VirtualBox

Ticket #20219: VBoxHardening.log

File VBoxHardening.log, 172.4 KB (added by WillH, 4 years ago)

Per error message, this is the log file that contains details on the error

Line 
12e30.a3c: Log file opened: 6.1.16r140961 g_hStartupLog=0000000000000074 g_uNtVerCombined=0xa04a6100
22e30.a3c: \SystemRoot\System32\ntdll.dll:
32e30.a3c: CreationTime: 2021-02-14T09:13:34.080301900Z
42e30.a3c: LastWriteTime: 2021-02-14T09:13:34.113530200Z
52e30.a3c: ChangeTime: 2021-02-14T16:05:31.824563400Z
62e30.a3c: FileAttributes: 0x20
72e30.a3c: Size: 0x1ee738
82e30.a3c: NT Headers: 0xe8
92e30.a3c: Timestamp: 0x4544b4a1
102e30.a3c: Machine: 0x8664 - amd64
112e30.a3c: Timestamp: 0x4544b4a1
122e30.a3c: Image Version: 10.0
132e30.a3c: SizeOfImage: 0x1f6000 (2056192)
142e30.a3c: Resource Dir: 0x185000 LB 0x6fd28
152e30.a3c: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
162e30.a3c: [Raw version resource data: 0x1850f0 LB 0x380, codepage 0x0 (reserved 0x0)]
172e30.a3c: ProductName: Microsoft® Windows® Operating System
182e30.a3c: ProductVersion: 10.0.19041.804
192e30.a3c: FileVersion: 10.0.19041.804 (WinBuild.160101.0800)
202e30.a3c: FileDescription: NT Layer DLL
212e30.a3c: \SystemRoot\System32\kernel32.dll:
222e30.a3c: CreationTime: 2021-02-14T09:13:21.528882900Z
232e30.a3c: LastWriteTime: 2021-02-14T09:13:21.544531500Z
242e30.a3c: ChangeTime: 2021-02-14T16:05:30.753702200Z
252e30.a3c: FileAttributes: 0x20
262e30.a3c: Size: 0xbac30
272e30.a3c: NT Headers: 0xe8
282e30.a3c: Timestamp: 0xd714134a
292e30.a3c: Machine: 0x8664 - amd64
302e30.a3c: Timestamp: 0xd714134a
312e30.a3c: Image Version: 10.0
322e30.a3c: SizeOfImage: 0xbd000 (774144)
332e30.a3c: Resource Dir: 0xbb000 LB 0x520
342e30.a3c: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
352e30.a3c: [Raw version resource data: 0xbb0b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
362e30.a3c: ProductName: Microsoft® Windows® Operating System
372e30.a3c: ProductVersion: 10.0.19041.804
382e30.a3c: FileVersion: 10.0.19041.804 (WinBuild.160101.0800)
392e30.a3c: FileDescription: Windows NT BASE API Client DLL
402e30.a3c: \SystemRoot\System32\KernelBase.dll:
412e30.a3c: CreationTime: 2021-02-14T09:13:34.782867900Z
422e30.a3c: LastWriteTime: 2021-02-14T09:13:34.843436900Z
432e30.a3c: ChangeTime: 2021-02-14T16:05:31.587798900Z
442e30.a3c: FileAttributes: 0x20
452e30.a3c: Size: 0x2c9798
462e30.a3c: NT Headers: 0xf0
472e30.a3c: Timestamp: 0xe9c5eae
482e30.a3c: Machine: 0x8664 - amd64
492e30.a3c: Timestamp: 0xe9c5eae
502e30.a3c: Image Version: 10.0
512e30.a3c: SizeOfImage: 0x2c9000 (2920448)
522e30.a3c: Resource Dir: 0x2a0000 LB 0x548
532e30.a3c: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
542e30.a3c: [Raw version resource data: 0x2a00b0 LB 0x3bc, codepage 0x0 (reserved 0x0)]
552e30.a3c: ProductName: Microsoft® Windows® Operating System
562e30.a3c: ProductVersion: 10.0.19041.804
572e30.a3c: FileVersion: 10.0.19041.804 (WinBuild.160101.0800)
582e30.a3c: FileDescription: Windows NT BASE API Client DLL
592e30.a3c: \SystemRoot\System32\apisetschema.dll:
602e30.a3c: CreationTime: 2019-12-07T09:08:13.518339400Z
612e30.a3c: LastWriteTime: 2019-12-07T09:08:13.518339400Z
622e30.a3c: ChangeTime: 2021-02-14T09:14:21.940784700Z
632e30.a3c: FileAttributes: 0x20
642e30.a3c: Size: 0x1f538
652e30.a3c: NT Headers: 0xd0
662e30.a3c: Timestamp: 0x31288ce0
672e30.a3c: Machine: 0x8664 - amd64
682e30.a3c: Timestamp: 0x31288ce0
692e30.a3c: Image Version: 10.0
702e30.a3c: SizeOfImage: 0x20000 (131072)
712e30.a3c: Resource Dir: 0x1f000 LB 0x408
722e30.a3c: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
732e30.a3c: [Raw version resource data: 0x1f060 LB 0x3a8, codepage 0x0 (reserved 0x0)]
742e30.a3c: ProductName: Microsoft® Windows® Operating System
752e30.a3c: ProductVersion: 10.0.19041.1
762e30.a3c: FileVersion: 10.0.19041.1 (WinBuild.160101.0800)
772e30.a3c: FileDescription: ApiSet Schema DLL
782e30.a3c: supR3HardenedWinFindAdversaries: 0x0
792e30.a3c: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
802e30.a3c: Calling main()
812e30.a3c: SUPR3HardenedMain: pszProgName=VirtualBoxVM fFlags=0x2
822e30.a3c: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
832e30.a3c: SUPR3HardenedMain: Respawn #1
842e30.a3c: System32: \Device\HarddiskVolume3\Windows\System32
852e30.a3c: WinSxS: \Device\HarddiskVolume3\Windows\WinSxS
862e30.a3c: KnownDllPath: C:\windows\System32
872e30.a3c: supR3HardenedWinInit: Performing a limited self purification...
882e30.a3c: supHardNtVpScanVirtualMemory: enmKind=SELF_PURIFICATION
892e30.a3c: *0000000000000000-000000000003ffff 0x0001/0x0000 0x0000000
902e30.a3c: *0000000000040000-000000000004ffff 0x0004/0x0004 0x0040000
912e30.a3c: 0000000000050000-000000000005ffff 0x0001/0x0000 0x0000000
922e30.a3c: *0000000000060000-000000000007cfff 0x0002/0x0002 0x0040000
932e30.a3c: 000000000007d000-000000000007ffff 0x0001/0x0000 0x0000000
942e30.a3c: *0000000000080000-0000000000138fff 0x0000/0x0004 0x0020000
952e30.a3c: 0000000000139000-000000000013bfff 0x0104/0x0004 0x0020000
962e30.a3c: 000000000013c000-000000000017ffff 0x0004/0x0004 0x0020000
972e30.a3c: *0000000000180000-0000000000183fff 0x0002/0x0002 0x0040000
982e30.a3c: 0000000000184000-000000000018ffff 0x0001/0x0000 0x0000000
992e30.a3c: *0000000000190000-0000000000191fff 0x0004/0x0004 0x0020000
1002e30.a3c: 0000000000192000-00000000001fffff 0x0001/0x0000 0x0000000
1012e30.a3c: *0000000000200000-00000000002e4fff 0x0000/0x0004 0x0020000
1022e30.a3c: 00000000002e5000-00000000002e7fff 0x0004/0x0004 0x0020000
1032e30.a3c: 00000000002e8000-00000000003fffff 0x0000/0x0004 0x0020000
1042e30.a3c: *0000000000400000-00000000004c8fff 0x0002/0x0002 0x0040000
1052e30.a3c: 00000000004c9000-00000000004cffff 0x0001/0x0000 0x0000000
1062e30.a3c: *00000000004d0000-00000000004d1fff 0x0004/0x0004 0x0020000
1072e30.a3c: 00000000004d2000-0000000000531fff 0x0000/0x0004 0x0020000
1082e30.a3c: 0000000000532000-000000000059ffff 0x0001/0x0000 0x0000000
1092e30.a3c: *00000000005a0000-00000000005a4fff 0x0004/0x0004 0x0020000
1102e30.a3c: 00000000005a5000-000000000069ffff 0x0000/0x0004 0x0020000
1112e30.a3c: *00000000006a0000-00000000006bcfff 0x0004/0x0004 0x0020000
1122e30.a3c: 00000000006bd000-000000000079ffff 0x0000/0x0004 0x0020000
1132e30.a3c: 00000000007a0000-000000000080ffff 0x0001/0x0000 0x0000000
1142e30.a3c: *0000000000810000-000000000081efff 0x0004/0x0004 0x0020000
1152e30.a3c: 000000000081f000-000000000081ffff 0x0000/0x0004 0x0020000
1162e30.a3c: *0000000000820000-0000000000829fff 0x0000/0x0004 0x0020000
1172e30.a3c: 000000000082a000-0000000000a20fff 0x0004/0x0004 0x0020000
1182e30.a3c: 0000000000a21000-0000000000a21fff 0x0000/0x0004 0x0020000
1192e30.a3c: 0000000000a22000-000000007ffdffff 0x0001/0x0000 0x0000000
1202e30.a3c: *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000
1212e30.a3c: 000000007ffe1000-000000007ffeefff 0x0001/0x0000 0x0000000
1222e30.a3c: *000000007ffef000-000000007ffeffff 0x0002/0x0002 0x0020000
1232e30.a3c: 000000007fff0000-00007ff4fd4fffff 0x0001/0x0000 0x0000000
1242e30.a3c: *00007ff4fd500000-00007ff4fd504fff 0x0002/0x0002 0x0040000
1252e30.a3c: 00007ff4fd505000-00007ff4fd5fffff 0x0000/0x0002 0x0040000
1262e30.a3c: *00007ff4fd600000-00007ff5fd61ffff 0x0000/0x0004 0x0020000
1272e30.a3c: *00007ff5fd620000-00007ff5ff61ffff 0x0000/0x0004 0x0020000
1282e30.a3c: 00007ff5ff620000-00007ff5ff620fff 0x0004/0x0004 0x0020000
1292e30.a3c: 00007ff5ff621000-00007ff5ff62ffff 0x0001/0x0000 0x0000000
1302e30.a3c: *00007ff5ff630000-00007ff5ff630fff 0x0002/0x0002 0x0040000
1312e30.a3c: 00007ff5ff631000-00007ff5ff63ffff 0x0001/0x0000 0x0000000
1322e30.a3c: *00007ff5ff640000-00007ff5ff662fff 0x0002/0x0002 0x0040000
1332e30.a3c: 00007ff5ff663000-00007ff6ffaeffff 0x0001/0x0000 0x0000000
1342e30.a3c: *00007ff6ffaf0000-00007ff6ffaf0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1352e30.a3c: 00007ff6ffaf1000-00007ff6ffb67fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1362e30.a3c: 00007ff6ffb68000-00007ff6ffb68fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1372e30.a3c: 00007ff6ffb69000-00007ff6ffbb1fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1382e30.a3c: 00007ff6ffbb2000-00007ff6ffbb4fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1392e30.a3c: 00007ff6ffbb5000-00007ff6ffbb7fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1402e30.a3c: 00007ff6ffbb8000-00007ff6ffbbafff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1412e30.a3c: 00007ff6ffbbb000-00007ff6ffbbbfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1422e30.a3c: 00007ff6ffbbc000-00007ff6ffbbdfff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1432e30.a3c: 00007ff6ffbbe000-00007ff6ffbbefff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1442e30.a3c: 00007ff6ffbbf000-00007ff6ffc07fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1452e30.a3c: 00007ff6ffc08000-00007fff27efffff 0x0001/0x0000 0x0000000
1462e30.a3c: *00007fff27f00000-00007fff27f00fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
