6b6c.52a0: Log file opened: 6.1.22r144080 g_hStartupLog=0000000000000074 g_uNtVerCombined=0xa04a6300 6b6c.52a0: \SystemRoot\System32\ntdll.dll: 6b6c.52a0: CreationTime: 2021-06-23T21:04:40.903979500Z 6b6c.52a0: LastWriteTime: 2021-06-23T21:04:40.937508100Z 6b6c.52a0: ChangeTime: 2021-07-10T03:36:54.090625600Z 6b6c.52a0: FileAttributes: 0x20 6b6c.52a0: Size: 0x1ee508 6b6c.52a0: NT Headers: 0xe8 6b6c.52a0: Timestamp: 0x88bf621 6b6c.52a0: Machine: 0x8664 - amd64 6b6c.52a0: Timestamp: 0x88bf621 6b6c.52a0: Image Version: 10.0 6b6c.52a0: SizeOfImage: 0x1f5000 (2052096) 6b6c.52a0: Resource Dir: 0x184000 LB 0x6fdc8 6b6c.52a0: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)] 6b6c.52a0: [Raw version resource data: 0x1840f0 LB 0x380, codepage 0x0 (reserved 0x0)] 6b6c.52a0: ProductName: Microsoft® Windows® Operating System 6b6c.52a0: ProductVersion: 10.0.19041.1081 6b6c.52a0: FileVersion: 10.0.19041.1081 (WinBuild.160101.0800) 6b6c.52a0: FileDescription: NT Layer DLL 6b6c.52a0: \SystemRoot\System32\kernel32.dll: 6b6c.52a0: CreationTime: 2021-06-02T06:23:16.099669400Z 6b6c.52a0: LastWriteTime: 2021-06-02T06:23:16.115682900Z 6b6c.52a0: ChangeTime: 2021-07-10T03:36:53.948992700Z 6b6c.52a0: FileAttributes: 0x20 6b6c.52a0: Size: 0xbac20 6b6c.52a0: NT Headers: 0xe8 6b6c.52a0: Timestamp: 0x92f57b1a 6b6c.52a0: Machine: 0x8664 - amd64 6b6c.52a0: Timestamp: 0x92f57b1a 6b6c.52a0: Image Version: 10.0 6b6c.52a0: SizeOfImage: 0xbd000 (774144) 6b6c.52a0: Resource Dir: 0xbb000 LB 0x520 6b6c.52a0: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)] 6b6c.52a0: [Raw version resource data: 0xbb0b0 LB 0x3a4, codepage 0x0 (reserved 0x0)] 6b6c.52a0: ProductName: Microsoft® Windows® Operating System 6b6c.52a0: ProductVersion: 10.0.19041.1023 6b6c.52a0: FileVersion: 10.0.19041.1023 (WinBuild.160101.0800) 6b6c.52a0: FileDescription: Windows NT BASE API Client DLL 6b6c.52a0: \SystemRoot\System32\KernelBase.dll: 6b6c.52a0: CreationTime: 2021-06-23T21:04:41.509834200Z 6b6c.52a0: LastWriteTime: 2021-06-23T21:04:41.567389900Z 6b6c.52a0: ChangeTime: 2021-07-10T03:36:54.086621900Z 6b6c.52a0: FileAttributes: 0x20 6b6c.52a0: Size: 0x2c9b98 6b6c.52a0: NT Headers: 0xf8 6b6c.52a0: Timestamp: 0xde3fc775 6b6c.52a0: Machine: 0x8664 - amd64 6b6c.52a0: Timestamp: 0xde3fc775 6b6c.52a0: Image Version: 10.0 6b6c.52a0: SizeOfImage: 0x2c9000 (2920448) 6b6c.52a0: Resource Dir: 0x2a0000 LB 0x548 6b6c.52a0: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)] 6b6c.52a0: [Raw version resource data: 0x2a00b0 LB 0x3bc, codepage 0x0 (reserved 0x0)] 6b6c.52a0: ProductName: Microsoft® Windows® Operating System 6b6c.52a0: ProductVersion: 10.0.19041.1081 6b6c.52a0: FileVersion: 10.0.19041.1081 (WinBuild.160101.0800) 6b6c.52a0: FileDescription: Windows NT BASE API Client DLL 6b6c.52a0: \SystemRoot\System32\apisetschema.dll: 6b6c.52a0: CreationTime: 2019-12-07T09:08:13.518339400Z 6b6c.52a0: LastWriteTime: 2019-12-07T09:08:13.518339400Z 6b6c.52a0: ChangeTime: 2021-07-10T03:36:53.910958000Z 6b6c.52a0: FileAttributes: 0x20 6b6c.52a0: Size: 0x1f538 6b6c.52a0: NT Headers: 0xd0 6b6c.52a0: Timestamp: 0x31288ce0 6b6c.52a0: Machine: 0x8664 - amd64 6b6c.52a0: Timestamp: 0x31288ce0 6b6c.52a0: Image Version: 10.0 6b6c.52a0: SizeOfImage: 0x20000 (131072) 6b6c.52a0: Resource Dir: 0x1f000 LB 0x408 6b6c.52a0: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)] 6b6c.52a0: [Raw version resource data: 0x1f060 LB 0x3a8, codepage 0x0 (reserved 0x0)] 6b6c.52a0: ProductName: Microsoft® Windows® Operating System 6b6c.52a0: ProductVersion: 10.0.19041.1 6b6c.52a0: FileVersion: 10.0.19041.1 (WinBuild.160101.0800) 6b6c.52a0: FileDescription: ApiSet Schema DLL 6b6c.52a0: NtOpenDirectoryObject failed on \Driver: 0xc0000022 6b6c.52a0: supR3HardenedWinFindAdversaries: 0x0 6b6c.52a0: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox' 6b6c.52a0: Calling main() 6b6c.52a0: SUPR3HardenedMain: pszProgName=VirtualBoxVM fFlags=0x2 6b6c.52a0: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox' 6b6c.52a0: SUPR3HardenedMain: Respawn #1 6b6c.52a0: System32: \Device\HarddiskVolume4\Windows\System32 6b6c.52a0: WinSxS: \Device\HarddiskVolume4\Windows\WinSxS 6b6c.52a0: KnownDllPath: C:\WINDOWS\System32 6b6c.52a0: supR3HardenedWinInit: Performing a limited self purification... 6b6c.52a0: supHardNtVpScanVirtualMemory: enmKind=SELF_PURIFICATION 6b6c.52a0: *0000000000000000-00000000001affff 0x0001/0x0000 0x0000000 6b6c.52a0: *00000000001b0000-00000000001bffff 0x0004/0x0004 0x0040000 6b6c.52a0: 00000000001c0000-00000000001cffff 0x0001/0x0000 0x0000000 6b6c.52a0: *00000000001d0000-00000000001ecfff 0x0002/0x0002 0x0040000 6b6c.52a0: 00000000001ed000-00000000001effff 0x0001/0x0000 0x0000000 6b6c.52a0: *00000000001f0000-00000000001f3fff 0x0002/0x0002 0x0040000 6b6c.52a0: 00000000001f4000-00000000001fffff 0x0001/0x0000 0x0000000 6b6c.52a0: *0000000000200000-000000000027afff 0x0000/0x0004 0x0020000 6b6c.52a0: 000000000027b000-000000000027dfff 0x0004/0x0004 0x0020000 6b6c.52a0: 000000000027e000-00000000003fffff 0x0000/0x0004 0x0020000 6b6c.52a0: *0000000000400000-00000000004b8fff 0x0000/0x0004 0x0020000 6b6c.52a0: 00000000004b9000-00000000004bbfff 0x0104/0x0004 0x0020000 6b6c.52a0: 00000000004bc000-00000000004fffff 0x0004/0x0004 0x0020000 6b6c.52a0: *0000000000500000-0000000000501fff 0x0004/0x0004 0x0020000 6b6c.52a0: 0000000000502000-000000000050ffff 0x0001/0x0000 0x0000000 6b6c.52a0: *0000000000510000-0000000000511fff 0x0004/0x0004 0x0020000 6b6c.52a0: 0000000000512000-0000000000571fff 0x0000/0x0004 0x0020000 6b6c.52a0: 0000000000572000-00000000005affff 0x0001/0x0000 0x0000000 6b6c.52a0: *00000000005b0000-00000000005b4fff 0x0004/0x0004 0x0020000 6b6c.52a0: 00000000005b5000-00000000006affff 0x0000/0x0004 0x0020000 6b6c.52a0: *00000000006b0000-0000000000778fff 0x0002/0x0002 0x0040000 6b6c.52a0: 0000000000779000-000000000086ffff 0x0001/0x0000 0x0000000 6b6c.52a0: *0000000000870000-000000000087efff 0x0004/0x0004 0x0020000 6b6c.52a0: 000000000087f000-000000000087ffff 0x0000/0x0004 0x0020000 6b6c.52a0: *0000000000880000-000000000088efff 0x0000/0x0004 0x0020000 6b6c.52a0: 000000000088f000-0000000000a84fff 0x0004/0x0004 0x0020000 6b6c.52a0: 0000000000a85000-0000000000a85fff 0x0000/0x0004 0x0020000 6b6c.52a0: 0000000000a86000-0000000000a8ffff 0x0001/0x0000 0x0000000 6b6c.52a0: *0000000000a90000-0000000000ab4fff 0x0004/0x0004 0x0020000 6b6c.52a0: 0000000000ab5000-0000000000b8ffff 0x0000/0x0004 0x0020000 6b6c.52a0: 0000000000b90000-000000007ffdffff 0x0001/0x0000 0x0000000 6b6c.52a0: *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000 6b6c.52a0: 000000007ffe1000-000000007ffe3fff 0x0001/0x0000 0x0000000 6b6c.52a0: *000000007ffe4000-000000007ffe4fff 0x0002/0x0002 0x0020000 6b6c.52a0: 000000007ffe5000-00007ff3ff9affff 0x0001/0x0000 0x0000000 6b6c.52a0: *00007ff3ff9b0000-00007ff3ff9b4fff 0x0002/0x0002 0x0040000 6b6c.52a0: 00007ff3ff9b5000-00007ff3ffaaffff 0x0000/0x0002 0x0040000 6b6c.52a0: *00007ff3ffab0000-00007ff4ffacffff 0x0000/0x0004 0x0020000 6b6c.52a0: *00007ff4ffad0000-00007ff501acffff 0x0000/0x0004 0x0020000 6b6c.52a0: 00007ff501ad0000-00007ff501ad0fff 0x0004/0x0004 0x0020000 6b6c.52a0: 00007ff501ad1000-00007ff501adffff 0x0001/0x0000 0x0000000 6b6c.52a0: *00007ff501ae0000-00007ff501ae0fff 0x0002/0x0002 0x0040000 6b6c.52a0: 00007ff501ae1000-00007ff501aeffff 0x0001/0x0000 0x0000000 6b6c.52a0: *00007ff501af0000-00007ff501b12fff 0x0002/0x0002 0x0040000 6b6c.52a0: 00007ff501b13000-00007ff71783ffff 0x0001/0x0000 0x0000000 6b6c.52a0: *00007ff717840000-00007ff717840fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe 6b6c.52a0: 00007ff717841000-00007ff7178b7fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe 6b6c.52a0: 00007ff7178b8000-00007ff7178b8fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe 6b6c.52a0: 00007ff7178b9000-00007ff717901fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe 6b6c.52a0: 00007ff717902000-00007ff717904fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe 6b6c.52a0: 00007ff717905000-00007ff717907fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe 6b6c.52a0: 00007ff717908000-00007ff71790afff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe 6b6c.52a0: 00007ff71790b000-00007ff71790bfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe 6b6c.52a0: 00007ff71790c000-00007ff71790dfff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe 6b6c.52a0: 00007ff71790e000-00007ff71790efff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe 6b6c.52a0: 00007ff71790f000-00007ff717957fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe 6b6c.52a0: 00007ff717958000-00007ffd0004ffff 0x0001/0x0000 0x0000000 6b6c.52a0: *00007ffd00050000-00007ffd00050fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\KernelBase.dll 6b6c.52a0: 00007ffd00051000-00007ffd00162fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\KernelBase.dll 6b6c.52a0: 00007ffd00163000-00007ffd002dafff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\KernelBase.dll 6b6c.52a0: 00007ffd002db000-00007ffd002defff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\KernelBase.dll 6b6c.52a0: 00007ffd002df000-00007ffd002dffff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\KernelBase.dll 6b6c.52a0: 00007ffd002e0000-00007ffd00318fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\KernelBase.dll 6b6c.52a0: 00007ffd00319000-00007ffd00e3ffff 0x0001/0x0000 0x0000000 6b6c.52a0: *00007ffd00e40000-00007ffd00e40fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\kernel32.dll 6b6c.52a0: 00007ffd00e41000-00007ffd00ebefff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\kernel32.dll 6b6c.52a0: 00007ffd00ebf000-00007ffd00ef1fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\kernel32.dll 6b6c.52a0: 00007ffd00ef2000-00007ffd00ef2fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\kernel32.dll 6b6c.52a0: 00007ffd00ef3000-00007ffd00ef3fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\kernel32.dll 6b6c.52a0: 00007ffd00ef4000-00007ffd00efcfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\kernel32.dll 6b6c.52a0: 00007ffd00efd000-00007ffd022affff 0x0001/0x0000 0x0000000 6b6c.52a0: *00007ffd022b0000-00007ffd022b0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll 6b6c.52a0: 00007ffd022b1000-00007ffd023cbfff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll 6b6c.52a0: 00007ffd023cc000-00007ffd02413fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll 6b6c.52a0: 00007ffd02414000-00007ffd02414fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll 6b6c.52a0: 00007ffd02415000-00007ffd02416fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll 6b6c.52a0: 00007ffd02417000-00007ffd0241ffff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll 6b6c.52a0: 00007ffd02420000-00007ffd024a4fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll 6b6c.52a0: 00007ffd024a5000-00007ffffffeffff 0x0001/0x0000 0x0000000 6b6c.52a0: kernel32.dll: timestamp 0x92f57b1a (rc=VINF_SUCCESS) 6b6c.52a0: kernelbase.dll: timestamp 0xde3fc775 (rc=VINF_SUCCESS) 6b6c.52a0: VirtualBoxVM.exe: timestamp 0x60898c77 (rc=VINF_SUCCESS) 6b6c.52a0: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe: Signature #1/2: info status: 24202 6b6c.52a0: '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports 6b6c.52a0: '\Device\HarddiskVolume4\Windows\System32\ntdll.dll' has no imports 6b6c.52a0: supR3HardenedWinInit: SUPHARDNTVPKIND_SELF_PURIFICATION_LIMITED -> VINF_SUCCESS, cFixes=0 6b6c.52a0: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe: Signature #1/2: info status: 24202 6b6c.52a0: '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports 6b6c.52a0: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe) 6b6c.52a0: supR3HardNtEnableThreadCreationEx: 6b6c.52a0: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffd02324b10 pvNtTerminateThread=00007ffd0234d870 6b6c.52a0: supR3HardenedWinDoReSpawn(1): New child 4520.25f4 [kernel32]. 