VirtualBox

Ticket #15827: VBoxHardening.3.log

File VBoxHardening.3.log, 188.7 KB (added by Jeff223344, 8 years ago)
Line 
12ae8.132c: Log file opened: 5.1.22r115126 g_hStartupLog=0000000000000160 g_uNtVerCombined=0xa0383900
22ae8.132c: \SystemRoot\System32\ntdll.dll:
32ae8.132c: CreationTime: 2017-02-27T18:09:52.137253500Z
42ae8.132c: LastWriteTime: 2017-02-27T18:09:52.165262000Z
52ae8.132c: ChangeTime: 2017-07-14T16:19:12.473450900Z
62ae8.132c: FileAttributes: 0x20
72ae8.132c: Size: 0x1cc888
82ae8.132c: NT Headers: 0xd8
92ae8.132c: Timestamp: 0x5825887f
102ae8.132c: Machine: 0x8664 - amd64
112ae8.132c: Timestamp: 0x5825887f
122ae8.132c: Image Version: 10.0
132ae8.132c: SizeOfImage: 0x1d1000 (1904640)
142ae8.132c: Resource Dir: 0x168000 LB 0x67988
152ae8.132c: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
162ae8.132c: [Raw version resource data: 0x1680f0 LB 0x388, codepage 0x0 (reserved 0x0)]
172ae8.132c: ProductName: Microsoft® Windows® Operating System
182ae8.132c: ProductVersion: 10.0.14393.479
192ae8.132c: FileVersion: 10.0.14393.479 (rs1_release.161110-2025)
202ae8.132c: FileDescription: NT Layer DLL
212ae8.132c: \SystemRoot\System32\kernel32.dll:
222ae8.132c: CreationTime: 2017-05-31T17:24:39.430163700Z
232ae8.132c: LastWriteTime: 2017-04-28T00:49:43.332433600Z
242ae8.132c: ChangeTime: 2017-07-14T16:19:11.865293800Z
252ae8.132c: FileAttributes: 0x20
262ae8.132c: Size: 0xab208
272ae8.132c: NT Headers: 0xf0
282ae8.132c: Timestamp: 0x59028368
292ae8.132c: Machine: 0x8664 - amd64
302ae8.132c: Timestamp: 0x59028368
312ae8.132c: Image Version: 10.0
322ae8.132c: SizeOfImage: 0xac000 (704512)
332ae8.132c: Resource Dir: 0xaa000 LB 0x530
342ae8.132c: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
352ae8.132c: [Raw version resource data: 0xaa0b0 LB 0x3b4, codepage 0x0 (reserved 0x0)]
362ae8.132c: ProductName: Microsoft® Windows® Operating System
372ae8.132c: ProductVersion: 10.0.14393.1198
382ae8.132c: FileVersion: 10.0.14393.1198 (rs1_release_sec.170427-1353)
392ae8.132c: FileDescription: Windows NT BASE API Client DLL
402ae8.132c: \SystemRoot\System32\KernelBase.dll:
412ae8.132c: CreationTime: 2017-07-14T16:11:04.020934100Z
422ae8.132c: LastWriteTime: 2017-06-03T10:09:08.071687200Z
432ae8.132c: ChangeTime: 2017-07-15T16:28:38.492525100Z
442ae8.132c: FileAttributes: 0x20
452ae8.132c: Size: 0x21c780
462ae8.132c: NT Headers: 0xf8
472ae8.132c: Timestamp: 0x59327897
482ae8.132c: Machine: 0x8664 - amd64
492ae8.132c: Timestamp: 0x59327897
502ae8.132c: Image Version: 10.0
512ae8.132c: SizeOfImage: 0x21d000 (2215936)
522ae8.132c: Resource Dir: 0x201000 LB 0x550
532ae8.132c: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
542ae8.132c: [Raw version resource data: 0x2010b0 LB 0x3c4, codepage 0x0 (reserved 0x0)]
552ae8.132c: ProductName: Microsoft® Windows® Operating System
562ae8.132c: ProductVersion: 10.0.14393.1358
572ae8.132c: FileVersion: 10.0.14393.1358 (rs1_release.170602-2252)
582ae8.132c: FileDescription: Windows NT BASE API Client DLL
592ae8.132c: \SystemRoot\System32\apisetschema.dll:
602ae8.132c: CreationTime: 2016-07-16T11:42:21.577586000Z
612ae8.132c: LastWriteTime: 2016-07-16T11:42:21.577586000Z
622ae8.132c: ChangeTime: 2017-05-25T16:04:28.657703100Z
632ae8.132c: FileAttributes: 0x20
642ae8.132c: Size: 0x18960
652ae8.132c: NT Headers: 0xc8
662ae8.132c: Timestamp: 0x57899bd2
672ae8.132c: Machine: 0x8664 - amd64
682ae8.132c: Timestamp: 0x57899bd2
692ae8.132c: Image Version: 10.0
702ae8.132c: SizeOfImage: 0x19000 (102400)
712ae8.132c: Resource Dir: 0x18000 LB 0x400
722ae8.132c: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
732ae8.132c: [Raw version resource data: 0x18060 LB 0x3a0, codepage 0x0 (reserved 0x0)]
742ae8.132c: ProductName: Microsoft® Windows® Operating System
752ae8.132c: ProductVersion: 10.0.14393.0
762ae8.132c: FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
772ae8.132c: FileDescription: ApiSet Schema DLL
782ae8.132c: NtOpenDirectoryObject failed on \Driver: 0xc0000022
792ae8.132c: supR3HardenedWinFindAdversaries: 0x10000
802ae8.132c: \SystemRoot\System32\drivers\privman.sys:
812ae8.132c: CreationTime: 2017-07-28T14:37:28.355320000Z
822ae8.132c: LastWriteTime: 2017-06-22T19:55:22.000000000Z
832ae8.132c: ChangeTime: 2017-07-31T14:22:56.861880500Z
842ae8.132c: FileAttributes: 0x20
852ae8.132c: Size: 0x10630
862ae8.132c: NT Headers: 0x100
872ae8.132c: Timestamp: 0x594be0d5
882ae8.132c: Machine: 0x8664 - amd64
892ae8.132c: Timestamp: 0x594be0d5
902ae8.132c: Image Version: 6.1
912ae8.132c: SizeOfImage: 0xf000 (61440)
922ae8.132c: Resource Dir: 0xb000 LB 0x2fa8
932ae8.132c: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x0)]
942ae8.132c: [Raw version resource data: 0xb0a0 LB 0x33c, codepage 0x0 (reserved 0x0)]
952ae8.132c: ProductName: PowerBroker for Windows
962ae8.132c: ProductVersion: 7.3.0.0
972ae8.132c: FileVersion: 7.3.0.0
982ae8.132c: FileDescription: PowerBroker for Windows
992ae8.132c: \SystemRoot\System32\privman64.dll:
1002ae8.132c: CreationTime: 2017-06-22T17:52:44.000000000Z
1012ae8.132c: LastWriteTime: 2017-06-22T17:52:44.000000000Z
1022ae8.132c: ChangeTime: 2017-07-31T14:22:56.868895000Z
1032ae8.132c: FileAttributes: 0x20
1042ae8.132c: Size: 0x39100
1052ae8.132c: NT Headers: 0xf8
1062ae8.132c: Timestamp: 0x594be02a
1072ae8.132c: Machine: 0x8664 - amd64
1082ae8.132c: Timestamp: 0x594be02a
1092ae8.132c: Image Version: 0.0
1102ae8.132c: SizeOfImage: 0x3a000 (237568)
1112ae8.132c: Resource Dir: 0x38000 LB 0x578
1122ae8.132c: [Version info resource found at 0x80! (ID/Name: 0x1; SubID/SubName: 0x0)]
1132ae8.132c: [Raw version resource data: 0x380a0 LB 0x37c, codepage 0x4e4 (reserved 0x0)]
1142ae8.132c: ProductName: PowerBroker for Windows
1152ae8.132c: ProductVersion: 7.3.0.0
1162ae8.132c: FileVersion: 7.3.0.0
1172ae8.132c: FileDescription: BeyondTrust PowerBroker for Windows DLL
1182ae8.132c: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox'
1192ae8.132c: Calling main()
1202ae8.132c: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2
1212ae8.132c: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox'
1222ae8.132c: SUPR3HardenedMain: Respawn #1
1232ae8.132c: System32: \Device\HarddiskVolume4\Windows\System32
1242ae8.132c: WinSxS: \Device\HarddiskVolume4\Windows\WinSxS
1252ae8.132c: KnownDllPath: C:\WINDOWS\System32
1262ae8.132c: '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
1272ae8.132c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe)
1282ae8.132c: supR3HardNtEnableThreadCreation:
1292ae8.132c: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffb65e69fa0 pvNtTerminateThread=00007ffb65e96b20
1302ae8.132c: supR3HardenedWinDoReSpawn(1): New child 20e8.2fb4 [kernel32].
1312ae8.132c: supR3HardNtChildGatherData: PebBaseAddress=0000000000d64000 cbPeb=0x388
1322ae8.132c: supR3HardNtPuChFindNtdll: uNtDllParentAddr=00007ffb65df0000 uNtDllChildAddr=00007ffb65df0000
1332ae8.132c: supR3HardenedWinSetupChildInit: uLdrInitThunk=00007ffb65e69fa0
1342ae8.132c: supR3HardenedWinSetupChildInit: Start child.
1352ae8.132c: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 1 ms.
