API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Jul 26th, 2018
263
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 233.57 KB | None | 0 0
raw download clone embed print report
  1. 4988.2aa4: Log file opened: 5.2.16r123759 g_hStartupLog=0000000000000084 g_uNtVerCombined=0xa042ee00
  2. 4988.2aa4: \SystemRoot\System32\ntdll.dll:
  3. 4988.2aa4: CreationTime: 2018-07-11T01:22:20.486818800Z
  4. 4988.2aa4: LastWriteTime: 2018-07-06T07:25:51.438518000Z
  5. 4988.2aa4: ChangeTime: 2018-07-26T18:08:11.660009400Z
  6. 4988.2aa4: FileAttributes: 0x20
  7. 4988.2aa4: Size: 0x1db0b8
  8. 4988.2aa4: NT Headers: 0xe8
  9. 4988.2aa4: Timestamp: 0xf4df6dc2
  10. 4988.2aa4: Machine: 0x8664 - amd64
  11. 4988.2aa4: Timestamp: 0xf4df6dc2
  12. 4988.2aa4: Image Version: 10.0
  13. 4988.2aa4: SizeOfImage: 0x1e1000 (1970176)
  14. 4988.2aa4: Resource Dir: 0x174000 LB 0x6b338
  15. 4988.2aa4: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
  16. 4988.2aa4: [Raw version resource data: 0x1740f0 LB 0x380, codepage 0x0 (reserved 0x0)]
  17. 4988.2aa4: ProductName: Microsoft® Windows® Operating System
  18. 4988.2aa4: ProductVersion: 10.0.17134.165
  19. 4988.2aa4: FileVersion: 10.0.17134.165 (WinBuild.160101.0800)
  20. 4988.2aa4: FileDescription: NT Layer DLL
  21. 4988.2aa4: \SystemRoot\System32\kernel32.dll:
  22. 4988.2aa4: CreationTime: 2018-04-11T23:34:40.510607900Z
  23. 4988.2aa4: LastWriteTime: 2018-04-11T23:34:40.510607900Z
  24. 4988.2aa4: ChangeTime: 2018-05-04T08:45:56.436435100Z
  25. 4988.2aa4: FileAttributes: 0x20
  26. 4988.2aa4: Size: 0xafef8
  27. 4988.2aa4: NT Headers: 0xe8
  28. 4988.2aa4: Timestamp: 0x5f488a51
  29. 4988.2aa4: Machine: 0x8664 - amd64
  30. 4988.2aa4: Timestamp: 0x5f488a51
  31. 4988.2aa4: Image Version: 10.0
  32. 4988.2aa4: SizeOfImage: 0xb2000 (729088)
  33. 4988.2aa4: Resource Dir: 0xb0000 LB 0x520
  34. 4988.2aa4: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
  35. 4988.2aa4: [Raw version resource data: 0xb00b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
  36. 4988.2aa4: ProductName: Microsoft® Windows® Operating System
  37. 4988.2aa4: ProductVersion: 10.0.17134.1
  38. 4988.2aa4: FileVersion: 10.0.17134.1 (WinBuild.160101.0800)
  39. 4988.2aa4: FileDescription: Windows NT BASE API Client DLL
  40. 4988.2aa4: \SystemRoot\System32\KernelBase.dll:
  41. 4988.2aa4: CreationTime: 2018-07-11T01:22:17.653886000Z
  42. 4988.2aa4: LastWriteTime: 2018-07-06T07:25:54.438736600Z
  43. 4988.2aa4: ChangeTime: 2018-07-26T18:08:11.655022700Z
  44. 4988.2aa4: FileAttributes: 0x20
  45. 4988.2aa4: Size: 0x273dd0
  46. 4988.2aa4: NT Headers: 0xf8
  47. 4988.2aa4: Timestamp: 0xb0bb231d
  48. 4988.2aa4: Machine: 0x8664 - amd64
  49. 4988.2aa4: Timestamp: 0xb0bb231d
  50. 4988.2aa4: Image Version: 10.0
  51. 4988.2aa4: SizeOfImage: 0x273000 (2568192)
  52. 4988.2aa4: Resource Dir: 0x251000 LB 0x548
  53. 4988.2aa4: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
  54. 4988.2aa4: [Raw version resource data: 0x2510b0 LB 0x3bc, codepage 0x0 (reserved 0x0)]
  55. 4988.2aa4: ProductName: Microsoft® Windows® Operating System
  56. 4988.2aa4: ProductVersion: 10.0.17134.165
  57. 4988.2aa4: FileVersion: 10.0.17134.165 (WinBuild.160101.0800)
  58. 4988.2aa4: FileDescription: Windows NT BASE API Client DLL
  59. 4988.2aa4: \SystemRoot\System32\apisetschema.dll:
  60. 4988.2aa4: CreationTime: 2018-04-11T23:34:44.042150700Z
  61. 4988.2aa4: LastWriteTime: 2018-04-11T23:34:44.042150700Z
  62. 4988.2aa4: ChangeTime: 2018-05-04T06:25:07.131292400Z
  63. 4988.2aa4: FileAttributes: 0x20
  64. 4988.2aa4: Size: 0x1bd98
  65. 4988.2aa4: NT Headers: 0xd0
  66. 4988.2aa4: Timestamp: 0xd02ff418
  67. 4988.2aa4: Machine: 0x8664 - amd64
  68. 4988.2aa4: Timestamp: 0xd02ff418
  69. 4988.2aa4: Image Version: 10.0
  70. 4988.2aa4: SizeOfImage: 0x1c000 (114688)
  71. 4988.2aa4: Resource Dir: 0x1b000 LB 0x408
  72. 4988.2aa4: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
  73. 4988.2aa4: [Raw version resource data: 0x1b060 LB 0x3a8, codepage 0x0 (reserved 0x0)]
  74. 4988.2aa4: ProductName: Microsoft® Windows® Operating System
  75. 4988.2aa4: ProductVersion: 10.0.17134.1
  76. 4988.2aa4: FileVersion: 10.0.17134.1 (WinBuild.160101.0800)
  77. 4988.2aa4: FileDescription: ApiSet Schema DLL
  78. 4988.2aa4: Found driver SymNetS (0x2)
  79. 4988.2aa4: Found driver SRTSPX (0x2)
  80. 4988.2aa4: Found driver SymEvent (0x2)
  81. 4988.2aa4: Found driver SymIRON (0x2)
  82. 4988.2aa4: supR3HardenedWinFindAdversaries: 0x2
  83. 4988.2aa4: \SystemRoot\System32\drivers\symevent64x86.sys:
  84. 4988.2aa4: CreationTime: 2018-05-04T06:59:05.713447400Z
  85. 4988.2aa4: LastWriteTime: 2018-06-14T18:13:36.727665800Z
  86. 4988.2aa4: ChangeTime: 2018-06-15T01:58:25.222933600Z
  87. 4988.2aa4: FileAttributes: 0x20
  88. 4988.2aa4: Size: 0x18650
  89. 4988.2aa4: NT Headers: 0xe8
  90. 4988.2aa4: Timestamp: 0x5a95cc4b
  91. 4988.2aa4: Machine: 0x8664 - amd64
  92. 4988.2aa4: Timestamp: 0x5a95cc4b
  93. 4988.2aa4: Image Version: 6.3
  94. 4988.2aa4: SizeOfImage: 0x21000 (135168)
  95. 4988.2aa4: Resource Dir: 0x1f000 LB 0x3c8
  96. 4988.2aa4: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
  97. 4988.2aa4: [Raw version resource data: 0x1f0b8 LB 0x310, codepage 0x4e4 (reserved 0x0)]
  98. 4988.2aa4: ProductName: SYMEVENT
  99. 4988.2aa4: ProductVersion: 14.0.6.27
  100. 4988.2aa4: FileVersion: 14.0.6.27
  101. 4988.2aa4: FileDescription: Symantec Event Library
  102. 4988.2aa4: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
  103. 4988.2aa4: Calling main()
  104. 4988.2aa4: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2
  105. 4988.2aa4: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
  106. 4988.2aa4: SUPR3HardenedMain: Respawn #1
  107. 4988.2aa4: System32: \Device\HarddiskVolume3\Windows\System32
  108. 4988.2aa4: WinSxS: \Device\HarddiskVolume3\Windows\WinSxS
  109. 4988.2aa4: KnownDllPath: C:\WINDOWS\System32
  110. 4988.2aa4: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
  111. 4988.2aa4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe)
  112. 4988.2aa4: supR3HardNtEnableThreadCreation:
  113. 4988.2aa4: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffbfe322fc0 pvNtTerminateThread=00007ffbfe34a900
  114. 4988.2aa4: supR3HardenedWinDoReSpawn(1): New child 3770.2c5c [kernel32].
  115. 4988.2aa4: supR3HardNtChildGatherData: PebBaseAddress=0000000000481000 cbPeb=0x388
  116. 4988.2aa4: supR3HardNtPuChFindNtdll: uNtDllParentAddr=00007ffbfe2b0000 uNtDllChildAddr=00007ffbfe2b0000
  117. 4988.2aa4: supR3HardenedWinSetupChildInit: uLdrInitThunk=00007ffbfe322fc0
  118. 4988.2aa4: supR3HardenedWinSetupChildInit: Start child.
  119. 4988.2aa4: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 0 ms.
  120. 4988.2aa4: supR3HardNtChildPurify: Startup delay kludge #1/0: 518 ms, 61 sleeps
  121. 4988.2aa4: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
  122. 4988.2aa4: *0000000000000000-000000000029ffff 0x0001/0x0000 0x0000000
  123. 4988.2aa4: *00000000002a0000-00000000002bffff 0x0004/0x0004 0x0020000
  124. 4988.2aa4: *00000000002c0000-00000000002d8fff 0x0002/0x0002 0x0040000
  125. 4988.2aa4: 00000000002d9000-00000000002dffff 0x0001/0x0000 0x0000000
  126. 4988.2aa4: *00000000002e0000-00000000003dafff 0x0000/0x0004 0x0020000
  127. 4988.2aa4: 00000000003db000-00000000003ddfff 0x0104/0x0004 0x0020000
  128. 4988.2aa4: 00000000003de000-00000000003dffff 0x0004/0x0004 0x0020000
  129. 4988.2aa4: *00000000003e0000-00000000003e3fff 0x0002/0x0002 0x0040000
  130. 4988.2aa4: 00000000003e4000-00000000003effff 0x0001/0x0000 0x0000000
  131. 4988.2aa4: *00000000003f0000-00000000003f0fff 0x0004/0x0004 0x0020000
  132. 4988.2aa4: 00000000003f1000-00000000003fffff 0x0001/0x0000 0x0000000
  133. 4988.2aa4: *0000000000400000-0000000000480fff 0x0000/0x0004 0x0020000
  134. 4988.2aa4: 0000000000481000-0000000000483fff 0x0004/0x0004 0x0020000
  135. 4988.2aa4: 0000000000484000-00000000005fffff 0x0000/0x0004 0x0020000
  136. 4988.2aa4: 0000000000600000-000000007ffdffff 0x0001/0x0000 0x0000000
  137. 4988.2aa4: *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000
  138. 4988.2aa4: 000000007ffe1000-00007ff5f669ffff 0x0001/0x0000 0x0000000
  139. 4988.2aa4: *00007ff5f66a0000-00007ff5f66cafff 0x0002/0x0002 0x0040000
  140. 4988.2aa4: 00007ff5f66cb000-00007ff6db83ffff 0x0001/0x0000 0x0000000
  141. 4988.2aa4: *00007ff6db840000-00007ff6db840fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
  142. 4988.2aa4: 00007ff6db841000-00007ff6db8b1fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
  143. 4988.2aa4: 00007ff6db8b2000-00007ff6db8b2fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
  144. 4988.2aa4: 00007ff6db8b3000-00007ff6db8f8fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
  145. 4988.2aa4: 00007ff6db8f9000-00007ff6db8f9fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
  146. 4988.2aa4: 00007ff6db8fa000-00007ff6db8fafff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
  147. 4988.2aa4: 00007ff6db8fb000-00007ff6db8fffff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
  148. 4988.2aa4: 00007ff6db900000-00007ff6db900fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
  149. 4988.2aa4: 00007ff6db901000-00007ff6db901fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
  150. 4988.2aa4: 00007ff6db902000-00007ff6db905fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
  151. 4988.2aa4: 00007ff6db906000-00007ff6db94dfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
  152. 4988.2aa4: 00007ff6db94e000-00007ffbfe2affff 0x0001/0x0000 0x0000000
  153. 4988.2aa4: *00007ffbfe2b0000-00007ffbfe2b0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
  154. 4988.2aa4: 00007ffbfe2b1000-00007ffbfe3bffff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
  155. 4988.2aa4: 00007ffbfe3c0000-00007ffbfe405fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
  156. 4988.2aa4: 00007ffbfe406000-00007ffbfe410fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
  157. 4988.2aa4: 00007ffbfe411000-00007ffbfe41efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
  158. 4988.2aa4: 00007ffbfe41f000-00007ffbfe41ffff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
  159. 4988.2aa4: 00007ffbfe420000-00007ffbfe422fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
  160. 4988.2aa4: 00007ffbfe423000-00007ffbfe490fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
  161. 4988.2aa4: 00007ffbfe491000-00007ffffffeffff 0x0001/0x0000 0x0000000
  162. 4988.2aa4: VirtualBox.exe: timestamp 0x5b4cb14e (rc=VINF_SUCCESS)
  163. 4988.2aa4: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
  164. 4988.2aa4: '\Device\HarddiskVolume3\Windows\System32\ntdll.dll' has no imports
  165. 4988.2aa4: supR3HardNtChildPurify: Done after 544 ms and 0 fixes (loop #0).
