Guest User

Untitled

a guest
Jul 27th, 2018
110
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. 28e4.3e88: Log file opened: 5.2.12r122591 g_hStartupLog=0000000000000098 g_uNtVerCombined=0xa042ee00
  2. 28e4.3e88: \SystemRoot\System32\ntdll.dll:
  3. 28e4.3e88: CreationTime: 2018-07-11T01:22:20.486818800Z
  4. 28e4.3e88: LastWriteTime: 2018-07-06T07:25:51.438518000Z
  5. 28e4.3e88: ChangeTime: 2018-07-26T18:08:11.660009400Z
  6. 28e4.3e88: FileAttributes: 0x20
  7. 28e4.3e88: Size: 0x1db0b8
  8. 28e4.3e88: NT Headers: 0xe8
  9. 28e4.3e88: Timestamp: 0xf4df6dc2
  10. 28e4.3e88: Machine: 0x8664 - amd64
  11. 28e4.3e88: Timestamp: 0xf4df6dc2
  12. 28e4.3e88: Image Version: 10.0
  13. 28e4.3e88: SizeOfImage: 0x1e1000 (1970176)
  14. 28e4.3e88: Resource Dir: 0x174000 LB 0x6b338
  15. 28e4.3e88: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
  16. 28e4.3e88: [Raw version resource data: 0x1740f0 LB 0x380, codepage 0x0 (reserved 0x0)]
  17. 28e4.3e88: ProductName: Microsoft® Windows® Operating System
  18. 28e4.3e88: ProductVersion: 10.0.17134.165
  19. 28e4.3e88: FileVersion: 10.0.17134.165 (WinBuild.160101.0800)
  20. 28e4.3e88: FileDescription: NT Layer DLL
  21. 28e4.3e88: \SystemRoot\System32\kernel32.dll:
  22. 28e4.3e88: CreationTime: 2018-04-11T23:34:40.510607900Z
  23. 28e4.3e88: LastWriteTime: 2018-04-11T23:34:40.510607900Z
  24. 28e4.3e88: ChangeTime: 2018-05-04T08:45:56.436435100Z
  25. 28e4.3e88: FileAttributes: 0x20
  26. 28e4.3e88: Size: 0xafef8
  27. 28e4.3e88: NT Headers: 0xe8
  28. 28e4.3e88: Timestamp: 0x5f488a51
  29. 28e4.3e88: Machine: 0x8664 - amd64
  30. 28e4.3e88: Timestamp: 0x5f488a51
  31. 28e4.3e88: Image Version: 10.0
  32. 28e4.3e88: SizeOfImage: 0xb2000 (729088)
  33. 28e4.3e88: Resource Dir: 0xb0000 LB 0x520
  34. 28e4.3e88: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
  35. 28e4.3e88: [Raw version resource data: 0xb00b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
  36. 28e4.3e88: ProductName: Microsoft® Windows® Operating System
  37. 28e4.3e88: ProductVersion: 10.0.17134.1
  38. 28e4.3e88: FileVersion: 10.0.17134.1 (WinBuild.160101.0800)
  39. 28e4.3e88: FileDescription: Windows NT BASE API Client DLL
  40. 28e4.3e88: \SystemRoot\System32\KernelBase.dll:
  41. 28e4.3e88: CreationTime: 2018-07-11T01:22:17.653886000Z
  42. 28e4.3e88: LastWriteTime: 2018-07-06T07:25:54.438736600Z
  43. 28e4.3e88: ChangeTime: 2018-07-26T18:08:11.655022700Z
  44. 28e4.3e88: FileAttributes: 0x20
  45. 28e4.3e88: Size: 0x273dd0
  46. 28e4.3e88: NT Headers: 0xf8
  47. 28e4.3e88: Timestamp: 0xb0bb231d
  48. 28e4.3e88: Machine: 0x8664 - amd64
  49. 28e4.3e88: Timestamp: 0xb0bb231d
  50. 28e4.3e88: Image Version: 10.0
  51. 28e4.3e88: SizeOfImage: 0x273000 (2568192)
  52. 28e4.3e88: Resource Dir: 0x251000 LB 0x548
  53. 28e4.3e88: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
  54. 28e4.3e88: [Raw version resource data: 0x2510b0 LB 0x3bc, codepage 0x0 (reserved 0x0)]
  55. 28e4.3e88: ProductName: Microsoft® Windows® Operating System
  56. 28e4.3e88: ProductVersion: 10.0.17134.165
  57. 28e4.3e88: FileVersion: 10.0.17134.165 (WinBuild.160101.0800)
  58. 28e4.3e88: FileDescription: Windows NT BASE API Client DLL
  59. 28e4.3e88: \SystemRoot\System32\apisetschema.dll:
  60. 28e4.3e88: CreationTime: 2018-04-11T23:34:44.042150700Z
  61. 28e4.3e88: LastWriteTime: 2018-04-11T23:34:44.042150700Z
  62. 28e4.3e88: ChangeTime: 2018-05-04T06:25:07.131292400Z
  63. 28e4.3e88: FileAttributes: 0x20
  64. 28e4.3e88: Size: 0x1bd98
  65. 28e4.3e88: NT Headers: 0xd0
  66. 28e4.3e88: Timestamp: 0xd02ff418
  67. 28e4.3e88: Machine: 0x8664 - amd64
  68. 28e4.3e88: Timestamp: 0xd02ff418
  69. 28e4.3e88: Image Version: 10.0
  70. 28e4.3e88: SizeOfImage: 0x1c000 (114688)
  71. 28e4.3e88: Resource Dir: 0x1b000 LB 0x408
  72. 28e4.3e88: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
  73. 28e4.3e88: [Raw version resource data: 0x1b060 LB 0x3a8, codepage 0x0 (reserved 0x0)]
  74. 28e4.3e88: ProductName: Microsoft® Windows® Operating System
  75. 28e4.3e88: ProductVersion: 10.0.17134.1
  76. 28e4.3e88: FileVersion: 10.0.17134.1 (WinBuild.160101.0800)
  77. 28e4.3e88: FileDescription: ApiSet Schema DLL
  78. 28e4.3e88: Found driver SymNetS (0x2)
  79. 28e4.3e88: Found driver SRTSPX (0x2)
  80. 28e4.3e88: Found driver SymEvent (0x2)
  81. 28e4.3e88: Found driver SymIRON (0x2)
  82. 28e4.3e88: supR3HardenedWinFindAdversaries: 0x2
  83. 28e4.3e88: \SystemRoot\System32\drivers\symevent64x86.sys:
  84. 28e4.3e88: CreationTime: 2018-05-04T06:59:05.713447400Z
  85. 28e4.3e88: LastWriteTime: 2018-06-14T18:13:36.727665800Z
  86. 28e4.3e88: ChangeTime: 2018-06-15T01:58:25.222933600Z
  87. 28e4.3e88: FileAttributes: 0x20
  88. 28e4.3e88: Size: 0x18650
  89. 28e4.3e88: NT Headers: 0xe8
  90. 28e4.3e88: Timestamp: 0x5a95cc4b
  91. 28e4.3e88: Machine: 0x8664 - amd64
  92. 28e4.3e88: Timestamp: 0x5a95cc4b
  93. 28e4.3e88: Image Version: 6.3
  94. 28e4.3e88: SizeOfImage: 0x21000 (135168)
  95. 28e4.3e88: Resource Dir: 0x1f000 LB 0x3c8
  96. 28e4.3e88: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
  97. 28e4.3e88: [Raw version resource data: 0x1f0b8 LB 0x310, codepage 0x4e4 (reserved 0x0)]
  98. 28e4.3e88: ProductName: SYMEVENT
  99. 28e4.3e88: ProductVersion: 14.0.6.27
  100. 28e4.3e88: FileVersion: 14.0.6.27
  101. 28e4.3e88: FileDescription: Symantec Event Library
  102. 28e4.3e88: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
  103. 28e4.3e88: Calling main()
  104. 28e4.3e88: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2
  105. 28e4.3e88: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
  106. 28e4.3e88: SUPR3HardenedMain: Respawn #1
  107. 28e4.3e88: System32: \Device\HarddiskVolume3\Windows\System32
  108. 28e4.3e88: WinSxS: \Device\HarddiskVolume3\Windows\WinSxS
  109. 28e4.3e88: KnownDllPath: C:\WINDOWS\System32
  110. 28e4.3e88: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
  111. 28e4.3e88: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe)
  112. 28e4.3e88: supR3HardNtEnableThreadCreation:
  113. 28e4.3e88: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffe9d982fc0 pvNtTerminateThread=00007ffe9d9aa900
  114. 28e4.3e88: supR3HardenedWinDoReSpawn(1): New child 305c.2b48 [kernel32].
  115. 28e4.3e88: supR3HardNtChildGatherData: PebBaseAddress=00000000002b2000 cbPeb=0x388
  116. 28e4.3e88: supR3HardNtPuChFindNtdll: uNtDllParentAddr=00007ffe9d910000 uNtDllChildAddr=00007ffe9d910000
  117. 28e4.3e88: supR3HardenedWinSetupChildInit: uLdrInitThunk=00007ffe9d982fc0
  118. 28e4.3e88: supR3HardenedWinSetupChildInit: Start child.
  119. 28e4.3e88: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 0 ms.
  120. 28e4.3e88: supR3HardNtChildPurify: Startup delay kludge #1/0: 520 ms, 58 sleeps
  121. 28e4.3e88: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
  122. 28e4.3e88: *0000000000000000-000000000011ffff 0x0001/0x0000 0x0000000
  123. 28e4.3e88: *0000000000120000-000000000013ffff 0x0004/0x0004 0x0020000
  124. 28e4.3e88: *0000000000140000-0000000000158fff 0x0002/0x0002 0x0040000
  125. 28e4.3e88: 0000000000159000-000000000015ffff 0x0001/0x0000 0x0000000
  126. 28e4.3e88: *0000000000160000-0000000000163fff 0x0002/0x0002 0x0040000
  127. 28e4.3e88: 0000000000164000-000000000016ffff 0x0001/0x0000 0x0000000
  128. 28e4.3e88: *0000000000170000-0000000000170fff 0x0004/0x0004 0x0020000
  129. 28e4.3e88: 0000000000171000-00000000001fffff 0x0001/0x0000 0x0000000
  130. 28e4.3e88: *0000000000200000-00000000002b1fff 0x0000/0x0004 0x0020000
  131. 28e4.3e88: 00000000002b2000-00000000002b4fff 0x0004/0x0004 0x0020000
  132. 28e4.3e88: 00000000002b5000-00000000003fffff 0x0000/0x0004 0x0020000
  133. 28e4.3e88: *0000000000400000-00000000004fafff 0x0000/0x0004 0x0020000
  134. 28e4.3e88: 00000000004fb000-00000000004fdfff 0x0104/0x0004 0x0020000
  135. 28e4.3e88: 00000000004fe000-00000000004fffff 0x0004/0x0004 0x0020000
  136. 28e4.3e88: 0000000000500000-000000007ffdffff 0x0001/0x0000 0x0000000
  137. 28e4.3e88: *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000
  138. 28e4.3e88: 000000007ffe1000-00007ff5a5faffff 0x0001/0x0000 0x0000000
  139. 28e4.3e88: *00007ff5a5fb0000-00007ff5a5fdafff 0x0002/0x0002 0x0040000
  140. 28e4.3e88: 00007ff5a5fdb000-00007ff74ec5ffff 0x0001/0x0000 0x0000000
  141. 28e4.3e88: *00007ff74ec60000-00007ff74ec60fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
  142. 28e4.3e88: 00007ff74ec61000-00007ff74ecd1fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
  143. 28e4.3e88: 00007ff74ecd2000-00007ff74ecd2fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
  144. 28e4.3e88: 00007ff74ecd3000-00007ff74ed18fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
  145. 28e4.3e88: 00007ff74ed19000-00007ff74ed19fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
  146. 28e4.3e88: 00007ff74ed1a000-00007ff74ed1afff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
  147. 28e4.3e88: 00007ff74ed1b000-00007ff74ed1ffff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
  148. 28e4.3e88: 00007ff74ed20000-00007ff74ed20fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
  149. 28e4.3e88: 00007ff74ed21000-00007ff74ed21fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
  150. 28e4.3e88: 00007ff74ed22000-00007ff74ed25fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
  151. 28e4.3e88: 00007ff74ed26000-00007ff74ed6dfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
  152. 28e4.3e88: 00007ff74ed6e000-00007ffe9d90ffff 0x0001/0x0000 0x0000000
  153. 28e4.3e88: *00007ffe9d910000-00007ffe9d910fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
  154. 28e4.3e88: 00007ffe9d911000-00007ffe9da1ffff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
  155. 28e4.3e88: 00007ffe9da20000-00007ffe9da65fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
  156. 28e4.3e88: 00007ffe9da66000-00007ffe9da70fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
  157. 28e4.3e88: 00007ffe9da71000-00007ffe9da7efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
  158. 28e4.3e88: 00007ffe9da7f000-00007ffe9da7ffff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
  159. 28e4.3e88: 00007ffe9da80000-00007ffe9da82fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
  160. 28e4.3e88: 00007ffe9da83000-00007ffe9daf0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
  161. 28e4.3e88: 00007ffe9daf1000-00007ffffffeffff 0x0001/0x0000 0x0000000
  162. 28e4.3e88: VirtualBox.exe: timestamp 0x5af2c2c3 (rc=VINF_SUCCESS)
  163. 28e4.3e88: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
  164. 28e4.3e88: '\Device\HarddiskVolume3\Windows\System32\ntdll.dll' has no imports
  165. 28e4.3e88: supR3HardNtChildPurify: Done after 552 ms and 0 fixes (loop #0).
