Guest User

Untitled

a guest
Jul 26th, 2018
184
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. 4988.2aa4: Log file opened: 5.2.16r123759 g_hStartupLog=0000000000000084 g_uNtVerCombined=0xa042ee00
  2. 4988.2aa4: \SystemRoot\System32\ntdll.dll:
  3. 4988.2aa4: CreationTime: 2018-07-11T01:22:20.486818800Z
  4. 4988.2aa4: LastWriteTime: 2018-07-06T07:25:51.438518000Z
  5. 4988.2aa4: ChangeTime: 2018-07-26T18:08:11.660009400Z
  6. 4988.2aa4: FileAttributes: 0x20
  7. 4988.2aa4: Size: 0x1db0b8
  8. 4988.2aa4: NT Headers: 0xe8
  9. 4988.2aa4: Timestamp: 0xf4df6dc2
  10. 4988.2aa4: Machine: 0x8664 - amd64
  11. 4988.2aa4: Timestamp: 0xf4df6dc2
  12. 4988.2aa4: Image Version: 10.0
  13. 4988.2aa4: SizeOfImage: 0x1e1000 (1970176)
  14. 4988.2aa4: Resource Dir: 0x174000 LB 0x6b338
  15. 4988.2aa4: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
  16. 4988.2aa4: [Raw version resource data: 0x1740f0 LB 0x380, codepage 0x0 (reserved 0x0)]
  17. 4988.2aa4: ProductName: Microsoft® Windows® Operating System
  18. 4988.2aa4: ProductVersion: 10.0.17134.165
  19. 4988.2aa4: FileVersion: 10.0.17134.165 (WinBuild.160101.0800)
  20. 4988.2aa4: FileDescription: NT Layer DLL
  21. 4988.2aa4: \SystemRoot\System32\kernel32.dll:
  22. 4988.2aa4: CreationTime: 2018-04-11T23:34:40.510607900Z
  23. 4988.2aa4: LastWriteTime: 2018-04-11T23:34:40.510607900Z
  24. 4988.2aa4: ChangeTime: 2018-05-04T08:45:56.436435100Z
  25. 4988.2aa4: FileAttributes: 0x20
  26. 4988.2aa4: Size: 0xafef8
  27. 4988.2aa4: NT Headers: 0xe8
  28. 4988.2aa4: Timestamp: 0x5f488a51
  29. 4988.2aa4: Machine: 0x8664 - amd64
  30. 4988.2aa4: Timestamp: 0x5f488a51
  31. 4988.2aa4: Image Version: 10.0
  32. 4988.2aa4: SizeOfImage: 0xb2000 (729088)
  33. 4988.2aa4: Resource Dir: 0xb0000 LB 0x520
  34. 4988.2aa4: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
  35. 4988.2aa4: [Raw version resource data: 0xb00b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
  36. 4988.2aa4: ProductName: Microsoft® Windows® Operating System
  37. 4988.2aa4: ProductVersion: 10.0.17134.1
  38. 4988.2aa4: FileVersion: 10.0.17134.1 (WinBuild.160101.0800)
  39. 4988.2aa4: FileDescription: Windows NT BASE API Client DLL
  40. 4988.2aa4: \SystemRoot\System32\KernelBase.dll:
  41. 4988.2aa4: CreationTime: 2018-07-11T01:22:17.653886000Z
  42. 4988.2aa4: LastWriteTime: 2018-07-06T07:25:54.438736600Z
  43. 4988.2aa4: ChangeTime: 2018-07-26T18:08:11.655022700Z
  44. 4988.2aa4: FileAttributes: 0x20
  45. 4988.2aa4: Size: 0x273dd0
  46. 4988.2aa4: NT Headers: 0xf8
  47. 4988.2aa4: Timestamp: 0xb0bb231d
  48. 4988.2aa4: Machine: 0x8664 - amd64
  49. 4988.2aa4: Timestamp: 0xb0bb231d
  50. 4988.2aa4: Image Version: 10.0
  51. 4988.2aa4: SizeOfImage: 0x273000 (2568192)
  52. 4988.2aa4: Resource Dir: 0x251000 LB 0x548
  53. 4988.2aa4: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
  54. 4988.2aa4: [Raw version resource data: 0x2510b0 LB 0x3bc, codepage 0x0 (reserved 0x0)]
  55. 4988.2aa4: ProductName: Microsoft® Windows® Operating System
  56. 4988.2aa4: ProductVersion: 10.0.17134.165
  57. 4988.2aa4: FileVersion: 10.0.17134.165 (WinBuild.160101.0800)
  58. 4988.2aa4: FileDescription: Windows NT BASE API Client DLL
  59. 4988.2aa4: \SystemRoot\System32\apisetschema.dll:
  60. 4988.2aa4: CreationTime: 2018-04-11T23:34:44.042150700Z
  61. 4988.2aa4: LastWriteTime: 2018-04-11T23:34:44.042150700Z
  62. 4988.2aa4: ChangeTime: 2018-05-04T06:25:07.131292400Z
  63. 4988.2aa4: FileAttributes: 0x20
  64. 4988.2aa4: Size: 0x1bd98
  65. 4988.2aa4: NT Headers: 0xd0
  66. 4988.2aa4: Timestamp: 0xd02ff418
  67. 4988.2aa4: Machine: 0x8664 - amd64
  68. 4988.2aa4: Timestamp: 0xd02ff418
  69. 4988.2aa4: Image Version: 10.0
  70. 4988.2aa4: SizeOfImage: 0x1c000 (114688)
  71. 4988.2aa4: Resource Dir: 0x1b000 LB 0x408
  72. 4988.2aa4: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
  73. 4988.2aa4: [Raw version resource data: 0x1b060 LB 0x3a8, codepage 0x0 (reserved 0x0)]
  74. 4988.2aa4: ProductName: Microsoft® Windows® Operating System
  75. 4988.2aa4: ProductVersion: 10.0.17134.1
  76. 4988.2aa4: FileVersion: 10.0.17134.1 (WinBuild.160101.0800)
  77. 4988.2aa4: FileDescription: ApiSet Schema DLL
  78. 4988.2aa4: Found driver SymNetS (0x2)
  79. 4988.2aa4: Found driver SRTSPX (0x2)
  80. 4988.2aa4: Found driver SymEvent (0x2)
  81. 4988.2aa4: Found driver SymIRON (0x2)
  82. 4988.2aa4: supR3HardenedWinFindAdversaries: 0x2
  83. 4988.2aa4: \SystemRoot\System32\drivers\symevent64x86.sys:
  84. 4988.2aa4: CreationTime: 2018-05-04T06:59:05.713447400Z
  85. 4988.2aa4: LastWriteTime: 2018-06-14T18:13:36.727665800Z
  86. 4988.2aa4: ChangeTime: 2018-06-15T01:58:25.222933600Z
  87. 4988.2aa4: FileAttributes: 0x20
  88. 4988.2aa4: Size: 0x18650
  89. 4988.2aa4: NT Headers: 0xe8
  90. 4988.2aa4: Timestamp: 0x5a95cc4b
  91. 4988.2aa4: Machine: 0x8664 - amd64
  92. 4988.2aa4: Timestamp: 0x5a95cc4b
  93. 4988.2aa4: Image Version: 6.3
  94. 4988.2aa4: SizeOfImage: 0x21000 (135168)
  95. 4988.2aa4: Resource Dir: 0x1f000 LB 0x3c8
  96. 4988.2aa4: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
  97. 4988.2aa4: [Raw version resource data: 0x1f0b8 LB 0x310, codepage 0x4e4 (reserved 0x0)]
  98. 4988.2aa4: ProductName: SYMEVENT
  99. 4988.2aa4: ProductVersion: 14.0.6.27
  100. 4988.2aa4: FileVersion: 14.0.6.27
  101. 4988.2aa4: FileDescription: Symantec Event Library
  102. 4988.2aa4: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
  103. 4988.2aa4: Calling main()
  104. 4988.2aa4: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2
  105. 4988.2aa4: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
  106. 4988.2aa4: SUPR3HardenedMain: Respawn #1
  107. 4988.2aa4: System32: \Device\HarddiskVolume3\Windows\System32
  108. 4988.2aa4: WinSxS: \Device\HarddiskVolume3\Windows\WinSxS
  109. 4988.2aa4: KnownDllPath: C:\WINDOWS\System32
  110. 4988.2aa4: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
  111. 4988.2aa4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe)
  112. 4988.2aa4: supR3HardNtEnableThreadCreation:
  113. 4988.2aa4: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffbfe322fc0 pvNtTerminateThread=00007ffbfe34a900
  114. 4988.2aa4: supR3HardenedWinDoReSpawn(1): New child 3770.2c5c [kernel32].
  115. 4988.2aa4: supR3HardNtChildGatherData: PebBaseAddress=0000000000481000 cbPeb=0x388
  116. 4988.2aa4: supR3HardNtPuChFindNtdll: uNtDllParentAddr=00007ffbfe2b0000 uNtDllChildAddr=00007ffbfe2b0000
  117. 4988.2aa4: supR3HardenedWinSetupChildInit: uLdrInitThunk=00007ffbfe322fc0
  118. 4988.2aa4: supR3HardenedWinSetupChildInit: Start child.
  119. 4988.2aa4: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 0 ms.
  120. 4988.2aa4: supR3HardNtChildPurify: Startup delay kludge #1/0: 518 ms, 61 sleeps
  121. 4988.2aa4: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
  122. 4988.2aa4: *0000000000000000-000000000029ffff 0x0001/0x0000 0x0000000
  123. 4988.2aa4: *00000000002a0000-00000000002bffff 0x0004/0x0004 0x0020000
  124. 4988.2aa4: *00000000002c0000-00000000002d8fff 0x0002/0x0002 0x0040000
  125. 4988.2aa4: 00000000002d9000-00000000002dffff 0x0001/0x0000 0x0000000
  126. 4988.2aa4: *00000000002e0000-00000000003dafff 0x0000/0x0004 0x0020000
  127. 4988.2aa4: 00000000003db000-00000000003ddfff 0x0104/0x0004 0x0020000
  128. 4988.2aa4: 00000000003de000-00000000003dffff 0x0004/0x0004 0x0020000
  129. 4988.2aa4: *00000000003e0000-00000000003e3fff 0x0002/0x0002 0x0040000
  130. 4988.2aa4: 00000000003e4000-00000000003effff 0x0001/0x0000 0x0000000
  131. 4988.2aa4: *00000000003f0000-00000000003f0fff 0x0004/0x0004 0x0020000
  132. 4988.2aa4: 00000000003f1000-00000000003fffff 0x0001/0x0000 0x0000000
  133. 4988.2aa4: *0000000000400000-0000000000480fff 0x0000/0x0004 0x0020000
  134. 4988.2aa4: 0000000000481000-0000000000483fff 0x0004/0x0004 0x0020000
  135. 4988.2aa4: 0000000000484000-00000000005fffff 0x0000/0x0004 0x0020000
  136. 4988.2aa4: 0000000000600000-000000007ffdffff 0x0001/0x0000 0x0000000
  137. 4988.2aa4: *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000
  138. 4988.2aa4: 000000007ffe1000-00007ff5f669ffff 0x0001/0x0000 0x0000000
  139. 4988.2aa4: *00007ff5f66a0000-00007ff5f66cafff 0x0002/0x0002 0x0040000
  140. 4988.2aa4: 00007ff5f66cb000-00007ff6db83ffff 0x0001/0x0000 0x0000000
  141. 4988.2aa4: *00007ff6db840000-00007ff6db840fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
  142. 4988.2aa4: 00007ff6db841000-00007ff6db8b1fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
  143. 4988.2aa4: 00007ff6db8b2000-00007ff6db8b2fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
  144. 4988.2aa4: 00007ff6db8b3000-00007ff6db8f8fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
  145. 4988.2aa4: 00007ff6db8f9000-00007ff6db8f9fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
  146. 4988.2aa4: 00007ff6db8fa000-00007ff6db8fafff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
  147. 4988.2aa4: 00007ff6db8fb000-00007ff6db8fffff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
  148. 4988.2aa4: 00007ff6db900000-00007ff6db900fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
  149. 4988.2aa4: 00007ff6db901000-00007ff6db901fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
  150. 4988.2aa4: 00007ff6db902000-00007ff6db905fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
  151. 4988.2aa4: 00007ff6db906000-00007ff6db94dfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
  152. 4988.2aa4: 00007ff6db94e000-00007ffbfe2affff 0x0001/0x0000 0x0000000
  153. 4988.2aa4: *00007ffbfe2b0000-00007ffbfe2b0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
  154. 4988.2aa4: 00007ffbfe2b1000-00007ffbfe3bffff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
  155. 4988.2aa4: 00007ffbfe3c0000-00007ffbfe405fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
  156. 4988.2aa4: 00007ffbfe406000-00007ffbfe410fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
  157. 4988.2aa4: 00007ffbfe411000-00007ffbfe41efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
  158. 4988.2aa4: 00007ffbfe41f000-00007ffbfe41ffff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
  159. 4988.2aa4: 00007ffbfe420000-00007ffbfe422fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
  160. 4988.2aa4: 00007ffbfe423000-00007ffbfe490fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
  161. 4988.2aa4: 00007ffbfe491000-00007ffffffeffff 0x0001/0x0000 0x0000000
  162. 4988.2aa4: VirtualBox.exe: timestamp 0x5b4cb14e (rc=VINF_SUCCESS)
  163. 4988.2aa4: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
  164. 4988.2aa4: '\Device\HarddiskVolume3\Windows\System32\ntdll.dll' has no imports
  165. 4988.2aa4: supR3HardNtChildPurify: Done after 544 ms and 0 fixes (loop #0).