  166. 4988.2aa4: supR3HardNtEnableThreadCreation:
  167. 3770.2c5c: Log file opened: 5.2.16r123759 g_hStartupLog=0000000000000004 g_uNtVerCombined=0xa042ee00
  168. 3770.2c5c: supR3HardenedVmProcessInit: uNtDllAddr=00007ffbfe2b0000 g_uNtVerCombined=0xa042ee00
  169. 3770.2c5c: ntdll.dll: timestamp 0xf4df6dc2 (rc=VINF_SUCCESS)
  170. 3770.2c5c: New simple heap: #1 0000000000700000 LB 0x400000 (for 1970176 allocation)
  171. 3770.2c5c: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
  172. 3770.2c5c: System32: \Device\HarddiskVolume3\Windows\System32
  173. 3770.2c5c: WinSxS: \Device\HarddiskVolume3\Windows\WinSxS
  174. 3770.2c5c: KnownDllPath: C:\WINDOWS\System32
  175. 3770.2c5c: supR3HardenedVmProcessInit: Opening vboxdrv stub...
  176. 3770.2c5c: supR3HardenedVmProcessInit: Restoring LdrInitializeThunk...
  177. 3770.2c5c: supR3HardenedVmProcessInit: Returning to LdrInitializeThunk...
  178. 3770.2c5c: Registered Dll notification callback with NTDLL.
  179. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\kernel32.dll)
  180. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\kernel32.dll
  181. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\KERNEL32.DLL (Input=KERNEL32.DLL, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000004001:<flags> [calling]
  182. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbfa740000 LB 0x00273000 C:\WINDOWS\System32\KERNELBASE.dll [fFlags=0x0]
  183. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\KernelBase.dll)
  184. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
  185. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbfe1c0000 LB 0x000b2000 C:\WINDOWS\System32\KERNEL32.DLL [fFlags=0x0]
  186. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
  187. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfe1c0000 'C:\WINDOWS\System32\KERNEL32.DLL'
  188. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ff6db840000 LB 0x0010e000 C:\Program Files\Oracle\VirtualBox\VirtualBox.exe [fFlags=0x0]
  189. 3770.2c5c: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
  190. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe)
  191. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
  192. 3770.2c5c: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffbfe322fc0 pvNtTerminateThread=00007ffbfe34a900
  193. 4988.2aa4: supR3HardNtChildWaitFor: Found expected request 1 (CloseEvents) after 69 ms.
  194. 3770.2c5c: \SystemRoot\System32\ntdll.dll:
  195. 3770.2c5c: CreationTime: 2018-07-11T01:22:20.486818800Z
  196. 3770.2c5c: LastWriteTime: 2018-07-06T07:25:51.438518000Z
  197. 3770.2c5c: ChangeTime: 2018-07-26T18:08:11.660009400Z
  198. 3770.2c5c: FileAttributes: 0x20
  199. 3770.2c5c: Size: 0x1db0b8
  200. 3770.2c5c: NT Headers: 0xe8
  201. 3770.2c5c: Timestamp: 0xf4df6dc2
  202. 3770.2c5c: Machine: 0x8664 - amd64
  203. 3770.2c5c: Timestamp: 0xf4df6dc2
  204. 3770.2c5c: Image Version: 10.0
  205. 3770.2c5c: SizeOfImage: 0x1e1000 (1970176)
  206. 3770.2c5c: Resource Dir: 0x174000 LB 0x6b338
  207. 3770.2c5c: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
  208. 3770.2c5c: [Raw version resource data: 0x1740f0 LB 0x380, codepage 0x0 (reserved 0x0)]
  209. 3770.2c5c: ProductName: Microsoft® Windows® Operating System
  210. 3770.2c5c: ProductVersion: 10.0.17134.165
  211. 3770.2c5c: FileVersion: 10.0.17134.165 (WinBuild.160101.0800)
  212. 3770.2c5c: FileDescription: NT Layer DLL
  213. 3770.2c5c: \SystemRoot\System32\kernel32.dll:
  214. 3770.2c5c: CreationTime: 2018-04-11T23:34:40.510607900Z
  215. 3770.2c5c: LastWriteTime: 2018-04-11T23:34:40.510607900Z
  216. 3770.2c5c: ChangeTime: 2018-05-04T08:45:56.436435100Z
  217. 3770.2c5c: FileAttributes: 0x20
  218. 3770.2c5c: Size: 0xafef8
  219. 3770.2c5c: NT Headers: 0xe8
  220. 3770.2c5c: Timestamp: 0x5f488a51
  221. 3770.2c5c: Machine: 0x8664 - amd64
  222. 3770.2c5c: Timestamp: 0x5f488a51
  223. 3770.2c5c: Image Version: 10.0
  224. 3770.2c5c: SizeOfImage: 0xb2000 (729088)
  225. 3770.2c5c: Resource Dir: 0xb0000 LB 0x520
  226. 3770.2c5c: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
  227. 3770.2c5c: [Raw version resource data: 0xb00b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
  228. 3770.2c5c: ProductName: Microsoft® Windows® Operating System
  229. 3770.2c5c: ProductVersion: 10.0.17134.1
  230. 3770.2c5c: FileVersion: 10.0.17134.1 (WinBuild.160101.0800)
  231. 3770.2c5c: FileDescription: Windows NT BASE API Client DLL
  232. 3770.2c5c: \SystemRoot\System32\KernelBase.dll:
  233. 3770.2c5c: CreationTime: 2018-07-11T01:22:17.653886000Z
  234. 3770.2c5c: LastWriteTime: 2018-07-06T07:25:54.438736600Z
  235. 3770.2c5c: ChangeTime: 2018-07-26T18:08:11.655022700Z
  236. 3770.2c5c: FileAttributes: 0x20
  237. 3770.2c5c: Size: 0x273dd0
  238. 3770.2c5c: NT Headers: 0xf8
  239. 3770.2c5c: Timestamp: 0xb0bb231d
  240. 3770.2c5c: Machine: 0x8664 - amd64
  241. 3770.2c5c: Timestamp: 0xb0bb231d
  242. 3770.2c5c: Image Version: 10.0
  243. 3770.2c5c: SizeOfImage: 0x273000 (2568192)
  244. 3770.2c5c: Resource Dir: 0x251000 LB 0x548
  245. 3770.2c5c: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
  246. 3770.2c5c: [Raw version resource data: 0x2510b0 LB 0x3bc, codepage 0x0 (reserved 0x0)]
  247. 3770.2c5c: ProductName: Microsoft® Windows® Operating System
  248. 3770.2c5c: ProductVersion: 10.0.17134.165
  249. 3770.2c5c: FileVersion: 10.0.17134.165 (WinBuild.160101.0800)
  250. 3770.2c5c: FileDescription: Windows NT BASE API Client DLL
  251. 3770.2c5c: \SystemRoot\System32\apisetschema.dll:
  252. 3770.2c5c: CreationTime: 2018-04-11T23:34:44.042150700Z
  253. 3770.2c5c: LastWriteTime: 2018-04-11T23:34:44.042150700Z
  254. 3770.2c5c: ChangeTime: 2018-05-04T06:25:07.131292400Z
  255. 3770.2c5c: FileAttributes: 0x20
  256. 3770.2c5c: Size: 0x1bd98
  257. 3770.2c5c: NT Headers: 0xd0
  258. 3770.2c5c: Timestamp: 0xd02ff418
  259. 3770.2c5c: Machine: 0x8664 - amd64
  260. 3770.2c5c: Timestamp: 0xd02ff418
  261. 3770.2c5c: Image Version: 10.0
  262. 3770.2c5c: SizeOfImage: 0x1c000 (114688)
  263. 3770.2c5c: Resource Dir: 0x1b000 LB 0x408
  264. 3770.2c5c: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
  265. 3770.2c5c: [Raw version resource data: 0x1b060 LB 0x3a8, codepage 0x0 (reserved 0x0)]
  266. 3770.2c5c: ProductName: Microsoft® Windows® Operating System
  267. 3770.2c5c: ProductVersion: 10.0.17134.1
  268. 3770.2c5c: FileVersion: 10.0.17134.1 (WinBuild.160101.0800)
  269. 3770.2c5c: FileDescription: ApiSet Schema DLL
  270. 3770.2c5c: Found driver SymNetS (0x2)
  271. 3770.2c5c: Found driver SRTSPX (0x2)
  272. 3770.2c5c: Found driver SymEvent (0x2)
  273. 3770.2c5c: Found driver SymIRON (0x2)
  274. 3770.2c5c: supR3HardenedWinFindAdversaries: 0x2
  275. 3770.2c5c: \SystemRoot\System32\drivers\symevent64x86.sys:
  276. 3770.2c5c: CreationTime: 2018-05-04T06:59:05.713447400Z
  277. 3770.2c5c: LastWriteTime: 2018-06-14T18:13:36.727665800Z
  278. 3770.2c5c: ChangeTime: 2018-06-15T01:58:25.222933600Z
  279. 3770.2c5c: FileAttributes: 0x20
  280. 3770.2c5c: Size: 0x18650
  281. 3770.2c5c: NT Headers: 0xe8
  282. 3770.2c5c: Timestamp: 0x5a95cc4b
  283. 3770.2c5c: Machine: 0x8664 - amd64
  284. 3770.2c5c: Timestamp: 0x5a95cc4b
  285. 3770.2c5c: Image Version: 6.3
  286. 3770.2c5c: SizeOfImage: 0x21000 (135168)
  287. 3770.2c5c: Resource Dir: 0x1f000 LB 0x3c8
  288. 3770.2c5c: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
  289. 3770.2c5c: [Raw version resource data: 0x1f0b8 LB 0x310, codepage 0x4e4 (reserved 0x0)]
  290. 3770.2c5c: ProductName: SYMEVENT
  291. 3770.2c5c: ProductVersion: 14.0.6.27
  292. 3770.2c5c: FileVersion: 14.0.6.27
  293. 3770.2c5c: FileDescription: Symantec Event Library
  294. 3770.2c5c: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
  295. 3770.2c5c: Calling main()
  296. 3770.2c5c: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2
  297. 3770.2c5c: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
  298. 3770.2c5c: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
  299. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe)
  300. 3770.2c5c: SUPR3HardenedMain: Respawn #2
  301. 3770.2c5c: supR3HardNtEnableThreadCreation:
  302. 3770.2c5c: '\Device\HarddiskVolume3\Windows\System32\ntdll.dll' has no imports
  303. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ntdll.dll)
  304. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ntdll.dll
  305. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\ntdll.dll (Input=ntdll.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
  306. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfe2b0000 'C:\WINDOWS\System32\ntdll.dll'
  307. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\apphelp.dll)
  308. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\apphelp.dll
  309. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\apphelp.dll (rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000000000:<flags> [calling]
  310. 3770.2c5c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\apphelp.dll [lacks WinVerifyTrust]
  311. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbf8670000 LB 0x0008b000 C:\WINDOWS\system32\apphelp.dll [fFlags=0x0]
  312. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\apphelp.dll [lacks WinVerifyTrust]
  313. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ntdll.dll [lacks WinVerifyTrust]
  314. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\ntdll.dll (Input=ntdll.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
  315. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfe2b0000 'C:\WINDOWS\System32\ntdll.dll'
  316. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbf8670000 'C:\WINDOWS\system32\apphelp.dll'
  317. 3770.2c5c: Error -104 in supR3HardenedWinReSpawn! (enmWhat=5)
  318. 3770.2c5c: Error relaunching VirtualBox VM process: 5
  319. Command line: '60eaff78-4bdd-042d-2e72-669728efd737-suplib-3rdchild --comment CentOS --startvm 7b2e78fe-0cd7-4cde-b122-aa47c0974be8 --no-startvm-errormsgbox "--sup-hardening-log=C:\Users\digni\VirtualBox VMs\CentOS\Logs\VBoxHardening.log"'
  320. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'opengl32.dll'.