6b6c.52a0: supR3HardNtChildGatherData: PebBaseAddress=0000000001015000 cbPeb=0x388 6b6c.52a0: supR3HardNtPuChFindNtdll: uNtDllParentAddr=00007ffd022b0000 uNtDllChildAddr=00007ffd022b0000 6b6c.52a0: supR3HardenedWinSetupChildInit: uLdrInitThunk=00007ffd02324b10 6b6c.52a0: supR3HardenedWinSetupChildInit: Initial context: rax=0000000000000000 rbx=0000000000000000 rcx=00007ff717847900 rdx=0000000001015000 rsi=0000000000000000 rdi=0000000000000000 r8 =0000000000000000 r9 =0000000000000000 r10=0000000000000000 r11=0000000000000000 r12=0000000000000000 r13=0000000000000000 r14=0000000000000000 r15=0000000000000000 P1=0000000000000000 P2=0000000000000000 rip=00007ffd02302630 rsp=0000000000fcfa98 rbp=0000000000000000 ctxflags=0010001b cs=0033 ss=002b ds=0000 es=0000 fs=0000 gs=0000 eflags=00000200 mxcrx=00001f80 P3=0000000000000000 P4=0000000000000000 P5=0000000000000000 P6=0000000000000000 dr0=0000000000000000 dr1=0000000000000000 dr2=0000000000000000 dr3=0000000000000000 dr6=0000000000000000 dr7=0000000000000000 vcr=0000000000000000 dcr=0000000000000000 lbt=0000000000000000 lbf=0000000000000000 lxt=0000000000000000 lxf=0000000000000000 6b6c.52a0: supR3HardenedWinSetupChildInit: Start child. 6b6c.52a0: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 0 ms. 6b6c.52a0: supR3HardNtChildPurify: Startup delay kludge #1/0: 263 ms, 30 sleeps 6b6c.52a0: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION 6b6c.52a0: *0000000000000000-0000000000e8ffff 0x0001/0x0000 0x0000000 6b6c.52a0: *0000000000e90000-0000000000eaffff 0x0004/0x0004 0x0020000 6b6c.52a0: *0000000000eb0000-0000000000eccfff 0x0002/0x0002 0x0040000 6b6c.52a0: 0000000000ecd000-0000000000ecffff 0x0001/0x0000 0x0000000 6b6c.52a0: *0000000000ed0000-0000000000fcafff 0x0000/0x0004 0x0020000 6b6c.52a0: 0000000000fcb000-0000000000fcdfff 0x0104/0x0004 0x0020000 6b6c.52a0: 0000000000fce000-0000000000fcffff 0x0004/0x0004 0x0020000 6b6c.52a0: *0000000000fd0000-0000000000fd3fff 0x0002/0x0002 0x0040000 6b6c.52a0: 0000000000fd4000-0000000000fdffff 0x0001/0x0000 0x0000000 6b6c.52a0: *0000000000fe0000-0000000000fe1fff 0x0004/0x0004 0x0020000 6b6c.52a0: 0000000000fe2000-0000000000ffffff 0x0001/0x0000 0x0000000 6b6c.52a0: *0000000001000000-0000000001014fff 0x0000/0x0004 0x0020000 6b6c.52a0: 0000000001015000-0000000001017fff 0x0004/0x0004 0x0020000 6b6c.52a0: 0000000001018000-00000000011fffff 0x0000/0x0004 0x0020000 6b6c.52a0: 0000000001200000-000000007ffdffff 0x0001/0x0000 0x0000000 6b6c.52a0: *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000 6b6c.52a0: 000000007ffe1000-000000007ffe3fff 0x0001/0x0000 0x0000000 6b6c.52a0: *000000007ffe4000-000000007ffe4fff 0x0002/0x0002 0x0020000 6b6c.52a0: 000000007ffe5000-00007ff558a4ffff 0x0001/0x0000 0x0000000 6b6c.52a0: *00007ff558a50000-00007ff558a50fff 0x0002/0x0002 0x0040000 6b6c.52a0: 00007ff558a51000-00007ff558a5ffff 0x0001/0x0000 0x0000000 6b6c.52a0: *00007ff558a60000-00007ff558a82fff 0x0002/0x0002 0x0040000 6b6c.52a0: 00007ff558a83000-00007ff71783ffff 0x0001/0x0000 0x0000000 6b6c.52a0: *00007ff717840000-00007ff717840fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe 6b6c.52a0: 00007ff717841000-00007ff7178b7fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe 6b6c.52a0: 00007ff7178b8000-00007ff7178b8fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe 6b6c.52a0: 00007ff7178b9000-00007ff717901fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe 6b6c.52a0: 00007ff717902000-00007ff717902fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe 6b6c.52a0: 00007ff717903000-00007ff717903fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe 6b6c.52a0: 00007ff717904000-00007ff717908fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe 6b6c.52a0: 00007ff717909000-00007ff717909fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe 6b6c.52a0: 00007ff71790a000-00007ff71790afff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe 6b6c.52a0: 00007ff71790b000-00007ff71790efff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe 6b6c.52a0: 00007ff71790f000-00007ff717957fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe 6b6c.52a0: 00007ff717958000-00007ffd022affff 0x0001/0x0000 0x0000000 6b6c.52a0: *00007ffd022b0000-00007ffd022b0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll 6b6c.52a0: 00007ffd022b1000-00007ffd023cbfff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll 6b6c.52a0: 00007ffd023cc000-00007ffd02413fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll 6b6c.52a0: 00007ffd02414000-00007ffd0241ffff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll 6b6c.52a0: 00007ffd02420000-00007ffd0242efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll 6b6c.52a0: 00007ffd0242f000-00007ffd0242ffff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll 6b6c.52a0: 00007ffd02430000-00007ffd02432fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll 6b6c.52a0: 00007ffd02433000-00007ffd024a4fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll 6b6c.52a0: 00007ffd024a5000-00007ffffffeffff 0x0001/0x0000 0x0000000 6b6c.52a0: supR3HardNtChildPurify: Done after 265 ms and 0 fixes (loop #0). 4520.25f4: Log file opened: 6.1.22r144080 g_hStartupLog=0000000000000004 g_uNtVerCombined=0xa04a6300 4520.25f4: supR3HardenedVmProcessInit: uNtDllAddr=00007ffd022b0000 g_uNtVerCombined=0xa04a6300 (stack ~0000000000fcf528) 4520.25f4: ntdll.dll: timestamp 0x88bf621 (rc=VINF_SUCCESS) 4520.25f4: New simple heap: #1 0000000001300000 LB 0x400000 (for 2052096 allocation) 6b6c.52a0: supR3HardNtEnableThreadCreationEx: 4520.25f4: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox' 4520.25f4: System32: \Device\HarddiskVolume4\Windows\System32 4520.25f4: WinSxS: \Device\HarddiskVolume4\Windows\WinSxS 4520.25f4: KnownDllPath: C:\WINDOWS\System32 4520.25f4: supR3HardenedVmProcessInit: Opening vboxdrv stub... 4520.25f4: supR3HardenedVmProcessInit: Restoring LdrInitializeThunk... 4520.25f4: supR3HardenedVmProcessInit: Returning to LdrInitializeThunk... 4520.25f4: Registered Dll notification callback with NTDLL. 4520.25f4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\kernel32.dll) 4520.25f4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\kernel32.dll 4520.25f4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\KERNEL32.DLL (Input=KERNEL32.DLL, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000004001: [calling] 4520.25f4: supR3HardenedDllNotificationCallback: load 00007ffd00050000 LB 0x002c9000 C:\WINDOWS\System32\KERNELBASE.dll [fFlags=0x0] 4520.25f4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\KernelBase.dll) 4520.25f4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\KernelBase.dll 4520.25f4: supR3HardenedDllNotificationCallback: load 00007ffd00e40000 LB 0x000bd000 C:\WINDOWS\System32\KERNEL32.DLL [fFlags=0x0] 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\kernel32.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd00e40000 'C:\WINDOWS\System32\KERNEL32.DLL' 4520.25f4: supR3HardenedDllNotificationCallback: load 00007ff717840000 LB 0x00118000 C:\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe [fFlags=0x0] 4520.25f4: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe: Signature #1/2: info status: 24202 4520.25f4: '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports 4520.25f4: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe) 4520.25f4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe 4520.25f4: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffd02324b10 pvNtTerminateThread=00007ffd0234d870 6b6c.52a0: supR3HardNtChildWaitFor: Found expected request 1 (CloseEvents) after 72 ms. 4520.25f4: \SystemRoot\System32\ntdll.dll: 4520.25f4: CreationTime: 2021-06-23T21:04:40.903979500Z 4520.25f4: LastWriteTime: 2021-06-23T21:04:40.937508100Z 4520.25f4: ChangeTime: 2021-07-10T03:36:54.090625600Z 4520.25f4: FileAttributes: 0x20 4520.25f4: Size: 0x1ee508 4520.25f4: NT Headers: 0xe8 4520.25f4: Timestamp: 0x88bf621 4520.25f4: Machine: 0x8664 - amd64 4520.25f4: Timestamp: 0x88bf621 4520.25f4: Image Version: 10.0 4520.25f4: SizeOfImage: 0x1f5000 (2052096) 4520.25f4: Resource Dir: 0x184000 LB 0x6fdc8 4520.25f4: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)] 4520.25f4: [Raw version resource data: 0x1840f0 LB 0x380, codepage 0x0 (reserved 0x0)] 4520.25f4: ProductName: Microsoft® Windows® Operating System 4520.25f4: ProductVersion: 10.0.19041.1081 4520.25f4: FileVersion: 10.0.19041.1081 (WinBuild.160101.0800) 4520.25f4: FileDescription: NT Layer DLL 4520.25f4: \SystemRoot\System32\kernel32.dll: 4520.25f4: CreationTime: 2021-06-02T06:23:16.099669400Z 4520.25f4: LastWriteTime: 2021-06-02T06:23:16.115682900Z 4520.25f4: ChangeTime: 2021-07-10T03:36:53.948992700Z 4520.25f4: FileAttributes: 0x20 4520.25f4: Size: 0xbac20 4520.25f4: NT Headers: 0xe8 4520.25f4: Timestamp: 0x92f57b1a 4520.25f4: Machine: 0x8664 - amd64 4520.25f4: Timestamp: 0x92f57b1a 4520.25f4: Image Version: 10.0 4520.25f4: SizeOfImage: 0xbd000 (774144) 4520.25f4: Resource Dir: 0xbb000 LB 0x520 4520.25f4: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)] 4520.25f4: [Raw version resource data: 0xbb0b0 LB 0x3a4, codepage 0x0 (reserved 0x0)] 4520.25f4: ProductName: Microsoft® Windows® Operating System 4520.25f4: ProductVersion: 10.0.19041.1023 4520.25f4: FileVersion: 10.0.19041.1023 (WinBuild.160101.0800) 4520.25f4: FileDescription: Windows NT BASE API Client DLL 4520.25f4: \SystemRoot\System32\KernelBase.dll: 4520.25f4: CreationTime: 2021-06-23T21:04:41.509834200Z 4520.25f4: LastWriteTime: 2021-06-23T21:04:41.567389900Z 4520.25f4: ChangeTime: 2021-07-10T03:36:54.086621900Z 4520.25f4: FileAttributes: 0x20 4520.25f4: Size: 0x2c9b98 4520.25f4: NT Headers: 0xf8 4520.25f4: Timestamp: 0xde3fc775 4520.25f4: Machine: 0x8664 - amd64 4520.25f4: Timestamp: 0xde3fc775 4520.25f4: Image Version: 10.0 4520.25f4: SizeOfImage: 0x2c9000 (2920448) 4520.25f4: Resource Dir: 0x2a0000 LB 0x548 4520.25f4: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)] 4520.25f4: [Raw version resource data: 0x2a00b0 LB 0x3bc, codepage 0x0 (reserved 0x0)] 4520.25f4: ProductName: Microsoft® Windows® Operating System 4520.25f4: ProductVersion: 10.0.19041.1081 4520.25f4: FileVersion: 10.0.19041.1081 (WinBuild.160101.0800) 4520.25f4: FileDescription: Windows NT BASE API Client DLL 4520.25f4: \SystemRoot\System32\apisetschema.dll: 4520.25f4: CreationTime: 2019-12-07T09:08:13.518339400Z 4520.25f4: LastWriteTime: 2019-12-07T09:08:13.518339400Z 4520.25f4: ChangeTime: 2021-07-10T03:36:53.910958000Z 4520.25f4: FileAttributes: 0x20 4520.25f4: Size: 0x1f538 4520.25f4: NT Headers: 0xd0 4520.25f4: Timestamp: 0x31288ce0 4520.25f4: Machine: 0x8664 - amd64 4520.25f4: Timestamp: 0x31288ce0 4520.25f4: Image Version: 10.0 4520.25f4: SizeOfImage: 0x20000 (131072) 4520.25f4: Resource Dir: 0x1f000 LB 0x408 4520.25f4: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)] 4520.25f4: [Raw version resource data: 0x1f060 LB 0x3a8, codepage 0x0 (reserved 0x0)] 4520.25f4: ProductName: Microsoft® Windows® Operating System 4520.25f4: ProductVersion: 10.0.19041.1 4520.25f4: FileVersion: 10.0.19041.1 (WinBuild.160101.0800) 4520.25f4: FileDescription: ApiSet Schema DLL 4520.25f4: NtOpenDirectoryObject failed on \Driver: 0xc0000022 4520.25f4: supR3HardenedWinFindAdversaries: 0x0 4520.25f4: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox' 4520.25f4: Calling main() 4520.25f4: SUPR3HardenedMain: pszProgName=VirtualBoxVM fFlags=0x2 4520.25f4: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox' 4520.25f4: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe: Signature #1/2: info status: 24202 4520.25f4: '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports 4520.25f4: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe) 4520.25f4: SUPR3HardenedMain: Respawn #2 4520.25f4: supR3HardNtEnableThreadCreationEx: 4520.25f4: supR3HardenedDllNotificationCallback: load 00007ffd01720000 LB 0x0012a000 C:\WINDOWS\System32\RPCRT4.dll [fFlags=0x0] 4520.25f4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll) 4520.25f4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll 4520.25f4: supR3HardenedDllNotificationCallback: load 00007ffd01350000 LB 0x0009b000 C:\WINDOWS\System32\sechost.dll [fFlags=0x0] 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'rpcrt4.dll'. 