd23230000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1413a28.27b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
1414a28.27b0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\ADVAPI32.DLL (Input=ADVAPI32.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
1415a28.27b0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd76b80000 'C:\WINDOWS\System32\ADVAPI32.DLL'
1416a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'bcryptprimitives.dll'.
1417a28.27b0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\cryptbase.dll)
1418a28.27b0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\cryptbase.dll
1419a28.27b0: supR3HardenedDllNotificationCallback: load 00007ffd75340000 LB 0x0000c000 C:\WINDOWS\SYSTEM32\CRYPTBASE.DLL [fFlags=0x0]
1420a28.27b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\cryptbase.dll [lacks WinVerifyTrust]
1421a28.27b0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd37810000 'C:\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll'
1422a28.27b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
1423a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'...
1424a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume4\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008]
1425a28.27b0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust]
1426a28.27b0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\kernel32.dll (Input=kernel32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
1427a28.27b0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd786a0000 'C:\WINDOWS\System32\kernel32.dll'
1428a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
1429a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'ole32.dll'.
1430a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
1431a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'imm32.dll'.
1432a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'winmm.dll'.
1433a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'oleaut32.dll'.
1434a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'shell32.dll'.
1435a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'advapi32.dll'.
1436a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'qt5guivbox.dll'.
1437a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'qt5corevbox.dll'.
1438a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'msvcr100.dll'.
1439a28.27b0: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\platforms\qwindows.dll)
1440a28.27b0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\platforms\qwindows.dll
1441a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
1442a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
1443a28.27b0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
1444a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
1445a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
1446a28.27b0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
1447a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
1448a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
1449a28.27b0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
1450a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
1451a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
1452a28.27b0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
1453a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
1454a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume4\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
1455a28.27b0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\shell32.dll [lacks WinVerifyTrust]
1456a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
1457a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume4\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
1458a28.27b0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
1459a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
1460a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume4\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
1461a28.27b0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\winmm.dll [lacks WinVerifyTrust]
1462a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'...
1463a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume4\Windows\System32\imm32.dll' [rcNtRedir=0xc0150008]
1464a28.27b0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\imm32.dll [lacks WinVerifyTrust]
1465a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
1466a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
1467a28.27b0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
1468a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
1469a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume4\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
1470a28.27b0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ole32.dll [lacks WinVerifyTrust]
1471a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
1472a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
1473a28.27b0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
1474a28.27b0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
1475a28.27b0: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\platforms\qwindows.dll [lacks WinVerifyTrust]
1476a28.27b0: supR3HardenedDllNotificationCallback: load 00007ffd4ce70000 LB 0x0012e000 C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll [fFlags=0x0]
1477a28.27b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\platforms\qwindows.dll [lacks WinVerifyTrust]
1478a28.27b0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd4ce70000 'C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll'
1479a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1480a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #33 'gdi32.dll'.
1481a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'user32.dll'.