  166. 28e4.3e88: supR3HardNtEnableThreadCreation:
  167. 305c.2b48: Log file opened: 5.2.12r122591 g_hStartupLog=0000000000000004 g_uNtVerCombined=0xa042ee00
  168. 305c.2b48: supR3HardenedVmProcessInit: uNtDllAddr=00007ffe9d910000 g_uNtVerCombined=0xa042ee00
  169. 305c.2b48: ntdll.dll: timestamp 0xf4df6dc2 (rc=VINF_SUCCESS)
  170. 305c.2b48: New simple heap: #1 0000000000600000 LB 0x400000 (for 1970176 allocation)
  171. 305c.2b48: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
  172. 305c.2b48: System32: \Device\HarddiskVolume3\Windows\System32
  173. 305c.2b48: WinSxS: \Device\HarddiskVolume3\Windows\WinSxS
  174. 305c.2b48: KnownDllPath: C:\WINDOWS\System32
  175. 305c.2b48: supR3HardenedVmProcessInit: Opening vboxdrv stub...
  176. 305c.2b48: supR3HardenedVmProcessInit: Restoring LdrInitializeThunk...
  177. 305c.2b48: supR3HardenedVmProcessInit: Returning to LdrInitializeThunk...
  178. 305c.2b48: Registered Dll notification callback with NTDLL.
  179. 305c.2b48: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\kernel32.dll)
  180. 305c.2b48: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\kernel32.dll
  181. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\KERNEL32.DLL (Input=KERNEL32.DLL, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000004001:<flags> [calling]
  182. 305c.2b48: supR3HardenedDllNotificationCallback: load 00007ffe9a180000 LB 0x00273000 C:\WINDOWS\System32\KERNELBASE.dll [fFlags=0x0]
  183. 305c.2b48: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\KernelBase.dll)
  184. 305c.2b48: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
  185. 305c.2b48: supR3HardenedDllNotificationCallback: load 00007ffe9b6b0000 LB 0x000b2000 C:\WINDOWS\System32\KERNEL32.DLL [fFlags=0x0]
  186. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
  187. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe9b6b0000 'C:\WINDOWS\System32\KERNEL32.DLL'
  188. 305c.2b48: supR3HardenedDllNotificationCallback: load 00007ff74ec60000 LB 0x0010e000 C:\Program Files\Oracle\VirtualBox\VirtualBox.exe [fFlags=0x0]
  189. 305c.2b48: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
  190. 305c.2b48: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe)
  191. 305c.2b48: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
  192. 305c.2b48: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffe9d982fc0 pvNtTerminateThread=00007ffe9d9aa900
  193. 28e4.3e88: supR3HardNtChildWaitFor: Found expected request 1 (CloseEvents) after 77 ms.
  194. 305c.2b48: \SystemRoot\System32\ntdll.dll:
  195. 305c.2b48: CreationTime: 2018-07-11T01:22:20.486818800Z
  196. 305c.2b48: LastWriteTime: 2018-07-06T07:25:51.438518000Z
  197. 305c.2b48: ChangeTime: 2018-07-26T18:08:11.660009400Z
  198. 305c.2b48: FileAttributes: 0x20
  199. 305c.2b48: Size: 0x1db0b8
  200. 305c.2b48: NT Headers: 0xe8
  201. 305c.2b48: Timestamp: 0xf4df6dc2
  202. 305c.2b48: Machine: 0x8664 - amd64
  203. 305c.2b48: Timestamp: 0xf4df6dc2
  204. 305c.2b48: Image Version: 10.0
  205. 305c.2b48: SizeOfImage: 0x1e1000 (1970176)
  206. 305c.2b48: Resource Dir: 0x174000 LB 0x6b338
  207. 305c.2b48: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
  208. 305c.2b48: [Raw version resource data: 0x1740f0 LB 0x380, codepage 0x0 (reserved 0x0)]
  209. 305c.2b48: ProductName: Microsoft® Windows® Operating System
  210. 305c.2b48: ProductVersion: 10.0.17134.165
  211. 305c.2b48: FileVersion: 10.0.17134.165 (WinBuild.160101.0800)
  212. 305c.2b48: FileDescription: NT Layer DLL
  213. 305c.2b48: \SystemRoot\System32\kernel32.dll:
  214. 305c.2b48: CreationTime: 2018-04-11T23:34:40.510607900Z
  215. 305c.2b48: LastWriteTime: 2018-04-11T23:34:40.510607900Z
  216. 305c.2b48: ChangeTime: 2018-05-04T08:45:56.436435100Z
  217. 305c.2b48: FileAttributes: 0x20
  218. 305c.2b48: Size: 0xafef8
  219. 305c.2b48: NT Headers: 0xe8
  220. 305c.2b48: Timestamp: 0x5f488a51
  221. 305c.2b48: Machine: 0x8664 - amd64
  222. 305c.2b48: Timestamp: 0x5f488a51
  223. 305c.2b48: Image Version: 10.0
  224. 305c.2b48: SizeOfImage: 0xb2000 (729088)
  225. 305c.2b48: Resource Dir: 0xb0000 LB 0x520
  226. 305c.2b48: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
  227. 305c.2b48: [Raw version resource data: 0xb00b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
  228. 305c.2b48: ProductName: Microsoft® Windows® Operating System
  229. 305c.2b48: ProductVersion: 10.0.17134.1
  230. 305c.2b48: FileVersion: 10.0.17134.1 (WinBuild.160101.0800)
  231. 305c.2b48: FileDescription: Windows NT BASE API Client DLL
  232. 305c.2b48: \SystemRoot\System32\KernelBase.dll:
  233. 305c.2b48: CreationTime: 2018-07-11T01:22:17.653886000Z
  234. 305c.2b48: LastWriteTime: 2018-07-06T07:25:54.438736600Z
  235. 305c.2b48: ChangeTime: 2018-07-26T18:08:11.655022700Z
  236. 305c.2b48: FileAttributes: 0x20
  237. 305c.2b48: Size: 0x273dd0
  238. 305c.2b48: NT Headers: 0xf8
  239. 305c.2b48: Timestamp: 0xb0bb231d
  240. 305c.2b48: Machine: 0x8664 - amd64
  241. 305c.2b48: Timestamp: 0xb0bb231d
  242. 305c.2b48: Image Version: 10.0
  243. 305c.2b48: SizeOfImage: 0x273000 (2568192)
  244. 305c.2b48: Resource Dir: 0x251000 LB 0x548
  245. 305c.2b48: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
  246. 305c.2b48: [Raw version resource data: 0x2510b0 LB 0x3bc, codepage 0x0 (reserved 0x0)]
  247. 305c.2b48: ProductName: Microsoft® Windows® Operating System
  248. 305c.2b48: ProductVersion: 10.0.17134.165
  249. 305c.2b48: FileVersion: 10.0.17134.165 (WinBuild.160101.0800)
  250. 305c.2b48: FileDescription: Windows NT BASE API Client DLL
  251. 305c.2b48: \SystemRoot\System32\apisetschema.dll:
  252. 305c.2b48: CreationTime: 2018-04-11T23:34:44.042150700Z
  253. 305c.2b48: LastWriteTime: 2018-04-11T23:34:44.042150700Z
  254. 305c.2b48: ChangeTime: 2018-05-04T06:25:07.131292400Z
  255. 305c.2b48: FileAttributes: 0x20
  256. 305c.2b48: Size: 0x1bd98
  257. 305c.2b48: NT Headers: 0xd0
  258. 305c.2b48: Timestamp: 0xd02ff418
  259. 305c.2b48: Machine: 0x8664 - amd64
  260. 305c.2b48: Timestamp: 0xd02ff418
  261. 305c.2b48: Image Version: 10.0
  262. 305c.2b48: SizeOfImage: 0x1c000 (114688)
  263. 305c.2b48: Resource Dir: 0x1b000 LB 0x408
  264. 305c.2b48: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
  265. 305c.2b48: [Raw version resource data: 0x1b060 LB 0x3a8, codepage 0x0 (reserved 0x0)]
  266. 305c.2b48: ProductName: Microsoft® Windows® Operating System
  267. 305c.2b48: ProductVersion: 10.0.17134.1
  268. 305c.2b48: FileVersion: 10.0.17134.1 (WinBuild.160101.0800)
  269. 305c.2b48: FileDescription: ApiSet Schema DLL
  270. 305c.2b48: Found driver SymNetS (0x2)
  271. 305c.2b48: Found driver SRTSPX (0x2)
  272. 305c.2b48: Found driver SymEvent (0x2)
  273. 305c.2b48: Found driver SymIRON (0x2)
  274. 305c.2b48: supR3HardenedWinFindAdversaries: 0x2
  275. 305c.2b48: \SystemRoot\System32\drivers\symevent64x86.sys:
  276. 305c.2b48: CreationTime: 2018-05-04T06:59:05.713447400Z
  277. 305c.2b48: LastWriteTime: 2018-06-14T18:13:36.727665800Z
  278. 305c.2b48: ChangeTime: 2018-06-15T01:58:25.222933600Z
  279. 305c.2b48: FileAttributes: 0x20
  280. 305c.2b48: Size: 0x18650
  281. 305c.2b48: NT Headers: 0xe8
  282. 305c.2b48: Timestamp: 0x5a95cc4b
  283. 305c.2b48: Machine: 0x8664 - amd64
  284. 305c.2b48: Timestamp: 0x5a95cc4b
  285. 305c.2b48: Image Version: 6.3
  286. 305c.2b48: SizeOfImage: 0x21000 (135168)
  287. 305c.2b48: Resource Dir: 0x1f000 LB 0x3c8
  288. 305c.2b48: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
  289. 305c.2b48: [Raw version resource data: 0x1f0b8 LB 0x310, codepage 0x4e4 (reserved 0x0)]
  290. 305c.2b48: ProductName: SYMEVENT
  291. 305c.2b48: ProductVersion: 14.0.6.27
  292. 305c.2b48: FileVersion: 14.0.6.27
  293. 305c.2b48: FileDescription: Symantec Event Library
  294. 305c.2b48: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
  295. 305c.2b48: Calling main()
  296. 305c.2b48: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2
  297. 305c.2b48: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
  298. 305c.2b48: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
  299. 305c.2b48: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe)
  300. 305c.2b48: SUPR3HardenedMain: Respawn #2
  301. 305c.2b48: supR3HardNtEnableThreadCreation:
  302. 305c.2b48: '\Device\HarddiskVolume3\Windows\System32\ntdll.dll' has no imports
  303. 305c.2b48: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ntdll.dll)
  304. 305c.2b48: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ntdll.dll
  305. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\ntdll.dll (Input=ntdll.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
  306. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe9d910000 'C:\WINDOWS\System32\ntdll.dll'
  307. 305c.2b48: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\apphelp.dll)
  308. 305c.2b48: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\apphelp.dll
  309. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\apphelp.dll (rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000000000:<flags> [calling]
  310. 305c.2b48: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\apphelp.dll [lacks WinVerifyTrust]
  311. 305c.2b48: supR3HardenedDllNotificationCallback: load 00007ffe97b50000 LB 0x0008b000 C:\WINDOWS\system32\apphelp.dll [fFlags=0x0]
  312. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\apphelp.dll [lacks WinVerifyTrust]
  313. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ntdll.dll [lacks WinVerifyTrust]
  314. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\ntdll.dll (Input=ntdll.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
  315. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe9d910000 'C:\WINDOWS\System32\ntdll.dll'
  316. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe97b50000 'C:\WINDOWS\system32\apphelp.dll'
  317. 305c.2b48: Error -104 in supR3HardenedWinReSpawn! (enmWhat=5)
  318. 305c.2b48: Error relaunching VirtualBox VM process: 5
  319. Command line: '60eaff78-4bdd-042d-2e72-669728efd737-suplib-3rdchild --comment CentOS --startvm 7b2e78fe-0cd7-4cde-b122-aa47c0974be8 --no-startvm-errormsgbox "--sup-hardening-log=C:\Users\digni\VirtualBox VMs\CentOS\Logs\VBoxHardening.log"'
  320. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'opengl32.dll'.
  321. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
  322. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'msvcp100.dll'.
  323. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcr100.dll'.
  324. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'.
  325. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'qt5guivbox.dll'.
  326. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'qt5widgetsvbox.dll'.
  327. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'qt5printsupportvbox.dll'.
  328. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'qt5openglvbox.dll'.
  329. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'user32.dll'.
  330. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'advapi32.dll'.
  331. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'shell32.dll'.
  332. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'ole32.dll'.
  333. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'oleaut32.dll'.
  334. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #15 'winmm.dll'.
  335. 305c.2b48: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.dll)
  336. 305c.2b48: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.dll
  337. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
  338. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume3\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
  339. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'winmmbase.dll'.
  340. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'msvcrt.dll'.