1362ae8.132c: supR3HardNtChildPurify: Startup delay kludge #1/0: 513 ms, 61 sleeps
1372ae8.132c: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
1382ae8.132c: *0000000000000000-0000000000adffff 0x0001/0x0000 0x0000000
1392ae8.132c: *0000000000ae0000-0000000000afffff 0x0004/0x0004 0x0020000
1402ae8.132c: *0000000000b00000-0000000000b15fff 0x0002/0x0002 0x0040000
1412ae8.132c: 0000000000b16000-0000000000b1ffff 0x0001/0x0000 0x0000000
1422ae8.132c: *0000000000b20000-0000000000b23fff 0x0002/0x0002 0x0040000
1432ae8.132c: 0000000000b24000-0000000000b2ffff 0x0001/0x0000 0x0000000
1442ae8.132c: *0000000000b30000-0000000000b31fff 0x0004/0x0004 0x0020000
1452ae8.132c: 0000000000b32000-0000000000bfffff 0x0001/0x0000 0x0000000
1462ae8.132c: *0000000000c00000-0000000000d63fff 0x0000/0x0004 0x0020000
1472ae8.132c: 0000000000d64000-0000000000d66fff 0x0004/0x0004 0x0020000
1482ae8.132c: 0000000000d67000-0000000000dfffff 0x0000/0x0004 0x0020000
1492ae8.132c: *0000000000e00000-0000000000efafff 0x0000/0x0004 0x0020000
1502ae8.132c: 0000000000efb000-0000000000efdfff 0x0104/0x0004 0x0020000
1512ae8.132c: 0000000000efe000-0000000000efffff 0x0004/0x0004 0x0020000
1522ae8.132c: 0000000000f00000-000000007ffdffff 0x0001/0x0000 0x0000000
1532ae8.132c: *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000
1542ae8.132c: 000000007ffe1000-000000007ffeffff 0x0000/0x0002 0x0020000
1552ae8.132c: 000000007fff0000-00007ff7218fffff 0x0001/0x0000 0x0000000
1562ae8.132c: *00007ff721900000-00007ff721922fff 0x0002/0x0002 0x0040000
1572ae8.132c: 00007ff721923000-00007ff721f8ffff 0x0001/0x0000 0x0000000
1582ae8.132c: *00007ff721f90000-00007ff721f90fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
1592ae8.132c: 00007ff721f91000-00007ff722000fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
1602ae8.132c: 00007ff722001000-00007ff722001fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
1612ae8.132c: 00007ff722002000-00007ff722046fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
1622ae8.132c: 00007ff722047000-00007ff722047fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
1632ae8.132c: 00007ff722048000-00007ff722048fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
1642ae8.132c: 00007ff722049000-00007ff72204dfff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
1652ae8.132c: 00007ff72204e000-00007ff72204efff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
1662ae8.132c: 00007ff72204f000-00007ff72204ffff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
1672ae8.132c: 00007ff722050000-00007ff722053fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
1682ae8.132c: 00007ff722054000-00007ff72209bfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
1692ae8.132c: 00007ff72209c000-00007ffb65deffff 0x0001/0x0000 0x0000000
1702ae8.132c: *00007ffb65df0000-00007ffb65df0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
1712ae8.132c: 00007ffb65df1000-00007ffb65ef7fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
1722ae8.132c: 00007ffb65ef8000-00007ffb65f3bfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
1732ae8.132c: 00007ffb65f3c000-00007ffb65f44fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
1742ae8.132c: 00007ffb65f45000-00007ffb65f52fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
1752ae8.132c: 00007ffb65f53000-00007ffb65f53fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
1762ae8.132c: 00007ffb65f54000-00007ffb65f56fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
1772ae8.132c: 00007ffb65f57000-00007ffb65fc0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
1782ae8.132c: 00007ffb65fc1000-00007ffffffdffff 0x0001/0x0000 0x0000000
1792ae8.132c: *00007ffffffe0000-00007ffffffeffff 0x0001/0x0002 0x0020000
1802ae8.132c: VirtualBox.exe: timestamp 0x5903619d (rc=VINF_SUCCESS)
1812ae8.132c: '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
1822ae8.132c: '\Device\HarddiskVolume4\Windows\System32\ntdll.dll' has no imports
1832ae8.132c: supR3HardNtChildPurify: Done after 589 ms and 0 fixes (loop #0).
18420e8.2fb4: Log file opened: 5.1.22r115126 g_hStartupLog=0000000000000004 g_uNtVerCombined=0xa0383900
18520e8.2fb4: supR3HardenedVmProcessInit: uNtDllAddr=00007ffb65df0000 g_uNtVerCombined=0xa0383900
1862ae8.132c: supR3HardNtEnableThreadCreation:
18720e8.2fb4: ntdll.dll: timestamp 0x5825887f (rc=VINF_SUCCESS)
18820e8.2fb4: New simple heap: #1 0000000001000000 LB 0x400000 (for 1904640 allocation)
18920e8.2fb4: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox'
19020e8.2fb4: System32: \Device\HarddiskVolume4\Windows\System32
19120e8.2fb4: WinSxS: \Device\HarddiskVolume4\Windows\WinSxS
19220e8.2fb4: KnownDllPath: C:\WINDOWS\System32
19320e8.2fb4: supR3HardenedVmProcessInit: Opening vboxdrv stub...
19420e8.2fb4: supR3HardenedVmProcessInit: Restoring LdrInitializeThunk...
19520e8.2fb4: supR3HardenedVmProcessInit: Returning to LdrInitializeThunk...
19620e8.2fb4: Registered Dll notification callback with NTDLL.
19720e8.2fb4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\kernel32.dll)
19820e8.2fb4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\kernel32.dll
19920e8.2fb4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\KERNEL32.DLL (Input=KERNEL32.DLL, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000004001:<flags> [calling]
20020e8.2fb4: supR3HardenedDllNotificationCallback: load 00007ffb623a0000 LB 0x0021d000 C:\WINDOWS\System32\KERNELBASE.dll [fFlags=0x0]
20120e8.2fb4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\KernelBase.dll)
20220e8.2fb4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\KernelBase.dll
20320e8.2fb4: supR3HardenedDllNotificationCallback: load 00007ffb63d50000 LB 0x000ac000 C:\WINDOWS\System32\KERNEL32.DLL [fFlags=0x0]
20420e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
20520e8.2fb4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb63d50000 'C:\WINDOWS\System32\KERNEL32.DLL'
20620e8.2fb4: supR3HardenedDllNotificationCallback: load 00007ff721f90000 LB 0x0010c000 C:\Program Files\Oracle\VirtualBox\VirtualBox.exe [fFlags=0x0]
20720e8.2fb4: '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
20820e8.2fb4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe)
20920e8.2fb4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
21020e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'rpcrt4.dll'.
21120e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'version.dll'.
21220e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
21320e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'advapi32.dll'.
21420e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'shell32.dll'.
21520e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'shlwapi.dll'.
21620e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'userenv.dll'.
21720e8.2fb4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\privman64.dll)
21820e8.2fb4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\privman64.dll
21920e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'userenv.dll'...
22020e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'userenv.dll' -> '\Device\HarddiskVolume4\Windows\System32\userenv.dll' [rcNtRedir=0xc0150008]
22120e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'rpcrt4.dll'.
22220e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #24 'profapi.dll'.
22320e8.2fb4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\userenv.dll)
22420e8.2fb4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\userenv.dll
22520e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shlwapi.dll'...
22620e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'shlwapi.dll' -> '\Device\HarddiskVolume4\Windows\System32\shlwapi.dll' [rcNtRedir=0xc0150008]
22720e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'.
22820e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #42 'gdi32.dll'.
22920e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #43 'user32.dll'.
23020e8.2fb4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\shlwapi.dll)
23120e8.2fb4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\shlwapi.dll
23220e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
23320e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume4\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
23420e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
23520e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #66 'user32.dll'.
23620e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #68 'gdi32.dll'.
23720e8.2fb4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\shell32.dll)
23820e8.2fb4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\shell32.dll
23920e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
24020e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
24120e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
24220e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'sechost.dll'.
24320e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #21 'rpcrt4.dll'.
24420e8.2fb4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\advapi32.dll)
24520e8.2fb4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\advapi32.dll
24620e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
24720e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
24820e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'win32u.dll'.
24920e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #32 'gdi32.dll'.
25020e8.2fb4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\user32.dll)
25120e8.2fb4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\user32.dll
25220e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'version.dll'...
25320e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'version.dll' -> '\Device\HarddiskVolume4\Windows\System32\version.dll' [rcNtRedir=0xc0150008]
25420e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
25520e8.2fb4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\version.dll)
25620e8.2fb4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\version.dll
25720e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
25820e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
25920e8.2fb4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll)
26020e8.2fb4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll
26120e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
26220e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
26320e8.2fb4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\msvcrt.dll)
26420e8.2fb4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\msvcrt.dll
26520e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
26620e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
26720e8.2fb4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\gdi32.dll)
26820e8.2fb4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\gdi32.dll
26920e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
27020e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume4\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
27120e8.2fb4: '\Device\HarddiskVolume4\Windows\System32\win32u.dll' has no imports
27220e8.2fb4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\win32u.dll)
27320e8.2fb4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\win32u.dll
27420e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
27520e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
27620e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
27720e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'sechost.dll'...
27820e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'sechost.dll' -> '\Device\HarddiskVolume4\Windows\System32\sechost.dll' [rcNtRedir=0xc0150008]
27920e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'rpcrt4.dll'.
28020e8.2fb4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\sechost.dll)
28120e8.2fb4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\sechost.dll
28220e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
28320e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
28420e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
28520e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
28620e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
28720e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
28820e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
28920e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
29020e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
29120e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
29220e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
29320e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
29420e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
29520e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
29620e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
29720e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
29820e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
29920e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
30020e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
30120e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
30220e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
30320e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'profapi.dll'...
30420e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'profapi.dll' -> '\Device\HarddiskVolume4\Windows\System32\profapi.dll' [rcNtRedir=0xc0150008]
30520e8.2fb4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\profapi.dll)
30620e8.2fb4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\profapi.dll
30720e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
30820e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
30920e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
31020e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
31120e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
31220e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
31320e8.2fb4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\privman64.dll (Input=privman64.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
31420e8.2fb4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\privman64.dll [lacks WinVerifyTrust]
31520e8.2fb4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\version.dll [lacks WinVerifyTrust]
31620e8.2fb4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\userenv.dll [lacks WinVerifyTrust]
31720e8.2fb4: supR3HardenedDllNotificationCallback: load 00007ffb646a0000 LB 0x00121000 C:\WINDOWS\System32\RPCRT4.dll [fFlags=0x0]
31820e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
31920e8.2fb4: supR3HardenedDllNotificationCallback: load 00007ffb63950000 LB 0x0009e000 C:\WINDOWS\System32\msvcrt.dll [fFlags=0x0]
32020e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
32120e8.2fb4: supR3HardenedDllNotificationCallback: load 00007ffb620c0000 LB 0x0000a000 C:\WINDOWS\SYSTEM32\VERSION.dll [fFlags=0x0]
32220e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\version.dll [lacks WinVerifyTrust]
32320e8.2fb4: supR3HardenedDllNotificationCallback: load 00007ffb62e00000 LB 0x0001e000 C:\WINDOWS\System32\win32u.dll [fFlags=0x0]
32420e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\win32u.dll [lacks WinVerifyTrust]
32520e8.2fb4: supR3HardenedDllNotificationCallback: load 00007ffb62e20000 LB 0x00180000 C:\WINDOWS\System32\gdi32full.dll [fFlags=0x0]
32620e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #22 'gdi32.dll'.
32720e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #23 'user32.dll'.
32820e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #24 'win32u.dll'.