  166. 4988.2aa4: supR3HardNtEnableThreadCreation:
  167. 3770.2c5c: Log file opened: 5.2.16r123759 g_hStartupLog=0000000000000004 g_uNtVerCombined=0xa042ee00
  168. 3770.2c5c: supR3HardenedVmProcessInit: uNtDllAddr=00007ffbfe2b0000 g_uNtVerCombined=0xa042ee00
  169. 3770.2c5c: ntdll.dll: timestamp 0xf4df6dc2 (rc=VINF_SUCCESS)
  170. 3770.2c5c: New simple heap: #1 0000000000700000 LB 0x400000 (for 1970176 allocation)
  171. 3770.2c5c: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
  172. 3770.2c5c: System32: \Device\HarddiskVolume3\Windows\System32
  173. 3770.2c5c: WinSxS: \Device\HarddiskVolume3\Windows\WinSxS
  174. 3770.2c5c: KnownDllPath: C:\WINDOWS\System32
  175. 3770.2c5c: supR3HardenedVmProcessInit: Opening vboxdrv stub...
  176. 3770.2c5c: supR3HardenedVmProcessInit: Restoring LdrInitializeThunk...
  177. 3770.2c5c: supR3HardenedVmProcessInit: Returning to LdrInitializeThunk...
  178. 3770.2c5c: Registered Dll notification callback with NTDLL.
  179. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\kernel32.dll)
  180. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\kernel32.dll
  181. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\KERNEL32.DLL (Input=KERNEL32.DLL, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000004001:<flags> [calling]
  182. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbfa740000 LB 0x00273000 C:\WINDOWS\System32\KERNELBASE.dll [fFlags=0x0]
  183. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\KernelBase.dll)
  184. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
  185. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbfe1c0000 LB 0x000b2000 C:\WINDOWS\System32\KERNEL32.DLL [fFlags=0x0]
  186. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
  187. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfe1c0000 'C:\WINDOWS\System32\KERNEL32.DLL'
  188. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ff6db840000 LB 0x0010e000 C:\Program Files\Oracle\VirtualBox\VirtualBox.exe [fFlags=0x0]
  189. 3770.2c5c: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
  190. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe)
  191. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
  192. 3770.2c5c: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffbfe322fc0 pvNtTerminateThread=00007ffbfe34a900
  193. 4988.2aa4: supR3HardNtChildWaitFor: Found expected request 1 (CloseEvents) after 69 ms.
  194. 3770.2c5c: \SystemRoot\System32\ntdll.dll:
  195. 3770.2c5c: CreationTime: 2018-07-11T01:22:20.486818800Z
  196. 3770.2c5c: LastWriteTime: 2018-07-06T07:25:51.438518000Z
  197. 3770.2c5c: ChangeTime: 2018-07-26T18:08:11.660009400Z
  198. 3770.2c5c: FileAttributes: 0x20
  199. 3770.2c5c: Size: 0x1db0b8
  200. 3770.2c5c: NT Headers: 0xe8
  201. 3770.2c5c: Timestamp: 0xf4df6dc2
  202. 3770.2c5c: Machine: 0x8664 - amd64
  203. 3770.2c5c: Timestamp: 0xf4df6dc2
  204. 3770.2c5c: Image Version: 10.0
  205. 3770.2c5c: SizeOfImage: 0x1e1000 (1970176)
  206. 3770.2c5c: Resource Dir: 0x174000 LB 0x6b338
  207. 3770.2c5c: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
  208. 3770.2c5c: [Raw version resource data: 0x1740f0 LB 0x380, codepage 0x0 (reserved 0x0)]
  209. 3770.2c5c: ProductName: Microsoft® Windows® Operating System
  210. 3770.2c5c: ProductVersion: 10.0.17134.165
  211. 3770.2c5c: FileVersion: 10.0.17134.165 (WinBuild.160101.0800)
  212. 3770.2c5c: FileDescription: NT Layer DLL
  213. 3770.2c5c: \SystemRoot\System32\kernel32.dll:
  214. 3770.2c5c: CreationTime: 2018-04-11T23:34:40.510607900Z
  215. 3770.2c5c: LastWriteTime: 2018-04-11T23:34:40.510607900Z
  216. 3770.2c5c: ChangeTime: 2018-05-04T08:45:56.436435100Z
  217. 3770.2c5c: FileAttributes: 0x20
  218. 3770.2c5c: Size: 0xafef8
  219. 3770.2c5c: NT Headers: 0xe8
  220. 3770.2c5c: Timestamp: 0x5f488a51
  221. 3770.2c5c: Machine: 0x8664 - amd64
  222. 3770.2c5c: Timestamp: 0x5f488a51
  223. 3770.2c5c: Image Version: 10.0
  224. 3770.2c5c: SizeOfImage: 0xb2000 (729088)
  225. 3770.2c5c: Resource Dir: 0xb0000 LB 0x520
  226. 3770.2c5c: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
  227. 3770.2c5c: [Raw version resource data: 0xb00b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
  228. 3770.2c5c: ProductName: Microsoft® Windows® Operating System
  229. 3770.2c5c: ProductVersion: 10.0.17134.1
  230. 3770.2c5c: FileVersion: 10.0.17134.1 (WinBuild.160101.0800)
  231. 3770.2c5c: FileDescription: Windows NT BASE API Client DLL
  232. 3770.2c5c: \SystemRoot\System32\KernelBase.dll:
  233. 3770.2c5c: CreationTime: 2018-07-11T01:22:17.653886000Z
  234. 3770.2c5c: LastWriteTime: 2018-07-06T07:25:54.438736600Z
  235. 3770.2c5c: ChangeTime: 2018-07-26T18:08:11.655022700Z
  236. 3770.2c5c: FileAttributes: 0x20
  237. 3770.2c5c: Size: 0x273dd0
  238. 3770.2c5c: NT Headers: 0xf8
  239. 3770.2c5c: Timestamp: 0xb0bb231d
  240. 3770.2c5c: Machine: 0x8664 - amd64
  241. 3770.2c5c: Timestamp: 0xb0bb231d
  242. 3770.2c5c: Image Version: 10.0
  243. 3770.2c5c: SizeOfImage: 0x273000 (2568192)
  244. 3770.2c5c: Resource Dir: 0x251000 LB 0x548
  245. 3770.2c5c: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
  246. 3770.2c5c: [Raw version resource data: 0x2510b0 LB 0x3bc, codepage 0x0 (reserved 0x0)]
  247. 3770.2c5c: ProductName: Microsoft® Windows® Operating System
  248. 3770.2c5c: ProductVersion: 10.0.17134.165
  249. 3770.2c5c: FileVersion: 10.0.17134.165 (WinBuild.160101.0800)
  250. 3770.2c5c: FileDescription: Windows NT BASE API Client DLL
  251. 3770.2c5c: \SystemRoot\System32\apisetschema.dll:
  252. 3770.2c5c: CreationTime: 2018-04-11T23:34:44.042150700Z
  253. 3770.2c5c: LastWriteTime: 2018-04-11T23:34:44.042150700Z
  254. 3770.2c5c: ChangeTime: 2018-05-04T06:25:07.131292400Z
  255. 3770.2c5c: FileAttributes: 0x20
  256. 3770.2c5c: Size: 0x1bd98
  257. 3770.2c5c: NT Headers: 0xd0
  258. 3770.2c5c: Timestamp: 0xd02ff418
  259. 3770.2c5c: Machine: 0x8664 - amd64
  260. 3770.2c5c: Timestamp: 0xd02ff418
  261. 3770.2c5c: Image Version: 10.0
  262. 3770.2c5c: SizeOfImage: 0x1c000 (114688)
  263. 3770.2c5c: Resource Dir: 0x1b000 LB 0x408
  264. 3770.2c5c: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
  265. 3770.2c5c: [Raw version resource data: 0x1b060 LB 0x3a8, codepage 0x0 (reserved 0x0)]
  266. 3770.2c5c: ProductName: Microsoft® Windows® Operating System
  267. 3770.2c5c: ProductVersion: 10.0.17134.1
  268. 3770.2c5c: FileVersion: 10.0.17134.1 (WinBuild.160101.0800)
  269. 3770.2c5c: FileDescription: ApiSet Schema DLL
  270. 3770.2c5c: Found driver SymNetS (0x2)
  271. 3770.2c5c: Found driver SRTSPX (0x2)
  272. 3770.2c5c: Found driver SymEvent (0x2)
  273. 3770.2c5c: Found driver SymIRON (0x2)
  274. 3770.2c5c: supR3HardenedWinFindAdversaries: 0x2
  275. 3770.2c5c: \SystemRoot\System32\drivers\symevent64x86.sys:
  276. 3770.2c5c: CreationTime: 2018-05-04T06:59:05.713447400Z
  277. 3770.2c5c: LastWriteTime: 2018-06-14T18:13:36.727665800Z
  278. 3770.2c5c: ChangeTime: 2018-06-15T01:58:25.222933600Z
  279. 3770.2c5c: FileAttributes: 0x20
  280. 3770.2c5c: Size: 0x18650
  281. 3770.2c5c: NT Headers: 0xe8
  282. 3770.2c5c: Timestamp: 0x5a95cc4b
  283. 3770.2c5c: Machine: 0x8664 - amd64
  284. 3770.2c5c: Timestamp: 0x5a95cc4b
  285. 3770.2c5c: Image Version: 6.3
  286. 3770.2c5c: SizeOfImage: 0x21000 (135168)
  287. 3770.2c5c: Resource Dir: 0x1f000 LB 0x3c8
  288. 3770.2c5c: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
  289. 3770.2c5c: [Raw version resource data: 0x1f0b8 LB 0x310, codepage 0x4e4 (reserved 0x0)]
  290. 3770.2c5c: ProductName: SYMEVENT
  291. 3770.2c5c: ProductVersion: 14.0.6.27
  292. 3770.2c5c: FileVersion: 14.0.6.27
  293. 3770.2c5c: FileDescription: Symantec Event Library
  294. 3770.2c5c: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
  295. 3770.2c5c: Calling main()
  296. 3770.2c5c: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2
  297. 3770.2c5c: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
  298. 3770.2c5c: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
  299. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe)
  300. 3770.2c5c: SUPR3HardenedMain: Respawn #2
  301. 3770.2c5c: supR3HardNtEnableThreadCreation:
  302. 3770.2c5c: '\Device\HarddiskVolume3\Windows\System32\ntdll.dll' has no imports
  303. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ntdll.dll)
  304. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ntdll.dll
  305. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\ntdll.dll (Input=ntdll.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
  306. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfe2b0000 'C:\WINDOWS\System32\ntdll.dll'
  307. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\apphelp.dll)
  308. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\apphelp.dll
  309. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\apphelp.dll (rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000000000:<flags> [calling]
  310. 3770.2c5c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\apphelp.dll [lacks WinVerifyTrust]
  311. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbf8670000 LB 0x0008b000 C:\WINDOWS\system32\apphelp.dll [fFlags=0x0]
  312. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\apphelp.dll [lacks WinVerifyTrust]
  313. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ntdll.dll [lacks WinVerifyTrust]
  314. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\ntdll.dll (Input=ntdll.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
  315. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfe2b0000 'C:\WINDOWS\System32\ntdll.dll'
  316. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbf8670000 'C:\WINDOWS\system32\apphelp.dll'
  317. 3770.2c5c: Error -104 in supR3HardenedWinReSpawn! (enmWhat=5)
  318. 3770.2c5c: Error relaunching VirtualBox VM process: 5
  319. Command line: '60eaff78-4bdd-042d-2e72-669728efd737-suplib-3rdchild --comment CentOS --startvm 7b2e78fe-0cd7-4cde-b122-aa47c0974be8 --no-startvm-errormsgbox "--sup-hardening-log=C:\Users\digni\VirtualBox VMs\CentOS\Logs\VBoxHardening.log"'
  320. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'opengl32.dll'.