  341. 305c.2b48: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\winmm.dll)
  342. 305c.2b48: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\winmm.dll
  343. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
  344. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
  345. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
  346. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'combase.dll'.
  347. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #23 'rpcrt4.dll'.
  348. 305c.2b48: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\oleaut32.dll)
  349. 305c.2b48: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\oleaut32.dll
  350. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
  351. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
  352. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #23 'rpcrt4.dll'.
  353. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #48 'gdi32.dll'.
  354. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #49 'user32.dll'.
  355. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #50 'combase.dll'.
  356. 305c.2b48: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ole32.dll)
  357. 305c.2b48: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ole32.dll
  358. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
  359. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
  360. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  361. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #74 'user32.dll'.
  362. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #76 'gdi32.dll'.
  363. 305c.2b48: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\shell32.dll)
  364. 305c.2b48: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\shell32.dll
  365. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
  366. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
  367. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  368. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'sechost.dll'.
  369. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27 'rpcrt4.dll'.
  370. 305c.2b48: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\advapi32.dll)
  371. 305c.2b48: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\advapi32.dll
  372. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  373. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  374. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'win32u.dll'.
  375. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'gdi32.dll'.
  376. 305c.2b48: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\user32.dll)
  377. 305c.2b48: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\user32.dll
  378. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5openglvbox.dll'...
  379. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5openglvbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5openglvbox.dll' [rcNtRedir=0xc0150008]
  380. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'qt5widgetsvbox.dll'.
  381. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'qt5guivbox.dll'.
  382. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5corevbox.dll'.
  383. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcr100.dll'.
  384. 305c.2b48: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll)
  385. 305c.2b48: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll
  386. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5printsupportvbox.dll'...
  387. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5printsupportvbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5printsupportvbox.dll' [rcNtRedir=0xc0150008]
  388. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
  389. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
  390. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5widgetsvbox.dll'.
  391. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5guivbox.dll'.
  392. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'.
  393. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'winspool.drv'.
  394. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'comdlg32.dll'.
  395. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcr100.dll'.
  396. 305c.2b48: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll)
  397. 305c.2b48: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll
  398. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
  399. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
  400. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
  401. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
  402. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5guivbox.dll'.
  403. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5corevbox.dll'.
  404. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'shell32.dll'.
  405. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
  406. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
  407. 305c.2b48: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll)
  408. 305c.2b48: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll
  409. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
  410. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
  411. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'ole32.dll'.
  412. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'opengl32.dll'.
  413. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
  414. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
  415. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'.
  416. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
  417. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
  418. 305c.2b48: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll)
  419. 305c.2b48: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
  420. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
  421. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
  422. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
  423. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'shell32.dll'.
  424. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ole32.dll'.
  425. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'advapi32.dll'.
  426. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ws2_32.dll'.
  427. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'mpr.dll'.
  428. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcp100.dll'.
  429. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'msvcr100.dll'.
  430. 305c.2b48: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll)
  431. 305c.2b48: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
  432. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
  433. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
  434. 305c.2b48: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll)
  435. 305c.2b48: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll
  436. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
  437. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
  438. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
  439. 305c.2b48: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll)
  440. 305c.2b48: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll
  441. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
  442. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
  443. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
  444. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
  445. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ws2_32.dll'.
  446. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'rpcrt4.dll'.
  447. 305c.2b48: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll)
  448. 305c.2b48: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
  449. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
  450. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume3\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
  451. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  452. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'advapi32.dll'.
  453. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
  454. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'gdi32.dll'.
  455. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'glu32.dll'.
  456. 305c.2b48: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\opengl32.dll)
  457. 305c.2b48: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\opengl32.dll
  458. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'glu32.dll'...
  459. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'glu32.dll' -> '\Device\HarddiskVolume3\Windows\System32\glu32.dll' [rcNtRedir=0xc0150008]
  460. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  461. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
  462. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'opengl32.dll'.
  463. 305c.2b48: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\glu32.dll)
  464. 305c.2b48: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\glu32.dll
  465. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  466. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  467. 305c.2b48: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\gdi32.dll)
  468. 305c.2b48: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\gdi32.dll
  469. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  470. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  471. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  472. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
  473. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
  474. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
  475. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  476. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  477. 305c.2b48: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\msvcrt.dll)
  478. 305c.2b48: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
  479. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  480. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  481. 305c.2b48: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll)
  482. 305c.2b48: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll
  483. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
  484. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
  485. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'rpcrt4.dll'.
  486. 305c.2b48: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ws2_32.dll)
  487. 305c.2b48: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ws2_32.dll
  488. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
  489. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
  490. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
  491. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
  492. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
  493. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
  494. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
  495. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
  496. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
  497. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
  498. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
  499. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
  500. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
  501. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
  502. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
  503. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mpr.dll'...
  504. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'mpr.dll' -> '\Device\HarddiskVolume3\Windows\System32\mpr.dll' [rcNtRedir=0xc0150008]
  505. 305c.2b48: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\mpr.dll)
  506. 305c.2b48: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\mpr.dll
  507. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
  508. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
  509. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ws2_32.dll [lacks WinVerifyTrust]
  510. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
  511. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
  512. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
  513. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
  514. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
  515. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll [lacks WinVerifyTrust]
  516. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
  517. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
  518. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll [lacks WinVerifyTrust]
  519. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  520. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  521. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  522. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
  523. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
  524. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
  525. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
  526. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
  527. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
  528. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
  529. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
  530. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
  531. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  532. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  533. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  534. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  535. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  536. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  537. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
  538. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume3\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
  539. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
  540. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
  541. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
  542. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll [lacks WinVerifyTrust]
  543. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
  544. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
  545. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
  546. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
  547. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
  548. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
  549. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
  550. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
  551. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll [lacks WinVerifyTrust]
  552. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
  553. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
  554. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
  555. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
  556. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
  557. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
  558. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  559. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  560. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  561. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  562. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  563. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  564. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
  565. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
  566. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
  567. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'comdlg32.dll'...
  568. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'comdlg32.dll' -> '\Device\HarddiskVolume3\Windows\System32\comdlg32.dll' [rcNtRedir=0xc0150008]
  569. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  570. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'user32.dll'.
  571. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'shlwapi.dll'.
  572. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #37 'gdi32.dll'.
  573. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #38 'comctl32.dll'.
  574. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #39 'shell32.dll'.
  575. 305c.2b48: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\comdlg32.dll)
  576. 305c.2b48: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\comdlg32.dll
  577. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winspool.drv'...
  578. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'winspool.drv' -> '\Device\HarddiskVolume3\Windows\System32\winspool.drv' [rcNtRedir=0xc0150008]
  579. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  580. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #24 'propsys.dll'.
  581. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #29 'iphlpapi.dll'.
  582. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #38 'bcrypt.dll'.
  583. 305c.2b48: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\winspool.drv)
  584. 305c.2b48: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\winspool.drv
  585. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
  586. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
  587. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
  588. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
  589. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
  590. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
  591. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
  592. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
  593. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
  594. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  595. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  596. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  597. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  598. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  599. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  600. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
  601. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
  602. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
  603. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
  604. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
  605. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
  606. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
  607. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
  608. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
  609. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
  610. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
  611. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
  612. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  613. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  614. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  615. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
  616. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
  617. 305c.2b48: '\Device\HarddiskVolume3\Windows\System32\win32u.dll' has no imports
  618. 305c.2b48: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\win32u.dll)
  619. 305c.2b48: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\win32u.dll
  620. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  621. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  622. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  623. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'sechost.dll'...
  624. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'sechost.dll' -> '\Device\HarddiskVolume3\Windows\System32\sechost.dll' [rcNtRedir=0xc0150008]
  625. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'rpcrt4.dll'.
  626. 305c.2b48: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\sechost.dll)
  627. 305c.2b48: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\sechost.dll
  628. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  629. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  630. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  631. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  632. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  633. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  634. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  635. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  636. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  637. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  638. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  639. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  640. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
  641. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
  642. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
  643. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #45 'bcryptprimitives.dll'.
  644. 305c.2b48: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\combase.dll)
  645. 305c.2b48: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\combase.dll
  646. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  647. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  648. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  649. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  650. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  651. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  652. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  653. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  654. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  655. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  656. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  657. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  658. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
  659. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
  660. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [lacks WinVerifyTrust]
  661. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
  662. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
  663. 305c.2b48: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll)
  664. 305c.2b48: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll
  665. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  666. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  667. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  668. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmmbase.dll'...
  669. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmmbase.dll' -> '\Device\HarddiskVolume3\Windows\System32\winmmbase.dll' [rcNtRedir=0xc0150008]
  670. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  671. 305c.2b48: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\winmmbase.dll)
  672. 305c.2b48: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\winmmbase.dll
  673. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  674. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  675. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  676. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'...
  677. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008]
  678. 305c.2b48: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll)
  679. 305c.2b48: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll
  680. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  681. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  682. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  683. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  684. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  685. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  686. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcrypt.dll'...
  687. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcrypt.dll' -> '\Device\HarddiskVolume3\Windows\System32\bcrypt.dll' [rcNtRedir=0xc0150008]
  688. 305c.2b48: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\bcrypt.dll)
  689. 305c.2b48: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\bcrypt.dll
  690. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'iphlpapi.dll'...
  691. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'iphlpapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\iphlpapi.dll' [rcNtRedir=0xc0150008]
  692. 305c.2b48: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL)
  693. 305c.2b48: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL
  694. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'propsys.dll'...
  695. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'propsys.dll' -> '\Device\HarddiskVolume3\Windows\System32\propsys.dll' [rcNtRedir=0xc0150008]
  696. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  697. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #15 'oleaut32.dll'.
  698. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #31 'rpcrt4.dll'.
  699. 305c.2b48: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\propsys.dll)
  700. 305c.2b48: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\propsys.dll
  701. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  702. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  703. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  704. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
  705. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
  706. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll [lacks WinVerifyTrust]
  707. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'comctl32.dll'...
  708. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'comctl32.dll' -> '\Device\HarddiskVolume3\Windows\System32\comctl32.dll' [rcNtRedir=0x0]
  709. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'advapi32.dll'.
  710. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
  711. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
  712. 305c.2b48: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\comctl32.dll)
  713. 305c.2b48: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\comctl32.dll
  714. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  715. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  716. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  717. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shlwapi.dll'...
  718. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'shlwapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\shlwapi.dll' [rcNtRedir=0xc0150008]
  719. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'.
  720. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #44 'gdi32.dll'.
  721. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #45 'user32.dll'.
  722. 305c.2b48: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\shlwapi.dll)
  723. 305c.2b48: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\shlwapi.dll
  724. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  725. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  726. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  727. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  728. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  729. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  730. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  731. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  732. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  733. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
  734. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume3\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
  735. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
  736. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  737. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  738. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  739. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  740. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  741. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  742. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  743. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  744. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  745. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  746. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  747. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  748. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  749. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  750. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  751. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  752. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  753. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  754. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  755. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  756. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  757. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
  758. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
  759. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
  760. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  761. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  762. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  763. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
  764. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
  765. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
  766. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  767. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  768. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  769. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VirtualBox.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000a01:<flags> [calling]
  770. 305c.2b48: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.dll [lacks WinVerifyTrust]
  771. 305c.2b48: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
  772. 305c.2b48: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  773. 305c.2b48: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
  774. 305c.2b48: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
  775. 305c.2b48: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
  776. 305c.2b48: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
  777. 305c.2b48: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
  778. 305c.2b48: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll [lacks WinVerifyTrust]
  779. 305c.2b48: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll [lacks WinVerifyTrust]
  780. 305c.2b48: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll [lacks WinVerifyTrust]
  781. 305c.2b48: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\glu32.dll [lacks WinVerifyTrust]
  782. 305c.2b48: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\mpr.dll [lacks WinVerifyTrust]
  783. 305c.2b48: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\winspool.drv [lacks WinVerifyTrust]
  784. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'advapi32.dll'.
  785. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
  786. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
  787. 305c.2b48: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.17134.191_none_f957a2993090dc56\comctl32.dll)
  788. 305c.2b48: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.17134.191_none_f957a2993090dc56\comctl32.dll
  789. 305c.2b48: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmmbase.dll [lacks WinVerifyTrust]
  790. 305c.2b48: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\propsys.dll [lacks WinVerifyTrust]
  791. 305c.2b48: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL [lacks WinVerifyTrust]
  792. 305c.2b48: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
  793. 305c.2b48: supR3HardenedDllNotificationCallback: load 00007ffe9ada0000 LB 0x0009e000 C:\WINDOWS\System32\msvcrt.dll [fFlags=0x0]
  794. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  795. 305c.2b48: supR3HardenedDllNotificationCallback: load 00007ffe9d540000 LB 0x00124000 C:\WINDOWS\System32\RPCRT4.dll [fFlags=0x0]
  796. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  797. 305c.2b48: supR3HardenedDllNotificationCallback: load 00007ffe9b260000 LB 0x0005b000 C:\WINDOWS\System32\sechost.dll [fFlags=0x0]
  798. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\sechost.dll [lacks WinVerifyTrust]
  799. 305c.2b48: supR3HardenedDllNotificationCallback: load 00007ffe9b2c0000 LB 0x000a1000 C:\WINDOWS\System32\ADVAPI32.dll [fFlags=0x0]
  800. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
  801. 305c.2b48: supR3HardenedDllNotificationCallback: load 00007ffe9ad80000 LB 0x00020000 C:\WINDOWS\System32\win32u.dll [fFlags=0x0]
  802. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [lacks WinVerifyTrust]
  803. 305c.2b48: supR3HardenedDllNotificationCallback: load 00007ffe99ce0000 LB 0x000fa000 C:\WINDOWS\System32\ucrtbase.dll [fFlags=0x0]
  804. 305c.2b48: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ucrtbase.dll)
  805. 305c.2b48: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll
  806. 305c.2b48: supR3HardenedDllNotificationCallback: load 00007ffe99f40000 LB 0x0009f000 C:\WINDOWS\System32\msvcp_win.dll [fFlags=0x0]
  807. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust]
  808. 305c.2b48: supR3HardenedDllNotificationCallback: load 00007ffe99fe0000 LB 0x00192000 C:\WINDOWS\System32\gdi32full.dll [fFlags=0x0]
  809. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
  810. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #33 'gdi32.dll'.
