Guest User

Untitled

a guest
Jul 26th, 2018
387
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. 408c.440: Log file opened: 5.2.16r123759 g_hStartupLog=0000000000000084 g_uNtVerCombined=0xa042ee00
  2. 408c.440: \SystemRoot\System32\ntdll.dll:
  3. 408c.440: CreationTime: 2018-07-11T01:22:20.486818800Z
  4. 408c.440: LastWriteTime: 2018-07-06T07:25:51.438518000Z
  5. 408c.440: ChangeTime: 2018-07-26T18:08:11.660009400Z
  6. 408c.440: FileAttributes: 0x20
  7. 408c.440: Size: 0x1db0b8
  8. 408c.440: NT Headers: 0xe8
  9. 408c.440: Timestamp: 0xf4df6dc2
  10. 408c.440: Machine: 0x8664 - amd64
  11. 408c.440: Timestamp: 0xf4df6dc2
  12. 408c.440: Image Version: 10.0
  13. 408c.440: SizeOfImage: 0x1e1000 (1970176)
  14. 408c.440: Resource Dir: 0x174000 LB 0x6b338
  15. 408c.440: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
  16. 408c.440: [Raw version resource data: 0x1740f0 LB 0x380, codepage 0x0 (reserved 0x0)]
  17. 408c.440: ProductName: Microsoft® Windows® Operating System
  18. 408c.440: ProductVersion: 10.0.17134.165
  19. 408c.440: FileVersion: 10.0.17134.165 (WinBuild.160101.0800)
  20. 408c.440: FileDescription: NT Layer DLL
  21. 408c.440: \SystemRoot\System32\kernel32.dll:
  22. 408c.440: CreationTime: 2018-04-11T23:34:40.510607900Z
  23. 408c.440: LastWriteTime: 2018-04-11T23:34:40.510607900Z
  24. 408c.440: ChangeTime: 2018-05-04T08:45:56.436435100Z
  25. 408c.440: FileAttributes: 0x20
  26. 408c.440: Size: 0xafef8
  27. 408c.440: NT Headers: 0xe8
  28. 408c.440: Timestamp: 0x5f488a51
  29. 408c.440: Machine: 0x8664 - amd64
  30. 408c.440: Timestamp: 0x5f488a51
  31. 408c.440: Image Version: 10.0
  32. 408c.440: SizeOfImage: 0xb2000 (729088)
  33. 408c.440: Resource Dir: 0xb0000 LB 0x520
  34. 408c.440: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
  35. 408c.440: [Raw version resource data: 0xb00b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
  36. 408c.440: ProductName: Microsoft® Windows® Operating System
  37. 408c.440: ProductVersion: 10.0.17134.1
  38. 408c.440: FileVersion: 10.0.17134.1 (WinBuild.160101.0800)
  39. 408c.440: FileDescription: Windows NT BASE API Client DLL
  40. 408c.440: \SystemRoot\System32\KernelBase.dll:
  41. 408c.440: CreationTime: 2018-07-11T01:22:17.653886000Z
  42. 408c.440: LastWriteTime: 2018-07-06T07:25:54.438736600Z
  43. 408c.440: ChangeTime: 2018-07-26T18:08:11.655022700Z
  44. 408c.440: FileAttributes: 0x20
  45. 408c.440: Size: 0x273dd0
  46. 408c.440: NT Headers: 0xf8
  47. 408c.440: Timestamp: 0xb0bb231d
  48. 408c.440: Machine: 0x8664 - amd64
  49. 408c.440: Timestamp: 0xb0bb231d
  50. 408c.440: Image Version: 10.0
  51. 408c.440: SizeOfImage: 0x273000 (2568192)
  52. 408c.440: Resource Dir: 0x251000 LB 0x548
  53. 408c.440: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
  54. 408c.440: [Raw version resource data: 0x2510b0 LB 0x3bc, codepage 0x0 (reserved 0x0)]
  55. 408c.440: ProductName: Microsoft® Windows® Operating System
  56. 408c.440: ProductVersion: 10.0.17134.165
  57. 408c.440: FileVersion: 10.0.17134.165 (WinBuild.160101.0800)
  58. 408c.440: FileDescription: Windows NT BASE API Client DLL
  59. 408c.440: \SystemRoot\System32\apisetschema.dll:
  60. 408c.440: CreationTime: 2018-04-11T23:34:44.042150700Z
  61. 408c.440: LastWriteTime: 2018-04-11T23:34:44.042150700Z
  62. 408c.440: ChangeTime: 2018-05-04T06:25:07.131292400Z
  63. 408c.440: FileAttributes: 0x20
  64. 408c.440: Size: 0x1bd98
  65. 408c.440: NT Headers: 0xd0
  66. 408c.440: Timestamp: 0xd02ff418
  67. 408c.440: Machine: 0x8664 - amd64
  68. 408c.440: Timestamp: 0xd02ff418
  69. 408c.440: Image Version: 10.0
  70. 408c.440: SizeOfImage: 0x1c000 (114688)
  71. 408c.440: Resource Dir: 0x1b000 LB 0x408
  72. 408c.440: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
  73. 408c.440: [Raw version resource data: 0x1b060 LB 0x3a8, codepage 0x0 (reserved 0x0)]
  74. 408c.440: ProductName: Microsoft® Windows® Operating System
  75. 408c.440: ProductVersion: 10.0.17134.1
  76. 408c.440: FileVersion: 10.0.17134.1 (WinBuild.160101.0800)
  77. 408c.440: FileDescription: ApiSet Schema DLL
  78. 408c.440: Found driver SymNetS (0x2)
  79. 408c.440: Found driver SRTSPX (0x2)
  80. 408c.440: Found driver SymEvent (0x2)
  81. 408c.440: Found driver SymIRON (0x2)
  82. 408c.440: supR3HardenedWinFindAdversaries: 0x2
  83. 408c.440: \SystemRoot\System32\drivers\symevent64x86.sys:
  84. 408c.440: CreationTime: 2018-05-04T06:59:05.713447400Z
  85. 408c.440: LastWriteTime: 2018-06-14T18:13:36.727665800Z
  86. 408c.440: ChangeTime: 2018-06-15T01:58:25.222933600Z
  87. 408c.440: FileAttributes: 0x20
  88. 408c.440: Size: 0x18650
  89. 408c.440: NT Headers: 0xe8
  90. 408c.440: Timestamp: 0x5a95cc4b
  91. 408c.440: Machine: 0x8664 - amd64
  92. 408c.440: Timestamp: 0x5a95cc4b
  93. 408c.440: Image Version: 6.3
  94. 408c.440: SizeOfImage: 0x21000 (135168)
  95. 408c.440: Resource Dir: 0x1f000 LB 0x3c8
  96. 408c.440: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
  97. 408c.440: [Raw version resource data: 0x1f0b8 LB 0x310, codepage 0x4e4 (reserved 0x0)]
  98. 408c.440: ProductName: SYMEVENT
  99. 408c.440: ProductVersion: 14.0.6.27
  100. 408c.440: FileVersion: 14.0.6.27
  101. 408c.440: FileDescription: Symantec Event Library
  102. 408c.440: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
  103. 408c.440: Calling main()
  104. 408c.440: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2
  105. 408c.440: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
  106. 408c.440: SUPR3HardenedMain: Respawn #1
  107. 408c.440: System32: \Device\HarddiskVolume3\Windows\System32
  108. 408c.440: WinSxS: \Device\HarddiskVolume3\Windows\WinSxS
  109. 408c.440: KnownDllPath: C:\WINDOWS\System32
  110. 408c.440: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
  111. 408c.440: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe)
  112. 408c.440: supR3HardNtEnableThreadCreation:
  113. 408c.440: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffbfe322fc0 pvNtTerminateThread=00007ffbfe34a900
  114. 408c.440: supR3HardenedWinDoReSpawn(1): New child 1978.26f8 [kernel32].
  115. 408c.440: supR3HardNtChildGatherData: PebBaseAddress=0000000000bc7000 cbPeb=0x388
  116. 408c.440: supR3HardNtPuChFindNtdll: uNtDllParentAddr=00007ffbfe2b0000 uNtDllChildAddr=00007ffbfe2b0000
  117. 408c.440: supR3HardenedWinSetupChildInit: uLdrInitThunk=00007ffbfe322fc0
  118. 408c.440: supR3HardenedWinSetupChildInit: Start child.
  119. 408c.440: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 1 ms.