  321. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
  322. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'msvcp100.dll'.
  323. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcr100.dll'.
  324. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'.
  325. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'qt5guivbox.dll'.
  326. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'qt5widgetsvbox.dll'.
  327. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'qt5printsupportvbox.dll'.
  328. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'qt5openglvbox.dll'.
  329. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'user32.dll'.
  330. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'advapi32.dll'.
  331. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'shell32.dll'.
  332. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'ole32.dll'.
  333. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'oleaut32.dll'.
  334. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #15 'winmm.dll'.
  335. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.dll)
  336. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.dll
  337. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
  338. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume3\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
  339. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'winmmbase.dll'.
  340. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'msvcrt.dll'.
  341. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\winmm.dll)
  342. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\winmm.dll
  343. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
  344. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
  345. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
  346. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'combase.dll'.
  347. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #23 'rpcrt4.dll'.
  348. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\oleaut32.dll)
  349. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\oleaut32.dll
  350. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
  351. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
  352. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #23 'rpcrt4.dll'.
  353. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #48 'gdi32.dll'.
  354. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #49 'user32.dll'.
  355. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #50 'combase.dll'.
  356. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ole32.dll)
  357. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ole32.dll
  358. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
  359. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
  360. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  361. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #74 'user32.dll'.
  362. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #76 'gdi32.dll'.
  363. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\shell32.dll)
  364. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\shell32.dll
  365. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
  366. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
  367. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  368. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'sechost.dll'.
  369. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27 'rpcrt4.dll'.
  370. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\advapi32.dll)
  371. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\advapi32.dll
  372. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  373. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  374. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'win32u.dll'.
  375. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'gdi32.dll'.
  376. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\user32.dll)
  377. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\user32.dll
  378. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5openglvbox.dll'...
  379. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5openglvbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5openglvbox.dll' [rcNtRedir=0xc0150008]
  380. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'qt5widgetsvbox.dll'.
  381. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'qt5guivbox.dll'.
  382. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5corevbox.dll'.
  383. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcr100.dll'.
  384. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll)
  385. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll
  386. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5printsupportvbox.dll'...
  387. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5printsupportvbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5printsupportvbox.dll' [rcNtRedir=0xc0150008]
  388. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
  389. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
  390. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5widgetsvbox.dll'.
  391. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5guivbox.dll'.
  392. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'.
  393. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'winspool.drv'.
  394. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'comdlg32.dll'.
  395. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcr100.dll'.
  396. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll)
  397. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll
  398. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
  399. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
  400. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
  401. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
  402. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5guivbox.dll'.
  403. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5corevbox.dll'.
  404. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'shell32.dll'.
  405. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
  406. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
  407. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll)
  408. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll
  409. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
  410. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
  411. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'ole32.dll'.
  412. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'opengl32.dll'.
  413. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
  414. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
  415. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'.
  416. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
  417. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
  418. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll)
  419. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
  420. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
  421. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
  422. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
  423. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'shell32.dll'.
  424. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ole32.dll'.
  425. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'advapi32.dll'.
  426. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ws2_32.dll'.
  427. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'mpr.dll'.
  428. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcp100.dll'.
  429. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'msvcr100.dll'.
  430. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll)
  431. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
  432. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
  433. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
  434. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll)
  435. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll
  436. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
  437. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
  438. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
  439. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll)
  440. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll
  441. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
  442. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
  443. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
  444. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
  445. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ws2_32.dll'.
  446. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'rpcrt4.dll'.
  447. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll)
  448. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
  449. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
  450. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume3\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
  451. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  452. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'advapi32.dll'.
  453. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
  454. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'gdi32.dll'.
  455. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'glu32.dll'.
  456. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\opengl32.dll)
  457. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\opengl32.dll
  458. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'glu32.dll'...
  459. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'glu32.dll' -> '\Device\HarddiskVolume3\Windows\System32\glu32.dll' [rcNtRedir=0xc0150008]
  460. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  461. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
  462. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'opengl32.dll'.
  463. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\glu32.dll)
  464. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\glu32.dll
  465. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  466. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  467. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\gdi32.dll)
  468. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\gdi32.dll
  469. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  470. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  471. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  472. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
  473. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
  474. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
  475. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  476. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  477. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\msvcrt.dll)
  478. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
  479. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  480. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  481. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll)
  482. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll
  483. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
  484. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
  485. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'rpcrt4.dll'.
  486. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ws2_32.dll)
  487. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ws2_32.dll
  488. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
  489. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
  490. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
  491. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
  492. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
  493. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
  494. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
  495. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
  496. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
  497. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
  498. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
  499. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
  500. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
  501. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
  502. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
  503. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mpr.dll'...
  504. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'mpr.dll' -> '\Device\HarddiskVolume3\Windows\System32\mpr.dll' [rcNtRedir=0xc0150008]
  505. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\mpr.dll)
  506. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\mpr.dll
  507. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
  508. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
  509. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ws2_32.dll [lacks WinVerifyTrust]
  510. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
  511. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
  512. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
  513. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
  514. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
  515. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll [lacks WinVerifyTrust]
  516. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
  517. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
  518. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll [lacks WinVerifyTrust]
  519. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  520. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  521. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  522. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
  523. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
  524. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
  525. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
  526. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
  527. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
  528. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
  529. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
  530. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
  531. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  532. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  533. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  534. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  535. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  536. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  537. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
  538. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume3\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
  539. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
  540. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
  541. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
  542. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll [lacks WinVerifyTrust]
  543. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
  544. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
  545. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
  546. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
  547. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
  548. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
  549. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
  550. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
  551. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll [lacks WinVerifyTrust]
  552. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
  553. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
  554. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
  555. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
  556. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
  557. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
  558. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  559. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  560. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  561. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  562. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  563. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  564. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
  565. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
  566. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
  567. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'comdlg32.dll'...
  568. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'comdlg32.dll' -> '\Device\HarddiskVolume3\Windows\System32\comdlg32.dll' [rcNtRedir=0xc0150008]
  569. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  570. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'user32.dll'.
  571. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'shlwapi.dll'.
  572. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #37 'gdi32.dll'.
  573. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #38 'comctl32.dll'.
  574. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #39 'shell32.dll'.
  575. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\comdlg32.dll)
  576. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\comdlg32.dll
  577. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winspool.drv'...
  578. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'winspool.drv' -> '\Device\HarddiskVolume3\Windows\System32\winspool.drv' [rcNtRedir=0xc0150008]
  579. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  580. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #24 'propsys.dll'.
  581. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #29 'iphlpapi.dll'.
  582. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #38 'bcrypt.dll'.
  583. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\winspool.drv)
  584. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\winspool.drv
  585. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
  586. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
  587. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
  588. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
  589. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
  590. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
  591. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
  592. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
  593. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
  594. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  595. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  596. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  597. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  598. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  599. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  600. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
  601. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
  602. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
  603. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
  604. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
  605. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
  606. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
  607. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
  608. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
  609. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
  610. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
  611. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
  612. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  613. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  614. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  615. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
  616. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
  617. 3770.2c5c: '\Device\HarddiskVolume3\Windows\System32\win32u.dll' has no imports
  618. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\win32u.dll)
  619. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\win32u.dll
  620. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  621. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  622. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  623. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'sechost.dll'...
  624. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'sechost.dll' -> '\Device\HarddiskVolume3\Windows\System32\sechost.dll' [rcNtRedir=0xc0150008]
  625. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'rpcrt4.dll'.
  626. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\sechost.dll)
  627. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\sechost.dll
  628. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  629. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  630. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  631. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  632. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  633. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  634. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  635. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  636. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  637. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  638. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  639. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  640. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
  641. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
  642. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
  643. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #45 'bcryptprimitives.dll'.
  644. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\combase.dll)
  645. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\combase.dll
  646. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  647. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  648. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  649. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  650. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  651. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  652. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  653. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  654. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  655. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  656. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  657. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  658. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
  659. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
  660. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [lacks WinVerifyTrust]
  661. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
  662. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
  663. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll)
  664. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll
  665. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  666. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  667. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  668. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmmbase.dll'...
  669. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmmbase.dll' -> '\Device\HarddiskVolume3\Windows\System32\winmmbase.dll' [rcNtRedir=0xc0150008]
  670. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  671. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\winmmbase.dll)
  672. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\winmmbase.dll
  673. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  674. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  675. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  676. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'...
  677. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008]
  678. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll)
  679. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll
  680. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  681. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  682. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  683. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  684. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  685. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  686. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcrypt.dll'...
  687. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcrypt.dll' -> '\Device\HarddiskVolume3\Windows\System32\bcrypt.dll' [rcNtRedir=0xc0150008]
  688. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\bcrypt.dll)
  689. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\bcrypt.dll
  690. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'iphlpapi.dll'...
  691. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'iphlpapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\iphlpapi.dll' [rcNtRedir=0xc0150008]
  692. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL)
  693. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL
  694. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'propsys.dll'...
  695. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'propsys.dll' -> '\Device\HarddiskVolume3\Windows\System32\propsys.dll' [rcNtRedir=0xc0150008]
  696. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  697. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #15 'oleaut32.dll'.
  698. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #31 'rpcrt4.dll'.
  699. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\propsys.dll)
  700. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\propsys.dll
  701. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  702. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  703. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  704. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
  705. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
  706. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll [lacks WinVerifyTrust]
  707. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'comctl32.dll'...
  708. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'comctl32.dll' -> '\Device\HarddiskVolume3\Windows\System32\comctl32.dll' [rcNtRedir=0x0]
  709. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'advapi32.dll'.
  710. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
  711. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
  712. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\comctl32.dll)
  713. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\comctl32.dll
  714. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  715. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  716. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  717. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shlwapi.dll'...
  718. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'shlwapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\shlwapi.dll' [rcNtRedir=0xc0150008]
  719. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'.
  720. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #44 'gdi32.dll'.
  721. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #45 'user32.dll'.
  722. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\shlwapi.dll)
  723. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\shlwapi.dll
  724. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  725. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  726. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  727. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  728. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  729. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  730. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  731. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  732. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  733. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
  734. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume3\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
  735. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
  736. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  737. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  738. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  739. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  740. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  741. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  742. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  743. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  744. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  745. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  746. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  747. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  748. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  749. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  750. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  751. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  752. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  753. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  754. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  755. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  756. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  757. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
  758. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
  759. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
  760. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  761. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  762. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  763. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
  764. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
  765. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
  766. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  767. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  768. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  769. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VirtualBox.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000a01:<flags> [calling]
  770. 3770.2c5c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.dll [lacks WinVerifyTrust]
  771. 3770.2c5c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
  772. 3770.2c5c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  773. 3770.2c5c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
  774. 3770.2c5c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
  775. 3770.2c5c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
  776. 3770.2c5c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
  777. 3770.2c5c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
  778. 3770.2c5c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll [lacks WinVerifyTrust]
  779. 3770.2c5c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll [lacks WinVerifyTrust]
  780. 3770.2c5c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll [lacks WinVerifyTrust]
  781. 3770.2c5c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\glu32.dll [lacks WinVerifyTrust]
  782. 3770.2c5c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\mpr.dll [lacks WinVerifyTrust]
  783. 3770.2c5c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\winspool.drv [lacks WinVerifyTrust]
  784. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'advapi32.dll'.