4520.25f4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\sechost.dll) 4520.25f4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\sechost.dll 4520.25f4: '\Device\HarddiskVolume4\Windows\System32\ntdll.dll' has no imports 4520.25f4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\ntdll.dll) 4520.25f4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\ntdll.dll 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\ntdll.dll (Input=ntdll.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801: [calling] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd022b0000 'C:\WINDOWS\System32\ntdll.dll' 4520.25f4: Error -104 in supR3HardenedWinReSpawn! (enmWhat=5) 4520.25f4: Error relaunching VirtualBox VM process: 5 Command line: '60eaff78-4bdd-042d-2e72-669728efd737-suplib-3rdchild --comment Windows11 --startvm 673e546f-fb62-4a91-af17-7e0b9c102800 --no-startvm-errormsgbox "--sup-hardening-log=C:\Users\willi\VirtualBox VMs\Windows11\Logs\VBoxHardening.log"' 4520.25f4: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll: Signature #1/2: info status: 24202 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'opengl32.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'uicommon.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcp100.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'msvcr100.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'qt5corevbox.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'qt5guivbox.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'qt5widgetsvbox.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'qt5openglvbox.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'user32.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'ole32.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'oleaut32.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'winmm.dll'. 4520.25f4: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll) 4520.25f4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume4\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'. 4520.25f4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\winmm.dll) 4520.25f4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\winmm.dll 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume4\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'combase.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #21 'rpcrt4.dll'. 4520.25f4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\oleaut32.dll) 4520.25f4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\oleaut32.dll 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume4\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #21 'rpcrt4.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #49 'gdi32.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #50 'user32.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #51 'combase.dll'. 4520.25f4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\ole32.dll) 4520.25f4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\ole32.dll 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'win32u.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #37 'gdi32.dll'. 4520.25f4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\user32.dll) 4520.25f4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\user32.dll 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5openglvbox.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5openglvbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5openglvbox.dll' [rcNtRedir=0xc0150008] 4520.25f4: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll: Signature #1/2: info status: 24202 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'qt5widgetsvbox.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'qt5guivbox.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5corevbox.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcr100.dll'. 4520.25f4: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll) 4520.25f4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008] 4520.25f4: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll: Signature #1/2: info status: 24202 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5guivbox.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5corevbox.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'shell32.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'. 4520.25f4: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll) 4520.25f4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008] 4520.25f4: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll: Signature #1/2: info status: 24202 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'ole32.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'opengl32.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'. 4520.25f4: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll) 4520.25f4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008] 4520.25f4: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll: Signature #1/2: info status: 24202 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'shell32.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ole32.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'advapi32.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ws2_32.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'mpr.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcp100.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'msvcr100.dll'. 4520.25f4: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll) 4520.25f4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008] 4520.25f4: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll: Signature #1/2: info status: 24202 4520.25f4: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll) 4520.25f4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008] 4520.25f4: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll: Signature #1/2: info status: 24202 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'. 4520.25f4: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll) 4520.25f4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008] 4520.25f4: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll: Signature #1/2: info status: 24202 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ws2_32.dll'. 4520.25f4: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll) 4520.25f4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'uicommon.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'uicommon.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\uicommon.dll' [rcNtRedir=0xc0150008] 4520.25f4: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\UICommon.dll: Signature #1/2: info status: 24202 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'vboxrt.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcr100.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5corevbox.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5guivbox.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5widgetsvbox.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'user32.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'advapi32.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'ole32.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'oleaut32.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'rpcrt4.dll'. 4520.25f4: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\UICommon.dll) 4520.25f4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\UICommon.dll 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume4\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'advapi32.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'gdi32.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'glu32.dll'. 4520.25f4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\opengl32.dll) 4520.25f4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\opengl32.dll 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'glu32.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'glu32.dll' -> '\Device\HarddiskVolume4\Windows\System32\glu32.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'opengl32.dll'. 4520.25f4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\glu32.dll) 4520.25f4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\glu32.dll 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'win32u.dll'. 4520.25f4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\gdi32.dll) 4520.25f4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\gdi32.dll 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'sechost.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27 'rpcrt4.dll'. 4520.25f4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\advapi32.dll) 4520.25f4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\advapi32.dll 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 4520.25f4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\msvcrt.dll) 4520.25f4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\msvcrt.dll 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume4\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\oleaut32.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume4\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ole32.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\advapi32.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume4\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'rpcrt4.dll'. 4520.25f4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\ws2_32.dll) 4520.25f4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\ws2_32.dll 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mpr.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'mpr.dll' -> '\Device\HarddiskVolume4\Windows\System32\mpr.dll' [rcNtRedir=0xc0150008] 4520.25f4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\mpr.dll) 4520.25f4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\mpr.dll 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume4\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ws2_32.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\advapi32.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume4\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ole32.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume4\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #72 'user32.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #74 'gdi32.dll'. 4520.25f4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\shell32.dll) 4520.25f4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\shell32.dll 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume4\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\opengl32.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume4\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ole32.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume4\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\shell32.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume4\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008] 4520.25f4: '\Device\HarddiskVolume4\Windows\System32\win32u.dll' has no imports 4520.25f4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\win32u.dll) 4520.25f4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\win32u.dll 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume4\Windows\System32\combase.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'. 4520.25f4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\combase.dll) 4520.25f4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\combase.dll 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume4\Windows\System32\combase.