  120. 408c.440: supR3HardNtChildPurify: Startup delay kludge #1/0: 513 ms, 61 sleeps
  121. 408c.440: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
  122. 408c.440: *0000000000000000-00000000008bffff 0x0001/0x0000 0x0000000
  123. 408c.440: *00000000008c0000-00000000008dffff 0x0004/0x0004 0x0020000
  124. 408c.440: *00000000008e0000-00000000008f8fff 0x0002/0x0002 0x0040000
  125. 408c.440: 00000000008f9000-00000000008fffff 0x0001/0x0000 0x0000000
  126. 408c.440: *0000000000900000-00000000009fafff 0x0000/0x0004 0x0020000
  127. 408c.440: 00000000009fb000-00000000009fdfff 0x0104/0x0004 0x0020000
  128. 408c.440: 00000000009fe000-00000000009fffff 0x0004/0x0004 0x0020000
  129. 408c.440: *0000000000a00000-0000000000bc6fff 0x0000/0x0004 0x0020000
  130. 408c.440: 0000000000bc7000-0000000000bc9fff 0x0004/0x0004 0x0020000
  131. 408c.440: 0000000000bca000-0000000000bfffff 0x0000/0x0004 0x0020000
  132. 408c.440: *0000000000c00000-0000000000c03fff 0x0002/0x0002 0x0040000
  133. 408c.440: 0000000000c04000-0000000000c0ffff 0x0001/0x0000 0x0000000
  134. 408c.440: *0000000000c10000-0000000000c10fff 0x0004/0x0004 0x0020000
  135. 408c.440: 0000000000c11000-000000007ffdffff 0x0001/0x0000 0x0000000
  136. 408c.440: *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000
  137. 408c.440: 000000007ffe1000-00007ff56397ffff 0x0001/0x0000 0x0000000
  138. 408c.440: *00007ff563980000-00007ff5639aafff 0x0002/0x0002 0x0040000
  139. 408c.440: 00007ff5639ab000-00007ff6db83ffff 0x0001/0x0000 0x0000000
  140. 408c.440: *00007ff6db840000-00007ff6db840fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
  141. 408c.440: 00007ff6db841000-00007ff6db8b1fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
  142. 408c.440: 00007ff6db8b2000-00007ff6db8b2fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
  143. 408c.440: 00007ff6db8b3000-00007ff6db8f8fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
  144. 408c.440: 00007ff6db8f9000-00007ff6db8f9fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
  145. 408c.440: 00007ff6db8fa000-00007ff6db8fafff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
  146. 408c.440: 00007ff6db8fb000-00007ff6db8fffff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
  147. 408c.440: 00007ff6db900000-00007ff6db900fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
  148. 408c.440: 00007ff6db901000-00007ff6db901fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
  149. 408c.440: 00007ff6db902000-00007ff6db905fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
  150. 408c.440: 00007ff6db906000-00007ff6db94dfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
  151. 408c.440: 00007ff6db94e000-00007ffbfe2affff 0x0001/0x0000 0x0000000
  152. 408c.440: *00007ffbfe2b0000-00007ffbfe2b0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
  153. 408c.440: 00007ffbfe2b1000-00007ffbfe3bffff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
  154. 408c.440: 00007ffbfe3c0000-00007ffbfe405fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
  155. 408c.440: 00007ffbfe406000-00007ffbfe410fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
  156. 408c.440: 00007ffbfe411000-00007ffbfe41efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
  157. 408c.440: 00007ffbfe41f000-00007ffbfe41ffff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
  158. 408c.440: 00007ffbfe420000-00007ffbfe422fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
  159. 408c.440: 00007ffbfe423000-00007ffbfe490fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
  160. 408c.440: 00007ffbfe491000-00007ffffffeffff 0x0001/0x0000 0x0000000
  161. 408c.440: VirtualBox.exe: timestamp 0x5b4cb14e (rc=VINF_SUCCESS)
  162. 408c.440: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
  163. 408c.440: '\Device\HarddiskVolume3\Windows\System32\ntdll.dll' has no imports
  164. 408c.440: supR3HardNtChildPurify: Done after 541 ms and 0 fixes (loop #0).
  165. 408c.440: supR3HardNtEnableThreadCreation:
  166. 1978.26f8: Log file opened: 5.2.16r123759 g_hStartupLog=0000000000000004 g_uNtVerCombined=0xa042ee00
  167. 1978.26f8: supR3HardenedVmProcessInit: uNtDllAddr=00007ffbfe2b0000 g_uNtVerCombined=0xa042ee00
  168. 1978.26f8: ntdll.dll: timestamp 0xf4df6dc2 (rc=VINF_SUCCESS)
  169. 1978.26f8: New simple heap: #1 0000000000d20000 LB 0x400000 (for 1970176 allocation)
  170. 1978.26f8: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
  171. 1978.26f8: System32: \Device\HarddiskVolume3\Windows\System32
  172. 1978.26f8: WinSxS: \Device\HarddiskVolume3\Windows\WinSxS
  173. 1978.26f8: KnownDllPath: C:\WINDOWS\System32
  174. 1978.26f8: supR3HardenedVmProcessInit: Opening vboxdrv stub...
  175. 1978.26f8: supR3HardenedVmProcessInit: Restoring LdrInitializeThunk...
  176. 1978.26f8: supR3HardenedVmProcessInit: Returning to LdrInitializeThunk...
  177. 1978.26f8: Registered Dll notification callback with NTDLL.
  178. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\kernel32.dll)
  179. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\kernel32.dll
  180. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\KERNEL32.DLL (Input=KERNEL32.DLL, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000004001:<flags> [calling]
  181. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbfa740000 LB 0x00273000 C:\WINDOWS\System32\KERNELBASE.dll [fFlags=0x0]
  182. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\KernelBase.dll)
  183. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
  184. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbfe1c0000 LB 0x000b2000 C:\WINDOWS\System32\KERNEL32.DLL [fFlags=0x0]
  185. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
  186. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfe1c0000 'C:\WINDOWS\System32\KERNEL32.DLL'
  187. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ff6db840000 LB 0x0010e000 C:\Program Files\Oracle\VirtualBox\VirtualBox.exe [fFlags=0x0]
  188. 1978.26f8: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
  189. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe)
  190. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
  191. 1978.26f8: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffbfe322fc0 pvNtTerminateThread=00007ffbfe34a900
  192. 408c.440: supR3HardNtChildWaitFor: Found expected request 1 (CloseEvents) after 72 ms.
  193. 1978.26f8: \SystemRoot\System32\ntdll.dll:
  194. 1978.26f8: CreationTime: 2018-07-11T01:22:20.486818800Z
  195. 1978.26f8: LastWriteTime: 2018-07-06T07:25:51.438518000Z
  196. 1978.26f8: ChangeTime: 2018-07-26T18:08:11.660009400Z
  197. 1978.26f8: FileAttributes: 0x20
  198. 1978.26f8: Size: 0x1db0b8
  199. 1978.26f8: NT Headers: 0xe8
  200. 1978.26f8: Timestamp: 0xf4df6dc2
  201. 1978.26f8: Machine: 0x8664 - amd64
  202. 1978.26f8: Timestamp: 0xf4df6dc2
  203. 1978.26f8: Image Version: 10.0
  204. 1978.26f8: SizeOfImage: 0x1e1000 (1970176)
  205. 1978.26f8: Resource Dir: 0x174000 LB 0x6b338
  206. 1978.26f8: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
  207. 1978.26f8: [Raw version resource data: 0x1740f0 LB 0x380, codepage 0x0 (reserved 0x0)]
  208. 1978.26f8: ProductName: Microsoft® Windows® Operating System
  209. 1978.26f8: ProductVersion: 10.0.17134.165
  210. 1978.26f8: FileVersion: 10.0.17134.165 (WinBuild.160101.0800)
  211. 1978.26f8: FileDescription: NT Layer DLL
  212. 1978.26f8: \SystemRoot\System32\kernel32.dll:
  213. 1978.26f8: CreationTime: 2018-04-11T23:34:40.510607900Z
  214. 1978.26f8: LastWriteTime: 2018-04-11T23:34:40.510607900Z
  215. 1978.26f8: ChangeTime: 2018-05-04T08:45:56.436435100Z
  216. 1978.26f8: FileAttributes: 0x20
  217. 1978.26f8: Size: 0xafef8
  218. 1978.26f8: NT Headers: 0xe8
  219. 1978.26f8: Timestamp: 0x5f488a51
  220. 1978.26f8: Machine: 0x8664 - amd64
  221. 1978.26f8: Timestamp: 0x5f488a51
  222. 1978.26f8: Image Version: 10.0
  223. 1978.26f8: SizeOfImage: 0xb2000 (729088)
  224. 1978.26f8: Resource Dir: 0xb0000 LB 0x520
  225. 1978.26f8: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
  226. 1978.26f8: [Raw version resource data: 0xb00b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
  227. 1978.26f8: ProductName: Microsoft® Windows® Operating System
  228. 1978.26f8: ProductVersion: 10.0.17134.1
  229. 1978.26f8: FileVersion: 10.0.17134.1 (WinBuild.160101.0800)
  230. 1978.26f8: FileDescription: Windows NT BASE API Client DLL
  231. 1978.26f8: \SystemRoot\System32\KernelBase.dll:
  232. 1978.26f8: CreationTime: 2018-07-11T01:22:17.653886000Z
  233. 1978.26f8: LastWriteTime: 2018-07-06T07:25:54.438736600Z
  234. 1978.26f8: ChangeTime: 2018-07-26T18:08:11.655022700Z
  235. 1978.26f8: FileAttributes: 0x20
  236. 1978.26f8: Size: 0x273dd0
  237. 1978.26f8: NT Headers: 0xf8
  238. 1978.26f8: Timestamp: 0xb0bb231d
  239. 1978.26f8: Machine: 0x8664 - amd64
  240. 1978.26f8: Timestamp: 0xb0bb231d
  241. 1978.26f8: Image Version: 10.0
  242. 1978.26f8: SizeOfImage: 0x273000 (2568192)
  243. 1978.26f8: Resource Dir: 0x251000 LB 0x548
  244. 1978.26f8: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
  245. 1978.26f8: [Raw version resource data: 0x2510b0 LB 0x3bc, codepage 0x0 (reserved 0x0)]
  246. 1978.26f8: ProductName: Microsoft® Windows® Operating System
  247. 1978.26f8: ProductVersion: 10.0.17134.165
  248. 1978.26f8: FileVersion: 10.0.17134.165 (WinBuild.160101.0800)
  249. 1978.26f8: FileDescription: Windows NT BASE API Client DLL
  250. 1978.26f8: \SystemRoot\System32\apisetschema.dll:
  251. 1978.26f8: CreationTime: 2018-04-11T23:34:44.042150700Z
  252. 1978.26f8: LastWriteTime: 2018-04-11T23:34:44.042150700Z
  253. 1978.26f8: ChangeTime: 2018-05-04T06:25:07.131292400Z
  254. 1978.26f8: FileAttributes: 0x20
  255. 1978.26f8: Size: 0x1bd98
  256. 1978.26f8: NT Headers: 0xd0
  257. 1978.26f8: Timestamp: 0xd02ff418
  258. 1978.26f8: Machine: 0x8664 - amd64
  259. 1978.26f8: Timestamp: 0xd02ff418
  260. 1978.26f8: Image Version: 10.0
  261. 1978.26f8: SizeOfImage: 0x1c000 (114688)
  262. 1978.26f8: Resource Dir: 0x1b000 LB 0x408
  263. 1978.26f8: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
  264. 1978.26f8: [Raw version resource data: 0x1b060 LB 0x3a8, codepage 0x0 (reserved 0x0)]
  265. 1978.26f8: ProductName: Microsoft® Windows® Operating System
  266. 1978.26f8: ProductVersion: 10.0.17134.1
  267. 1978.26f8: FileVersion: 10.0.17134.1 (WinBuild.160101.0800)
  268. 1978.26f8: FileDescription: ApiSet Schema DLL
  269. 1978.26f8: Found driver SymNetS (0x2)
  270. 1978.26f8: Found driver SRTSPX (0x2)
  271. 1978.26f8: Found driver SymEvent (0x2)
  272. 1978.26f8: Found driver SymIRON (0x2)
  273. 1978.26f8: supR3HardenedWinFindAdversaries: 0x2
  274. 1978.26f8: \SystemRoot\System32\drivers\symevent64x86.sys:
  275. 1978.26f8: CreationTime: 2018-05-04T06:59:05.713447400Z
  276. 1978.26f8: LastWriteTime: 2018-06-14T18:13:36.727665800Z
  277. 1978.26f8: ChangeTime: 2018-06-15T01:58:25.222933600Z
  278. 1978.26f8: FileAttributes: 0x20
  279. 1978.26f8: Size: 0x18650
  280. 1978.26f8: NT Headers: 0xe8
  281. 1978.26f8: Timestamp: 0x5a95cc4b
  282. 1978.26f8: Machine: 0x8664 - amd64
  283. 1978.26f8: Timestamp: 0x5a95cc4b
  284. 1978.26f8: Image Version: 6.3
  285. 1978.26f8: SizeOfImage: 0x21000 (135168)
  286. 1978.26f8: Resource Dir: 0x1f000 LB 0x3c8
  287. 1978.26f8: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
  288. 1978.26f8: [Raw version resource data: 0x1f0b8 LB 0x310, codepage 0x4e4 (reserved 0x0)]
  289. 1978.26f8: ProductName: SYMEVENT
  290. 1978.26f8: ProductVersion: 14.0.6.27
  291. 1978.26f8: FileVersion: 14.0.6.27
  292. 1978.26f8: FileDescription: Symantec Event Library
  293. 1978.26f8: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
  294. 1978.26f8: Calling main()
  295. 1978.26f8: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2
  296. 1978.26f8: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
  297. 1978.26f8: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
  298. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe)
  299. 1978.26f8: SUPR3HardenedMain: Respawn #2
  300. 1978.26f8: supR3HardNtEnableThreadCreation:
  301. 1978.26f8: '\Device\HarddiskVolume3\Windows\System32\ntdll.dll' has no imports
  302. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ntdll.dll)
  303. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ntdll.dll
  304. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\ntdll.dll (Input=ntdll.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
  305. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfe2b0000 'C:\WINDOWS\System32\ntdll.dll'
  306. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\apphelp.dll)
  307. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\apphelp.dll
  308. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\apphelp.dll (rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000000000:<flags> [calling]
  309. 1978.26f8: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\apphelp.dll [lacks WinVerifyTrust]
  310. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbf8670000 LB 0x0008b000 C:\WINDOWS\system32\apphelp.dll [fFlags=0x0]
  311. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\apphelp.dll [lacks WinVerifyTrust]
  312. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ntdll.dll [lacks WinVerifyTrust]
  313. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\ntdll.dll (Input=ntdll.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
  314. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfe2b0000 'C:\WINDOWS\System32\ntdll.dll'
  315. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbf8670000 'C:\WINDOWS\system32\apphelp.dll'
  316. 1978.26f8: Error -104 in supR3HardenedWinReSpawn! (enmWhat=5)
  317. 1978.26f8: Error relaunching VirtualBox VM process: 5
  318. Command line: '60eaff78-4bdd-042d-2e72-669728efd737-suplib-3rdchild --comment CentOS --startvm 7b2e78fe-0cd7-4cde-b122-aa47c0974be8 --no-startvm-errormsgbox "--sup-hardening-log=C:\Users\digni\VirtualBox VMs\CentOS\Logs\VBoxHardening.log"'
  319. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'opengl32.dll'.
  320. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
  321. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'msvcp100.dll'.
  322. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcr100.dll'.
  323. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'.
  324. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'qt5guivbox.dll'.
  325. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'qt5widgetsvbox.dll'.
  326. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'qt5printsupportvbox.dll'.
  327. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'qt5openglvbox.dll'.
  328. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'user32.dll'.
  329. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'advapi32.dll'.
  330. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'shell32.dll'.
  331. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'ole32.dll'.
  332. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'oleaut32.dll'.
  333. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #15 'winmm.dll'.
  334. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.dll)
  335. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.dll
  336. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
  337. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume3\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