1482a28.27b0: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\uxtheme.dll)
1483a28.27b0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\uxtheme.dll
1484a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
1485a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
1486a28.27b0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
1487a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
1488a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
1489a28.27b0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
1490a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1491a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1492a28.27b0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1493a28.27b0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
1494a28.27b0: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\uxtheme.dll [lacks WinVerifyTrust]
1495a28.27b0: supR3HardenedDllNotificationCallback: load 00007ffd73c70000 LB 0x00099000 C:\WINDOWS\system32\uxtheme.dll [fFlags=0x0]
1496a28.27b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\uxtheme.dll [lacks WinVerifyTrust]
1497a28.27b0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd73c70000 'C:\WINDOWS\system32\uxtheme.dll'
1498a28.27b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
1499a28.27b0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd77b20000 'C:\WINDOWS\system32\user32.dll'
1500a28.27b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\shell32.dll [lacks WinVerifyTrust]
1501a28.27b0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
1502a28.27b0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd77fb0000 'C:\WINDOWS\system32\shell32.dll'
1503a28.27b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\SHCore.dll [lacks WinVerifyTrust]
1504a28.27b0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\SHCore.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
1505a28.27b0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd76e50000 'C:\WINDOWS\system32\SHCore.dll'
1506a28.27b0: supR3HardenedMonitor_LdrLoadDll: error opening 'C:\WINDOWS\system32\wintab32.dll': 0 (NtPath=\??\C:\WINDOWS\system32\wintab32.dll; Input=C:\WINDOWS\system32\wintab32.dll; rcNtGetDll=0x0
1507a28.27b0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000034 'C:\WINDOWS\system32\wintab32.dll'
1508a28.27b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\winmm.dll [lacks WinVerifyTrust]
1509a28.27b0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\winmm.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
1510a28.27b0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd6cbf0000 'C:\WINDOWS\system32\winmm.dll'
1511a28.27b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\winmm.dll [lacks WinVerifyTrust]
1512a28.27b0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\winmm.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
1513a28.27b0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd6cbf0000 'C:\WINDOWS\system32\winmm.dll'
1514a28.27b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\shell32.dll [lacks WinVerifyTrust]
1515a28.27b0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
1516a28.27b0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd77fb0000 'C:\WINDOWS\system32\shell32.dll'
1517a28.27b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\uxtheme.dll [lacks WinVerifyTrust]
1518a28.27b0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
1519a28.27b0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd73c70000 'C:\WINDOWS\system32\uxtheme.dll'
1520a28.27b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
1521a28.27b0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd770b0000 'C:\WINDOWS\system32\gdi32.dll'
1522a28.27b0: supR3HardenedDllNotificationCallback: load 00007ffd76c30000 LB 0x00135000 C:\WINDOWS\System32\MSCTF.dll [fFlags=0x0]
1523a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1524a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'oleaut32.dll'.
1525a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #38 'user32.dll'.
1526a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #39 'gdi32.dll'.
1527a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #40 'imm32.dll'.
1528a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #41 'advapi32.dll'.
1529a28.27b0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\msctf.dll)
1530a28.27b0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\msctf.dll
1531a28.27b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
1532a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
1533a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
1534a28.27b0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
1535a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'...
1536a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume4\Windows\System32\imm32.dll' [rcNtRedir=0xc0150008]
1537a28.27b0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\imm32.dll [lacks WinVerifyTrust]
1538a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
1539a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
1540a28.27b0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
1541a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
1542a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
1543a28.27b0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
1544a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
1545a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume4\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
1546a28.27b0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
1547a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1548a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1549a28.27b0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1550a28.27b0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd77d30000 'C:\WINDOWS\System32\rpcrt4.dll'
1551a28.27b0: supR3HardenedDllNotificationCallback: load 00007ffd77ef0000 LB 0x000a2000 C:\WINDOWS\System32\clbcatq.dll [fFlags=0x0]
1552a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1553a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #30 'rpcrt4.dll'.
1554a28.27b0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\clbcatq.dll)
1555a28.27b0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\clbcatq.dll
1556a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1557a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'shcore.dll'.
1558a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #29 'combase.dll'.
1559a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'd3d11.dll'.
1560a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'dcomp.dll'.
1561a28.27b0: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\DataExchange.dll)
1562a28.27b0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\DataExchange.dll
1563a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dcomp.dll'...
1564a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'dcomp.dll' -> '\Device\HarddiskVolume4\Windows\System32\dcomp.dll' [rcNtRedir=0xc0150008]
1565a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'win32u.dll'.
1566a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp_win.dll'.
1567a28.27b0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\dcomp.dll)
1568a28.27b0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\dcomp.dll
1569a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'd3d11.dll'...
1570a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'd3d11.dll' -> '\Device\HarddiskVolume4\Windows\System32\d3d11.dll' [rcNtRedir=0xc0150008]
1571a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1572a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #24 'dxgi.dll'.
1573a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27 'win32u.dll'.
1574a28.27b0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\d3d11.dll)
1575a28.27b0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\d3d11.dll
1576a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
1577a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume4\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
1578a28.27b0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\combase.dll [lacks WinVerifyTrust]
1579a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shcore.dll'...