  321. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
  322. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'msvcp100.dll'.
  323. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcr100.dll'.
  324. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'.
  325. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'qt5guivbox.dll'.
  326. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'qt5widgetsvbox.dll'.
  327. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'qt5printsupportvbox.dll'.
  328. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'qt5openglvbox.dll'.
  329. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'user32.dll'.
  330. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'advapi32.dll'.
  331. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'shell32.dll'.
  332. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'ole32.dll'.
  333. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'oleaut32.dll'.
  334. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #15 'winmm.dll'.
  335. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.dll)
  336. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.dll
  337. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
  338. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume3\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
  339. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'winmmbase.dll'.
  340. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'msvcrt.dll'.
  341. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\winmm.dll)
  342. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\winmm.dll
  343. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
  344. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
  345. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
  346. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'combase.dll'.
  347. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #23 'rpcrt4.dll'.
  348. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\oleaut32.dll)
  349. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\oleaut32.dll
  350. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
  351. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
  352. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #23 'rpcrt4.dll'.
  353. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #48 'gdi32.dll'.
  354. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #49 'user32.dll'.
  355. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #50 'combase.dll'.
  356. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ole32.dll)
  357. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ole32.dll
  358. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
  359. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
  360. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  361. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #74 'user32.dll'.
  362. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #76 'gdi32.dll'.
  363. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\shell32.dll)
  364. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\shell32.dll
  365. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
  366. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
  367. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  368. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'sechost.dll'.
  369. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27 'rpcrt4.dll'.
  370. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\advapi32.dll)
  371. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\advapi32.dll
  372. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  373. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  374. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'win32u.dll'.
  375. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'gdi32.dll'.
  376. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\user32.dll)
  377. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\user32.dll
  378. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5openglvbox.dll'...
  379. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5openglvbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5openglvbox.dll' [rcNtRedir=0xc0150008]
  380. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'qt5widgetsvbox.dll'.
  381. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'qt5guivbox.dll'.
  382. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5corevbox.dll'.
  383. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcr100.dll'.
  384. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll)
  385. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll
  386. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5printsupportvbox.dll'...
  387. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5printsupportvbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5printsupportvbox.dll' [rcNtRedir=0xc0150008]
  388. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
  389. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
  390. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5widgetsvbox.dll'.
  391. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5guivbox.dll'.
  392. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'.
  393. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'winspool.drv'.
  394. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'comdlg32.dll'.
  395. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcr100.dll'.
  396. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll)
  397. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll
  398. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
  399. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
  400. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
  401. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
  402. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5guivbox.dll'.
  403. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5corevbox.dll'.
  404. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'shell32.dll'.
  405. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
  406. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
  407. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll)
  408. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll
  409. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
  410. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
  411. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'ole32.dll'.
  412. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'opengl32.dll'.
  413. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
  414. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
  415. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'.
  416. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
  417. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
  418. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll)
  419. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
  420. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
  421. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
  422. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
  423. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'shell32.dll'.
  424. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ole32.dll'.
  425. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'advapi32.dll'.
  426. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ws2_32.dll'.
  427. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'mpr.dll'.
  428. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcp100.dll'.
  429. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'msvcr100.dll'.
  430. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll)
  431. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
  432. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
  433. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
  434. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll)
  435. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll
  436. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
  437. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
  438. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
  439. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll)
  440. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll
  441. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
  442. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
  443. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
  444. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
  445. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ws2_32.dll'.
  446. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'rpcrt4.dll'.
  447. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll)
  448. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
  449. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
  450. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume3\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
  451. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  452. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'advapi32.dll'.
  453. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
  454. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'gdi32.dll'.
  455. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'glu32.dll'.
  456. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\opengl32.dll)
  457. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\opengl32.dll
  458. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'glu32.dll'...
  459. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'glu32.dll' -> '\Device\HarddiskVolume3\Windows\System32\glu32.dll' [rcNtRedir=0xc0150008]
  460. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  461. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
  462. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'opengl32.dll'.
  463. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\glu32.dll)
  464. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\glu32.dll
  465. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  466. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  467. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\gdi32.dll)
  468. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\gdi32.dll
  469. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  470. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  471. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  472. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
  473. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
  474. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
  475. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  476. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  477. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\msvcrt.dll)
  478. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
  479. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  480. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  481. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll)
  482. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll
  483. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
  484. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
  485. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'rpcrt4.dll'.
  486. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ws2_32.dll)
  487. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ws2_32.dll
  488. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
  489. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
  490. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
  491. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
  492. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
  493. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
  494. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
  495. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
  496. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
  497. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
  498. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
  499. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
  500. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
  501. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
  502. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
  503. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mpr.dll'...
  504. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'mpr.dll' -> '\Device\HarddiskVolume3\Windows\System32\mpr.dll' [rcNtRedir=0xc0150008]
  505. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\mpr.dll)
  506. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\mpr.dll
  507. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
  508. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
  509. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ws2_32.dll [lacks WinVerifyTrust]
  510. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
  511. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
  512. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
  513. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
  514. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
  515. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll [lacks WinVerifyTrust]
  516. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
  517. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
  518. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll [lacks WinVerifyTrust]
  519. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  520. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  521. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  522. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
  523. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
  524. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
  525. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
  526. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
  527. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
  528. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
  529. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
  530. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
  531. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  532. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  533. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  534. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  535. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  536. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  537. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
  538. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume3\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
  539. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
  540. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
  541. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
  542. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll [lacks WinVerifyTrust]
  543. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
  544. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
  545. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
  546. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
  547. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
  548. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
  549. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
  550. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
  551. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll [lacks WinVerifyTrust]
  552. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
  553. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
  554. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
  555. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
  556. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
  557. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
  558. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  559. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  560. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  561. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  562. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  563. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  564. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
  565. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
  566. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
  567. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'comdlg32.dll'...
  568. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'comdlg32.dll' -> '\Device\HarddiskVolume3\Windows\System32\comdlg32.dll' [rcNtRedir=0xc0150008]
  569. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  570. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'user32.dll'.
  571. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'shlwapi.dll'.
  572. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #37 'gdi32.dll'.
  573. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #38 'comctl32.dll'.
  574. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #39 'shell32.dll'.
  575. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\comdlg32.dll)
  576. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\comdlg32.dll
  577. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winspool.drv'...
  578. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'winspool.drv' -> '\Device\HarddiskVolume3\Windows\System32\winspool.drv' [rcNtRedir=0xc0150008]
  579. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  580. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #24 'propsys.dll'.
  581. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #29 'iphlpapi.dll'.
  582. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #38 'bcrypt.dll'.
  583. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\winspool.drv)
  584. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\winspool.drv
  585. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
  586. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
  587. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
  588. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
  589. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
  590. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
  591. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
  592. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
  593. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
  594. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  595. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  596. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  597. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  598. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  599. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  600. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
  601. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
  602. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
  603. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
  604. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
  605. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
  606. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
  607. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
  608. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
  609. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
  610. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
  611. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
  612. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  613. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  614. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  615. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
  616. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
  617. 3770.2c5c: '\Device\HarddiskVolume3\Windows\System32\win32u.dll' has no imports
  618. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\win32u.dll)
  619. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\win32u.dll
  620. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  621. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  622. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  623. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'sechost.dll'...
  624. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'sechost.dll' -> '\Device\HarddiskVolume3\Windows\System32\sechost.dll' [rcNtRedir=0xc0150008]
  625. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'rpcrt4.dll'.
  626. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\sechost.dll)
  627. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\sechost.dll
  628. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  629. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  630. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  631. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  632. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  633. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  634. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  635. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  636. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  637. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  638. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  639. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  640. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
  641. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
  642. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
  643. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #45 'bcryptprimitives.dll'.
  644. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\combase.dll)
  645. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\combase.dll
  646. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  647. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  648. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  649. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  650. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  651. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  652. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  653. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  654. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  655. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  656. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  657. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  658. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
  659. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
  660. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [lacks WinVerifyTrust]
  661. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
  662. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
  663. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll)
  664. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll
  665. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  666. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  667. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  668. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmmbase.dll'...
  669. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmmbase.dll' -> '\Device\HarddiskVolume3\Windows\System32\winmmbase.dll' [rcNtRedir=0xc0150008]
  670. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  671. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\winmmbase.dll)
  672. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\winmmbase.dll
  673. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  674. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  675. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  676. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'...
  677. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008]
  678. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll)
  679. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll
  680. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  681. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  682. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  683. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  684. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  685. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  686. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcrypt.dll'...
  687. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcrypt.dll' -> '\Device\HarddiskVolume3\Windows\System32\bcrypt.dll' [rcNtRedir=0xc0150008]
  688. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\bcrypt.dll)
  689. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\bcrypt.dll
  690. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'iphlpapi.dll'...
  691. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'iphlpapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\iphlpapi.dll' [rcNtRedir=0xc0150008]
  692. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL)
  693. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL
  694. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'propsys.dll'...
  695. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'propsys.dll' -> '\Device\HarddiskVolume3\Windows\System32\propsys.dll' [rcNtRedir=0xc0150008]
  696. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  697. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #15 'oleaut32.dll'.
  698. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #31 'rpcrt4.dll'.
  699. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\propsys.dll)
  700. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\propsys.dll
  701. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  702. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  703. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  704. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
  705. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
  706. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll [lacks WinVerifyTrust]
  707. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'comctl32.dll'...
  708. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'comctl32.dll' -> '\Device\HarddiskVolume3\Windows\System32\comctl32.dll' [rcNtRedir=0x0]
  709. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'advapi32.dll'.
  710. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
  711. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
  712. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\comctl32.dll)
  713. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\comctl32.dll
  714. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  715. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  716. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  717. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shlwapi.dll'...
  718. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'shlwapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\shlwapi.dll' [rcNtRedir=0xc0150008]
  719. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'.
  720. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #44 'gdi32.dll'.
  721. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #45 'user32.dll'.
  722. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\shlwapi.dll)
  723. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\shlwapi.dll
  724. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  725. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  726. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  727. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  728. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  729. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  730. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  731. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  732. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  733. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
  734. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume3\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
  735. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
  736. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  737. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  738. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  739. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  740. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  741. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  742. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  743. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  744. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  745. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  746. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  747. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  748. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  749. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  750. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  751. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  752. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  753. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  754. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  755. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  756. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  757. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
  758. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
  759. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
  760. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  761. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  762. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  763. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
  764. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
  765. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
  766. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  767. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  768. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  769. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VirtualBox.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000a01:<flags> [calling]
  770. 3770.2c5c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.dll [lacks WinVerifyTrust]
  771. 3770.2c5c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
  772. 3770.2c5c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  773. 3770.2c5c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
  774. 3770.2c5c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
  775. 3770.2c5c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
  776. 3770.2c5c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
  777. 3770.2c5c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
  778. 3770.2c5c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll [lacks WinVerifyTrust]
  779. 3770.2c5c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll [lacks WinVerifyTrust]
  780. 3770.2c5c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll [lacks WinVerifyTrust]
  781. 3770.2c5c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\glu32.dll [lacks WinVerifyTrust]
  782. 3770.2c5c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\mpr.dll [lacks WinVerifyTrust]
  783. 3770.2c5c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\winspool.drv [lacks WinVerifyTrust]
  784. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'advapi32.dll'.