32920e8.2fb4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\gdi32full.dll)
33020e8.2fb4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\gdi32full.dll
33120e8.2fb4: supR3HardenedDllNotificationCallback: load 00007ffb63f60000 LB 0x00034000 C:\WINDOWS\System32\GDI32.dll [fFlags=0x0]
33220e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
33320e8.2fb4: supR3HardenedDllNotificationCallback: load 00007ffb64530000 LB 0x00165000 C:\WINDOWS\System32\USER32.dll [fFlags=0x0]
33420e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
33520e8.2fb4: supR3HardenedDllNotificationCallback: load 00007ffb64400000 LB 0x00059000 C:\WINDOWS\System32\sechost.dll [fFlags=0x0]
33620e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\sechost.dll [lacks WinVerifyTrust]
33720e8.2fb4: supR3HardenedDllNotificationCallback: load 00007ffb63a60000 LB 0x000a2000 C:\WINDOWS\System32\ADVAPI32.dll [fFlags=0x0]
33820e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
33920e8.2fb4: supR3HardenedDllNotificationCallback: load 00007ffb63010000 LB 0x00042000 C:\WINDOWS\System32\cfgmgr32.dll [fFlags=0x0]
34020e8.2fb4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\cfgmgr32.dll)
34120e8.2fb4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\cfgmgr32.dll
34220e8.2fb4: supR3HardenedDllNotificationCallback: load 00007ffb625c0000 LB 0x000f5000 C:\WINDOWS\System32\ucrtbase.dll [fFlags=0x0]
34320e8.2fb4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\ucrtbase.dll)
34420e8.2fb4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\ucrtbase.dll
34520e8.2fb4: supR3HardenedDllNotificationCallback: load 00007ffb62fa0000 LB 0x0006a000 C:\WINDOWS\System32\bcryptPrimitives.dll [fFlags=0x0]
34620e8.2fb4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\bcryptprimitives.dll)
34720e8.2fb4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\bcryptprimitives.dll
34820e8.2fb4: supR3HardenedDllNotificationCallback: load 00007ffb64000000 LB 0x002c8000 C:\WINDOWS\System32\combase.dll [fFlags=0x0]
34920e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
35020e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'bcryptprimitives.dll'.
35120e8.2fb4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\combase.dll)
35220e8.2fb4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\combase.dll
35320e8.2fb4: supR3HardenedDllNotificationCallback: load 00007ffb62270000 LB 0x0004c000 C:\WINDOWS\System32\powrprof.dll [fFlags=0x0]
35420e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'rpcrt4.dll'.
35520e8.2fb4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\powrprof.dll)
35620e8.2fb4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\powrprof.dll
35720e8.2fb4: supR3HardenedDllNotificationCallback: load 00007ffb63fa0000 LB 0x00052000 C:\WINDOWS\System32\shlwapi.dll [fFlags=0x0]
35820e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\shlwapi.dll [lacks WinVerifyTrust]
35920e8.2fb4: supR3HardenedDllNotificationCallback: load 00007ffb622c0000 LB 0x0000f000 C:\WINDOWS\System32\kernel.appcore.dll [fFlags=0x0]
36020e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcrt.dll'.
36120e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'rpcrt4.dll'.
36220e8.2fb4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\kernel.appcore.dll)
36320e8.2fb4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\kernel.appcore.dll
36420e8.2fb4: supR3HardenedDllNotificationCallback: load 00007ffb622f0000 LB 0x000a9000 C:\WINDOWS\System32\shcore.dll [fFlags=0x0]
36520e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
36620e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #30 'rpcrt4.dll'.
36720e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #40 'combase.dll'.
36820e8.2fb4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\SHCore.dll)
36920e8.2fb4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\SHCore.dll
37020e8.2fb4: supR3HardenedDllNotificationCallback: load 00007ffb622d0000 LB 0x00014000 C:\WINDOWS\System32\profapi.dll [fFlags=0x0]
37120e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\profapi.dll [lacks WinVerifyTrust]
37220e8.2fb4: supR3HardenedDllNotificationCallback: load 00007ffb626c0000 LB 0x006da000 C:\WINDOWS\System32\windows.storage.dll [fFlags=0x0]
37320e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
37420e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #30 'rpcrt4.dll'.
37520e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #57 'combase.dll'.
37620e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #63 'profapi.dll'.
37720e8.2fb4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\windows.storage.dll)
37820e8.2fb4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\windows.storage.dll
37920e8.2fb4: supR3HardenedDllNotificationCallback: load 00007ffb64840000 LB 0x01508000 C:\WINDOWS\System32\SHELL32.dll [fFlags=0x0]
38020e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\shell32.dll [lacks WinVerifyTrust]
38120e8.2fb4: supR3HardenedDllNotificationCallback: load 00007ffb620a0000 LB 0x0001f000 C:\WINDOWS\SYSTEM32\USERENV.dll [fFlags=0x0]
38220e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\userenv.dll [lacks WinVerifyTrust]
38320e8.2fb4: supR3HardenedDllNotificationCallback: load 00007ffb620d0000 LB 0x0003a000 C:\WINDOWS\System32\privman64.dll [fFlags=0x0]
38420e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\privman64.dll [lacks WinVerifyTrust]
38520e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'user32.dll'.
38620e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #23 'win32u.dll'.
38720e8.2fb4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\imm32.dll)
38820e8.2fb4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\imm32.dll
38920e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
39020e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume4\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
39120e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\win32u.dll [lacks WinVerifyTrust]
39220e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
39320e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
39420e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
39520e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'profapi.dll'...
39620e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'profapi.dll' -> '\Device\HarddiskVolume4\Windows\System32\profapi.dll' [rcNtRedir=0xc0150008]
39720e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\profapi.dll [lacks WinVerifyTrust]
39820e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
39920e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume4\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
40020e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\combase.dll [lacks WinVerifyTrust]
40120e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
40220e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
40320e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
40420e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
40520e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
40620e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
40720e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
40820e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume4\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
40920e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\combase.dll [lacks WinVerifyTrust]
41020e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
41120e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
41220e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
41320e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
41420e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
41520e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
41620e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
41720e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
41820e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
41920e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
42020e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
42120e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
42220e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
42320e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
42420e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
42520e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'...
42620e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume4\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008]
42720e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust]
42820e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
42920e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
43020e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
43120e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
43220e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume4\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
43320e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\win32u.dll [lacks WinVerifyTrust]
43420e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
43520e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
43620e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
43720e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
43820e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
43920e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
44020e8.2fb4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\IMM32.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
44120e8.2fb4: supR3HardenedDllNotificationCallback: load 00007ffb643d0000 LB 0x0002e000 C:\WINDOWS\System32\IMM32.DLL [fFlags=0x0]
44220e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\imm32.dll [lacks WinVerifyTrust]
44320e8.2fb4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb643d0000 'C:\WINDOWS\system32\IMM32.DLL'
44420e8.2fb4: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
44520e8.2fb4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb623a0000 'api-ms-win-core-synch-l1-2-0'
44620e8.2fb4: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
44720e8.2fb4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb623a0000 'api-ms-win-core-fibers-l1-1-1'
44820e8.2fb4: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
44920e8.2fb4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb623a0000 'api-ms-win-core-fibers-l1-1-1'
45020e8.2fb4: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
45120e8.2fb4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb623a0000 'api-ms-win-core-synch-l1-2-0'
45220e8.2fb4: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-l1-2-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
45320e8.2fb4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb623a0000 'api-ms-win-core-localization-l1-2-1'
45420e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
45520e8.2fb4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\kernel32.dll (Input=kernel32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
45620e8.2fb4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb63d50000 'C:\WINDOWS\System32\kernel32.dll'
45720e8.2fb4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb620d0000 'C:\WINDOWS\System32\privman64.dll'
45820e8.2fb4: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffb65e69fa0 pvNtTerminateThread=00007ffb65e96b20
4592ae8.132c: supR3HardNtChildWaitFor: Found expected request 1 (CloseEvents) after 469 ms.
46020e8.2fb4: \SystemRoot\System32\ntdll.dll:
46120e8.2fb4: CreationTime: 2017-02-27T18:09:52.137253500Z
46220e8.2fb4: LastWriteTime: 2017-02-27T18:09:52.165262000Z
46320e8.2fb4: ChangeTime: 2017-07-14T16:19:12.473450900Z
46420e8.2fb4: FileAttributes: 0x20
46520e8.2fb4: Size: 0x1cc888
46620e8.2fb4: NT Headers: 0xd8
46720e8.2fb4: Timestamp: 0x5825887f
46820e8.2fb4: Machine: 0x8664 - amd64
46920e8.2fb4: Timestamp: 0x5825887f
47020e8.2fb4: Image Version: 10.0
47120e8.2fb4: SizeOfImage: 0x1d1000 (1904640)
47220e8.2fb4: Resource Dir: 0x168000 LB 0x67988
47320e8.2fb4: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
47420e8.2fb4: [Raw version resource data: 0x1680f0 LB 0x388, codepage 0x0 (reserved 0x0)]
47520e8.2fb4: ProductName: Microsoft® Windows® Operating System
47620e8.2fb4: ProductVersion: 10.0.14393.479
47720e8.2fb4: FileVersion: 10.0.14393.479 (rs1_release.161110-2025)
47820e8.2fb4: FileDescription: NT Layer DLL
47920e8.2fb4: \SystemRoot\System32\kernel32.dll:
48020e8.2fb4: CreationTime: 2017-05-31T17:24:39.430163700Z
48120e8.2fb4: LastWriteTime: 2017-04-28T00:49:43.332433600Z
48220e8.2fb4: ChangeTime: 2017-07-14T16:19:11.865293800Z
48320e8.2fb4: FileAttributes: 0x20
48420e8.2fb4: Size: 0xab208
48520e8.2fb4: NT Headers: 0xf0
48620e8.2fb4: Timestamp: 0x59028368
48720e8.2fb4: Machine: 0x8664 - amd64
48820e8.2fb4: Timestamp: 0x59028368
48920e8.2fb4: Image Version: 10.0
49020e8.2fb4: SizeOfImage: 0xac000 (704512)
49120e8.2fb4: Resource Dir: 0xaa000 LB 0x530
49220e8.2fb4: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
49320e8.2fb4: [Raw version resource data: 0xaa0b0 LB 0x3b4, codepage 0x0 (reserved 0x0)]
49420e8.2fb4: ProductName: Microsoft® Windows® Operating System
49520e8.2fb4: ProductVersion: 10.0.14393.1198
49620e8.2fb4: FileVersion: 10.0.14393.1198 (rs1_release_sec.170427-1353)
49720e8.2fb4: FileDescription: Windows NT BASE API Client DLL
49820e8.2fb4: \SystemRoot\System32\KernelBase.dll:
49920e8.2fb4: CreationTime: 2017-07-14T16:11:04.020934100Z
50020e8.2fb4: LastWriteTime: 2017-06-03T10:09:08.071687200Z
50120e8.2fb4: ChangeTime: 2017-07-15T16:28:38.492525100Z
50220e8.2fb4: FileAttributes: 0x20
50320e8.2fb4: Size: 0x21c780
50420e8.2fb4: NT Headers: 0xf8
50520e8.2fb4: Timestamp: 0x59327897
50620e8.2fb4: Machine: 0x8664 - amd64
50720e8.2fb4: Timestamp: 0x59327897
50820e8.2fb4: Image Version: 10.0
50920e8.2fb4: SizeOfImage: 0x21d000 (2215936)
51020e8.2fb4: Resource Dir: 0x201000 LB 0x550
51120e8.2fb4: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
51220e8.2fb4: [Raw version resource data: 0x2010b0 LB 0x3c4, codepage 0x0 (reserved 0x0)]
51320e8.2fb4: ProductName: Microsoft® Windows® Operating System
51420e8.2fb4: ProductVersion: 10.0.14393.1358
51520e8.2fb4: FileVersion: 10.0.14393.1358 (rs1_release.170602-2252)
51620e8.2fb4: FileDescription: Windows NT BASE API Client DLL
51720e8.2fb4: \SystemRoot\System32\apisetschema.dll:
51820e8.2fb4: CreationTime: 2016-07-16T11:42:21.577586000Z
51920e8.2fb4: LastWriteTime: 2016-07-16T11:42:21.577586000Z
52020e8.2fb4: ChangeTime: 2017-05-25T16:04:28.657703100Z
52120e8.2fb4: FileAttributes: 0x20
52220e8.2fb4: Size: 0x18960
52320e8.2fb4: NT Headers: 0xc8
52420e8.2fb4: Timestamp: 0x57899bd2
52520e8.2fb4: Machine: 0x8664 - amd64
52620e8.2fb4: Timestamp: 0x57899bd2
52720e8.2fb4: Image Version: 10.0
52820e8.2fb4: SizeOfImage: 0x19000 (102400)
52920e8.2fb4: Resource Dir: 0x18000 LB 0x400
53020e8.2fb4: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
53120e8.2fb4: [Raw version resource data: 0x18060 LB 0x3a0, codepage 0x0 (reserved 0x0)]
53220e8.2fb4: ProductName: Microsoft® Windows® Operating System
53320e8.2fb4: ProductVersion: 10.0.14393.0
53420e8.2fb4: FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
53520e8.2fb4: FileDescription: ApiSet Schema DLL
53620e8.2fb4: NtOpenDirectoryObject failed on \Driver: 0xc0000022
53720e8.2fb4: supR3HardenedWinFindAdversaries: 0x10000