1472e30.a3c: 00007fff27f01000-00007fff28012fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
1482e30.a3c: 00007fff28013000-00007fff2818afff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
1492e30.a3c: 00007fff2818b000-00007fff2818efff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
1502e30.a3c: 00007fff2818f000-00007fff2818ffff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
1512e30.a3c: 00007fff28190000-00007fff281c8fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
1522e30.a3c: 00007fff281c9000-00007fff29a5ffff 0x0001/0x0000 0x0000000
1532e30.a3c: *00007fff29a60000-00007fff29a60fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\kernel32.dll
1542e30.a3c: 00007fff29a61000-00007fff29adefff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\kernel32.dll
1552e30.a3c: 00007fff29adf000-00007fff29b11fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\kernel32.dll
1562e30.a3c: 00007fff29b12000-00007fff29b12fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\kernel32.dll
1572e30.a3c: 00007fff29b13000-00007fff29b13fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\kernel32.dll
1582e30.a3c: 00007fff29b14000-00007fff29b1cfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\kernel32.dll
1592e30.a3c: 00007fff29b1d000-00007fff2a68ffff 0x0001/0x0000 0x0000000
1602e30.a3c: *00007fff2a690000-00007fff2a690fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
1612e30.a3c: 00007fff2a691000-00007fff2a7abfff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
1622e30.a3c: 00007fff2a7ac000-00007fff2a7f4fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
1632e30.a3c: 00007fff2a7f5000-00007fff2a7f5fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
1642e30.a3c: 00007fff2a7f6000-00007fff2a7f7fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
1652e30.a3c: 00007fff2a7f8000-00007fff2a800fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
1662e30.a3c: 00007fff2a801000-00007fff2a885fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
1672e30.a3c: 00007fff2a886000-00007ffffffeffff 0x0001/0x0000 0x0000000
1682e30.a3c: kernel32.dll: timestamp 0xd714134a (rc=VINF_SUCCESS)
1692e30.a3c: kernelbase.dll: timestamp 0xe9c5eae (rc=VINF_SUCCESS)
1702e30.a3c: VirtualBoxVM.exe: timestamp 0x5f89bd71 (rc=VINF_SUCCESS)
1712e30.a3c: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe: Signature #1/2: info status: 24202
1722e30.a3c: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
1732e30.a3c: '\Device\HarddiskVolume3\Windows\System32\ntdll.dll' has no imports
1742e30.a3c: supR3HardenedWinInit: SUPHARDNTVPKIND_SELF_PURIFICATION_LIMITED -> VINF_SUCCESS, cFixes=0
1752e30.a3c: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe: Signature #1/2: info status: 24202
1762e30.a3c: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
1772e30.a3c: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe)
1782e30.a3c: supR3HardNtEnableThreadCreationEx:
1792e30.a3c: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007fff2a704930 pvNtTerminateThread=00007fff2a72d070
1802e30.a3c: supR3HardenedWinDoReSpawn(1): New child 1c88.1c8c [kernel32].
1812e30.a3c: supR3HardNtChildGatherData: PebBaseAddress=0000000000249000 cbPeb=0x388
1822e30.a3c: supR3HardNtPuChFindNtdll: uNtDllParentAddr=00007fff2a690000 uNtDllChildAddr=00007fff2a690000
1832e30.a3c: supR3HardenedWinSetupChildInit: uLdrInitThunk=00007fff2a704930
1842e30.a3c: supR3HardenedWinSetupChildInit: Initial context:
185 rax=0000000000000000 rbx=0000000000000000 rcx=00007ff6ffaf7900 rdx=0000000000249000
186 rsi=0000000000000000 rdi=0000000000000000 r8 =0000000000000000 r9 =0000000000000000
187 r10=0000000000000000 r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
188 r14=0000000000000000 r15=0000000000000000 P1=0000000000000000 P2=0000000000000000
189 rip=00007fff2a6dd220 rsp=000000000014f918 rbp=0000000000000000 ctxflags=0010001b
190 cs=0033 ss=002b ds=0000 es=0000 fs=0000 gs=0000 eflags=00000200 mxcrx=00001f80
191 P3=0000000000000000 P4=0000000000000000 P5=0000000000000000 P6=0000000000000000
192 dr0=0000000000000000 dr1=0000000000000000 dr2=0000000000000000 dr3=0000000000000000
193 dr6=0000000000000000 dr7=0000000000000000 vcr=0000000000000000 dcr=0000000000000000
194 lbt=0000000000000000 lbf=0000000000000000 lxt=0000000000000000 lxf=0000000000000000
1952e30.a3c: supR3HardenedWinSetupChildInit: Start child.
1962e30.a3c: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 0 ms.
1972e30.a3c: supR3HardNtChildPurify: Startup delay kludge #1/0: 268 ms, 17 sleeps
1982e30.a3c: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
1992e30.a3c: *0000000000000000-000000000000ffff 0x0001/0x0000 0x0000000
2002e30.a3c: *0000000000010000-000000000002ffff 0x0004/0x0004 0x0020000
2012e30.a3c: *0000000000030000-000000000004cfff 0x0002/0x0002 0x0040000
2022e30.a3c: 000000000004d000-000000000004ffff 0x0001/0x0000 0x0000000
2032e30.a3c: *0000000000050000-000000000014afff 0x0000/0x0004 0x0020000
2042e30.a3c: 000000000014b000-000000000014dfff 0x0104/0x0004 0x0020000
2052e30.a3c: 000000000014e000-000000000014ffff 0x0004/0x0004 0x0020000
2062e30.a3c: *0000000000150000-0000000000153fff 0x0002/0x0002 0x0040000
2072e30.a3c: 0000000000154000-000000000015ffff 0x0001/0x0000 0x0000000
2082e30.a3c: *0000000000160000-0000000000161fff 0x0004/0x0004 0x0020000
2092e30.a3c: 0000000000162000-00000000001fffff 0x0001/0x0000 0x0000000
2102e30.a3c: *0000000000200000-0000000000248fff 0x0000/0x0004 0x0020000
2112e30.a3c: 0000000000249000-000000000024bfff 0x0004/0x0004 0x0020000
2122e30.a3c: 000000000024c000-00000000003fffff 0x0000/0x0004 0x0020000
2132e30.a3c: 0000000000400000-000000007ffdffff 0x0001/0x0000 0x0000000
2142e30.a3c: *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000
2152e30.a3c: 000000007ffe1000-000000007ffeefff 0x0001/0x0000 0x0000000
2162e30.a3c: *000000007ffef000-000000007ffeffff 0x0002/0x0002 0x0020000
2172e30.a3c: 000000007fff0000-00007ff599c1ffff 0x0001/0x0000 0x0000000
2182e30.a3c: *00007ff599c20000-00007ff599c20fff 0x0002/0x0002 0x0040000
2192e30.a3c: 00007ff599c21000-00007ff599c2ffff 0x0001/0x0000 0x0000000
2202e30.a3c: *00007ff599c30000-00007ff599c52fff 0x0002/0x0002 0x0040000
2212e30.a3c: 00007ff599c53000-00007ff6ffaeffff 0x0001/0x0000 0x0000000
2222e30.a3c: *00007ff6ffaf0000-00007ff6ffaf0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2232e30.a3c: 00007ff6ffaf1000-00007ff6ffb67fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2242e30.a3c: 00007ff6ffb68000-00007ff6ffb68fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2252e30.a3c: 00007ff6ffb69000-00007ff6ffbb1fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2262e30.a3c: 00007ff6ffbb2000-00007ff6ffbb2fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2272e30.a3c: 00007ff6ffbb3000-00007ff6ffbb3fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2282e30.a3c: 00007ff6ffbb4000-00007ff6ffbb8fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2292e30.a3c: 00007ff6ffbb9000-00007ff6ffbb9fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2302e30.a3c: 00007ff6ffbba000-00007ff6ffbbafff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2312e30.a3c: 00007ff6ffbbb000-00007ff6ffbbefff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2322e30.a3c: 00007ff6ffbbf000-00007ff6ffc07fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2332e30.a3c: 00007ff6ffc08000-00007fff2a68ffff 0x0001/0x0000 0x0000000
2342e30.a3c: *00007fff2a690000-00007fff2a690fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
2352e30.a3c: 00007fff2a691000-00007fff2a7abfff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
2362e30.a3c: 00007fff2a7ac000-00007fff2a7f4fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
2372e30.a3c: 00007fff2a7f5000-00007fff2a800fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
2382e30.a3c: 00007fff2a801000-00007fff2a80ffff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
2392e30.a3c: 00007fff2a810000-00007fff2a810fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
2402e30.a3c: 00007fff2a811000-00007fff2a813fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
2412e30.a3c: 00007fff2a814000-00007fff2a885fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
2422e30.a3c: 00007fff2a886000-00007ffffffeffff 0x0001/0x0000 0x0000000
2432e30.a3c: supR3HardNtChildPurify: Done after 268 ms and 0 fixes (loop #0).
2441c88.1c8c: Log file opened: 6.1.16r140961 g_hStartupLog=0000000000000004 g_uNtVerCombined=0xa04a6100
2451c88.1c8c: supR3HardenedVmProcessInit: uNtDllAddr=00007fff2a690000 g_uNtVerCombined=0xa04a6100 (stack ~000000000014f3a8)
2462e30.a3c: supR3HardNtEnableThreadCreationEx:
2471c88.1c8c: ntdll.dll: timestamp 0x4544b4a1 (rc=VINF_SUCCESS)
2481c88.1c8c: New simple heap: #1 0000000000500000 LB 0x400000 (for 2056192 allocation)
2491c88.1c8c: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
2501c88.1c8c: System32: \Device\HarddiskVolume3\Windows\System32
2511c88.1c8c: WinSxS: \Device\HarddiskVolume3\Windows\WinSxS
2521c88.1c8c: KnownDllPath: C:\windows\System32
2531c88.1c8c: supR3HardenedVmProcessInit: Opening vboxdrv stub...