1580a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'shcore.dll' -> '\Device\HarddiskVolume4\Windows\System32\shcore.dll' [rcNtRedir=0xc0150008]
1581a28.27b0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\SHCore.dll [lacks WinVerifyTrust]
1582a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1583a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1584a28.27b0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1585a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
1586a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
1587a28.27b0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
1588a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1589a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1590a28.27b0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1591a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
1592a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume4\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
1593a28.27b0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\win32u.dll [lacks WinVerifyTrust]
1594a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dxgi.dll'...
1595a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'dxgi.dll' -> '\Device\HarddiskVolume4\Windows\System32\dxgi.dll' [rcNtRedir=0xc0150008]
1596a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1597a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'win32u.dll'.
1598a28.27b0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\dxgi.dll)
1599a28.27b0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\dxgi.dll
1600a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1601a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1602a28.27b0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1603a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
1604a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
1605a28.27b0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust]
1606a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
1607a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume4\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
1608a28.27b0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\win32u.dll [lacks WinVerifyTrust]
1609a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
1610a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume4\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
1611a28.27b0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\win32u.dll [lacks WinVerifyTrust]
1612a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1613a28.27b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1614a28.27b0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1615a28.27b0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\dataexchange.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
1616a28.27b0: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\DataExchange.dll [lacks WinVerifyTrust]
1617a28.27b0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\d3d11.dll [lacks WinVerifyTrust]
1618a28.27b0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\dcomp.dll [lacks WinVerifyTrust]
1619a28.27b0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\dxgi.dll [lacks WinVerifyTrust]
1620a28.27b0: supR3HardenedDllNotificationCallback: load 00007ffd74600000 LB 0x000eb000 C:\WINDOWS\system32\dxgi.dll [fFlags=0x0]
1621a28.27b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\dxgi.dll [lacks WinVerifyTrust]
1622a28.27b0: supR3HardenedDllNotificationCallback: load 00007ffd730d0000 LB 0x0025b000 C:\WINDOWS\system32\d3d11.dll [fFlags=0x0]
1623a28.27b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\d3d11.dll [lacks WinVerifyTrust]
1624a28.27b0: supR3HardenedDllNotificationCallback: load 00007ffd73410000 LB 0x001dd000 C:\WINDOWS\system32\dcomp.dll [fFlags=0x0]
1625a28.27b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\dcomp.dll [lacks WinVerifyTrust]
1626a28.27b0: supR3HardenedDllNotificationCallback: load 00007ffd5a440000 LB 0x0003a000 C:\WINDOWS\system32\dataexchange.dll [fFlags=0x0]
1627a28.27b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\DataExchange.dll [lacks WinVerifyTrust]
1628a28.27b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
1629a28.27b0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd770b0000 'C:\WINDOWS\System32\gdi32.dll'
1630a28.27b0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd5a440000 'C:\WINDOWS\system32\dataexchange.dll'
1631a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rmclient.dll'.
1632a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #31 'rpcrt4.dll'.
1633a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #47 'combase.dll'.
1634a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #50 'msvcp_win.dll'.
1635a28.27b0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\twinapi.appcore.dll)
1636a28.27b0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\twinapi.appcore.dll
1637a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1638a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'rpcrt4.dll'.
1639a28.27b0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\rmclient.dll)
1640a28.27b0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\rmclient.dll
1641a28.27b0: supR3HardenedDllNotificationCallback: load 00007ffd74180000 LB 0x00029000 C:\WINDOWS\system32\RMCLIENT.dll [fFlags=0x0]
1642a28.27b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rmclient.dll [lacks WinVerifyTrust]
1643a28.27b0: supR3HardenedDllNotificationCallback: load 00007ffd73d30000 LB 0x00262000 C:\WINDOWS\system32\twinapi.appcore.dll [fFlags=0x0]
1644a28.27b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\twinapi.appcore.dll [lacks WinVerifyTrust]
1645a28.3db4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
1646a28.3db4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #16 'rpcrt4.dll'.
1647a28.3db4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #28 'devobj.dll'.