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\combase.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008] 4520.25f4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\msvcp_win.dll) 4520.25f4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\msvcp_win.dll 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'sechost.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'sechost.dll' -> '\Device\HarddiskVolume4\Windows\System32\sechost.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\sechost.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume4\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\win32u.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume4\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\opengl32.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000a01: [calling] 4520.25f4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\opengl32.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\UICommon.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\winmm.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\glu32.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\mpr.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedDllNotificationCallback: load 00007ffd019c0000 LB 0x0009e000 C:\WINDOWS\System32\msvcrt.dll [fFlags=0x0] 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedDllNotificationCallback: load 00007ffd01a70000 LB 0x000ac000 C:\WINDOWS\System32\ADVAPI32.dll [fFlags=0x0] 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\advapi32.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedDllNotificationCallback: load 00007ffcffe00000 LB 0x00022000 C:\WINDOWS\System32\win32u.dll [fFlags=0x0] 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\win32u.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedDllNotificationCallback: load 00007ffcffd00000 LB 0x00100000 C:\WINDOWS\System32\ucrtbase.dll [fFlags=0x0] 4520.25f4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\ucrtbase.dll) 4520.25f4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\ucrtbase.dll 4520.25f4: supR3HardenedDllNotificationCallback: load 00007ffcffc60000 LB 0x0009d000 C:\WINDOWS\System32\msvcp_win.dll [fFlags=0x0] 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedDllNotificationCallback: load 00007ffcfff40000 LB 0x0010b000 C:\WINDOWS\System32\gdi32full.dll [fFlags=0x0] 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #33 'gdi32.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'user32.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'win32u.dll'. 4520.25f4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\gdi32full.dll) 4520.25f4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\gdi32full.dll 4520.25f4: supR3HardenedDllNotificationCallback: load 00007ffd00640000 LB 0x0002a000 C:\WINDOWS\System32\GDI32.dll [fFlags=0x0] 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedDllNotificationCallback: load 00007ffd00380000 LB 0x001a0000 C:\WINDOWS\System32\USER32.dll [fFlags=0x0] 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedDllNotificationCallback: load 00007ffd00f90000 LB 0x00355000 C:\WINDOWS\System32\combase.dll [fFlags=0x0] 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\combase.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedDllNotificationCallback: load 00007ffc5f0f0000 LB 0x0002c000 C:\WINDOWS\SYSTEM32\GLU32.dll [fFlags=0x0] 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\glu32.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedDllNotificationCallback: load 00007ffc5f1e0000 LB 0x00125000 C:\WINDOWS\SYSTEM32\OPENGL32.dll [fFlags=0x0] 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\opengl32.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedDllNotificationCallback: load 00000000733b0000 LB 0x000d2000 C:\Program Files\Oracle\VirtualBox\MSVCR100.dll [fFlags=0x0] 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedDllNotificationCallback: load 0000000073310000 LB 0x00098000 C:\Program Files\Oracle\VirtualBox\MSVCP100.dll [fFlags=0x0] 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedDllNotificationCallback: load 00007ffd015d0000 LB 0x0006b000 C:\WINDOWS\System32\WS2_32.dll [fFlags=0x0] 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ws2_32.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedDllNotificationCallback: load 00007ffcd8430000 LB 0x005e2000 C:\Program Files\Oracle\VirtualBox\VBoxRT.dll [fFlags=0x0] 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedDllNotificationCallback: load 00007ffd00700000 LB 0x0073f000 C:\WINDOWS\System32\SHELL32.dll [fFlags=0x0] 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\shell32.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedDllNotificationCallback: load 00007ffd013f0000 LB 0x0012a000 C:\WINDOWS\System32\ole32.dll [fFlags=0x0] 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ole32.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedDllNotificationCallback: load 00007ffce6e10000 LB 0x0001d000 C:\WINDOWS\SYSTEM32\MPR.dll [fFlags=0x0] 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\mpr.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedDllNotificationCallback: load 0000000072910000 LB 0x00565000 C:\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [fFlags=0x0] 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedDllNotificationCallback: load 00007ffcd79b0000 LB 0x005f7000 C:\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [fFlags=0x0] 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedDllNotificationCallback: load 00000000723a0000 LB 0x00561000 C:\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [fFlags=0x0] 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedDllNotificationCallback: load 00007ffd01cd0000 LB 0x000cd000 C:\WINDOWS\System32\OLEAUT32.dll [fFlags=0x0] 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\oleaut32.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedDllNotificationCallback: load 00007ffc1d400000 LB 0x02317000 C:\Program Files\Oracle\VirtualBox\UICommon.dll [fFlags=0x0] 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\UICommon.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedDllNotificationCallback: load 0000000072f00000 LB 0x00054000 C:\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll [fFlags=0x0] 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedDllNotificationCallback: load 00007ffcef9a0000 LB 0x00027000 C:\WINDOWS\SYSTEM32\WINMM.dll [fFlags=0x0] 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\winmm.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedDllNotificationCallback: load 00007ffcd5c70000 LB 0x001c8000 C:\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll [fFlags=0x0] 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1 4520.25f4: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801: [calling] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd00050000 'api-ms-win-core-synch-l1-2-0' 4520.25f4: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1 4520.25f4: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801: [calling] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd00050000 'api-ms-win-core-fibers-l1-1-1' 4520.25f4: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1 4520.25f4: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801: [calling] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd00050000 'api-ms-win-core-fibers-l1-1-1' 4520.25f4: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1 4520.25f4: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801: [calling] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd00050000 'api-ms-win-core-synch-l1-2-0' 4520.25f4: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-l1-2-1) -> 0x0, fPresent=1 4520.25f4: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-l1-2-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801: [calling] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd00050000 'api-ms-win-core-localization-l1-2-1' 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\kernel32.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume4\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\win32u.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\kernel32.dll (Input=kernel32, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801: [calling] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd00e40000 'C:\WINDOWS\System32\kernel32.dll' 4520.25f4: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-string-l1-1-0) -> 0x0, fPresent=1 4520.25f4: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-string-l1-1-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801: [calling] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd00050000 'api-ms-win-core-string-l1-1-0' 4520.25f4: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-datetime-l1-1-1) -> 0x0, fPresent=1 4520.25f4: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-datetime-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801: [calling] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd00050000 'api-ms-win-core-datetime-l1-1-1' 4520.25f4: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-obsolete-l1-2-0) -> 0x0, fPresent=1 4520.25f4: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-obsolete-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801: [calling] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd00050000 'api-ms-win-core-localization-obsolete-l1-2-0' 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'user32.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #25 'win32u.dll'. 4520.25f4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\imm32.dll) 4520.25f4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\imm32.dll 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume4\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\win32u.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\IMM32.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009: [calling] 4520.25f4: supR3HardenedDllNotificationCallback: load 00007ffd02220000 LB 0x00030000 C:\WINDOWS\System32\IMM32.DLL [fFlags=0x0] 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\imm32.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd02220000 'C:\WINDOWS\system32\IMM32.DLL' 4520.25f4: supR3HardenedMonitor_LdrLoadDll: error opening 'C:\WINDOWS\System32\edgegdi.dll': 0 (NtPath=\??\C:\WINDOWS\System32\edgegdi.dll; Input=edgegdi.dll; rcNtGetDll=0xc0000135 4520.25f4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000034 'C:\WINDOWS\System32\edgegdi.dll' 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001: [calling] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcd8430000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001: [calling] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcd8430000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001: [calling] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcd8430000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001: [calling] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcd8430000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001: [calling] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcd8430000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcd8430000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcd8430000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcd8430000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcd8430000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcd8430000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcd8430000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcd8430000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001: [calling] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcd8430000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcd8430000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcd8430000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcd8430000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcd8430000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcd8430000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcd8430000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcd8430000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcd8430000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcd8430000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcd8430000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcd8430000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcd8430000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcd8430000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcd8430000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcd8430000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001: [calling] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcd8430000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcd8430000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcd8430000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcd8430000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\advapi32.