2541c88.1c8c: supR3HardenedVmProcessInit: Restoring LdrInitializeThunk...
2551c88.1c8c: supR3HardenedVmProcessInit: Returning to LdrInitializeThunk...
2561c88.1c8c: Registered Dll notification callback with NTDLL.
2571c88.1c8c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\kernel32.dll)
2581c88.1c8c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\kernel32.dll
2591c88.1c8c: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\KERNEL32.DLL (Input=KERNEL32.DLL, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000004001:<flags> [calling]
2601c88.1c8c: supR3HardenedDllNotificationCallback: load 00007fff27f00000 LB 0x002c9000 C:\windows\System32\KERNELBASE.dll [fFlags=0x0]
2611c88.1c8c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\KernelBase.dll)
2621c88.1c8c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
2631c88.1c8c: supR3HardenedDllNotificationCallback: load 00007fff29a60000 LB 0x000bd000 C:\windows\System32\KERNEL32.DLL [fFlags=0x0]
2641c88.1c8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
2651c88.1c8c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff29a60000 'C:\windows\System32\KERNEL32.DLL'
2661c88.1c8c: supR3HardenedDllNotificationCallback: load 00007ff6ffaf0000 LB 0x00118000 C:\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe [fFlags=0x0]
2671c88.1c8c: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe: Signature #1/2: info status: 24202
2681c88.1c8c: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
2691c88.1c8c: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe)
2701c88.1c8c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2711c88.1c8c: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007fff2a704930 pvNtTerminateThread=00007fff2a72d070
2721c88.1c8c: \SystemRoot\System32\ntdll.dll:
2731c88.1c8c: CreationTime: 2021-02-14T09:13:34.080301900Z
2741c88.1c8c: LastWriteTime: 2021-02-14T09:13:34.113530200Z
2751c88.1c8c: ChangeTime: 2021-02-14T16:05:31.824563400Z
2761c88.1c8c: FileAttributes: 0x20
2772e30.a3c: supR3HardNtChildWaitFor: Found expected request 1 (CloseEvents) after 79 ms.
2781c88.1c8c: Size: 0x1ee738
2791c88.1c8c: NT Headers: 0xe8
2801c88.1c8c: Timestamp: 0x4544b4a1
2811c88.1c8c: Machine: 0x8664 - amd64
2821c88.1c8c: Timestamp: 0x4544b4a1
2831c88.1c8c: Image Version: 10.0
2841c88.1c8c: SizeOfImage: 0x1f6000 (2056192)
2851c88.1c8c: Resource Dir: 0x185000 LB 0x6fd28
2861c88.1c8c: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
2871c88.1c8c: [Raw version resource data: 0x1850f0 LB 0x380, codepage 0x0 (reserved 0x0)]
2881c88.1c8c: ProductName: Microsoft® Windows® Operating System
2891c88.1c8c: ProductVersion: 10.0.19041.804
2901c88.1c8c: FileVersion: 10.0.19041.804 (WinBuild.160101.0800)
2911c88.1c8c: FileDescription: NT Layer DLL
2921c88.1c8c: \SystemRoot\System32\kernel32.dll:
2931c88.1c8c: CreationTime: 2021-02-14T09:13:21.528882900Z
2941c88.1c8c: LastWriteTime: 2021-02-14T09:13:21.544531500Z
2951c88.1c8c: ChangeTime: 2021-02-14T16:05:30.753702200Z
2961c88.1c8c: FileAttributes: 0x20
2971c88.1c8c: Size: 0xbac30
2981c88.1c8c: NT Headers: 0xe8
2991c88.1c8c: Timestamp: 0xd714134a
3001c88.1c8c: Machine: 0x8664 - amd64
3011c88.1c8c: Timestamp: 0xd714134a
3021c88.1c8c: Image Version: 10.0
3031c88.1c8c: SizeOfImage: 0xbd000 (774144)
3041c88.1c8c: Resource Dir: 0xbb000 LB 0x520
3051c88.1c8c: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
3061c88.1c8c: [Raw version resource data: 0xbb0b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
3071c88.1c8c: ProductName: Microsoft® Windows® Operating System
3081c88.1c8c: ProductVersion: 10.0.19041.804
3091c88.1c8c: FileVersion: 10.0.19041.804 (WinBuild.160101.0800)
3101c88.1c8c: FileDescription: Windows NT BASE API Client DLL
3111c88.1c8c: \SystemRoot\System32\KernelBase.dll:
3121c88.1c8c: CreationTime: 2021-02-14T09:13:34.782867900Z
3131c88.1c8c: LastWriteTime: 2021-02-14T09:13:34.843436900Z
3141c88.1c8c: ChangeTime: 2021-02-14T16:05:31.587798900Z
3151c88.1c8c: FileAttributes: 0x20
3161c88.1c8c: Size: 0x2c9798
3171c88.1c8c: NT Headers: 0xf0
3181c88.1c8c: Timestamp: 0xe9c5eae
3191c88.1c8c: Machine: 0x8664 - amd64
3201c88.1c8c: Timestamp: 0xe9c5eae
3211c88.1c8c: Image Version: 10.0
3221c88.1c8c: SizeOfImage: 0x2c9000 (2920448)
3231c88.1c8c: Resource Dir: 0x2a0000 LB 0x548
3241c88.1c8c: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
3251c88.1c8c: [Raw version resource data: 0x2a00b0 LB 0x3bc, codepage 0x0 (reserved 0x0)]
3261c88.1c8c: ProductName: Microsoft® Windows® Operating System
3271c88.1c8c: ProductVersion: 10.0.19041.804
3281c88.1c8c: FileVersion: 10.0.19041.804 (WinBuild.160101.0800)
3291c88.1c8c: FileDescription: Windows NT BASE API Client DLL
3301c88.1c8c: \SystemRoot\System32\apisetschema.dll:
3311c88.1c8c: CreationTime: 2019-12-07T09:08:13.518339400Z
3321c88.1c8c: LastWriteTime: 2019-12-07T09:08:13.518339400Z
3331c88.1c8c: ChangeTime: 2021-02-14T09:14:21.940784700Z
3341c88.1c8c: FileAttributes: 0x20
3351c88.1c8c: Size: 0x1f538
3361c88.1c8c: NT Headers: 0xd0
3371c88.1c8c: Timestamp: 0x31288ce0
3381c88.1c8c: Machine: 0x8664 - amd64
3391c88.1c8c: Timestamp: 0x31288ce0
3401c88.1c8c: Image Version: 10.0
3411c88.1c8c: SizeOfImage: 0x20000 (131072)
3421c88.1c8c: Resource Dir: 0x1f000 LB 0x408
3431c88.1c8c: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
3441c88.1c8c: [Raw version resource data: 0x1f060 LB 0x3a8, codepage 0x0 (reserved 0x0)]
3451c88.1c8c: ProductName: Microsoft® Windows® Operating System
3461c88.1c8c: ProductVersion: 10.0.19041.1
3471c88.1c8c: FileVersion: 10.0.19041.1 (WinBuild.160101.0800)
3481c88.1c8c: FileDescription: ApiSet Schema DLL
3491c88.1c8c: supR3HardenedWinFindAdversaries: 0x0
3501c88.1c8c: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
3511c88.1c8c: Calling main()
3521c88.1c8c: SUPR3HardenedMain: pszProgName=VirtualBoxVM fFlags=0x2
3531c88.1c8c: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
3541c88.1c8c: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe: Signature #1/2: info status: 24202
3551c88.1c8c: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
3561c88.1c8c: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe)
3571c88.1c8c: SUPR3HardenedMain: Respawn #2
3581c88.1c8c: supR3HardNtEnableThreadCreationEx:
3591c88.1c8c: supR3HardenedDllNotificationCallback: load 00007fff29270000 LB 0x0012b000 C:\windows\System32\RPCRT4.dll [fFlags=0x0]
3601c88.1c8c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll)
3611c88.1c8c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll
3621c88.1c8c: supR3HardenedDllNotificationCallback: load 00007fff28730000 LB 0x0009c000 C:\windows\System32\sechost.dll [fFlags=0x0]
3631c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'rpcrt4.dll'.
3641c88.1c8c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\sechost.dll)
3651c88.1c8c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\sechost.dll
3661c88.1c8c: '\Device\HarddiskVolume3\Windows\System32\ntdll.dll' has no imports
3671c88.1c8c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ntdll.dll)
3681c88.1c8c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ntdll.dll
3691c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
3701c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
3711c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
3721c88.1c8c: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\ntdll.dll (Input=ntdll.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
3731c88.1c8c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff2a690000 'C:\windows\System32\ntdll.dll'
3741c88.1c8c: Error -104 in supR3HardenedWinReSpawn! (enmWhat=5)
3751c88.1c8c: Error relaunching VirtualBox VM process: 5
376Command line: '60eaff78-4bdd-042d-2e72-669728efd737-suplib-3rdchild --comment C7 --startvm 52308cc0-f0a9-4084-81f2-ef11922f4306 --no-startvm-errormsgbox "--sup-hardening-log=D:\VirtualBox VMs\C7\Logs\VBoxHardening.log"'
3771c88.1c8c: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll: Signature #1/2: info status: 24202
3781c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'opengl32.dll'.
3791c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'uicommon.dll'.
3801c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
3811c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcp100.dll'.
3821c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'msvcr100.dll'.
3831c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'qt5corevbox.dll'.
3841c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'qt5guivbox.dll'.
3851c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'qt5widgetsvbox.dll'.
3861c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'qt5openglvbox.dll'.
3871c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'user32.dll'.
3881c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'ole32.dll'.
3891c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'oleaut32.dll'.
3901c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'winmm.dll'.
3911c88.1c8c: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll)
3921c88.1c8c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll
3931c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
3941c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume3\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
3951c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'.
3961c88.1c8c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\winmm.dll)
3971c88.1c8c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\winmm.dll
3981c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
3991c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
4001c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
4011c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'combase.dll'.
4021c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #21 'rpcrt4.dll'.
4031c88.1c8c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\oleaut32.dll)
4041c88.1c8c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\oleaut32.dll
4051c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
4061c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
4071c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #21 'rpcrt4.dll'.
4081c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #49 'gdi32.dll'.
4091c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #50 'user32.dll'.
4101c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #51 'combase.dll'.
4111c88.1c8c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ole32.dll)
4121c88.1c8c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ole32.dll
4131c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
4141c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
4151c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'win32u.dll'.
4161c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #37 'gdi32.dll'.
4171c88.1c8c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\user32.dll)
4181c88.1c8c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\user32.dll
4191c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5openglvbox.dll'...