1648a28.3db4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\MMDevAPI.dll)
1649a28.3db4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\MMDevAPI.dll
1650a28.3db4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'cfgmgr32.dll'.
1651a28.3db4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\devobj.dll)
1652a28.3db4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\devobj.dll
1653a28.3db4: supR3HardenedDllNotificationCallback: load 00007ffd75710000 LB 0x0002a000 C:\WINDOWS\SYSTEM32\DEVOBJ.dll [fFlags=0x0]
1654a28.3db4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\devobj.dll [lacks WinVerifyTrust]
1655a28.3db4: supR3HardenedDllNotificationCallback: load 00007ffd6fe40000 LB 0x00072000 C:\WINDOWS\SYSTEM32\MMDevAPI.DLL [fFlags=0x0]
1656a28.3db4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
1657a28.3db4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1658a28.3db4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'mmdevapi.dll'.
1659a28.3db4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27 'ksuser.dll'.
1660a28.3db4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #28 'avrt.dll'.
1661a28.3db4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\wdmaud.drv)
1662a28.3db4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\wdmaud.drv
1663a28.3db4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'avrt.dll'...
1664a28.3db4: supR3HardenedWinVerifyCacheProcessImportTodos: 'avrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\avrt.dll' [rcNtRedir=0xc0150008]
1665a28.3db4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\avrt.dll)
1666a28.3db4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\avrt.dll
1667a28.3db4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ksuser.dll'...
1668a28.3db4: supR3HardenedWinVerifyCacheProcessImportTodos: 'ksuser.dll' -> '\Device\HarddiskVolume4\Windows\System32\ksuser.dll' [rcNtRedir=0xc0150008]
1669a28.3db4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1670a28.3db4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\ksuser.dll)
1671a28.3db4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\ksuser.dll
1672a28.3db4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mmdevapi.dll'...
1673a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1674a28.3db4: supR3HardenedWinVerifyCacheProcessImportTodos: 'mmdevapi.dll' -> '\Device\HarddiskVolume4\Windows\System32\mmdevapi.dll' [rcNtRedir=0xc0150008]
1675a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #15 'rpcrt4.dll'.
1676a28.3db4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
1677a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #19 'coreuicomponents.dll'.
1678a28.3db4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1679a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #20 'coremessaging.dll'.
1680a28.3db4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1681a28.27b0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\TextInputFramework.dll)
1682a28.3db4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1683a28.27b0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\TextInputFramework.dll
1684a28.3db4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'cfgmgr32.dll'...
1685a28.3db4: supR3HardenedWinVerifyCacheProcessImportTodos: 'cfgmgr32.dll' -> '\Device\HarddiskVolume4\Windows\System32\cfgmgr32.dll' [rcNtRedir=0xc0150008]
1686a28.3db4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\cfgmgr32.dll [lacks WinVerifyTrust]
1687a28.3db4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'devobj.dll'...
1688a28.3db4: supR3HardenedWinVerifyCacheProcessImportTodos: 'devobj.dll' -> '\Device\HarddiskVolume4\Windows\System32\devobj.dll' [rcNtRedir=0xc0150008]
1689a28.3db4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\devobj.dll [lacks WinVerifyTrust]
1690a28.3db4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
1691a28.3db4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
1692a28.3db4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
1693a28.3db4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
1694a28.3db4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
1695a28.3db4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust]
1696a28.3db4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
1697a28.3db4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
1698a28.3db4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
1699a28.3db4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1700a28.3db4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1701a28.3db4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1702a28.3db4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
1703a28.3db4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
1704a28.3db4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust]
1705a28.3db4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
1706a28.3db4: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume4\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
1707a28.3db4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\combase.dll [lacks WinVerifyTrust]
1708a28.3db4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
1709a28.3db4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
1710a28.3db4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
1711a28.3db4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rmclient.dll'...
1712a28.3db4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rmclient.dll' -> '\Device\HarddiskVolume4\Windows\System32\rmclient.dll' [rcNtRedir=0xc0150008]
1713a28.3db4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rmclient.dll [lacks WinVerifyTrust]
1714a28.3db4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coremessaging.dll'...