  785. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
  786. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
  787. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.17134.191_none_f957a2993090dc56\comctl32.dll)
  788. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.17134.191_none_f957a2993090dc56\comctl32.dll
  789. 3770.2c5c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmmbase.dll [lacks WinVerifyTrust]
  790. 3770.2c5c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\propsys.dll [lacks WinVerifyTrust]
  791. 3770.2c5c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL [lacks WinVerifyTrust]
  792. 3770.2c5c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
  793. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbfc1f0000 LB 0x0009e000 C:\WINDOWS\System32\msvcrt.dll [fFlags=0x0]
  794. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  795. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbfc420000 LB 0x00124000 C:\WINDOWS\System32\RPCRT4.dll [fFlags=0x0]
  796. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  797. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbfca40000 LB 0x0005b000 C:\WINDOWS\System32\sechost.dll [fFlags=0x0]
  798. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\sechost.dll [lacks WinVerifyTrust]
  799. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbfc6b0000 LB 0x000a1000 C:\WINDOWS\System32\ADVAPI32.dll [fFlags=0x0]
  800. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
  801. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbfa720000 LB 0x00020000 C:\WINDOWS\System32\win32u.dll [fFlags=0x0]
  802. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [lacks WinVerifyTrust]
  803. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbfaa70000 LB 0x000fa000 C:\WINDOWS\System32\ucrtbase.dll [fFlags=0x0]
  804. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ucrtbase.dll)
  805. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll
  806. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbfa680000 LB 0x0009f000 C:\WINDOWS\System32\msvcp_win.dll [fFlags=0x0]
  807. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust]
  808. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbfabf0000 LB 0x00192000 C:\WINDOWS\System32\gdi32full.dll [fFlags=0x0]
  809. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
  810. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #33 'gdi32.dll'.
  811. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'user32.dll'.
  812. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'win32u.dll'.
  813. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\gdi32full.dll)
  814. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\gdi32full.dll
  815. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbfcd50000 LB 0x00028000 C:\WINDOWS\System32\GDI32.dll [fFlags=0x0]
  816. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  817. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbfb740000 LB 0x00190000 C:\WINDOWS\System32\USER32.dll [fFlags=0x0]
  818. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  819. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbcc4a0000 LB 0x0002c000 C:\WINDOWS\SYSTEM32\GLU32.dll [fFlags=0x0]
  820. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\glu32.dll [lacks WinVerifyTrust]
  821. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbbfa70000 LB 0x00120000 C:\WINDOWS\SYSTEM32\OPENGL32.dll [fFlags=0x0]
  822. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
  823. 3770.2c5c: supR3HardenedDllNotificationCallback: load 0000000066100000 LB 0x000d2000 C:\Program Files\Oracle\VirtualBox\MSVCR100.dll [fFlags=0x0]
  824. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
  825. 3770.2c5c: supR3HardenedDllNotificationCallback: load 0000000066060000 LB 0x00098000 C:\Program Files\Oracle\VirtualBox\MSVCP100.dll [fFlags=0x0]
  826. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
  827. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbfc640000 LB 0x0006c000 C:\WINDOWS\System32\WS2_32.dll [fFlags=0x0]
  828. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ws2_32.dll [lacks WinVerifyTrust]
  829. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffba1de0000 LB 0x00595000 C:\Program Files\Oracle\VirtualBox\VBoxRT.dll [fFlags=0x0]
  830. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  831. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbfaa20000 LB 0x00049000 C:\WINDOWS\System32\cfgmgr32.dll [fFlags=0x0]
  832. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll)
  833. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll
  834. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbfab70000 LB 0x0007a000 C:\WINDOWS\System32\bcryptPrimitives.dll [fFlags=0x0]
  835. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust]
  836. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbfbec0000 LB 0x00323000 C:\WINDOWS\System32\combase.dll [fFlags=0x0]
  837. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [lacks WinVerifyTrust]
  838. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbfc920000 LB 0x000a9000 C:\WINDOWS\System32\shcore.dll [fFlags=0x0]
  839. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  840. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #37 'rpcrt4.dll'.
  841. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #44 'combase.dll'.
  842. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\SHCore.dll)
  843. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\SHCore.dll
  844. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbfc9e0000 LB 0x00051000 C:\WINDOWS\System32\shlwapi.dll [fFlags=0x0]
  845. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shlwapi.dll [lacks WinVerifyTrust]
  846. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbfa610000 LB 0x00011000 C:\WINDOWS\System32\kernel.appcore.dll [fFlags=0x0]
  847. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcrt.dll'.
  848. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'rpcrt4.dll'.
  849. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll)
  850. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll
  851. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbfa5f0000 LB 0x0001f000 C:\WINDOWS\System32\profapi.dll [fFlags=0x0]
  852. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\profapi.dll)
  853. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\profapi.dll
  854. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbfa630000 LB 0x0004c000 C:\WINDOWS\System32\powrprof.dll [fFlags=0x0]
  855. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'rpcrt4.dll'.
  856. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\powrprof.dll)
  857. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\powrprof.dll
  858. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbfa5e0000 LB 0x0000a000 C:\WINDOWS\System32\FLTLIB.DLL [fFlags=0x0]
  859. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\fltLib.dll)
  860. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\fltLib.dll
  861. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbfb030000 LB 0x0070d000 C:\WINDOWS\System32\windows.storage.dll [fFlags=0x0]
  862. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  863. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'rpcrt4.dll'.
  864. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #54 'combase.dll'.
  865. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #58 'profapi.dll'.
  866. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #81 'fltlib.dll'.
  867. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\windows.storage.dll)
  868. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\windows.storage.dll
  869. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbfcd80000 LB 0x01440000 C:\WINDOWS\System32\SHELL32.dll [fFlags=0x0]
  870. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll [lacks WinVerifyTrust]
  871. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbfcb70000 LB 0x00151000 C:\WINDOWS\System32\ole32.dll [fFlags=0x0]
  872. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll [lacks WinVerifyTrust]
  873. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbed400000 LB 0x0001a000 C:\WINDOWS\SYSTEM32\MPR.dll [fFlags=0x0]
  874. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\mpr.dll [lacks WinVerifyTrust]
  875. 3770.2c5c: supR3HardenedDllNotificationCallback: load 0000000065af0000 LB 0x00565000 C:\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [fFlags=0x0]
  876. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
  877. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffba0dd0000 LB 0x005f7000 C:\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [fFlags=0x0]
  878. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
  879. 3770.2c5c: supR3HardenedDllNotificationCallback: load 0000000065580000 LB 0x00561000 C:\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [fFlags=0x0]
  880. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
  881. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbfcaa0000 LB 0x000c2000 C:\WINDOWS\System32\OLEAUT32.dll [fFlags=0x0]
  882. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
  883. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbf90d0000 LB 0x001b4000 C:\WINDOWS\SYSTEM32\PROPSYS.dll [fFlags=0x0]
  884. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\propsys.dll [lacks WinVerifyTrust]
  885. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbf9b60000 LB 0x00038000 C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL [fFlags=0x0]
  886. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL [lacks WinVerifyTrust]
  887. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbfa120000 LB 0x00025000 C:\WINDOWS\SYSTEM32\bcrypt.dll [fFlags=0x0]
  888. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
  889. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbf3f70000 LB 0x00084000 C:\WINDOWS\SYSTEM32\WINSPOOL.DRV [fFlags=0x0]
  890. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\winspool.drv [lacks WinVerifyTrust]
  891. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbf0410000 LB 0x000a7000 C:\WINDOWS\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.17134.191_none_f957a2993090dc56\COMCTL32.dll [fFlags=0x0]
  892. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.17134.191_none_f957a2993090dc56\comctl32.dll [lacks WinVerifyTrust]
  893. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbfc760000 LB 0x000ed000 C:\WINDOWS\System32\COMDLG32.dll [fFlags=0x0]
  894. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\comdlg32.dll [lacks WinVerifyTrust]
  895. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbe8210000 LB 0x00051000 C:\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll [fFlags=0x0]
  896. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll [lacks WinVerifyTrust]
  897. 3770.2c5c: supR3HardenedDllNotificationCallback: load 0000000065520000 LB 0x00054000 C:\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll [fFlags=0x0]
  898. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll [lacks WinVerifyTrust]
  899. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbf7160000 LB 0x0002a000 C:\WINDOWS\SYSTEM32\WINMMBASE.dll [fFlags=0x0]
  900. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmmbase.dll [lacks WinVerifyTrust]
  901. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbf7190000 LB 0x00023000 C:\WINDOWS\SYSTEM32\WINMM.dll [fFlags=0x0]
  902. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll [lacks WinVerifyTrust]
  903. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffba13d0000 LB 0x00a06000 C:\Program Files\Oracle\VirtualBox\VirtualBox.dll [fFlags=0x0]
  904. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.dll [lacks WinVerifyTrust]
  905. 3770.2c5c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
  906. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
  907. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfa740000 'api-ms-win-core-synch-l1-2-0'
  908. 3770.2c5c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
  909. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
  910. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfa740000 'api-ms-win-core-fibers-l1-1-1'
  911. 3770.2c5c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
  912. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
  913. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfa740000 'api-ms-win-core-fibers-l1-1-1'
  914. 3770.2c5c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
  915. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
  916. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfa740000 'api-ms-win-core-synch-l1-2-0'
  917. 3770.2c5c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-l1-2-1) -> 0x0, fPresent=1
  918. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-l1-2-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
  919. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfa740000 'api-ms-win-core-localization-l1-2-1'
  920. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
  921. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'fltlib.dll'...
  922. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'fltlib.dll' -> '\Device\HarddiskVolume3\Windows\System32\fltlib.dll' [rcNtRedir=0xc0150008]
  923. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\fltLib.dll [lacks WinVerifyTrust]
  924. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'profapi.dll'...
  925. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'profapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\profapi.dll' [rcNtRedir=0xc0150008]
  926. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\profapi.dll [lacks WinVerifyTrust]
  927. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
  928. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
  929. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [lacks WinVerifyTrust]
  930. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  931. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  932. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  933. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  934. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  935. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  936. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  937. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  938. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  939. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  940. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  941. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  942. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  943. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  944. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  945. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
  946. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
  947. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [lacks WinVerifyTrust]
  948. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  949. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  950. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  951. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  952. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  953. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  954. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
  955. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
  956. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [lacks WinVerifyTrust]
  957. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  958. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  959. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  960. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  961. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  962. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  963. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
  964. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
  965. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust]
  966. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  967. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  968. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  969. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  970. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  971. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  972. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
  973. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
  974. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
  975. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\kernel32.dll (Input=kernel32, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
  976. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfe1c0000 'C:\WINDOWS\System32\kernel32.dll'
  977. 3770.2c5c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-string-l1-1-0) -> 0x0, fPresent=1
  978. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-string-l1-1-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
  979. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfa740000 'api-ms-win-core-string-l1-1-0'
  980. 3770.2c5c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-datetime-l1-1-1) -> 0x0, fPresent=1
  981. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-datetime-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
  982. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfa740000 'api-ms-win-core-datetime-l1-1-1'
  983. 3770.2c5c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-obsolete-l1-2-0) -> 0x0, fPresent=1
  984. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-obsolete-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
  985. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfa740000 'api-ms-win-core-localization-obsolete-l1-2-0'
  986. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'user32.dll'.
  987. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #25 'win32u.dll'.