4201c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5openglvbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5openglvbox.dll' [rcNtRedir=0xc0150008]
4211c88.1c8c: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll: Signature #1/2: info status: 24202
4221c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'qt5widgetsvbox.dll'.
4231c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'qt5guivbox.dll'.
4241c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5corevbox.dll'.
4251c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcr100.dll'.
4261c88.1c8c: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll)
4271c88.1c8c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll
4281c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
4291c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
4301c88.1c8c: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll: Signature #1/2: info status: 24202
4311c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
4321c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
4331c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5guivbox.dll'.
4341c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5corevbox.dll'.
4351c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'shell32.dll'.
4361c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
4371c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
4381c88.1c8c: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll)
4391c88.1c8c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll
4401c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
4411c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
4421c88.1c8c: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll: Signature #1/2: info status: 24202
4431c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'ole32.dll'.
4441c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'opengl32.dll'.
4451c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
4461c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
4471c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'.
4481c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
4491c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
4501c88.1c8c: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll)
4511c88.1c8c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
4521c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
4531c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
4541c88.1c8c: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll: Signature #1/2: info status: 24202
4551c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
4561c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'shell32.dll'.
4571c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ole32.dll'.
4581c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'advapi32.dll'.
4591c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ws2_32.dll'.
4601c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'mpr.dll'.
4611c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcp100.dll'.
4621c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'msvcr100.dll'.
4631c88.1c8c: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll)
4641c88.1c8c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
4651c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
4661c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
4671c88.1c8c: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll: Signature #1/2: info status: 24202
4681c88.1c8c: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll)
4691c88.1c8c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll
4701c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
4711c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
4721c88.1c8c: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll: Signature #1/2: info status: 24202
4731c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
4741c88.1c8c: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll)
4751c88.1c8c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll
4761c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
4771c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
4781c88.1c8c: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll: Signature #1/2: info status: 24202
4791c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
4801c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
4811c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
4821c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ws2_32.dll'.
4831c88.1c8c: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll)
4841c88.1c8c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
4851c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'uicommon.dll'...
4861c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'uicommon.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\uicommon.dll' [rcNtRedir=0xc0150008]
4871c88.1c8c: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\UICommon.dll: Signature #1/2: info status: 24202
4881c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'vboxrt.dll'.
4891c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcr100.dll'.
4901c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5corevbox.dll'.
4911c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5guivbox.dll'.
4921c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5widgetsvbox.dll'.
4931c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'user32.dll'.
4941c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'advapi32.dll'.
4951c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'ole32.dll'.
4961c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'oleaut32.dll'.
4971c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'rpcrt4.dll'.
4981c88.1c8c: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\UICommon.dll)
4991c88.1c8c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\UICommon.dll
5001c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
5011c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume3\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
5021c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
5031c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'advapi32.dll'.
5041c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
5051c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'gdi32.dll'.
5061c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'glu32.dll'.
5071c88.1c8c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\opengl32.dll)
5081c88.1c8c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\opengl32.dll
5091c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'glu32.dll'...
5101c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'glu32.dll' -> '\Device\HarddiskVolume3\Windows\System32\glu32.dll' [rcNtRedir=0xc0150008]
5111c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
5121c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
5131c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'opengl32.dll'.
5141c88.1c8c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\glu32.dll)
5151c88.1c8c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\glu32.dll
5161c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
5171c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
5181c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'win32u.dll'.
5191c88.1c8c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\gdi32.dll)
5201c88.1c8c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\gdi32.dll
5211c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
5221c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
5231c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
5241c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
5251c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
5261c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
5271c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'sechost.dll'.
5281c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27 'rpcrt4.dll'.
5291c88.1c8c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\advapi32.dll)
5301c88.1c8c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\advapi32.dll
5311c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
5321c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
5331c88.1c8c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\msvcrt.dll)
5341c88.1c8c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
5351c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
5361c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
5371c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
5381c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
5391c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
5401c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
5411c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
5421c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
5431c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll [lacks WinVerifyTrust]
5441c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
5451c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
5461c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
5471c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
5481c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
5491c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
5501c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
5511c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
5521c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
5531c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
5541c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
5551c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
5561c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
5571c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
5581c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
5591c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
5601c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
5611c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
5621c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
5631c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
5641c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
5651c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
5661c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
5671c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'rpcrt4.dll'.
5681c88.1c8c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ws2_32.dll)
5691c88.1c8c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ws2_32.dll
5701c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
5711c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
5721c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
5731c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
5741c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
5751c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
5761c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
5771c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
5781c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
5791c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
5801c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
5811c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
5821c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
5831c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
5841c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
5851c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
5861c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
5871c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
5881c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mpr.dll'...
5891c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'mpr.dll' -> '\Device\HarddiskVolume3\Windows\System32\mpr.dll' [rcNtRedir=0xc0150008]
5901c88.1c8c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\mpr.dll)
5911c88.1c8c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\mpr.dll
5921c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
5931c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
5941c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ws2_32.dll [lacks WinVerifyTrust]
5951c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
5961c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
5971c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
5981c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
5991c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
6001c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll [lacks WinVerifyTrust]
6011c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
6021c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
6031c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
6041c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #72 'user32.dll'.
6051c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #74 'gdi32.dll'.
6061c88.1c8c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\shell32.dll)
6071c88.1c8c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\shell32.dll
6081c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
6091c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
6101c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
6111c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
6121c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
6131c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
6141c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
6151c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
6161c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
6171c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
6181c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
6191c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
6201c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
6211c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
6221c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
6231c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
6241c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
6251c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
6261c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
6271c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume3\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
6281c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
6291c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
6301c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
6311c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll [lacks WinVerifyTrust]
6321c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
6331c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
6341c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
6351c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
6361c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
6371c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
6381c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
6391c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
6401c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll [lacks WinVerifyTrust]
6411c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
6421c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
6431c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
6441c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
6451c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
6461c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
6471c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
6481c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
6491c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
6501c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
6511c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
6521c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
6531c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
6541c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
6551c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
6561c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
6571c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
6581c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
6591c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
6601c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
6611c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
6621c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
6631c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
6641c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
6651c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
6661c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
6671c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
6681c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
6691c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
6701c88.1c8c: '\Device\HarddiskVolume3\Windows\System32\win32u.dll' has no imports
6711c88.1c8c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\win32u.dll)
6721c88.1c8c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\win32u.dll
6731c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
6741c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
6751c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
6761c88.1c8c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\combase.dll)
6771c88.1c8c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\combase.dll
6781c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
6791c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
6801c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
6811c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
6821c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
6831c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
6841c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
6851c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
6861c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
6871c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
6881c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
6891c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
6901c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
6911c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
6921c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [lacks WinVerifyTrust]
6931c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
6941c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
6951c88.1c8c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll)
6961c88.1c8c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll
6971c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
6981c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
6991c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
7001c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
7011c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
7021c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
7031c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
7041c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
7051c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
7061c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
7071c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
7081c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
7091c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
7101c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
7111c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust]
7121c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
7131c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
7141c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
7151c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
7161c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
7171c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
7181c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'sechost.dll'...
7191c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'sechost.dll' -> '\Device\HarddiskVolume3\Windows\System32\sechost.dll' [rcNtRedir=0xc0150008]
7201c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\sechost.dll [lacks WinVerifyTrust]
7211c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
7221c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
7231c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
7241c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
7251c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
7261c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [lacks WinVerifyTrust]
7271c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
7281c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume3\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
7291c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
7301c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
7311c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
7321c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
7331c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
7341c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
7351c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
7361c88.1c8c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000a01:<flags> [calling]
7371c88.1c8c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll [lacks WinVerifyTrust]
7381c88.1c8c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
7391c88.1c8c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\UICommon.dll [lacks WinVerifyTrust]
7401c88.1c8c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
7411c88.1c8c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
7421c88.1c8c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
7431c88.1c8c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
7441c88.1c8c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
7451c88.1c8c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
7461c88.1c8c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll [lacks WinVerifyTrust]
7471c88.1c8c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll [lacks WinVerifyTrust]
7481c88.1c8c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\glu32.dll [lacks WinVerifyTrust]
7491c88.1c8c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\mpr.dll [lacks WinVerifyTrust]
7501c88.1c8c: supR3HardenedDllNotificationCallback: load 00007fff2a0e0000 LB 0x0009e000 C:\windows\System32\msvcrt.dll [fFlags=0x0]
7511c88.1c8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
7521c88.1c8c: supR3HardenedDllNotificationCallback: load 00007fff28880000 LB 0x000ac000 C:\windows\System32\ADVAPI32.dll [fFlags=0x0]
7531c88.1c8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
7541c88.1c8c: supR3HardenedDllNotificationCallback: load 00007fff27dd0000 LB 0x00022000 C:\windows\System32\win32u.dll [fFlags=0x0]
7551c88.1c8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [lacks WinVerifyTrust]
7561c88.1c8c: supR3HardenedDllNotificationCallback: load 00007fff283e0000 LB 0x00100000 C:\windows\System32\ucrtbase.dll [fFlags=0x0]
7571c88.1c8c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ucrtbase.dll)
7581c88.1c8c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll
7591c88.1c8c: supR3HardenedDllNotificationCallback: load 00007fff27e00000 LB 0x0009d000 C:\windows\System32\msvcp_win.dll [fFlags=0x0]
7601c88.1c8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust]
7611c88.1c8c: supR3HardenedDllNotificationCallback: load 00007fff281d0000 LB 0x0010b000 C:\windows\System32\gdi32full.dll [fFlags=0x0]
7621c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
7631c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #33 'gdi32.dll'.
7641c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'user32.dll'.
7651c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'win32u.dll'.
