API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Jul 26th, 2018
631
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 187.69 KB | None | 0 0
raw download clone embed print report
  1. 408c.440: Log file opened: 5.2.16r123759 g_hStartupLog=0000000000000084 g_uNtVerCombined=0xa042ee00
  2. 408c.440: \SystemRoot\System32\ntdll.dll:
  3. 408c.440: CreationTime: 2018-07-11T01:22:20.486818800Z
  4. 408c.440: LastWriteTime: 2018-07-06T07:25:51.438518000Z
  5. 408c.440: ChangeTime: 2018-07-26T18:08:11.660009400Z
  6. 408c.440: FileAttributes: 0x20
  7. 408c.440: Size: 0x1db0b8
  8. 408c.440: NT Headers: 0xe8
  9. 408c.440: Timestamp: 0xf4df6dc2
  10. 408c.440: Machine: 0x8664 - amd64
  11. 408c.440: Timestamp: 0xf4df6dc2
  12. 408c.440: Image Version: 10.0
  13. 408c.440: SizeOfImage: 0x1e1000 (1970176)
  14. 408c.440: Resource Dir: 0x174000 LB 0x6b338
  15. 408c.440: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
  16. 408c.440: [Raw version resource data: 0x1740f0 LB 0x380, codepage 0x0 (reserved 0x0)]
  17. 408c.440: ProductName: Microsoft® Windows® Operating System
  18. 408c.440: ProductVersion: 10.0.17134.165
  19. 408c.440: FileVersion: 10.0.17134.165 (WinBuild.160101.0800)
  20. 408c.440: FileDescription: NT Layer DLL
  21. 408c.440: \SystemRoot\System32\kernel32.dll:
  22. 408c.440: CreationTime: 2018-04-11T23:34:40.510607900Z
  23. 408c.440: LastWriteTime: 2018-04-11T23:34:40.510607900Z
  24. 408c.440: ChangeTime: 2018-05-04T08:45:56.436435100Z
  25. 408c.440: FileAttributes: 0x20
  26. 408c.440: Size: 0xafef8
  27. 408c.440: NT Headers: 0xe8
  28. 408c.440: Timestamp: 0x5f488a51
  29. 408c.440: Machine: 0x8664 - amd64
  30. 408c.440: Timestamp: 0x5f488a51
  31. 408c.440: Image Version: 10.0
  32. 408c.440: SizeOfImage: 0xb2000 (729088)
  33. 408c.440: Resource Dir: 0xb0000 LB 0x520
  34. 408c.440: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
  35. 408c.440: [Raw version resource data: 0xb00b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
  36. 408c.440: ProductName: Microsoft® Windows® Operating System
  37. 408c.440: ProductVersion: 10.0.17134.1
  38. 408c.440: FileVersion: 10.0.17134.1 (WinBuild.160101.0800)
  39. 408c.440: FileDescription: Windows NT BASE API Client DLL
  40. 408c.440: \SystemRoot\System32\KernelBase.dll:
  41. 408c.440: CreationTime: 2018-07-11T01:22:17.653886000Z
  42. 408c.440: LastWriteTime: 2018-07-06T07:25:54.438736600Z
  43. 408c.440: ChangeTime: 2018-07-26T18:08:11.655022700Z
  44. 408c.440: FileAttributes: 0x20
  45. 408c.440: Size: 0x273dd0
  46. 408c.440: NT Headers: 0xf8
  47. 408c.440: Timestamp: 0xb0bb231d
  48. 408c.440: Machine: 0x8664 - amd64
  49. 408c.440: Timestamp: 0xb0bb231d
  50. 408c.440: Image Version: 10.0
  51. 408c.440: SizeOfImage: 0x273000 (2568192)
  52. 408c.440: Resource Dir: 0x251000 LB 0x548
  53. 408c.440: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
  54. 408c.440: [Raw version resource data: 0x2510b0 LB 0x3bc, codepage 0x0 (reserved 0x0)]
  55. 408c.440: ProductName: Microsoft® Windows® Operating System
  56. 408c.440: ProductVersion: 10.0.17134.165
  57. 408c.440: FileVersion: 10.0.17134.165 (WinBuild.160101.0800)
  58. 408c.440: FileDescription: Windows NT BASE API Client DLL
  59. 408c.440: \SystemRoot\System32\apisetschema.dll:
  60. 408c.440: CreationTime: 2018-04-11T23:34:44.042150700Z
  61. 408c.440: LastWriteTime: 2018-04-11T23:34:44.042150700Z
  62. 408c.440: ChangeTime: 2018-05-04T06:25:07.131292400Z
  63. 408c.440: FileAttributes: 0x20
  64. 408c.440: Size: 0x1bd98
  65. 408c.440: NT Headers: 0xd0
  66. 408c.440: Timestamp: 0xd02ff418
  67. 408c.440: Machine: 0x8664 - amd64
  68. 408c.440: Timestamp: 0xd02ff418
  69. 408c.440: Image Version: 10.0
  70. 408c.440: SizeOfImage: 0x1c000 (114688)
  71. 408c.440: Resource Dir: 0x1b000 LB 0x408
  72. 408c.440: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
  73. 408c.440: [Raw version resource data: 0x1b060 LB 0x3a8, codepage 0x0 (reserved 0x0)]
  74. 408c.440: ProductName: Microsoft® Windows® Operating System
  75. 408c.440: ProductVersion: 10.0.17134.1
  76. 408c.440: FileVersion: 10.0.17134.1 (WinBuild.160101.0800)
  77. 408c.440: FileDescription: ApiSet Schema DLL
  78. 408c.440: Found driver SymNetS (0x2)
  79. 408c.440: Found driver SRTSPX (0x2)
  80. 408c.440: Found driver SymEvent (0x2)
  81. 408c.440: Found driver SymIRON (0x2)
  82. 408c.440: supR3HardenedWinFindAdversaries: 0x2
  83. 408c.440: \SystemRoot\System32\drivers\symevent64x86.sys:
  84. 408c.440: CreationTime: 2018-05-04T06:59:05.713447400Z
  85. 408c.440: LastWriteTime: 2018-06-14T18:13:36.727665800Z
  86. 408c.440: ChangeTime: 2018-06-15T01:58:25.222933600Z
  87. 408c.440: FileAttributes: 0x20
  88. 408c.440: Size: 0x18650
  89. 408c.440: NT Headers: 0xe8
  90. 408c.440: Timestamp: 0x5a95cc4b
  91. 408c.440: Machine: 0x8664 - amd64
  92. 408c.440: Timestamp: 0x5a95cc4b
  93. 408c.440: Image Version: 6.3
  94. 408c.440: SizeOfImage: 0x21000 (135168)
  95. 408c.440: Resource Dir: 0x1f000 LB 0x3c8
  96. 408c.440: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
  97. 408c.440: [Raw version resource data: 0x1f0b8 LB 0x310, codepage 0x4e4 (reserved 0x0)]
  98. 408c.440: ProductName: SYMEVENT
  99. 408c.440: ProductVersion: 14.0.6.27
  100. 408c.440: FileVersion: 14.0.6.27
  101. 408c.440: FileDescription: Symantec Event Library
  102. 408c.440: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
  103. 408c.440: Calling main()
  104. 408c.440: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2
  105. 408c.440: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
  106. 408c.440: SUPR3HardenedMain: Respawn #1
  107. 408c.440: System32: \Device\HarddiskVolume3\Windows\System32
  108. 408c.440: WinSxS: \Device\HarddiskVolume3\Windows\WinSxS
  109. 408c.440: KnownDllPath: C:\WINDOWS\System32
  110. 408c.440: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
  111. 408c.440: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe)
  112. 408c.440: supR3HardNtEnableThreadCreation:
  113. 408c.440: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffbfe322fc0 pvNtTerminateThread=00007ffbfe34a900
  114. 408c.440: supR3HardenedWinDoReSpawn(1): New child 1978.26f8 [kernel32].
  115. 408c.440: supR3HardNtChildGatherData: PebBaseAddress=0000000000bc7000 cbPeb=0x388
  116. 408c.440: supR3HardNtPuChFindNtdll: uNtDllParentAddr=00007ffbfe2b0000 uNtDllChildAddr=00007ffbfe2b0000
  117. 408c.440: supR3HardenedWinSetupChildInit: uLdrInitThunk=00007ffbfe322fc0
  118. 408c.440: supR3HardenedWinSetupChildInit: Start child.
  119. 408c.440: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 1 ms.