53820e8.2fb4: \SystemRoot\System32\drivers\privman.sys:
53920e8.2fb4: CreationTime: 2017-07-28T14:37:28.355320000Z
54020e8.2fb4: LastWriteTime: 2017-06-22T19:55:22.000000000Z
54120e8.2fb4: ChangeTime: 2017-07-31T14:22:56.861880500Z
54220e8.2fb4: FileAttributes: 0x20
54320e8.2fb4: Size: 0x10630
54420e8.2fb4: NT Headers: 0x100
54520e8.2fb4: Timestamp: 0x594be0d5
54620e8.2fb4: Machine: 0x8664 - amd64
54720e8.2fb4: Timestamp: 0x594be0d5
54820e8.2fb4: Image Version: 6.1
54920e8.2fb4: SizeOfImage: 0xf000 (61440)
55020e8.2fb4: Resource Dir: 0xb000 LB 0x2fa8
55120e8.2fb4: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x0)]
55220e8.2fb4: [Raw version resource data: 0xb0a0 LB 0x33c, codepage 0x0 (reserved 0x0)]
55320e8.2fb4: ProductName: PowerBroker for Windows
55420e8.2fb4: ProductVersion: 7.3.0.0
55520e8.2fb4: FileVersion: 7.3.0.0
55620e8.2fb4: FileDescription: PowerBroker for Windows
55720e8.2fb4: \SystemRoot\System32\privman64.dll:
55820e8.2fb4: CreationTime: 2017-06-22T17:52:44.000000000Z
55920e8.2fb4: LastWriteTime: 2017-06-22T17:52:44.000000000Z
56020e8.2fb4: ChangeTime: 2017-07-31T14:22:56.868895000Z
56120e8.2fb4: FileAttributes: 0x20
56220e8.2fb4: Size: 0x39100
56320e8.2fb4: NT Headers: 0xf8
56420e8.2fb4: Timestamp: 0x594be02a
56520e8.2fb4: Machine: 0x8664 - amd64
56620e8.2fb4: Timestamp: 0x594be02a
56720e8.2fb4: Image Version: 0.0
56820e8.2fb4: SizeOfImage: 0x3a000 (237568)
56920e8.2fb4: Resource Dir: 0x38000 LB 0x578
57020e8.2fb4: [Version info resource found at 0x80! (ID/Name: 0x1; SubID/SubName: 0x0)]
57120e8.2fb4: [Raw version resource data: 0x380a0 LB 0x37c, codepage 0x4e4 (reserved 0x0)]
57220e8.2fb4: ProductName: PowerBroker for Windows
57320e8.2fb4: ProductVersion: 7.3.0.0
57420e8.2fb4: FileVersion: 7.3.0.0
57520e8.2fb4: FileDescription: BeyondTrust PowerBroker for Windows DLL
57620e8.2fb4: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox'
57720e8.2fb4: Calling main()
57820e8.2fb4: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2
57920e8.2fb4: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox'
58020e8.2fb4: '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
58120e8.2fb4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe)
58220e8.2fb4: SUPR3HardenedMain: Respawn #2
58320e8.2fb4: Error (rc=-5640):
58420e8.2fb4: More than one thread in process
58520e8.2fb4: Error -5640 in supR3HardenedWinReSpawn! (enmWhat=1)
58620e8.2fb4: More than one thread in process
58720e8.2fb4: supR3HardNtEnableThreadCreation:
58820e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'opengl32.dll'.
58920e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
59020e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'msvcp100.dll'.
59120e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcr100.dll'.
59220e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'.
59320e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'qt5guivbox.dll'.
59420e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'qt5widgetsvbox.dll'.
59520e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'qt5printsupportvbox.dll'.
59620e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'qt5openglvbox.dll'.
59720e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'user32.dll'.
59820e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'advapi32.dll'.
59920e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'shell32.dll'.
60020e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'ole32.dll'.
60120e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'oleaut32.dll'.
60220e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #15 'winmm.dll'.
60320e8.2fb4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.dll)
60420e8.2fb4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.dll
60520e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
60620e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume4\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
60720e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'winmmbase.dll'.
60820e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'msvcrt.dll'.
60920e8.2fb4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\winmm.dll)
61020e8.2fb4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\winmm.dll
61120e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
61220e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume4\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
61320e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
61420e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'combase.dll'.
61520e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #20 'rpcrt4.dll'.
61620e8.2fb4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\oleaut32.dll)
61720e8.2fb4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\oleaut32.dll
61820e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
61920e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume4\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
62020e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #21 'rpcrt4.dll'.
62120e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #44 'gdi32.dll'.
62220e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #45 'user32.dll'.
62320e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #46 'combase.dll'.
62420e8.2fb4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\ole32.dll)
62520e8.2fb4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\ole32.dll
62620e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
62720e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume4\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
62820e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\shell32.dll [lacks WinVerifyTrust]
62920e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
63020e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
63120e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
63220e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
63320e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
63420e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
63520e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5openglvbox.dll'...
63620e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5openglvbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5openglvbox.dll' [rcNtRedir=0xc0150008]
63720e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'qt5widgetsvbox.dll'.
63820e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'qt5guivbox.dll'.
63920e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5corevbox.dll'.
64020e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcr100.dll'.
64120e8.2fb4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll)
64220e8.2fb4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll
64320e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5printsupportvbox.dll'...
64420e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5printsupportvbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5printsupportvbox.dll' [rcNtRedir=0xc0150008]
64520e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
64620e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
64720e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5widgetsvbox.dll'.
64820e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5guivbox.dll'.
64920e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'.
65020e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'winspool.drv'.
65120e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'comdlg32.dll'.
65220e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcr100.dll'.
65320e8.2fb4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll)
65420e8.2fb4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll
65520e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
65620e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
65720e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
65820e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
65920e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5guivbox.dll'.
66020e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5corevbox.dll'.
66120e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'shell32.dll'.
66220e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
66320e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
66420e8.2fb4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll)
66520e8.2fb4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll
66620e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
66720e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
66820e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'ole32.dll'.
66920e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'opengl32.dll'.
67020e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
67120e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
67220e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'.
67320e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
67420e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
67520e8.2fb4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll)
67620e8.2fb4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
67720e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
67820e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
67920e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
68020e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'shell32.dll'.
68120e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ole32.dll'.
68220e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'advapi32.dll'.
68320e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ws2_32.dll'.
68420e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'mpr.dll'.
68520e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcp100.dll'.
68620e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'msvcr100.dll'.
68720e8.2fb4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll)
68820e8.2fb4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
68920e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
69020e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
69120e8.2fb4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll)
69220e8.2fb4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll
69320e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
69420e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
69520e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
69620e8.2fb4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll)
69720e8.2fb4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll
69820e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
69920e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
70020e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
70120e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
70220e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ws2_32.dll'.
70320e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'rpcrt4.dll'.
70420e8.2fb4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll)
70520e8.2fb4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll
70620e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
70720e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume4\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
70820e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
70920e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'advapi32.dll'.
71020e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'gdi32.dll'.
71120e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'glu32.dll'.
71220e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'ddraw.dll'.
71320e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'user32.dll'.
71420e8.2fb4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\opengl32.dll)
71520e8.2fb4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\opengl32.dll
71620e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
71720e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
71820e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
71920e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ddraw.dll'...
72020e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'ddraw.dll' -> '\Device\HarddiskVolume4\Windows\System32\ddraw.dll' [rcNtRedir=0xc0150008]
72120e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
72220e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'user32.dll'.
72320e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #19 'gdi32.dll'.
72420e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #20 'dciman32.dll'.
72520e8.2fb4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\ddraw.dll)
72620e8.2fb4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\ddraw.dll
72720e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'glu32.dll'...
72820e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'glu32.dll' -> '\Device\HarddiskVolume4\Windows\System32\glu32.dll' [rcNtRedir=0xc0150008]
72920e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
73020e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'opengl32.dll'.
73120e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
73220e8.2fb4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\glu32.dll)
73320e8.2fb4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\glu32.dll
73420e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
73520e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
73620e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
73720e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
73820e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
73920e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
74020e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
74120e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
74220e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
74320e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
74420e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
74520e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
74620e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
74720e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume4\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
74820e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'rpcrt4.dll'.
74920e8.2fb4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\ws2_32.dll)
75020e8.2fb4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\ws2_32.dll
75120e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
75220e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
75320e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
75420e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
75520e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
75620e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
75720e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
75820e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
75920e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
76020e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
76120e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
76220e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
76320e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
76420e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
76520e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
76620e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mpr.dll'...