7661c88.1c8c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\gdi32full.dll)
7671c88.1c8c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\gdi32full.dll
7681c88.1c8c: supR3HardenedDllNotificationCallback: load 00007fff29f20000 LB 0x0002a000 C:\windows\System32\GDI32.dll [fFlags=0x0]
7691c88.1c8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
7701c88.1c8c: supR3HardenedDllNotificationCallback: load 00007fff298c0000 LB 0x001a0000 C:\windows\System32\USER32.dll [fFlags=0x0]
7711c88.1c8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
7721c88.1c8c: supR3HardenedDllNotificationCallback: load 00007fff29bc0000 LB 0x00356000 C:\windows\System32\combase.dll [fFlags=0x0]
7731c88.1c8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [lacks WinVerifyTrust]
7741c88.1c8c: supR3HardenedDllNotificationCallback: load 00007ffef35e0000 LB 0x0002c000 C:\windows\SYSTEM32\GLU32.dll [fFlags=0x0]
7751c88.1c8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\glu32.dll [lacks WinVerifyTrust]
7761c88.1c8c: supR3HardenedDllNotificationCallback: load 00007ffedd0c0000 LB 0x00125000 C:\windows\SYSTEM32\OPENGL32.dll [fFlags=0x0]
7771c88.1c8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
7781c88.1c8c: supR3HardenedDllNotificationCallback: load 00000000611c0000 LB 0x000d2000 C:\Program Files\Oracle\VirtualBox\MSVCR100.dll [fFlags=0x0]
7791c88.1c8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
7801c88.1c8c: supR3HardenedDllNotificationCallback: load 0000000060640000 LB 0x00098000 C:\Program Files\Oracle\VirtualBox\MSVCP100.dll [fFlags=0x0]
7811c88.1c8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
7821c88.1c8c: supR3HardenedDllNotificationCallback: load 00007fff29200000 LB 0x0006b000 C:\windows\System32\WS2_32.dll [fFlags=0x0]
7831c88.1c8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ws2_32.dll [lacks WinVerifyTrust]
7841c88.1c8c: supR3HardenedDllNotificationCallback: load 00007ffeda310000 LB 0x005e1000 C:\Program Files\Oracle\VirtualBox\VBoxRT.dll [fFlags=0x0]
7851c88.1c8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
7861c88.1c8c: supR3HardenedDllNotificationCallback: load 00007fff28940000 LB 0x00742000 C:\windows\System32\SHELL32.dll [fFlags=0x0]
7871c88.1c8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll [lacks WinVerifyTrust]
7881c88.1c8c: supR3HardenedDllNotificationCallback: load 00007fff29f50000 LB 0x0012a000 C:\windows\System32\ole32.dll [fFlags=0x0]
7891c88.1c8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll [lacks WinVerifyTrust]
7901c88.1c8c: supR3HardenedDllNotificationCallback: load 00007fff14250000 LB 0x0001d000 C:\windows\SYSTEM32\MPR.dll [fFlags=0x0]
7911c88.1c8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\mpr.dll [lacks WinVerifyTrust]
7921c88.1c8c: supR3HardenedDllNotificationCallback: load 0000000060c50000 LB 0x00565000 C:\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [fFlags=0x0]
7931c88.1c8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
7941c88.1c8c: supR3HardenedDllNotificationCallback: load 00007ffed9d10000 LB 0x005f7000 C:\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [fFlags=0x0]
7951c88.1c8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
7961c88.1c8c: supR3HardenedDllNotificationCallback: load 00000000606e0000 LB 0x00561000 C:\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [fFlags=0x0]
7971c88.1c8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
7981c88.1c8c: supR3HardenedDllNotificationCallback: load 00007fff29480000 LB 0x000cd000 C:\windows\System32\OLEAUT32.dll [fFlags=0x0]
7991c88.1c8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
8001c88.1c8c: supR3HardenedDllNotificationCallback: load 00007ffeda900000 LB 0x02317000 C:\Program Files\Oracle\VirtualBox\UICommon.dll [fFlags=0x0]
8011c88.1c8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\UICommon.dll [lacks WinVerifyTrust]
8021c88.1c8c: supR3HardenedDllNotificationCallback: load 000000005f760000 LB 0x00054000 C:\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll [fFlags=0x0]
8031c88.1c8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll [lacks WinVerifyTrust]
8041c88.1c8c: supR3HardenedDllNotificationCallback: load 00007fff1d640000 LB 0x00027000 C:\windows\SYSTEM32\WINMM.dll [fFlags=0x0]
8051c88.1c8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll [lacks WinVerifyTrust]
8061c88.1c8c: supR3HardenedDllNotificationCallback: load 00007ffefa930000 LB 0x001c8000 C:\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll [fFlags=0x0]
8071c88.1c8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll [lacks WinVerifyTrust]
8081c88.1c8c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
8091c88.1c8c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
8101c88.1c8c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff27f00000 'api-ms-win-core-synch-l1-2-0'
8111c88.1c8c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
8121c88.1c8c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
8131c88.1c8c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff27f00000 'api-ms-win-core-fibers-l1-1-1'
8141c88.1c8c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
8151c88.1c8c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
8161c88.1c8c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff27f00000 'api-ms-win-core-fibers-l1-1-1'
8171c88.1c8c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
8181c88.1c8c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
8191c88.1c8c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff27f00000 'api-ms-win-core-synch-l1-2-0'
8201c88.1c8c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-l1-2-1) -> 0x0, fPresent=1
8211c88.1c8c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-l1-2-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
8221c88.1c8c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff27f00000 'api-ms-win-core-localization-l1-2-1'
8231c88.1c8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
8241c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
8251c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
8261c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [lacks WinVerifyTrust]
8271c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
8281c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
8291c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
8301c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
8311c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
8321c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
8331c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
8341c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
8351c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust]
8361c88.1c8c: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\kernel32.dll (Input=kernel32, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
8371c88.1c8c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff29a60000 'C:\windows\System32\kernel32.dll'
8381c88.1c8c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-string-l1-1-0) -> 0x0, fPresent=1
8391c88.1c8c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-string-l1-1-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
8401c88.1c8c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff27f00000 'api-ms-win-core-string-l1-1-0'
8411c88.1c8c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-datetime-l1-1-1) -> 0x0, fPresent=1
8421c88.1c8c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-datetime-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
8431c88.1c8c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff27f00000 'api-ms-win-core-datetime-l1-1-1'
8441c88.1c8c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-obsolete-l1-2-0) -> 0x0, fPresent=1
8451c88.1c8c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-obsolete-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
8461c88.1c8c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff27f00000 'api-ms-win-core-localization-obsolete-l1-2-0'
8471c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'user32.dll'.
8481c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #25 'win32u.dll'.
8491c88.1c8c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\imm32.dll)
8501c88.1c8c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\imm32.dll
8511c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
8521c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
8531c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [lacks WinVerifyTrust]
8541c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
8551c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
8561c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
8571c88.1c8c: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\system32\IMM32.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
8581c88.1c8c: supR3HardenedDllNotificationCallback: load 00007fff28700000 LB 0x00030000 C:\windows\System32\IMM32.DLL [fFlags=0x0]
8591c88.1c8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\imm32.dll [lacks WinVerifyTrust]
8601c88.1c8c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff28700000 'C:\windows\system32\IMM32.DLL'
8611c88.1c8c: supR3HardenedMonitor_LdrLoadDll: error opening 'C:\windows\System32\edgegdi.dll': 0 (NtPath=\??\C:\windows\System32\edgegdi.dll; Input=edgegdi.dll; rcNtGetDll=0xc0000135
8621c88.1c8c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000034 'C:\windows\System32\edgegdi.dll'
8631c88.1c8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
8641c88.1c8c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
8651c88.1c8c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffeda310000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
8661c88.1c8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
8671c88.1c8c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
8681c88.1c8c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffeda310000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
8691c88.1c8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
8701c88.1c8c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
8711c88.1c8c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffeda310000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
8721c88.1c8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
8731c88.1c8c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
8741c88.1c8c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffeda310000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
8751c88.1c8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
8761c88.1c8c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
8771c88.1c8c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffeda310000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
8781c88.1c8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
8791c88.1c8c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffeda310000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
8801c88.1c8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
8811c88.1c8c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffeda310000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
8821c88.1c8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
8831c88.1c8c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffeda310000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
8841c88.1c8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
8851c88.1c8c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffeda310000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
8861c88.1c8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
8871c88.1c8c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffeda310000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
8881c88.1c8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
8891c88.1c8c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffeda310000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
8901c88.1c8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
8911c88.1c8c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffeda310000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
8921c88.1c8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
8931c88.1c8c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
8941c88.1c8c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffeda310000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
8951c88.1c8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
8961c88.1c8c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffeda310000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
8971c88.1c8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
8981c88.1c8c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffeda310000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
8991c88.1c8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
9001c88.1c8c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffeda310000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9011c88.1c8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
9021c88.1c8c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffeda310000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9031c88.1c8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
9041c88.1c8c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffeda310000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9051c88.1c8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
9061c88.1c8c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffeda310000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9071c88.1c8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
9081c88.1c8c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffeda310000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9091c88.1c8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
9101c88.1c8c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffeda310000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9111c88.1c8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
9121c88.1c8c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffeda310000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9131c88.1c8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
9141c88.1c8c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffeda310000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9151c88.1c8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
9161c88.1c8c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffeda310000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9171c88.1c8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
9181c88.1c8c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffeda310000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9191c88.1c8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
9201c88.1c8c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffeda310000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9211c88.1c8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
9221c88.1c8c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffeda310000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9231c88.1c8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
9241c88.1c8c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffeda310000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9251c88.1c8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
9261c88.1c8c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
9271c88.1c8c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffeda310000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9281c88.1c8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
9291c88.1c8c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffeda310000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9301c88.1c8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
9311c88.1c8c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffeda310000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9321c88.1c8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
9331c88.1c8c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffeda310000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9341c88.1c8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
9351c88.1c8c: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\ADVAPI32.DLL (Input=ADVAPI32.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
9361c88.1c8c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff28880000 'C:\windows\System32\ADVAPI32.DLL'
9371c88.1c8c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\cryptbase.dll)
9381c88.1c8c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\cryptbase.dll
9391c88.1c8c: supR3HardenedDllNotificationCallback: load 00007fff27750000 LB 0x0000c000 C:\windows\SYSTEM32\CRYPTBASE.DLL [fFlags=0x0]
9401c88.1c8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\cryptbase.dll [lacks WinVerifyTrust]
9411c88.1c8c: supR3HardenedDllNotificationCallback: load 00007fff28310000 LB 0x00080000 C:\windows\System32\bcryptPrimitives.dll [fFlags=0x0]
9421c88.1c8c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll)
9431c88.1c8c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll
9441c88.1c8c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffefa930000 'C:\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll'
9451c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #31 'combase.dll'.
9461c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #32 'msvcp_win.dll'.
9471c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'wldp.dll'.
9481c88.1c8c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\windows.storage.dll)
9491c88.1c8c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\windows.storage.dll
9501c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
9511c88.1c8c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\wldp.dll)
9521c88.1c8c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\wldp.dll
9531c88.1c8c: supR3HardenedDllNotificationCallback: load 00007fff27830000 LB 0x0002c000 C:\windows\SYSTEM32\Wldp.dll [fFlags=0x0]
9541c88.1c8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wldp.dll [lacks WinVerifyTrust]
9551c88.1c8c: supR3HardenedDllNotificationCallback: load 00007fff25c30000 LB 0x00790000 C:\windows\SYSTEM32\windows.storage.dll [fFlags=0x0]
9561c88.1c8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\windows.storage.dll [lacks WinVerifyTrust]
9571c88.1c8c: supR3HardenedDllNotificationCallback: load 00007fff290f0000 LB 0x000ae000 C:\windows\System32\SHCORE.dll [fFlags=0x0]
9581c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
9591c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #42 'combase.dll'.