  785. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
  786. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
  787. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.17134.191_none_f957a2993090dc56\comctl32.dll)
  788. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.17134.191_none_f957a2993090dc56\comctl32.dll
  789. 3770.2c5c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmmbase.dll [lacks WinVerifyTrust]
  790. 3770.2c5c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\propsys.dll [lacks WinVerifyTrust]
  791. 3770.2c5c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL [lacks WinVerifyTrust]
  792. 3770.2c5c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
  793. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbfc1f0000 LB 0x0009e000 C:\WINDOWS\System32\msvcrt.dll [fFlags=0x0]
  794. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  795. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbfc420000 LB 0x00124000 C:\WINDOWS\System32\RPCRT4.dll [fFlags=0x0]
  796. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  797. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbfca40000 LB 0x0005b000 C:\WINDOWS\System32\sechost.dll [fFlags=0x0]
  798. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\sechost.dll [lacks WinVerifyTrust]
  799. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbfc6b0000 LB 0x000a1000 C:\WINDOWS\System32\ADVAPI32.dll [fFlags=0x0]
  800. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
  801. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbfa720000 LB 0x00020000 C:\WINDOWS\System32\win32u.dll [fFlags=0x0]
  802. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [lacks WinVerifyTrust]
  803. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbfaa70000 LB 0x000fa000 C:\WINDOWS\System32\ucrtbase.dll [fFlags=0x0]
  804. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ucrtbase.dll)
  805. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll
  806. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbfa680000 LB 0x0009f000 C:\WINDOWS\System32\msvcp_win.dll [fFlags=0x0]
  807. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust]
  808. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbfabf0000 LB 0x00192000 C:\WINDOWS\System32\gdi32full.dll [fFlags=0x0]
  809. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
  810. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #33 'gdi32.dll'.
  811. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'user32.dll'.
  812. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'win32u.dll'.
  813. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\gdi32full.dll)
  814. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\gdi32full.dll
  815. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbfcd50000 LB 0x00028000 C:\WINDOWS\System32\GDI32.dll [fFlags=0x0]
  816. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  817. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbfb740000 LB 0x00190000 C:\WINDOWS\System32\USER32.dll [fFlags=0x0]
  818. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  819. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbcc4a0000 LB 0x0002c000 C:\WINDOWS\SYSTEM32\GLU32.dll [fFlags=0x0]
  820. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\glu32.dll [lacks WinVerifyTrust]
  821. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbbfa70000 LB 0x00120000 C:\WINDOWS\SYSTEM32\OPENGL32.dll [fFlags=0x0]
  822. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
  823. 3770.2c5c: supR3HardenedDllNotificationCallback: load 0000000066100000 LB 0x000d2000 C:\Program Files\Oracle\VirtualBox\MSVCR100.dll [fFlags=0x0]
  824. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
  825. 3770.2c5c: supR3HardenedDllNotificationCallback: load 0000000066060000 LB 0x00098000 C:\Program Files\Oracle\VirtualBox\MSVCP100.dll [fFlags=0x0]
  826. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
  827. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbfc640000 LB 0x0006c000 C:\WINDOWS\System32\WS2_32.dll [fFlags=0x0]
  828. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ws2_32.dll [lacks WinVerifyTrust]
  829. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffba1de0000 LB 0x00595000 C:\Program Files\Oracle\VirtualBox\VBoxRT.dll [fFlags=0x0]
  830. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  831. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbfaa20000 LB 0x00049000 C:\WINDOWS\System32\cfgmgr32.dll [fFlags=0x0]
  832. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll)
  833. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll
  834. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbfab70000 LB 0x0007a000 C:\WINDOWS\System32\bcryptPrimitives.dll [fFlags=0x0]
  835. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust]
  836. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbfbec0000 LB 0x00323000 C:\WINDOWS\System32\combase.dll [fFlags=0x0]
  837. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [lacks WinVerifyTrust]
  838. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbfc920000 LB 0x000a9000 C:\WINDOWS\System32\shcore.dll [fFlags=0x0]
  839. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  840. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #37 'rpcrt4.dll'.
  841. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #44 'combase.dll'.
  842. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\SHCore.dll)
  843. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\SHCore.dll
  844. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbfc9e0000 LB 0x00051000 C:\WINDOWS\System32\shlwapi.dll [fFlags=0x0]
  845. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shlwapi.dll [lacks WinVerifyTrust]
  846. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbfa610000 LB 0x00011000 C:\WINDOWS\System32\kernel.appcore.dll [fFlags=0x0]
  847. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcrt.dll'.
  848. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'rpcrt4.dll'.
  849. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll)
  850. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll
  851. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbfa5f0000 LB 0x0001f000 C:\WINDOWS\System32\profapi.dll [fFlags=0x0]
  852. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\profapi.dll)
  853. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\profapi.dll
  854. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbfa630000 LB 0x0004c000 C:\WINDOWS\System32\powrprof.dll [fFlags=0x0]
  855. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'rpcrt4.dll'.
  856. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\powrprof.dll)
  857. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\powrprof.dll
  858. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbfa5e0000 LB 0x0000a000 C:\WINDOWS\System32\FLTLIB.DLL [fFlags=0x0]
  859. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\fltLib.dll)
  860. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\fltLib.dll
  861. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbfb030000 LB 0x0070d000 C:\WINDOWS\System32\windows.storage.dll [fFlags=0x0]
  862. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  863. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'rpcrt4.dll'.
  864. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #54 'combase.dll'.
  865. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #58 'profapi.dll'.
  866. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #81 'fltlib.dll'.
  867. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\windows.storage.dll)
  868. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\windows.storage.dll
  869. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbfcd80000 LB 0x01440000 C:\WINDOWS\System32\SHELL32.dll [fFlags=0x0]
  870. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll [lacks WinVerifyTrust]
  871. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbfcb70000 LB 0x00151000 C:\WINDOWS\System32\ole32.dll [fFlags=0x0]
  872. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll [lacks WinVerifyTrust]
  873. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbed400000 LB 0x0001a000 C:\WINDOWS\SYSTEM32\MPR.dll [fFlags=0x0]
  874. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\mpr.dll [lacks WinVerifyTrust]
  875. 3770.2c5c: supR3HardenedDllNotificationCallback: load 0000000065af0000 LB 0x00565000 C:\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [fFlags=0x0]
  876. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
  877. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffba0dd0000 LB 0x005f7000 C:\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [fFlags=0x0]
  878. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
  879. 3770.2c5c: supR3HardenedDllNotificationCallback: load 0000000065580000 LB 0x00561000 C:\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [fFlags=0x0]
  880. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
  881. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbfcaa0000 LB 0x000c2000 C:\WINDOWS\System32\OLEAUT32.dll [fFlags=0x0]
  882. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
  883. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbf90d0000 LB 0x001b4000 C:\WINDOWS\SYSTEM32\PROPSYS.dll [fFlags=0x0]
  884. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\propsys.dll [lacks WinVerifyTrust]
  885. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbf9b60000 LB 0x00038000 C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL [fFlags=0x0]
  886. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL [lacks WinVerifyTrust]
  887. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbfa120000 LB 0x00025000 C:\WINDOWS\SYSTEM32\bcrypt.dll [fFlags=0x0]
  888. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
  889. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbf3f70000 LB 0x00084000 C:\WINDOWS\SYSTEM32\WINSPOOL.DRV [fFlags=0x0]
  890. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\winspool.drv [lacks WinVerifyTrust]
  891. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbf0410000 LB 0x000a7000 C:\WINDOWS\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.17134.191_none_f957a2993090dc56\COMCTL32.dll [fFlags=0x0]
  892. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.17134.191_none_f957a2993090dc56\comctl32.dll [lacks WinVerifyTrust]
  893. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbfc760000 LB 0x000ed000 C:\WINDOWS\System32\COMDLG32.dll [fFlags=0x0]
  894. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\comdlg32.dll [lacks WinVerifyTrust]
  895. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbe8210000 LB 0x00051000 C:\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll [fFlags=0x0]
  896. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll [lacks WinVerifyTrust]
  897. 3770.2c5c: supR3HardenedDllNotificationCallback: load 0000000065520000 LB 0x00054000 C:\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll [fFlags=0x0]
  898. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll [lacks WinVerifyTrust]
  899. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbf7160000 LB 0x0002a000 C:\WINDOWS\SYSTEM32\WINMMBASE.dll [fFlags=0x0]
  900. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmmbase.dll [lacks WinVerifyTrust]
  901. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbf7190000 LB 0x00023000 C:\WINDOWS\SYSTEM32\WINMM.dll [fFlags=0x0]
  902. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll [lacks WinVerifyTrust]
  903. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffba13d0000 LB 0x00a06000 C:\Program Files\Oracle\VirtualBox\VirtualBox.dll [fFlags=0x0]
  904. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.dll [lacks WinVerifyTrust]
  905. 3770.2c5c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
  906. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
  907. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfa740000 'api-ms-win-core-synch-l1-2-0'
  908. 3770.2c5c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
  909. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
  910. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfa740000 'api-ms-win-core-fibers-l1-1-1'
  911. 3770.2c5c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
  912. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
  913. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfa740000 'api-ms-win-core-fibers-l1-1-1'
  914. 3770.2c5c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
  915. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
  916. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfa740000 'api-ms-win-core-synch-l1-2-0'
  917. 3770.2c5c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-l1-2-1) -> 0x0, fPresent=1
  918. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-l1-2-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
  919. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfa740000 'api-ms-win-core-localization-l1-2-1'
  920. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
  921. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'fltlib.dll'...
  922. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'fltlib.dll' -> '\Device\HarddiskVolume3\Windows\System32\fltlib.dll' [rcNtRedir=0xc0150008]
  923. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\fltLib.dll [lacks WinVerifyTrust]
  924. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'profapi.dll'...
  925. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'profapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\profapi.dll' [rcNtRedir=0xc0150008]
  926. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\profapi.dll [lacks WinVerifyTrust]
  927. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
  928. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
  929. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [lacks WinVerifyTrust]
  930. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  931. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  932. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  933. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  934. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  935. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  936. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  937. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  938. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  939. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  940. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  941. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  942. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  943. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  944. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  945. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
  946. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
  947. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [lacks WinVerifyTrust]
  948. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  949. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  950. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  951. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  952. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  953. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  954. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
  955. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
  956. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [lacks WinVerifyTrust]
  957. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  958. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  959. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  960. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  961. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  962. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  963. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
  964. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
  965. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust]
  966. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  967. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  968. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  969. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  970. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  971. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  972. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
  973. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
  974. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
  975. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\kernel32.dll (Input=kernel32, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
  976. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfe1c0000 'C:\WINDOWS\System32\kernel32.dll'
  977. 3770.2c5c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-string-l1-1-0) -> 0x0, fPresent=1
  978. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-string-l1-1-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
  979. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfa740000 'api-ms-win-core-string-l1-1-0'
  980. 3770.2c5c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-datetime-l1-1-1) -> 0x0, fPresent=1
  981. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-datetime-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
  982. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfa740000 'api-ms-win-core-datetime-l1-1-1'
  983. 3770.2c5c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-obsolete-l1-2-0) -> 0x0, fPresent=1
  984. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-obsolete-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
  985. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfa740000 'api-ms-win-core-localization-obsolete-l1-2-0'
  986. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'user32.dll'.
  987. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #25 'win32u.dll'.