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\ADVAPI32.DLL (Input=ADVAPI32.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001: [calling] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd01a70000 'C:\WINDOWS\System32\ADVAPI32.DLL' 4520.25f4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\cryptbase.dll) 4520.25f4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\cryptbase.dll 4520.25f4: supR3HardenedDllNotificationCallback: load 00007ffcff3c0000 LB 0x0000c000 C:\WINDOWS\SYSTEM32\CRYPTBASE.DLL [fFlags=0x0] 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\cryptbase.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedDllNotificationCallback: load 00007ffcffe30000 LB 0x00083000 C:\WINDOWS\System32\bcryptPrimitives.dll [fFlags=0x0] 4520.25f4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\bcryptprimitives.dll) 4520.25f4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\bcryptprimitives.dll 4520.25f4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcd5c70000 'C:\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll' 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #31 'combase.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #32 'msvcp_win.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'wldp.dll'. 4520.25f4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\windows.storage.dll) 4520.25f4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\windows.storage.dll 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 4520.25f4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\wldp.dll) 4520.25f4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\wldp.dll 4520.25f4: supR3HardenedDllNotificationCallback: load 00007ffcff460000 LB 0x0002c000 C:\WINDOWS\SYSTEM32\Wldp.dll [fFlags=0x0] 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\wldp.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedDllNotificationCallback: load 00007ffcfdb40000 LB 0x00791000 C:\WINDOWS\SYSTEM32\windows.storage.dll [fFlags=0x0] 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\windows.storage.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedDllNotificationCallback: load 00007ffd01850000 LB 0x000ae000 C:\WINDOWS\System32\SHCORE.dll [fFlags=0x0] 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #42 'combase.dll'. 4520.25f4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\SHCore.dll) 4520.25f4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\SHCore.dll 4520.25f4: supR3HardenedDllNotificationCallback: load 00007ffd01960000 LB 0x00055000 C:\WINDOWS\System32\shlwapi.dll [fFlags=0x0] 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'. 4520.25f4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\shlwapi.dll) 4520.25f4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\shlwapi.dll 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\kernel32.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume4\Windows\System32\combase.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\combase.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'wldp.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'wldp.dll' -> '\Device\HarddiskVolume4\Windows\System32\wldp.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\wldp.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume4\Windows\System32\combase.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\combase.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\kernel32.dll (Input=kernel32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001: [calling] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd00e40000 'C:\WINDOWS\System32\kernel32.dll' 4520.25f4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\profapi.dll) 4520.25f4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\profapi.dll 4520.25f4: supR3HardenedDllNotificationCallback: load 00007ffcff930000 LB 0x0001f000 C:\WINDOWS\SYSTEM32\profapi.dll [fFlags=0x0] 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\profapi.dll [lacks WinVerifyTrust] 4520.25f4: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\platforms\qwindows.dll: Signature #1/2: info status: 24202 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'ole32.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'imm32.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'winmm.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'oleaut32.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'shell32.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'advapi32.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'qt5guivbox.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'qt5corevbox.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'msvcr100.dll'. 4520.25f4: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\platforms\qwindows.dll) 4520.25f4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\platforms\qwindows.dll 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\advapi32.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume4\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\shell32.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume4\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\oleaut32.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume4\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\winmm.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume4\Windows\System32\imm32.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\imm32.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume4\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ole32.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001: [calling] 4520.25f4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\platforms\qwindows.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedDllNotificationCallback: load 00007ffcde0e0000 LB 0x0012e000 C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll [fFlags=0x0] 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\platforms\qwindows.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcde0e0000 'C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll' 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcrt.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'rpcrt4.dll'. 4520.25f4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\kernel.appcore.dll) 4520.25f4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\kernel.appcore.dll 4520.25f4: supR3HardenedDllNotificationCallback: load 00007ffcfd940000 LB 0x00012000 C:\WINDOWS\SYSTEM32\kernel.appcore.dll [fFlags=0x0] 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\kernel.appcore.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #33 'gdi32.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'user32.dll'. 4520.25f4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\uxtheme.dll) 4520.25f4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\uxtheme.dll 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009: [calling] 4520.25f4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\uxtheme.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedDllNotificationCallback: load 00007ffcfd3e0000 LB 0x0009e000 C:\WINDOWS\system32\uxtheme.dll [fFlags=0x0] 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\uxtheme.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcfd3e0000 'C:\WINDOWS\system32\uxtheme.dll' 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd00380000 'C:\WINDOWS\system32\user32.dll' 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\shell32.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001: [calling] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd00700000 'C:\WINDOWS\system32\shell32.dll' 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\SHCore.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\SHCore.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001: [calling] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd01850000 'C:\WINDOWS\system32\SHCore.dll' 4520.25f4: supR3HardenedMonitor_LdrLoadDll: error opening 'C:\WINDOWS\system32\wintab32.dll': 0 (NtPath=\??\C:\WINDOWS\system32\wintab32.dll; Input=C:\WINDOWS\system32\wintab32.dll; rcNtGetDll=0x0 4520.25f4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000034 'C:\WINDOWS\system32\wintab32.dll' 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd00380000 'C:\WINDOWS\system32\user32.dll' 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\winmm.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\winmm.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001: [calling] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcef9a0000 'C:\WINDOWS\system32\winmm.dll' 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\winmm.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\winmm.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001: [calling] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcef9a0000 'C:\WINDOWS\system32\winmm.dll' 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\shell32.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001: [calling] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd00700000 'C:\WINDOWS\system32\shell32.dll' 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\uxtheme.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001: [calling] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcfd3e0000 'C:\WINDOWS\system32\uxtheme.dll' 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd00640000 'C:\WINDOWS\system32\gdi32.dll' 4520.25f4: supR3HardenedDllNotificationCallback: load 00007ffd00520000 LB 0x00115000 C:\WINDOWS\System32\MSCTF.dll [fFlags=0x0] 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'oleaut32.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'user32.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #37 'gdi32.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #38 'imm32.dll'. 4520.25f4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\msctf.dll) 4520.25f4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\msctf.dll 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume4\Windows\System32\imm32.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\imm32.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume4\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\oleaut32.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd01720000 'C:\WINDOWS\System32\rpcrt4.dll' 4520.25f4: supR3HardenedDllNotificationCallback: load 00007ffd01520000 LB 0x000a9000 C:\WINDOWS\System32\clbcatq.dll [fFlags=0x0] 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #30 'rpcrt4.dll'. 4520.25f4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\clbcatq.dll) 4520.25f4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\clbcatq.dll 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'd3d11.