  988. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\imm32.dll)
  989. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\imm32.dll
  990. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
  991. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
  992. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [lacks WinVerifyTrust]
  993. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  994. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  995. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  996. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\IMM32.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
  997. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbfc8f0000 LB 0x0002d000 C:\WINDOWS\System32\IMM32.DLL [fFlags=0x0]
  998. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\imm32.dll [lacks WinVerifyTrust]
  999. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfc8f0000 'C:\WINDOWS\system32\IMM32.DLL'
  1000. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
  1001. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\kernel32.dll (Input=kernel32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1002. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfe1c0000 'C:\WINDOWS\System32\kernel32.dll'
  1003. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1004. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1005. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffba1de0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1006. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1007. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1008. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffba1de0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1009. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1010. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1011. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffba1de0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1012. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1013. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1014. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffba1de0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1015. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1016. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1017. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffba1de0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1018. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1019. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1020. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffba1de0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1021. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1022. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffba1de0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1023. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1024. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffba1de0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1025. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1026. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffba1de0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1027. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1028. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffba1de0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1029. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1030. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffba1de0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1031. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1032. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffba1de0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1033. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1034. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffba1de0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1035. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1036. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1037. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffba1de0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1038. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1039. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffba1de0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1040. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1041. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffba1de0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1042. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1043. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffba1de0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1044. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1045. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffba1de0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1046. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1047. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffba1de0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1048. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1049. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffba1de0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1050. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1051. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffba1de0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1052. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1053. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffba1de0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1054. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1055. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffba1de0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1056. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1057. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffba1de0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1058. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1059. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffba1de0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1060. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1061. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffba1de0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1062. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1063. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffba1de0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1064. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1065. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffba1de0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1066. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1067. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffba1de0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1068. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1069. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1070. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffba1de0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1071. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1072. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffba1de0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1073. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1074. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffba1de0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1075. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\imm32.dll [lacks WinVerifyTrust]
  1076. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\imm32.dll (Input=imm32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1077. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfc8f0000 'C:\WINDOWS\System32\imm32.dll'
  1078. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
  1079. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\ADVAPI32.DLL (Input=ADVAPI32.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1080. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfc6b0000 'C:\WINDOWS\System32\ADVAPI32.DLL'
  1081. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'bcryptprimitives.dll'.
  1082. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\cryptbase.dll)
  1083. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\cryptbase.dll
  1084. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbfa110000 LB 0x0000b000 C:\WINDOWS\SYSTEM32\CRYPTBASE.DLL [fFlags=0x0]
  1085. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\cryptbase.dll [lacks WinVerifyTrust]
  1086. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffba13d0000 'C:\Program Files\Oracle\VirtualBox\VirtualBox.dll'
  1087. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
  1088. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'ole32.dll'.
  1089. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
  1090. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'imm32.dll'.
  1091. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'winmm.dll'.
  1092. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'oleaut32.dll'.
  1093. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'shell32.dll'.
  1094. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'advapi32.dll'.
  1095. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'qt5guivbox.dll'.
  1096. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'qt5corevbox.dll'.
  1097. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'msvcr100.dll'.
  1098. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\platforms\qwindows.dll)
  1099. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\platforms\qwindows.dll
  1100. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
  1101. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
  1102. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
  1103. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
  1104. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
  1105. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
  1106. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
  1107. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
  1108. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
  1109. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
  1110. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
  1111. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
  1112. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
  1113. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
  1114. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll [lacks WinVerifyTrust]
  1115. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
  1116. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
  1117. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
  1118. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
  1119. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume3\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
  1120. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll [lacks WinVerifyTrust]
  1121. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'...
  1122. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume3\Windows\System32\imm32.dll' [rcNtRedir=0xc0150008]
  1123. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\imm32.dll [lacks WinVerifyTrust]
  1124. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  1125. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  1126. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  1127. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
  1128. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
  1129. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll [lacks WinVerifyTrust]
  1130. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  1131. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  1132. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  1133. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'...
  1134. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008]
  1135. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust]
  1136. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1137. 3770.2c5c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\platforms\qwindows.dll [lacks WinVerifyTrust]
  1138. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbbcba0000 LB 0x0012e000 C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll [fFlags=0x0]
  1139. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\platforms\qwindows.dll [lacks WinVerifyTrust]
  1140. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbbcba0000 'C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll'
  1141. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1142. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #33 'gdi32.dll'.
  1143. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'user32.dll'.
  1144. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\uxtheme.dll)
  1145. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\uxtheme.dll
  1146. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  1147. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  1148. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  1149. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  1150. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  1151. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  1152. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1153. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1154. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1155. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
  1156. 3770.2c5c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\uxtheme.dll [lacks WinVerifyTrust]
  1157. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbf8830000 LB 0x00098000 C:\WINDOWS\system32\uxtheme.dll [fFlags=0x0]
  1158. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\uxtheme.dll [lacks WinVerifyTrust]
  1159. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbf8830000 'C:\WINDOWS\system32\uxtheme.dll'
  1160. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  1161. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfb740000 'C:\WINDOWS\system32\user32.dll'
  1162. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll [lacks WinVerifyTrust]
  1163. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1164. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfcd80000 'C:\WINDOWS\system32\shell32.dll'
  1165. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\SHCore.dll [lacks WinVerifyTrust]
  1166. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\SHCore.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1167. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfc920000 'C:\WINDOWS\system32\SHCore.dll'
  1168. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: error opening 'C:\WINDOWS\system32\wintab32.dll': 0 (NtPath=\??\C:\WINDOWS\system32\wintab32.dll; Input=C:\WINDOWS\system32\wintab32.dll; rcNtGetDll=0x0
  1169. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000034 'C:\WINDOWS\system32\wintab32.dll'
  1170. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1171. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #21 'win32u.dll'.
  1172. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #22 'user32.dll'.
  1173. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #23 'gdi32.dll'.
  1174. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\dwmapi.dll)
  1175. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\dwmapi.dll
  1176. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbf8a80000 LB 0x00029000 C:\WINDOWS\system32\dwmapi.dll [fFlags=0x0]
  1177. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dwmapi.dll [lacks WinVerifyTrust]
  1178. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll [lacks WinVerifyTrust]
  1179. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  1180. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  1181. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  1182. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  1183. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  1184. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  1185. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
  1186. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
  1187. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [lacks WinVerifyTrust]
  1188. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1189. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1190. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1191. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\winmm.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1192. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbf7190000 'C:\WINDOWS\system32\winmm.dll'
  1193. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll [lacks WinVerifyTrust]
  1194. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\winmm.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1195. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbf7190000 'C:\WINDOWS\system32\winmm.dll'
  1196. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll [lacks WinVerifyTrust]
  1197. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1198. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfcd80000 'C:\WINDOWS\system32\shell32.dll'
  1199. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\uxtheme.dll [lacks WinVerifyTrust]
  1200. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1201. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbf8830000 'C:\WINDOWS\system32\uxtheme.dll'
  1202. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  1203. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\gdi32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1204. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfcd50000 'C:\WINDOWS\system32\gdi32.dll'
  1205. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbfc2a0000 LB 0x00175000 C:\WINDOWS\System32\MSCTF.dll [fFlags=0x0]
  1206. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1207. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'oleaut32.dll'.
  1208. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #38 'user32.dll'.
  1209. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #39 'gdi32.dll'.
  1210. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #40 'imm32.dll'.
  1211. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\msctf.dll)
  1212. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msctf.dll
  1213. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  1214. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'...
  1215. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume3\Windows\System32\imm32.dll' [rcNtRedir=0xc0150008]
  1216. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\imm32.dll [lacks WinVerifyTrust]
  1217. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  1218. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  1219. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  1220. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  1221. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  1222. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  1223. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
  1224. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
  1225. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
  1226. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1227. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1228. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1229. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfc420000 'C:\WINDOWS\System32\rpcrt4.dll'
  1230. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbfc850000 LB 0x000a0000 C:\WINDOWS\System32\clbcatq.dll [fFlags=0x0]
  1231. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1232. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #28 'rpcrt4.dll'.
  1233. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\clbcatq.dll)
  1234. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\clbcatq.dll
  1235. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1236. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'shcore.dll'.
  1237. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #29 'combase.dll'.
  1238. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'd3d11.dll'.
  1239. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'dcomp.dll'.
  1240. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\DataExchange.dll)
  1241. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\DataExchange.dll
  1242. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dcomp.dll'...
  1243. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'dcomp.dll' -> '\Device\HarddiskVolume3\Windows\System32\dcomp.dll' [rcNtRedir=0xc0150008]
  1244. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'win32u.dll'.
  1245. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp_win.dll'.
  1246. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'oleaut32.dll'.
  1247. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #37 'dxgi.dll'.
  1248. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\dcomp.dll)
  1249. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\dcomp.dll
  1250. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'd3d11.dll'...
  1251. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'd3d11.dll' -> '\Device\HarddiskVolume3\Windows\System32\d3d11.dll' [rcNtRedir=0xc0150008]
  1252. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1253. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'dxgi.dll'.
  1254. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'win32u.dll'.
  1255. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\d3d11.dll)
  1256. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\d3d11.dll
  1257. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
  1258. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
  1259. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [lacks WinVerifyTrust]
  1260. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shcore.dll'...
  1261. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'shcore.dll' -> '\Device\HarddiskVolume3\Windows\System32\shcore.dll' [rcNtRedir=0xc0150008]
  1262. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\SHCore.dll [lacks WinVerifyTrust]
  1263. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1264. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1265. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1266. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  1267. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  1268. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  1269. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1270. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1271. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1272. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
  1273. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
  1274. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [lacks WinVerifyTrust]
  1275. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dxgi.dll'...
  1276. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'dxgi.dll' -> '\Device\HarddiskVolume3\Windows\System32\dxgi.dll' [rcNtRedir=0xc0150008]
  1277. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1278. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'win32u.dll'.
  1279. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\dxgi.dll)
  1280. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\dxgi.dll
  1281. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1282. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1283. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1284. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dxgi.dll'...
  1285. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'dxgi.dll' -> '\Device\HarddiskVolume3\Windows\System32\dxgi.dll' [rcNtRedir=0xc0150008]
  1286. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dxgi.dll [lacks WinVerifyTrust]
  1287. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
  1288. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
  1289. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
  1290. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
  1291. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
  1292. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust]
  1293. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
  1294. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
  1295. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [lacks WinVerifyTrust]
  1296. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
  1297. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
  1298. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [lacks WinVerifyTrust]
  1299. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1300. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1301. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1302. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\dataexchange.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
  1303. 3770.2c5c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\DataExchange.dll [lacks WinVerifyTrust]
  1304. 3770.2c5c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\d3d11.dll [lacks WinVerifyTrust]
  1305. 3770.2c5c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dcomp.dll [lacks WinVerifyTrust]
  1306. 3770.2c5c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dxgi.dll [lacks WinVerifyTrust]
  1307. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbf9380000 LB 0x000bb000 C:\WINDOWS\system32\dxgi.dll [fFlags=0x0]
  1308. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dxgi.dll [lacks WinVerifyTrust]
  1309. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbf76b0000 LB 0x0030b000 C:\WINDOWS\system32\d3d11.dll [fFlags=0x0]
  1310. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\d3d11.dll [lacks WinVerifyTrust]
  1311. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbf7f90000 LB 0x0019c000 C:\WINDOWS\system32\dcomp.dll [fFlags=0x0]
  1312. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dcomp.dll [lacks WinVerifyTrust]
  1313. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbdc5f0000 LB 0x00058000 C:\WINDOWS\system32\dataexchange.dll [fFlags=0x0]
  1314. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\DataExchange.dll [lacks WinVerifyTrust]
  1315. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  1316. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfcd50000 'C:\WINDOWS\System32\gdi32.dll'
  1317. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdc5f0000 'C:\WINDOWS\system32\dataexchange.dll'
  1318. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1319. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'rmclient.dll'.
  1320. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #30 'rpcrt4.dll'.
  1321. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #44 'combase.dll'.
  1322. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll)
  1323. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll
  1324. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1325. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'rpcrt4.dll'.
  1326. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\rmclient.dll)
  1327. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\rmclient.dll
  1328. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbf8b60000 LB 0x00021000 C:\WINDOWS\system32\RMCLIENT.dll [fFlags=0x0]
  1329. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rmclient.dll [lacks WinVerifyTrust]
  1330. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbf8bc0000 LB 0x001b8000 C:\WINDOWS\system32\twinapi.appcore.dll [fFlags=0x0]
  1331. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll [lacks WinVerifyTrust]
  1332. 3770.45b8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #16 'rpcrt4.dll'.