  120. 408c.440: supR3HardNtChildPurify: Startup delay kludge #1/0: 513 ms, 61 sleeps
  121. 408c.440: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
  122. 408c.440: *0000000000000000-00000000008bffff 0x0001/0x0000 0x0000000
  123. 408c.440: *00000000008c0000-00000000008dffff 0x0004/0x0004 0x0020000
  124. 408c.440: *00000000008e0000-00000000008f8fff 0x0002/0x0002 0x0040000
  125. 408c.440: 00000000008f9000-00000000008fffff 0x0001/0x0000 0x0000000
  126. 408c.440: *0000000000900000-00000000009fafff 0x0000/0x0004 0x0020000
  127. 408c.440: 00000000009fb000-00000000009fdfff 0x0104/0x0004 0x0020000
  128. 408c.440: 00000000009fe000-00000000009fffff 0x0004/0x0004 0x0020000
  129. 408c.440: *0000000000a00000-0000000000bc6fff 0x0000/0x0004 0x0020000
  130. 408c.440: 0000000000bc7000-0000000000bc9fff 0x0004/0x0004 0x0020000
  131. 408c.440: 0000000000bca000-0000000000bfffff 0x0000/0x0004 0x0020000
  132. 408c.440: *0000000000c00000-0000000000c03fff 0x0002/0x0002 0x0040000
  133. 408c.440: 0000000000c04000-0000000000c0ffff 0x0001/0x0000 0x0000000
  134. 408c.440: *0000000000c10000-0000000000c10fff 0x0004/0x0004 0x0020000
  135. 408c.440: 0000000000c11000-000000007ffdffff 0x0001/0x0000 0x0000000
  136. 408c.440: *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000
  137. 408c.440: 000000007ffe1000-00007ff56397ffff 0x0001/0x0000 0x0000000
  138. 408c.440: *00007ff563980000-00007ff5639aafff 0x0002/0x0002 0x0040000
  139. 408c.440: 00007ff5639ab000-00007ff6db83ffff 0x0001/0x0000 0x0000000
  140. 408c.440: *00007ff6db840000-00007ff6db840fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
  141. 408c.440: 00007ff6db841000-00007ff6db8b1fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
  142. 408c.440: 00007ff6db8b2000-00007ff6db8b2fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
  143. 408c.440: 00007ff6db8b3000-00007ff6db8f8fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
  144. 408c.440: 00007ff6db8f9000-00007ff6db8f9fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
  145. 408c.440: 00007ff6db8fa000-00007ff6db8fafff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
  146. 408c.440: 00007ff6db8fb000-00007ff6db8fffff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
  147. 408c.440: 00007ff6db900000-00007ff6db900fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
  148. 408c.440: 00007ff6db901000-00007ff6db901fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
  149. 408c.440: 00007ff6db902000-00007ff6db905fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
  150. 408c.440: 00007ff6db906000-00007ff6db94dfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
  151. 408c.440: 00007ff6db94e000-00007ffbfe2affff 0x0001/0x0000 0x0000000
  152. 408c.440: *00007ffbfe2b0000-00007ffbfe2b0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
  153. 408c.440: 00007ffbfe2b1000-00007ffbfe3bffff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
  154. 408c.440: 00007ffbfe3c0000-00007ffbfe405fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
  155. 408c.440: 00007ffbfe406000-00007ffbfe410fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
  156. 408c.440: 00007ffbfe411000-00007ffbfe41efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
  157. 408c.440: 00007ffbfe41f000-00007ffbfe41ffff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
  158. 408c.440: 00007ffbfe420000-00007ffbfe422fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
  159. 408c.440: 00007ffbfe423000-00007ffbfe490fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
  160. 408c.440: 00007ffbfe491000-00007ffffffeffff 0x0001/0x0000 0x0000000
  161. 408c.440: VirtualBox.exe: timestamp 0x5b4cb14e (rc=VINF_SUCCESS)
  162. 408c.440: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
  163. 408c.440: '\Device\HarddiskVolume3\Windows\System32\ntdll.dll' has no imports
  164. 408c.440: supR3HardNtChildPurify: Done after 541 ms and 0 fixes (loop #0).
  165. 408c.440: supR3HardNtEnableThreadCreation:
  166. 1978.26f8: Log file opened: 5.2.16r123759 g_hStartupLog=0000000000000004 g_uNtVerCombined=0xa042ee00
  167. 1978.26f8: supR3HardenedVmProcessInit: uNtDllAddr=00007ffbfe2b0000 g_uNtVerCombined=0xa042ee00
  168. 1978.26f8: ntdll.dll: timestamp 0xf4df6dc2 (rc=VINF_SUCCESS)
  169. 1978.26f8: New simple heap: #1 0000000000d20000 LB 0x400000 (for 1970176 allocation)
  170. 1978.26f8: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
  171. 1978.26f8: System32: \Device\HarddiskVolume3\Windows\System32
  172. 1978.26f8: WinSxS: \Device\HarddiskVolume3\Windows\WinSxS
  173. 1978.26f8: KnownDllPath: C:\WINDOWS\System32
  174. 1978.26f8: supR3HardenedVmProcessInit: Opening vboxdrv stub...
  175. 1978.26f8: supR3HardenedVmProcessInit: Restoring LdrInitializeThunk...
  176. 1978.26f8: supR3HardenedVmProcessInit: Returning to LdrInitializeThunk...
  177. 1978.26f8: Registered Dll notification callback with NTDLL.
  178. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\kernel32.dll)
  179. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\kernel32.dll
  180. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\KERNEL32.DLL (Input=KERNEL32.DLL, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000004001:<flags> [calling]
  181. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbfa740000 LB 0x00273000 C:\WINDOWS\System32\KERNELBASE.dll [fFlags=0x0]
  182. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\KernelBase.dll)
  183. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
  184. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbfe1c0000 LB 0x000b2000 C:\WINDOWS\System32\KERNEL32.DLL [fFlags=0x0]
  185. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
  186. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfe1c0000 'C:\WINDOWS\System32\KERNEL32.DLL'
  187. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ff6db840000 LB 0x0010e000 C:\Program Files\Oracle\VirtualBox\VirtualBox.exe [fFlags=0x0]
  188. 1978.26f8: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
  189. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe)
  190. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
  191. 1978.26f8: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffbfe322fc0 pvNtTerminateThread=00007ffbfe34a900
  192. 408c.440: supR3HardNtChildWaitFor: Found expected request 1 (CloseEvents) after 72 ms.
  193. 1978.26f8: \SystemRoot\System32\ntdll.dll:
  194. 1978.26f8: CreationTime: 2018-07-11T01:22:20.486818800Z
  195. 1978.26f8: LastWriteTime: 2018-07-06T07:25:51.438518000Z
  196. 1978.26f8: ChangeTime: 2018-07-26T18:08:11.660009400Z
  197. 1978.26f8: FileAttributes: 0x20
  198. 1978.26f8: Size: 0x1db0b8
  199. 1978.26f8: NT Headers: 0xe8
  200. 1978.26f8: Timestamp: 0xf4df6dc2
  201. 1978.26f8: Machine: 0x8664 - amd64
  202. 1978.26f8: Timestamp: 0xf4df6dc2
  203. 1978.26f8: Image Version: 10.0
  204. 1978.26f8: SizeOfImage: 0x1e1000 (1970176)
  205. 1978.26f8: Resource Dir: 0x174000 LB 0x6b338
  206. 1978.26f8: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
  207. 1978.26f8: [Raw version resource data: 0x1740f0 LB 0x380, codepage 0x0 (reserved 0x0)]
  208. 1978.26f8: ProductName: Microsoft® Windows® Operating System
  209. 1978.26f8: ProductVersion: 10.0.17134.165
  210. 1978.26f8: FileVersion: 10.0.17134.165 (WinBuild.160101.0800)
  211. 1978.26f8: FileDescription: NT Layer DLL
  212. 1978.26f8: \SystemRoot\System32\kernel32.dll:
  213. 1978.26f8: CreationTime: 2018-04-11T23:34:40.510607900Z
  214. 1978.26f8: LastWriteTime: 2018-04-11T23:34:40.510607900Z
  215. 1978.26f8: ChangeTime: 2018-05-04T08:45:56.436435100Z
  216. 1978.26f8: FileAttributes: 0x20
  217. 1978.26f8: Size: 0xafef8
  218. 1978.26f8: NT Headers: 0xe8
  219. 1978.26f8: Timestamp: 0x5f488a51
  220. 1978.26f8: Machine: 0x8664 - amd64
  221. 1978.26f8: Timestamp: 0x5f488a51
  222. 1978.26f8: Image Version: 10.0
  223. 1978.26f8: SizeOfImage: 0xb2000 (729088)
  224. 1978.26f8: Resource Dir: 0xb0000 LB 0x520
  225. 1978.26f8: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
  226. 1978.26f8: [Raw version resource data: 0xb00b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
  227. 1978.26f8: ProductName: Microsoft® Windows® Operating System
  228. 1978.26f8: ProductVersion: 10.0.17134.1
  229. 1978.26f8: FileVersion: 10.0.17134.1 (WinBuild.160101.0800)
  230. 1978.26f8: FileDescription: Windows NT BASE API Client DLL
  231. 1978.26f8: \SystemRoot\System32\KernelBase.dll:
  232. 1978.26f8: CreationTime: 2018-07-11T01:22:17.653886000Z
  233. 1978.26f8: LastWriteTime: 2018-07-06T07:25:54.438736600Z
  234. 1978.26f8: ChangeTime: 2018-07-26T18:08:11.655022700Z
  235. 1978.26f8: FileAttributes: 0x20
  236. 1978.26f8: Size: 0x273dd0
  237. 1978.26f8: NT Headers: 0xf8
  238. 1978.26f8: Timestamp: 0xb0bb231d
  239. 1978.26f8: Machine: 0x8664 - amd64
  240. 1978.26f8: Timestamp: 0xb0bb231d
  241. 1978.26f8: Image Version: 10.0
  242. 1978.26f8: SizeOfImage: 0x273000 (2568192)
  243. 1978.26f8: Resource Dir: 0x251000 LB 0x548
  244. 1978.26f8: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
  245. 1978.26f8: [Raw version resource data: 0x2510b0 LB 0x3bc, codepage 0x0 (reserved 0x0)]
  246. 1978.26f8: ProductName: Microsoft® Windows® Operating System
  247. 1978.26f8: ProductVersion: 10.0.17134.165
  248. 1978.26f8: FileVersion: 10.0.17134.165 (WinBuild.160101.0800)
  249. 1978.26f8: FileDescription: Windows NT BASE API Client DLL
  250. 1978.26f8: \SystemRoot\System32\apisetschema.dll:
  251. 1978.26f8: CreationTime: 2018-04-11T23:34:44.042150700Z
  252. 1978.26f8: LastWriteTime: 2018-04-11T23:34:44.042150700Z
  253. 1978.26f8: ChangeTime: 2018-05-04T06:25:07.131292400Z
  254. 1978.26f8: FileAttributes: 0x20
  255. 1978.26f8: Size: 0x1bd98
  256. 1978.26f8: NT Headers: 0xd0
  257. 1978.26f8: Timestamp: 0xd02ff418
  258. 1978.26f8: Machine: 0x8664 - amd64
  259. 1978.26f8: Timestamp: 0xd02ff418
  260. 1978.26f8: Image Version: 10.0
  261. 1978.26f8: SizeOfImage: 0x1c000 (114688)
  262. 1978.26f8: Resource Dir: 0x1b000 LB 0x408
  263. 1978.26f8: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
  264. 1978.26f8: [Raw version resource data: 0x1b060 LB 0x3a8, codepage 0x0 (reserved 0x0)]
  265. 1978.26f8: ProductName: Microsoft® Windows® Operating System
  266. 1978.26f8: ProductVersion: 10.0.17134.1
  267. 1978.26f8: FileVersion: 10.0.17134.1 (WinBuild.160101.0800)
  268. 1978.26f8: FileDescription: ApiSet Schema DLL
  269. 1978.26f8: Found driver SymNetS (0x2)
  270. 1978.26f8: Found driver SRTSPX (0x2)
  271. 1978.26f8: Found driver SymEvent (0x2)
  272. 1978.26f8: Found driver SymIRON (0x2)
  273. 1978.26f8: supR3HardenedWinFindAdversaries: 0x2
  274. 1978.26f8: \SystemRoot\System32\drivers\symevent64x86.sys:
  275. 1978.26f8: CreationTime: 2018-05-04T06:59:05.713447400Z
  276. 1978.26f8: LastWriteTime: 2018-06-14T18:13:36.727665800Z
  277. 1978.26f8: ChangeTime: 2018-06-15T01:58:25.222933600Z
  278. 1978.26f8: FileAttributes: 0x20
  279. 1978.26f8: Size: 0x18650
  280. 1978.26f8: NT Headers: 0xe8
  281. 1978.26f8: Timestamp: 0x5a95cc4b
  282. 1978.26f8: Machine: 0x8664 - amd64
  283. 1978.26f8: Timestamp: 0x5a95cc4b
  284. 1978.26f8: Image Version: 6.3
  285. 1978.26f8: SizeOfImage: 0x21000 (135168)
  286. 1978.26f8: Resource Dir: 0x1f000 LB 0x3c8
  287. 1978.26f8: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
  288. 1978.26f8: [Raw version resource data: 0x1f0b8 LB 0x310, codepage 0x4e4 (reserved 0x0)]
  289. 1978.26f8: ProductName: SYMEVENT
  290. 1978.26f8: ProductVersion: 14.0.6.27
  291. 1978.26f8: FileVersion: 14.0.6.27
  292. 1978.26f8: FileDescription: Symantec Event Library
  293. 1978.26f8: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
  294. 1978.26f8: Calling main()
  295. 1978.26f8: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2
  296. 1978.26f8: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
  297. 1978.26f8: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
  298. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe)
  299. 1978.26f8: SUPR3HardenedMain: Respawn #2
  300. 1978.26f8: supR3HardNtEnableThreadCreation:
  301. 1978.26f8: '\Device\HarddiskVolume3\Windows\System32\ntdll.dll' has no imports
  302. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ntdll.dll)
  303. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ntdll.dll
  304. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\ntdll.dll (Input=ntdll.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
  305. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfe2b0000 'C:\WINDOWS\System32\ntdll.dll'
  306. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\apphelp.dll)
  307. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\apphelp.dll
  308. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\apphelp.dll (rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000000000:<flags> [calling]
  309. 1978.26f8: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\apphelp.dll [lacks WinVerifyTrust]
  310. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbf8670000 LB 0x0008b000 C:\WINDOWS\system32\apphelp.dll [fFlags=0x0]
  311. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\apphelp.dll [lacks WinVerifyTrust]
  312. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ntdll.dll [lacks WinVerifyTrust]
  313. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\ntdll.dll (Input=ntdll.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
  314. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfe2b0000 'C:\WINDOWS\System32\ntdll.dll'
  315. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbf8670000 'C:\WINDOWS\system32\apphelp.dll'
  316. 1978.26f8: Error -104 in supR3HardenedWinReSpawn! (enmWhat=5)
  317. 1978.26f8: Error relaunching VirtualBox VM process: 5
  318. Command line: '60eaff78-4bdd-042d-2e72-669728efd737-suplib-3rdchild --comment CentOS --startvm 7b2e78fe-0cd7-4cde-b122-aa47c0974be8 --no-startvm-errormsgbox "--sup-hardening-log=C:\Users\digni\VirtualBox VMs\CentOS\Logs\VBoxHardening.log"'
  319. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'opengl32.dll'.
  320. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
  321. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'msvcp100.dll'.
  322. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcr100.dll'.
  323. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'.
  324. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'qt5guivbox.dll'.
  325. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'qt5widgetsvbox.dll'.
  326. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'qt5printsupportvbox.dll'.
  327. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'qt5openglvbox.dll'.
  328. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'user32.dll'.
  329. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'advapi32.dll'.
  330. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'shell32.dll'.
  331. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'ole32.dll'.
  332. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'oleaut32.dll'.
  333. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #15 'winmm.dll'.
  334. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.dll)
  335. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.dll
  336. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
  337. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume3\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