1715a28.3db4: supR3HardenedWinVerifyCacheProcessImportTodos: 'coremessaging.dll' -> '\Device\HarddiskVolume4\Windows\System32\coremessaging.dll' [rcNtRedir=0xc0150008]
1716a28.3db4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1717a28.3db4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\CoreMessaging.dll)
1718a28.3db4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\CoreMessaging.dll
1719a28.3db4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coreuicomponents.dll'...
1720a28.3db4: supR3HardenedWinVerifyCacheProcessImportTodos: 'coreuicomponents.dll' -> '\Device\HarddiskVolume4\Windows\System32\coreuicomponents.dll' [rcNtRedir=0xc0150008]
1721a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1722a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'coremessaging.dll'.
1723a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #47 'shcore.dll'.
1724a28.27b0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\CoreUIComponents.dll)
1725a28.27b0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\CoreUIComponents.dll
1726a28.27b0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\CoreMessaging.dll [lacks WinVerifyTrust]
1727a28.27b0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\ntmarta.dll)
1728a28.27b0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\ntmarta.dll
1729a28.3db4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1730a28.3db4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'coremessaging.dll'.
1731a28.3db4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #47 'shcore.dll'.
1732a28.3db4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\CoreUIComponents.dll)
1733a28.3db4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
1734a28.3db4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
1735a28.3db4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
1736a28.3db4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1737a28.3db4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1738a28.3db4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1739a28.3db4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1740a28.3db4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1741a28.3db4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1742a28.3db4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shcore.dll'...
1743a28.3db4: supR3HardenedWinVerifyCacheProcessImportTodos: 'shcore.dll' -> '\Device\HarddiskVolume4\Windows\System32\shcore.dll' [rcNtRedir=0xc0150008]
1744a28.3db4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\SHCore.dll [lacks WinVerifyTrust]
1745a28.3db4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coremessaging.dll'...
1746a28.3db4: supR3HardenedWinVerifyCacheProcessImportTodos: 'coremessaging.dll' -> '\Device\HarddiskVolume4\Windows\System32\coremessaging.dll' [rcNtRedir=0xc0150008]
1747a28.3db4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\CoreMessaging.dll [lacks WinVerifyTrust]
1748a28.3db4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1749a28.3db4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1750a28.3db4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1751a28.3db4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shcore.dll'...
1752a28.3db4: supR3HardenedWinVerifyCacheProcessImportTodos: 'shcore.dll' -> '\Device\HarddiskVolume4\Windows\System32\shcore.dll' [rcNtRedir=0xc0150008]
1753a28.3db4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\SHCore.dll [lacks WinVerifyTrust]
1754a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'combase.dll'.
1755a28.3db4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coremessaging.dll'...
1756a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #24 'rpcrt4.dll'.
1757a28.3db4: supR3HardenedWinVerifyCacheProcessImportTodos: 'coremessaging.dll' -> '\Device\HarddiskVolume4\Windows\System32\coremessaging.dll' [rcNtRedir=0xc0150008]
1758a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #32 'bcryptprimitives.dll'.
1759a28.3db4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\CoreMessaging.dll [lacks WinVerifyTrust]
1760a28.27b0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\WinTypes.dll)
1761a28.3db4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1762a28.27b0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\WinTypes.dll
1763a28.3db4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1764a28.3db4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1765a28.3db4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1766a28.3db4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1767a28.27b0: supR3HardenedDllNotificationCallback: load 00007ffd74a10000 LB 0x00031000 C:\WINDOWS\SYSTEM32\ntmarta.dll [fFlags=0x0]
1768a28.3db4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1769a28.27b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ntmarta.dll [lacks WinVerifyTrust]
1770a28.3db4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'...