9601c88.1c8c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\SHCore.dll)
9611c88.1c8c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\SHCore.dll
9621c88.1c8c: supR3HardenedDllNotificationCallback: load 00007fff291a0000 LB 0x00055000 C:\windows\System32\shlwapi.dll [fFlags=0x0]
9631c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'.
9641c88.1c8c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\shlwapi.dll)
9651c88.1c8c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\shlwapi.dll
9661c88.1c8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
9671c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
9681c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
9691c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
9701c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
9711c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
9721c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [lacks WinVerifyTrust]
9731c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
9741c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
9751c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
9761c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
9771c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
9781c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
9791c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'wldp.dll'...
9801c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'wldp.dll' -> '\Device\HarddiskVolume3\Windows\System32\wldp.dll' [rcNtRedir=0xc0150008]
9811c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wldp.dll [lacks WinVerifyTrust]
9821c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
9831c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
9841c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust]
9851c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
9861c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
9871c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [lacks WinVerifyTrust]
9881c88.1c8c: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\kernel32.dll (Input=kernel32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
9891c88.1c8c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff29a60000 'C:\windows\System32\kernel32.dll'
9901c88.1c8c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\profapi.dll)
9911c88.1c8c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\profapi.dll
9921c88.1c8c: supR3HardenedDllNotificationCallback: load 00007fff27d00000 LB 0x00026000 C:\windows\SYSTEM32\profapi.dll [fFlags=0x0]
9931c88.1c8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\profapi.dll [lacks WinVerifyTrust]
9941c88.1c8c: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\platforms\qwindows.dll: Signature #1/2: info status: 24202
9951c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
9961c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'ole32.dll'.
9971c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
9981c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'imm32.dll'.
9991c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'winmm.dll'.
10001c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'oleaut32.dll'.
10011c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'shell32.dll'.
10021c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'advapi32.dll'.
10031c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'qt5guivbox.dll'.
10041c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'qt5corevbox.dll'.
10051c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'msvcr100.dll'.
10061c88.1c8c: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\platforms\qwindows.dll)
10071c88.1c8c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\platforms\qwindows.dll
10081c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
10091c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
10101c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
10111c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
10121c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
10131c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
10141c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
10151c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
10161c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
10171c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
10181c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
10191c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
10201c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
10211c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
10221c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll [lacks WinVerifyTrust]
10231c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
10241c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
10251c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
10261c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
10271c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume3\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
10281c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll [lacks WinVerifyTrust]
10291c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'...
10301c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume3\Windows\System32\imm32.dll' [rcNtRedir=0xc0150008]
10311c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\imm32.dll [lacks WinVerifyTrust]
10321c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
10331c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
10341c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
10351c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
10361c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
10371c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll [lacks WinVerifyTrust]
10381c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
10391c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
10401c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
10411c88.1c8c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
10421c88.1c8c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\platforms\qwindows.dll [lacks WinVerifyTrust]
10431c88.1c8c: supR3HardenedDllNotificationCallback: load 00007ffed9be0000 LB 0x0012e000 C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll [fFlags=0x0]
10441c88.1c8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\platforms\qwindows.dll [lacks WinVerifyTrust]
10451c88.1c8c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffed9be0000 'C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll'
10461c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcrt.dll'.
10471c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'rpcrt4.dll'.
10481c88.1c8c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll)
10491c88.1c8c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll
10501c88.1c8c: supR3HardenedDllNotificationCallback: load 00007fff266a0000 LB 0x00012000 C:\windows\SYSTEM32\kernel.appcore.dll [fFlags=0x0]
10511c88.1c8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll [lacks WinVerifyTrust]
10521c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
10531c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #33 'gdi32.dll'.
10541c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'user32.dll'.
10551c88.1c8c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\uxtheme.dll)
10561c88.1c8c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\uxtheme.dll
10571c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
10581c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
10591c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
10601c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
10611c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
10621c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
10631c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
10641c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
10651c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
10661c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
10671c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
10681c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
10691c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
10701c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
10711c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
10721c88.1c8c: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
10731c88.1c8c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\uxtheme.dll [lacks WinVerifyTrust]
10741c88.1c8c: supR3HardenedDllNotificationCallback: load 00007fff25520000 LB 0x0009e000 C:\windows\system32\uxtheme.dll [fFlags=0x0]
10751c88.1c8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\uxtheme.dll [lacks WinVerifyTrust]
10761c88.1c8c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff25520000 'C:\windows\system32\uxtheme.dll'
10771c88.1c8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
10781c88.1c8c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff298c0000 'C:\windows\system32\user32.dll'
10791c88.1c8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll [lacks WinVerifyTrust]
10801c88.1c8c: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
10811c88.1c8c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff28940000 'C:\windows\system32\shell32.dll'
10821c88.1c8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\SHCore.dll [lacks WinVerifyTrust]
10831c88.1c8c: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\system32\SHCore.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
10841c88.1c8c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff290f0000 'C:\windows\system32\SHCore.dll'
10851c88.1c8c: supR3HardenedMonitor_LdrLoadDll: error opening 'C:\windows\system32\wintab32.dll': 0 (NtPath=\??\C:\windows\system32\wintab32.dll; Input=C:\windows\system32\wintab32.dll; rcNtGetDll=0x0
10861c88.1c8c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000034 'C:\windows\system32\wintab32.dll'
10871c88.1c8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll [lacks WinVerifyTrust]
10881c88.1c8c: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\system32\winmm.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
10891c88.1c8c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff1d640000 'C:\windows\system32\winmm.dll'
10901c88.1c8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll [lacks WinVerifyTrust]
10911c88.1c8c: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\system32\winmm.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
10921c88.1c8c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff1d640000 'C:\windows\system32\winmm.dll'
10931c88.1c8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll [lacks WinVerifyTrust]
10941c88.1c8c: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
10951c88.1c8c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff28940000 'C:\windows\system32\shell32.dll'
10961c88.1c8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\uxtheme.dll [lacks WinVerifyTrust]
10971c88.1c8c: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
10981c88.1c8c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff25520000 'C:\windows\system32\uxtheme.dll'
10991c88.1c8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
11001c88.1c8c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff29f20000 'C:\windows\system32\gdi32.dll'
11011c88.1c8c: supR3HardenedDllNotificationCallback: load 00007fff29790000 LB 0x00115000 C:\windows\System32\MSCTF.dll [fFlags=0x0]
11021c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
11031c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'oleaut32.dll'.
11041c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'user32.dll'.
11051c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #37 'gdi32.dll'.
11061c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #38 'imm32.dll'.
11071c88.1c8c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\msctf.dll)
11081c88.1c8c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msctf.dll
11091c88.1c8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
11101c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'...
11111c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume3\Windows\System32\imm32.dll' [rcNtRedir=0xc0150008]
11121c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\imm32.dll [lacks WinVerifyTrust]
11131c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
11141c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
11151c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
11161c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
11171c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
11181c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
11191c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
11201c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
11211c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
11221c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
11231c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
11241c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
11251c88.1c8c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff29270000 'C:\windows\System32\rpcrt4.dll'
11261c88.1c8c: supR3HardenedDllNotificationCallback: load 00007fff287d0000 LB 0x000a9000 C:\windows\System32\clbcatq.dll [fFlags=0x0]
11271c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
11281c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #30 'rpcrt4.dll'.
11291c88.1c8c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\clbcatq.dll)
11301c88.1c8c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\clbcatq.dll
11311c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
11321c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'd3d11.dll'.
11331c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27 'dcomp.dll'.
11341c88.1c8c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\DataExchange.dll)
11351c88.1c8c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\DataExchange.dll
11361c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dcomp.dll'...
11371c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'dcomp.dll' -> '\Device\HarddiskVolume3\Windows\System32\dcomp.dll' [rcNtRedir=0xc0150008]
11381c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'win32u.dll'.
11391c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp_win.dll'.
11401c88.1c8c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\dcomp.dll)
11411c88.1c8c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\dcomp.dll
11421c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'd3d11.dll'...
11431c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'd3d11.dll' -> '\Device\HarddiskVolume3\Windows\System32\d3d11.dll' [rcNtRedir=0xc0150008]
11441c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
11451c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'dxgi.dll'.
11461c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #28 'win32u.dll'.
11471c88.1c8c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\d3d11.dll)
11481c88.1c8c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\d3d11.dll
11491c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
11501c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
11511c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
11521c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
11531c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
11541c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
11551c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
11561c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
11571c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
11581c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
11591c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
11601c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [lacks WinVerifyTrust]
11611c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dxgi.dll'...
11621c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'dxgi.dll' -> '\Device\HarddiskVolume3\Windows\System32\dxgi.dll' [rcNtRedir=0xc0150008]
11631c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
11641c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'win32u.dll'.
11651c88.1c8c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\dxgi.dll)
11661c88.1c8c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\dxgi.dll
11671c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
11681c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
11691c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
11701c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
11711c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
11721c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust]
11731c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
11741c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
11751c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [lacks WinVerifyTrust]
11761c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
11771c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
11781c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [lacks WinVerifyTrust]
11791c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
11801c88.1c8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
11811c88.1c8c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
11821c88.1c8c: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\system32\dataexchange.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
11831c88.1c8c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\DataExchange.dll [lacks WinVerifyTrust]
11841c88.1c8c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\d3d11.dll [lacks WinVerifyTrust]
11851c88.1c8c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dcomp.dll [lacks WinVerifyTrust]
11861c88.1c8c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dxgi.dll [lacks WinVerifyTrust]
11871c88.1c8c: supR3HardenedDllNotificationCallback: load 00007fff26710000 LB 0x000f3000 C:\windows\system32\dxgi.dll [fFlags=0x0]
11881c88.1c8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dxgi.dll [lacks WinVerifyTrust]
11891c88.1c8c: supR3HardenedDllNotificationCallback: load 00007fff23c00000 LB 0x00264000 C:\windows\system32\d3d11.dll [fFlags=0x0]
11901c88.1c8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\d3d11.dll [lacks WinVerifyTrust]
11911c88.1c8c: supR3HardenedDllNotificationCallback: load 00007fff24890000 LB 0x001e7000 C:\windows\system32\dcomp.dll [fFlags=0x0]
11921c88.1c8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dcomp.dll [lacks WinVerifyTrust]
11931c88.1c8c: supR3HardenedDllNotificationCallback: load 00007ffef3ba0000 LB 0x0003e000 C:\windows\system32\dataexchange.dll [fFlags=0x0]
11941c88.1c8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\DataExchange.dll [lacks WinVerifyTrust]
11951c88.1c8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
11961c88.1c8c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff29f20000 'C:\windows\System32\gdi32.dll'
11971c88.1c8c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffef3ba0000 'C:\windows\system32\dataexchange.dll'
11981c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #30 'rpcrt4.dll'.