  338. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'winmmbase.dll'.
  339. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'msvcrt.dll'.
  340. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\winmm.dll)
  341. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\winmm.dll
  342. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
  343. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
  344. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
  345. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'combase.dll'.
  346. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #23 'rpcrt4.dll'.
  347. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\oleaut32.dll)
  348. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\oleaut32.dll
  349. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
  350. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
  351. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #23 'rpcrt4.dll'.
  352. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #48 'gdi32.dll'.
  353. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #49 'user32.dll'.
  354. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #50 'combase.dll'.
  355. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ole32.dll)
  356. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ole32.dll
  357. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
  358. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
  359. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  360. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #74 'user32.dll'.
  361. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #76 'gdi32.dll'.
  362. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\shell32.dll)
  363. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\shell32.dll
  364. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
  365. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
  366. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  367. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'sechost.dll'.
  368. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27 'rpcrt4.dll'.
  369. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\advapi32.dll)
  370. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\advapi32.dll
  371. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  372. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  373. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'win32u.dll'.
  374. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'gdi32.dll'.
  375. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\user32.dll)
  376. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\user32.dll
  377. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5openglvbox.dll'...
  378. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5openglvbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5openglvbox.dll' [rcNtRedir=0xc0150008]
  379. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'qt5widgetsvbox.dll'.
  380. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'qt5guivbox.dll'.
  381. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5corevbox.dll'.
  382. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcr100.dll'.
  383. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll)
  384. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll
  385. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5printsupportvbox.dll'...
  386. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5printsupportvbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5printsupportvbox.dll' [rcNtRedir=0xc0150008]
  387. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
  388. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
  389. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5widgetsvbox.dll'.
  390. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5guivbox.dll'.
  391. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'.
  392. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'winspool.drv'.
  393. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'comdlg32.dll'.
  394. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcr100.dll'.
  395. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll)
  396. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll
  397. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
  398. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
  399. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
  400. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
  401. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5guivbox.dll'.
  402. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5corevbox.dll'.
  403. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'shell32.dll'.
  404. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
  405. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
  406. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll)
  407. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll
  408. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
  409. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
  410. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'ole32.dll'.
  411. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'opengl32.dll'.
  412. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
  413. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
  414. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'.
  415. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
  416. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
  417. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll)
  418. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
  419. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
  420. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
  421. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
  422. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'shell32.dll'.
  423. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ole32.dll'.
  424. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'advapi32.dll'.
  425. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ws2_32.dll'.
  426. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'mpr.dll'.
  427. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcp100.dll'.
  428. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'msvcr100.dll'.
  429. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll)
  430. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
  431. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
  432. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
  433. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll)
  434. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll
  435. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
  436. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
  437. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
  438. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll)
  439. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll
  440. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
  441. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
  442. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
  443. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
  444. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ws2_32.dll'.
  445. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'rpcrt4.dll'.
  446. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll)
  447. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
  448. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
  449. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume3\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
  450. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  451. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'advapi32.dll'.
  452. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
  453. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'gdi32.dll'.
  454. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'glu32.dll'.
  455. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\opengl32.dll)
  456. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\opengl32.dll
  457. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'glu32.dll'...
  458. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'glu32.dll' -> '\Device\HarddiskVolume3\Windows\System32\glu32.dll' [rcNtRedir=0xc0150008]
  459. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  460. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
  461. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'opengl32.dll'.
  462. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\glu32.dll)
  463. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\glu32.dll
  464. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  465. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  466. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\gdi32.dll)
  467. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\gdi32.dll
  468. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  469. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  470. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  471. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
  472. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
  473. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
  474. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  475. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  476. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\msvcrt.dll)
  477. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
  478. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  479. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  480. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll)
  481. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll
  482. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
  483. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
  484. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'rpcrt4.dll'.
  485. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ws2_32.dll)
  486. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ws2_32.dll
  487. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
  488. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
  489. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
  490. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
  491. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
  492. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
  493. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
  494. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
  495. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
  496. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
  497. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
  498. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
  499. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
  500. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
  501. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
  502. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mpr.dll'...
  503. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'mpr.dll' -> '\Device\HarddiskVolume3\Windows\System32\mpr.dll' [rcNtRedir=0xc0150008]
  504. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\mpr.dll)
  505. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\mpr.dll
  506. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
  507. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
  508. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ws2_32.dll [lacks WinVerifyTrust]
  509. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
  510. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
  511. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
  512. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
  513. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
  514. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll [lacks WinVerifyTrust]
  515. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
  516. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
  517. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll [lacks WinVerifyTrust]
  518. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  519. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  520. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  521. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
  522. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
  523. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
  524. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
  525. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
  526. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
  527. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
  528. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
  529. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
  530. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  531. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  532. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  533. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  534. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  535. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  536. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
  537. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume3\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
  538. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
  539. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
  540. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
  541. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll [lacks WinVerifyTrust]
  542. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
  543. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
  544. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
  545. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
  546. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
  547. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
  548. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
  549. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
  550. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll [lacks WinVerifyTrust]
  551. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
  552. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
  553. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
  554. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
  555. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
  556. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
  557. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  558. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  559. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  560. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  561. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  562. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  563. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
  564. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
  565. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
  566. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'comdlg32.dll'...