1771a28.27b0: supR3HardenedDllNotificationCallback: load 00007ffd73330000 LB 0x000d4000 C:\WINDOWS\System32\CoreMessaging.dll [fFlags=0x0]
1772a28.3db4: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume4\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008]
1773a28.27b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\CoreMessaging.dll [lacks WinVerifyTrust]
1774a28.3db4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust]
1775a28.27b0: supR3HardenedDllNotificationCallback: load 00007ffd71270000 LB 0x00153000 C:\WINDOWS\SYSTEM32\wintypes.dll [fFlags=0x0]
1776a28.3db4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
1777a28.27b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\WinTypes.dll [lacks WinVerifyTrust]
1778a28.3db4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
1779a28.27b0: supR3HardenedDllNotificationCallback: load 00007ffd6b8d0000 LB 0x0032a000 C:\WINDOWS\System32\CoreUIComponents.dll [fFlags=0x0]
1780a28.3db4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
1781a28.27b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\CoreUIComponents.dll [lacks WinVerifyTrust]
1782a28.3db4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
1783a28.27b0: supR3HardenedDllNotificationCallback: load 00007ffd6b260000 LB 0x0009e000 C:\WINDOWS\System32\TextInputFramework.dll [fFlags=0x0]
1784a28.3db4: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume4\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
1785a28.27b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\TextInputFramework.dll [lacks WinVerifyTrust]
1786a28.3db4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\combase.dll [lacks WinVerifyTrust]
1787a28.3db4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
1788a28.27b0: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(ext-ms-win-rtcore-ntuser-window-ext-l1-1-0.dll) -> 0x0, fPresent=1
1789a28.27b0: supR3HardenedMonitor_LdrLoadDll: pName=ext-ms-win-rtcore-ntuser-window-ext-l1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
1790a28.27b0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd77b20000 'ext-ms-win-rtcore-ntuser-window-ext-l1-1-0.dll'
1791a28.27b0: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(ext-ms-win-rtcore-ntuser-integration-l1-1-0.dll) -> 0x0, fPresent=1
1792a28.27b0: supR3HardenedMonitor_LdrLoadDll: pName=ext-ms-win-rtcore-ntuser-integration-l1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
1793a28.27b0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd77b20000 'ext-ms-win-rtcore-ntuser-integration-l1-1-0.dll'
1794a28.27b0: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-com-l1-1-0.dll) -> 0x0, fPresent=1
1795a28.27b0: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-com-l1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
1796a28.27b0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd770e0000 'api-ms-win-core-com-l1-1-0.dll'
1797a28.3db4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
1798a28.3db4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ksuser.dll [lacks WinVerifyTrust]
1799a28.3db4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\avrt.dll [lacks WinVerifyTrust]
1800a28.3db4: supR3HardenedDllNotificationCallback: load 00007ffd6ef40000 LB 0x00009000 C:\WINDOWS\SYSTEM32\ksuser.dll [fFlags=0x0]
1801a28.3db4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ksuser.dll [lacks WinVerifyTrust]
1802a28.3db4: supR3HardenedDllNotificationCallback: load 00007ffd6bee0000 LB 0x0000a000 C:\WINDOWS\SYSTEM32\AVRT.dll [fFlags=0x0]
1803a28.3db4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\avrt.dll [lacks WinVerifyTrust]
1804a28.3db4: supR3HardenedDllNotificationCallback: load 00007ffd50770000 LB 0x00044000 C:\WINDOWS\System32\wdmaud.drv [fFlags=0x0]
1805a28.3db4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
1806a28.3db4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd50770000 'C:\WINDOWS\System32\wdmaud.drv'
1807a28.3db4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
1808a28.3db4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
1809a28.3db4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd50770000 'C:\WINDOWS\System32\wdmaud.drv'
1810a28.3db4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
1811a28.3db4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\MMDEVAPI.DLL (Input=MMDEVAPI.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
1812a28.3db4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd6fe40000 'C:\WINDOWS\System32\MMDEVAPI.DLL'
1813a28.27b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1814a28.27b0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\iertutil.dll)
1815a28.27b0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\iertutil.dll
1816a28.27b0: supR3HardenedDllNotificationCallback: load 00007ffd6d000000 LB 0x002a6000 C:\WINDOWS\System32\iertutil.dll [fFlags=0x0]
1817a28.27b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\iertutil.dll [lacks WinVerifyTrust]
1818a28.3db4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
1819a28.3db4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1820a28.27b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msctf.dll [lacks WinVerifyTrust]
1821a28.3db4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1822a28.27b0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\MSCTF.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
1823a28.3db4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1824a28.27b0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd76c30000 'C:\WINDOWS\System32\MSCTF.dll'
1825a28.3db4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
1826a28.3db4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd50770000 'C:\WINDOWS\System32\wdmaud.drv'
1827a28.3db4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
1828a28.3db4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
1829a28.3db4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd50770000 'C:\WINDOWS\System32\wdmaud.drv'
1830a28.3db4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
1831a28.3db4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
1832a28.3db4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd50770000 'C:\WINDOWS\System32\wdmaud.drv'
1833a28.3db4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
1834a28.3db4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'rpcrt4.dll'.