  1333. 3770.45b8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'devobj.dll'.
  1334. 3770.45b8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'propsys.dll'.
  1335. 3770.45b8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll)
  1336. 3770.45b8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll
  1337. 3770.45b8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #17 'cfgmgr32.dll'.
  1338. 3770.45b8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\devobj.dll)
  1339. 3770.45b8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\devobj.dll
  1340. 3770.45b8: supR3HardenedDllNotificationCallback: load 00007ffbfa3d0000 LB 0x00027000 C:\WINDOWS\SYSTEM32\DEVOBJ.dll [fFlags=0x0]
  1341. 3770.45b8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\devobj.dll [lacks WinVerifyTrust]
  1342. 3770.45b8: supR3HardenedDllNotificationCallback: load 00007ffbede20000 LB 0x00076000 C:\WINDOWS\SYSTEM32\MMDevAPI.DLL [fFlags=0x0]
  1343. 3770.45b8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
  1344. 3770.45b8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1345. 3770.45b8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'mmdevapi.dll'.
  1346. 3770.45b8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27 'ksuser.dll'.
  1347. 3770.45b8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #28 'avrt.dll'.
  1348. 3770.45b8: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\wdmaud.drv)
  1349. 3770.45b8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\wdmaud.drv
  1350. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'avrt.dll'...
  1351. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: 'avrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\avrt.dll' [rcNtRedir=0xc0150008]
  1352. 3770.45b8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\avrt.dll)
  1353. 3770.45b8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\avrt.dll
  1354. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ksuser.dll'...
  1355. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: 'ksuser.dll' -> '\Device\HarddiskVolume3\Windows\System32\ksuser.dll' [rcNtRedir=0xc0150008]
  1356. 3770.45b8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1357. 3770.45b8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ksuser.dll)
  1358. 3770.45b8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ksuser.dll
  1359. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mmdevapi.dll'...
  1360. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: 'mmdevapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\mmdevapi.dll' [rcNtRedir=0xc0150008]
  1361. 3770.45b8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
  1362. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1363. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1364. 3770.45b8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1365. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'cfgmgr32.dll'...
  1366. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: 'cfgmgr32.dll' -> '\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll' [rcNtRedir=0xc0150008]
  1367. 3770.45b8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll [lacks WinVerifyTrust]
  1368. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'propsys.dll'...
  1369. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: 'propsys.dll' -> '\Device\HarddiskVolume3\Windows\System32\propsys.dll' [rcNtRedir=0xc0150008]
  1370. 3770.45b8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\propsys.dll [lacks WinVerifyTrust]
  1371. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'devobj.dll'...
  1372. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: 'devobj.dll' -> '\Device\HarddiskVolume3\Windows\System32\devobj.dll' [rcNtRedir=0xc0150008]
  1373. 3770.45b8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\devobj.dll [lacks WinVerifyTrust]
  1374. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  1375. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  1376. 3770.45b8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  1377. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  1378. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  1379. 3770.45b8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  1380. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1381. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1382. 3770.45b8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1383. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
  1384. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
  1385. 3770.45b8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [lacks WinVerifyTrust]
  1386. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  1387. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  1388. 3770.45b8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  1389. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rmclient.dll'...
  1390. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rmclient.dll' -> '\Device\HarddiskVolume3\Windows\System32\rmclient.dll' [rcNtRedir=0xc0150008]
  1391. 3770.45b8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rmclient.dll [lacks WinVerifyTrust]
  1392. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1393. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1394. 3770.45b8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1395. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1396. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1397. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #15 'coreuicomponents.dll'.
  1398. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #16 'coremessaging.dll'.
  1399. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\TextInputFramework.dll)
  1400. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\TextInputFramework.dll
  1401. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1402. 3770.45b8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1403. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1404. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1405. 3770.45b8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1406. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coremessaging.dll'...
  1407. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: 'coremessaging.dll' -> '\Device\HarddiskVolume3\Windows\System32\coremessaging.dll' [rcNtRedir=0xc0150008]
  1408. 3770.45b8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1409. 3770.45b8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #24 'rpcrt4.dll'.
  1410. 3770.45b8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll)
  1411. 3770.45b8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll
  1412. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coreuicomponents.dll'...
  1413. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: 'coreuicomponents.dll' -> '\Device\HarddiskVolume3\Windows\System32\coreuicomponents.dll' [rcNtRedir=0xc0150008]
  1414. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1415. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'coremessaging.dll'.
  1416. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #48 'shcore.dll'.
  1417. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\CoreUIComponents.dll)
  1418. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\CoreUIComponents.dll
  1419. 3770.2c5c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll [lacks WinVerifyTrust]
  1420. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ntmarta.dll)
  1421. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ntmarta.dll
  1422. 3770.45b8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1423. 3770.45b8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'coremessaging.dll'.
  1424. 3770.45b8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #48 'shcore.dll'.
  1425. 3770.45b8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\CoreUIComponents.dll)
  1426. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shcore.dll'...
  1427. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: 'shcore.dll' -> '\Device\HarddiskVolume3\Windows\System32\shcore.dll' [rcNtRedir=0xc0150008]
  1428. 3770.45b8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\SHCore.dll [lacks WinVerifyTrust]
  1429. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coremessaging.dll'...
  1430. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: 'coremessaging.dll' -> '\Device\HarddiskVolume3\Windows\System32\coremessaging.dll' [rcNtRedir=0xc0150008]
  1431. 3770.45b8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll [lacks WinVerifyTrust]
  1432. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1433. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1434. 3770.45b8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1435. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shcore.dll'...
  1436. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: 'shcore.dll' -> '\Device\HarddiskVolume3\Windows\System32\shcore.dll' [rcNtRedir=0xc0150008]
  1437. 3770.45b8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\SHCore.dll [lacks WinVerifyTrust]
  1438. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coremessaging.dll'...
  1439. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: 'coremessaging.dll' -> '\Device\HarddiskVolume3\Windows\System32\coremessaging.dll' [rcNtRedir=0xc0150008]
  1440. 3770.45b8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll [lacks WinVerifyTrust]
  1441. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1442. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1443. 3770.45b8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1444. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  1445. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  1446. 3770.45b8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  1447. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1448. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1449. 3770.45b8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1450. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
  1451. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'combase.dll'.
  1452. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #22 'rpcrt4.dll'.
  1453. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #29 'bcryptprimitives.dll'.
  1454. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\WinTypes.dll)
  1455. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\WinTypes.dll
  1456. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbf9760000 LB 0x00031000 C:\WINDOWS\SYSTEM32\ntmarta.dll [fFlags=0x0]
  1457. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ntmarta.dll [lacks WinVerifyTrust]
  1458. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbf8130000 LB 0x000da000 C:\WINDOWS\System32\CoreMessaging.dll [fFlags=0x0]
  1459. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll [lacks WinVerifyTrust]
  1460. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbf6630000 LB 0x0014d000 C:\WINDOWS\SYSTEM32\wintypes.dll [fFlags=0x0]
  1461. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\WinTypes.dll [lacks WinVerifyTrust]
  1462. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbf5b40000 LB 0x0031e000 C:\WINDOWS\System32\CoreUIComponents.dll [fFlags=0x0]
  1463. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\CoreUIComponents.dll [lacks WinVerifyTrust]
  1464. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbe8d70000 LB 0x00097000 C:\WINDOWS\System32\TextInputFramework.dll [fFlags=0x0]
  1465. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\TextInputFramework.dll [lacks WinVerifyTrust]
  1466. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
  1467. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'...
  1468. 3770.45b8: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
  1469. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008]
  1470. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust]
  1471. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  1472. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  1473. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  1474. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
  1475. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
  1476. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [lacks WinVerifyTrust]
  1477. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\OLEAUT32.DLL (Input=OLEAUT32.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1478. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfcaa0000 'C:\WINDOWS\System32\OLEAUT32.DLL'
  1479. 3770.45b8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ksuser.dll [lacks WinVerifyTrust]
  1480. 3770.2c5c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(ext-ms-win-rtcore-ntuser-window-ext-l1-1-0.dll) -> 0x0, fPresent=1
  1481. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=ext-ms-win-rtcore-ntuser-window-ext-l1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1482. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfb740000 'ext-ms-win-rtcore-ntuser-window-ext-l1-1-0.dll'
  1483. 3770.45b8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\avrt.dll [lacks WinVerifyTrust]
  1484. 3770.2c5c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(ext-ms-win-rtcore-ntuser-integration-l1-1-0.dll) -> 0x0, fPresent=1
  1485. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=ext-ms-win-rtcore-ntuser-integration-l1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1486. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfb740000 'ext-ms-win-rtcore-ntuser-integration-l1-1-0.dll'
  1487. 3770.45b8: supR3HardenedDllNotificationCallback: load 00007ffbedd60000 LB 0x00009000 C:\WINDOWS\SYSTEM32\ksuser.dll [fFlags=0x0]
  1488. 3770.2c5c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-com-l1-1-0.dll) -> 0x0, fPresent=1
  1489. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-com-l1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1490. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfbec0000 'api-ms-win-core-com-l1-1-0.dll'
  1491. 3770.45b8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ksuser.dll [lacks WinVerifyTrust]
  1492. 3770.45b8: supR3HardenedDllNotificationCallback: load 00007ffbf62a0000 LB 0x0000a000 C:\WINDOWS\SYSTEM32\AVRT.dll [fFlags=0x0]
  1493. 3770.45b8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\avrt.dll [lacks WinVerifyTrust]
  1494. 3770.45b8: supR3HardenedDllNotificationCallback: load 00007ffbc90f0000 LB 0x00044000 C:\WINDOWS\System32\wdmaud.drv [fFlags=0x0]
  1495. 3770.45b8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
  1496. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbc90f0000 'C:\WINDOWS\System32\wdmaud.drv'
  1497. 3770.45b8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
  1498. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
  1499. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbc90f0000 'C:\WINDOWS\System32\wdmaud.drv'
  1500. 3770.45b8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
  1501. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\MMDEVAPI.DLL (Input=MMDEVAPI.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1502. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbede20000 'C:\WINDOWS\System32\MMDEVAPI.DLL'
  1503. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msctf.dll [lacks WinVerifyTrust]
  1504. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\MSCTF.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
  1505. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfc2a0000 'C:\WINDOWS\System32\MSCTF.dll'
  1506. 3770.45b8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
  1507. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
  1508. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbc90f0000 'C:\WINDOWS\System32\wdmaud.drv'
  1509. 3770.45b8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
  1510. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
  1511. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbc90f0000 'C:\WINDOWS\System32\wdmaud.drv'
  1512. 3770.45b8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
  1513. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
  1514. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbc90f0000 'C:\WINDOWS\System32\wdmaud.drv'
  1515. 3770.45b8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
  1516. 3770.45b8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'rpcrt4.dll'.
  1517. 3770.45b8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'oleaut32.dll'.
  1518. 3770.45b8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #55 'mmdevapi.dll'.
  1519. 3770.45b8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #56 'avrt.dll'.
  1520. 3770.45b8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\AudioSes.dll)
  1521. 3770.45b8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\AudioSes.dll
  1522. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'avrt.dll'...
  1523. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: 'avrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\avrt.dll' [rcNtRedir=0xc0150008]
  1524. 3770.45b8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\avrt.dll [lacks WinVerifyTrust]
  1525. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mmdevapi.dll'...