  811. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'user32.dll'.
  812. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'win32u.dll'.
  813. 305c.2b48: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\gdi32full.dll)
  814. 305c.2b48: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\gdi32full.dll
  815. 305c.2b48: supR3HardenedDllNotificationCallback: load 00007ffe9ae40000 LB 0x00028000 C:\WINDOWS\System32\GDI32.dll [fFlags=0x0]
  816. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  817. 305c.2b48: supR3HardenedDllNotificationCallback: load 00007ffe9b0d0000 LB 0x00190000 C:\WINDOWS\System32\USER32.dll [fFlags=0x0]
  818. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  819. 305c.2b48: supR3HardenedDllNotificationCallback: load 00007ffe7a980000 LB 0x0002c000 C:\WINDOWS\SYSTEM32\GLU32.dll [fFlags=0x0]
  820. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\glu32.dll [lacks WinVerifyTrust]
  821. 305c.2b48: supR3HardenedDllNotificationCallback: load 00007ffe67cf0000 LB 0x00120000 C:\WINDOWS\SYSTEM32\OPENGL32.dll [fFlags=0x0]
  822. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
  823. 305c.2b48: supR3HardenedDllNotificationCallback: load 0000000052850000 LB 0x000d2000 C:\Program Files\Oracle\VirtualBox\MSVCR100.dll [fFlags=0x0]
  824. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
  825. 305c.2b48: supR3HardenedDllNotificationCallback: load 00000000527b0000 LB 0x00098000 C:\Program Files\Oracle\VirtualBox\MSVCP100.dll [fFlags=0x0]
  826. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
  827. 305c.2b48: supR3HardenedDllNotificationCallback: load 00007ffe9d870000 LB 0x0006c000 C:\WINDOWS\System32\WS2_32.dll [fFlags=0x0]
  828. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ws2_32.dll [lacks WinVerifyTrust]
  829. 305c.2b48: supR3HardenedDllNotificationCallback: load 00007ffe67e10000 LB 0x00590000 C:\Program Files\Oracle\VirtualBox\VBoxRT.dll [fFlags=0x0]
  830. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  831. 305c.2b48: supR3HardenedDllNotificationCallback: load 00007ffe99ef0000 LB 0x00049000 C:\WINDOWS\System32\cfgmgr32.dll [fFlags=0x0]
  832. 305c.2b48: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll)
  833. 305c.2b48: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll
  834. 305c.2b48: supR3HardenedDllNotificationCallback: load 00007ffe9ab10000 LB 0x0007a000 C:\WINDOWS\System32\bcryptPrimitives.dll [fFlags=0x0]
  835. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust]
  836. 305c.2b48: supR3HardenedDllNotificationCallback: load 00007ffe9b770000 LB 0x00323000 C:\WINDOWS\System32\combase.dll [fFlags=0x0]
  837. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [lacks WinVerifyTrust]
  838. 305c.2b48: supR3HardenedDllNotificationCallback: load 00007ffe9d490000 LB 0x000a9000 C:\WINDOWS\System32\shcore.dll [fFlags=0x0]
  839. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  840. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #37 'rpcrt4.dll'.
  841. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #44 'combase.dll'.
  842. 305c.2b48: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\SHCore.dll)
  843. 305c.2b48: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\SHCore.dll
  844. 305c.2b48: supR3HardenedDllNotificationCallback: load 00007ffe9b060000 LB 0x00051000 C:\WINDOWS\System32\shlwapi.dll [fFlags=0x0]
  845. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shlwapi.dll [lacks WinVerifyTrust]
  846. 305c.2b48: supR3HardenedDllNotificationCallback: load 00007ffe99ca0000 LB 0x00011000 C:\WINDOWS\System32\kernel.appcore.dll [fFlags=0x0]
  847. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcrt.dll'.
  848. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'rpcrt4.dll'.
  849. 305c.2b48: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll)
  850. 305c.2b48: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll
  851. 305c.2b48: supR3HardenedDllNotificationCallback: load 00007ffe99cc0000 LB 0x0001f000 C:\WINDOWS\System32\profapi.dll [fFlags=0x0]
  852. 305c.2b48: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\profapi.dll)
  853. 305c.2b48: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\profapi.dll
  854. 305c.2b48: supR3HardenedDllNotificationCallback: load 00007ffe99c20000 LB 0x0004c000 C:\WINDOWS\System32\powrprof.dll [fFlags=0x0]
  855. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'rpcrt4.dll'.
  856. 305c.2b48: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\powrprof.dll)
  857. 305c.2b48: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\powrprof.dll
  858. 305c.2b48: supR3HardenedDllNotificationCallback: load 00007ffe99c70000 LB 0x0000a000 C:\WINDOWS\System32\FLTLIB.DLL [fFlags=0x0]
  859. 305c.2b48: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\fltLib.dll)
  860. 305c.2b48: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\fltLib.dll
  861. 305c.2b48: supR3HardenedDllNotificationCallback: load 00007ffe9a400000 LB 0x0070d000 C:\WINDOWS\System32\windows.storage.dll [fFlags=0x0]
  862. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  863. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'rpcrt4.dll'.
  864. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #54 'combase.dll'.
  865. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #58 'profapi.dll'.
  866. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #81 'fltlib.dll'.
  867. 305c.2b48: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\windows.storage.dll)
  868. 305c.2b48: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\windows.storage.dll
  869. 305c.2b48: supR3HardenedDllNotificationCallback: load 00007ffe9bf00000 LB 0x01440000 C:\WINDOWS\System32\SHELL32.dll [fFlags=0x0]
  870. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll [lacks WinVerifyTrust]
  871. 305c.2b48: supR3HardenedDllNotificationCallback: load 00007ffe9ae80000 LB 0x00151000 C:\WINDOWS\System32\ole32.dll [fFlags=0x0]
  872. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll [lacks WinVerifyTrust]
  873. 305c.2b48: supR3HardenedDllNotificationCallback: load 00007ffe8c040000 LB 0x0001a000 C:\WINDOWS\SYSTEM32\MPR.dll [fFlags=0x0]
  874. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\mpr.dll [lacks WinVerifyTrust]
  875. 305c.2b48: supR3HardenedDllNotificationCallback: load 0000000052240000 LB 0x00565000 C:\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [fFlags=0x0]
  876. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
  877. 305c.2b48: supR3HardenedDllNotificationCallback: load 00007ffe62960000 LB 0x005f7000 C:\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [fFlags=0x0]
  878. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
  879. 305c.2b48: supR3HardenedDllNotificationCallback: load 0000000051cd0000 LB 0x00561000 C:\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [fFlags=0x0]
  880. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
  881. 305c.2b48: supR3HardenedDllNotificationCallback: load 00007ffe9b3c0000 LB 0x000c2000 C:\WINDOWS\System32\OLEAUT32.dll [fFlags=0x0]
  882. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
  883. 305c.2b48: supR3HardenedDllNotificationCallback: load 00007ffe98720000 LB 0x001b4000 C:\WINDOWS\SYSTEM32\PROPSYS.dll [fFlags=0x0]
  884. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\propsys.dll [lacks WinVerifyTrust]
  885. 305c.2b48: supR3HardenedDllNotificationCallback: load 00007ffe991c0000 LB 0x00038000 C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL [fFlags=0x0]
  886. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL [lacks WinVerifyTrust]
  887. 305c.2b48: supR3HardenedDllNotificationCallback: load 00007ffe99780000 LB 0x00025000 C:\WINDOWS\SYSTEM32\bcrypt.dll [fFlags=0x0]
  888. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
  889. 305c.2b48: supR3HardenedDllNotificationCallback: load 00007ffe935b0000 LB 0x00084000 C:\WINDOWS\SYSTEM32\WINSPOOL.DRV [fFlags=0x0]
  890. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\winspool.drv [lacks WinVerifyTrust]
  891. 305c.2b48: supR3HardenedDllNotificationCallback: load 00007ffe8db00000 LB 0x000a7000 C:\WINDOWS\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.17134.191_none_f957a2993090dc56\COMCTL32.dll [fFlags=0x0]
  892. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.17134.191_none_f957a2993090dc56\comctl32.dll [lacks WinVerifyTrust]
  893. 305c.2b48: supR3HardenedDllNotificationCallback: load 00007ffe9d3a0000 LB 0x000ed000 C:\WINDOWS\System32\COMDLG32.dll [fFlags=0x0]
  894. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\comdlg32.dll [lacks WinVerifyTrust]
  895. 305c.2b48: supR3HardenedDllNotificationCallback: load 00007ffe68590000 LB 0x00051000 C:\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll [fFlags=0x0]
  896. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll [lacks WinVerifyTrust]
  897. 305c.2b48: supR3HardenedDllNotificationCallback: load 0000000051c70000 LB 0x00054000 C:\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll [fFlags=0x0]
  898. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll [lacks WinVerifyTrust]
  899. 305c.2b48: supR3HardenedDllNotificationCallback: load 00007ffe96640000 LB 0x0002a000 C:\WINDOWS\SYSTEM32\WINMMBASE.dll [fFlags=0x0]
  900. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmmbase.dll [lacks WinVerifyTrust]
  901. 305c.2b48: supR3HardenedDllNotificationCallback: load 00007ffe96670000 LB 0x00023000 C:\WINDOWS\SYSTEM32\WINMM.dll [fFlags=0x0]
  902. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll [lacks WinVerifyTrust]
  903. 305c.2b48: supR3HardenedDllNotificationCallback: load 00007ffe60da0000 LB 0x00a06000 C:\Program Files\Oracle\VirtualBox\VirtualBox.dll [fFlags=0x0]
  904. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.dll [lacks WinVerifyTrust]
  905. 305c.2b48: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
  906. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
  907. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe9a180000 'api-ms-win-core-synch-l1-2-0'
  908. 305c.2b48: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
  909. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
  910. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe9a180000 'api-ms-win-core-fibers-l1-1-1'
  911. 305c.2b48: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
  912. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
  913. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe9a180000 'api-ms-win-core-fibers-l1-1-1'
  914. 305c.2b48: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
  915. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
  916. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe9a180000 'api-ms-win-core-synch-l1-2-0'
  917. 305c.2b48: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-l1-2-1) -> 0x0, fPresent=1
  918. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-l1-2-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
  919. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe9a180000 'api-ms-win-core-localization-l1-2-1'
  920. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
  921. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'fltlib.dll'...
  922. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'fltlib.dll' -> '\Device\HarddiskVolume3\Windows\System32\fltlib.dll' [rcNtRedir=0xc0150008]
  923. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\fltLib.dll [lacks WinVerifyTrust]
  924. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'profapi.dll'...
  925. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'profapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\profapi.dll' [rcNtRedir=0xc0150008]
  926. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\profapi.dll [lacks WinVerifyTrust]
  927. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
  928. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
  929. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [lacks WinVerifyTrust]
  930. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  931. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  932. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  933. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  934. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  935. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  936. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  937. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  938. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  939. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  940. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  941. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  942. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  943. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  944. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  945. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
  946. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
  947. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [lacks WinVerifyTrust]
  948. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  949. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  950. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  951. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  952. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  953. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  954. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
  955. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
  956. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [lacks WinVerifyTrust]
  957. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  958. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  959. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  960. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  961. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  962. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  963. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
  964. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
  965. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust]
  966. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  967. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  968. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  969. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  970. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  971. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  972. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
  973. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
  974. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
  975. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\kernel32.dll (Input=kernel32, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
  976. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe9b6b0000 'C:\WINDOWS\System32\kernel32.dll'
  977. 305c.2b48: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-string-l1-1-0) -> 0x0, fPresent=1
  978. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-string-l1-1-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
  979. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe9a180000 'api-ms-win-core-string-l1-1-0'
  980. 305c.2b48: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-datetime-l1-1-1) -> 0x0, fPresent=1
  981. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-datetime-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
  982. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe9a180000 'api-ms-win-core-datetime-l1-1-1'
  983. 305c.2b48: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-obsolete-l1-2-0) -> 0x0, fPresent=1
  984. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-obsolete-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
  985. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe9a180000 'api-ms-win-core-localization-obsolete-l1-2-0'
  986. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'user32.dll'.