  567. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'comdlg32.dll' -> '\Device\HarddiskVolume3\Windows\System32\comdlg32.dll' [rcNtRedir=0xc0150008]
  568. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  569. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'user32.dll'.
  570. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'shlwapi.dll'.
  571. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #37 'gdi32.dll'.
  572. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #38 'comctl32.dll'.
  573. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #39 'shell32.dll'.
  574. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\comdlg32.dll)
  575. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\comdlg32.dll
  576. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winspool.drv'...
  577. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'winspool.drv' -> '\Device\HarddiskVolume3\Windows\System32\winspool.drv' [rcNtRedir=0xc0150008]
  578. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  579. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #24 'propsys.dll'.
  580. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #29 'iphlpapi.dll'.
  581. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #38 'bcrypt.dll'.
  582. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\winspool.drv)
  583. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\winspool.drv
  584. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
  585. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
  586. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
  587. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
  588. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
  589. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
  590. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
  591. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
  592. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
  593. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  594. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  595. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  596. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  597. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  598. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  599. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
  600. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
  601. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
  602. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
  603. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
  604. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
  605. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
  606. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
  607. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
  608. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
  609. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
  610. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
  611. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  612. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  613. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  614. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
  615. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
  616. 1978.26f8: '\Device\HarddiskVolume3\Windows\System32\win32u.dll' has no imports
  617. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\win32u.dll)
  618. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\win32u.dll
  619. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  620. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  621. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  622. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'sechost.dll'...
  623. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'sechost.dll' -> '\Device\HarddiskVolume3\Windows\System32\sechost.dll' [rcNtRedir=0xc0150008]
  624. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'rpcrt4.dll'.
  625. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\sechost.dll)
  626. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\sechost.dll
  627. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  628. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  629. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  630. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  631. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  632. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  633. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  634. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  635. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  636. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  637. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  638. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  639. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
  640. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
  641. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
  642. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #45 'bcryptprimitives.dll'.
  643. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\combase.dll)
  644. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\combase.dll
  645. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  646. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  647. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  648. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  649. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  650. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  651. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  652. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  653. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  654. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  655. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  656. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  657. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
  658. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
  659. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [lacks WinVerifyTrust]
  660. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
  661. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
  662. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll)
  663. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll
  664. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  665. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  666. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  667. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmmbase.dll'...
  668. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmmbase.dll' -> '\Device\HarddiskVolume3\Windows\System32\winmmbase.dll' [rcNtRedir=0xc0150008]
  669. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  670. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\winmmbase.dll)
  671. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\winmmbase.dll
  672. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  673. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  674. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  675. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'...
  676. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008]
  677. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll)
  678. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll
  679. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  680. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  681. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  682. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  683. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  684. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  685. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcrypt.dll'...
  686. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcrypt.dll' -> '\Device\HarddiskVolume3\Windows\System32\bcrypt.dll' [rcNtRedir=0xc0150008]
  687. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\bcrypt.dll)
  688. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\bcrypt.dll
  689. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'iphlpapi.dll'...
  690. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'iphlpapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\iphlpapi.dll' [rcNtRedir=0xc0150008]
  691. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL)
  692. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL
  693. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'propsys.dll'...
  694. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'propsys.dll' -> '\Device\HarddiskVolume3\Windows\System32\propsys.dll' [rcNtRedir=0xc0150008]
  695. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  696. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #15 'oleaut32.dll'.
  697. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #31 'rpcrt4.dll'.
  698. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\propsys.dll)
  699. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\propsys.dll
  700. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  701. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  702. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  703. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
  704. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
  705. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll [lacks WinVerifyTrust]
  706. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'comctl32.dll'...
  707. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'comctl32.dll' -> '\Device\HarddiskVolume3\Windows\System32\comctl32.dll' [rcNtRedir=0x0]
  708. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'advapi32.dll'.
  709. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
  710. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
  711. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\comctl32.dll)
  712. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\comctl32.dll
  713. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  714. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  715. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  716. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shlwapi.dll'...
  717. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'shlwapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\shlwapi.dll' [rcNtRedir=0xc0150008]
  718. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'.
  719. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #44 'gdi32.dll'.
  720. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #45 'user32.dll'.
  721. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\shlwapi.dll)
  722. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\shlwapi.dll
  723. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  724. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  725. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  726. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  727. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  728. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  729. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  730. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  731. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  732. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
  733. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume3\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
  734. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
  735. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  736. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  737. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  738. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  739. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  740. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  741. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  742. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  743. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  744. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  745. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  746. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  747. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  748. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  749. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  750. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  751. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  752. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  753. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  754. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  755. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  756. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
  757. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
  758. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
  759. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  760. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  761. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  762. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
  763. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
  764. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
  765. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  766. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  767. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  768. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VirtualBox.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000a01:<flags> [calling]
  769. 1978.26f8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.dll [lacks WinVerifyTrust]
  770. 1978.26f8: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
  771. 1978.26f8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  772. 1978.26f8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
  773. 1978.26f8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
  774. 1978.26f8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
  775. 1978.26f8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
  776. 1978.26f8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
  777. 1978.26f8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll [lacks WinVerifyTrust]
  778. 1978.26f8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll [lacks WinVerifyTrust]
  779. 1978.26f8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll [lacks WinVerifyTrust]
  780. 1978.26f8: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\glu32.dll [lacks WinVerifyTrust]
  781. 1978.26f8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\mpr.dll [lacks WinVerifyTrust]
  782. 1978.26f8: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\winspool.drv [lacks WinVerifyTrust]
  783. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'advapi32.dll'.
  784. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
  785. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
  786. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.17134.191_none_f957a2993090dc56\comctl32.dll)
  787. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.17134.191_none_f957a2993090dc56\comctl32.dll
  788. 1978.26f8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmmbase.dll [lacks WinVerifyTrust]
  789. 1978.26f8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\propsys.dll [lacks WinVerifyTrust]
  790. 1978.26f8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL [lacks WinVerifyTrust]
  791. 1978.26f8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
  792. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbfc1f0000 LB 0x0009e000 C:\WINDOWS\System32\msvcrt.dll [fFlags=0x0]
  793. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  794. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbfc420000 LB 0x00124000 C:\WINDOWS\System32\RPCRT4.dll [fFlags=0x0]
  795. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  796. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbfca40000 LB 0x0005b000 C:\WINDOWS\System32\sechost.dll [fFlags=0x0]
  797. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\sechost.dll [lacks WinVerifyTrust]
  798. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbfc6b0000 LB 0x000a1000 C:\WINDOWS\System32\ADVAPI32.dll [fFlags=0x0]
  799. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
  800. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbfa720000 LB 0x00020000 C:\WINDOWS\System32\win32u.dll [fFlags=0x0]
  801. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [lacks WinVerifyTrust]
  802. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbfaa70000 LB 0x000fa000 C:\WINDOWS\System32\ucrtbase.dll [fFlags=0x0]
  803. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ucrtbase.dll)
  804. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll
  805. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbfa680000 LB 0x0009f000 C:\WINDOWS\System32\msvcp_win.dll [fFlags=0x0]
  806. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust]
  807. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbfabf0000 LB 0x00192000 C:\WINDOWS\System32\gdi32full.dll [fFlags=0x0]
  808. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
  809. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #33 'gdi32.dll'.
  810. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'user32.dll'.
  811. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'win32u.dll'.
  812. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\gdi32full.dll)
  813. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\gdi32full.dll
  814. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbfcd50000 LB 0x00028000 C:\WINDOWS\System32\GDI32.dll [fFlags=0x0]
  815. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  816. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbfb740000 LB 0x00190000 C:\WINDOWS\System32\USER32.dll [fFlags=0x0]
  817. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  818. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbd8250000 LB 0x0002c000 C:\WINDOWS\SYSTEM32\GLU32.dll [fFlags=0x0]
  819. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\glu32.dll [lacks WinVerifyTrust]
  820. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbbca70000 LB 0x00120000 C:\WINDOWS\SYSTEM32\OPENGL32.dll [fFlags=0x0]
  821. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
  822. 1978.26f8: supR3HardenedDllNotificationCallback: load 0000000066060000 LB 0x000d2000 C:\Program Files\Oracle\VirtualBox\MSVCR100.dll [fFlags=0x0]
  823. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
  824. 1978.26f8: supR3HardenedDllNotificationCallback: load 0000000066140000 LB 0x00098000 C:\Program Files\Oracle\VirtualBox\MSVCP100.dll [fFlags=0x0]
  825. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
  826. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbfc640000 LB 0x0006c000 C:\WINDOWS\System32\WS2_32.dll [fFlags=0x0]
  827. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ws2_32.dll [lacks WinVerifyTrust]
  828. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffb9c690000 LB 0x00595000 C:\Program Files\Oracle\VirtualBox\VBoxRT.dll [fFlags=0x0]
  829. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  830. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbfaa20000 LB 0x00049000 C:\WINDOWS\System32\cfgmgr32.dll [fFlags=0x0]
  831. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll)
  832. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll
  833. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbfab70000 LB 0x0007a000 C:\WINDOWS\System32\bcryptPrimitives.dll [fFlags=0x0]
  834. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust]
  835. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbfbec0000 LB 0x00323000 C:\WINDOWS\System32\combase.dll [fFlags=0x0]
  836. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [lacks WinVerifyTrust]
  837. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbfc920000 LB 0x000a9000 C:\WINDOWS\System32\shcore.dll [fFlags=0x0]
  838. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  839. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #37 'rpcrt4.dll'.
  840. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #44 'combase.dll'.