  338. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'winmmbase.dll'.
  339. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'msvcrt.dll'.
  340. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\winmm.dll)
  341. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\winmm.dll
  342. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
  343. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
  344. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
  345. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'combase.dll'.
  346. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #23 'rpcrt4.dll'.
  347. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\oleaut32.dll)
  348. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\oleaut32.dll
  349. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
  350. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
  351. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #23 'rpcrt4.dll'.
  352. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #48 'gdi32.dll'.
  353. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #49 'user32.dll'.
  354. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #50 'combase.dll'.
  355. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ole32.dll)
  356. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ole32.dll
  357. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
  358. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
  359. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  360. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #74 'user32.dll'.
  361. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #76 'gdi32.dll'.
  362. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\shell32.dll)
  363. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\shell32.dll
  364. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
  365. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
  366. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  367. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'sechost.dll'.
  368. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27 'rpcrt4.dll'.
  369. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\advapi32.dll)
  370. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\advapi32.dll
  371. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  372. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  373. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'win32u.dll'.
  374. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'gdi32.dll'.
  375. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\user32.dll)
  376. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\user32.dll
  377. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5openglvbox.dll'...
  378. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5openglvbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5openglvbox.dll' [rcNtRedir=0xc0150008]
  379. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'qt5widgetsvbox.dll'.
  380. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'qt5guivbox.dll'.
  381. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5corevbox.dll'.
  382. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcr100.dll'.
  383. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll)
  384. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll
  385. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5printsupportvbox.dll'...
  386. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5printsupportvbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5printsupportvbox.dll' [rcNtRedir=0xc0150008]
  387. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
  388. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
  389. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5widgetsvbox.dll'.
  390. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5guivbox.dll'.
  391. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'.
  392. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'winspool.drv'.
  393. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'comdlg32.dll'.
  394. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcr100.dll'.
  395. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll)
  396. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll
  397. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
  398. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
  399. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
  400. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
  401. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5guivbox.dll'.
  402. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5corevbox.dll'.
  403. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'shell32.dll'.
  404. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
  405. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
  406. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll)
  407. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll
  408. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
  409. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
  410. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'ole32.dll'.
  411. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'opengl32.dll'.
  412. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
  413. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
  414. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'.
  415. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
  416. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
  417. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll)
  418. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
  419. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
  420. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
  421. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
  422. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'shell32.dll'.
  423. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ole32.dll'.
  424. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'advapi32.dll'.
  425. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ws2_32.dll'.
  426. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'mpr.dll'.
  427. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcp100.dll'.
  428. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'msvcr100.dll'.
  429. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll)
  430. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
  431. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
  432. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
  433. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll)
  434. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll
  435. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
  436. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
  437. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
  438. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll)
  439. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll
  440. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
  441. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
  442. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
  443. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
  444. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ws2_32.dll'.
  445. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'rpcrt4.dll'.
  446. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll)
  447. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
  448. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
  449. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume3\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
  450. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  451. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'advapi32.dll'.
  452. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
  453. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'gdi32.dll'.
  454. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'glu32.dll'.
  455. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\opengl32.dll)
  456. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\opengl32.dll
  457. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'glu32.dll'...
  458. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'glu32.dll' -> '\Device\HarddiskVolume3\Windows\System32\glu32.dll' [rcNtRedir=0xc0150008]
  459. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  460. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
  461. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'opengl32.dll'.
  462. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\glu32.dll)
  463. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\glu32.dll
  464. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  465. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  466. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\gdi32.dll)
  467. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\gdi32.dll
  468. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  469. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  470. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  471. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
  472. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
  473. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
  474. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  475. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  476. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\msvcrt.dll)
  477. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
  478. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  479. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  480. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll)
  481. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll
  482. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
  483. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
  484. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'rpcrt4.dll'.
  485. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ws2_32.dll)
  486. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ws2_32.dll
  487. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
  488. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
  489. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
  490. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
  491. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
  492. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
  493. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
  494. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
  495. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
  496. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
  497. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
  498. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
  499. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
  500. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
  501. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
  502. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mpr.dll'...
  503. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'mpr.dll' -> '\Device\HarddiskVolume3\Windows\System32\mpr.dll' [rcNtRedir=0xc0150008]
  504. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\mpr.dll)
  505. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\mpr.dll
  506. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
  507. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
  508. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ws2_32.dll [lacks WinVerifyTrust]
  509. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
  510. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
  511. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
  512. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
  513. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
  514. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll [lacks WinVerifyTrust]
  515. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
  516. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
  517. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll [lacks WinVerifyTrust]
  518. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  519. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  520. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  521. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
  522. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
  523. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
  524. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
  525. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
  526. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
  527. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
  528. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
  529. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
  530. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  531. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  532. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  533. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  534. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  535. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  536. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
  537. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume3\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
  538. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
  539. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
  540. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
  541. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll [lacks WinVerifyTrust]
  542. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
  543. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
  544. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
  545. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
  546. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
  547. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
  548. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
  549. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
  550. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll [lacks WinVerifyTrust]
  551. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
  552. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
  553. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
  554. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
  555. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
  556. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
  557. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  558. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  559. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  560. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  561. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  562. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  563. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
  564. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
  565. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
  566. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'comdlg32.dll'...