  987. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #25 'win32u.dll'.
  988. 305c.2b48: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\imm32.dll)
  989. 305c.2b48: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\imm32.dll
  990. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
  991. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
  992. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [lacks WinVerifyTrust]
  993. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  994. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  995. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  996. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\IMM32.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
  997. 305c.2b48: supR3HardenedDllNotificationCallback: load 00007ffe9b390000 LB 0x0002d000 C:\WINDOWS\System32\IMM32.DLL [fFlags=0x0]
  998. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\imm32.dll [lacks WinVerifyTrust]
  999. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe9b390000 'C:\WINDOWS\system32\IMM32.DLL'
  1000. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
  1001. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\kernel32.dll (Input=kernel32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1002. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe9b6b0000 'C:\WINDOWS\System32\kernel32.dll'
  1003. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1004. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1005. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe67e10000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1006. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1007. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1008. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe67e10000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1009. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1010. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1011. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe67e10000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1012. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1013. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1014. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe67e10000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1015. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1016. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1017. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe67e10000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1018. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1019. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1020. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe67e10000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1021. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1022. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe67e10000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1023. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1024. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe67e10000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1025. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1026. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe67e10000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1027. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1028. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe67e10000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1029. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1030. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe67e10000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1031. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1032. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe67e10000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1033. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1034. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe67e10000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1035. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1036. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1037. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe67e10000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1038. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1039. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe67e10000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1040. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1041. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe67e10000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1042. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1043. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe67e10000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1044. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1045. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe67e10000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1046. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1047. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe67e10000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1048. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1049. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe67e10000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1050. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1051. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe67e10000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1052. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1053. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe67e10000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1054. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1055. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe67e10000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1056. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1057. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe67e10000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1058. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1059. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe67e10000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1060. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1061. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe67e10000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1062. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1063. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe67e10000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1064. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1065. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe67e10000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1066. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1067. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe67e10000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1068. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1069. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1070. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe67e10000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1071. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1072. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe67e10000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1073. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1074. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe67e10000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1075. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\imm32.dll [lacks WinVerifyTrust]
  1076. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\imm32.dll (Input=imm32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1077. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe9b390000 'C:\WINDOWS\System32\imm32.dll'
  1078. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
  1079. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\ADVAPI32.DLL (Input=ADVAPI32.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1080. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe9b2c0000 'C:\WINDOWS\System32\ADVAPI32.DLL'
  1081. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'bcryptprimitives.dll'.
  1082. 305c.2b48: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\cryptbase.dll)
  1083. 305c.2b48: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\cryptbase.dll
  1084. 305c.2b48: supR3HardenedDllNotificationCallback: load 00007ffe99610000 LB 0x0000b000 C:\WINDOWS\SYSTEM32\CRYPTBASE.DLL [fFlags=0x0]
  1085. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\cryptbase.dll [lacks WinVerifyTrust]
  1086. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe60da0000 'C:\Program Files\Oracle\VirtualBox\VirtualBox.dll'
  1087. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
  1088. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'ole32.dll'.
  1089. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
  1090. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'imm32.dll'.
  1091. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'winmm.dll'.
  1092. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'oleaut32.dll'.
  1093. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'shell32.dll'.
  1094. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'advapi32.dll'.
  1095. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'qt5guivbox.dll'.
  1096. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'qt5corevbox.dll'.
  1097. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'msvcr100.dll'.
  1098. 305c.2b48: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\platforms\qwindows.dll)
  1099. 305c.2b48: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\platforms\qwindows.dll
  1100. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
  1101. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
  1102. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
  1103. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
  1104. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
  1105. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
  1106. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
  1107. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
  1108. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
  1109. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
  1110. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
  1111. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
  1112. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
  1113. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
  1114. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll [lacks WinVerifyTrust]
  1115. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
  1116. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
  1117. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
  1118. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
  1119. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume3\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
  1120. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll [lacks WinVerifyTrust]
  1121. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'...
  1122. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume3\Windows\System32\imm32.dll' [rcNtRedir=0xc0150008]
  1123. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\imm32.dll [lacks WinVerifyTrust]
  1124. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  1125. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  1126. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  1127. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
  1128. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
  1129. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll [lacks WinVerifyTrust]
  1130. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  1131. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  1132. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  1133. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'...
  1134. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008]
  1135. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust]
  1136. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1137. 305c.2b48: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\platforms\qwindows.dll [lacks WinVerifyTrust]
  1138. 305c.2b48: supR3HardenedDllNotificationCallback: load 00007ffe67bc0000 LB 0x0012e000 C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll [fFlags=0x0]
  1139. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\platforms\qwindows.dll [lacks WinVerifyTrust]
  1140. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe67bc0000 'C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll'
  1141. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1142. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #33 'gdi32.dll'.
  1143. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'user32.dll'.
  1144. 305c.2b48: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\uxtheme.dll)
  1145. 305c.2b48: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\uxtheme.dll
  1146. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  1147. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  1148. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  1149. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  1150. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  1151. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  1152. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1153. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1154. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1155. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
  1156. 305c.2b48: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\uxtheme.dll [lacks WinVerifyTrust]
  1157. 305c.2b48: supR3HardenedDllNotificationCallback: load 00007ffe97d10000 LB 0x00098000 C:\WINDOWS\system32\uxtheme.dll [fFlags=0x0]
  1158. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\uxtheme.dll [lacks WinVerifyTrust]
  1159. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe97d10000 'C:\WINDOWS\system32\uxtheme.dll'
  1160. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  1161. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe9b0d0000 'C:\WINDOWS\system32\user32.dll'
  1162. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll [lacks WinVerifyTrust]
  1163. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1164. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe9bf00000 'C:\WINDOWS\system32\shell32.dll'
  1165. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\SHCore.dll [lacks WinVerifyTrust]
  1166. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\SHCore.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1167. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe9d490000 'C:\WINDOWS\system32\SHCore.dll'
  1168. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: error opening 'C:\WINDOWS\system32\wintab32.dll': 0 (NtPath=\??\C:\WINDOWS\system32\wintab32.dll; Input=C:\WINDOWS\system32\wintab32.dll; rcNtGetDll=0x0
  1169. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000034 'C:\WINDOWS\system32\wintab32.dll'
  1170. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1171. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #21 'win32u.dll'.
  1172. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #22 'user32.dll'.
  1173. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #23 'gdi32.dll'.
  1174. 305c.2b48: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\dwmapi.dll)
  1175. 305c.2b48: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\dwmapi.dll
  1176. 305c.2b48: supR3HardenedDllNotificationCallback: load 00007ffe97fa0000 LB 0x00029000 C:\WINDOWS\system32\dwmapi.dll [fFlags=0x0]
  1177. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dwmapi.dll [lacks WinVerifyTrust]
  1178. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll [lacks WinVerifyTrust]
  1179. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  1180. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  1181. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  1182. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  1183. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  1184. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  1185. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
  1186. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
  1187. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [lacks WinVerifyTrust]
  1188. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1189. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1190. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1191. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\winmm.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1192. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe96670000 'C:\WINDOWS\system32\winmm.dll'
  1193. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll [lacks WinVerifyTrust]
  1194. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\winmm.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1195. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe96670000 'C:\WINDOWS\system32\winmm.dll'
  1196. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll [lacks WinVerifyTrust]
  1197. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1198. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe9bf00000 'C:\WINDOWS\system32\shell32.dll'
  1199. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\uxtheme.dll [lacks WinVerifyTrust]
  1200. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1201. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe97d10000 'C:\WINDOWS\system32\uxtheme.dll'
  1202. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  1203. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\gdi32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1204. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe9ae40000 'C:\WINDOWS\system32\gdi32.dll'
  1205. 305c.2b48: supR3HardenedDllNotificationCallback: load 00007ffe9b530000 LB 0x00175000 C:\WINDOWS\System32\MSCTF.dll [fFlags=0x0]
  1206. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1207. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'oleaut32.dll'.
  1208. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #38 'user32.dll'.
  1209. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #39 'gdi32.dll'.
  1210. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #40 'imm32.dll'.
  1211. 305c.2b48: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\msctf.dll)
  1212. 305c.2b48: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msctf.dll
  1213. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  1214. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'...
  1215. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume3\Windows\System32\imm32.dll' [rcNtRedir=0xc0150008]
  1216. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\imm32.dll [lacks WinVerifyTrust]
  1217. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  1218. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  1219. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  1220. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  1221. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  1222. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  1223. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
  1224. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
  1225. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
  1226. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1227. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1228. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1229. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe9d540000 'C:\WINDOWS\System32\rpcrt4.dll'
  1230. 305c.2b48: supR3HardenedDllNotificationCallback: load 00007ffe9b490000 LB 0x000a0000 C:\WINDOWS\System32\clbcatq.dll [fFlags=0x0]
  1231. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1232. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #28 'rpcrt4.dll'.
  1233. 305c.2b48: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\clbcatq.dll)
  1234. 305c.2b48: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\clbcatq.dll
  1235. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1236. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'shcore.dll'.
  1237. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #29 'combase.dll'.
  1238. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'd3d11.dll'.
  1239. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'dcomp.dll'.
  1240. 305c.2b48: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\DataExchange.dll)
  1241. 305c.2b48: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\DataExchange.dll
  1242. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dcomp.dll'...
  1243. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'dcomp.dll' -> '\Device\HarddiskVolume3\Windows\System32\dcomp.dll' [rcNtRedir=0xc0150008]
  1244. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'win32u.dll'.
  1245. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp_win.dll'.
  1246. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'oleaut32.dll'.
  1247. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #37 'dxgi.dll'.
  1248. 305c.2b48: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\dcomp.dll)
  1249. 305c.2b48: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\dcomp.dll
  1250. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'd3d11.dll'...
  1251. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'd3d11.dll' -> '\Device\HarddiskVolume3\Windows\System32\d3d11.dll' [rcNtRedir=0xc0150008]
  1252. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1253. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'dxgi.dll'.
  1254. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'win32u.dll'.
  1255. 305c.2b48: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\d3d11.dll)
  1256. 305c.2b48: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\d3d11.dll
  1257. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
  1258. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
  1259. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [lacks WinVerifyTrust]
  1260. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shcore.dll'...
  1261. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'shcore.dll' -> '\Device\HarddiskVolume3\Windows\System32\shcore.dll' [rcNtRedir=0xc0150008]
  1262. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\SHCore.dll [lacks WinVerifyTrust]
  1263. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1264. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1265. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1266. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  1267. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  1268. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  1269. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1270. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1271. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1272. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
  1273. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
  1274. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [lacks WinVerifyTrust]
  1275. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dxgi.dll'...
  1276. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'dxgi.dll' -> '\Device\HarddiskVolume3\Windows\System32\dxgi.dll' [rcNtRedir=0xc0150008]
  1277. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1278. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'win32u.dll'.
  1279. 305c.2b48: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\dxgi.dll)
  1280. 305c.2b48: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\dxgi.dll
  1281. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1282. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1283. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1284. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dxgi.dll'...
  1285. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'dxgi.dll' -> '\Device\HarddiskVolume3\Windows\System32\dxgi.dll' [rcNtRedir=0xc0150008]
  1286. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dxgi.dll [lacks WinVerifyTrust]
  1287. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
  1288. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
  1289. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
  1290. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
  1291. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
  1292. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust]
  1293. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
  1294. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
  1295. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [lacks WinVerifyTrust]
  1296. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
  1297. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
  1298. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [lacks WinVerifyTrust]
  1299. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1300. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1301. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1302. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\dataexchange.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
  1303. 305c.2b48: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\DataExchange.dll [lacks WinVerifyTrust]
  1304. 305c.2b48: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\d3d11.dll [lacks WinVerifyTrust]
  1305. 305c.2b48: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dcomp.dll [lacks WinVerifyTrust]
  1306. 305c.2b48: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dxgi.dll [lacks WinVerifyTrust]
  1307. 305c.2b48: supR3HardenedDllNotificationCallback: load 00007ffe989e0000 LB 0x000bb000 C:\WINDOWS\system32\dxgi.dll [fFlags=0x0]
  1308. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dxgi.dll [lacks WinVerifyTrust]
  1309. 305c.2b48: supR3HardenedDllNotificationCallback: load 00007ffe96b90000 LB 0x0030b000 C:\WINDOWS\system32\d3d11.dll [fFlags=0x0]
  1310. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\d3d11.dll [lacks WinVerifyTrust]
  1311. 305c.2b48: supR3HardenedDllNotificationCallback: load 00007ffe97470000 LB 0x0019c000 C:\WINDOWS\system32\dcomp.dll [fFlags=0x0]
  1312. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dcomp.dll [lacks WinVerifyTrust]
  1313. 305c.2b48: supR3HardenedDllNotificationCallback: load 00007ffe79270000 LB 0x00058000 C:\WINDOWS\system32\dataexchange.dll [fFlags=0x0]
  1314. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\DataExchange.dll [lacks WinVerifyTrust]
  1315. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  1316. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe9ae40000 'C:\WINDOWS\System32\gdi32.dll'
  1317. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe79270000 'C:\WINDOWS\system32\dataexchange.dll'
  1318. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1319. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'rmclient.dll'.
  1320. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #30 'rpcrt4.dll'.