1835a28.3db4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'oleaut32.dll'.
1836a28.3db4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #29 'mmdevapi.dll'.
1837a28.3db4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\AudioSes.dll)
1838a28.3db4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\AudioSes.dll
1839a28.3db4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mmdevapi.dll'...
1840a28.3db4: supR3HardenedWinVerifyCacheProcessImportTodos: 'mmdevapi.dll' -> '\Device\HarddiskVolume4\Windows\System32\mmdevapi.dll' [rcNtRedir=0xc0150008]
1841a28.3db4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
1842a28.3db4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
1843a28.3db4: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume4\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
1844a28.3db4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
1845a28.3db4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
1846a28.3db4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
1847a28.3db4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
1848a28.3db4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
1849a28.3db4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
1850a28.3db4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust]
1851a28.3db4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\AUDIOSES.DLL (Input=AUDIOSES.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
1852a28.3db4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\AudioSes.dll [lacks WinVerifyTrust]
1853a28.3db4: supR3HardenedDllNotificationCallback: load 00007ffd6fec0000 LB 0x0015d000 C:\WINDOWS\System32\AUDIOSES.DLL [fFlags=0x0]
1854a28.3db4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\AudioSes.dll [lacks WinVerifyTrust]
1855a28.3db4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd6fec0000 'C:\WINDOWS\System32\AUDIOSES.DLL'
1856a28.3db4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
1857a28.3db4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
1858a28.3db4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd50770000 'C:\WINDOWS\System32\wdmaud.drv'
1859a28.3db4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
1860a28.3db4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
1861a28.3db4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd50770000 'C:\WINDOWS\System32\wdmaud.drv'
1862a28.3db4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
1863a28.3db4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd50770000 'C:\WINDOWS\System32\wdmaud.drv'
1864a28.3db4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
1865a28.3db4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd50770000 'C:\WINDOWS\System32\wdmaud.drv'
1866a28.3db4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
1867a28.3db4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd50770000 'C:\WINDOWS\System32\wdmaud.drv'
1868a28.3db4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
1869a28.3db4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd50770000 'C:\WINDOWS\System32\wdmaud.drv'
1870a28.3db4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1871a28.3db4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'mmdevapi.dll'.
1872a28.3db4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'msacm32.dll'.
1873a28.3db4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'winmmbase.dll'.
1874a28.3db4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\msacm32.drv)
1875a28.3db4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\msacm32.drv
1876a28.3db4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmmbase.dll'...
1877a28.3db4: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmmbase.dll' -> '\Device\HarddiskVolume4\Windows\System32\winmmbase.dll' [rcNtRedir=0xc0150008]
1878a28.3db4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\winmmbase.dll [lacks WinVerifyTrust]
1879a28.3db4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msacm32.dll'...
1880a28.3db4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msacm32.dll' -> '\Device\HarddiskVolume4\Windows\System32\msacm32.dll' [rcNtRedir=0xc0150008]
1881a28.3db4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1882a28.3db4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\msacm32.dll)
1883a28.3db4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\msacm32.dll
1884a28.3db4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mmdevapi.dll'...