  567. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'comdlg32.dll' -> '\Device\HarddiskVolume3\Windows\System32\comdlg32.dll' [rcNtRedir=0xc0150008]
  568. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  569. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'user32.dll'.
  570. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'shlwapi.dll'.
  571. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #37 'gdi32.dll'.
  572. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #38 'comctl32.dll'.
  573. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #39 'shell32.dll'.
  574. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\comdlg32.dll)
  575. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\comdlg32.dll
  576. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winspool.drv'...
  577. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'winspool.drv' -> '\Device\HarddiskVolume3\Windows\System32\winspool.drv' [rcNtRedir=0xc0150008]
  578. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  579. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #24 'propsys.dll'.
  580. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #29 'iphlpapi.dll'.
  581. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #38 'bcrypt.dll'.
  582. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\winspool.drv)
  583. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\winspool.drv
  584. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
  585. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
  586. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
  587. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
  588. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
  589. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
  590. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
  591. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
  592. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
  593. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  594. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  595. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  596. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  597. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  598. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  599. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
  600. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
  601. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
  602. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
  603. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
  604. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
  605. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
  606. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
  607. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
  608. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
  609. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
  610. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
  611. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  612. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  613. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  614. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
  615. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
  616. 1978.26f8: '\Device\HarddiskVolume3\Windows\System32\win32u.dll' has no imports
  617. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\win32u.dll)
  618. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\win32u.dll
  619. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  620. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  621. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  622. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'sechost.dll'...
  623. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'sechost.dll' -> '\Device\HarddiskVolume3\Windows\System32\sechost.dll' [rcNtRedir=0xc0150008]
  624. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'rpcrt4.dll'.
  625. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\sechost.dll)
  626. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\sechost.dll
  627. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  628. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  629. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  630. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  631. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  632. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  633. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  634. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  635. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  636. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  637. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  638. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  639. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
  640. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
  641. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
  642. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #45 'bcryptprimitives.dll'.
  643. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\combase.dll)
  644. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\combase.dll
  645. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  646. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  647. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  648. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  649. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  650. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  651. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  652. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  653. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  654. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  655. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  656. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  657. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
  658. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
  659. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [lacks WinVerifyTrust]
  660. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
  661. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
  662. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll)
  663. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll
  664. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  665. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  666. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  667. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmmbase.dll'...
  668. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmmbase.dll' -> '\Device\HarddiskVolume3\Windows\System32\winmmbase.dll' [rcNtRedir=0xc0150008]
  669. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  670. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\winmmbase.dll)
  671. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\winmmbase.dll
  672. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  673. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  674. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  675. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'...
  676. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008]
  677. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll)
  678. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll
  679. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  680. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  681. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  682. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  683. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  684. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  685. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcrypt.dll'...
  686. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcrypt.dll' -> '\Device\HarddiskVolume3\Windows\System32\bcrypt.dll' [rcNtRedir=0xc0150008]
  687. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\bcrypt.dll)
  688. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\bcrypt.dll
  689. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'iphlpapi.dll'...
  690. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'iphlpapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\iphlpapi.dll' [rcNtRedir=0xc0150008]
  691. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL)
  692. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL
  693. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'propsys.dll'...
  694. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'propsys.dll' -> '\Device\HarddiskVolume3\Windows\System32\propsys.dll' [rcNtRedir=0xc0150008]
  695. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  696. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #15 'oleaut32.dll'.
  697. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #31 'rpcrt4.dll'.
  698. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\propsys.dll)
  699. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\propsys.dll
  700. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  701. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  702. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  703. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
  704. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
  705. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll [lacks WinVerifyTrust]
  706. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'comctl32.dll'...
  707. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'comctl32.dll' -> '\Device\HarddiskVolume3\Windows\System32\comctl32.dll' [rcNtRedir=0x0]
  708. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'advapi32.dll'.
  709. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
  710. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
  711. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\comctl32.dll)
  712. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\comctl32.dll
  713. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  714. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  715. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  716. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shlwapi.dll'...
  717. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'shlwapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\shlwapi.dll' [rcNtRedir=0xc0150008]
  718. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'.
  719. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #44 'gdi32.dll'.
  720. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #45 'user32.dll'.
  721. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\shlwapi.dll)
  722. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\shlwapi.dll
  723. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  724. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  725. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  726. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  727. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  728. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  729. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  730. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  731. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  732. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
  733. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume3\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
  734. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
  735. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  736. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  737. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  738. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  739. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  740. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  741. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  742. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  743. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  744. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  745. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  746. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  747. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  748. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  749. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  750. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  751. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  752. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  753. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  754. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  755. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  756. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
  757. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
  758. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
  759. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  760. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  761. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  762. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
  763. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
  764. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
  765. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  766. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  767. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  768. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VirtualBox.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000a01:<flags> [calling]
  769. 1978.26f8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.dll [lacks WinVerifyTrust]
  770. 1978.26f8: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
  771. 1978.26f8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  772. 1978.26f8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
  773. 1978.26f8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
  774. 1978.26f8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
  775. 1978.26f8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
  776. 1978.26f8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
  777. 1978.26f8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll [lacks WinVerifyTrust]
  778. 1978.26f8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll [lacks WinVerifyTrust]
  779. 1978.26f8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll [lacks WinVerifyTrust]
  780. 1978.26f8: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\glu32.dll [lacks WinVerifyTrust]
  781. 1978.26f8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\mpr.dll [lacks WinVerifyTrust]
  782. 1978.26f8: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\winspool.drv [lacks WinVerifyTrust]
  783. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'advapi32.dll'.
  784. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
  785. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
  786. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.17134.191_none_f957a2993090dc56\comctl32.dll)
  787. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.17134.191_none_f957a2993090dc56\comctl32.dll
  788. 1978.26f8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmmbase.dll [lacks WinVerifyTrust]
  789. 1978.26f8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\propsys.dll [lacks WinVerifyTrust]
  790. 1978.26f8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL [lacks WinVerifyTrust]
  791. 1978.26f8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
  792. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbfc1f0000 LB 0x0009e000 C:\WINDOWS\System32\msvcrt.dll [fFlags=0x0]
  793. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  794. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbfc420000 LB 0x00124000 C:\WINDOWS\System32\RPCRT4.dll [fFlags=0x0]
  795. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  796. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbfca40000 LB 0x0005b000 C:\WINDOWS\System32\sechost.dll [fFlags=0x0]
  797. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\sechost.dll [lacks WinVerifyTrust]
  798. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbfc6b0000 LB 0x000a1000 C:\WINDOWS\System32\ADVAPI32.dll [fFlags=0x0]
  799. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
  800. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbfa720000 LB 0x00020000 C:\WINDOWS\System32\win32u.dll [fFlags=0x0]
  801. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [lacks WinVerifyTrust]
  802. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbfaa70000 LB 0x000fa000 C:\WINDOWS\System32\ucrtbase.dll [fFlags=0x0]
  803. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ucrtbase.dll)
  804. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll
  805. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbfa680000 LB 0x0009f000 C:\WINDOWS\System32\msvcp_win.dll [fFlags=0x0]
  806. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust]
  807. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbfabf0000 LB 0x00192000 C:\WINDOWS\System32\gdi32full.dll [fFlags=0x0]
  808. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
  809. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #33 'gdi32.dll'.
  810. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'user32.dll'.
  811. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'win32u.dll'.
  812. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\gdi32full.dll)
  813. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\gdi32full.dll
  814. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbfcd50000 LB 0x00028000 C:\WINDOWS\System32\GDI32.dll [fFlags=0x0]
  815. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  816. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbfb740000 LB 0x00190000 C:\WINDOWS\System32\USER32.dll [fFlags=0x0]
  817. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  818. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbd8250000 LB 0x0002c000 C:\WINDOWS\SYSTEM32\GLU32.dll [fFlags=0x0]
  819. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\glu32.dll [lacks WinVerifyTrust]
  820. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbbca70000 LB 0x00120000 C:\WINDOWS\SYSTEM32\OPENGL32.dll [fFlags=0x0]
  821. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
  822. 1978.26f8: supR3HardenedDllNotificationCallback: load 0000000066060000 LB 0x000d2000 C:\Program Files\Oracle\VirtualBox\MSVCR100.dll [fFlags=0x0]
  823. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
  824. 1978.26f8: supR3HardenedDllNotificationCallback: load 0000000066140000 LB 0x00098000 C:\Program Files\Oracle\VirtualBox\MSVCP100.dll [fFlags=0x0]
  825. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
  826. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbfc640000 LB 0x0006c000 C:\WINDOWS\System32\WS2_32.dll [fFlags=0x0]
  827. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ws2_32.dll [lacks WinVerifyTrust]
  828. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffb9c690000 LB 0x00595000 C:\Program Files\Oracle\VirtualBox\VBoxRT.dll [fFlags=0x0]
  829. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  830. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbfaa20000 LB 0x00049000 C:\WINDOWS\System32\cfgmgr32.dll [fFlags=0x0]
  831. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll)
  832. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll
  833. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbfab70000 LB 0x0007a000 C:\WINDOWS\System32\bcryptPrimitives.dll [fFlags=0x0]
  834. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust]
  835. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbfbec0000 LB 0x00323000 C:\WINDOWS\System32\combase.dll [fFlags=0x0]
  836. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [lacks WinVerifyTrust]
  837. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbfc920000 LB 0x000a9000 C:\WINDOWS\System32\shcore.dll [fFlags=0x0]
  838. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  839. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #37 'rpcrt4.dll'.
  840. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #44 'combase.dll'.
  841. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\SHCore.dll)
  842. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\SHCore.dll
  843. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbfc9e0000 LB 0x00051000 C:\WINDOWS\System32\shlwapi.dll [fFlags=0x0]
  844. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shlwapi.dll [lacks WinVerifyTrust]
  845. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbfa610000 LB 0x00011000 C:\WINDOWS\System32\kernel.appcore.dll [fFlags=0x0]
  846. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcrt.dll'.