  1321. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #44 'combase.dll'.
  1322. 305c.2b48: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll)
  1323. 305c.2b48: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll
  1324. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1325. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'rpcrt4.dll'.
  1326. 305c.2b48: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\rmclient.dll)
  1327. 305c.2b48: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\rmclient.dll
  1328. 305c.2b48: supR3HardenedDllNotificationCallback: load 00007ffe98080000 LB 0x00021000 C:\WINDOWS\system32\RMCLIENT.dll [fFlags=0x0]
  1329. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rmclient.dll [lacks WinVerifyTrust]
  1330. 305c.2b48: supR3HardenedDllNotificationCallback: load 00007ffe98130000 LB 0x001b8000 C:\WINDOWS\system32\twinapi.appcore.dll [fFlags=0x0]
  1331. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll [lacks WinVerifyTrust]
  1332. 305c.2b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #16 'rpcrt4.dll'.
  1333. 305c.2b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'devobj.dll'.
  1334. 305c.2b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'propsys.dll'.
  1335. 305c.2b28: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll)
  1336. 305c.2b28: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll
  1337. 305c.2b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #17 'cfgmgr32.dll'.
  1338. 305c.2b28: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\devobj.dll)
  1339. 305c.2b28: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\devobj.dll
  1340. 305c.2b28: supR3HardenedDllNotificationCallback: load 00007ffe99a30000 LB 0x00027000 C:\WINDOWS\SYSTEM32\DEVOBJ.dll [fFlags=0x0]
  1341. 305c.2b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\devobj.dll [lacks WinVerifyTrust]
  1342. 305c.2b28: supR3HardenedDllNotificationCallback: load 00007ffe8d550000 LB 0x00076000 C:\WINDOWS\SYSTEM32\MMDevAPI.DLL [fFlags=0x0]
  1343. 305c.2b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
  1344. 305c.2b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1345. 305c.2b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'mmdevapi.dll'.
  1346. 305c.2b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27 'ksuser.dll'.
  1347. 305c.2b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #28 'avrt.dll'.
  1348. 305c.2b28: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\wdmaud.drv)
  1349. 305c.2b28: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\wdmaud.drv
  1350. 305c.2b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'avrt.dll'...
  1351. 305c.2b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'avrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\avrt.dll' [rcNtRedir=0xc0150008]
  1352. 305c.2b28: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\avrt.dll)
  1353. 305c.2b28: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\avrt.dll
  1354. 305c.2b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ksuser.dll'...
  1355. 305c.2b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'ksuser.dll' -> '\Device\HarddiskVolume3\Windows\System32\ksuser.dll' [rcNtRedir=0xc0150008]
  1356. 305c.2b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1357. 305c.2b28: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ksuser.dll)
  1358. 305c.2b28: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ksuser.dll
  1359. 305c.2b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mmdevapi.dll'...
  1360. 305c.2b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'mmdevapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\mmdevapi.dll' [rcNtRedir=0xc0150008]
  1361. 305c.2b28: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
  1362. 305c.2b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1363. 305c.2b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1364. 305c.2b28: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1365. 305c.2b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'cfgmgr32.dll'...
  1366. 305c.2b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'cfgmgr32.dll' -> '\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll' [rcNtRedir=0xc0150008]
  1367. 305c.2b28: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll [lacks WinVerifyTrust]
  1368. 305c.2b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'propsys.dll'...
  1369. 305c.2b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'propsys.dll' -> '\Device\HarddiskVolume3\Windows\System32\propsys.dll' [rcNtRedir=0xc0150008]
  1370. 305c.2b28: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\propsys.dll [lacks WinVerifyTrust]
  1371. 305c.2b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'devobj.dll'...
  1372. 305c.2b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'devobj.dll' -> '\Device\HarddiskVolume3\Windows\System32\devobj.dll' [rcNtRedir=0xc0150008]
  1373. 305c.2b28: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\devobj.dll [lacks WinVerifyTrust]
  1374. 305c.2b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  1375. 305c.2b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  1376. 305c.2b28: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  1377. 305c.2b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  1378. 305c.2b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  1379. 305c.2b28: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  1380. 305c.2b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1381. 305c.2b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1382. 305c.2b28: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1383. 305c.2b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
  1384. 305c.2b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
  1385. 305c.2b28: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [lacks WinVerifyTrust]
  1386. 305c.2b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  1387. 305c.2b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  1388. 305c.2b28: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  1389. 305c.2b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rmclient.dll'...
  1390. 305c.2b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'rmclient.dll' -> '\Device\HarddiskVolume3\Windows\System32\rmclient.dll' [rcNtRedir=0xc0150008]
  1391. 305c.2b28: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rmclient.dll [lacks WinVerifyTrust]
  1392. 305c.2b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1393. 305c.2b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1394. 305c.2b28: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1395. 305c.2b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1396. 305c.2b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1397. 305c.2b28: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1398. 305c.2b28: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
  1399. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1400. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #15 'coreuicomponents.dll'.
  1401. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #16 'coremessaging.dll'.
  1402. 305c.2b48: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\TextInputFramework.dll)
  1403. 305c.2b48: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\TextInputFramework.dll
  1404. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1405. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'coremessaging.dll'.
  1406. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #48 'shcore.dll'.
  1407. 305c.2b48: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\CoreUIComponents.dll)
  1408. 305c.2b48: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\CoreUIComponents.dll
  1409. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1410. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #24 'rpcrt4.dll'.
  1411. 305c.2b48: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll)
  1412. 305c.2b48: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll
  1413. 305c.2b48: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ntmarta.dll)
  1414. 305c.2b48: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ntmarta.dll
  1415. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'combase.dll'.
  1416. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #22 'rpcrt4.dll'.
  1417. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #29 'bcryptprimitives.dll'.
  1418. 305c.2b48: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\WinTypes.dll)
  1419. 305c.2b48: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\WinTypes.dll
  1420. 305c.2b48: supR3HardenedDllNotificationCallback: load 00007ffe98d10000 LB 0x00031000 C:\WINDOWS\SYSTEM32\ntmarta.dll [fFlags=0x0]
  1421. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ntmarta.dll [lacks WinVerifyTrust]
  1422. 305c.2b48: supR3HardenedDllNotificationCallback: load 00007ffe97950000 LB 0x000da000 C:\WINDOWS\System32\CoreMessaging.dll [fFlags=0x0]
  1423. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll [lacks WinVerifyTrust]
  1424. 305c.2b48: supR3HardenedDllNotificationCallback: load 00007ffe959a0000 LB 0x0014d000 C:\WINDOWS\SYSTEM32\wintypes.dll [fFlags=0x0]
  1425. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\WinTypes.dll [lacks WinVerifyTrust]
  1426. 305c.2b48: supR3HardenedDllNotificationCallback: load 00007ffe950b0000 LB 0x0031e000 C:\WINDOWS\System32\CoreUIComponents.dll [fFlags=0x0]
  1427. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\CoreUIComponents.dll [lacks WinVerifyTrust]
  1428. 305c.2b48: supR3HardenedDllNotificationCallback: load 00007ffe88b10000 LB 0x00097000 C:\WINDOWS\System32\TextInputFramework.dll [fFlags=0x0]
  1429. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\TextInputFramework.dll [lacks WinVerifyTrust]
  1430. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
  1431. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'...
  1432. 305c.2b28: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
  1433. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008]
  1434. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust]
  1435. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  1436. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  1437. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  1438. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
  1439. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
  1440. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [lacks WinVerifyTrust]
  1441. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  1442. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  1443. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  1444. 305c.2b28: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ksuser.dll [lacks WinVerifyTrust]
  1445. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1446. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1447. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1448. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shcore.dll'...
  1449. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'shcore.dll' -> '\Device\HarddiskVolume3\Windows\System32\shcore.dll' [rcNtRedir=0xc0150008]
  1450. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\SHCore.dll [lacks WinVerifyTrust]
  1451. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coremessaging.dll'...
  1452. 305c.2b28: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\avrt.dll [lacks WinVerifyTrust]
  1453. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'coremessaging.dll' -> '\Device\HarddiskVolume3\Windows\System32\coremessaging.dll' [rcNtRedir=0xc0150008]
  1454. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll [lacks WinVerifyTrust]
  1455. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1456. 305c.2b28: supR3HardenedDllNotificationCallback: load 00007ffe94290000 LB 0x00009000 C:\WINDOWS\SYSTEM32\ksuser.dll [fFlags=0x0]
  1457. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1458. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1459. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coremessaging.dll'...
  1460. 305c.2b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ksuser.dll [lacks WinVerifyTrust]
  1461. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'coremessaging.dll' -> '\Device\HarddiskVolume3\Windows\System32\coremessaging.dll' [rcNtRedir=0xc0150008]
  1462. 305c.2b28: supR3HardenedDllNotificationCallback: load 00007ffe95760000 LB 0x0000a000 C:\WINDOWS\SYSTEM32\AVRT.dll [fFlags=0x0]
  1463. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll [lacks WinVerifyTrust]
  1464. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coreuicomponents.dll'...
  1465. 305c.2b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\avrt.dll [lacks WinVerifyTrust]
  1466. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'coreuicomponents.dll' -> '\Device\HarddiskVolume3\Windows\System32\coreuicomponents.dll' [rcNtRedir=0xc0150008]
  1467. 305c.2b28: supR3HardenedDllNotificationCallback: load 00007ffe86270000 LB 0x00044000 C:\WINDOWS\System32\wdmaud.drv [fFlags=0x0]
  1468. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\CoreUIComponents.dll [lacks WinVerifyTrust]
  1469. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1470. 305c.2b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
  1471. 305c.2b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe86270000 'C:\WINDOWS\System32\wdmaud.drv'
  1472. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1473. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1474. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\OLEAUT32.DLL (Input=OLEAUT32.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1475. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe9b3c0000 'C:\WINDOWS\System32\OLEAUT32.DLL'
  1476. 305c.2b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
  1477. 305c.2b28: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
  1478. 305c.2b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe86270000 'C:\WINDOWS\System32\wdmaud.drv'
  1479. 305c.2b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
  1480. 305c.2b28: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\MMDEVAPI.DLL (Input=MMDEVAPI.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1481. 305c.2b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe8d550000 'C:\WINDOWS\System32\MMDEVAPI.DLL'
  1482. 305c.2b48: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(ext-ms-win-rtcore-ntuser-window-ext-l1-1-0.dll) -> 0x0, fPresent=1
  1483. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: pName=ext-ms-win-rtcore-ntuser-window-ext-l1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1484. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe9b0d0000 'ext-ms-win-rtcore-ntuser-window-ext-l1-1-0.dll'
  1485. 305c.2b48: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(ext-ms-win-rtcore-ntuser-integration-l1-1-0.dll) -> 0x0, fPresent=1
  1486. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: pName=ext-ms-win-rtcore-ntuser-integration-l1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1487. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe9b0d0000 'ext-ms-win-rtcore-ntuser-integration-l1-1-0.dll'
  1488. 305c.2b48: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-com-l1-1-0.dll) -> 0x0, fPresent=1
  1489. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-com-l1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1490. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe9b770000 'api-ms-win-core-com-l1-1-0.dll'
  1491. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msctf.dll [lacks WinVerifyTrust]
  1492. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\MSCTF.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
  1493. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe9b530000 'C:\WINDOWS\System32\MSCTF.dll'
  1494. 305c.2b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
  1495. 305c.2b28: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
  1496. 305c.2b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe86270000 'C:\WINDOWS\System32\wdmaud.drv'
  1497. 305c.2b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
  1498. 305c.2b28: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
  1499. 305c.2b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe86270000 'C:\WINDOWS\System32\wdmaud.drv'
  1500. 305c.2b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
  1501. 305c.2b28: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
  1502. 305c.2b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe86270000 'C:\WINDOWS\System32\wdmaud.drv'
  1503. 305c.2b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
  1504. 305c.2b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'rpcrt4.dll'.
  1505. 305c.2b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'oleaut32.dll'.
  1506. 305c.2b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #55 'mmdevapi.dll'.
  1507. 305c.2b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #56 'avrt.dll'.
  1508. 305c.2b28: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\AudioSes.dll)
  1509. 305c.2b28: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\AudioSes.dll
  1510. 305c.2b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'avrt.dll'...
  1511. 305c.2b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'avrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\avrt.dll' [rcNtRedir=0xc0150008]
  1512. 305c.2b28: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\avrt.dll [lacks WinVerifyTrust]
  1513. 305c.2b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mmdevapi.dll'...