  1526. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: 'mmdevapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\mmdevapi.dll' [rcNtRedir=0xc0150008]
  1527. 3770.45b8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
  1528. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
  1529. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
  1530. 3770.45b8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
  1531. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  1532. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  1533. 3770.45b8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  1534. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
  1535. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
  1536. 3770.45b8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust]
  1537. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\AUDIOSES.DLL (Input=AUDIOSES.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1538. 3770.45b8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\AudioSes.dll [lacks WinVerifyTrust]
  1539. 3770.45b8: supR3HardenedDllNotificationCallback: load 00007ffbcd290000 LB 0x0012c000 C:\WINDOWS\System32\AUDIOSES.DLL [fFlags=0x0]
  1540. 3770.45b8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\AudioSes.dll [lacks WinVerifyTrust]
  1541. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbcd290000 'C:\WINDOWS\System32\AUDIOSES.DLL'
  1542. 3770.45b8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
  1543. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
  1544. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbc90f0000 'C:\WINDOWS\System32\wdmaud.drv'
  1545. 3770.45b8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
  1546. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
  1547. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbc90f0000 'C:\WINDOWS\System32\wdmaud.drv'
  1548. 3770.45b8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
  1549. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbc90f0000 'C:\WINDOWS\System32\wdmaud.drv'
  1550. 3770.45b8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
  1551. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbc90f0000 'C:\WINDOWS\System32\wdmaud.drv'
  1552. 3770.45b8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
  1553. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbc90f0000 'C:\WINDOWS\System32\wdmaud.drv'
  1554. 3770.45b8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
  1555. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbc90f0000 'C:\WINDOWS\System32\wdmaud.drv'
  1556. 3770.45b8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1557. 3770.45b8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'mmdevapi.dll'.
  1558. 3770.45b8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'msacm32.dll'.
  1559. 3770.45b8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'winmmbase.dll'.
  1560. 3770.45b8: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\msacm32.drv)
  1561. 3770.45b8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msacm32.drv
  1562. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmmbase.dll'...
  1563. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmmbase.dll' -> '\Device\HarddiskVolume3\Windows\System32\winmmbase.dll' [rcNtRedir=0xc0150008]
  1564. 3770.45b8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmmbase.dll [lacks WinVerifyTrust]
  1565. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msacm32.dll'...
  1566. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msacm32.dll' -> '\Device\HarddiskVolume3\Windows\System32\msacm32.dll' [rcNtRedir=0xc0150008]
  1567. 3770.45b8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1568. 3770.45b8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\msacm32.dll)
  1569. 3770.45b8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msacm32.dll
  1570. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mmdevapi.dll'...
  1571. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: 'mmdevapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\mmdevapi.dll' [rcNtRedir=0xc0150008]
  1572. 3770.45b8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
  1573. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1574. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1575. 3770.45b8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1576. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1577. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1578. 3770.45b8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1579. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
  1580. 3770.45b8: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
  1581. 3770.45b8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msacm32.dll [lacks WinVerifyTrust]
  1582. 3770.45b8: supR3HardenedDllNotificationCallback: load 00007ffbe3d80000 LB 0x0001c000 C:\WINDOWS\SYSTEM32\MSACM32.dll [fFlags=0x0]
  1583. 3770.45b8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msacm32.dll [lacks WinVerifyTrust]
  1584. 3770.45b8: supR3HardenedDllNotificationCallback: load 00007ffbf55a0000 LB 0x0000d000 C:\WINDOWS\System32\msacm32.drv [fFlags=0x0]
  1585. 3770.45b8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
  1586. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbf55a0000 'C:\WINDOWS\System32\msacm32.drv'
  1587. 3770.45b8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
  1588. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
  1589. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbf55a0000 'C:\WINDOWS\System32\msacm32.drv'
  1590. 3770.45b8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
  1591. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
  1592. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbf55a0000 'C:\WINDOWS\System32\msacm32.drv'
  1593. 3770.45b8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
  1594. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
  1595. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbf55a0000 'C:\WINDOWS\System32\msacm32.drv'
  1596. 3770.45b8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
  1597. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
  1598. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbf55a0000 'C:\WINDOWS\System32\msacm32.drv'
  1599. 3770.45b8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
  1600. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
  1601. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbf55a0000 'C:\WINDOWS\System32\msacm32.drv'
  1602. 3770.45b8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
  1603. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
  1604. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbf55a0000 'C:\WINDOWS\System32\msacm32.drv'
  1605. 3770.45b8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
  1606. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbf55a0000 'C:\WINDOWS\System32\msacm32.drv'
  1607. 3770.45b8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
  1608. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbf55a0000 'C:\WINDOWS\System32\msacm32.drv'
  1609. 3770.45b8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
  1610. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbf55a0000 'C:\WINDOWS\System32\msacm32.drv'
  1611. 3770.45b8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1612. 3770.45b8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'winmm.dll'.
  1613. 3770.45b8: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\midimap.dll)
  1614. 3770.45b8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\midimap.dll
  1615. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
  1616. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume3\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
  1617. 3770.45b8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll [lacks WinVerifyTrust]
  1618. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1619. 3770.45b8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1620. 3770.45b8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1621. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
  1622. 3770.45b8: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\midimap.dll [lacks WinVerifyTrust]
  1623. 3770.45b8: supR3HardenedDllNotificationCallback: load 00007ffbe87d0000 LB 0x0000a000 C:\WINDOWS\System32\midimap.dll [fFlags=0x0]
  1624. 3770.45b8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\midimap.dll [lacks WinVerifyTrust]
  1625. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbe87d0000 'C:\WINDOWS\System32\midimap.dll'
  1626. 3770.45b8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\midimap.dll [lacks WinVerifyTrust]
  1627. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
  1628. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbe87d0000 'C:\WINDOWS\System32\midimap.dll'
  1629. 3770.45b8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\midimap.dll [lacks WinVerifyTrust]
  1630. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
  1631. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbe87d0000 'C:\WINDOWS\System32\midimap.dll'
  1632. 3770.45b8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\midimap.dll [lacks WinVerifyTrust]
  1633. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
  1634. 3770.45b8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbe87d0000 'C:\WINDOWS\System32\midimap.dll'
  1635. 3770.1604: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
  1636. 3770.1604: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\MMDevApi.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
  1637. 3770.1604: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbede20000 'C:\WINDOWS\System32\MMDevApi.dll'
  1638. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll [lacks WinVerifyTrust]
  1639. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\ole32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
  1640. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfcb70000 'C:\WINDOWS\system32\ole32.dll'
  1641. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1642. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
  1643. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'gdi32.dll'.
  1644. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'advapi32.dll'.
  1645. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ole32.dll'.
  1646. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'oleaut32.dll'.
  1647. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'shell32.dll'.
  1648. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'iertutil.dll'.
  1649. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'oleacc.dll'.
  1650. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'version.dll'.
  1651. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'rpcrt4.dll'.
  1652. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'shlwapi.dll'.
  1653. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'propsys.dll'.
  1654. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #15 'profapi.dll'.
  1655. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\IME\IMEJP\IMJPTIP.DLL)
  1656. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\IME\IMEJP\IMJPTIP.DLL
  1657. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'profapi.dll'...
  1658. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'profapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\profapi.dll' [rcNtRedir=0xc0150008]
  1659. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\profapi.dll [lacks WinVerifyTrust]
  1660. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'propsys.dll'...
  1661. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'propsys.dll' -> '\Device\HarddiskVolume3\Windows\System32\propsys.dll' [rcNtRedir=0xc0150008]
  1662. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\propsys.dll [lacks WinVerifyTrust]
  1663. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shlwapi.dll'...
  1664. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'shlwapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\shlwapi.dll' [rcNtRedir=0xc0150008]
  1665. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shlwapi.dll [lacks WinVerifyTrust]
  1666. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  1667. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  1668. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  1669. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'version.dll'...
  1670. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'version.dll' -> '\Device\HarddiskVolume3\Windows\System32\version.dll' [rcNtRedir=0xc0150008]
  1671. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1672. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\version.dll)
  1673. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\version.dll
  1674. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleacc.dll'...
  1675. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleacc.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleacc.dll' [rcNtRedir=0xc0150008]
  1676. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'rpcrt4.dll'.
  1677. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #30 'user32.dll'.
  1678. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\oleacc.dll)
  1679. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\oleacc.dll
  1680. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'iertutil.dll'...
  1681. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'iertutil.dll' -> '\Device\HarddiskVolume3\Windows\System32\iertutil.dll' [rcNtRedir=0xc0150008]
  1682. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1683. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\iertutil.dll)
  1684. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\iertutil.dll
  1685. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
  1686. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
  1687. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll [lacks WinVerifyTrust]
  1688. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
  1689. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
  1690. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
  1691. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
  1692. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
  1693. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll [lacks WinVerifyTrust]
  1694. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
  1695. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
  1696. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
  1697. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  1698. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  1699. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  1700. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  1701. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  1702. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  1703. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1704. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1705. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1706. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1707. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1708. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1709. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  1710. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  1711. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  1712. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  1713. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  1714. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  1715. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1716. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1717. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1718. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\IME\IMEJP\imjptip.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
  1719. 3770.2c5c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IME\IMEJP\IMJPTIP.DLL [lacks WinVerifyTrust]
  1720. 3770.2c5c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\iertutil.dll [lacks WinVerifyTrust]
  1721. 3770.2c5c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\oleacc.dll [lacks WinVerifyTrust]
  1722. 3770.2c5c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\version.dll [lacks WinVerifyTrust]
  1723. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbec600000 LB 0x002a2000 C:\WINDOWS\SYSTEM32\iertutil.dll [fFlags=0x0]
  1724. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\iertutil.dll [lacks WinVerifyTrust]
  1725. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbefea0000 LB 0x0006b000 C:\WINDOWS\SYSTEM32\OLEACC.dll [fFlags=0x0]
  1726. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\oleacc.dll [lacks WinVerifyTrust]
  1727. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbf5060000 LB 0x0000a000 C:\WINDOWS\SYSTEM32\VERSION.dll [fFlags=0x0]
  1728. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\version.dll [lacks WinVerifyTrust]
  1729. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbba390000 LB 0x002c2000 C:\Windows\System32\IME\IMEJP\imjptip.dll [fFlags=0x0]
  1730. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IME\IMEJP\IMJPTIP.DLL [lacks WinVerifyTrust]
  1731. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll [lacks WinVerifyTrust]
  1732. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\ole32.dll (Input=ole32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1733. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfcb70000 'C:\WINDOWS\System32\ole32.dll'
  1734. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbba390000 'C:\Windows\System32\IME\IMEJP\imjptip.dll'
  1735. 3770.2c5c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe [lacks WinVerifyTrust]
  1736. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1737. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'oleaut32.dll'.
  1738. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #15 'rpcrt4.dll'.
  1739. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #49 'bcrypt.dll'.
  1740. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #50 'crypt32.dll'.
  1741. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #55 'profapi.dll'.
  1742. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\IME\IMEJP\IMJPAPI.DLL)
  1743. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\IME\IMEJP\IMJPAPI.DLL
  1744. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'profapi.dll'...
  1745. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'profapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\profapi.dll' [rcNtRedir=0xc0150008]
  1746. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\profapi.dll [lacks WinVerifyTrust]
  1747. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'crypt32.dll'...
  1748. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'crypt32.dll' -> '\Device\HarddiskVolume3\Windows\System32\crypt32.dll' [rcNtRedir=0xc0150008]
  1749. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'msasn1.dll'.
  1750. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\crypt32.dll)
  1751. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\crypt32.dll
  1752. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcrypt.dll'...
  1753. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcrypt.dll' -> '\Device\HarddiskVolume3\Windows\System32\bcrypt.dll' [rcNtRedir=0xc0150008]
  1754. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
  1755. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  1756. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  1757. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  1758. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
  1759. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
  1760. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
  1761. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1762. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1763. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1764. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msasn1.dll'...
  1765. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msasn1.dll' -> '\Device\HarddiskVolume3\Windows\System32\msasn1.dll' [rcNtRedir=0xc0150008]
  1766. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\msasn1.dll)
  1767. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msasn1.dll
  1768. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\IME\IMEJP\imjpapi.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1769. 3770.2c5c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IME\IMEJP\IMJPAPI.DLL [lacks WinVerifyTrust]
  1770. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbfa5c0000 LB 0x00012000 C:\WINDOWS\System32\MSASN1.dll [fFlags=0x0]
  1771. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msasn1.dll [lacks WinVerifyTrust]
  1772. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbfad90000 LB 0x001e2000 C:\WINDOWS\System32\CRYPT32.dll [fFlags=0x0]
  1773. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
  1774. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbc2c70000 LB 0x0021d000 C:\Windows\System32\IME\IMEJP\imjpapi.dll [fFlags=0x0]
  1775. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IME\IMEJP\IMJPAPI.DLL [lacks WinVerifyTrust]
  1776. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll [lacks WinVerifyTrust]
  1777. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\ole32.dll (Input=ole32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1778. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfcb70000 'C:\WINDOWS\System32\ole32.dll'
  1779. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbc2c70000 'C:\Windows\System32\IME\IMEJP\imjpapi.dll'
  1780. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1781. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'oleaut32.dll'.