76720e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'mpr.dll' -> '\Device\HarddiskVolume4\Windows\System32\mpr.dll' [rcNtRedir=0xc0150008]
76820e8.2fb4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\mpr.dll)
76920e8.2fb4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\mpr.dll
77020e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
77120e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume4\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
77220e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ws2_32.dll [lacks WinVerifyTrust]
77320e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
77420e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
77520e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
77620e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
77720e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume4\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
77820e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ole32.dll [lacks WinVerifyTrust]
77920e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
78020e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume4\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
78120e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\shell32.dll [lacks WinVerifyTrust]
78220e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
78320e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
78420e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
78520e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
78620e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
78720e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
78820e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
78920e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
79020e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
79120e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
79220e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
79320e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
79420e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
79520e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
79620e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
79720e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
79820e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
79920e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
80020e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
80120e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume4\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
80220e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
80320e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
80420e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume4\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
80520e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ole32.dll [lacks WinVerifyTrust]
80620e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
80720e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
80820e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
80920e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
81020e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
81120e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
81220e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
81320e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume4\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
81420e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\shell32.dll [lacks WinVerifyTrust]
81520e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
81620e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
81720e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
81820e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
81920e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
82020e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
82120e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
82220e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
82320e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
82420e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
82520e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
82620e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
82720e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
82820e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
82920e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
83020e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'comdlg32.dll'...
83120e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'comdlg32.dll' -> '\Device\HarddiskVolume4\Windows\System32\comdlg32.dll' [rcNtRedir=0xc0150008]
83220e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
83320e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #30 'user32.dll'.
83420e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #31 'shlwapi.dll'.
83520e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #32 'gdi32.dll'.
83620e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #33 'comctl32.dll'.
83720e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'shell32.dll'.
83820e8.2fb4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\comdlg32.dll)
83920e8.2fb4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\comdlg32.dll
84020e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winspool.drv'...
84120e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'winspool.drv' -> '\Device\HarddiskVolume4\Windows\System32\winspool.drv' [rcNtRedir=0xc0150008]
84220e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
84320e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27 'bcrypt.dll'.
84420e8.2fb4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\winspool.drv)
84520e8.2fb4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\winspool.drv
84620e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
84720e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
84820e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
84920e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
85020e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
85120e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
85220e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
85320e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
85420e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
85520e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
85620e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
85720e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
85820e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
85920e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
86020e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
86120e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
86220e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
86320e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
86420e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
86520e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
86620e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
86720e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
86820e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
86920e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
87020e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
87120e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
87220e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
87320e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
87420e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume4\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
87520e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\combase.dll [lacks WinVerifyTrust]
87620e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
87720e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
87820e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
87920e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
88020e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
88120e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
88220e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
88320e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
88420e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
88520e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
88620e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
88720e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
88820e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
88920e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume4\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
89020e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\combase.dll [lacks WinVerifyTrust]
89120e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
89220e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
89320e8.2fb4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\msvcp_win.dll)
89420e8.2fb4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\msvcp_win.dll
89520e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
89620e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
89720e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
89820e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmmbase.dll'...
89920e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmmbase.dll' -> '\Device\HarddiskVolume4\Windows\System32\winmmbase.dll' [rcNtRedir=0xc0150008]
90020e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
90120e8.2fb4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\winmmbase.dll)
90220e8.2fb4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\winmmbase.dll
90320e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
90420e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
90520e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
90620e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcrypt.dll'...
90720e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcrypt.dll' -> '\Device\HarddiskVolume4\Windows\System32\bcrypt.dll' [rcNtRedir=0xc0150008]
90820e8.2fb4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\bcrypt.dll)
90920e8.2fb4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\bcrypt.dll
91020e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
91120e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
91220e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
91320e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
91420e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume4\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
91520e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\shell32.dll [lacks WinVerifyTrust]
91620e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'comctl32.dll'...
91720e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'comctl32.dll' -> '\Device\HarddiskVolume4\Windows\System32\comctl32.dll' [rcNtRedir=0x0]
91820e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'advapi32.dll'.
91920e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
92020e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
92120e8.2fb4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\comctl32.dll)
92220e8.2fb4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\comctl32.dll
92320e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
92420e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
92520e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
92620e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shlwapi.dll'...
92720e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'shlwapi.dll' -> '\Device\HarddiskVolume4\Windows\System32\shlwapi.dll' [rcNtRedir=0xc0150008]
92820e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\shlwapi.dll [lacks WinVerifyTrust]
92920e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
93020e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
93120e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
93220e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
93320e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
93420e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
93520e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
93620e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
93720e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
93820e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
93920e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
94020e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
94120e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
94220e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume4\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
94320e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
94420e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
94520e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
94620e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
94720e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dciman32.dll'...
94820e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'dciman32.dll' -> '\Device\HarddiskVolume4\Windows\System32\dciman32.dll' [rcNtRedir=0xc0150008]
94920e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
95020e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'gdi32.dll'.
95120e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
95220e8.2fb4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\dciman32.dll)
95320e8.2fb4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\dciman32.dll
95420e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
95520e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
95620e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
95720e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
95820e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
95920e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
96020e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
96120e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
96220e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
96320e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
96420e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
96520e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
96620e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
96720e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
96820e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
96920e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
97020e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
97120e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
97220e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
97320e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
97420e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
97520e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
97620e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
97720e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
97820e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
97920e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
98020e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
98120e8.2fb4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VirtualBox.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000a01:<flags> [calling]
98220e8.2fb4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.dll [lacks WinVerifyTrust]
98320e8.2fb4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
98420e8.2fb4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
98520e8.2fb4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
98620e8.2fb4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
98720e8.2fb4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
98820e8.2fb4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
98920e8.2fb4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
99020e8.2fb4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll [lacks WinVerifyTrust]
99120e8.2fb4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll [lacks WinVerifyTrust]
99220e8.2fb4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\winmm.dll [lacks WinVerifyTrust]
99320e8.2fb4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\glu32.dll [lacks WinVerifyTrust]
99420e8.2fb4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\ddraw.dll [lacks WinVerifyTrust]
99520e8.2fb4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\mpr.dll [lacks WinVerifyTrust]
99620e8.2fb4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\winspool.drv [lacks WinVerifyTrust]
99720e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'advapi32.dll'.
99820e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
99920e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
100020e8.2fb4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.14393.447_none_0d5aa7fbb6d35646\comctl32.dll)
100120e8.2fb4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.14393.447_none_0d5aa7fbb6d35646\comctl32.dll
100220e8.2fb4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\winmmbase.dll [lacks WinVerifyTrust]
100320e8.2fb4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\dciman32.dll [lacks WinVerifyTrust]
100420e8.2fb4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
100520e8.2fb4: supR3HardenedDllNotificationCallback: load 00007ffb4bf90000 LB 0x00008000 C:\WINDOWS\SYSTEM32\DCIMAN32.dll [fFlags=0x0]
100620e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\dciman32.dll [lacks WinVerifyTrust]
100720e8.2fb4: supR3HardenedDllNotificationCallback: load 00007ffb4bfa0000 LB 0x000f7000 C:\WINDOWS\SYSTEM32\DDRAW.dll [fFlags=0x0]
100820e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\ddraw.dll [lacks WinVerifyTrust]
100920e8.2fb4: supR3HardenedDllNotificationCallback: load 00007ffb4c0a0000 LB 0x0002d000 C:\WINDOWS\SYSTEM32\GLU32.dll [fFlags=0x0]
101020e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\glu32.dll [lacks WinVerifyTrust]
101120e8.2fb4: supR3HardenedDllNotificationCallback: load 00007ffb4c0d0000 LB 0x00123000 C:\WINDOWS\SYSTEM32\OPENGL32.dll [fFlags=0x0]
101220e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
101320e8.2fb4: supR3HardenedDllNotificationCallback: load 00000000777f0000 LB 0x000d2000 C:\Program Files\Oracle\VirtualBox\MSVCR100.dll [fFlags=0x0]
101420e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
101520e8.2fb4: supR3HardenedDllNotificationCallback: load 00000000778d0000 LB 0x00098000 C:\Program Files\Oracle\VirtualBox\MSVCP100.dll [fFlags=0x0]
101620e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
101720e8.2fb4: supR3HardenedDllNotificationCallback: load 00007ffb63cc0000 LB 0x0006a000 C:\WINDOWS\System32\WS2_32.dll [fFlags=0x0]
101820e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ws2_32.dll [lacks WinVerifyTrust]
101920e8.2fb4: supR3HardenedDllNotificationCallback: load 00007ffb32910000 LB 0x0053d000 C:\Program Files\Oracle\VirtualBox\VBoxRT.dll [fFlags=0x0]
102020e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
102120e8.2fb4: supR3HardenedDllNotificationCallback: load 00007ffb63b80000 LB 0x00138000 C:\WINDOWS\System32\ole32.dll [fFlags=0x0]
102220e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ole32.dll [lacks WinVerifyTrust]
102320e8.2fb4: supR3HardenedDllNotificationCallback: load 00007ffb5a400000 LB 0x0001b000 C:\WINDOWS\SYSTEM32\MPR.dll [fFlags=0x0]
102420e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\mpr.dll [lacks WinVerifyTrust]
102520e8.2fb4: supR3HardenedDllNotificationCallback: load 0000000075f80000 LB 0x00565000 C:\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [fFlags=0x0]
102620e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
102720e8.2fb4: supR3HardenedDllNotificationCallback: load 00007ffb32310000 LB 0x005f7000 C:\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [fFlags=0x0]
102820e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
102920e8.2fb4: supR3HardenedDllNotificationCallback: load 0000000075a10000 LB 0x00561000 C:\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [fFlags=0x0]
103020e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
103120e8.2fb4: supR3HardenedDllNotificationCallback: load 00007ffb61dd0000 LB 0x0002b000 C:\WINDOWS\SYSTEM32\bcrypt.dll [fFlags=0x0]
103220e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
103320e8.2fb4: supR3HardenedDllNotificationCallback: load 00007ffb581e0000 LB 0x00086000 C:\WINDOWS\SYSTEM32\WINSPOOL.DRV [fFlags=0x0]
103420e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\winspool.drv [lacks WinVerifyTrust]
103520e8.2fb4: supR3HardenedDllNotificationCallback: load 00007ffb2e3c0000 LB 0x000ac000 C:\WINDOWS\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.14393.447_none_0d5aa7fbb6d35646\COMCTL32.dll [fFlags=0x0]
103620e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.14393.447_none_0d5aa7fbb6d35646\comctl32.dll [lacks WinVerifyTrust]
103720e8.2fb4: supR3HardenedDllNotificationCallback: load 00007ffb642d0000 LB 0x000fa000 C:\WINDOWS\System32\COMDLG32.dll [fFlags=0x0]
103820e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\comdlg32.dll [lacks WinVerifyTrust]
103920e8.2fb4: supR3HardenedDllNotificationCallback: load 00007ffb437f0000 LB 0x00051000 C:\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll [fFlags=0x0]
104020e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll [lacks WinVerifyTrust]
104120e8.2fb4: supR3HardenedDllNotificationCallback: load 0000000077790000 LB 0x00054000 C:\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll [fFlags=0x0]
104220e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll [lacks WinVerifyTrust]
104320e8.2fb4: supR3HardenedDllNotificationCallback: load 00007ffb63230000 LB 0x0009c000 C:\WINDOWS\System32\msvcp_win.dll [fFlags=0x0]
104420e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust]
104520e8.2fb4: supR3HardenedDllNotificationCallback: load 00007ffb64460000 LB 0x000bf000 C:\WINDOWS\System32\OLEAUT32.dll [fFlags=0x0]
104620e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
104720e8.2fb4: supR3HardenedDllNotificationCallback: load 00007ffb60610000 LB 0x0002b000 C:\WINDOWS\SYSTEM32\WINMMBASE.dll [fFlags=0x0]