  988. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\imm32.dll)
  989. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\imm32.dll
  990. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
  991. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
  992. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [lacks WinVerifyTrust]
  993. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  994. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  995. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  996. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\IMM32.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
  997. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbfc8f0000 LB 0x0002d000 C:\WINDOWS\System32\IMM32.DLL [fFlags=0x0]
  998. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\imm32.dll [lacks WinVerifyTrust]
  999. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfc8f0000 'C:\WINDOWS\system32\IMM32.DLL'
  1000. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
  1001. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\kernel32.dll (Input=kernel32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1002. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfe1c0000 'C:\WINDOWS\System32\kernel32.dll'
  1003. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1004. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1005. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffba1de0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1006. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1007. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1008. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffba1de0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1009. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1010. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1011. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffba1de0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1012. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1013. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1014. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffba1de0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1015. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1016. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1017. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffba1de0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1018. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1019. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1020. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffba1de0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1021. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1022. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffba1de0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1023. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1024. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffba1de0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1025. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1026. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffba1de0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1027. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1028. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffba1de0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1029. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1030. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffba1de0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1031. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1032. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffba1de0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1033. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1034. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffba1de0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1035. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1036. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1037. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffba1de0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1038. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1039. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffba1de0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1040. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1041. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffba1de0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1042. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1043. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffba1de0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1044. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1045. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffba1de0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1046. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1047. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffba1de0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1048. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1049. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffba1de0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1050. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1051. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffba1de0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1052. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1053. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffba1de0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1054. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1055. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffba1de0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1056. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1057. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffba1de0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1058. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1059. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffba1de0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1060. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1061. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffba1de0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1062. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1063. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffba1de0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1064. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1065. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffba1de0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1066. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1067. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffba1de0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1068. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1069. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1070. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffba1de0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1071. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1072. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffba1de0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1073. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1074. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffba1de0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1075. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\imm32.dll [lacks WinVerifyTrust]
  1076. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\imm32.dll (Input=imm32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1077. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfc8f0000 'C:\WINDOWS\System32\imm32.dll'
  1078. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
  1079. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\ADVAPI32.DLL (Input=ADVAPI32.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1080. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfc6b0000 'C:\WINDOWS\System32\ADVAPI32.DLL'
  1081. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'bcryptprimitives.dll'.
  1082. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\cryptbase.dll)
  1083. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\cryptbase.dll
  1084. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbfa110000 LB 0x0000b000 C:\WINDOWS\SYSTEM32\CRYPTBASE.DLL [fFlags=0x0]
  1085. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\cryptbase.dll [lacks WinVerifyTrust]
  1086. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffba13d0000 'C:\Program Files\Oracle\VirtualBox\VirtualBox.dll'
  1087. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
  1088. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'ole32.dll'.
  1089. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
  1090. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'imm32.dll'.
  1091. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'winmm.dll'.
  1092. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'oleaut32.dll'.
  1093. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'shell32.dll'.
  1094. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'advapi32.dll'.
  1095. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'qt5guivbox.dll'.
  1096. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'qt5corevbox.dll'.
  1097. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'msvcr100.dll'.
  1098. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\platforms\qwindows.dll)
  1099. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\platforms\qwindows.dll
  1100. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
  1101. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
  1102. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
  1103. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
  1104. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
  1105. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
  1106. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
  1107. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
  1108. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
  1109. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
  1110. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
  1111. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
  1112. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
  1113. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
  1114. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll [lacks WinVerifyTrust]
  1115. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
  1116. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
  1117. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
  1118. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
  1119. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume3\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
  1120. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll [lacks WinVerifyTrust]
  1121. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'...
  1122. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume3\Windows\System32\imm32.dll' [rcNtRedir=0xc0150008]
  1123. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\imm32.dll [lacks WinVerifyTrust]
  1124. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  1125. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  1126. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  1127. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
  1128. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
  1129. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll [lacks WinVerifyTrust]
  1130. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  1131. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  1132. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  1133. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'...
  1134. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008]
  1135. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust]
  1136. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1137. 3770.2c5c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\platforms\qwindows.dll [lacks WinVerifyTrust]
  1138. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbbcba0000 LB 0x0012e000 C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll [fFlags=0x0]
  1139. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\platforms\qwindows.dll [lacks WinVerifyTrust]
  1140. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbbcba0000 'C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll'
  1141. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1142. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #33 'gdi32.dll'.
  1143. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'user32.dll'.
  1144. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\uxtheme.dll)
  1145. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\uxtheme.dll
  1146. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  1147. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  1148. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  1149. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  1150. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  1151. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  1152. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1153. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1154. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1155. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
  1156. 3770.2c5c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\uxtheme.dll [lacks WinVerifyTrust]
  1157. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbf8830000 LB 0x00098000 C:\WINDOWS\system32\uxtheme.dll [fFlags=0x0]
  1158. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\uxtheme.dll [lacks WinVerifyTrust]
  1159. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbf8830000 'C:\WINDOWS\system32\uxtheme.dll'
  1160. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  1161. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfb740000 'C:\WINDOWS\system32\user32.dll'
  1162. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll [lacks WinVerifyTrust]
  1163. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1164. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfcd80000 'C:\WINDOWS\system32\shell32.dll'
  1165. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\SHCore.dll [lacks WinVerifyTrust]
  1166. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\SHCore.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1167. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfc920000 'C:\WINDOWS\system32\SHCore.dll'
  1168. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: error opening 'C:\WINDOWS\system32\wintab32.dll': 0 (NtPath=\??\C:\WINDOWS\system32\wintab32.dll; Input=C:\WINDOWS\system32\wintab32.dll; rcNtGetDll=0x0
  1169. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000034 'C:\WINDOWS\system32\wintab32.dll'
  1170. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1171. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #21 'win32u.dll'.
  1172. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #22 'user32.dll'.
  1173. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #23 'gdi32.dll'.
  1174. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\dwmapi.dll)
  1175. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\dwmapi.dll
  1176. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbf8a80000 LB 0x00029000 C:\WINDOWS\system32\dwmapi.dll [fFlags=0x0]
  1177. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dwmapi.dll [lacks WinVerifyTrust]
  1178. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll [lacks WinVerifyTrust]
  1179. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  1180. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  1181. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  1182. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  1183. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  1184. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  1185. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
  1186. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
  1187. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [lacks WinVerifyTrust]
  1188. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1189. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1190. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1191. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\winmm.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1192. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbf7190000 'C:\WINDOWS\system32\winmm.dll'
  1193. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll [lacks WinVerifyTrust]
  1194. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\winmm.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1195. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbf7190000 'C:\WINDOWS\system32\winmm.dll'
  1196. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll [lacks WinVerifyTrust]
  1197. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1198. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfcd80000 'C:\WINDOWS\system32\shell32.dll'
  1199. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\uxtheme.dll [lacks WinVerifyTrust]
  1200. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1201. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbf8830000 'C:\WINDOWS\system32\uxtheme.dll'
  1202. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  1203. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\gdi32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1204. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfcd50000 'C:\WINDOWS\system32\gdi32.dll'
  1205. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbfc2a0000 LB 0x00175000 C:\WINDOWS\System32\MSCTF.dll [fFlags=0x0]
  1206. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1207. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'oleaut32.dll'.
  1208. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #38 'user32.dll'.
  1209. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #39 'gdi32.dll'.
  1210. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #40 'imm32.dll'.
  1211. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\msctf.dll)
  1212. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msctf.dll
  1213. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  1214. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'...
  1215. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume3\Windows\System32\imm32.dll' [rcNtRedir=0xc0150008]
  1216. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\imm32.dll [lacks WinVerifyTrust]
  1217. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  1218. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  1219. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  1220. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  1221. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  1222. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  1223. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
  1224. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
  1225. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
  1226. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1227. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1228. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1229. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfc420000 'C:\WINDOWS\System32\rpcrt4.dll'
  1230. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbfc850000 LB 0x000a0000 C:\WINDOWS\System32\clbcatq.dll [fFlags=0x0]
  1231. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1232. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #28 'rpcrt4.dll'.
  1233. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\clbcatq.dll)
  1234. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\clbcatq.dll
  1235. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1236. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'shcore.dll'.
  1237. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #29 'combase.dll'.
  1238. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'd3d11.dll'.
  1239. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'dcomp.dll'.
  1240. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\DataExchange.dll)
  1241. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\DataExchange.dll
  1242. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dcomp.dll'...
  1243. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'dcomp.dll' -> '\Device\HarddiskVolume3\Windows\System32\dcomp.dll' [rcNtRedir=0xc0150008]
  1244. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'win32u.dll'.
  1245. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp_win.dll'.
  1246. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'oleaut32.dll'.
  1247. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #37 'dxgi.dll'.
  1248. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\dcomp.dll)
  1249. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\dcomp.dll
  1250. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'd3d11.dll'...
  1251. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'd3d11.dll' -> '\Device\HarddiskVolume3\Windows\System32\d3d11.dll' [rcNtRedir=0xc0150008]
  1252. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1253. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'dxgi.dll'.
  1254. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'win32u.dll'.
  1255. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\d3d11.dll)
  1256. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\d3d11.dll
  1257. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
  1258. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
  1259. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [lacks WinVerifyTrust]
  1260. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shcore.dll'...
  1261. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'shcore.dll' -> '\Device\HarddiskVolume3\Windows\System32\shcore.dll' [rcNtRedir=0xc0150008]
  1262. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\SHCore.dll [lacks WinVerifyTrust]
  1263. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1264. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1265. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1266. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  1267. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  1268. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  1269. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1270. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1271. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1272. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
  1273. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
  1274. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [lacks WinVerifyTrust]
  1275. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dxgi.dll'...
  1276. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'dxgi.dll' -> '\Device\HarddiskVolume3\Windows\System32\dxgi.dll' [rcNtRedir=0xc0150008]
  1277. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1278. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'win32u.dll'.
  1279. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\dxgi.dll)
  1280. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\dxgi.dll
  1281. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1282. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1283. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1284. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dxgi.dll'...
  1285. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'dxgi.dll' -> '\Device\HarddiskVolume3\Windows\System32\dxgi.dll' [rcNtRedir=0xc0150008]
  1286. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dxgi.dll [lacks WinVerifyTrust]
  1287. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
  1288. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
  1289. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
  1290. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
  1291. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
  1292. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust]
  1293. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
  1294. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
  1295. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [lacks WinVerifyTrust]
  1296. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
  1297. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
  1298. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [lacks WinVerifyTrust]
  1299. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1300. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1301. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1302. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\dataexchange.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
  1303. 3770.2c5c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\DataExchange.dll [lacks WinVerifyTrust]
  1304. 3770.2c5c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\d3d11.dll [lacks WinVerifyTrust]
  1305. 3770.2c5c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dcomp.dll [lacks WinVerifyTrust]
  1306. 3770.2c5c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dxgi.dll [lacks WinVerifyTrust]
  1307. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbf9380000 LB 0x000bb000 C:\WINDOWS\system32\dxgi.dll [fFlags=0x0]
  1308. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dxgi.dll [lacks WinVerifyTrust]
  1309. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbf76b0000 LB 0x0030b000 C:\WINDOWS\system32\d3d11.dll [fFlags=0x0]
  1310. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\d3d11.dll [lacks WinVerifyTrust]
  1311. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbf7f90000 LB 0x0019c000 C:\WINDOWS\system32\dcomp.dll [fFlags=0x0]
  1312. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dcomp.dll [lacks WinVerifyTrust]
  1313. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbdc5f0000 LB 0x00058000 C:\WINDOWS\system32\dataexchange.dll [fFlags=0x0]
  1314. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\DataExchange.dll [lacks WinVerifyTrust]
  1315. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  1316. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfcd50000 'C:\WINDOWS\System32\gdi32.dll'
  1317. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdc5f0000 'C:\WINDOWS\system32\dataexchange.dll'
  1318. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1319. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'rmclient.dll'.
  1320. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #30 'rpcrt4.dll'.
  1321. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #44 'combase.dll'.
  1322. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll)
  1323. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll
  1324. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1325. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'rpcrt4.dll'.