  1782. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'rpcrt4.dll'.
  1783. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\IME\shared\IMJKAPI.DLL)
  1784. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\IME\shared\IMJKAPI.DLL
  1785. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  1786. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  1787. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  1788. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
  1789. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
  1790. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
  1791. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1792. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1793. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1794. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\IME\shared\imjkapi.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1795. 3770.2c5c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IME\shared\IMJKAPI.DLL [lacks WinVerifyTrust]
  1796. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbf1b10000 LB 0x00040000 C:\Windows\System32\IME\shared\imjkapi.dll [fFlags=0x0]
  1797. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IME\shared\IMJKAPI.DLL [lacks WinVerifyTrust]
  1798. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll [lacks WinVerifyTrust]
  1799. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfcb70000 'C:\WINDOWS\System32\ole32.dll'
  1800. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbf1b10000 'C:\Windows\System32\IME\shared\imjkapi.dll'
  1801. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp110_win.dll'.
  1802. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'.
  1803. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'rpcrt4.dll'.
  1804. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\policymanager.dll)
  1805. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\policymanager.dll
  1806. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1807. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\msvcp110_win.dll)
  1808. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msvcp110_win.dll
  1809. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbf7000000 LB 0x00091000 C:\WINDOWS\SYSTEM32\msvcp110_win.dll [fFlags=0x0]
  1810. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp110_win.dll [lacks WinVerifyTrust]
  1811. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbf6cf0000 LB 0x0007f000 C:\WINDOWS\SYSTEM32\policymanager.dll [fFlags=0x0]
  1812. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\policymanager.dll [lacks WinVerifyTrust]
  1813. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1814. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'oleaut32.dll'.
  1815. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #37 'profapi.dll'.
  1816. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\IME\IMEJP\IMJPPRED.DLL)
  1817. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\IME\IMEJP\IMJPPRED.DLL
  1818. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'profapi.dll'...
  1819. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'profapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\profapi.dll' [rcNtRedir=0xc0150008]
  1820. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\profapi.dll [lacks WinVerifyTrust]
  1821. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
  1822. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
  1823. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
  1824. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1825. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1826. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1827. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1828. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1829. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1830. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  1831. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  1832. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  1833. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1834. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1835. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1836. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp110_win.dll'...
  1837. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp110_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp110_win.dll' [rcNtRedir=0xc0150008]
  1838. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp110_win.dll [lacks WinVerifyTrust]
  1839. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\IME\IMEJP\imjppred.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1840. 3770.2c5c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IME\IMEJP\IMJPPRED.DLL [lacks WinVerifyTrust]
  1841. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbe8560000 LB 0x00091000 C:\Windows\System32\IME\IMEJP\imjppred.dll [fFlags=0x0]
  1842. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IME\IMEJP\IMJPPRED.DLL [lacks WinVerifyTrust]
  1843. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll [lacks WinVerifyTrust]
  1844. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfcb70000 'C:\WINDOWS\System32\ole32.dll'
  1845. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbe8560000 'C:\Windows\System32\IME\IMEJP\imjppred.dll'
  1846. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msctf.dll [lacks WinVerifyTrust]
  1847. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\MSCTF.DLL (Input=MSCTF.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1848. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfc2a0000 'C:\WINDOWS\System32\MSCTF.DLL'
  1849. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1850. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'advapi32.dll'.
  1851. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
  1852. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'ole32.dll'.
  1853. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'oleaut32.dll'.
  1854. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'gdi32.dll'.
  1855. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'oleacc.dll'.
  1856. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'version.dll'.
  1857. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'dui70.dll'.
  1858. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\IME\shared\IMETIP.DLL)
  1859. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\IME\shared\IMETIP.DLL
  1860. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dui70.dll'...
  1861. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'dui70.dll' -> '\Device\HarddiskVolume3\Windows\System32\dui70.dll' [rcNtRedir=0xc0150008]
  1862. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1863. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #32 'user32.dll'.
  1864. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #33 'gdi32.dll'.
  1865. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\dui70.dll)
  1866. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\dui70.dll
  1867. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'version.dll'...
  1868. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'version.dll' -> '\Device\HarddiskVolume3\Windows\System32\version.dll' [rcNtRedir=0xc0150008]
  1869. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\version.dll [lacks WinVerifyTrust]
  1870. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleacc.dll'...
  1871. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleacc.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleacc.dll' [rcNtRedir=0xc0150008]
  1872. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\oleacc.dll [lacks WinVerifyTrust]
  1873. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  1874. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  1875. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  1876. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
  1877. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
  1878. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
  1879. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
  1880. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
  1881. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll [lacks WinVerifyTrust]
  1882. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  1883. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  1884. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  1885. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
  1886. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
  1887. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
  1888. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1889. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1890. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1891. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  1892. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  1893. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  1894. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  1895. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  1896. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  1897. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1898. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1899. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1900. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\IME\shared\imetip.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
  1901. 3770.2c5c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IME\shared\IMETIP.DLL [lacks WinVerifyTrust]
  1902. 3770.2c5c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\dui70.dll [lacks WinVerifyTrust]
  1903. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbc2840000 LB 0x001ab000 C:\WINDOWS\SYSTEM32\DUI70.dll [fFlags=0x0]
  1904. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\dui70.dll [lacks WinVerifyTrust]
  1905. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbc8eb0000 LB 0x00156000 C:\Windows\System32\IME\shared\imetip.dll [fFlags=0x0]
  1906. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IME\shared\IMETIP.DLL [lacks WinVerifyTrust]
  1907. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbc8eb0000 'C:\Windows\System32\IME\shared\imetip.dll'
  1908. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msctf.dll [lacks WinVerifyTrust]
  1909. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\MSCTF.DLL (Input=MSCTF.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1910. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfc2a0000 'C:\WINDOWS\System32\MSCTF.DLL'
  1911. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msctf.dll [lacks WinVerifyTrust]
  1912. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msctf.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
  1913. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfc2a0000 'C:\WINDOWS\System32\msctf.dll'
  1914. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msctf.dll [lacks WinVerifyTrust]
  1915. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\msctf.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
  1916. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfc2a0000 'C:\WINDOWS\system32\msctf.dll'
  1917. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1918. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'advapi32.dll'.
  1919. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ole32.dll'.
  1920. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'shlwapi.dll'.
  1921. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'user32.dll'.
  1922. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'oleaut32.dll'.
  1923. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'wer.dll'.
  1924. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\IME\shared\imecfm.dll)
  1925. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\IME\shared\imecfm.dll
  1926. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'wer.dll'...
  1927. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'wer.dll' -> '\Device\HarddiskVolume3\Windows\System32\wer.dll' [rcNtRedir=0xc0150008]
  1928. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1929. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #41 'rpcrt4.dll'.
  1930. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\wer.dll)
  1931. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\wer.dll
  1932. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
  1933. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
  1934. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
  1935. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  1936. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  1937. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  1938. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shlwapi.dll'...
  1939. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'shlwapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\shlwapi.dll' [rcNtRedir=0xc0150008]
  1940. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shlwapi.dll [lacks WinVerifyTrust]
  1941. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
  1942. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
  1943. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll [lacks WinVerifyTrust]
  1944. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
  1945. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
  1946. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
  1947. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1948. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1949. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1950. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  1951. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  1952. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  1953. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1954. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1955. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1956. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\IME\shared\imecfm.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1957. 3770.2c5c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IME\shared\imecfm.dll [lacks WinVerifyTrust]
  1958. 3770.2c5c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wer.dll [lacks WinVerifyTrust]
  1959. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbf88f0000 LB 0x000c1000 C:\WINDOWS\SYSTEM32\wer.dll [fFlags=0x0]
  1960. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wer.dll [lacks WinVerifyTrust]
  1961. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbe7e30000 LB 0x0003b000 C:\Windows\System32\IME\shared\imecfm.dll [fFlags=0x0]
  1962. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IME\shared\imecfm.dll [lacks WinVerifyTrust]
  1963. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbe7e30000 'C:\Windows\System32\IME\shared\imecfm.dll'
  1964. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  1965. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfb740000 'C:\WINDOWS\System32\user32.dll'
  1966. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IME\IMEJP\IMJPAPI.DLL [lacks WinVerifyTrust]
  1967. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\IME\IMEJP\imjpapi.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
  1968. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbc2c70000 'C:\Windows\System32\IME\IMEJP\imjpapi.dll'
  1969. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IME\shared\IMJKAPI.DLL [lacks WinVerifyTrust]
  1970. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\IME\shared\imjkapi.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1971. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbf1b10000 'C:\Windows\System32\IME\shared\imjkapi.dll'
  1972. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IME\shared\IMJKAPI.DLL [lacks WinVerifyTrust]
  1973. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\IME\shared\imjkapi.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1974. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbf1b10000 'C:\Windows\System32\IME\shared\imjkapi.dll'
  1975. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IME\shared\IMJKAPI.DLL [lacks WinVerifyTrust]
  1976. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\IME\shared\imjkapi.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1977. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbf1b10000 'C:\Windows\System32\IME\shared\imjkapi.dll'
  1978. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IME\shared\IMJKAPI.DLL [lacks WinVerifyTrust]
  1979. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\IME\shared\imjkapi.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1980. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbf1b10000 'C:\Windows\System32\IME\shared\imjkapi.dll'
  1981. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IME\IMEJP\IMJPPRED.DLL [lacks WinVerifyTrust]
  1982. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\IME\IMEJP\imjppred.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1983. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbe8560000 'C:\Windows\System32\IME\IMEJP\imjppred.dll'
  1984. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IME\shared\imecfm.dll [lacks WinVerifyTrust]
  1985. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\IME\shared\imecfm.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1986. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbe7e30000 'C:\Windows\System32\IME\shared\imecfm.dll'
  1987. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1988. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'ole32.dll'.
  1989. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'oleaut32.dll'.
  1990. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
  1991. 3770.2c5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'advapi32.dll'.
  1992. 3770.2c5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\IME\shared\IMESEARCHDLL.DLL)
  1993. 3770.2c5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\IME\shared\IMESEARCHDLL.DLL
  1994. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
  1995. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
  1996. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
  1997. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  1998. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  1999. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  2000. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
  2001. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
  2002. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
  2003. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
  2004. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
  2005. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll [lacks WinVerifyTrust]
  2006. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  2007. 3770.2c5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  2008. 3770.2c5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  2009. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\IME\SHARED\imesearchdll.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
  2010. 3770.2c5c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IME\shared\IMESEARCHDLL.DLL [lacks WinVerifyTrust]
  2011. 3770.2c5c: supR3HardenedDllNotificationCallback: load 00007ffbe9940000 LB 0x0001f000 C:\Windows\System32\IME\SHARED\imesearchdll.dll [fFlags=0x0]
  2012. 3770.2c5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IME\shared\IMESEARCHDLL.DLL [lacks WinVerifyTrust]
  2013. 3770.2c5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbe9940000 'C:\Windows\System32\IME\SHARED\imesearchdll.dll'
  2014. 3770.2c5c: supR3HardenedDllNotificationCallback: Unload 00007ffbe7e30000 LB 0x0003b000 C:\Windows\System32\IME\shared\imecfm.dll [flags=0x0]
  2015. 3770.2c5c: supR3HardenedDllNotificationCallback: Unload 00007ffbf88f0000 LB 0x000c1000 C:\WINDOWS\SYSTEM32\wer.dll [flags=0x0]
  2016. 4988.2aa4: supR3HardNtChildWaitFor[1]: Quitting: ExitCode=0x1 (rcNtWait=0x0, rcNt1=0x0, rcNt2=0x103, rcNt3=0x103, 2518 ms, the end);
RAW Paste Data