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27 'dcomp.dll'. 4520.25f4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\DataExchange.dll) 4520.25f4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\DataExchange.dll 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dcomp.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'dcomp.dll' -> '\Device\HarddiskVolume4\Windows\System32\dcomp.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'win32u.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp_win.dll'. 4520.25f4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\dcomp.dll) 4520.25f4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\dcomp.dll 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'd3d11.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'd3d11.dll' -> '\Device\HarddiskVolume4\Windows\System32\d3d11.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'dxgi.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #28 'win32u.dll'. 4520.25f4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\d3d11.dll) 4520.25f4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\d3d11.dll 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume4\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\win32u.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dxgi.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'dxgi.dll' -> '\Device\HarddiskVolume4\Windows\System32\dxgi.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'win32u.dll'. 4520.25f4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\dxgi.dll) 4520.25f4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\dxgi.dll 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume4\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\win32u.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume4\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\win32u.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\dataexchange.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009: [calling] 4520.25f4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\DataExchange.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\d3d11.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\dcomp.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\dxgi.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedDllNotificationCallback: load 00007ffcfe320000 LB 0x000f4000 C:\WINDOWS\system32\dxgi.dll [fFlags=0x0] 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\dxgi.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedDllNotificationCallback: load 00007ffcfbe90000 LB 0x00264000 C:\WINDOWS\system32\d3d11.dll [fFlags=0x0] 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\d3d11.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedDllNotificationCallback: load 00007ffcfc6c0000 LB 0x001e6000 C:\WINDOWS\system32\dcomp.dll [fFlags=0x0] 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\dcomp.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedDllNotificationCallback: load 00007ffccd3f0000 LB 0x0003e000 C:\WINDOWS\system32\dataexchange.dll [fFlags=0x0] 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\DataExchange.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd00640000 'C:\WINDOWS\System32\gdi32.dll' 4520.25f4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffccd3f0000 'C:\WINDOWS\system32\dataexchange.dll' 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #30 'rpcrt4.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #43 'combase.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #45 'msvcp_win.dll'. 4520.25f4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\twinapi.appcore.dll) 4520.25f4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\twinapi.appcore.dll 4520.25f4: supR3HardenedDllNotificationCallback: load 00007ffcf9590000 LB 0x00201000 C:\WINDOWS\system32\twinapi.appcore.dll [fFlags=0x0] 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\twinapi.appcore.dll [lacks WinVerifyTrust] 4520.5784: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 4520.5784: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\winmmbase.dll) 4520.5784: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\winmmbase.dll 4520.5784: supR3HardenedDllNotificationCallback: load 00007ffce3350000 LB 0x00026000 C:\WINDOWS\SYSTEM32\winmmbase.dll [fFlags=0x0] 4520.5784: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\winmmbase.dll [lacks WinVerifyTrust] 4520.5784: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'. 4520.5784: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #16 'rpcrt4.dll'. 4520.5784: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #28 'devobj.dll'. 4520.5784: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\MMDevAPI.dll) 4520.5784: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\MMDevAPI.dll 4520.5784: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'cfgmgr32.dll'. 4520.5784: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\devobj.dll) 4520.5784: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\devobj.dll 4520.5784: supR3HardenedDllNotificationCallback: load 00007ffcffec0000 LB 0x0004e000 C:\WINDOWS\System32\cfgmgr32.dll [fFlags=0x0] 4520.5784: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\cfgmgr32.dll) 4520.5784: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\cfgmgr32.dll 4520.5784: supR3HardenedDllNotificationCallback: load 00007ffcff7a0000 LB 0x0002c000 C:\WINDOWS\SYSTEM32\DEVOBJ.dll [fFlags=0x0] 4520.5784: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\devobj.dll [lacks WinVerifyTrust] 4520.5784: supR3HardenedDllNotificationCallback: load 00007ffcf6bd0000 LB 0x00085000 C:\WINDOWS\SYSTEM32\MMDevAPI.DLL [fFlags=0x0] 4520.5784: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust] 4520.5784: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 4520.5784: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'mmdevapi.dll'. 4520.5784: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'ksuser.dll'. 4520.5784: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #30 'avrt.dll'. 4520.5784: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\wdmaud.drv) 4520.5784: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\wdmaud.drv 4520.5784: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'avrt.dll'... 4520.5784: supR3HardenedWinVerifyCacheProcessImportTodos: 'avrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\avrt.dll' [rcNtRedir=0xc0150008] 4520.5784: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\avrt.dll) 4520.5784: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\avrt.dll 4520.5784: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ksuser.dll'... 4520.5784: supR3HardenedWinVerifyCacheProcessImportTodos: 'ksuser.dll' -> '\Device\HarddiskVolume4\Windows\System32\ksuser.dll' [rcNtRedir=0xc0150008] 4520.5784: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 4520.5784: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\ksuser.dll) 4520.5784: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\ksuser.dll 4520.5784: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mmdevapi.dll'... 4520.5784: supR3HardenedWinVerifyCacheProcessImportTodos: 'mmdevapi.dll' -> '\Device\HarddiskVolume4\Windows\System32\mmdevapi.dll' [rcNtRedir=0xc0150008] 4520.5784: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust] 4520.5784: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 4520.5784: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 4520.5784: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 4520.5784: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'cfgmgr32.dll'... 4520.5784: supR3HardenedWinVerifyCacheProcessImportTodos: 'cfgmgr32.dll' -> '\Device\HarddiskVolume4\Windows\System32\cfgmgr32.dll' [rcNtRedir=0xc0150008] 4520.5784: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\cfgmgr32.dll [lacks WinVerifyTrust] 4520.5784: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'devobj.dll'... 4520.5784: supR3HardenedWinVerifyCacheProcessImportTodos: 'devobj.dll' -> '\Device\HarddiskVolume4\Windows\System32\devobj.dll' [rcNtRedir=0xc0150008] 4520.5784: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\devobj.dll [lacks WinVerifyTrust] 4520.5784: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... 4520.5784: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008] 4520.5784: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] 4520.5784: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'... 4520.5784: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008] 4520.5784: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust] 4520.5784: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 4520.5784: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 4520.5784: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 4520.5784: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'... 4520.5784: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008] 4520.5784: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust] 4520.5784: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'... 4520.5784: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume4\Windows\System32\combase.dll' [rcNtRedir=0xc0150008] 4520.5784: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\combase.dll [lacks WinVerifyTrust] 4520.5784: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... 4520.5784: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008] 4520.5784: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] 4520.5784: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 4520.5784: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 4520.5784: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 4520.5784: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001: [calling] 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #15 'oleaut32.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #17 'rpcrt4.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #20 'coreuicomponents.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #21 'coremessaging.dll'. 4520.25f4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\TextInputFramework.dll) 4520.25f4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\TextInputFramework.dll 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'coremessaging.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #40 'rpcrt4.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #48 'shcore.dll'. 4520.25f4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\CoreUIComponents.dll) 4520.25f4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\CoreUIComponents.dll 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #20 'ws2_32.dll'. 4520.25f4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\CoreMessaging.dll) 4520.25f4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\CoreMessaging.dll 4520.25f4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\ntmarta.dll) 4520.25f4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\ntmarta.dll 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'combase.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #24 'rpcrt4.dll'. 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #32 'bcryptprimitives.dll'. 4520.25f4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\WinTypes.dll) 4520.25f4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\WinTypes.dll 4520.25f4: supR3HardenedDllNotificationCallback: load 00007ffcfe840000 LB 0x00033000 C:\WINDOWS\SYSTEM32\ntmarta.dll [fFlags=0x0] 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ntmarta.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedDllNotificationCallback: load 00007ffcfcf90000 LB 0x000f2000 C:\WINDOWS\System32\CoreMessaging.dll [fFlags=0x0] 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\CoreMessaging.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedDllNotificationCallback: load 00007ffcfb780000 LB 0x00154000 C:\WINDOWS\SYSTEM32\wintypes.dll [fFlags=0x0] 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\WinTypes.