  1326. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\rmclient.dll)
  1327. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\rmclient.dll
  1328. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbf8b60000 LB 0x00021000 C:\WINDOWS\system32\RMCLIENT.dll [fFlags=0x0]
  1329. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rmclient.dll [lacks WinVerifyTrust]
  1330. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbf8bc0000 LB 0x001b8000 C:\WINDOWS\system32\twinapi.appcore.dll [fFlags=0x0]
  1331. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll [lacks WinVerifyTrust]
  1332. 3770.45b8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #16 'rpcrt4.dll'.
  1333. 3770.45b8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'devobj.dll'.
  1334. 3770.45b8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'propsys.dll'.
  1335. 3770.45b8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll)
  1336. 3770.45b8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll
  1337. 3770.45b8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #17 'cfgmgr32.dll'.
  1338. 3770.45b8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\devobj.dll)
  1339. 3770.45b8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\devobj.dll
  1340. 3770.45b8: supR3HardenedDllNotificationCallback: load 00007ffbfa3d0000 LB 0x00027000 C:\WINDOWS\SYSTEM32\DEVOBJ.dll [fFlags=0x0]
  1341. 3770.45b8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\devobj.dll [lacks WinVerifyTrust]
  1342. 3770.45b8: supR3HardenedDllNotificationCallback: load 00007ffbede20000 LB 0x00076000 C:\WINDOWS\SYSTEM32\MMDevAPI.DLL [fFlags=0x0]
  1343. 3770.45b8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
  1344. 3770.45b8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1345. 3770.45b8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'mmdevapi.dll'.
  1346. 3770.45b8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27 'ksuser.dll'.
  1347. 3770.45b8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #28 'avrt.dll'.
  1348. 3770.45b8: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\wdmaud.drv)
  1349. 3770.45b8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\wdmaud.drv
  1350. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'avrt.dll'...
  1351. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: 'avrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\avrt.dll' [rcNtRedir=0xc0150008]
  1352. 3770.45b8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\avrt.dll)
  1353. 3770.45b8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\avrt.dll
  1354. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ksuser.dll'...
  1355. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: 'ksuser.dll' -> '\Device\HarddiskVolume3\Windows\System32\ksuser.dll' [rcNtRedir=0xc0150008]
  1356. 3770.45b8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1357. 3770.45b8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ksuser.dll)
  1358. 3770.45b8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ksuser.dll
  1359. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mmdevapi.dll'...
  1360. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: 'mmdevapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\mmdevapi.dll' [rcNtRedir=0xc0150008]
  1361. 3770.45b8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
  1362. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1363. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1364. 3770.45b8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1365. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'cfgmgr32.dll'...
  1366. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: 'cfgmgr32.dll' -> '\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll' [rcNtRedir=0xc0150008]
  1367. 3770.45b8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll [lacks WinVerifyTrust]
  1368. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'propsys.dll'...
  1369. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: 'propsys.dll' -> '\Device\HarddiskVolume3\Windows\System32\propsys.dll' [rcNtRedir=0xc0150008]
  1370. 3770.45b8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\propsys.dll [lacks WinVerifyTrust]
  1371. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'devobj.dll'...
  1372. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: 'devobj.dll' -> '\Device\HarddiskVolume3\Windows\System32\devobj.dll' [rcNtRedir=0xc0150008]
  1373. 3770.45b8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\devobj.dll [lacks WinVerifyTrust]
  1374. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  1375. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  1376. 3770.45b8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  1377. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  1378. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  1379. 3770.45b8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  1380. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1381. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1382. 3770.45b8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1383. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
  1384. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
  1385. 3770.45b8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [lacks WinVerifyTrust]
  1386. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  1387. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  1388. 3770.45b8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  1389. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rmclient.dll'...
  1390. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rmclient.dll' -> '\Device\HarddiskVolume3\Windows\System32\rmclient.dll' [rcNtRedir=0xc0150008]
  1391. 3770.45b8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rmclient.dll [lacks WinVerifyTrust]
  1392. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1393. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1394. 3770.45b8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1395. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1396. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1397. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #15 'coreuicomponents.dll'.
  1398. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #16 'coremessaging.dll'.
  1399. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\TextInputFramework.dll)
  1400. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\TextInputFramework.dll
  1401. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1402. 3770.45b8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1403. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1404. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1405. 3770.45b8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1406. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coremessaging.dll'...
  1407. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: 'coremessaging.dll' -> '\Device\HarddiskVolume3\Windows\System32\coremessaging.dll' [rcNtRedir=0xc0150008]
  1408. 3770.45b8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1409. 3770.45b8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #24 'rpcrt4.dll'.
  1410. 3770.45b8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll)
  1411. 3770.45b8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll
  1412. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coreuicomponents.dll'...
  1413. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: 'coreuicomponents.dll' -> '\Device\HarddiskVolume3\Windows\System32\coreuicomponents.dll' [rcNtRedir=0xc0150008]
  1414. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1415. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'coremessaging.dll'.
  1416. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #48 'shcore.dll'.
  1417. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\CoreUIComponents.dll)
  1418. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\CoreUIComponents.dll
  1419. 3770.2c5c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll [lacks WinVerifyTrust]
  1420. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ntmarta.dll)
  1421. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ntmarta.dll
  1422. 3770.45b8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1423. 3770.45b8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'coremessaging.dll'.
  1424. 3770.45b8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #48 'shcore.dll'.
  1425. 3770.45b8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\CoreUIComponents.dll)
  1426. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shcore.dll'...
  1427. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: 'shcore.dll' -> '\Device\HarddiskVolume3\Windows\System32\shcore.dll' [rcNtRedir=0xc0150008]
  1428. 3770.45b8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\SHCore.dll [lacks WinVerifyTrust]
  1429. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coremessaging.dll'...
  1430. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: 'coremessaging.dll' -> '\Device\HarddiskVolume3\Windows\System32\coremessaging.dll' [rcNtRedir=0xc0150008]
  1431. 3770.45b8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll [lacks WinVerifyTrust]
  1432. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1433. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1434. 3770.45b8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1435. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shcore.dll'...
  1436. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: 'shcore.dll' -> '\Device\HarddiskVolume3\Windows\System32\shcore.dll' [rcNtRedir=0xc0150008]
  1437. 3770.45b8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\SHCore.dll [lacks WinVerifyTrust]
  1438. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coremessaging.dll'...
  1439. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: 'coremessaging.dll' -> '\Device\HarddiskVolume3\Windows\System32\coremessaging.dll' [rcNtRedir=0xc0150008]
  1440. 3770.45b8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll [lacks WinVerifyTrust]
  1441. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1442. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1443. 3770.45b8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1444. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  1445. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  1446. 3770.45b8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  1447. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1448. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1449. 3770.45b8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1450. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
  1451. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'combase.dll'.
  1452. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #22 'rpcrt4.dll'.
  1453. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #29 'bcryptprimitives.dll'.
  1454. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\WinTypes.dll)
  1455. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\WinTypes.dll
  1456. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbf9760000 LB 0x00031000 C:\WINDOWS\SYSTEM32\ntmarta.dll [fFlags=0x0]
  1457. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ntmarta.dll [lacks WinVerifyTrust]
  1458. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbf8130000 LB 0x000da000 C:\WINDOWS\System32\CoreMessaging.dll [fFlags=0x0]
  1459. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll [lacks WinVerifyTrust]
  1460. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbf6630000 LB 0x0014d000 C:\WINDOWS\SYSTEM32\wintypes.dll [fFlags=0x0]
  1461. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\WinTypes.dll [lacks WinVerifyTrust]
  1462. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbf5b40000 LB 0x0031e000 C:\WINDOWS\System32\CoreUIComponents.dll [fFlags=0x0]
  1463. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\CoreUIComponents.dll [lacks WinVerifyTrust]
  1464. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbe8d70000 LB 0x00097000 C:\WINDOWS\System32\TextInputFramework.dll [fFlags=0x0]
  1465. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\TextInputFramework.dll [lacks WinVerifyTrust]
  1466. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
  1467. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'...
  1468. 3770.45b8: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
  1469. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008]
  1470. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust]
  1471. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  1472. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  1473. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  1474. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
  1475. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
  1476. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [lacks WinVerifyTrust]
  1477. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\OLEAUT32.DLL (Input=OLEAUT32.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1478. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfcaa0000 'C:\WINDOWS\System32\OLEAUT32.DLL'
  1479. 3770.45b8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ksuser.dll [lacks WinVerifyTrust]
  1480. 3770.2c5c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(ext-ms-win-rtcore-ntuser-window-ext-l1-1-0.dll) -> 0x0, fPresent=1
  1481. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=ext-ms-win-rtcore-ntuser-window-ext-l1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1482. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfb740000 'ext-ms-win-rtcore-ntuser-window-ext-l1-1-0.dll'
  1483. 3770.45b8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\avrt.dll [lacks WinVerifyTrust]
  1484. 3770.2c5c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(ext-ms-win-rtcore-ntuser-integration-l1-1-0.dll) -> 0x0, fPresent=1
  1485. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=ext-ms-win-rtcore-ntuser-integration-l1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1486. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfb740000 'ext-ms-win-rtcore-ntuser-integration-l1-1-0.dll'
  1487. 3770.45b8: supR3HardenedDllNotificationCallback: load 00007ffbedd60000 LB 0x00009000 C:\WINDOWS\SYSTEM32\ksuser.dll [fFlags=0x0]
  1488. 3770.2c5c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-com-l1-1-0.dll) -> 0x0, fPresent=1
  1489. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-com-l1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1490. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfbec0000 'api-ms-win-core-com-l1-1-0.dll'
  1491. 3770.45b8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ksuser.dll [lacks WinVerifyTrust]
  1492. 3770.45b8: supR3HardenedDllNotificationCallback: load 00007ffbf62a0000 LB 0x0000a000 C:\WINDOWS\SYSTEM32\AVRT.dll [fFlags=0x0]
  1493. 3770.45b8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\avrt.dll [lacks WinVerifyTrust]
  1494. 3770.45b8: supR3HardenedDllNotificationCallback: load 00007ffbc90f0000 LB 0x00044000 C:\WINDOWS\System32\wdmaud.drv [fFlags=0x0]
  1495. 3770.45b8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
  1496. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbc90f0000 'C:\WINDOWS\System32\wdmaud.drv'
  1497. 3770.45b8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
  1498. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
  1499. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbc90f0000 'C:\WINDOWS\System32\wdmaud.drv'
  1500. 3770.45b8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
  1501. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\MMDEVAPI.DLL (Input=MMDEVAPI.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1502. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbede20000 'C:\WINDOWS\System32\MMDEVAPI.DLL'
  1503. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msctf.dll [lacks WinVerifyTrust]
  1504. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\MSCTF.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
  1505. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfc2a0000 'C:\WINDOWS\System32\MSCTF.dll'
  1506. 3770.45b8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
  1507. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
  1508. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbc90f0000 'C:\WINDOWS\System32\wdmaud.drv'
  1509. 3770.45b8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
  1510. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
  1511. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbc90f0000 'C:\WINDOWS\System32\wdmaud.drv'
  1512. 3770.45b8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
  1513. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
  1514. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbc90f0000 'C:\WINDOWS\System32\wdmaud.drv'
  1515. 3770.45b8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
  1516. 3770.45b8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'rpcrt4.dll'.
  1517. 3770.45b8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'oleaut32.dll'.
  1518. 3770.45b8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #55 'mmdevapi.dll'.
  1519. 3770.45b8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #56 'avrt.dll'.
  1520. 3770.45b8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\AudioSes.dll)
  1521. 3770.45b8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\AudioSes.dll
  1522. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'avrt.dll'...
  1523. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: 'avrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\avrt.dll' [rcNtRedir=0xc0150008]
  1524. 3770.45b8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\avrt.dll [lacks WinVerifyTrust]
  1525. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mmdevapi.dll'...