104820e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\winmmbase.dll [lacks WinVerifyTrust]
104920e8.2fb4: supR3HardenedDllNotificationCallback: load 00007ffb60670000 LB 0x00023000 C:\WINDOWS\SYSTEM32\WINMM.dll [fFlags=0x0]
105020e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\winmm.dll [lacks WinVerifyTrust]
105120e8.2fb4: supR3HardenedDllNotificationCallback: load 00007ffb27310000 LB 0x008ea000 C:\Program Files\Oracle\VirtualBox\VirtualBox.dll [fFlags=0x0]
105220e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.dll [lacks WinVerifyTrust]
105320e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
105420e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
105520e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
105620e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
105720e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
105820e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
105920e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
106020e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
106120e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
106220e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
106320e8.2fb4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
106420e8.2fb4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb32910000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
106520e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
106620e8.2fb4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
106720e8.2fb4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb32910000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
106820e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
106920e8.2fb4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
107020e8.2fb4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb32910000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
107120e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
107220e8.2fb4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
107320e8.2fb4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb32910000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
107420e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
107520e8.2fb4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
107620e8.2fb4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb32910000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
107720e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
107820e8.2fb4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
107920e8.2fb4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb32910000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
108020e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
108120e8.2fb4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb32910000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
108220e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
108320e8.2fb4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb32910000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
108420e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
108520e8.2fb4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb32910000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
108620e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
108720e8.2fb4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb32910000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
108820e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
108920e8.2fb4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb32910000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
109020e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
109120e8.2fb4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb32910000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
109220e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
109320e8.2fb4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb32910000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
109420e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
109520e8.2fb4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
109620e8.2fb4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb32910000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
109720e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
109820e8.2fb4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb32910000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
109920e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
110020e8.2fb4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb32910000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
110120e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
110220e8.2fb4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb32910000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
110320e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
110420e8.2fb4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb32910000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
110520e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
110620e8.2fb4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb32910000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
110720e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
110820e8.2fb4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb32910000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
110920e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
111020e8.2fb4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb32910000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
111120e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
111220e8.2fb4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb32910000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
111320e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
111420e8.2fb4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb32910000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
111520e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
111620e8.2fb4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb32910000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
111720e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
111820e8.2fb4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb32910000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
111920e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
112020e8.2fb4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb32910000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
112120e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
112220e8.2fb4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb32910000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
112320e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
112420e8.2fb4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb32910000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
112520e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
112620e8.2fb4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb32910000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
112720e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
112820e8.2fb4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
112920e8.2fb4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb32910000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
113020e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
113120e8.2fb4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb32910000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
113220e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
113320e8.2fb4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb32910000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
113420e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\imm32.dll [lacks WinVerifyTrust]
113520e8.2fb4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\imm32.dll (Input=imm32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
113620e8.2fb4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb643d0000 'C:\WINDOWS\System32\imm32.dll'
113720e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
113820e8.2fb4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\kernel32.dll (Input=kernel32, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
113920e8.2fb4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb63d50000 'C:\WINDOWS\System32\kernel32.dll'
114020e8.2fb4: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-string-l1-1-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
114120e8.2fb4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb623a0000 'api-ms-win-core-string-l1-1-0'
114220e8.2fb4: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-datetime-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
114320e8.2fb4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb623a0000 'api-ms-win-core-datetime-l1-1-1'
114420e8.2fb4: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-obsolete-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
114520e8.2fb4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb623a0000 'api-ms-win-core-localization-obsolete-l1-2-0'
114620e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
114720e8.2fb4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\ADVAPI32.DLL (Input=ADVAPI32.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
114820e8.2fb4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb63a60000 'C:\WINDOWS\System32\ADVAPI32.DLL'
114920e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'bcryptprimitives.dll'.
115020e8.2fb4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\cryptbase.dll)
115120e8.2fb4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\cryptbase.dll
115220e8.2fb4: supR3HardenedDllNotificationCallback: load 00007ffb61ce0000 LB 0x0000b000 C:\WINDOWS\SYSTEM32\CRYPTBASE.DLL [fFlags=0x0]
115320e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\cryptbase.dll [lacks WinVerifyTrust]
115420e8.2fb4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb27310000 'C:\Program Files\Oracle\VirtualBox\VirtualBox.dll'
115520e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
115620e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'ole32.dll'.
115720e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
115820e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'imm32.dll'.
115920e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'winmm.dll'.
116020e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'oleaut32.dll'.
116120e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'shell32.dll'.
116220e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'advapi32.dll'.
116320e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'qt5guivbox.dll'.
116420e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'qt5corevbox.dll'.
116520e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'msvcr100.dll'.
116620e8.2fb4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\platforms\qwindows.dll)
116720e8.2fb4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\platforms\qwindows.dll
116820e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
116920e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
117020e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
117120e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
117220e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
117320e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
117420e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
117520e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
117620e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
117720e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
117820e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
117920e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
118020e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
118120e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume4\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
118220e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\shell32.dll [lacks WinVerifyTrust]
118320e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
118420e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume4\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
118520e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
118620e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
118720e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume4\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
118820e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\winmm.dll [lacks WinVerifyTrust]
118920e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'...
119020e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume4\Windows\System32\imm32.dll' [rcNtRedir=0xc0150008]
119120e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\imm32.dll [lacks WinVerifyTrust]
119220e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
119320e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
119420e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
119520e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
119620e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume4\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
119720e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ole32.dll [lacks WinVerifyTrust]
119820e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
119920e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
120020e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
120120e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'...
120220e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume4\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008]
120320e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust]
120420e8.2fb4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
120520e8.2fb4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\platforms\qwindows.dll [lacks WinVerifyTrust]
120620e8.2fb4: supR3HardenedDllNotificationCallback: load 00007ffb3a920000 LB 0x0012e000 C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll [fFlags=0x0]
120720e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\platforms\qwindows.dll [lacks WinVerifyTrust]
120820e8.2fb4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb3a920000 'C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll'
120920e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
121020e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #31 'gdi32.dll'.
121120e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #32 'user32.dll'.
121220e8.2fb4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\uxtheme.dll)
121320e8.2fb4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\uxtheme.dll
121420e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
121520e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
121620e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
121720e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
121820e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
121920e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
122020e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
122120e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
122220e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
122320e8.2fb4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
122420e8.2fb4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\uxtheme.dll [lacks WinVerifyTrust]
122520e8.2fb4: supR3HardenedDllNotificationCallback: load 00007ffb608c0000 LB 0x00095000 C:\WINDOWS\system32\uxtheme.dll [fFlags=0x0]
122620e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\uxtheme.dll [lacks WinVerifyTrust]
122720e8.2fb4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb608c0000 'C:\WINDOWS\system32\uxtheme.dll'
122820e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
122920e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'advapi32.dll'.
123020e8.2fb4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\PGPhk.dll)
123120e8.2fb4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\PGPhk.dll
123220e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
123320e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
123420e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
123520e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
123620e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
123720e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
123820e8.2fb4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\SYSTEM32\PGPhk.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
123920e8.2fb4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\PGPhk.dll [lacks WinVerifyTrust]
124020e8.2fb4: supR3HardenedDllNotificationCallback: load 00007ffb4d800000 LB 0x00010000 C:\WINDOWS\SYSTEM32\PGPhk.dll [fFlags=0x0]
124120e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\PGPhk.dll [lacks WinVerifyTrust]
124220e8.2fb4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb4d800000 'C:\WINDOWS\SYSTEM32\PGPhk.dll'
124320e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
124420e8.2fb4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb64530000 'C:\WINDOWS\system32\user32.dll'
124520e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\shell32.dll [lacks WinVerifyTrust]
124620e8.2fb4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
124720e8.2fb4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb64840000 'C:\WINDOWS\system32\shell32.dll'
124820e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\SHCore.dll [lacks WinVerifyTrust]
124920e8.2fb4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\SHCore.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
125020e8.2fb4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb622f0000 'C:\WINDOWS\system32\SHCore.dll'
125120e8.2fb4: supR3HardenedMonitor_LdrLoadDll: error opening 'C:\WINDOWS\system32\wintab32.dll': 0 (NtPath=\??\C:\WINDOWS\system32\wintab32.dll; Input=C:\WINDOWS\system32\wintab32.dll; rcNtGetDll=0x0
125220e8.2fb4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\wintab32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
125320e8.2fb4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000135 'C:\WINDOWS\system32\wintab32.dll'
125420e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
125520e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #15 'win32u.dll'.
125620e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #16 'user32.dll'.
125720e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #17 'gdi32.dll'.
125820e8.2fb4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\dwmapi.dll)
125920e8.2fb4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\dwmapi.dll
126020e8.2fb4: supR3HardenedDllNotificationCallback: load 00007ffb5fdb0000 LB 0x00026000 C:\WINDOWS\system32\dwmapi.dll [fFlags=0x0]
126120e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\dwmapi.dll [lacks WinVerifyTrust]
126220e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\winmm.dll [lacks WinVerifyTrust]
126320e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
126420e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
126520e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
126620e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
126720e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
126820e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
126920e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
127020e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume4\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
127120e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\win32u.dll [lacks WinVerifyTrust]
127220e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
127320e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
127420e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
127520e8.2fb4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\winmm.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
127620e8.2fb4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb60670000 'C:\WINDOWS\system32\winmm.dll'
127720e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\winmm.dll [lacks WinVerifyTrust]
127820e8.2fb4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\winmm.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
127920e8.2fb4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb60670000 'C:\WINDOWS\system32\winmm.dll'
128020e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\shell32.dll [lacks WinVerifyTrust]
128120e8.2fb4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
128220e8.2fb4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb64840000 'C:\WINDOWS\system32\shell32.dll'
128320e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\uxtheme.dll [lacks WinVerifyTrust]
128420e8.2fb4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
128520e8.2fb4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb608c0000 'C:\WINDOWS\system32\uxtheme.dll'
128620e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
128720e8.2fb4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb63f60000 'C:\WINDOWS\system32\gdi32.dll'
128820e8.2fb4: supR3HardenedDllNotificationCallback: load 00007ffb63e00000 LB 0x0015a000 C:\WINDOWS\System32\MSCTF.dll [fFlags=0x0]
128920e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
129020e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #19 'oleaut32.dll'.
129120e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #33 'user32.dll'.
129220e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'gdi32.dll'.
129320e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'imm32.dll'.
129420e8.2fb4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\msctf.dll)
129520e8.2fb4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\msctf.dll
129620e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
129720e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'...