  847. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'rpcrt4.dll'.
  848. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll)
  849. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll
  850. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbfa5f0000 LB 0x0001f000 C:\WINDOWS\System32\profapi.dll [fFlags=0x0]
  851. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\profapi.dll)
  852. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\profapi.dll
  853. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbfa630000 LB 0x0004c000 C:\WINDOWS\System32\powrprof.dll [fFlags=0x0]
  854. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'rpcrt4.dll'.
  855. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\powrprof.dll)
  856. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\powrprof.dll
  857. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbfa5e0000 LB 0x0000a000 C:\WINDOWS\System32\FLTLIB.DLL [fFlags=0x0]
  858. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\fltLib.dll)
  859. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\fltLib.dll
  860. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbfb030000 LB 0x0070d000 C:\WINDOWS\System32\windows.storage.dll [fFlags=0x0]
  861. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  862. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'rpcrt4.dll'.
  863. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #54 'combase.dll'.
  864. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #58 'profapi.dll'.
  865. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #81 'fltlib.dll'.
  866. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\windows.storage.dll)
  867. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\windows.storage.dll
  868. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbfcd80000 LB 0x01440000 C:\WINDOWS\System32\SHELL32.dll [fFlags=0x0]
  869. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll [lacks WinVerifyTrust]
  870. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbfcb70000 LB 0x00151000 C:\WINDOWS\System32\ole32.dll [fFlags=0x0]
  871. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll [lacks WinVerifyTrust]
  872. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbed400000 LB 0x0001a000 C:\WINDOWS\SYSTEM32\MPR.dll [fFlags=0x0]
  873. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\mpr.dll [lacks WinVerifyTrust]
  874. 1978.26f8: supR3HardenedDllNotificationCallback: load 0000000065a90000 LB 0x00565000 C:\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [fFlags=0x0]
  875. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
  876. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffb9b420000 LB 0x005f7000 C:\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [fFlags=0x0]
  877. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
  878. 1978.26f8: supR3HardenedDllNotificationCallback: load 0000000065520000 LB 0x00561000 C:\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [fFlags=0x0]
  879. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
  880. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbfcaa0000 LB 0x000c2000 C:\WINDOWS\System32\OLEAUT32.dll [fFlags=0x0]
  881. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
  882. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbf90d0000 LB 0x001b4000 C:\WINDOWS\SYSTEM32\PROPSYS.dll [fFlags=0x0]
  883. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\propsys.dll [lacks WinVerifyTrust]
  884. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbf9b60000 LB 0x00038000 C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL [fFlags=0x0]
  885. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL [lacks WinVerifyTrust]
  886. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbfa120000 LB 0x00025000 C:\WINDOWS\SYSTEM32\bcrypt.dll [fFlags=0x0]
  887. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
  888. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbf3f70000 LB 0x00084000 C:\WINDOWS\SYSTEM32\WINSPOOL.DRV [fFlags=0x0]
  889. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\winspool.drv [lacks WinVerifyTrust]
  890. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbf0410000 LB 0x000a7000 C:\WINDOWS\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.17134.191_none_f957a2993090dc56\COMCTL32.dll [fFlags=0x0]
  891. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.17134.191_none_f957a2993090dc56\comctl32.dll [lacks WinVerifyTrust]
  892. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbfc760000 LB 0x000ed000 C:\WINDOWS\System32\COMDLG32.dll [fFlags=0x0]
  893. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\comdlg32.dll [lacks WinVerifyTrust]
  894. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbcace0000 LB 0x00051000 C:\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll [fFlags=0x0]
  895. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll [lacks WinVerifyTrust]
  896. 1978.26f8: supR3HardenedDllNotificationCallback: load 0000000066000000 LB 0x00054000 C:\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll [fFlags=0x0]
  897. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll [lacks WinVerifyTrust]
  898. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbf7160000 LB 0x0002a000 C:\WINDOWS\SYSTEM32\WINMMBASE.dll [fFlags=0x0]
  899. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmmbase.dll [lacks WinVerifyTrust]
  900. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbf7190000 LB 0x00023000 C:\WINDOWS\SYSTEM32\WINMM.dll [fFlags=0x0]
  901. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll [lacks WinVerifyTrust]
  902. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffb9ba20000 LB 0x00a06000 C:\Program Files\Oracle\VirtualBox\VirtualBox.dll [fFlags=0x0]
  903. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.dll [lacks WinVerifyTrust]
  904. 1978.26f8: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
  905. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
  906. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfa740000 'api-ms-win-core-synch-l1-2-0'
  907. 1978.26f8: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
  908. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
  909. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfa740000 'api-ms-win-core-fibers-l1-1-1'
  910. 1978.26f8: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
  911. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
  912. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfa740000 'api-ms-win-core-fibers-l1-1-1'
  913. 1978.26f8: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
  914. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
  915. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfa740000 'api-ms-win-core-synch-l1-2-0'
  916. 1978.26f8: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-l1-2-1) -> 0x0, fPresent=1
  917. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-l1-2-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
  918. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfa740000 'api-ms-win-core-localization-l1-2-1'
  919. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
  920. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'fltlib.dll'...
  921. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'fltlib.dll' -> '\Device\HarddiskVolume3\Windows\System32\fltlib.dll' [rcNtRedir=0xc0150008]
  922. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\fltLib.dll [lacks WinVerifyTrust]
  923. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'profapi.dll'...
  924. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'profapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\profapi.dll' [rcNtRedir=0xc0150008]
  925. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\profapi.dll [lacks WinVerifyTrust]
  926. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
  927. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
  928. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [lacks WinVerifyTrust]
  929. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  930. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  931. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  932. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  933. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  934. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  935. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  936. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  937. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  938. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  939. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  940. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  941. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  942. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  943. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  944. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
  945. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
  946. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [lacks WinVerifyTrust]
  947. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  948. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  949. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  950. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  951. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  952. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  953. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
  954. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
  955. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [lacks WinVerifyTrust]
  956. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  957. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  958. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  959. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  960. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  961. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  962. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
  963. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
  964. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust]
  965. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  966. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  967. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  968. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  969. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  970. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  971. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
  972. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
  973. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
  974. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\kernel32.dll (Input=kernel32, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
  975. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfe1c0000 'C:\WINDOWS\System32\kernel32.dll'
  976. 1978.26f8: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-string-l1-1-0) -> 0x0, fPresent=1
  977. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-string-l1-1-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
  978. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfa740000 'api-ms-win-core-string-l1-1-0'
  979. 1978.26f8: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-datetime-l1-1-1) -> 0x0, fPresent=1
  980. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-datetime-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
  981. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfa740000 'api-ms-win-core-datetime-l1-1-1'
  982. 1978.26f8: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-obsolete-l1-2-0) -> 0x0, fPresent=1
  983. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-obsolete-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
  984. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfa740000 'api-ms-win-core-localization-obsolete-l1-2-0'
  985. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'user32.dll'.
  986. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #25 'win32u.dll'.
  987. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\imm32.dll)
  988. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\imm32.dll
  989. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
  990. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
  991. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [lacks WinVerifyTrust]
  992. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  993. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  994. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  995. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\IMM32.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
  996. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbfc8f0000 LB 0x0002d000 C:\WINDOWS\System32\IMM32.DLL [fFlags=0x0]
  997. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\imm32.dll [lacks WinVerifyTrust]
  998. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfc8f0000 'C:\WINDOWS\system32\IMM32.DLL'
  999. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
  1000. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\kernel32.dll (Input=kernel32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1001. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfe1c0000 'C:\WINDOWS\System32\kernel32.dll'
  1002. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1003. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1004. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb9c690000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1005. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1006. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1007. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb9c690000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1008. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1009. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1010. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb9c690000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1011. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1012. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1013. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb9c690000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1014. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1015. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1016. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb9c690000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1017. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1018. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1019. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb9c690000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1020. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1021. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb9c690000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1022. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1023. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb9c690000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1024. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1025. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb9c690000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1026. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1027. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb9c690000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1028. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1029. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb9c690000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1030. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1031. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb9c690000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1032. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1033. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb9c690000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1034. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1035. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1036. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb9c690000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1037. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1038. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb9c690000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1039. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1040. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb9c690000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1041. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1042. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb9c690000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1043. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1044. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb9c690000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1045. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1046. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb9c690000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1047. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1048. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb9c690000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1049. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1050. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb9c690000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1051. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1052. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb9c690000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1053. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1054. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb9c690000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1055. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1056. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb9c690000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1057. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1058. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb9c690000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1059. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1060. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb9c690000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1061. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1062. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb9c690000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1063. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1064. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb9c690000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1065. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1066. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb9c690000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1067. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1068. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1069. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb9c690000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1070. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1071. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb9c690000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1072. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  1073. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb9c690000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1074. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\imm32.dll [lacks WinVerifyTrust]
  1075. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\imm32.dll (Input=imm32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1076. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfc8f0000 'C:\WINDOWS\System32\imm32.dll'
  1077. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
  1078. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\ADVAPI32.DLL (Input=ADVAPI32.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1079. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfc6b0000 'C:\WINDOWS\System32\ADVAPI32.DLL'
  1080. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'bcryptprimitives.dll'.
  1081. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\cryptbase.dll)
  1082. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\cryptbase.dll
  1083. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbfa110000 LB 0x0000b000 C:\WINDOWS\SYSTEM32\CRYPTBASE.DLL [fFlags=0x0]
  1084. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\cryptbase.dll [lacks WinVerifyTrust]
  1085. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb9ba20000 'C:\Program Files\Oracle\VirtualBox\VirtualBox.dll'
  1086. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
  1087. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'ole32.dll'.
  1088. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
  1089. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'imm32.dll'.
  1090. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'winmm.dll'.