  841. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\SHCore.dll)
  842. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\SHCore.dll
  843. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbfc9e0000 LB 0x00051000 C:\WINDOWS\System32\shlwapi.dll [fFlags=0x0]
  844. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shlwapi.dll [lacks WinVerifyTrust]
  845. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbfa610000 LB 0x00011000 C:\WINDOWS\System32\kernel.appcore.dll [fFlags=0x0]
  846. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcrt.dll'.
  847. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'rpcrt4.dll'.
  848. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll)
  849. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll
  850. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbfa5f0000 LB 0x0001f000 C:\WINDOWS\System32\profapi.dll [fFlags=0x0]
  851. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\profapi.dll)
  852. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\profapi.dll
  853. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbfa630000 LB 0x0004c000 C:\WINDOWS\System32\powrprof.dll [fFlags=0x0]
  854. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'rpcrt4.dll'.
  855. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\powrprof.dll)
  856. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\powrprof.dll
  857. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbfa5e0000 LB 0x0000a000 C:\WINDOWS\System32\FLTLIB.DLL [fFlags=0x0]
  858. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\fltLib.dll)
  859. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\fltLib.dll
  860. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbfb030000 LB 0x0070d000 C:\WINDOWS\System32\windows.storage.dll [fFlags=0x0]
  861. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  862. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'rpcrt4.dll'.
  863. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #54 'combase.dll'.
  864. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #58 'profapi.dll'.
  865. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #81 'fltlib.dll'.
  866. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\windows.storage.dll)
  867. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\windows.storage.dll
  868. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbfcd80000 LB 0x01440000 C:\WINDOWS\System32\SHELL32.dll [fFlags=0x0]
  869. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll [lacks WinVerifyTrust]
  870. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbfcb70000 LB 0x00151000 C:\WINDOWS\System32\ole32.dll [fFlags=0x0]
  871. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll [lacks WinVerifyTrust]
  872. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbed400000 LB 0x0001a000 C:\WINDOWS\SYSTEM32\MPR.dll [fFlags=0x0]
  873. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\mpr.dll [lacks WinVerifyTrust]
  874. 1978.26f8: supR3HardenedDllNotificationCallback: load 0000000065a90000 LB 0x00565000 C:\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [fFlags=0x0]
  875. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
  876. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffb9b420000 LB 0x005f7000 C:\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [fFlags=0x0]
  877. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
  878. 1978.26f8: supR3HardenedDllNotificationCallback: load 0000000065520000 LB 0x00561000 C:\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [fFlags=0x0]
  879. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
  880. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbfcaa0000 LB 0x000c2000 C:\WINDOWS\System32\OLEAUT32.dll [fFlags=0x0]
  881. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
  882. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbf90d0000 LB 0x001b4000 C:\WINDOWS\SYSTEM32\PROPSYS.dll [fFlags=0x0]
  883. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\propsys.dll [lacks WinVerifyTrust]
  884. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbf9b60000 LB 0x00038000 C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL [fFlags=0x0]
  885. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL [lacks WinVerifyTrust]
  886. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbfa120000 LB 0x00025000 C:\WINDOWS\SYSTEM32\bcrypt.dll [fFlags=0x0]
  887. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
  888. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbf3f70000 LB 0x00084000 C:\WINDOWS\SYSTEM32\WINSPOOL.DRV [fFlags=0x0]
  889. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\winspool.drv [lacks WinVerifyTrust]
  890. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbf0410000 LB 0x000a7000 C:\WINDOWS\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.17134.191_none_f957a2993090dc56\COMCTL32.dll [fFlags=0x0]
  891. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.17134.191_none_f957a2993090dc56\comctl32.dll [lacks WinVerifyTrust]
  892. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbfc760000 LB 0x000ed000 C:\WINDOWS\System32\COMDLG32.dll [fFlags=0x0]
  893. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\comdlg32.dll [lacks WinVerifyTrust]
  894. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbcace0000 LB 0x00051000 C:\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll [fFlags=0x0]
  895. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll [lacks WinVerifyTrust]
  896. 1978.26f8: supR3HardenedDllNotificationCallback: load 0000000066000000 LB 0x00054000 C:\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll [fFlags=0x0]
  897. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll [lacks WinVerifyTrust]
  898. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbf7160000 LB 0x0002a000 C:\WINDOWS\SYSTEM32\WINMMBASE.dll [fFlags=0x0]
  899. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmmbase.dll [lacks WinVerifyTrust]
  900. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbf7190000 LB 0x00023000 C:\WINDOWS\SYSTEM32\WINMM.dll [fFlags=0x0]
  901. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll [lacks WinVerifyTrust]
  902. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffb9ba20000 LB 0x00a06000 C:\Program Files\Oracle\VirtualBox\VirtualBox.dll [fFlags=0x0]
  903. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.dll [lacks WinVerifyTrust]
  904. 1978.26f8: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
  905. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
  906. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfa740000 'api-ms-win-core-synch-l1-2-0'
  907. 1978.26f8: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
  908. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
  909. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfa740000 'api-ms-win-core-fibers-l1-1-1'
  910. 1978.26f8: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
  911. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
  912. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfa740000 'api-ms-win-core-fibers-l1-1-1'
  913. 1978.26f8: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
  914. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
  915. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfa740000 'api-ms-win-core-synch-l1-2-0'
  916. 1978.26f8: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-l1-2-1) -> 0x0, fPresent=1
  917. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-l1-2-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
  918. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfa740000 'api-ms-win-core-localization-l1-2-1'
  919. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
  920. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'fltlib.dll'...
  921. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'fltlib.dll' -> '\Device\HarddiskVolume3\Windows\System32\fltlib.dll' [rcNtRedir=0xc0150008]
  922. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\fltLib.dll [lacks WinVerifyTrust]
  923. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'profapi.dll'...
  924. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'profapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\profapi.dll' [rcNtRedir=0xc0150008]
  925. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\profapi.dll [lacks WinVerifyTrust]
  926. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
  927. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
  928. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [lacks WinVerifyTrust]
  929. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  930. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  931. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  932. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  933. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  934. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  935. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  936. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  937. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  938. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  939. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  940. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  941. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  942. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  943. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  944. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
  945. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
  946. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [lacks WinVerifyTrust]
  947. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  948. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  949. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  950. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  951. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  952. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  953. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
  954. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
  955. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [lacks WinVerifyTrust]
  956. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  957. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  958. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  959. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  960. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  961. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  962. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
  963. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
  964. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust]
  965. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  966. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  967. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  968. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  969. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  970. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  971. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
  972. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
  973. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
  974. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\kernel32.dll (Input=kernel32, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
  975. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfe1c0000 'C:\WINDOWS\System32\kernel32.dll'
  976. 1978.26f8: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-string-l1-1-0) -> 0x0, fPresent=1
  977. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-string-l1-1-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
  978. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfa740000 'api-ms-win-core-string-l1-1-0'
  979. 1978.26f8: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-datetime-l1-1-1) -> 0x0, fPresent=1
  980. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-datetime-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
  981. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfa740000 'api-ms-win-core-datetime-l1-1-1'
  982. 1978.26f8: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-obsolete-l1-2-0) -> 0x0, fPresent=1
  983. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-obsolete-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
  984. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfa740000 'api-ms-win-core-localization-obsolete-l1-2-0'
  985. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'user32.dll'.
  986. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #25 'win32u.dll'.
  987. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\imm32.dll)
  988. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\imm32.dll
  989. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
  990. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
  991. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [lacks WinVerifyTrust]
  992. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  993. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  994. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  995. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\IMM32.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
  996. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbfc8f0000 LB 0x0002d000 C:\WINDOWS\System32\IMM32.DLL [fFlags=0x0]
  997. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\imm32.dll [lacks WinVerifyTrust]
  998. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfc8f0000 'C:\WINDOWS\system32\IMM32.DLL'
  999. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
  1000. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\kernel32.dll (Input=kernel32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1001. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfe1c0000 'C:\WINDOWS\System32\kernel32.dll'
  1002. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1003. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1004. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb9c690000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1005. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1006. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1007. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb9c690000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1008. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1009. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1010. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb9c690000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1011. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1012. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1013. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb9c690000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1014. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1015. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1016. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb9c690000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1017. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1018. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1019. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb9c690000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1020. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1021. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb9c690000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1022. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1023. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb9c690000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1024. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1025. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb9c690000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1026. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1027. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb9c690000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1028. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1029. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb9c690000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1030. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1031. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb9c690000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1032. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1033. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb9c690000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1034. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1035. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1036. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb9c690000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1037. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1038. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb9c690000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1039. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1040. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb9c690000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1041. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1042. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb9c690000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1043. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1044. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb9c690000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1045. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1046. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb9c690000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1047. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1048. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb9c690000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1049. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1050. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb9c690000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1051. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1052. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb9c690000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1053. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1054. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb9c690000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1055. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1056. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb9c690000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1057. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1058. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb9c690000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1059. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1060. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb9c690000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1061. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1062. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb9c690000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1063. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1064. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb9c690000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1065. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1066. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb9c690000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1067. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1068. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1069. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb9c690000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1070. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1071. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb9c690000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1072. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1073. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb9c690000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1074. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\imm32.dll [lacks WinVerifyTrust]
  1075. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\imm32.dll (Input=imm32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1076. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfc8f0000 'C:\WINDOWS\System32\imm32.dll'
  1077. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
  1078. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\ADVAPI32.DLL (Input=ADVAPI32.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1079. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfc6b0000 'C:\WINDOWS\System32\ADVAPI32.DLL'
  1080. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'bcryptprimitives.dll'.
  1081. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\cryptbase.dll)
  1082. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\cryptbase.dll
  1083. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbfa110000 LB 0x0000b000 C:\WINDOWS\SYSTEM32\CRYPTBASE.DLL [fFlags=0x0]
  1084. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\cryptbase.dll [lacks WinVerifyTrust]
  1085. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb9ba20000 'C:\Program Files\Oracle\VirtualBox\VirtualBox.dll'
  1086. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
  1087. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'ole32.dll'.