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedDllNotificationCallback: load 00007ffcfcc30000 LB 0x0035e000 C:\WINDOWS\System32\CoreUIComponents.dll [fFlags=0x0] 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\CoreUIComponents.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedDllNotificationCallback: load 00007ffcf6010000 LB 0x000f9000 C:\WINDOWS\SYSTEM32\textinputframework.dll [fFlags=0x0] 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\TextInputFramework.dll [lacks WinVerifyTrust] 4520.5784: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv [lacks WinVerifyTrust] 4520.5784: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ksuser.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(ext-ms-win-rtcore-ntuser-window-ext-l1-1-0.dll) -> 0x0, fPresent=1 4520.25f4: supR3HardenedMonitor_LdrLoadDll: pName=ext-ms-win-rtcore-ntuser-window-ext-l1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000001: [calling] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd00380000 'ext-ms-win-rtcore-ntuser-window-ext-l1-1-0.dll' 4520.5784: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\avrt.dll [lacks WinVerifyTrust] 4520.5784: supR3HardenedDllNotificationCallback: load 00007ffcfb5a0000 LB 0x00009000 C:\WINDOWS\SYSTEM32\ksuser.dll [fFlags=0x0] 4520.5784: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ksuser.dll [lacks WinVerifyTrust] 4520.5784: supR3HardenedDllNotificationCallback: load 00007ffcf9c30000 LB 0x0000a000 C:\WINDOWS\SYSTEM32\AVRT.dll [fFlags=0x0] 4520.5784: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\avrt.dll [lacks WinVerifyTrust] 4520.5784: supR3HardenedDllNotificationCallback: load 00007ffc9ba60000 LB 0x00046000 C:\WINDOWS\System32\wdmaud.drv [fFlags=0x0] 4520.5784: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv [lacks WinVerifyTrust] 4520.5784: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc9ba60000 'C:\WINDOWS\System32\wdmaud.drv' 4520.25f4: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(ext-ms-win-rtcore-ntuser-integration-l1-1-0.dll) -> 0x0, fPresent=1 4520.25f4: supR3HardenedMonitor_LdrLoadDll: pName=ext-ms-win-rtcore-ntuser-integration-l1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000001: [calling] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd00380000 'ext-ms-win-rtcore-ntuser-integration-l1-1-0.dll' 4520.5784: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv [lacks WinVerifyTrust] 4520.5784: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'... 4520.5784: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume4\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008] 4520.5784: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust] 4520.5784: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... 4520.5784: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008] 4520.5784: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-com-l1-1-0.dll) -> 0x0, fPresent=1 4520.25f4: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-com-l1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000001: [calling] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd00f90000 'api-ms-win-core-com-l1-1-0.dll' 4520.5784: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'... 4520.5784: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume4\Windows\System32\combase.dll' [rcNtRedir=0xc0150008] 4520.5784: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\combase.dll [lacks WinVerifyTrust] 4520.5784: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'... 4520.5784: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume4\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008] 4520.5784: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ws2_32.dll [lacks WinVerifyTrust] 4520.5784: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 4520.5784: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 4520.5784: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 4520.5784: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shcore.dll'... 4520.5784: supR3HardenedWinVerifyCacheProcessImportTodos: 'shcore.dll' -> '\Device\HarddiskVolume4\Windows\System32\shcore.dll' [rcNtRedir=0xc0150008] 4520.5784: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\SHCore.dll [lacks WinVerifyTrust] 4520.5784: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... 4520.5784: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008] 4520.5784: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] 4520.5784: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coremessaging.dll'... 4520.5784: supR3HardenedWinVerifyCacheProcessImportTodos: 'coremessaging.dll' -> '\Device\HarddiskVolume4\Windows\System32\coremessaging.dll' [rcNtRedir=0xc0150008] 4520.5784: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\CoreMessaging.dll [lacks WinVerifyTrust] 4520.5784: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 4520.5784: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 4520.5784: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 4520.5784: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coremessaging.dll'... 4520.5784: supR3HardenedWinVerifyCacheProcessImportTodos: 'coremessaging.dll' -> '\Device\HarddiskVolume4\Windows\System32\coremessaging.dll' [rcNtRedir=0xc0150008] 4520.5784: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\CoreMessaging.dll [lacks WinVerifyTrust] 4520.5784: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coreuicomponents.dll'... 4520.5784: supR3HardenedWinVerifyCacheProcessImportTodos: 'coreuicomponents.dll' -> '\Device\HarddiskVolume4\Windows\System32\coreuicomponents.dll' [rcNtRedir=0xc0150008] 4520.5784: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\CoreUIComponents.dll [lacks WinVerifyTrust] 4520.5784: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... 4520.5784: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008] 4520.5784: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] 4520.5784: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'... 4520.5784: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume4\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008] 4520.5784: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\oleaut32.dll [lacks WinVerifyTrust] 4520.5784: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 4520.5784: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 4520.5784: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 4520.5784: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001: [calling] 4520.5784: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc9ba60000 'C:\WINDOWS\System32\wdmaud.drv' 4520.5784: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust] 4520.5784: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\MMDEVAPI.DLL (Input=MMDEVAPI.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001: [calling] 4520.5784: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6bd0000 'C:\WINDOWS\System32\MMDEVAPI.DLL' 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msctf.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\MSCTF.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009: [calling] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd00520000 'C:\WINDOWS\System32\MSCTF.dll' 4520.25f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'rpcrt4.dll'. 4520.25f4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\oleacc.dll) 4520.25f4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\oleacc.dll 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... 4520.25f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008] 4520.25f4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\Oleacc.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009: [calling] 4520.25f4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\oleacc.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedDllNotificationCallback: load 00007ffce9610000 LB 0x00066000 C:\WINDOWS\system32\Oleacc.dll [fFlags=0x0] 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\oleacc.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffce9610000 'C:\WINDOWS\system32\Oleacc.dll' 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\oleaut32.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\OLEAUT32.DLL (Input=OLEAUT32.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001: [calling] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd01cd0000 'C:\WINDOWS\System32\OLEAUT32.DLL' 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\oleacc.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\oleacc.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001: [calling] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffce9610000 'C:\WINDOWS\system32\oleacc.dll' 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\oleacc.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\oleacc.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009: [calling] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffce9610000 'C:\Windows\System32\oleacc.dll' 4520.25f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\oleaut32.dll [lacks WinVerifyTrust] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\oleaut32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009: [calling] 4520.25f4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd01cd0000 'C:\WINDOWS\system32\oleaut32.dll' 4520.5784: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv [lacks WinVerifyTrust] 4520.5784: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001: [calling] 4520.5784: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc9ba60000 'C:\WINDOWS\System32\wdmaud.drv' 4520.5784: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv [lacks WinVerifyTrust] 4520.5784: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001: [calling] 4520.5784: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc9ba60000 'C:\WINDOWS\System32\wdmaud.drv' 4520.5784: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv [lacks WinVerifyTrust] 4520.5784: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001: [calling] 4520.5784: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc9ba60000 'C:\WINDOWS\System32\wdmaud.drv' 4520.5784: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'. 4520.5784: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'rpcrt4.dll'. 4520.5784: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'oleaut32.dll'. 4520.5784: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #29 'mmdevapi.dll'. 4520.5784: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\AudioSes.dll) 4520.5784: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\AudioSes.dll 4520.5784: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mmdevapi.dll'... 4520.5784: supR3HardenedWinVerifyCacheProcessImportTodos: 'mmdevapi.dll' -> '\Device\HarddiskVolume4\Windows\System32\mmdevapi.dll' [rcNtRedir=0xc0150008] 4520.5784: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust] 4520.5784: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'... 4520.5784: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume4\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008] 4520.5784: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\oleaut32.dll [lacks WinVerifyTrust] 4520.5784: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... 4520.5784: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008] 4520.5784: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] 4520.5784: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'... 4520.5784: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008] 4520.5784: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust] 4520.5784: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\AUDIOSES.DLL (Input=AUDIOSES.