  1091. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'oleaut32.dll'.
  1092. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'shell32.dll'.
  1093. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'advapi32.dll'.
  1094. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'qt5guivbox.dll'.
  1095. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'qt5corevbox.dll'.
  1096. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'msvcr100.dll'.
  1097. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\platforms\qwindows.dll)
  1098. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\platforms\qwindows.dll
  1099. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
  1100. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
  1101. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
  1102. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
  1103. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
  1104. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
  1105. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
  1106. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
  1107. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
  1108. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
  1109. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
  1110. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
  1111. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
  1112. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
  1113. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll [lacks WinVerifyTrust]
  1114. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
  1115. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
  1116. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
  1117. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
  1118. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume3\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
  1119. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll [lacks WinVerifyTrust]
  1120. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'...
  1121. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume3\Windows\System32\imm32.dll' [rcNtRedir=0xc0150008]
  1122. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\imm32.dll [lacks WinVerifyTrust]
  1123. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  1124. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  1125. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  1126. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
  1127. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
  1128. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll [lacks WinVerifyTrust]
  1129. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  1130. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  1131. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  1132. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'...
  1133. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008]
  1134. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust]
  1135. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1136. 1978.26f8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\platforms\qwindows.dll [lacks WinVerifyTrust]
  1137. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffb9d8b0000 LB 0x0012e000 C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll [fFlags=0x0]
  1138. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\platforms\qwindows.dll [lacks WinVerifyTrust]
  1139. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb9d8b0000 'C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll'
  1140. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1141. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #33 'gdi32.dll'.
  1142. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'user32.dll'.
  1143. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\uxtheme.dll)
  1144. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\uxtheme.dll
  1145. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  1146. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  1147. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  1148. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  1149. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  1150. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  1151. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1152. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1153. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1154. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
  1155. 1978.26f8: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\uxtheme.dll [lacks WinVerifyTrust]
  1156. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbf8830000 LB 0x00098000 C:\WINDOWS\system32\uxtheme.dll [fFlags=0x0]
  1157. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\uxtheme.dll [lacks WinVerifyTrust]
  1158. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbf8830000 'C:\WINDOWS\system32\uxtheme.dll'
  1159. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  1160. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfb740000 'C:\WINDOWS\system32\user32.dll'
  1161. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll [lacks WinVerifyTrust]
  1162. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1163. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfcd80000 'C:\WINDOWS\system32\shell32.dll'
  1164. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\SHCore.dll [lacks WinVerifyTrust]
  1165. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\SHCore.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1166. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfc920000 'C:\WINDOWS\system32\SHCore.dll'
  1167. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: error opening 'C:\WINDOWS\system32\wintab32.dll': 0 (NtPath=\??\C:\WINDOWS\system32\wintab32.dll; Input=C:\WINDOWS\system32\wintab32.dll; rcNtGetDll=0x0
  1168. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000034 'C:\WINDOWS\system32\wintab32.dll'
  1169. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1170. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #21 'win32u.dll'.
  1171. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #22 'user32.dll'.
  1172. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #23 'gdi32.dll'.
  1173. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\dwmapi.dll)
  1174. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\dwmapi.dll
  1175. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbf8a80000 LB 0x00029000 C:\WINDOWS\system32\dwmapi.dll [fFlags=0x0]
  1176. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dwmapi.dll [lacks WinVerifyTrust]
  1177. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll [lacks WinVerifyTrust]
  1178. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  1179. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  1180. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  1181. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  1182. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  1183. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  1184. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
  1185. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
  1186. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [lacks WinVerifyTrust]
  1187. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1188. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1189. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1190. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\winmm.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1191. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbf7190000 'C:\WINDOWS\system32\winmm.dll'
  1192. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll [lacks WinVerifyTrust]
  1193. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\winmm.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1194. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbf7190000 'C:\WINDOWS\system32\winmm.dll'
  1195. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll [lacks WinVerifyTrust]
  1196. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1197. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfcd80000 'C:\WINDOWS\system32\shell32.dll'
  1198. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\uxtheme.dll [lacks WinVerifyTrust]
  1199. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1200. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbf8830000 'C:\WINDOWS\system32\uxtheme.dll'
  1201. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  1202. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\gdi32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1203. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfcd50000 'C:\WINDOWS\system32\gdi32.dll'
  1204. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbfc2a0000 LB 0x00175000 C:\WINDOWS\System32\MSCTF.dll [fFlags=0x0]
  1205. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1206. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'oleaut32.dll'.
  1207. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #38 'user32.dll'.
  1208. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #39 'gdi32.dll'.
  1209. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #40 'imm32.dll'.
  1210. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\msctf.dll)
  1211. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msctf.dll
  1212. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  1213. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'...
  1214. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume3\Windows\System32\imm32.dll' [rcNtRedir=0xc0150008]
  1215. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\imm32.dll [lacks WinVerifyTrust]
  1216. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  1217. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  1218. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  1219. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  1220. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  1221. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  1222. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
  1223. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
  1224. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
  1225. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1226. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1227. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1228. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfc420000 'C:\WINDOWS\System32\rpcrt4.dll'
  1229. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbfc850000 LB 0x000a0000 C:\WINDOWS\System32\clbcatq.dll [fFlags=0x0]
  1230. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1231. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #28 'rpcrt4.dll'.
  1232. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\clbcatq.dll)
  1233. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\clbcatq.dll
  1234. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1235. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'shcore.dll'.
  1236. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #29 'combase.dll'.
  1237. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'd3d11.dll'.
  1238. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'dcomp.dll'.
  1239. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\DataExchange.dll)
  1240. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\DataExchange.dll
  1241. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dcomp.dll'...
  1242. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'dcomp.dll' -> '\Device\HarddiskVolume3\Windows\System32\dcomp.dll' [rcNtRedir=0xc0150008]
  1243. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'win32u.dll'.
  1244. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp_win.dll'.
  1245. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'oleaut32.dll'.
  1246. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #37 'dxgi.dll'.
  1247. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\dcomp.dll)
  1248. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\dcomp.dll
  1249. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'd3d11.dll'...
  1250. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'd3d11.dll' -> '\Device\HarddiskVolume3\Windows\System32\d3d11.dll' [rcNtRedir=0xc0150008]
  1251. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1252. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'dxgi.dll'.
  1253. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'win32u.dll'.
  1254. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\d3d11.dll)
  1255. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\d3d11.dll
  1256. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
  1257. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
  1258. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [lacks WinVerifyTrust]
  1259. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shcore.dll'...
  1260. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'shcore.dll' -> '\Device\HarddiskVolume3\Windows\System32\shcore.dll' [rcNtRedir=0xc0150008]
  1261. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\SHCore.dll [lacks WinVerifyTrust]
  1262. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1263. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1264. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1265. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  1266. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  1267. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  1268. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1269. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1270. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1271. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
  1272. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
  1273. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [lacks WinVerifyTrust]
  1274. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dxgi.dll'...
  1275. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'dxgi.dll' -> '\Device\HarddiskVolume3\Windows\System32\dxgi.dll' [rcNtRedir=0xc0150008]
  1276. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1277. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'win32u.dll'.
  1278. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\dxgi.dll)
  1279. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\dxgi.dll
  1280. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1281. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1282. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1283. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dxgi.dll'...
  1284. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'dxgi.dll' -> '\Device\HarddiskVolume3\Windows\System32\dxgi.dll' [rcNtRedir=0xc0150008]
  1285. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dxgi.dll [lacks WinVerifyTrust]
  1286. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
  1287. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
  1288. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
  1289. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
  1290. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
  1291. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust]
  1292. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
  1293. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
  1294. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [lacks WinVerifyTrust]
  1295. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
  1296. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
  1297. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [lacks WinVerifyTrust]
  1298. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1299. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1300. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1301. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\dataexchange.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
  1302. 1978.26f8: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\DataExchange.dll [lacks WinVerifyTrust]
  1303. 1978.26f8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\d3d11.dll [lacks WinVerifyTrust]
  1304. 1978.26f8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dcomp.dll [lacks WinVerifyTrust]
  1305. 1978.26f8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dxgi.dll [lacks WinVerifyTrust]
  1306. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbf9380000 LB 0x000bb000 C:\WINDOWS\system32\dxgi.dll [fFlags=0x0]
  1307. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dxgi.dll [lacks WinVerifyTrust]
  1308. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbf76b0000 LB 0x0030b000 C:\WINDOWS\system32\d3d11.dll [fFlags=0x0]
  1309. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\d3d11.dll [lacks WinVerifyTrust]
  1310. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbf7f90000 LB 0x0019c000 C:\WINDOWS\system32\dcomp.dll [fFlags=0x0]
  1311. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dcomp.dll [lacks WinVerifyTrust]
  1312. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbdc5f0000 LB 0x00058000 C:\WINDOWS\system32\dataexchange.dll [fFlags=0x0]
  1313. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\DataExchange.dll [lacks WinVerifyTrust]
  1314. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  1315. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfcd50000 'C:\WINDOWS\System32\gdi32.dll'
  1316. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdc5f0000 'C:\WINDOWS\system32\dataexchange.dll'
  1317. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1318. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'rmclient.dll'.
  1319. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #30 'rpcrt4.dll'.
  1320. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #44 'combase.dll'.
  1321. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll)
  1322. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll
  1323. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1324. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'rpcrt4.dll'.
  1325. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\rmclient.dll)
  1326. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\rmclient.dll
  1327. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbf8b60000 LB 0x00021000 C:\WINDOWS\system32\RMCLIENT.dll [fFlags=0x0]
  1328. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rmclient.dll [lacks WinVerifyTrust]
  1329. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbf8bc0000 LB 0x001b8000 C:\WINDOWS\system32\twinapi.appcore.dll [fFlags=0x0]
  1330. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll [lacks WinVerifyTrust]
  1331. 1978.3ef8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #16 'rpcrt4.dll'.