  1088. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
  1089. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'imm32.dll'.
  1090. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'winmm.dll'.
  1091. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'oleaut32.dll'.
  1092. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'shell32.dll'.
  1093. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'advapi32.dll'.
  1094. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'qt5guivbox.dll'.
  1095. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'qt5corevbox.dll'.
  1096. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'msvcr100.dll'.
  1097. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\platforms\qwindows.dll)
  1098. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\platforms\qwindows.dll
  1099. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
  1100. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
  1101. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
  1102. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
  1103. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
  1104. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
  1105. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
  1106. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
  1107. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
  1108. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
  1109. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
  1110. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
  1111. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
  1112. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
  1113. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll [lacks WinVerifyTrust]
  1114. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
  1115. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
  1116. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
  1117. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
  1118. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume3\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
  1119. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll [lacks WinVerifyTrust]
  1120. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'...
  1121. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume3\Windows\System32\imm32.dll' [rcNtRedir=0xc0150008]
  1122. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\imm32.dll [lacks WinVerifyTrust]
  1123. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  1124. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  1125. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  1126. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
  1127. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
  1128. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll [lacks WinVerifyTrust]
  1129. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  1130. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  1131. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  1132. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'...
  1133. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008]
  1134. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust]
  1135. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1136. 1978.26f8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\platforms\qwindows.dll [lacks WinVerifyTrust]
  1137. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffb9d8b0000 LB 0x0012e000 C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll [fFlags=0x0]
  1138. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\platforms\qwindows.dll [lacks WinVerifyTrust]
  1139. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb9d8b0000 'C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll'
  1140. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1141. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #33 'gdi32.dll'.
  1142. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'user32.dll'.
  1143. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\uxtheme.dll)
  1144. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\uxtheme.dll
  1145. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  1146. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  1147. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  1148. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  1149. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  1150. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  1151. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1152. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1153. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1154. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
  1155. 1978.26f8: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\uxtheme.dll [lacks WinVerifyTrust]
  1156. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbf8830000 LB 0x00098000 C:\WINDOWS\system32\uxtheme.dll [fFlags=0x0]
  1157. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\uxtheme.dll [lacks WinVerifyTrust]
  1158. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbf8830000 'C:\WINDOWS\system32\uxtheme.dll'
  1159. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  1160. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfb740000 'C:\WINDOWS\system32\user32.dll'
  1161. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll [lacks WinVerifyTrust]
  1162. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1163. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfcd80000 'C:\WINDOWS\system32\shell32.dll'
  1164. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\SHCore.dll [lacks WinVerifyTrust]
  1165. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\SHCore.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1166. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfc920000 'C:\WINDOWS\system32\SHCore.dll'
  1167. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: error opening 'C:\WINDOWS\system32\wintab32.dll': 0 (NtPath=\??\C:\WINDOWS\system32\wintab32.dll; Input=C:\WINDOWS\system32\wintab32.dll; rcNtGetDll=0x0
  1168. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000034 'C:\WINDOWS\system32\wintab32.dll'
  1169. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1170. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #21 'win32u.dll'.
  1171. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #22 'user32.dll'.
  1172. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #23 'gdi32.dll'.
  1173. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\dwmapi.dll)
  1174. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\dwmapi.dll
  1175. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbf8a80000 LB 0x00029000 C:\WINDOWS\system32\dwmapi.dll [fFlags=0x0]
  1176. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dwmapi.dll [lacks WinVerifyTrust]
  1177. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll [lacks WinVerifyTrust]
  1178. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  1179. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  1180. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  1181. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  1182. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  1183. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  1184. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
  1185. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
  1186. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [lacks WinVerifyTrust]
  1187. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1188. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1189. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1190. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\winmm.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1191. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbf7190000 'C:\WINDOWS\system32\winmm.dll'
  1192. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll [lacks WinVerifyTrust]
  1193. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\winmm.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1194. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbf7190000 'C:\WINDOWS\system32\winmm.dll'
  1195. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll [lacks WinVerifyTrust]
  1196. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1197. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfcd80000 'C:\WINDOWS\system32\shell32.dll'
  1198. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\uxtheme.dll [lacks WinVerifyTrust]
  1199. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1200. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbf8830000 'C:\WINDOWS\system32\uxtheme.dll'
  1201. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  1202. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\gdi32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1203. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfcd50000 'C:\WINDOWS\system32\gdi32.dll'
  1204. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbfc2a0000 LB 0x00175000 C:\WINDOWS\System32\MSCTF.dll [fFlags=0x0]
  1205. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1206. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'oleaut32.dll'.
  1207. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #38 'user32.dll'.
  1208. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #39 'gdi32.dll'.
  1209. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #40 'imm32.dll'.
  1210. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\msctf.dll)
  1211. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msctf.dll
  1212. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  1213. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'...
  1214. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume3\Windows\System32\imm32.dll' [rcNtRedir=0xc0150008]
  1215. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\imm32.dll [lacks WinVerifyTrust]
  1216. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  1217. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  1218. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  1219. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  1220. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  1221. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  1222. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
  1223. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
  1224. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
  1225. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1226. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1227. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1228. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfc420000 'C:\WINDOWS\System32\rpcrt4.dll'
  1229. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbfc850000 LB 0x000a0000 C:\WINDOWS\System32\clbcatq.dll [fFlags=0x0]
  1230. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1231. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #28 'rpcrt4.dll'.
  1232. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\clbcatq.dll)
  1233. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\clbcatq.dll
  1234. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1235. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'shcore.dll'.
  1236. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #29 'combase.dll'.
  1237. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'd3d11.dll'.
  1238. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'dcomp.dll'.
  1239. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\DataExchange.dll)
  1240. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\DataExchange.dll
  1241. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dcomp.dll'...
  1242. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'dcomp.dll' -> '\Device\HarddiskVolume3\Windows\System32\dcomp.dll' [rcNtRedir=0xc0150008]
  1243. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'win32u.dll'.
  1244. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp_win.dll'.
  1245. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'oleaut32.dll'.
  1246. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #37 'dxgi.dll'.
  1247. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\dcomp.dll)
  1248. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\dcomp.dll
  1249. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'd3d11.dll'...
  1250. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'd3d11.dll' -> '\Device\HarddiskVolume3\Windows\System32\d3d11.dll' [rcNtRedir=0xc0150008]
  1251. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1252. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'dxgi.dll'.
  1253. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'win32u.dll'.
  1254. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\d3d11.dll)
  1255. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\d3d11.dll
  1256. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
  1257. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
  1258. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [lacks WinVerifyTrust]
  1259. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shcore.dll'...
  1260. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'shcore.dll' -> '\Device\HarddiskVolume3\Windows\System32\shcore.dll' [rcNtRedir=0xc0150008]
  1261. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\SHCore.dll [lacks WinVerifyTrust]
  1262. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1263. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1264. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1265. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  1266. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  1267. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  1268. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1269. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1270. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1271. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
  1272. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
  1273. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [lacks WinVerifyTrust]
  1274. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dxgi.dll'...
  1275. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'dxgi.dll' -> '\Device\HarddiskVolume3\Windows\System32\dxgi.dll' [rcNtRedir=0xc0150008]
  1276. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1277. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'win32u.dll'.
  1278. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\dxgi.dll)
  1279. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\dxgi.dll
  1280. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1281. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1282. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1283. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dxgi.dll'...
  1284. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'dxgi.dll' -> '\Device\HarddiskVolume3\Windows\System32\dxgi.dll' [rcNtRedir=0xc0150008]
  1285. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dxgi.dll [lacks WinVerifyTrust]
  1286. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
  1287. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
  1288. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
  1289. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
  1290. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
  1291. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust]
  1292. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
  1293. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
  1294. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [lacks WinVerifyTrust]
  1295. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
  1296. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
  1297. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [lacks WinVerifyTrust]
  1298. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1299. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1300. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1301. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\dataexchange.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
  1302. 1978.26f8: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\DataExchange.dll [lacks WinVerifyTrust]
  1303. 1978.26f8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\d3d11.dll [lacks WinVerifyTrust]
  1304. 1978.26f8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dcomp.dll [lacks WinVerifyTrust]
  1305. 1978.26f8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dxgi.dll [lacks WinVerifyTrust]
  1306. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbf9380000 LB 0x000bb000 C:\WINDOWS\system32\dxgi.dll [fFlags=0x0]
  1307. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dxgi.dll [lacks WinVerifyTrust]
  1308. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbf76b0000 LB 0x0030b000 C:\WINDOWS\system32\d3d11.dll [fFlags=0x0]
  1309. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\d3d11.dll [lacks WinVerifyTrust]
  1310. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbf7f90000 LB 0x0019c000 C:\WINDOWS\system32\dcomp.dll [fFlags=0x0]
  1311. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dcomp.dll [lacks WinVerifyTrust]
  1312. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbdc5f0000 LB 0x00058000 C:\WINDOWS\system32\dataexchange.dll [fFlags=0x0]
  1313. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\DataExchange.dll [lacks WinVerifyTrust]
  1314. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  1315. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfcd50000 'C:\WINDOWS\System32\gdi32.dll'
  1316. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdc5f0000 'C:\WINDOWS\system32\dataexchange.dll'
  1317. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1318. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'rmclient.dll'.
  1319. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #30 'rpcrt4.dll'.
  1320. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #44 'combase.dll'.
  1321. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll)
  1322. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll
  1323. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1324. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'rpcrt4.dll'.
  1325. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\rmclient.dll)
  1326. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\rmclient.dll
  1327. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbf8b60000 LB 0x00021000 C:\WINDOWS\system32\RMCLIENT.dll [fFlags=0x0]
  1328. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rmclient.dll [lacks WinVerifyTrust]
  1329. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbf8bc0000 LB 0x001b8000 C:\WINDOWS\system32\twinapi.appcore.dll [fFlags=0x0]
  1330. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll [lacks WinVerifyTrust]
  1331. 1978.3ef8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #16 'rpcrt4.dll'.