129820e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume4\Windows\System32\imm32.dll' [rcNtRedir=0xc0150008]
129920e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\imm32.dll [lacks WinVerifyTrust]
130020e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
130120e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
130220e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
130320e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
130420e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
130520e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
130620e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
130720e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume4\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
130820e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
130920e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
131020e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
131120e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
131220e8.2fb4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb646a0000 'C:\WINDOWS\System32\rpcrt4.dll'
131320e8.2fb4: supR3HardenedDllNotificationCallback: load 00007ffb65d50000 LB 0x0009f000 C:\WINDOWS\System32\clbcatq.dll [fFlags=0x0]
131420e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
131520e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'rpcrt4.dll'.
131620e8.2fb4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\clbcatq.dll)
131720e8.2fb4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\clbcatq.dll
131820e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
131920e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'shcore.dll'.
132020e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #23 'combase.dll'.
132120e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #25 'd3d11.dll'.
132220e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'dcomp.dll'.
132320e8.2fb4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\DataExchange.dll)
132420e8.2fb4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\DataExchange.dll
132520e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dcomp.dll'...
132620e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'dcomp.dll' -> '\Device\HarddiskVolume4\Windows\System32\dcomp.dll' [rcNtRedir=0xc0150008]
132720e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'win32u.dll'.
132820e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'.
132920e8.2fb4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\dcomp.dll)
133020e8.2fb4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\dcomp.dll
133120e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'd3d11.dll'...
133220e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'd3d11.dll' -> '\Device\HarddiskVolume4\Windows\System32\d3d11.dll' [rcNtRedir=0xc0150008]
133320e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
133420e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'dxgi.dll'.
133520e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #30 'win32u.dll'.
133620e8.2fb4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\d3d11.dll)
133720e8.2fb4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\d3d11.dll
133820e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
133920e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume4\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
134020e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\combase.dll [lacks WinVerifyTrust]
134120e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shcore.dll'...
134220e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'shcore.dll' -> '\Device\HarddiskVolume4\Windows\System32\shcore.dll' [rcNtRedir=0xc0150008]
134320e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\SHCore.dll [lacks WinVerifyTrust]
134420e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
134520e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
134620e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
134720e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
134820e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
134920e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
135020e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
135120e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
135220e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
135320e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
135420e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume4\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
135520e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\win32u.dll [lacks WinVerifyTrust]
135620e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dxgi.dll'...
135720e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'dxgi.dll' -> '\Device\HarddiskVolume4\Windows\System32\dxgi.dll' [rcNtRedir=0xc0150008]
135820e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
135920e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'win32u.dll'.
136020e8.2fb4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\dxgi.dll)
136120e8.2fb4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\dxgi.dll
136220e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
136320e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
136420e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
136520e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
136620e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
136720e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
136820e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
136920e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume4\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
137020e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\win32u.dll [lacks WinVerifyTrust]
137120e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
137220e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume4\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
137320e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\win32u.dll [lacks WinVerifyTrust]
137420e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
137520e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
137620e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
137720e8.2fb4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\dataexchange.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
137820e8.2fb4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\DataExchange.dll [lacks WinVerifyTrust]
137920e8.2fb4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\d3d11.dll [lacks WinVerifyTrust]
138020e8.2fb4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\dcomp.dll [lacks WinVerifyTrust]
138120e8.2fb4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\dxgi.dll [lacks WinVerifyTrust]
138220e8.2fb4: supR3HardenedDllNotificationCallback: load 00007ffb61190000 LB 0x0009f000 C:\WINDOWS\system32\dxgi.dll [fFlags=0x0]
138320e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\dxgi.dll [lacks WinVerifyTrust]
138420e8.2fb4: supR3HardenedDllNotificationCallback: load 00007ffb5e880000 LB 0x002b6000 C:\WINDOWS\system32\d3d11.dll [fFlags=0x0]
138520e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\d3d11.dll [lacks WinVerifyTrust]
138620e8.2fb4: supR3HardenedDllNotificationCallback: load 00007ffb5ff20000 LB 0x00151000 C:\WINDOWS\system32\dcomp.dll [fFlags=0x0]
138720e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\dcomp.dll [lacks WinVerifyTrust]
138820e8.2fb4: supR3HardenedDllNotificationCallback: load 00007ffb3dae0000 LB 0x00049000 C:\WINDOWS\system32\dataexchange.dll [fFlags=0x0]
138920e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\DataExchange.dll [lacks WinVerifyTrust]
139020e8.2fb4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb3dae0000 'C:\WINDOWS\system32\dataexchange.dll'
139120e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
139220e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'rpcrt4.dll'.
139320e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27 'bcrypt.dll'.
139420e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #38 'combase.dll'.
139520e8.2fb4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\twinapi.appcore.dll)
139620e8.2fb4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\twinapi.appcore.dll
139720e8.2fb4: supR3HardenedDllNotificationCallback: load 00007ffb60b70000 LB 0x0011c000 C:\WINDOWS\system32\twinapi.appcore.dll [fFlags=0x0]
139820e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\twinapi.appcore.dll [lacks WinVerifyTrust]
139920e8.42a8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
140020e8.42a8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'rpcrt4.dll'.
140120e8.42a8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #30 'devobj.dll'.
140220e8.42a8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #31 'propsys.dll'.
140320e8.42a8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\MMDevAPI.dll)
140420e8.42a8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\MMDevAPI.dll
140520e8.42a8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #15 'cfgmgr32.dll'.
140620e8.42a8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\devobj.dll)
140720e8.42a8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\devobj.dll
140820e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msctf.dll [lacks WinVerifyTrust]
140920e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'cfgmgr32.dll'...
141020e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'cfgmgr32.dll' -> '\Device\HarddiskVolume4\Windows\System32\cfgmgr32.dll' [rcNtRedir=0xc0150008]
141120e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\cfgmgr32.dll [lacks WinVerifyTrust]
141220e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'propsys.dll'...
141320e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'propsys.dll' -> '\Device\HarddiskVolume4\Windows\System32\propsys.dll' [rcNtRedir=0xc0150008]
141420e8.42a8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
141520e8.42a8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'oleaut32.dll'.
141620e8.42a8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #20 'rpcrt4.dll'.
141720e8.42a8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\propsys.dll)
141820e8.42a8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\propsys.dll
141920e8.42a8: supR3HardenedDllNotificationCallback: load 00007ffb60d60000 LB 0x00028000 C:\WINDOWS\SYSTEM32\DEVOBJ.dll [fFlags=0x0]
142020e8.42a8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\devobj.dll [lacks WinVerifyTrust]
142120e8.42a8: supR3HardenedDllNotificationCallback: load 00007ffb5a550000 LB 0x00185000 C:\WINDOWS\SYSTEM32\PROPSYS.dll [fFlags=0x0]
142220e8.42a8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\propsys.dll [lacks WinVerifyTrust]
142320e8.42a8: supR3HardenedDllNotificationCallback: load 00007ffb534a0000 LB 0x00071000 C:\WINDOWS\SYSTEM32\MMDevAPI.DLL [fFlags=0x0]
142420e8.42a8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
142520e8.42a8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
142620e8.42a8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #25 'ksuser.dll'.
142720e8.42a8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'avrt.dll'.
142820e8.42a8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27 'mmdevapi.dll'.
142920e8.42a8: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\wdmaud.drv)
143020e8.42a8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\wdmaud.drv
143120e8.42a8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mmdevapi.dll'...
143220e8.42a8: supR3HardenedWinVerifyCacheProcessImportTodos: 'mmdevapi.dll' -> '\Device\HarddiskVolume4\Windows\System32\mmdevapi.dll' [rcNtRedir=0xc0150008]
143320e8.42a8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
143420e8.42a8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'avrt.dll'...
143520e8.42a8: supR3HardenedWinVerifyCacheProcessImportTodos: 'avrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\avrt.dll' [rcNtRedir=0xc0150008]
143620e8.42a8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\avrt.dll)
143720e8.42a8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\avrt.dll
143820e8.42a8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ksuser.dll'...
143920e8.42a8: supR3HardenedWinVerifyCacheProcessImportTodos: 'ksuser.dll' -> '\Device\HarddiskVolume4\Windows\System32\ksuser.dll' [rcNtRedir=0xc0150008]
144020e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
144120e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'oleaut32.dll'.
144220e8.2fb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #20 'rpcrt4.dll'.
144320e8.2fb4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\propsys.dll)
144420e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'devobj.dll'...
144520e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'devobj.dll' -> '\Device\HarddiskVolume4\Windows\System32\devobj.dll' [rcNtRedir=0xc0150008]
144620e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\devobj.dll [lacks WinVerifyTrust]
144720e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
144820e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
144920e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
145020e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
145120e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
145220e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
145320e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
145420e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume4\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
145520e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\combase.dll [lacks WinVerifyTrust]
145620e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcrypt.dll'...
145720e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcrypt.dll' -> '\Device\HarddiskVolume4\Windows\System32\bcrypt.dll' [rcNtRedir=0xc0150008]
145820e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
145920e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
146020e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
146120e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
146220e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
146320e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
146420e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
146520e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
146620e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
146720e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
146820e8.42a8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
146920e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
147020e8.42a8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\ksuser.dll)
147120e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume4\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
147220e8.42a8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\ksuser.dll
147320e8.42a8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
147420e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
147520e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
147620e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
147720e8.42a8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
147820e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
147920e8.42a8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
148020e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
148120e8.42a8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
148220e8.2fb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
148320e8.42a8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
148420e8.2fb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
148520e8.42a8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
148620e8.2fb4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\MSCTF.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
148720e8.2fb4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb63e00000 'C:\WINDOWS\System32\MSCTF.dll'
148820e8.42a8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
148920e8.42a8: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume4\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
149020e8.42a8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
149120e8.42a8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
149220e8.42a8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
149320e8.42a8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
149420e8.42a8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
149520e8.42a8: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
149620e8.42a8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ksuser.dll [lacks WinVerifyTrust]
149720e8.42a8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\avrt.dll [lacks WinVerifyTrust]
149820e8.42a8: supR3HardenedDllNotificationCallback: load 00007ffb5e4c0000 LB 0x00009000 C:\WINDOWS\SYSTEM32\ksuser.dll [fFlags=0x0]
149920e8.42a8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ksuser.dll [lacks WinVerifyTrust]
150020e8.42a8: supR3HardenedDllNotificationCallback: load 00007ffb5ed20000 LB 0x0000b000 C:\WINDOWS\SYSTEM32\AVRT.dll [fFlags=0x0]
150120e8.42a8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\avrt.dll [lacks WinVerifyTrust]
150220e8.42a8: supR3HardenedDllNotificationCallback: load 00007ffb36bc0000 LB 0x0003f000 C:\WINDOWS\System32\wdmaud.drv [fFlags=0x0]
150320e8.42a8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
150420e8.42a8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb36bc0000 'C:\WINDOWS\System32\wdmaud.drv'
150520e8.42a8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
150620e8.42a8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
150720e8.42a8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb36bc0000 'C:\WINDOWS\System32\wdmaud.drv'
150820e8.42a8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
150920e8.42a8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\MMDEVAPI.DLL (Input=MMDEVAPI.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
151020e8.42a8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb534a0000 'C:\WINDOWS\System32\MMDEVAPI.DLL'
151120e8.42a8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
151220e8.42a8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
151320e8.42a8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb36bc0000 'C:\WINDOWS\System32\wdmaud.drv'
151420e8.42a8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
151520e8.42a8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
151620e8.42a8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb36bc0000 'C:\WINDOWS\System32\wdmaud.drv'
151720e8.42a8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
151820e8.42a8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
151920e8.42a8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb36bc0000 'C:\WINDOWS\System32\wdmaud.drv'
152020e8.42a8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
152120e8.42a8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'rpcrt4.dll'.