  1514. 305c.2b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'mmdevapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\mmdevapi.dll' [rcNtRedir=0xc0150008]
  1515. 305c.2b28: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
  1516. 305c.2b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
  1517. 305c.2b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
  1518. 305c.2b28: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
  1519. 305c.2b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  1520. 305c.2b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  1521. 305c.2b28: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  1522. 305c.2b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
  1523. 305c.2b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
  1524. 305c.2b28: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust]
  1525. 305c.2b28: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\AUDIOSES.DLL (Input=AUDIOSES.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1526. 305c.2b28: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\AudioSes.dll [lacks WinVerifyTrust]
  1527. 305c.2b28: supR3HardenedDllNotificationCallback: load 00007ffe69e80000 LB 0x0012c000 C:\WINDOWS\System32\AUDIOSES.DLL [fFlags=0x0]
  1528. 305c.2b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\AudioSes.dll [lacks WinVerifyTrust]
  1529. 305c.2b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe69e80000 'C:\WINDOWS\System32\AUDIOSES.DLL'
  1530. 305c.2b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
  1531. 305c.2b28: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
  1532. 305c.2b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe86270000 'C:\WINDOWS\System32\wdmaud.drv'
  1533. 305c.2b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
  1534. 305c.2b28: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
  1535. 305c.2b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe86270000 'C:\WINDOWS\System32\wdmaud.drv'
  1536. 305c.2b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
  1537. 305c.2b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe86270000 'C:\WINDOWS\System32\wdmaud.drv'
  1538. 305c.2b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
  1539. 305c.2b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe86270000 'C:\WINDOWS\System32\wdmaud.drv'
  1540. 305c.2b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
  1541. 305c.2b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe86270000 'C:\WINDOWS\System32\wdmaud.drv'
  1542. 305c.2b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
  1543. 305c.2b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe86270000 'C:\WINDOWS\System32\wdmaud.drv'
  1544. 305c.2b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1545. 305c.2b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'mmdevapi.dll'.
  1546. 305c.2b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'msacm32.dll'.
  1547. 305c.2b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'winmmbase.dll'.
  1548. 305c.2b28: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\msacm32.drv)
  1549. 305c.2b28: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msacm32.drv
  1550. 305c.2b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmmbase.dll'...
  1551. 305c.2b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmmbase.dll' -> '\Device\HarddiskVolume3\Windows\System32\winmmbase.dll' [rcNtRedir=0xc0150008]
  1552. 305c.2b28: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmmbase.dll [lacks WinVerifyTrust]
  1553. 305c.2b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msacm32.dll'...
  1554. 305c.2b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'msacm32.dll' -> '\Device\HarddiskVolume3\Windows\System32\msacm32.dll' [rcNtRedir=0xc0150008]
  1555. 305c.2b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1556. 305c.2b28: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\msacm32.dll)
  1557. 305c.2b28: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msacm32.dll
  1558. 305c.2b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mmdevapi.dll'...
  1559. 305c.2b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'mmdevapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\mmdevapi.dll' [rcNtRedir=0xc0150008]
  1560. 305c.2b28: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
  1561. 305c.2b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1562. 305c.2b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1563. 305c.2b28: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1564. 305c.2b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1565. 305c.2b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1566. 305c.2b28: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1567. 305c.2b28: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
  1568. 305c.2b28: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
  1569. 305c.2b28: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msacm32.dll [lacks WinVerifyTrust]
  1570. 305c.2b28: supR3HardenedDllNotificationCallback: load 00007ffe8df00000 LB 0x0001c000 C:\WINDOWS\SYSTEM32\MSACM32.dll [fFlags=0x0]
  1571. 305c.2b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msacm32.dll [lacks WinVerifyTrust]
  1572. 305c.2b28: supR3HardenedDllNotificationCallback: load 00007ffe94280000 LB 0x0000d000 C:\WINDOWS\System32\msacm32.drv [fFlags=0x0]
  1573. 305c.2b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
  1574. 305c.2b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe94280000 'C:\WINDOWS\System32\msacm32.drv'
  1575. 305c.2b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
  1576. 305c.2b28: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
  1577. 305c.2b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe94280000 'C:\WINDOWS\System32\msacm32.drv'
  1578. 305c.2b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
  1579. 305c.2b28: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
  1580. 305c.2b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe94280000 'C:\WINDOWS\System32\msacm32.drv'
  1581. 305c.2b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
  1582. 305c.2b28: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
  1583. 305c.2b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe94280000 'C:\WINDOWS\System32\msacm32.drv'
  1584. 305c.2b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
  1585. 305c.2b28: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
  1586. 305c.2b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe94280000 'C:\WINDOWS\System32\msacm32.drv'
  1587. 305c.2b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
  1588. 305c.2b28: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
  1589. 305c.2b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe94280000 'C:\WINDOWS\System32\msacm32.drv'
  1590. 305c.2b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
  1591. 305c.2b28: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
  1592. 305c.2b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe94280000 'C:\WINDOWS\System32\msacm32.drv'
  1593. 305c.2b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
  1594. 305c.2b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe94280000 'C:\WINDOWS\System32\msacm32.drv'
  1595. 305c.2b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
  1596. 305c.2b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe94280000 'C:\WINDOWS\System32\msacm32.drv'
  1597. 305c.2b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
  1598. 305c.2b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe94280000 'C:\WINDOWS\System32\msacm32.drv'
  1599. 305c.2b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1600. 305c.2b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'winmm.dll'.
  1601. 305c.2b28: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\midimap.dll)
  1602. 305c.2b28: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\midimap.dll
  1603. 305c.2b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
  1604. 305c.2b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume3\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
  1605. 305c.2b28: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll [lacks WinVerifyTrust]
  1606. 305c.2b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1607. 305c.2b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1608. 305c.2b28: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1609. 305c.2b28: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
  1610. 305c.2b28: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\midimap.dll [lacks WinVerifyTrust]
  1611. 305c.2b28: supR3HardenedDllNotificationCallback: load 00007ffe93b20000 LB 0x0000a000 C:\WINDOWS\System32\midimap.dll [fFlags=0x0]
  1612. 305c.2b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\midimap.dll [lacks WinVerifyTrust]
  1613. 305c.2b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe93b20000 'C:\WINDOWS\System32\midimap.dll'
  1614. 305c.2b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\midimap.dll [lacks WinVerifyTrust]
  1615. 305c.2b28: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
  1616. 305c.2b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe93b20000 'C:\WINDOWS\System32\midimap.dll'
  1617. 305c.2b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\midimap.dll [lacks WinVerifyTrust]
  1618. 305c.2b28: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
  1619. 305c.2b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe93b20000 'C:\WINDOWS\System32\midimap.dll'
  1620. 305c.2b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\midimap.dll [lacks WinVerifyTrust]
  1621. 305c.2b28: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
  1622. 305c.2b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe93b20000 'C:\WINDOWS\System32\midimap.dll'
  1623. 305c.3fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
  1624. 305c.3fb4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\MMDevApi.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
  1625. 305c.3fb4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe8d550000 'C:\WINDOWS\System32\MMDevApi.dll'
  1626. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll [lacks WinVerifyTrust]
  1627. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\ole32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
  1628. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe9ae80000 'C:\WINDOWS\system32\ole32.dll'
  1629. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1630. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
  1631. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'gdi32.dll'.
  1632. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'advapi32.dll'.
  1633. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ole32.dll'.
  1634. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'oleaut32.dll'.
  1635. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'shell32.dll'.
  1636. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'iertutil.dll'.
  1637. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'oleacc.dll'.
  1638. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'version.dll'.
  1639. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'rpcrt4.dll'.
  1640. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'shlwapi.dll'.
  1641. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'propsys.dll'.
  1642. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #15 'profapi.dll'.
  1643. 305c.2b48: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\IME\IMEJP\IMJPTIP.DLL)
  1644. 305c.2b48: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\IME\IMEJP\IMJPTIP.DLL
  1645. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'profapi.dll'...
  1646. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'profapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\profapi.dll' [rcNtRedir=0xc0150008]
  1647. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\profapi.dll [lacks WinVerifyTrust]
  1648. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'propsys.dll'...
  1649. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'propsys.dll' -> '\Device\HarddiskVolume3\Windows\System32\propsys.dll' [rcNtRedir=0xc0150008]
  1650. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\propsys.dll [lacks WinVerifyTrust]
  1651. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shlwapi.dll'...
  1652. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'shlwapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\shlwapi.dll' [rcNtRedir=0xc0150008]
  1653. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shlwapi.dll [lacks WinVerifyTrust]
  1654. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  1655. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  1656. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  1657. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'version.dll'...
  1658. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'version.dll' -> '\Device\HarddiskVolume3\Windows\System32\version.dll' [rcNtRedir=0xc0150008]
  1659. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1660. 305c.2b48: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\version.dll)
  1661. 305c.2b48: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\version.dll
  1662. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleacc.dll'...
  1663. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleacc.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleacc.dll' [rcNtRedir=0xc0150008]
  1664. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'rpcrt4.dll'.
  1665. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #30 'user32.dll'.
  1666. 305c.2b48: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\oleacc.dll)
  1667. 305c.2b48: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\oleacc.dll
  1668. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'iertutil.dll'...
  1669. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'iertutil.dll' -> '\Device\HarddiskVolume3\Windows\System32\iertutil.dll' [rcNtRedir=0xc0150008]
  1670. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1671. 305c.2b48: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\iertutil.dll)
  1672. 305c.2b48: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\iertutil.dll
  1673. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
  1674. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
  1675. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll [lacks WinVerifyTrust]
  1676. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
  1677. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
  1678. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
  1679. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
  1680. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
  1681. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll [lacks WinVerifyTrust]
  1682. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
  1683. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
  1684. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
  1685. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  1686. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  1687. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  1688. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  1689. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  1690. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  1691. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1692. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1693. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1694. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1695. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1696. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1697. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  1698. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  1699. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  1700. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  1701. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  1702. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  1703. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1704. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1705. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1706. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\IME\IMEJP\imjptip.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
  1707. 305c.2b48: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IME\IMEJP\IMJPTIP.DLL [lacks WinVerifyTrust]
  1708. 305c.2b48: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\iertutil.dll [lacks WinVerifyTrust]
  1709. 305c.2b48: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\oleacc.dll [lacks WinVerifyTrust]
  1710. 305c.2b48: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\version.dll [lacks WinVerifyTrust]
  1711. 305c.2b48: supR3HardenedDllNotificationCallback: load 00007ffe8b4f0000 LB 0x002a2000 C:\WINDOWS\SYSTEM32\iertutil.dll [fFlags=0x0]
  1712. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\iertutil.dll [lacks WinVerifyTrust]
  1713. 305c.2b48: supR3HardenedDllNotificationCallback: load 00007ffe8da90000 LB 0x0006b000 C:\WINDOWS\SYSTEM32\OLEACC.dll [fFlags=0x0]
  1714. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\oleacc.dll [lacks WinVerifyTrust]
  1715. 305c.2b48: supR3HardenedDllNotificationCallback: load 00007ffe942e0000 LB 0x0000a000 C:\WINDOWS\SYSTEM32\VERSION.dll [fFlags=0x0]
  1716. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\version.dll [lacks WinVerifyTrust]
  1717. 305c.2b48: supR3HardenedDllNotificationCallback: load 00007ffe740e0000 LB 0x002c2000 C:\Windows\System32\IME\IMEJP\imjptip.dll [fFlags=0x0]
  1718. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IME\IMEJP\IMJPTIP.DLL [lacks WinVerifyTrust]
  1719. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll [lacks WinVerifyTrust]
  1720. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\ole32.dll (Input=ole32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1721. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe9ae80000 'C:\WINDOWS\System32\ole32.dll'
  1722. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe740e0000 'C:\Windows\System32\IME\IMEJP\imjptip.dll'
  1723. 305c.2b48: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe [lacks WinVerifyTrust]
  1724. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1725. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'oleaut32.dll'.
  1726. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #15 'rpcrt4.dll'.
  1727. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #49 'bcrypt.dll'.
  1728. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #50 'crypt32.dll'.
  1729. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #55 'profapi.dll'.
  1730. 305c.2b48: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\IME\IMEJP\IMJPAPI.DLL)
  1731. 305c.2b48: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\IME\IMEJP\IMJPAPI.DLL
  1732. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'profapi.dll'...
  1733. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'profapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\profapi.dll' [rcNtRedir=0xc0150008]
  1734. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\profapi.dll [lacks WinVerifyTrust]
  1735. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'crypt32.dll'...
  1736. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'crypt32.dll' -> '\Device\HarddiskVolume3\Windows\System32\crypt32.dll' [rcNtRedir=0xc0150008]
  1737. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'msasn1.dll'.
  1738. 305c.2b48: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\crypt32.dll)
  1739. 305c.2b48: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\crypt32.dll
  1740. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcrypt.dll'...
  1741. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcrypt.dll' -> '\Device\HarddiskVolume3\Windows\System32\bcrypt.dll' [rcNtRedir=0xc0150008]
  1742. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
  1743. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  1744. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  1745. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  1746. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
  1747. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
  1748. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
  1749. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1750. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1751. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1752. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msasn1.dll'...
  1753. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'msasn1.dll' -> '\Device\HarddiskVolume3\Windows\System32\msasn1.dll' [rcNtRedir=0xc0150008]
  1754. 305c.2b48: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\msasn1.dll)
  1755. 305c.2b48: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msasn1.dll
  1756. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\IME\IMEJP\imjpapi.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1757. 305c.2b48: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IME\IMEJP\IMJPAPI.DLL [lacks WinVerifyTrust]
  1758. 305c.2b48: supR3HardenedDllNotificationCallback: load 00007ffe99c80000 LB 0x00012000 C:\WINDOWS\System32\MSASN1.dll [fFlags=0x0]
  1759. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msasn1.dll [lacks WinVerifyTrust]
  1760. 305c.2b48: supR3HardenedDllNotificationCallback: load 00007ffe9ab90000 LB 0x001e2000 C:\WINDOWS\System32\CRYPT32.dll [fFlags=0x0]
  1761. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
  1762. 305c.2b48: supR3HardenedDllNotificationCallback: load 00007ffe73ec0000 LB 0x0021d000 C:\Windows\System32\IME\IMEJP\imjpapi.dll [fFlags=0x0]
  1763. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IME\IMEJP\IMJPAPI.DLL [lacks WinVerifyTrust]
  1764. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll [lacks WinVerifyTrust]
  1765. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\ole32.dll (Input=ole32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1766. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe9ae80000 'C:\WINDOWS\System32\ole32.dll'
  1767. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe73ec0000 'C:\Windows\System32\IME\IMEJP\imjpapi.dll'
  1768. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1769. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'oleaut32.dll'.