  1332. 1978.3ef8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'devobj.dll'.
  1333. 1978.3ef8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'propsys.dll'.
  1334. 1978.3ef8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll)
  1335. 1978.3ef8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll
  1336. 1978.3ef8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #17 'cfgmgr32.dll'.
  1337. 1978.3ef8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\devobj.dll)
  1338. 1978.3ef8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\devobj.dll
  1339. 1978.3ef8: supR3HardenedDllNotificationCallback: load 00007ffbfa3d0000 LB 0x00027000 C:\WINDOWS\SYSTEM32\DEVOBJ.dll [fFlags=0x0]
  1340. 1978.3ef8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\devobj.dll [lacks WinVerifyTrust]
  1341. 1978.3ef8: supR3HardenedDllNotificationCallback: load 00007ffbede20000 LB 0x00076000 C:\WINDOWS\SYSTEM32\MMDevAPI.DLL [fFlags=0x0]
  1342. 1978.3ef8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
  1343. 1978.3ef8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1344. 1978.3ef8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'mmdevapi.dll'.
  1345. 1978.3ef8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27 'ksuser.dll'.
  1346. 1978.3ef8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #28 'avrt.dll'.
  1347. 1978.3ef8: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\wdmaud.drv)
  1348. 1978.3ef8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\wdmaud.drv
  1349. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'avrt.dll'...
  1350. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: 'avrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\avrt.dll' [rcNtRedir=0xc0150008]
  1351. 1978.3ef8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\avrt.dll)
  1352. 1978.3ef8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\avrt.dll
  1353. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ksuser.dll'...
  1354. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: 'ksuser.dll' -> '\Device\HarddiskVolume3\Windows\System32\ksuser.dll' [rcNtRedir=0xc0150008]
  1355. 1978.3ef8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1356. 1978.3ef8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ksuser.dll)
  1357. 1978.3ef8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ksuser.dll
  1358. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mmdevapi.dll'...
  1359. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: 'mmdevapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\mmdevapi.dll' [rcNtRedir=0xc0150008]
  1360. 1978.3ef8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
  1361. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1362. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1363. 1978.3ef8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1364. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'cfgmgr32.dll'...
  1365. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: 'cfgmgr32.dll' -> '\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll' [rcNtRedir=0xc0150008]
  1366. 1978.3ef8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll [lacks WinVerifyTrust]
  1367. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'propsys.dll'...
  1368. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: 'propsys.dll' -> '\Device\HarddiskVolume3\Windows\System32\propsys.dll' [rcNtRedir=0xc0150008]
  1369. 1978.3ef8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\propsys.dll [lacks WinVerifyTrust]
  1370. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'devobj.dll'...
  1371. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: 'devobj.dll' -> '\Device\HarddiskVolume3\Windows\System32\devobj.dll' [rcNtRedir=0xc0150008]
  1372. 1978.3ef8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\devobj.dll [lacks WinVerifyTrust]
  1373. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  1374. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  1375. 1978.3ef8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  1376. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  1377. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  1378. 1978.3ef8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  1379. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1380. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1381. 1978.3ef8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1382. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
  1383. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
  1384. 1978.3ef8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [lacks WinVerifyTrust]
  1385. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  1386. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  1387. 1978.3ef8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  1388. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rmclient.dll'...
  1389. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rmclient.dll' -> '\Device\HarddiskVolume3\Windows\System32\rmclient.dll' [rcNtRedir=0xc0150008]
  1390. 1978.3ef8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rmclient.dll [lacks WinVerifyTrust]
  1391. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1392. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1393. 1978.3ef8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1394. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1395. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1396. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #15 'coreuicomponents.dll'.
  1397. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #16 'coremessaging.dll'.
  1398. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1399. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\TextInputFramework.dll)
  1400. 1978.3ef8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1401. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\TextInputFramework.dll
  1402. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coremessaging.dll'...
  1403. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: 'coremessaging.dll' -> '\Device\HarddiskVolume3\Windows\System32\coremessaging.dll' [rcNtRedir=0xc0150008]
  1404. 1978.3ef8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1405. 1978.3ef8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #24 'rpcrt4.dll'.
  1406. 1978.3ef8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll)
  1407. 1978.3ef8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll
  1408. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coreuicomponents.dll'...
  1409. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: 'coreuicomponents.dll' -> '\Device\HarddiskVolume3\Windows\System32\coreuicomponents.dll' [rcNtRedir=0xc0150008]
  1410. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1411. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'coremessaging.dll'.
  1412. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #48 'shcore.dll'.
  1413. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\CoreUIComponents.dll)
  1414. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\CoreUIComponents.dll
  1415. 1978.26f8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll [lacks WinVerifyTrust]
  1416. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ntmarta.dll)
  1417. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ntmarta.dll
  1418. 1978.3ef8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1419. 1978.3ef8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'coremessaging.dll'.
  1420. 1978.3ef8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #48 'shcore.dll'.
  1421. 1978.3ef8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\CoreUIComponents.dll)
  1422. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1423. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1424. 1978.3ef8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1425. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shcore.dll'...
  1426. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: 'shcore.dll' -> '\Device\HarddiskVolume3\Windows\System32\shcore.dll' [rcNtRedir=0xc0150008]
  1427. 1978.3ef8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\SHCore.dll [lacks WinVerifyTrust]
  1428. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coremessaging.dll'...
  1429. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: 'coremessaging.dll' -> '\Device\HarddiskVolume3\Windows\System32\coremessaging.dll' [rcNtRedir=0xc0150008]
  1430. 1978.3ef8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll [lacks WinVerifyTrust]
  1431. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1432. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1433. 1978.3ef8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1434. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shcore.dll'...
  1435. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: 'shcore.dll' -> '\Device\HarddiskVolume3\Windows\System32\shcore.dll' [rcNtRedir=0xc0150008]
  1436. 1978.3ef8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\SHCore.dll [lacks WinVerifyTrust]
  1437. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coremessaging.dll'...
  1438. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: 'coremessaging.dll' -> '\Device\HarddiskVolume3\Windows\System32\coremessaging.dll' [rcNtRedir=0xc0150008]
  1439. 1978.3ef8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll [lacks WinVerifyTrust]
  1440. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1441. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1442. 1978.3ef8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1443. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  1444. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  1445. 1978.3ef8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  1446. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1447. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1448. 1978.3ef8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1449. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
  1450. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'combase.dll'.
  1451. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #22 'rpcrt4.dll'.
  1452. 1978.26f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #29 'bcryptprimitives.dll'.
  1453. 1978.26f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\WinTypes.dll)
  1454. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\WinTypes.dll
  1455. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbf9760000 LB 0x00031000 C:\WINDOWS\SYSTEM32\ntmarta.dll [fFlags=0x0]
  1456. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ntmarta.dll [lacks WinVerifyTrust]
  1457. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbf8130000 LB 0x000da000 C:\WINDOWS\System32\CoreMessaging.dll [fFlags=0x0]
  1458. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll [lacks WinVerifyTrust]
  1459. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbf6630000 LB 0x0014d000 C:\WINDOWS\SYSTEM32\wintypes.dll [fFlags=0x0]
  1460. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\WinTypes.dll [lacks WinVerifyTrust]
  1461. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbf5b40000 LB 0x0031e000 C:\WINDOWS\System32\CoreUIComponents.dll [fFlags=0x0]
  1462. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\CoreUIComponents.dll [lacks WinVerifyTrust]
  1463. 1978.26f8: supR3HardenedDllNotificationCallback: load 00007ffbe8d70000 LB 0x00097000 C:\WINDOWS\System32\TextInputFramework.dll [fFlags=0x0]
  1464. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\TextInputFramework.dll [lacks WinVerifyTrust]
  1465. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
  1466. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'...
  1467. 1978.3ef8: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
  1468. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008]
  1469. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust]
  1470. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  1471. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  1472. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  1473. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
  1474. 1978.26f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
  1475. 1978.26f8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [lacks WinVerifyTrust]
  1476. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\OLEAUT32.DLL (Input=OLEAUT32.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1477. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfcaa0000 'C:\WINDOWS\System32\OLEAUT32.DLL'
  1478. 1978.3ef8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ksuser.dll [lacks WinVerifyTrust]
  1479. 1978.3ef8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\avrt.dll [lacks WinVerifyTrust]
  1480. 1978.26f8: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(ext-ms-win-rtcore-ntuser-window-ext-l1-1-0.dll) -> 0x0, fPresent=1
  1481. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: pName=ext-ms-win-rtcore-ntuser-window-ext-l1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1482. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfb740000 'ext-ms-win-rtcore-ntuser-window-ext-l1-1-0.dll'
  1483. 1978.3ef8: supR3HardenedDllNotificationCallback: load 00007ffbedd60000 LB 0x00009000 C:\WINDOWS\SYSTEM32\ksuser.dll [fFlags=0x0]
  1484. 1978.26f8: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(ext-ms-win-rtcore-ntuser-integration-l1-1-0.dll) -> 0x0, fPresent=1
  1485. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: pName=ext-ms-win-rtcore-ntuser-integration-l1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1486. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfb740000 'ext-ms-win-rtcore-ntuser-integration-l1-1-0.dll'
  1487. 1978.3ef8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ksuser.dll [lacks WinVerifyTrust]
  1488. 1978.3ef8: supR3HardenedDllNotificationCallback: load 00007ffbf62a0000 LB 0x0000a000 C:\WINDOWS\SYSTEM32\AVRT.dll [fFlags=0x0]
  1489. 1978.26f8: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-com-l1-1-0.dll) -> 0x0, fPresent=1
  1490. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-com-l1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1491. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfbec0000 'api-ms-win-core-com-l1-1-0.dll'
  1492. 1978.3ef8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\avrt.dll [lacks WinVerifyTrust]
  1493. 1978.3ef8: supR3HardenedDllNotificationCallback: load 00007ffbc90f0000 LB 0x00044000 C:\WINDOWS\System32\wdmaud.drv [fFlags=0x0]
  1494. 1978.3ef8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
  1495. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbc90f0000 'C:\WINDOWS\System32\wdmaud.drv'
  1496. 1978.3ef8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
  1497. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
  1498. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbc90f0000 'C:\WINDOWS\System32\wdmaud.drv'
  1499. 1978.3ef8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
  1500. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\MMDEVAPI.DLL (Input=MMDEVAPI.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1501. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbede20000 'C:\WINDOWS\System32\MMDEVAPI.DLL'
  1502. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msctf.dll [lacks WinVerifyTrust]
  1503. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\MSCTF.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
  1504. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfc2a0000 'C:\WINDOWS\System32\MSCTF.dll'
  1505. 1978.3ef8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
  1506. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
  1507. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbc90f0000 'C:\WINDOWS\System32\wdmaud.drv'
  1508. 1978.3ef8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
  1509. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
  1510. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbc90f0000 'C:\WINDOWS\System32\wdmaud.drv'
  1511. 1978.3ef8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
  1512. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
  1513. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbc90f0000 'C:\WINDOWS\System32\wdmaud.drv'
  1514. 1978.3ef8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
  1515. 1978.3ef8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'rpcrt4.dll'.