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001: [calling] 4520.5784: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\AudioSes.dll [lacks WinVerifyTrust] 4520.5784: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'rpcrt4.dll'. 4520.5784: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\powrprof.dll) 4520.5784: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\powrprof.dll 4520.5784: supR3HardenedDllNotificationCallback: load 00007ffcfef80000 LB 0x0004b000 C:\WINDOWS\SYSTEM32\powrprof.dll [fFlags=0x0] 4520.5784: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\powrprof.dll [lacks WinVerifyTrust] 4520.5784: supR3HardenedDllNotificationCallback: load 00007ffcf4a00000 LB 0x00181000 C:\WINDOWS\System32\AUDIOSES.DLL [fFlags=0x0] 4520.5784: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\AudioSes.dll [lacks WinVerifyTrust] 4520.5784: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\umpdc.dll) 4520.5784: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\umpdc.dll 4520.5784: supR3HardenedDllNotificationCallback: load 00007ffcfee40000 LB 0x00012000 C:\WINDOWS\SYSTEM32\UMPDC.dll [fFlags=0x0] 4520.5784: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\umpdc.dll [lacks WinVerifyTrust] 4520.5784: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf4a00000 'C:\WINDOWS\System32\AUDIOSES.DLL' 4520.5784: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv [lacks WinVerifyTrust] 4520.5784: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... 4520.5784: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008] 4520.5784: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] 4520.5784: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001: [calling] 4520.5784: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc9ba60000 'C:\WINDOWS\System32\wdmaud.drv' 4520.5784: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv [lacks WinVerifyTrust] 4520.5784: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001: [calling] 4520.5784: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc9ba60000 'C:\WINDOWS\System32\wdmaud.drv' 4520.5784: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv [lacks WinVerifyTrust] 4520.5784: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc9ba60000 'C:\WINDOWS\System32\wdmaud.drv' 4520.5784: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv [lacks WinVerifyTrust] 4520.5784: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc9ba60000 'C:\WINDOWS\System32\wdmaud.drv' 4520.5784: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv [lacks WinVerifyTrust] 4520.5784: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc9ba60000 'C:\WINDOWS\System32\wdmaud.drv' 4520.5784: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv [lacks WinVerifyTrust] 4520.5784: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc9ba60000 'C:\WINDOWS\System32\wdmaud.drv' 4520.5784: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv [lacks WinVerifyTrust] 4520.5784: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc9ba60000 'C:\WINDOWS\System32\wdmaud.drv' 4520.5784: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv [lacks WinVerifyTrust] 4520.5784: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc9ba60000 'C:\WINDOWS\System32\wdmaud.drv' 4520.5784: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv [lacks WinVerifyTrust] 4520.5784: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc9ba60000 'C:\WINDOWS\System32\wdmaud.drv' 4520.5784: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv [lacks WinVerifyTrust] 4520.5784: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001: [calling] 4520.5784: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc9ba60000 'C:\WINDOWS\System32\wdmaud.drv' 4520.5784: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv [lacks WinVerifyTrust] 4520.5784: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc9ba60000 'C:\WINDOWS\System32\wdmaud.drv' 4520.5784: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv [lacks WinVerifyTrust] 4520.5784: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc9ba60000 'C:\WINDOWS\System32\wdmaud.drv' 4520.5784: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv [lacks WinVerifyTrust] 4520.5784: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc9ba60000 'C:\WINDOWS\System32\wdmaud.drv' 4520.5784: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv [lacks WinVerifyTrust] 4520.5784: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc9ba60000 'C:\WINDOWS\System32\wdmaud.drv' 4520.5784: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv [lacks WinVerifyTrust] 4520.5784: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc9ba60000 'C:\WINDOWS\System32\wdmaud.drv' 4520.5784: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 4520.5784: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'mmdevapi.dll'. 4520.5784: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'msacm32.dll'. 4520.5784: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\msacm32.drv) 4520.5784: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\msacm32.drv 4520.5784: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msacm32.dll'... 4520.5784: supR3HardenedWinVerifyCacheProcessImportTodos: 'msacm32.dll' -> '\Device\HarddiskVolume4\Windows\System32\msacm32.dll' [rcNtRedir=0xc0150008] 4520.5784: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 4520.5784: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\msacm32.dll) 4520.5784: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\msacm32.dll 4520.5784: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mmdevapi.dll'... 4520.5784: supR3HardenedWinVerifyCacheProcessImportTodos: 'mmdevapi.dll' -> '\Device\HarddiskVolume4\Windows\System32\mmdevapi.dll' [rcNtRedir=0xc0150008] 4520.5784: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust] 4520.5784: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 4520.5784: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 4520.5784: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 4520.5784: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 4520.5784: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 4520.5784: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 4520.5784: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001: [calling] 4520.5784: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\msacm32.drv [lacks WinVerifyTrust] 4520.5784: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msacm32.dll [lacks WinVerifyTrust] 4520.5784: supR3HardenedDllNotificationCallback: load 00007ffceb980000 LB 0x0001e000 C:\WINDOWS\SYSTEM32\MSACM32.dll [fFlags=0x0] 4520.5784: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msacm32.dll [lacks WinVerifyTrust] 4520.5784: supR3HardenedDllNotificationCallback: load 00007ffcee3c0000 LB 0x0000d000 C:\WINDOWS\System32\msacm32.drv [fFlags=0x0] 4520.5784: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\msacm32.drv [lacks WinVerifyTrust] 4520.5784: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcee3c0000 'C:\WINDOWS\System32\msacm32.drv' 4520.5784: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\msacm32.drv [lacks WinVerifyTrust] 4520.5784: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001: [calling] 4520.5784: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcee3c0000 'C:\WINDOWS\System32\msacm32.drv' 4520.5784: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\msacm32.drv [lacks WinVerifyTrust] 4520.5784: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001: [calling] 4520.5784: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcee3c0000 'C:\WINDOWS\System32\msacm32.drv' 4520.5784: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\msacm32.drv [lacks WinVerifyTrust] 4520.5784: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001: [calling] 4520.5784: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcee3c0000 'C:\WINDOWS\System32\msacm32.drv' 4520.5784: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\msacm32.drv [lacks WinVerifyTrust] 4520.5784: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001: [calling] 4520.5784: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcee3c0000 'C:\WINDOWS\System32\msacm32.drv' 4520.5784: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\msacm32.drv [lacks WinVerifyTrust] 4520.5784: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001: [calling] 4520.5784: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcee3c0000 'C:\WINDOWS\System32\msacm32.drv' 4520.5784: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\msacm32.drv [lacks WinVerifyTrust] 4520.5784: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001: [calling] 4520.5784: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcee3c0000 'C:\WINDOWS\System32\msacm32.drv' 4520.5784: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\msacm32.drv [lacks WinVerifyTrust] 4520.5784: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcee3c0000 'C:\WINDOWS\System32\msacm32.drv' 4520.5784: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\msacm32.drv [lacks WinVerifyTrust] 4520.5784: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcee3c0000 'C:\WINDOWS\System32\msacm32.drv' 4520.5784: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\msacm32.drv [lacks WinVerifyTrust] 4520.5784: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcee3c0000 'C:\WINDOWS\System32\msacm32.drv' 4520.5784: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 4520.5784: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'winmmbase.dll'. 4520.5784: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\midimap.dll) 4520.5784: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\midimap.dll 4520.5784: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmmbase.dll'... 4520.5784: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmmbase.dll' -> '\Device\HarddiskVolume4\Windows\System32\winmmbase.dll' [rcNtRedir=0xc0150008] 4520.5784: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\winmmbase.dll [lacks WinVerifyTrust] 4520.5784: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 4520.5784: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 4520.5784: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 4520.5784: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001: [calling] 4520.5784: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\midimap.dll [lacks WinVerifyTrust] 4520.5784: supR3HardenedDllNotificationCallback: load 00007ffcecee0000 LB 0x0000b000 C:\WINDOWS\System32\midimap.dll [fFlags=0x0] 4520.5784: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\midimap.dll [lacks WinVerifyTrust] 4520.5784: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcecee0000 'C:\WINDOWS\System32\midimap.dll' 4520.5784: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\midimap.dll [lacks WinVerifyTrust] 4520.5784: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001: [calling] 4520.5784: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcecee0000 'C:\WINDOWS\System32\midimap.dll' 4520.5784: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\midimap.dll [lacks WinVerifyTrust] 4520.5784: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001: [calling] 4520.5784: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcecee0000 'C:\WINDOWS\System32\midimap.dll' 4520.5784: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\midimap.dll [lacks WinVerifyTrust] 4520.5784: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001: [calling] 4520.5784: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcecee0000 'C:\WINDOWS\System32\midimap.dll' 4520.5ea4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust] 4520.5ea4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\MMDevApi.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009: [calling] 4520.5ea4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6bd0000 'C:\WINDOWS\System32\MMDevApi.dll' 6b6c.52a0: supR3HardNtChildWaitFor[1]: Quitting: ExitCode=0x1 (rcNtWait=0x0, rcNt1=0x0, rcNt2=0x103, rcNt3=0x103, 9597 ms, the end);