  1526. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: 'mmdevapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\mmdevapi.dll' [rcNtRedir=0xc0150008]
  1527. 3770.45b8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
  1528. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
  1529. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
  1530. 3770.45b8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
  1531. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  1532. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  1533. 3770.45b8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  1534. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
  1535. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
  1536. 3770.45b8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust]
  1537. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\AUDIOSES.DLL (Input=AUDIOSES.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1538. 3770.45b8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\AudioSes.dll [lacks WinVerifyTrust]
  1539. 3770.45b8: supR3HardenedDllNotificationCallback: load 00007ffbcd290000 LB 0x0012c000 C:\WINDOWS\System32\AUDIOSES.DLL [fFlags=0x0]
  1540. 3770.45b8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\AudioSes.dll [lacks WinVerifyTrust]
  1541. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbcd290000 'C:\WINDOWS\System32\AUDIOSES.DLL'
  1542. 3770.45b8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
  1543. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
  1544. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbc90f0000 'C:\WINDOWS\System32\wdmaud.drv'
  1545. 3770.45b8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
  1546. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
  1547. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbc90f0000 'C:\WINDOWS\System32\wdmaud.drv'
  1548. 3770.45b8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
  1549. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbc90f0000 'C:\WINDOWS\System32\wdmaud.drv'
  1550. 3770.45b8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
  1551. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbc90f0000 'C:\WINDOWS\System32\wdmaud.drv'
  1552. 3770.45b8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
  1553. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbc90f0000 'C:\WINDOWS\System32\wdmaud.drv'
  1554. 3770.45b8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
  1555. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbc90f0000 'C:\WINDOWS\System32\wdmaud.drv'
  1556. 3770.45b8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1557. 3770.45b8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'mmdevapi.dll'.
  1558. 3770.45b8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'msacm32.dll'.
  1559. 3770.45b8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'winmmbase.dll'.
  1560. 3770.45b8: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\msacm32.drv)
  1561. 3770.45b8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msacm32.drv
  1562. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmmbase.dll'...
  1563. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmmbase.dll' -> '\Device\HarddiskVolume3\Windows\System32\winmmbase.dll' [rcNtRedir=0xc0150008]
  1564. 3770.45b8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmmbase.dll [lacks WinVerifyTrust]
  1565. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msacm32.dll'...
  1566. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msacm32.dll' -> '\Device\HarddiskVolume3\Windows\System32\msacm32.dll' [rcNtRedir=0xc0150008]
  1567. 3770.45b8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1568. 3770.45b8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\msacm32.dll)
  1569. 3770.45b8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msacm32.dll
  1570. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mmdevapi.dll'...
  1571. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: 'mmdevapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\mmdevapi.dll' [rcNtRedir=0xc0150008]
  1572. 3770.45b8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
  1573. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1574. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1575. 3770.45b8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1576. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1577. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1578. 3770.45b8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1579. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
  1580. 3770.45b8: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
  1581. 3770.45b8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msacm32.dll [lacks WinVerifyTrust]
  1582. 3770.45b8: supR3HardenedDllNotificationCallback: load 00007ffbe3d80000 LB 0x0001c000 C:\WINDOWS\SYSTEM32\MSACM32.dll [fFlags=0x0]
  1583. 3770.45b8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msacm32.dll [lacks WinVerifyTrust]
  1584. 3770.45b8: supR3HardenedDllNotificationCallback: load 00007ffbf55a0000 LB 0x0000d000 C:\WINDOWS\System32\msacm32.drv [fFlags=0x0]
  1585. 3770.45b8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
  1586. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbf55a0000 'C:\WINDOWS\System32\msacm32.drv'
  1587. 3770.45b8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
  1588. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
  1589. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbf55a0000 'C:\WINDOWS\System32\msacm32.drv'
  1590. 3770.45b8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
  1591. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
  1592. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbf55a0000 'C:\WINDOWS\System32\msacm32.drv'
  1593. 3770.45b8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
  1594. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
  1595. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbf55a0000 'C:\WINDOWS\System32\msacm32.drv'
  1596. 3770.45b8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
  1597. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
  1598. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbf55a0000 'C:\WINDOWS\System32\msacm32.drv'
  1599. 3770.45b8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
  1600. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
  1601. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbf55a0000 'C:\WINDOWS\System32\msacm32.drv'
  1602. 3770.45b8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
  1603. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
  1604. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbf55a0000 'C:\WINDOWS\System32\msacm32.drv'
  1605. 3770.45b8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
  1606. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbf55a0000 'C:\WINDOWS\System32\msacm32.drv'
  1607. 3770.45b8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
  1608. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbf55a0000 'C:\WINDOWS\System32\msacm32.drv'
  1609. 3770.45b8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
  1610. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbf55a0000 'C:\WINDOWS\System32\msacm32.drv'
  1611. 3770.45b8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1612. 3770.45b8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'winmm.dll'.
  1613. 3770.45b8: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\midimap.dll)
  1614. 3770.45b8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\midimap.dll
  1615. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
  1616. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume3\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
  1617. 3770.45b8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll [lacks WinVerifyTrust]
  1618. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1619. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1620. 3770.45b8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1621. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
  1622. 3770.45b8: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\midimap.dll [lacks WinVerifyTrust]
  1623. 3770.45b8: supR3HardenedDllNotificationCallback: load 00007ffbe87d0000 LB 0x0000a000 C:\WINDOWS\System32\midimap.dll [fFlags=0x0]
  1624. 3770.45b8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\midimap.dll [lacks WinVerifyTrust]
  1625. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbe87d0000 'C:\WINDOWS\System32\midimap.dll'
  1626. 3770.45b8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\midimap.dll [lacks WinVerifyTrust]
  1627. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
  1628. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbe87d0000 'C:\WINDOWS\System32\midimap.dll'
  1629. 3770.45b8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\midimap.dll [lacks WinVerifyTrust]
  1630. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
  1631. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbe87d0000 'C:\WINDOWS\System32\midimap.dll'
  1632. 3770.45b8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\midimap.dll [lacks WinVerifyTrust]
  1633. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
  1634. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbe87d0000 'C:\WINDOWS\System32\midimap.dll'
  1635. 3770.1604: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
  1636. 3770.1604: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\MMDevApi.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
  1637. 3770.1604: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbede20000 'C:\WINDOWS\System32\MMDevApi.dll'
  1638. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll [lacks WinVerifyTrust]
  1639. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\ole32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
  1640. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfcb70000 'C:\WINDOWS\system32\ole32.dll'
  1641. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1642. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
  1643. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'gdi32.dll'.
  1644. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'advapi32.dll'.
  1645. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ole32.dll'.
  1646. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'oleaut32.dll'.
  1647. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'shell32.dll'.
  1648. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'iertutil.dll'.
  1649. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'oleacc.dll'.
  1650. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'version.dll'.
  1651. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'rpcrt4.dll'.
  1652. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'shlwapi.dll'.
  1653. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'propsys.dll'.
  1654. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #15 'profapi.dll'.
  1655. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\IME\IMEJP\IMJPTIP.DLL)
  1656. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\IME\IMEJP\IMJPTIP.DLL
  1657. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'profapi.dll'...
  1658. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'profapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\profapi.dll' [rcNtRedir=0xc0150008]
  1659. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\profapi.dll [lacks WinVerifyTrust]
  1660. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'propsys.dll'...
  1661. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'propsys.dll' -> '\Device\HarddiskVolume3\Windows\System32\propsys.dll' [rcNtRedir=0xc0150008]
  1662. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\propsys.dll [lacks WinVerifyTrust]
  1663. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shlwapi.dll'...
  1664. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'shlwapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\shlwapi.dll' [rcNtRedir=0xc0150008]
  1665. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shlwapi.dll [lacks WinVerifyTrust]
  1666. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  1667. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  1668. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  1669. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'version.dll'...
  1670. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'version.dll' -> '\Device\HarddiskVolume3\Windows\System32\version.dll' [rcNtRedir=0xc0150008]
  1671. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1672. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\version.dll)
  1673. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\version.dll
  1674. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleacc.dll'...
  1675. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleacc.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleacc.dll' [rcNtRedir=0xc0150008]
  1676. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'rpcrt4.dll'.
  1677. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #30 'user32.dll'.
  1678. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\oleacc.dll)
  1679. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\oleacc.dll
  1680. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'iertutil.dll'...
  1681. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'iertutil.dll' -> '\Device\HarddiskVolume3\Windows\System32\iertutil.dll' [rcNtRedir=0xc0150008]
  1682. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1683. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\iertutil.dll)
  1684. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\iertutil.dll
  1685. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
  1686. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
  1687. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll [lacks WinVerifyTrust]
  1688. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
  1689. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
  1690. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
  1691. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
  1692. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
  1693. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll [lacks WinVerifyTrust]
  1694. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
  1695. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
  1696. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
  1697. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  1698. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  1699. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  1700. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  1701. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  1702. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  1703. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1704. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1705. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1706. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1707. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1708. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1709. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  1710. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  1711. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  1712. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  1713. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  1714. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  1715. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1716. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1717. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1718. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\IME\IMEJP\imjptip.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
  1719. 3770.2c5c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IME\IMEJP\IMJPTIP.DLL [lacks WinVerifyTrust]
  1720. 3770.2c5c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\iertutil.dll [lacks WinVerifyTrust]
  1721. 3770.2c5c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\oleacc.dll [lacks WinVerifyTrust]
  1722. 3770.2c5c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\version.dll [lacks WinVerifyTrust]
  1723. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbec600000 LB 0x002a2000 C:\WINDOWS\SYSTEM32\iertutil.dll [fFlags=0x0]
  1724. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\iertutil.dll [lacks WinVerifyTrust]
  1725. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbefea0000 LB 0x0006b000 C:\WINDOWS\SYSTEM32\OLEACC.dll [fFlags=0x0]
  1726. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\oleacc.dll [lacks WinVerifyTrust]
  1727. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbf5060000 LB 0x0000a000 C:\WINDOWS\SYSTEM32\VERSION.dll [fFlags=0x0]
  1728. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\version.dll [lacks WinVerifyTrust]
  1729. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbba390000 LB 0x002c2000 C:\Windows\System32\IME\IMEJP\imjptip.dll [fFlags=0x0]
  1730. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IME\IMEJP\IMJPTIP.DLL [lacks WinVerifyTrust]
  1731. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll [lacks WinVerifyTrust]
  1732. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\ole32.dll (Input=ole32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1733. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfcb70000 'C:\WINDOWS\System32\ole32.dll'
  1734. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbba390000 'C:\Windows\System32\IME\IMEJP\imjptip.dll'
  1735. 3770.2c5c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe [lacks WinVerifyTrust]
  1736. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1737. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'oleaut32.dll'.
  1738. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #15 'rpcrt4.dll'.
  1739. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #49 'bcrypt.dll'.
  1740. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #50 'crypt32.dll'.
  1741. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #55 'profapi.dll'.
  1742. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\IME\IMEJP\IMJPAPI.DLL)
  1743. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\IME\IMEJP\IMJPAPI.DLL
  1744. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'profapi.dll'...
  1745. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'profapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\profapi.dll' [rcNtRedir=0xc0150008]
  1746. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\profapi.dll [lacks WinVerifyTrust]
  1747. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'crypt32.dll'...
  1748. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'crypt32.dll' -> '\Device\HarddiskVolume3\Windows\System32\crypt32.dll' [rcNtRedir=0xc0150008]
  1749. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'msasn1.dll'.
  1750. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\crypt32.dll)
  1751. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\crypt32.dll
  1752. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcrypt.dll'...
  1753. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcrypt.dll' -> '\Device\HarddiskVolume3\Windows\System32\bcrypt.dll' [rcNtRedir=0xc0150008]
  1754. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
  1755. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  1756. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  1757. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  1758. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
  1759. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
  1760. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
  1761. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1762. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1763. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1764. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msasn1.dll'...