  1770. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'rpcrt4.dll'.
  1771. 305c.2b48: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\IME\shared\IMJKAPI.DLL)
  1772. 305c.2b48: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\IME\shared\IMJKAPI.DLL
  1773. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  1774. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  1775. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  1776. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
  1777. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
  1778. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
  1779. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1780. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1781. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1782. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\IME\shared\imjkapi.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1783. 305c.2b48: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IME\shared\IMJKAPI.DLL [lacks WinVerifyTrust]
  1784. 305c.2b48: supR3HardenedDllNotificationCallback: load 00007ffe887f0000 LB 0x00040000 C:\Windows\System32\IME\shared\imjkapi.dll [fFlags=0x0]
  1785. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IME\shared\IMJKAPI.DLL [lacks WinVerifyTrust]
  1786. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll [lacks WinVerifyTrust]
  1787. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe9ae80000 'C:\WINDOWS\System32\ole32.dll'
  1788. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe887f0000 'C:\Windows\System32\IME\shared\imjkapi.dll'
  1789. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp110_win.dll'.
  1790. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'.
  1791. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'rpcrt4.dll'.
  1792. 305c.2b48: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\policymanager.dll)
  1793. 305c.2b48: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\policymanager.dll
  1794. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1795. 305c.2b48: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\msvcp110_win.dll)
  1796. 305c.2b48: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msvcp110_win.dll
  1797. 305c.2b48: supR3HardenedDllNotificationCallback: load 00007ffe964e0000 LB 0x00091000 C:\WINDOWS\SYSTEM32\msvcp110_win.dll [fFlags=0x0]
  1798. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp110_win.dll [lacks WinVerifyTrust]
  1799. 305c.2b48: supR3HardenedDllNotificationCallback: load 00007ffe96070000 LB 0x0007f000 C:\WINDOWS\SYSTEM32\policymanager.dll [fFlags=0x0]
  1800. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\policymanager.dll [lacks WinVerifyTrust]
  1801. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1802. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'oleaut32.dll'.
  1803. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #37 'profapi.dll'.
  1804. 305c.2b48: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\IME\IMEJP\IMJPPRED.DLL)
  1805. 305c.2b48: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\IME\IMEJP\IMJPPRED.DLL
  1806. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'profapi.dll'...
  1807. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'profapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\profapi.dll' [rcNtRedir=0xc0150008]
  1808. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\profapi.dll [lacks WinVerifyTrust]
  1809. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
  1810. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
  1811. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
  1812. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1813. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1814. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1815. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1816. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1817. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1818. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  1819. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  1820. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  1821. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1822. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1823. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1824. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp110_win.dll'...
  1825. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp110_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp110_win.dll' [rcNtRedir=0xc0150008]
  1826. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp110_win.dll [lacks WinVerifyTrust]
  1827. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\IME\IMEJP\imjppred.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1828. 305c.2b48: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IME\IMEJP\IMJPPRED.DLL [lacks WinVerifyTrust]
  1829. 305c.2b48: supR3HardenedDllNotificationCallback: load 00007ffe752c0000 LB 0x00091000 C:\Windows\System32\IME\IMEJP\imjppred.dll [fFlags=0x0]
  1830. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IME\IMEJP\IMJPPRED.DLL [lacks WinVerifyTrust]
  1831. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll [lacks WinVerifyTrust]
  1832. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe9ae80000 'C:\WINDOWS\System32\ole32.dll'
  1833. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe752c0000 'C:\Windows\System32\IME\IMEJP\imjppred.dll'
  1834. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msctf.dll [lacks WinVerifyTrust]
  1835. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\MSCTF.DLL (Input=MSCTF.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1836. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe9b530000 'C:\WINDOWS\System32\MSCTF.DLL'
  1837. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1838. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'advapi32.dll'.
  1839. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
  1840. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'ole32.dll'.
  1841. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'oleaut32.dll'.
  1842. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'gdi32.dll'.
  1843. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'oleacc.dll'.
  1844. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'version.dll'.
  1845. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'dui70.dll'.
  1846. 305c.2b48: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\IME\shared\IMETIP.DLL)
  1847. 305c.2b48: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\IME\shared\IMETIP.DLL
  1848. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dui70.dll'...
  1849. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'dui70.dll' -> '\Device\HarddiskVolume3\Windows\System32\dui70.dll' [rcNtRedir=0xc0150008]
  1850. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1851. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #32 'user32.dll'.
  1852. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #33 'gdi32.dll'.
  1853. 305c.2b48: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\dui70.dll)
  1854. 305c.2b48: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\dui70.dll
  1855. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'version.dll'...
  1856. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'version.dll' -> '\Device\HarddiskVolume3\Windows\System32\version.dll' [rcNtRedir=0xc0150008]
  1857. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\version.dll [lacks WinVerifyTrust]
  1858. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleacc.dll'...
  1859. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleacc.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleacc.dll' [rcNtRedir=0xc0150008]
  1860. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\oleacc.dll [lacks WinVerifyTrust]
  1861. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  1862. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  1863. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  1864. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
  1865. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
  1866. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
  1867. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
  1868. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
  1869. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll [lacks WinVerifyTrust]
  1870. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  1871. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  1872. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  1873. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
  1874. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
  1875. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
  1876. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1877. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1878. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1879. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  1880. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  1881. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  1882. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  1883. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  1884. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  1885. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1886. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1887. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1888. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\IME\shared\imetip.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
  1889. 305c.2b48: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IME\shared\IMETIP.DLL [lacks WinVerifyTrust]
  1890. 305c.2b48: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\dui70.dll [lacks WinVerifyTrust]
  1891. 305c.2b48: supR3HardenedDllNotificationCallback: load 00007ffe8a480000 LB 0x001ab000 C:\WINDOWS\SYSTEM32\DUI70.dll [fFlags=0x0]
  1892. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\dui70.dll [lacks WinVerifyTrust]
  1893. 305c.2b48: supR3HardenedDllNotificationCallback: load 00007ffe73970000 LB 0x00156000 C:\Windows\System32\IME\shared\imetip.dll [fFlags=0x0]
  1894. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IME\shared\IMETIP.DLL [lacks WinVerifyTrust]
  1895. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe73970000 'C:\Windows\System32\IME\shared\imetip.dll'
  1896. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msctf.dll [lacks WinVerifyTrust]
  1897. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\MSCTF.DLL (Input=MSCTF.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1898. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe9b530000 'C:\WINDOWS\System32\MSCTF.DLL'
  1899. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msctf.dll [lacks WinVerifyTrust]
  1900. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msctf.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
  1901. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe9b530000 'C:\WINDOWS\System32\msctf.dll'
  1902. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msctf.dll [lacks WinVerifyTrust]
  1903. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\msctf.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
  1904. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe9b530000 'C:\WINDOWS\system32\msctf.dll'
  1905. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1906. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'advapi32.dll'.
  1907. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ole32.dll'.
  1908. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'shlwapi.dll'.
  1909. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'user32.dll'.
  1910. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'oleaut32.dll'.
  1911. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'wer.dll'.
  1912. 305c.2b48: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\IME\shared\imecfm.dll)
  1913. 305c.2b48: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\IME\shared\imecfm.dll
  1914. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'wer.dll'...
  1915. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'wer.dll' -> '\Device\HarddiskVolume3\Windows\System32\wer.dll' [rcNtRedir=0xc0150008]
  1916. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1917. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #41 'rpcrt4.dll'.
  1918. 305c.2b48: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\wer.dll)
  1919. 305c.2b48: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\wer.dll
  1920. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
  1921. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
  1922. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
  1923. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  1924. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  1925. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  1926. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shlwapi.dll'...
  1927. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'shlwapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\shlwapi.dll' [rcNtRedir=0xc0150008]
  1928. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shlwapi.dll [lacks WinVerifyTrust]
  1929. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
  1930. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
  1931. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll [lacks WinVerifyTrust]
  1932. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
  1933. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
  1934. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
  1935. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1936. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1937. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1938. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  1939. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  1940. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  1941. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1942. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1943. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1944. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\IME\shared\imecfm.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1945. 305c.2b48: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IME\shared\imecfm.dll [lacks WinVerifyTrust]
  1946. 305c.2b48: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wer.dll [lacks WinVerifyTrust]
  1947. 305c.2b48: supR3HardenedDllNotificationCallback: load 00007ffe97dd0000 LB 0x000c1000 C:\WINDOWS\SYSTEM32\wer.dll [fFlags=0x0]
  1948. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wer.dll [lacks WinVerifyTrust]
  1949. 305c.2b48: supR3HardenedDllNotificationCallback: load 00007ffe74930000 LB 0x0003b000 C:\Windows\System32\IME\shared\imecfm.dll [fFlags=0x0]
  1950. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IME\shared\imecfm.dll [lacks WinVerifyTrust]
  1951. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe74930000 'C:\Windows\System32\IME\shared\imecfm.dll'
  1952. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  1953. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe9b0d0000 'C:\WINDOWS\System32\user32.dll'
  1954. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IME\IMEJP\IMJPAPI.DLL [lacks WinVerifyTrust]
  1955. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\IME\IMEJP\imjpapi.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
  1956. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe73ec0000 'C:\Windows\System32\IME\IMEJP\imjpapi.dll'
  1957. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IME\shared\IMJKAPI.DLL [lacks WinVerifyTrust]
  1958. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\IME\shared\imjkapi.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1959. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe887f0000 'C:\Windows\System32\IME\shared\imjkapi.dll'
  1960. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IME\shared\IMJKAPI.DLL [lacks WinVerifyTrust]
  1961. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\IME\shared\imjkapi.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1962. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe887f0000 'C:\Windows\System32\IME\shared\imjkapi.dll'
  1963. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IME\shared\IMJKAPI.DLL [lacks WinVerifyTrust]
  1964. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\IME\shared\imjkapi.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1965. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe887f0000 'C:\Windows\System32\IME\shared\imjkapi.dll'
  1966. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IME\shared\IMJKAPI.DLL [lacks WinVerifyTrust]
  1967. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\IME\shared\imjkapi.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1968. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe887f0000 'C:\Windows\System32\IME\shared\imjkapi.dll'
  1969. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IME\IMEJP\IMJPPRED.DLL [lacks WinVerifyTrust]
  1970. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\IME\IMEJP\imjppred.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1971. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe752c0000 'C:\Windows\System32\IME\IMEJP\imjppred.dll'
  1972. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IME\shared\imecfm.dll [lacks WinVerifyTrust]
  1973. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\IME\shared\imecfm.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1974. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe74930000 'C:\Windows\System32\IME\shared\imecfm.dll'
  1975. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1976. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'ole32.dll'.
  1977. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'oleaut32.dll'.
  1978. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
  1979. 305c.2b48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'advapi32.dll'.
  1980. 305c.2b48: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\IME\shared\IMESEARCHDLL.DLL)
  1981. 305c.2b48: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\IME\shared\IMESEARCHDLL.DLL
  1982. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
  1983. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
  1984. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
  1985. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  1986. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  1987. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  1988. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
  1989. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
  1990. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
  1991. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
  1992. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
  1993. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll [lacks WinVerifyTrust]
  1994. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1995. 305c.2b48: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1996. 305c.2b48: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1997. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\IME\SHARED\imesearchdll.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
  1998. 305c.2b48: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IME\shared\IMESEARCHDLL.DLL [lacks WinVerifyTrust]
  1999. 305c.2b48: supR3HardenedDllNotificationCallback: load 00007ffe752a0000 LB 0x0001f000 C:\Windows\System32\IME\SHARED\imesearchdll.dll [fFlags=0x0]
  2000. 305c.2b48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IME\shared\IMESEARCHDLL.DLL [lacks WinVerifyTrust]
  2001. 305c.2b48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe752a0000 'C:\Windows\System32\IME\SHARED\imesearchdll.dll'
  2002. 305c.2b48: supR3HardenedDllNotificationCallback: Unload 00007ffe74930000 LB 0x0003b000 C:\Windows\System32\IME\shared\imecfm.dll [flags=0x0]
  2003. 305c.2b48: supR3HardenedDllNotificationCallback: Unload 00007ffe97dd0000 LB 0x000c1000 C:\WINDOWS\SYSTEM32\wer.dll [flags=0x0]
  2004. 28e4.3e88: supR3HardNtChildWaitFor[1]: Quitting: ExitCode=0x1 (rcNtWait=0x0, rcNt1=0x0, rcNt2=0x103, rcNt3=0x103, 4213 ms, the end);
RAW Paste Data