  1332. 1978.3ef8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'devobj.dll'.
  1333. 1978.3ef8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'propsys.dll'.
  1334. 1978.3ef8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll)
  1335. 1978.3ef8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll
  1336. 1978.3ef8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #17 'cfgmgr32.dll'.
  1337. 1978.3ef8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\devobj.dll)
  1338. 1978.3ef8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\devobj.dll
  1339. 1978.3ef8: supR3HardenedDllNotificationCallback: load 00007ffbfa3d0000 LB 0x00027000 C:\WINDOWS\SYSTEM32\DEVOBJ.dll [fFlags=0x0]
  1340. 1978.3ef8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\devobj.dll [lacks WinVerifyTrust]
  1341. 1978.3ef8: supR3HardenedDllNotificationCallback: load 00007ffbede20000 LB 0x00076000 C:\WINDOWS\SYSTEM32\MMDevAPI.DLL [fFlags=0x0]
  1342. 1978.3ef8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
  1343. 1978.3ef8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1344. 1978.3ef8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'mmdevapi.dll'.
  1345. 1978.3ef8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27 'ksuser.dll'.
  1346. 1978.3ef8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #28 'avrt.dll'.
  1347. 1978.3ef8: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\wdmaud.drv)
  1348. 1978.3ef8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\wdmaud.drv
  1349. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'avrt.dll'...
  1350. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: 'avrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\avrt.dll' [rcNtRedir=0xc0150008]
  1351. 1978.3ef8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\avrt.dll)
  1352. 1978.3ef8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\avrt.dll
  1353. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ksuser.dll'...
  1354. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: 'ksuser.dll' -> '\Device\HarddiskVolume3\Windows\System32\ksuser.dll' [rcNtRedir=0xc0150008]
  1355. 1978.3ef8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1356. 1978.3ef8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ksuser.dll)
  1357. 1978.3ef8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ksuser.dll
  1358. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mmdevapi.dll'...
  1359. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: 'mmdevapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\mmdevapi.dll' [rcNtRedir=0xc0150008]
  1360. 1978.3ef8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
  1361. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1362. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1363. 1978.3ef8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1364. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'cfgmgr32.dll'...
  1365. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: 'cfgmgr32.dll' -> '\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll' [rcNtRedir=0xc0150008]
  1366. 1978.3ef8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll [lacks WinVerifyTrust]
  1367. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'propsys.dll'...
  1368. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: 'propsys.dll' -> '\Device\HarddiskVolume3\Windows\System32\propsys.dll' [rcNtRedir=0xc0150008]
  1369. 1978.3ef8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\propsys.dll [lacks WinVerifyTrust]
  1370. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'devobj.dll'...
  1371. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: 'devobj.dll' -> '\Device\HarddiskVolume3\Windows\System32\devobj.dll' [rcNtRedir=0xc0150008]
  1372. 1978.3ef8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\devobj.dll [lacks WinVerifyTrust]
  1373. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  1374. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  1375. 1978.3ef8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  1376. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  1377. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  1378. 1978.3ef8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  1379. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1380. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1381. 1978.3ef8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1382. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
  1383. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
  1384. 1978.3ef8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [lacks WinVerifyTrust]
  1385. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  1386. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  1387. 1978.3ef8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  1388. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rmclient.dll'...
  1389. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rmclient.dll' -> '\Device\HarddiskVolume3\Windows\System32\rmclient.dll' [rcNtRedir=0xc0150008]
  1390. 1978.3ef8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rmclient.dll [lacks WinVerifyTrust]
  1391. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1392. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1393. 1978.3ef8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1394. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1395. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1396. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #15 'coreuicomponents.dll'.
  1397. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #16 'coremessaging.dll'.
  1398. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1399. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\TextInputFramework.dll)
  1400. 1978.3ef8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1401. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\TextInputFramework.dll
  1402. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coremessaging.dll'...
  1403. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: 'coremessaging.dll' -> '\Device\HarddiskVolume3\Windows\System32\coremessaging.dll' [rcNtRedir=0xc0150008]
  1404. 1978.3ef8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1405. 1978.3ef8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #24 'rpcrt4.dll'.
  1406. 1978.3ef8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll)
  1407. 1978.3ef8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll
  1408. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coreuicomponents.dll'...
  1409. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: 'coreuicomponents.dll' -> '\Device\HarddiskVolume3\Windows\System32\coreuicomponents.dll' [rcNtRedir=0xc0150008]
  1410. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1411. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'coremessaging.dll'.
  1412. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #48 'shcore.dll'.
  1413. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\CoreUIComponents.dll)
  1414. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\CoreUIComponents.dll
  1415. 1978.26f8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll [lacks WinVerifyTrust]
  1416. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ntmarta.dll)
  1417. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ntmarta.dll
  1418. 1978.3ef8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1419. 1978.3ef8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'coremessaging.dll'.
  1420. 1978.3ef8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #48 'shcore.dll'.
  1421. 1978.3ef8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\CoreUIComponents.dll)
  1422. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1423. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1424. 1978.3ef8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1425. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shcore.dll'...
  1426. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: 'shcore.dll' -> '\Device\HarddiskVolume3\Windows\System32\shcore.dll' [rcNtRedir=0xc0150008]
  1427. 1978.3ef8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\SHCore.dll [lacks WinVerifyTrust]
  1428. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coremessaging.dll'...
  1429. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: 'coremessaging.dll' -> '\Device\HarddiskVolume3\Windows\System32\coremessaging.dll' [rcNtRedir=0xc0150008]
  1430. 1978.3ef8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll [lacks WinVerifyTrust]
  1431. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1432. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1433. 1978.3ef8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1434. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shcore.dll'...
  1435. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: 'shcore.dll' -> '\Device\HarddiskVolume3\Windows\System32\shcore.dll' [rcNtRedir=0xc0150008]
  1436. 1978.3ef8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\SHCore.dll [lacks WinVerifyTrust]
  1437. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coremessaging.dll'...
  1438. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: 'coremessaging.dll' -> '\Device\HarddiskVolume3\Windows\System32\coremessaging.dll' [rcNtRedir=0xc0150008]
  1439. 1978.3ef8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll [lacks WinVerifyTrust]
  1440. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1441. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1442. 1978.3ef8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1443. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  1444. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  1445. 1978.3ef8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  1446. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1447. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1448. 1978.3ef8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1449. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
  1450. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'combase.dll'.
  1451. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #22 'rpcrt4.dll'.
  1452. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #29 'bcryptprimitives.dll'.
  1453. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\WinTypes.dll)
  1454. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\WinTypes.dll
  1455. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbf9760000 LB 0x00031000 C:\WINDOWS\SYSTEM32\ntmarta.dll [fFlags=0x0]
  1456. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ntmarta.dll [lacks WinVerifyTrust]
  1457. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbf8130000 LB 0x000da000 C:\WINDOWS\System32\CoreMessaging.dll [fFlags=0x0]
  1458. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll [lacks WinVerifyTrust]
  1459. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbf6630000 LB 0x0014d000 C:\WINDOWS\SYSTEM32\wintypes.dll [fFlags=0x0]
  1460. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\WinTypes.dll [lacks WinVerifyTrust]
  1461. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbf5b40000 LB 0x0031e000 C:\WINDOWS\System32\CoreUIComponents.dll [fFlags=0x0]
  1462. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\CoreUIComponents.dll [lacks WinVerifyTrust]
  1463. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbe8d70000 LB 0x00097000 C:\WINDOWS\System32\TextInputFramework.dll [fFlags=0x0]
  1464. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\TextInputFramework.dll [lacks WinVerifyTrust]
  1465. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
  1466. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'...
  1467. 1978.3ef8: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
  1468. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008]
  1469. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust]
  1470. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  1471. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  1472. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  1473. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
  1474. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
  1475. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [lacks WinVerifyTrust]
  1476. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\OLEAUT32.DLL (Input=OLEAUT32.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1477. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfcaa0000 'C:\WINDOWS\System32\OLEAUT32.DLL'
  1478. 1978.3ef8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ksuser.dll [lacks WinVerifyTrust]
  1479. 1978.3ef8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\avrt.dll [lacks WinVerifyTrust]
  1480. 1978.26f8: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(ext-ms-win-rtcore-ntuser-window-ext-l1-1-0.dll) -> 0x0, fPresent=1
  1481. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: pName=ext-ms-win-rtcore-ntuser-window-ext-l1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1482. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfb740000 'ext-ms-win-rtcore-ntuser-window-ext-l1-1-0.dll'
  1483. 1978.3ef8: supR3HardenedDllNotificationCallback: load 00007ffbedd60000 LB 0x00009000 C:\WINDOWS\SYSTEM32\ksuser.dll [fFlags=0x0]
  1484. 1978.26f8: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(ext-ms-win-rtcore-ntuser-integration-l1-1-0.dll) -> 0x0, fPresent=1
  1485. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: pName=ext-ms-win-rtcore-ntuser-integration-l1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1486. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfb740000 'ext-ms-win-rtcore-ntuser-integration-l1-1-0.dll'
  1487. 1978.3ef8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ksuser.dll [lacks WinVerifyTrust]
  1488. 1978.3ef8: supR3HardenedDllNotificationCallback: load 00007ffbf62a0000 LB 0x0000a000 C:\WINDOWS\SYSTEM32\AVRT.dll [fFlags=0x0]
  1489. 1978.26f8: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-com-l1-1-0.dll) -> 0x0, fPresent=1
  1490. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-com-l1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1491. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfbec0000 'api-ms-win-core-com-l1-1-0.dll'
  1492. 1978.3ef8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\avrt.dll [lacks WinVerifyTrust]
  1493. 1978.3ef8: supR3HardenedDllNotificationCallback: load 00007ffbc90f0000 LB 0x00044000 C:\WINDOWS\System32\wdmaud.drv [fFlags=0x0]
  1494. 1978.3ef8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
  1495. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbc90f0000 'C:\WINDOWS\System32\wdmaud.drv'
  1496. 1978.3ef8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
  1497. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
  1498. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbc90f0000 'C:\WINDOWS\System32\wdmaud.drv'
  1499. 1978.3ef8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
  1500. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\MMDEVAPI.DLL (Input=MMDEVAPI.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1501. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbede20000 'C:\WINDOWS\System32\MMDEVAPI.DLL'
  1502. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msctf.dll [lacks WinVerifyTrust]
  1503. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\MSCTF.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
  1504. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfc2a0000 'C:\WINDOWS\System32\MSCTF.dll'
  1505. 1978.3ef8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
  1506. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
  1507. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbc90f0000 'C:\WINDOWS\System32\wdmaud.drv'
  1508. 1978.3ef8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
  1509. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
  1510. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbc90f0000 'C:\WINDOWS\System32\wdmaud.drv'
  1511. 1978.3ef8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
  1512. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
  1513. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbc90f0000 'C:\WINDOWS\System32\wdmaud.drv'
  1514. 1978.3ef8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
  1515. 1978.3ef8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'rpcrt4.dll'.