11991c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #43 'combase.dll'.
12001c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #45 'msvcp_win.dll'.
12011c88.1c8c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll)
12021c88.1c8c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll
12031c88.1c8c: supR3HardenedDllNotificationCallback: load 00007fff226d0000 LB 0x00201000 C:\windows\system32\twinapi.appcore.dll [fFlags=0x0]
12041c88.1c8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll [lacks WinVerifyTrust]
12051c88.1ba8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
12061c88.1ba8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\winmmbase.dll)
12071c88.1ba8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\winmmbase.dll
12081c88.1ba8: supR3HardenedDllNotificationCallback: load 00007ffefb480000 LB 0x00026000 C:\windows\SYSTEM32\winmmbase.dll [fFlags=0x0]
12091c88.1ba8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmmbase.dll [lacks WinVerifyTrust]
12101c88.1ba8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
12111c88.1ba8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #16 'rpcrt4.dll'.
12121c88.1ba8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #28 'devobj.dll'.
12131c88.1ba8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll)
12141c88.1ba8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll
12151c88.1ba8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'cfgmgr32.dll'.
12161c88.1ba8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\devobj.dll)
12171c88.1ba8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\devobj.dll
12181c88.1ba8: supR3HardenedDllNotificationCallback: load 00007fff28390000 LB 0x0004e000 C:\windows\System32\cfgmgr32.dll [fFlags=0x0]
12191c88.1ba8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll)
12201c88.1ba8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll
12211c88.1ba8: supR3HardenedDllNotificationCallback: load 00007fff27b70000 LB 0x0002c000 C:\windows\SYSTEM32\DEVOBJ.dll [fFlags=0x0]
12221c88.1ba8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\devobj.dll [lacks WinVerifyTrust]
12231c88.1ba8: supR3HardenedDllNotificationCallback: load 00007fff20430000 LB 0x00085000 C:\windows\SYSTEM32\MMDevAPI.DLL [fFlags=0x0]
12241c88.1ba8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
12251c88.1ba8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
12261c88.1ba8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'mmdevapi.dll'.
12271c88.1ba8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'ksuser.dll'.
12281c88.1ba8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #30 'avrt.dll'.
12291c88.1ba8: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\wdmaud.drv)
12301c88.1ba8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\wdmaud.drv
12311c88.1ba8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'avrt.dll'...
12321c88.1ba8: supR3HardenedWinVerifyCacheProcessImportTodos: 'avrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\avrt.dll' [rcNtRedir=0xc0150008]
12331c88.1ba8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\avrt.dll)
12341c88.1ba8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\avrt.dll
12351c88.1ba8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ksuser.dll'...
12361c88.1ba8: supR3HardenedWinVerifyCacheProcessImportTodos: 'ksuser.dll' -> '\Device\HarddiskVolume3\Windows\System32\ksuser.dll' [rcNtRedir=0xc0150008]
12371c88.1ba8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
12381c88.1ba8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ksuser.dll)
12391c88.1ba8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ksuser.dll
12401c88.1ba8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mmdevapi.dll'...
12411c88.1ba8: supR3HardenedWinVerifyCacheProcessImportTodos: 'mmdevapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\mmdevapi.dll' [rcNtRedir=0xc0150008]
12421c88.1ba8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
12431c88.1ba8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
12441c88.1ba8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
12451c88.1ba8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
12461c88.1ba8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'cfgmgr32.dll'...
12471c88.1ba8: supR3HardenedWinVerifyCacheProcessImportTodos: 'cfgmgr32.dll' -> '\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll' [rcNtRedir=0xc0150008]
12481c88.1ba8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll [lacks WinVerifyTrust]
12491c88.1ba8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'devobj.dll'...
12501c88.1ba8: supR3HardenedWinVerifyCacheProcessImportTodos: 'devobj.dll' -> '\Device\HarddiskVolume3\Windows\System32\devobj.dll' [rcNtRedir=0xc0150008]
12511c88.1ba8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\devobj.dll [lacks WinVerifyTrust]
12521c88.1ba8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
12531c88.1ba8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
12541c88.1ba8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
12551c88.1ba8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
12561c88.1ba8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
12571c88.1ba8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust]
12581c88.1ba8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
12591c88.1ba8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
12601c88.1ba8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
12611c88.1ba8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
12621c88.1ba8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
12631c88.1ba8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust]
12641c88.1ba8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
12651c88.1ba8: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
12661c88.1ba8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [lacks WinVerifyTrust]
12671c88.1ba8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
12681c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
12691c88.1ba8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
12701c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #15 'oleaut32.dll'.
12711c88.1ba8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
12721c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #17 'rpcrt4.dll'.
12731c88.1ba8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
12741c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #20 'coreuicomponents.dll'.
12751c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #21 'coremessaging.dll'.
12761c88.1ba8: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
12771c88.1c8c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\TextInputFramework.dll)
12781c88.1ba8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
12791c88.1c8c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\TextInputFramework.dll
12801c88.1ba8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
12811c88.1ba8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
12821c88.1ba8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
12831c88.1ba8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
12841c88.1ba8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
12851c88.1ba8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
12861c88.1ba8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coremessaging.dll'...
12871c88.1ba8: supR3HardenedWinVerifyCacheProcessImportTodos: 'coremessaging.dll' -> '\Device\HarddiskVolume3\Windows\System32\coremessaging.dll' [rcNtRedir=0xc0150008]
12881c88.1ba8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
12891c88.1ba8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #20 'ws2_32.dll'.
12901c88.1ba8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll)
12911c88.1ba8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll
12921c88.1ba8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coreuicomponents.dll'...
12931c88.1ba8: supR3HardenedWinVerifyCacheProcessImportTodos: 'coreuicomponents.dll' -> '\Device\HarddiskVolume3\Windows\System32\coreuicomponents.dll' [rcNtRedir=0xc0150008]
12941c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
12951c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'coremessaging.dll'.
12961c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #40 'rpcrt4.dll'.
12971c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #48 'shcore.dll'.
12981c88.1c8c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\CoreUIComponents.dll)
12991c88.1c8c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\CoreUIComponents.dll
13001c88.1c8c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll [lacks WinVerifyTrust]
13011c88.1c8c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ntmarta.dll)
13021c88.1c8c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ntmarta.dll
13031c88.1ba8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
13041c88.1ba8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'coremessaging.dll'.
13051c88.1ba8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #40 'rpcrt4.dll'.
13061c88.1ba8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #48 'shcore.dll'.
13071c88.1ba8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\CoreUIComponents.dll)
13081c88.1ba8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
13091c88.1ba8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
13101c88.1ba8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
13111c88.1ba8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shcore.dll'...
13121c88.1ba8: supR3HardenedWinVerifyCacheProcessImportTodos: 'shcore.dll' -> '\Device\HarddiskVolume3\Windows\System32\shcore.dll' [rcNtRedir=0xc0150008]
13131c88.1ba8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\SHCore.dll [lacks WinVerifyTrust]
13141c88.1ba8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
13151c88.1ba8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
13161c88.1ba8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
13171c88.1ba8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coremessaging.dll'...
13181c88.1ba8: supR3HardenedWinVerifyCacheProcessImportTodos: 'coremessaging.dll' -> '\Device\HarddiskVolume3\Windows\System32\coremessaging.dll' [rcNtRedir=0xc0150008]
13191c88.1ba8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll [lacks WinVerifyTrust]
13201c88.1ba8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
13211c88.1ba8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
13221c88.1ba8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
13231c88.1ba8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shcore.dll'...
13241c88.1ba8: supR3HardenedWinVerifyCacheProcessImportTodos: 'shcore.dll' -> '\Device\HarddiskVolume3\Windows\System32\shcore.dll' [rcNtRedir=0xc0150008]
13251c88.1ba8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\SHCore.dll [lacks WinVerifyTrust]
13261c88.1ba8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
13271c88.1ba8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
13281c88.1ba8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
13291c88.1ba8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coremessaging.dll'...
13301c88.1ba8: supR3HardenedWinVerifyCacheProcessImportTodos: 'coremessaging.dll' -> '\Device\HarddiskVolume3\Windows\System32\coremessaging.dll' [rcNtRedir=0xc0150008]
13311c88.1ba8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll [lacks WinVerifyTrust]
13321c88.1ba8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
13331c88.1ba8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
13341c88.1ba8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
13351c88.1ba8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
13361c88.1ba8: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
13371c88.1ba8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ws2_32.dll [lacks WinVerifyTrust]
13381c88.1ba8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
13391c88.1ba8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
13401c88.1ba8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
13411c88.1ba8: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
13421c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'combase.dll'.
13431c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #24 'rpcrt4.dll'.
13441c88.1c8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #32 'bcryptprimitives.dll'.
13451c88.1c8c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\WinTypes.dll)
13461c88.1c8c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\WinTypes.dll
13471c88.1c8c: supR3HardenedDllNotificationCallback: load 00007fff26c40000 LB 0x00033000 C:\windows\SYSTEM32\ntmarta.dll [fFlags=0x0]
13481c88.1c8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ntmarta.dll [lacks WinVerifyTrust]
13491c88.1c8c: supR3HardenedDllNotificationCallback: load 00007fff25240000 LB 0x000f2000 C:\windows\System32\CoreMessaging.dll [fFlags=0x0]
13501c88.1c8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll [lacks WinVerifyTrust]
13511c88.1c8c: supR3HardenedDllNotificationCallback: load 00007fff23aa0000 LB 0x00154000 C:\windows\SYSTEM32\wintypes.dll [fFlags=0x0]
13521c88.1c8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\WinTypes.dll [lacks WinVerifyTrust]
13531c88.1c8c: supR3HardenedDllNotificationCallback: load 00007fff24a80000 LB 0x0035e000 C:\windows\System32\CoreUIComponents.dll [fFlags=0x0]
13541c88.1c8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\CoreUIComponents.dll [lacks WinVerifyTrust]
13551c88.1c8c: supR3HardenedDllNotificationCallback: load 00007ffefde20000 LB 0x000fb000 C:\windows\SYSTEM32\textinputframework.dll [fFlags=0x0]
13561c88.1c8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\TextInputFramework.dll [lacks WinVerifyTrust]
13571c88.1ba8: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
13581c88.1c8c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(ext-ms-win-rtcore-ntuser-window-ext-l1-1-0.dll) -> 0x0, fPresent=1
13591c88.1c8c: supR3HardenedMonitor_LdrLoadDll: pName=ext-ms-win-rtcore-ntuser-window-ext-l1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
13601c88.1c8c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff298c0000 'ext-ms-win-rtcore-ntuser-window-ext-l1-1-0.dll'
13611c88.1ba8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ksuser.dll [lacks WinVerifyTrust]
13621c88.1c8c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(ext-ms-win-rtcore-ntuser-integration-l1-1-0.dll) -> 0x0, fPresent=1
13631c88.1c8c: supR3HardenedMonitor_LdrLoadDll: pName=ext-ms-win-rtcore-ntuser-integration-l1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
13641c88.1c8c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff298c0000 'ext-ms-win-rtcore-ntuser-integration-l1-1-0.dll'
13651c88.1c8c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-com-l1-1-0.dll) -> 0x0, fPresent=1
13661c88.1c8c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-com-l1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
13671c88.1c8c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff29bc0000 'api-ms-win-core-com-l1-1-0.dll'
13681c88.1ba8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\avrt.dll [lacks WinVerifyTrust]
13691c88.1ba8: supR3HardenedDllNotificationCallback: load 00007fff21f20000 LB 0x00009000 C:\windows\SYSTEM32\ksuser.dll [fFlags=0x0]
13701c88.1ba8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ksuser.dll [lacks WinVerifyTrust]
13711c88.1ba8: supR3HardenedDllNotificationCallback: load 00007fff232c0000 LB 0x0000a000 C:\windows\SYSTEM32\AVRT.dll [fFlags=0x0]
13721c88.1ba8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\avrt.dll [lacks WinVerifyTrust]
13731c88.1ba8: supR3HardenedDllNotificationCallback: load 00007ffed5ad0000 LB 0x00046000 C:\windows\System32\wdmaud.drv [fFlags=0x0]
13741c88.1ba8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
13751c88.1ba8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffed5ad0000 'C:\windows\System32\wdmaud.drv'
13761c88.1ba8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
13771c88.1ba8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'...