1885a28.3db4: supR3HardenedWinVerifyCacheProcessImportTodos: 'mmdevapi.dll' -> '\Device\HarddiskVolume4\Windows\System32\mmdevapi.dll' [rcNtRedir=0xc0150008]
1886a28.3db4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
1887a28.3db4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1888a28.3db4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1889a28.3db4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1890a28.3db4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1891a28.3db4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1892a28.3db4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1893a28.3db4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
1894a28.3db4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
1895a28.3db4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msacm32.dll [lacks WinVerifyTrust]
1896a28.3db4: supR3HardenedDllNotificationCallback: load 00007ffd6c410000 LB 0x0001c000 C:\WINDOWS\SYSTEM32\MSACM32.dll [fFlags=0x0]
1897a28.3db4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msacm32.dll [lacks WinVerifyTrust]
1898a28.3db4: supR3HardenedDllNotificationCallback: load 00007ffd6e520000 LB 0x0000d000 C:\WINDOWS\System32\msacm32.drv [fFlags=0x0]
1899a28.3db4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
1900a28.3db4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd6e520000 'C:\WINDOWS\System32\msacm32.drv'
1901a28.3db4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
1902a28.3db4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
1903a28.3db4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd6e520000 'C:\WINDOWS\System32\msacm32.drv'
1904a28.3db4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
1905a28.3db4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
1906a28.3db4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd6e520000 'C:\WINDOWS\System32\msacm32.drv'
1907a28.3db4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
1908a28.3db4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
1909a28.3db4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd6e520000 'C:\WINDOWS\System32\msacm32.drv'
1910a28.3db4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
1911a28.3db4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
1912a28.3db4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd6e520000 'C:\WINDOWS\System32\msacm32.drv'
1913a28.3db4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
1914a28.3db4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
1915a28.3db4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd6e520000 'C:\WINDOWS\System32\msacm32.drv'
1916a28.3db4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
1917a28.3db4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
1918a28.3db4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd6e520000 'C:\WINDOWS\System32\msacm32.drv'
1919a28.3db4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
1920a28.3db4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd6e520000 'C:\WINDOWS\System32\msacm32.drv'
1921a28.3db4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
1922a28.3db4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd6e520000 'C:\WINDOWS\System32\msacm32.drv'
1923a28.3db4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
1924a28.3db4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd6e520000 'C:\WINDOWS\System32\msacm32.drv'
1925a28.3db4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1926a28.3db4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'winmm.dll'.
1927a28.3db4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\midimap.dll)
1928a28.3db4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\midimap.dll
1929a28.3db4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
1930a28.3db4: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume4\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
1931a28.3db4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\winmm.dll [lacks WinVerifyTrust]
1932a28.3db4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1933a28.3db4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1934a28.3db4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1935a28.3db4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
1936a28.3db4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\midimap.dll [lacks WinVerifyTrust]
1937a28.3db4: supR3HardenedDllNotificationCallback: load 00007ffd6e430000 LB 0x0000a000 C:\WINDOWS\System32\midimap.dll [fFlags=0x0]
1938a28.3db4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\midimap.dll [lacks WinVerifyTrust]
1939a28.3db4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd6e430000 'C:\WINDOWS\System32\midimap.dll'
1940a28.3db4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\midimap.dll [lacks WinVerifyTrust]
1941a28.3db4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
1942a28.3db4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd6e430000 'C:\WINDOWS\System32\midimap.dll'
1943a28.3db4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\midimap.dll [lacks WinVerifyTrust]
1944a28.3db4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
1945a28.3db4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd6e430000 'C:\WINDOWS\System32\midimap.dll'
1946a28.3db4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\midimap.dll [lacks WinVerifyTrust]
1947a28.3db4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
1948a28.3db4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd6e430000 'C:\WINDOWS\System32\midimap.dll'
1949a28.2100: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
1950a28.2100: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\MMDevApi.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
1951a28.2100: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd6fe40000 'C:\WINDOWS\System32\MMDevApi.dll'
1952416c.4cc: supR3HardNtChildWaitFor[1]: Quitting: ExitCode=0x1 (rcNtWait=0x0, rcNt1=0x0, rcNt2=0x103, rcNt3=0x103, 29659 ms, the end);

© 2024 Oracle Support Privacy / Do Not Sell My Info Terms of Use Trademark Policy