  1516. 1978.3ef8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'oleaut32.dll'.
  1517. 1978.3ef8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #55 'mmdevapi.dll'.
  1518. 1978.3ef8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #56 'avrt.dll'.
  1519. 1978.3ef8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\AudioSes.dll)
  1520. 1978.3ef8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\AudioSes.dll
  1521. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'avrt.dll'...
  1522. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: 'avrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\avrt.dll' [rcNtRedir=0xc0150008]
  1523. 1978.3ef8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\avrt.dll [lacks WinVerifyTrust]
  1524. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mmdevapi.dll'...
  1525. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: 'mmdevapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\mmdevapi.dll' [rcNtRedir=0xc0150008]
  1526. 1978.3ef8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
  1527. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
  1528. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
  1529. 1978.3ef8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
  1530. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  1531. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  1532. 1978.3ef8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  1533. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
  1534. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
  1535. 1978.3ef8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust]
  1536. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\AUDIOSES.DLL (Input=AUDIOSES.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1537. 1978.3ef8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\AudioSes.dll [lacks WinVerifyTrust]
  1538. 1978.3ef8: supR3HardenedDllNotificationCallback: load 00007ffbcd290000 LB 0x0012c000 C:\WINDOWS\System32\AUDIOSES.DLL [fFlags=0x0]
  1539. 1978.3ef8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\AudioSes.dll [lacks WinVerifyTrust]
  1540. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbcd290000 'C:\WINDOWS\System32\AUDIOSES.DLL'
  1541. 1978.3ef8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
  1542. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
  1543. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbc90f0000 'C:\WINDOWS\System32\wdmaud.drv'
  1544. 1978.3ef8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
  1545. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
  1546. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbc90f0000 'C:\WINDOWS\System32\wdmaud.drv'
  1547. 1978.3ef8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
  1548. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbc90f0000 'C:\WINDOWS\System32\wdmaud.drv'
  1549. 1978.3ef8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
  1550. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbc90f0000 'C:\WINDOWS\System32\wdmaud.drv'
  1551. 1978.3ef8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
  1552. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbc90f0000 'C:\WINDOWS\System32\wdmaud.drv'
  1553. 1978.3ef8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
  1554. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbc90f0000 'C:\WINDOWS\System32\wdmaud.drv'
  1555. 1978.3ef8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1556. 1978.3ef8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'mmdevapi.dll'.
  1557. 1978.3ef8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'msacm32.dll'.
  1558. 1978.3ef8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'winmmbase.dll'.
  1559. 1978.3ef8: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\msacm32.drv)
  1560. 1978.3ef8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msacm32.drv
  1561. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmmbase.dll'...
  1562. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmmbase.dll' -> '\Device\HarddiskVolume3\Windows\System32\winmmbase.dll' [rcNtRedir=0xc0150008]
  1563. 1978.3ef8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmmbase.dll [lacks WinVerifyTrust]
  1564. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msacm32.dll'...
  1565. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msacm32.dll' -> '\Device\HarddiskVolume3\Windows\System32\msacm32.dll' [rcNtRedir=0xc0150008]
  1566. 1978.3ef8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1567. 1978.3ef8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\msacm32.dll)
  1568. 1978.3ef8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msacm32.dll
  1569. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mmdevapi.dll'...
  1570. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: 'mmdevapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\mmdevapi.dll' [rcNtRedir=0xc0150008]
  1571. 1978.3ef8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
  1572. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1573. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1574. 1978.3ef8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1575. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1576. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1577. 1978.3ef8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1578. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
  1579. 1978.3ef8: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
  1580. 1978.3ef8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msacm32.dll [lacks WinVerifyTrust]
  1581. 1978.3ef8: supR3HardenedDllNotificationCallback: load 00007ffbe3d80000 LB 0x0001c000 C:\WINDOWS\SYSTEM32\MSACM32.dll [fFlags=0x0]
  1582. 1978.3ef8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msacm32.dll [lacks WinVerifyTrust]
  1583. 1978.3ef8: supR3HardenedDllNotificationCallback: load 00007ffbf55a0000 LB 0x0000d000 C:\WINDOWS\System32\msacm32.drv [fFlags=0x0]
  1584. 1978.3ef8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
  1585. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbf55a0000 'C:\WINDOWS\System32\msacm32.drv'
  1586. 1978.3ef8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
  1587. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
  1588. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbf55a0000 'C:\WINDOWS\System32\msacm32.drv'
  1589. 1978.3ef8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
  1590. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
  1591. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbf55a0000 'C:\WINDOWS\System32\msacm32.drv'
  1592. 1978.3ef8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
  1593. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
  1594. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbf55a0000 'C:\WINDOWS\System32\msacm32.drv'
  1595. 1978.3ef8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
  1596. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
  1597. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbf55a0000 'C:\WINDOWS\System32\msacm32.drv'
  1598. 1978.3ef8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
  1599. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
  1600. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbf55a0000 'C:\WINDOWS\System32\msacm32.drv'
  1601. 1978.3ef8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
  1602. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
  1603. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbf55a0000 'C:\WINDOWS\System32\msacm32.drv'
  1604. 1978.3ef8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
  1605. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbf55a0000 'C:\WINDOWS\System32\msacm32.drv'
  1606. 1978.3ef8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
  1607. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbf55a0000 'C:\WINDOWS\System32\msacm32.drv'
  1608. 1978.3ef8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
  1609. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbf55a0000 'C:\WINDOWS\System32\msacm32.drv'
  1610. 1978.3ef8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1611. 1978.3ef8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'winmm.dll'.
  1612. 1978.3ef8: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\midimap.dll)
  1613. 1978.3ef8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\midimap.dll
  1614. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
  1615. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume3\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
  1616. 1978.3ef8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll [lacks WinVerifyTrust]
  1617. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1618. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1619. 1978.3ef8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1620. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
  1621. 1978.3ef8: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\midimap.dll [lacks WinVerifyTrust]
  1622. 1978.3ef8: supR3HardenedDllNotificationCallback: load 00007ffbe87d0000 LB 0x0000a000 C:\WINDOWS\System32\midimap.dll [fFlags=0x0]
  1623. 1978.3ef8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\midimap.dll [lacks WinVerifyTrust]
  1624. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbe87d0000 'C:\WINDOWS\System32\midimap.dll'
  1625. 1978.3ef8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\midimap.dll [lacks WinVerifyTrust]
  1626. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
  1627. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbe87d0000 'C:\WINDOWS\System32\midimap.dll'
  1628. 1978.3ef8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\midimap.dll [lacks WinVerifyTrust]
  1629. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
  1630. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbe87d0000 'C:\WINDOWS\System32\midimap.dll'
  1631. 1978.3ef8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\midimap.dll [lacks WinVerifyTrust]
  1632. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
  1633. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbe87d0000 'C:\WINDOWS\System32\midimap.dll'
  1634. 1978.4d6c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
  1635. 1978.4d6c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\MMDevApi.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
  1636. 1978.4d6c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbede20000 'C:\WINDOWS\System32\MMDevApi.dll'
  1637. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll [lacks WinVerifyTrust]
  1638. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\ole32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
  1639. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfcb70000 'C:\WINDOWS\system32\ole32.dll'
  1640. 1978.26f8: supHardenedWinVerifyImageByHandle: -> -23021 (\Device\HarddiskVolume3\Program Files\JustSystems\ATOK31_X64\ATOK31TIP.DLL)
  1641. 1978.26f8: Error (rc=0):
  1642. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: rc=Unknown Status -23021 (0xffffa613) fImage=1 fProtect=0x0 fAccess=0x0 \Device\HarddiskVolume3\Program Files\JustSystems\ATOK31_X64\ATOK31TIP.DLL: None of the 1 path(s) have a trust anchor.: \Device\HarddiskVolume3\Program Files\JustSystems\ATOK31_X64\ATOK31TIP.DLL
  1643. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\JustSystems\ATOK31_X64\ATOK31TIP.DLL
  1644. 1978.26f8: Error (rc=0):
  1645. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: rejecting 'C:\Program Files\JustSystems\ATOK31_X64\ATOK31TIP.DLL' (C:\Program Files\JustSystems\ATOK31_X64\ATOK31TIP.DLL): rcNt=0xc0000190
  1646. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000190 'C:\Program Files\JustSystems\ATOK31_X64\ATOK31TIP.DLL'
  1647. 408c.440: supR3HardNtChildWaitFor[1]: Quitting: ExitCode=0x1 (rcNtWait=0x0, rcNt1=0x0, rcNt2=0x103, rcNt3=0x103, 2625 ms, the end);
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!