152220e8.42a8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'oleaut32.dll'.
152320e8.42a8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #37 'mmdevapi.dll'.
152420e8.42a8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\AudioSes.dll)
152520e8.42a8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\AudioSes.dll
152620e8.42a8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mmdevapi.dll'...
152720e8.42a8: supR3HardenedWinVerifyCacheProcessImportTodos: 'mmdevapi.dll' -> '\Device\HarddiskVolume4\Windows\System32\mmdevapi.dll' [rcNtRedir=0xc0150008]
152820e8.42a8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
152920e8.42a8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
153020e8.42a8: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume4\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
153120e8.42a8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
153220e8.42a8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
153320e8.42a8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
153420e8.42a8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
153520e8.42a8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
153620e8.42a8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
153720e8.42a8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
153820e8.42a8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\AUDIOSES.DLL (Input=AUDIOSES.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
153920e8.42a8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\AudioSes.dll [lacks WinVerifyTrust]
154020e8.42a8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'combase.dll'.
154120e8.42a8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #16 'rpcrt4.dll'.
154220e8.42a8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #24 'bcryptprimitives.dll'.
154320e8.42a8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\WinTypes.dll)
154420e8.42a8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\WinTypes.dll
154520e8.42a8: supR3HardenedDllNotificationCallback: load 00007ffb5eb40000 LB 0x00136000 C:\WINDOWS\SYSTEM32\wintypes.dll [fFlags=0x0]
154620e8.42a8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\WinTypes.dll [lacks WinVerifyTrust]
154720e8.42a8: supR3HardenedDllNotificationCallback: load 00007ffb49390000 LB 0x00094000 C:\WINDOWS\System32\AUDIOSES.DLL [fFlags=0x0]
154820e8.42a8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\AudioSes.dll [lacks WinVerifyTrust]
154920e8.42a8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb49390000 'C:\WINDOWS\System32\AUDIOSES.DLL'
155020e8.42a8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
155120e8.42a8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'...
155220e8.42a8: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume4\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008]
155320e8.42a8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust]
155420e8.42a8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
155520e8.42a8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
155620e8.42a8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
155720e8.42a8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
155820e8.42a8: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume4\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
155920e8.42a8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\combase.dll [lacks WinVerifyTrust]
156020e8.42a8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
156120e8.42a8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb36bc0000 'C:\WINDOWS\System32\wdmaud.drv'
156220e8.42a8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
156320e8.42a8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
156420e8.42a8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb36bc0000 'C:\WINDOWS\System32\wdmaud.drv'
156520e8.42a8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
156620e8.42a8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb36bc0000 'C:\WINDOWS\System32\wdmaud.drv'
156720e8.42a8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
156820e8.42a8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb36bc0000 'C:\WINDOWS\System32\wdmaud.drv'
156920e8.42a8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
157020e8.42a8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb36bc0000 'C:\WINDOWS\System32\wdmaud.drv'
157120e8.42a8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
157220e8.42a8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb36bc0000 'C:\WINDOWS\System32\wdmaud.drv'
157320e8.42a8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
157420e8.42a8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb36bc0000 'C:\WINDOWS\System32\wdmaud.drv'
157520e8.42a8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
157620e8.42a8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb36bc0000 'C:\WINDOWS\System32\wdmaud.drv'
157720e8.42a8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
157820e8.42a8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb36bc0000 'C:\WINDOWS\System32\wdmaud.drv'
157920e8.42a8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
158020e8.42a8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
158120e8.42a8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb36bc0000 'C:\WINDOWS\System32\wdmaud.drv'
158220e8.42a8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
158320e8.42a8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb36bc0000 'C:\WINDOWS\System32\wdmaud.drv'
158420e8.42a8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
158520e8.42a8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb36bc0000 'C:\WINDOWS\System32\wdmaud.drv'
158620e8.42a8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
158720e8.42a8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb36bc0000 'C:\WINDOWS\System32\wdmaud.drv'
158820e8.42a8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
158920e8.42a8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb36bc0000 'C:\WINDOWS\System32\wdmaud.drv'
159020e8.42a8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
159120e8.42a8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb36bc0000 'C:\WINDOWS\System32\wdmaud.drv'
159220e8.42a8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
159320e8.42a8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb36bc0000 'C:\WINDOWS\System32\wdmaud.drv'
159420e8.42a8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
159520e8.42a8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb36bc0000 'C:\WINDOWS\System32\wdmaud.drv'
159620e8.42a8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
159720e8.42a8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb36bc0000 'C:\WINDOWS\System32\wdmaud.drv'
159820e8.42a8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
159920e8.42a8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'mmdevapi.dll'.
160020e8.42a8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'msacm32.dll'.
160120e8.42a8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'winmmbase.dll'.
160220e8.42a8: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\msacm32.drv)
160320e8.42a8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\msacm32.drv
160420e8.42a8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmmbase.dll'...
160520e8.42a8: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmmbase.dll' -> '\Device\HarddiskVolume4\Windows\System32\winmmbase.dll' [rcNtRedir=0xc0150008]
160620e8.42a8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\winmmbase.dll [lacks WinVerifyTrust]
160720e8.42a8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msacm32.dll'...
160820e8.42a8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msacm32.dll' -> '\Device\HarddiskVolume4\Windows\System32\msacm32.dll' [rcNtRedir=0xc0150008]
160920e8.42a8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
161020e8.42a8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\msacm32.dll)
161120e8.42a8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\msacm32.dll
161220e8.42a8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mmdevapi.dll'...
161320e8.42a8: supR3HardenedWinVerifyCacheProcessImportTodos: 'mmdevapi.dll' -> '\Device\HarddiskVolume4\Windows\System32\mmdevapi.dll' [rcNtRedir=0xc0150008]
161420e8.42a8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
161520e8.42a8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
161620e8.42a8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
161720e8.42a8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
161820e8.42a8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
161920e8.42a8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
162020e8.42a8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
162120e8.42a8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
162220e8.42a8: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
162320e8.42a8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msacm32.dll [lacks WinVerifyTrust]
162420e8.42a8: supR3HardenedDllNotificationCallback: load 00007ffb4a4e0000 LB 0x0001c000 C:\WINDOWS\SYSTEM32\MSACM32.dll [fFlags=0x0]
162520e8.42a8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msacm32.dll [lacks WinVerifyTrust]
162620e8.42a8: supR3HardenedDllNotificationCallback: load 00007ffb4d200000 LB 0x0000d000 C:\WINDOWS\System32\msacm32.drv [fFlags=0x0]
162720e8.42a8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
162820e8.42a8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb4d200000 'C:\WINDOWS\System32\msacm32.drv'
162920e8.42a8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
163020e8.42a8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
163120e8.42a8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb4d200000 'C:\WINDOWS\System32\msacm32.drv'
163220e8.42a8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
163320e8.42a8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
163420e8.42a8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb4d200000 'C:\WINDOWS\System32\msacm32.drv'
163520e8.42a8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
163620e8.42a8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
163720e8.42a8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb4d200000 'C:\WINDOWS\System32\msacm32.drv'
163820e8.42a8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
163920e8.42a8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
164020e8.42a8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb4d200000 'C:\WINDOWS\System32\msacm32.drv'
164120e8.42a8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
164220e8.42a8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
164320e8.42a8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb4d200000 'C:\WINDOWS\System32\msacm32.drv'
164420e8.42a8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
164520e8.42a8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
164620e8.42a8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb4d200000 'C:\WINDOWS\System32\msacm32.drv'
164720e8.42a8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
164820e8.42a8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb4d200000 'C:\WINDOWS\System32\msacm32.drv'
164920e8.42a8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
165020e8.42a8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb4d200000 'C:\WINDOWS\System32\msacm32.drv'
165120e8.42a8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
165220e8.42a8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb4d200000 'C:\WINDOWS\System32\msacm32.drv'
165320e8.42a8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
165420e8.42a8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'winmm.dll'.
165520e8.42a8: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\midimap.dll)
165620e8.42a8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\midimap.dll
165720e8.42a8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
165820e8.42a8: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume4\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
165920e8.42a8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\winmm.dll [lacks WinVerifyTrust]
166020e8.42a8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
166120e8.42a8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
166220e8.42a8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
166320e8.42a8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
166420e8.42a8: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\midimap.dll [lacks WinVerifyTrust]
166520e8.42a8: supR3HardenedDllNotificationCallback: load 00007ffb4b9c0000 LB 0x0000a000 C:\WINDOWS\System32\midimap.dll [fFlags=0x0]
166620e8.42a8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\midimap.dll [lacks WinVerifyTrust]
166720e8.42a8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb4b9c0000 'C:\WINDOWS\System32\midimap.dll'
166820e8.42a8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\midimap.dll [lacks WinVerifyTrust]
166920e8.42a8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
167020e8.42a8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb4b9c0000 'C:\WINDOWS\System32\midimap.dll'
167120e8.42a8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\midimap.dll [lacks WinVerifyTrust]
167220e8.42a8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
167320e8.42a8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb4b9c0000 'C:\WINDOWS\System32\midimap.dll'
167420e8.42a8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\midimap.dll [lacks WinVerifyTrust]
167520e8.42a8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
167620e8.42a8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb4b9c0000 'C:\WINDOWS\System32\midimap.dll'
167720e8.473c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
167820e8.473c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\MMDevApi.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
167920e8.473c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb534a0000 'C:\WINDOWS\System32\MMDevApi.dll'
168020e8.2fb4: '\Device\HarddiskVolume4\Windows\System32\ntdll.dll' has no imports
168120e8.2fb4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\ntdll.dll)
168220e8.2fb4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\ntdll.dll
168320e8.2fb4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\ntdll.dll (Input=ntdll.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
168420e8.2fb4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb65df0000 'C:\WINDOWS\System32\ntdll.dll'
168520e8.2fb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ntdll.dll [lacks WinVerifyTrust]
168620e8.2fb4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\ntdll.dll (Input=ntdll.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
168720e8.2fb4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb65df0000 'C:\WINDOWS\System32\ntdll.dll'
16882ae8.132c: supR3HardNtChildWaitFor[1]: Quitting: ExitCode=0x1 (rcNtWait=0x0, rcNt1=0x0, rcNt2=0x103, rcNt3=0x103, 2154 ms, the end);

© 2025 Oracle Support Privacy / Do Not Sell My Info Terms of Use Trademark Policy Automated Access Etiquette