  1765. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msasn1.dll' -> '\Device\HarddiskVolume3\Windows\System32\msasn1.dll' [rcNtRedir=0xc0150008]
  1766. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\msasn1.dll)
  1767. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msasn1.dll
  1768. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\IME\IMEJP\imjpapi.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1769. 3770.2c5c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IME\IMEJP\IMJPAPI.DLL [lacks WinVerifyTrust]
  1770. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbfa5c0000 LB 0x00012000 C:\WINDOWS\System32\MSASN1.dll [fFlags=0x0]
  1771. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msasn1.dll [lacks WinVerifyTrust]
  1772. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbfad90000 LB 0x001e2000 C:\WINDOWS\System32\CRYPT32.dll [fFlags=0x0]
  1773. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
  1774. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbc2c70000 LB 0x0021d000 C:\Windows\System32\IME\IMEJP\imjpapi.dll [fFlags=0x0]
  1775. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IME\IMEJP\IMJPAPI.DLL [lacks WinVerifyTrust]
  1776. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll [lacks WinVerifyTrust]
  1777. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\ole32.dll (Input=ole32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1778. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfcb70000 'C:\WINDOWS\System32\ole32.dll'
  1779. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbc2c70000 'C:\Windows\System32\IME\IMEJP\imjpapi.dll'
  1780. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1781. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'oleaut32.dll'.
  1782. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'rpcrt4.dll'.
  1783. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\IME\shared\IMJKAPI.DLL)
  1784. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\IME\shared\IMJKAPI.DLL
  1785. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  1786. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  1787. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  1788. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
  1789. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
  1790. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
  1791. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1792. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1793. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1794. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\IME\shared\imjkapi.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1795. 3770.2c5c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IME\shared\IMJKAPI.DLL [lacks WinVerifyTrust]
  1796. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbf1b10000 LB 0x00040000 C:\Windows\System32\IME\shared\imjkapi.dll [fFlags=0x0]
  1797. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IME\shared\IMJKAPI.DLL [lacks WinVerifyTrust]
  1798. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll [lacks WinVerifyTrust]
  1799. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfcb70000 'C:\WINDOWS\System32\ole32.dll'
  1800. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbf1b10000 'C:\Windows\System32\IME\shared\imjkapi.dll'
  1801. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp110_win.dll'.
  1802. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'.
  1803. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'rpcrt4.dll'.
  1804. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\policymanager.dll)
  1805. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\policymanager.dll
  1806. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1807. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\msvcp110_win.dll)
  1808. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msvcp110_win.dll
  1809. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbf7000000 LB 0x00091000 C:\WINDOWS\SYSTEM32\msvcp110_win.dll [fFlags=0x0]
  1810. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp110_win.dll [lacks WinVerifyTrust]
  1811. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbf6cf0000 LB 0x0007f000 C:\WINDOWS\SYSTEM32\policymanager.dll [fFlags=0x0]
  1812. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\policymanager.dll [lacks WinVerifyTrust]
  1813. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1814. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'oleaut32.dll'.
  1815. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #37 'profapi.dll'.
  1816. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\IME\IMEJP\IMJPPRED.DLL)
  1817. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\IME\IMEJP\IMJPPRED.DLL
  1818. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'profapi.dll'...
  1819. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'profapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\profapi.dll' [rcNtRedir=0xc0150008]
  1820. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\profapi.dll [lacks WinVerifyTrust]
  1821. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
  1822. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
  1823. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
  1824. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1825. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1826. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1827. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1828. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1829. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1830. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  1831. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  1832. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  1833. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1834. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1835. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1836. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp110_win.dll'...
  1837. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp110_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp110_win.dll' [rcNtRedir=0xc0150008]
  1838. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp110_win.dll [lacks WinVerifyTrust]
  1839. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\IME\IMEJP\imjppred.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1840. 3770.2c5c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IME\IMEJP\IMJPPRED.DLL [lacks WinVerifyTrust]
  1841. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbe8560000 LB 0x00091000 C:\Windows\System32\IME\IMEJP\imjppred.dll [fFlags=0x0]
  1842. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IME\IMEJP\IMJPPRED.DLL [lacks WinVerifyTrust]
  1843. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll [lacks WinVerifyTrust]
  1844. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfcb70000 'C:\WINDOWS\System32\ole32.dll'
  1845. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbe8560000 'C:\Windows\System32\IME\IMEJP\imjppred.dll'
  1846. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msctf.dll [lacks WinVerifyTrust]
  1847. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\MSCTF.DLL (Input=MSCTF.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1848. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfc2a0000 'C:\WINDOWS\System32\MSCTF.DLL'
  1849. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1850. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'advapi32.dll'.
  1851. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
  1852. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'ole32.dll'.
  1853. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'oleaut32.dll'.
  1854. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'gdi32.dll'.
  1855. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'oleacc.dll'.
  1856. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'version.dll'.
  1857. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'dui70.dll'.
  1858. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\IME\shared\IMETIP.DLL)
  1859. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\IME\shared\IMETIP.DLL
  1860. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dui70.dll'...
  1861. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'dui70.dll' -> '\Device\HarddiskVolume3\Windows\System32\dui70.dll' [rcNtRedir=0xc0150008]
  1862. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1863. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #32 'user32.dll'.
  1864. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #33 'gdi32.dll'.
  1865. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\dui70.dll)
  1866. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\dui70.dll
  1867. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'version.dll'...
  1868. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'version.dll' -> '\Device\HarddiskVolume3\Windows\System32\version.dll' [rcNtRedir=0xc0150008]
  1869. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\version.dll [lacks WinVerifyTrust]
  1870. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleacc.dll'...
  1871. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleacc.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleacc.dll' [rcNtRedir=0xc0150008]
  1872. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\oleacc.dll [lacks WinVerifyTrust]
  1873. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  1874. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  1875. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  1876. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
  1877. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
  1878. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
  1879. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
  1880. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
  1881. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll [lacks WinVerifyTrust]
  1882. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  1883. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  1884. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  1885. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
  1886. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
  1887. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
  1888. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1889. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1890. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1891. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  1892. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  1893. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  1894. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  1895. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  1896. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  1897. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1898. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1899. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1900. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\IME\shared\imetip.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
  1901. 3770.2c5c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IME\shared\IMETIP.DLL [lacks WinVerifyTrust]
  1902. 3770.2c5c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\dui70.dll [lacks WinVerifyTrust]
  1903. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbc2840000 LB 0x001ab000 C:\WINDOWS\SYSTEM32\DUI70.dll [fFlags=0x0]
  1904. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\dui70.dll [lacks WinVerifyTrust]
  1905. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbc8eb0000 LB 0x00156000 C:\Windows\System32\IME\shared\imetip.dll [fFlags=0x0]
  1906. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IME\shared\IMETIP.DLL [lacks WinVerifyTrust]
  1907. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbc8eb0000 'C:\Windows\System32\IME\shared\imetip.dll'
  1908. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msctf.dll [lacks WinVerifyTrust]
  1909. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\MSCTF.DLL (Input=MSCTF.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1910. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfc2a0000 'C:\WINDOWS\System32\MSCTF.DLL'
  1911. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msctf.dll [lacks WinVerifyTrust]
  1912. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msctf.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
  1913. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfc2a0000 'C:\WINDOWS\System32\msctf.dll'
  1914. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msctf.dll [lacks WinVerifyTrust]
  1915. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\msctf.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
  1916. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfc2a0000 'C:\WINDOWS\system32\msctf.dll'
  1917. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1918. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'advapi32.dll'.
  1919. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ole32.dll'.
  1920. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'shlwapi.dll'.
  1921. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'user32.dll'.
  1922. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'oleaut32.dll'.
  1923. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'wer.dll'.
  1924. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\IME\shared\imecfm.dll)
  1925. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\IME\shared\imecfm.dll
  1926. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'wer.dll'...
  1927. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'wer.dll' -> '\Device\HarddiskVolume3\Windows\System32\wer.dll' [rcNtRedir=0xc0150008]
  1928. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1929. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #41 'rpcrt4.dll'.
  1930. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\wer.dll)
  1931. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\wer.dll
  1932. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
  1933. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
  1934. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
  1935. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  1936. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  1937. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  1938. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shlwapi.dll'...
  1939. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'shlwapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\shlwapi.dll' [rcNtRedir=0xc0150008]
  1940. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shlwapi.dll [lacks WinVerifyTrust]
  1941. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
  1942. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
  1943. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll [lacks WinVerifyTrust]
  1944. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
  1945. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
  1946. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
  1947. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1948. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1949. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1950. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  1951. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  1952. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  1953. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1954. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1955. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1956. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\IME\shared\imecfm.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1957. 3770.2c5c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IME\shared\imecfm.dll [lacks WinVerifyTrust]
  1958. 3770.2c5c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wer.dll [lacks WinVerifyTrust]
  1959. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbf88f0000 LB 0x000c1000 C:\WINDOWS\SYSTEM32\wer.dll [fFlags=0x0]
  1960. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wer.dll [lacks WinVerifyTrust]
  1961. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbe7e30000 LB 0x0003b000 C:\Windows\System32\IME\shared\imecfm.dll [fFlags=0x0]
  1962. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IME\shared\imecfm.dll [lacks WinVerifyTrust]
  1963. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbe7e30000 'C:\Windows\System32\IME\shared\imecfm.dll'
  1964. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  1965. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfb740000 'C:\WINDOWS\System32\user32.dll'
  1966. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IME\IMEJP\IMJPAPI.DLL [lacks WinVerifyTrust]
  1967. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\IME\IMEJP\imjpapi.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
  1968. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbc2c70000 'C:\Windows\System32\IME\IMEJP\imjpapi.dll'
  1969. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IME\shared\IMJKAPI.DLL [lacks WinVerifyTrust]
  1970. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\IME\shared\imjkapi.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1971. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbf1b10000 'C:\Windows\System32\IME\shared\imjkapi.dll'
  1972. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IME\shared\IMJKAPI.DLL [lacks WinVerifyTrust]
  1973. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\IME\shared\imjkapi.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1974. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbf1b10000 'C:\Windows\System32\IME\shared\imjkapi.dll'
  1975. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IME\shared\IMJKAPI.DLL [lacks WinVerifyTrust]
  1976. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\IME\shared\imjkapi.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1977. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbf1b10000 'C:\Windows\System32\IME\shared\imjkapi.dll'
  1978. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IME\shared\IMJKAPI.DLL [lacks WinVerifyTrust]
  1979. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\IME\shared\imjkapi.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1980. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbf1b10000 'C:\Windows\System32\IME\shared\imjkapi.dll'
  1981. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IME\IMEJP\IMJPPRED.DLL [lacks WinVerifyTrust]
  1982. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\IME\IMEJP\imjppred.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1983. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbe8560000 'C:\Windows\System32\IME\IMEJP\imjppred.dll'
  1984. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IME\shared\imecfm.dll [lacks WinVerifyTrust]
  1985. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\IME\shared\imecfm.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1986. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbe7e30000 'C:\Windows\System32\IME\shared\imecfm.dll'
  1987. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1988. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'ole32.dll'.
  1989. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'oleaut32.dll'.
  1990. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
  1991. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'advapi32.dll'.
  1992. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\IME\shared\IMESEARCHDLL.DLL)
  1993. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\IME\shared\IMESEARCHDLL.DLL
  1994. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
  1995. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
  1996. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
  1997. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  1998. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  1999. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  2000. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
  2001. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
  2002. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
  2003. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
  2004. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
  2005. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll [lacks WinVerifyTrust]
  2006. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  2007. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  2008. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  2009. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\IME\SHARED\imesearchdll.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
  2010. 3770.2c5c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IME\shared\IMESEARCHDLL.DLL [lacks WinVerifyTrust]
  2011. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbe9940000 LB 0x0001f000 C:\Windows\System32\IME\SHARED\imesearchdll.dll [fFlags=0x0]
  2012. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IME\shared\IMESEARCHDLL.DLL [lacks WinVerifyTrust]
  2013. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbe9940000 'C:\Windows\System32\IME\SHARED\imesearchdll.dll'
  2014. 3770.2c5c: supR3HardenedDllNotificationCallback: Unload 00007ffbe7e30000 LB 0x0003b000 C:\Windows\System32\IME\shared\imecfm.dll [flags=0x0]
  2015. 3770.2c5c: supR3HardenedDllNotificationCallback: Unload 00007ffbf88f0000 LB 0x000c1000 C:\WINDOWS\SYSTEM32\wer.dll [flags=0x0]
  2016. 4988.2aa4: supR3HardNtChildWaitFor[1]: Quitting: ExitCode=0x1 (rcNtWait=0x0, rcNt1=0x0, rcNt2=0x103, rcNt3=0x103, 2518 ms, the end);
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!