  1516. 1978.3ef8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'oleaut32.dll'.
  1517. 1978.3ef8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #55 'mmdevapi.dll'.
  1518. 1978.3ef8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #56 'avrt.dll'.
  1519. 1978.3ef8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\AudioSes.dll)
  1520. 1978.3ef8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\AudioSes.dll
  1521. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'avrt.dll'...
  1522. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: 'avrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\avrt.dll' [rcNtRedir=0xc0150008]
  1523. 1978.3ef8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\avrt.dll [lacks WinVerifyTrust]
  1524. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mmdevapi.dll'...
  1525. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: 'mmdevapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\mmdevapi.dll' [rcNtRedir=0xc0150008]
  1526. 1978.3ef8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
  1527. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
  1528. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
  1529. 1978.3ef8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
  1530. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  1531. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  1532. 1978.3ef8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  1533. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
  1534. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
  1535. 1978.3ef8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust]
  1536. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\AUDIOSES.DLL (Input=AUDIOSES.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  1537. 1978.3ef8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\AudioSes.dll [lacks WinVerifyTrust]
  1538. 1978.3ef8: supR3HardenedDllNotificationCallback: load 00007ffbcd290000 LB 0x0012c000 C:\WINDOWS\System32\AUDIOSES.DLL [fFlags=0x0]
  1539. 1978.3ef8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\AudioSes.dll [lacks WinVerifyTrust]
  1540. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbcd290000 'C:\WINDOWS\System32\AUDIOSES.DLL'
  1541. 1978.3ef8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
  1542. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
  1543. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbc90f0000 'C:\WINDOWS\System32\wdmaud.drv'
  1544. 1978.3ef8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
  1545. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
  1546. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbc90f0000 'C:\WINDOWS\System32\wdmaud.drv'
  1547. 1978.3ef8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
  1548. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbc90f0000 'C:\WINDOWS\System32\wdmaud.drv'
  1549. 1978.3ef8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
  1550. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbc90f0000 'C:\WINDOWS\System32\wdmaud.drv'
  1551. 1978.3ef8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
  1552. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbc90f0000 'C:\WINDOWS\System32\wdmaud.drv'
  1553. 1978.3ef8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
  1554. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbc90f0000 'C:\WINDOWS\System32\wdmaud.drv'
  1555. 1978.3ef8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1556. 1978.3ef8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'mmdevapi.dll'.
  1557. 1978.3ef8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'msacm32.dll'.
  1558. 1978.3ef8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'winmmbase.dll'.
  1559. 1978.3ef8: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\msacm32.drv)
  1560. 1978.3ef8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msacm32.drv
  1561. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmmbase.dll'...
  1562. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmmbase.dll' -> '\Device\HarddiskVolume3\Windows\System32\winmmbase.dll' [rcNtRedir=0xc0150008]
  1563. 1978.3ef8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmmbase.dll [lacks WinVerifyTrust]
  1564. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msacm32.dll'...
  1565. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msacm32.dll' -> '\Device\HarddiskVolume3\Windows\System32\msacm32.dll' [rcNtRedir=0xc0150008]
  1566. 1978.3ef8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1567. 1978.3ef8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\msacm32.dll)
  1568. 1978.3ef8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msacm32.dll
  1569. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mmdevapi.dll'...
  1570. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: 'mmdevapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\mmdevapi.dll' [rcNtRedir=0xc0150008]
  1571. 1978.3ef8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
  1572. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1573. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1574. 1978.3ef8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1575. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1576. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1577. 1978.3ef8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1578. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
  1579. 1978.3ef8: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
  1580. 1978.3ef8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msacm32.dll [lacks WinVerifyTrust]
  1581. 1978.3ef8: supR3HardenedDllNotificationCallback: load 00007ffbe3d80000 LB 0x0001c000 C:\WINDOWS\SYSTEM32\MSACM32.dll [fFlags=0x0]
  1582. 1978.3ef8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msacm32.dll [lacks WinVerifyTrust]
  1583. 1978.3ef8: supR3HardenedDllNotificationCallback: load 00007ffbf55a0000 LB 0x0000d000 C:\WINDOWS\System32\msacm32.drv [fFlags=0x0]
  1584. 1978.3ef8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
  1585. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbf55a0000 'C:\WINDOWS\System32\msacm32.drv'
  1586. 1978.3ef8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
  1587. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
  1588. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbf55a0000 'C:\WINDOWS\System32\msacm32.drv'
  1589. 1978.3ef8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
  1590. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
  1591. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbf55a0000 'C:\WINDOWS\System32\msacm32.drv'
  1592. 1978.3ef8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
  1593. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
  1594. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbf55a0000 'C:\WINDOWS\System32\msacm32.drv'
  1595. 1978.3ef8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
  1596. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
  1597. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbf55a0000 'C:\WINDOWS\System32\msacm32.drv'
  1598. 1978.3ef8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
  1599. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
  1600. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbf55a0000 'C:\WINDOWS\System32\msacm32.drv'
  1601. 1978.3ef8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
  1602. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
  1603. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbf55a0000 'C:\WINDOWS\System32\msacm32.drv'
  1604. 1978.3ef8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
  1605. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbf55a0000 'C:\WINDOWS\System32\msacm32.drv'
  1606. 1978.3ef8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
  1607. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbf55a0000 'C:\WINDOWS\System32\msacm32.drv'
  1608. 1978.3ef8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
  1609. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbf55a0000 'C:\WINDOWS\System32\msacm32.drv'
  1610. 1978.3ef8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1611. 1978.3ef8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'winmm.dll'.
  1612. 1978.3ef8: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\midimap.dll)
  1613. 1978.3ef8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\midimap.dll
  1614. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
  1615. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume3\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
  1616. 1978.3ef8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll [lacks WinVerifyTrust]
  1617. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1618. 1978.3ef8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1619. 1978.3ef8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  1620. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
  1621. 1978.3ef8: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\midimap.dll [lacks WinVerifyTrust]
  1622. 1978.3ef8: supR3HardenedDllNotificationCallback: load 00007ffbe87d0000 LB 0x0000a000 C:\WINDOWS\System32\midimap.dll [fFlags=0x0]
  1623. 1978.3ef8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\midimap.dll [lacks WinVerifyTrust]
  1624. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbe87d0000 'C:\WINDOWS\System32\midimap.dll'
  1625. 1978.3ef8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\midimap.dll [lacks WinVerifyTrust]
  1626. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
  1627. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbe87d0000 'C:\WINDOWS\System32\midimap.dll'
  1628. 1978.3ef8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\midimap.dll [lacks WinVerifyTrust]
  1629. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
  1630. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbe87d0000 'C:\WINDOWS\System32\midimap.dll'
  1631. 1978.3ef8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\midimap.dll [lacks WinVerifyTrust]
  1632. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
  1633. 1978.3ef8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbe87d0000 'C:\WINDOWS\System32\midimap.dll'
  1634. 1978.4d6c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
  1635. 1978.4d6c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\MMDevApi.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
  1636. 1978.4d6c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbede20000 'C:\WINDOWS\System32\MMDevApi.dll'
  1637. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll [lacks WinVerifyTrust]
  1638. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\ole32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
  1639. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfcb70000 'C:\WINDOWS\system32\ole32.dll'
  1640. 1978.26f8: supHardenedWinVerifyImageByHandle: -> -23021 (\Device\HarddiskVolume3\Program Files\JustSystems\ATOK31_X64\ATOK31TIP.DLL)
  1641. 1978.26f8: Error (rc=0):
  1642. 1978.26f8: supR3HardenedScreenImage/LdrLoadDll: rc=Unknown Status -23021 (0xffffa613) fImage=1 fProtect=0x0 fAccess=0x0 \Device\HarddiskVolume3\Program Files\JustSystems\ATOK31_X64\ATOK31TIP.DLL: None of the 1 path(s) have a trust anchor.: \Device\HarddiskVolume3\Program Files\JustSystems\ATOK31_X64\ATOK31TIP.DLL
  1643. 1978.26f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\JustSystems\ATOK31_X64\ATOK31TIP.DLL
  1644. 1978.26f8: Error (rc=0):
  1645. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: rejecting 'C:\Program Files\JustSystems\ATOK31_X64\ATOK31TIP.DLL' (C:\Program Files\JustSystems\ATOK31_X64\ATOK31TIP.DLL): rcNt=0xc0000190
  1646. 1978.26f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000190 'C:\Program Files\JustSystems\ATOK31_X64\ATOK31TIP.DLL'
  1647. 408c.440: supR3HardNtChildWaitFor[1]: Quitting: ExitCode=0x1 (rcNtWait=0x0, rcNt1=0x0, rcNt2=0x103, rcNt3=0x103, 2625 ms, the end);
RAW Paste Data