13781c88.1ba8: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008]
13791c88.1ba8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust]
13801c88.1ba8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
13811c88.1ba8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
13821c88.1ba8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
13831c88.1ba8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
13841c88.1ba8: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
13851c88.1ba8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [lacks WinVerifyTrust]
13861c88.1ba8: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
13871c88.1ba8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffed5ad0000 'C:\windows\System32\wdmaud.drv'
13881c88.1c8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msctf.dll [lacks WinVerifyTrust]
13891c88.1c8c: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\MSCTF.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
13901c88.1c8c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff29790000 'C:\windows\System32\MSCTF.dll'
13911c88.1ba8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
13921c88.1ba8: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\MMDEVAPI.DLL (Input=MMDEVAPI.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
13931c88.1ba8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff20430000 'C:\windows\System32\MMDEVAPI.DLL'
13941c88.1ba8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
13951c88.1ba8: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
13961c88.1ba8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffed5ad0000 'C:\windows\System32\wdmaud.drv'
13971c88.1ba8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
13981c88.1ba8: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
13991c88.1ba8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffed5ad0000 'C:\windows\System32\wdmaud.drv'
14001c88.1ba8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
14011c88.1ba8: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
14021c88.1ba8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffed5ad0000 'C:\windows\System32\wdmaud.drv'
14031c88.1ba8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
14041c88.1ba8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'rpcrt4.dll'.
14051c88.1ba8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'oleaut32.dll'.
14061c88.1ba8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #29 'mmdevapi.dll'.
14071c88.1ba8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\AudioSes.dll)
14081c88.1ba8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\AudioSes.dll
14091c88.1ba8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mmdevapi.dll'...
14101c88.1ba8: supR3HardenedWinVerifyCacheProcessImportTodos: 'mmdevapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\mmdevapi.dll' [rcNtRedir=0xc0150008]
14111c88.1ba8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
14121c88.1ba8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
14131c88.1ba8: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
14141c88.1ba8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
14151c88.1ba8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
14161c88.1ba8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
14171c88.1ba8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
14181c88.1ba8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
14191c88.1ba8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
14201c88.1ba8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust]
14211c88.1ba8: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\AUDIOSES.DLL (Input=AUDIOSES.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
14221c88.1ba8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\AudioSes.dll [lacks WinVerifyTrust]
14231c88.1ba8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'rpcrt4.dll'.
14241c88.1ba8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\powrprof.dll)
14251c88.1ba8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\powrprof.dll
14261c88.1ba8: supR3HardenedDllNotificationCallback: load 00007fff27790000 LB 0x0004b000 C:\windows\SYSTEM32\powrprof.dll [fFlags=0x0]
14271c88.1ba8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\powrprof.dll [lacks WinVerifyTrust]
14281c88.1ba8: supR3HardenedDllNotificationCallback: load 00007fff205c0000 LB 0x00185000 C:\windows\System32\AUDIOSES.DLL [fFlags=0x0]
14291c88.1ba8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\AudioSes.dll [lacks WinVerifyTrust]
14301c88.1ba8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\umpdc.dll)
14311c88.1ba8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\umpdc.dll
14321c88.1ba8: supR3HardenedDllNotificationCallback: load 00007fff27710000 LB 0x00012000 C:\windows\SYSTEM32\UMPDC.dll [fFlags=0x0]
14331c88.1ba8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\umpdc.dll [lacks WinVerifyTrust]
14341c88.1ba8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff205c0000 'C:\windows\System32\AUDIOSES.DLL'
14351c88.1ba8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
14361c88.1ba8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
14371c88.1ba8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
14381c88.1ba8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
14391c88.1ba8: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
14401c88.1ba8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffed5ad0000 'C:\windows\System32\wdmaud.drv'
14411c88.1ba8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
14421c88.1ba8: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
14431c88.1ba8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffed5ad0000 'C:\windows\System32\wdmaud.drv'
14441c88.1ba8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
14451c88.1ba8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffed5ad0000 'C:\windows\System32\wdmaud.drv'
14461c88.1ba8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
14471c88.1ba8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'mmdevapi.dll'.
14481c88.1ba8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'msacm32.dll'.
14491c88.1ba8: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\msacm32.drv)
14501c88.1ba8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msacm32.drv
14511c88.1ba8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msacm32.dll'...
14521c88.1ba8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msacm32.dll' -> '\Device\HarddiskVolume3\Windows\System32\msacm32.dll' [rcNtRedir=0xc0150008]
14531c88.1ba8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
14541c88.1ba8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\msacm32.dll)
14551c88.1ba8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msacm32.dll
14561c88.1ba8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mmdevapi.dll'...
14571c88.1ba8: supR3HardenedWinVerifyCacheProcessImportTodos: 'mmdevapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\mmdevapi.dll' [rcNtRedir=0xc0150008]
14581c88.1ba8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
14591c88.1ba8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
14601c88.1ba8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
14611c88.1ba8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
14621c88.1ba8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
14631c88.1ba8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
14641c88.1ba8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
14651c88.1ba8: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
14661c88.1ba8: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
14671c88.1ba8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msacm32.dll [lacks WinVerifyTrust]
14681c88.1ba8: supR3HardenedDllNotificationCallback: load 00007ffed5ab0000 LB 0x0001e000 C:\windows\SYSTEM32\MSACM32.dll [fFlags=0x0]
14691c88.1ba8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msacm32.dll [lacks WinVerifyTrust]
14701c88.1ba8: supR3HardenedDllNotificationCallback: load 00007ffef7d80000 LB 0x0000d000 C:\windows\System32\msacm32.drv [fFlags=0x0]
14711c88.1ba8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
14721c88.1ba8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffef7d80000 'C:\windows\System32\msacm32.drv'
14731c88.1ba8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
14741c88.1ba8: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
14751c88.1ba8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffef7d80000 'C:\windows\System32\msacm32.drv'
14761c88.1ba8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
14771c88.1ba8: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
14781c88.1ba8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffef7d80000 'C:\windows\System32\msacm32.drv'
14791c88.1ba8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
14801c88.1ba8: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
14811c88.1ba8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffef7d80000 'C:\windows\System32\msacm32.drv'
14821c88.1ba8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
14831c88.1ba8: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
14841c88.1ba8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffef7d80000 'C:\windows\System32\msacm32.drv'
14851c88.1ba8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
14861c88.1ba8: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
14871c88.1ba8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffef7d80000 'C:\windows\System32\msacm32.drv'
14881c88.1ba8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
14891c88.1ba8: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
14901c88.1ba8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffef7d80000 'C:\windows\System32\msacm32.drv'
14911c88.1ba8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
14921c88.1ba8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffef7d80000 'C:\windows\System32\msacm32.drv'
14931c88.1ba8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
14941c88.1ba8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffef7d80000 'C:\windows\System32\msacm32.drv'
14951c88.1ba8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
14961c88.1ba8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffef7d80000 'C:\windows\System32\msacm32.drv'
14971c88.1ba8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
14981c88.1ba8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'winmmbase.dll'.
14991c88.1ba8: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\midimap.dll)
15001c88.1ba8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\midimap.dll
15011c88.1ba8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmmbase.dll'...
15021c88.1ba8: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmmbase.dll' -> '\Device\HarddiskVolume3\Windows\System32\winmmbase.dll' [rcNtRedir=0xc0150008]
15031c88.1ba8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmmbase.dll [lacks WinVerifyTrust]
15041c88.1ba8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
15051c88.1ba8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
15061c88.1ba8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
15071c88.1ba8: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
15081c88.1ba8: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\midimap.dll [lacks WinVerifyTrust]
15091c88.1ba8: supR3HardenedDllNotificationCallback: load 00007ffef3910000 LB 0x0000b000 C:\windows\System32\midimap.dll [fFlags=0x0]
15101c88.1ba8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\midimap.dll [lacks WinVerifyTrust]
15111c88.1ba8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffef3910000 'C:\windows\System32\midimap.dll'
15121c88.1ba8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\midimap.dll [lacks WinVerifyTrust]
15131c88.1ba8: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
15141c88.1ba8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffef3910000 'C:\windows\System32\midimap.dll'
15151c88.1ba8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\midimap.dll [lacks WinVerifyTrust]
15161c88.1ba8: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
15171c88.1ba8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffef3910000 'C:\windows\System32\midimap.dll'
15181c88.1ba8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\midimap.dll [lacks WinVerifyTrust]
15191c88.1ba8: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
15201c88.1ba8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffef3910000 'C:\windows\System32\midimap.dll'
15211c88.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
15221c88.de8: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\MMDevApi.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
15231c88.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff20430000 'C:\windows\System32\MMDevApi.dll'
15242e30.a3c: supR3HardNtChildWaitFor[1]: Quitting: ExitCode=0x1 (rcNtWait=0x0, rcNt1=0x0, rcNt2=0x103, rcNt3=0x103, 10739 ms, the end);

© 2024 Oracle Support Privacy / Do Not Sell My Info Terms of Use Trademark Policy