VirtualBox

Ticket #14176: VBoxHardening.log

File VBoxHardening.log, 191.3 KB (added by okomarov, 7 years ago)
Line 
1f2c.a24: Log file opened: 5.1.24r117012 g_hStartupLog=0000000000000014 g_uNtVerCombined=0x611db110
2f2c.a24: \SystemRoot\System32\ntdll.dll:
3f2c.a24: CreationTime: 2017-07-25T16:33:24.504865500Z
4f2c.a24: LastWriteTime: 2017-05-12T18:24:12.913140800Z
5f2c.a24: ChangeTime: 2017-07-25T16:40:01.298146000Z
6f2c.a24: FileAttributes: 0x20
7f2c.a24: Size: 0x1a7100
8f2c.a24: NT Headers: 0xe0
9f2c.a24: Timestamp: 0x5915fdce
10f2c.a24: Machine: 0x8664 - amd64
11f2c.a24: Timestamp: 0x5915fdce
12f2c.a24: Image Version: 6.1
13f2c.a24: SizeOfImage: 0x1aa000 (1744896)
14f2c.a24: Resource Dir: 0x14e000 LB 0x5a028
15f2c.a24: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
16f2c.a24: [Raw version resource data: 0x14e0f0 LB 0x380, codepage 0x0 (reserved 0x0)]
17f2c.a24: ProductName: Microsoft® Windows® Operating System
18f2c.a24: ProductVersion: 6.1.7601.23807
19f2c.a24: FileVersion: 6.1.7601.23807 (win7sp1_ldr.170512-0600)
20f2c.a24: FileDescription: NT Layer DLL
21f2c.a24: \SystemRoot\System32\kernel32.dll:
22f2c.a24: CreationTime: 2017-07-25T16:33:21.469691900Z
23f2c.a24: LastWriteTime: 2017-05-12T18:22:33.598000000Z
24f2c.a24: ChangeTime: 2017-07-25T16:40:02.202947600Z
25f2c.a24: FileAttributes: 0x20
26f2c.a24: Size: 0x11c000
27f2c.a24: NT Headers: 0xe0
28f2c.a24: Timestamp: 0x5915fe13
29f2c.a24: Machine: 0x8664 - amd64
30f2c.a24: Timestamp: 0x5915fe13
31f2c.a24: Image Version: 6.1
32f2c.a24: SizeOfImage: 0x11f000 (1175552)
33f2c.a24: Resource Dir: 0x116000 LB 0x528
34f2c.a24: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
35f2c.a24: [Raw version resource data: 0x1160b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
36f2c.a24: ProductName: Microsoft® Windows® Operating System
37f2c.a24: ProductVersion: 6.1.7601.23807
38f2c.a24: FileVersion: 6.1.7601.23807 (win7sp1_ldr.170512-0600)
39f2c.a24: FileDescription: Windows NT BASE API Client DLL
40f2c.a24: \SystemRoot\System32\KernelBase.dll:
41f2c.a24: CreationTime: 2017-07-25T16:33:20.163617200Z
42f2c.a24: LastWriteTime: 2017-05-12T18:22:33.598000000Z
43f2c.a24: ChangeTime: 2017-07-25T16:40:02.202947600Z
44f2c.a24: FileAttributes: 0x20
45f2c.a24: Size: 0x66800
46f2c.a24: NT Headers: 0xe8
47f2c.a24: Timestamp: 0x5915fe14
48f2c.a24: Machine: 0x8664 - amd64
49f2c.a24: Timestamp: 0x5915fe14
50f2c.a24: Image Version: 6.1
51f2c.a24: SizeOfImage: 0x6a000 (434176)
52f2c.a24: Resource Dir: 0x68000 LB 0x530
53f2c.a24: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
54f2c.a24: [Raw version resource data: 0x680b0 LB 0x3ac, codepage 0x0 (reserved 0x0)]
55f2c.a24: ProductName: Microsoft® Windows® Operating System
56f2c.a24: ProductVersion: 6.1.7601.23807
57f2c.a24: FileVersion: 6.1.7601.23807 (win7sp1_ldr.170512-0600)
58f2c.a24: FileDescription: Windows NT BASE API Client DLL
59f2c.a24: \SystemRoot\System32\apisetschema.dll:
60f2c.a24: CreationTime: 2017-07-25T16:33:12.850198900Z
61f2c.a24: LastWriteTime: 2017-05-12T18:22:28.981000000Z
62f2c.a24: ChangeTime: 2017-07-25T16:40:01.266946000Z
63f2c.a24: FileAttributes: 0x20
64f2c.a24: Size: 0x1a00
65f2c.a24: NT Headers: 0xc0
66f2c.a24: Timestamp: 0x5915fdad
67f2c.a24: Machine: 0x8664 - amd64
68f2c.a24: Timestamp: 0x5915fdad
69f2c.a24: Image Version: 6.1
70f2c.a24: SizeOfImage: 0x50000 (327680)
71f2c.a24: Resource Dir: 0x30000 LB 0x3f8
72f2c.a24: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
73f2c.a24: [Raw version resource data: 0x30060 LB 0x398, codepage 0x0 (reserved 0x0)]
74f2c.a24: ProductName: Microsoft® Windows® Operating System
75f2c.a24: ProductVersion: 6.1.7601.23807
76f2c.a24: FileVersion: 6.1.7601.23807 (win7sp1_ldr.170512-0600)
77f2c.a24: FileDescription: ApiSet Schema DLL
78f2c.a24: supR3HardenedWinFindAdversaries: 0x80
79f2c.a24: \SystemRoot\System32\drivers\mbam.sys:
80f2c.a24: CreationTime: 2013-01-22T18:56:25.830720100Z
81f2c.a24: LastWriteTime: 2011-12-10T15:24:08.000000000Z
82f2c.a24: ChangeTime: 2013-01-22T18:56:25.830720100Z
83f2c.a24: FileAttributes: 0x20
84f2c.a24: Size: 0x5a70
85f2c.a24: NT Headers: 0xf0
86f2c.a24: Timestamp: 0x4eb140a4
87f2c.a24: Machine: 0x8664 - amd64
88f2c.a24: Timestamp: 0x4eb140a4
89f2c.a24: Image Version: 6.0
90f2c.a24: SizeOfImage: 0xa000 (40960)
91f2c.a24: Resource Dir: 0x8000 LB 0x3d8
92f2c.a24: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
93f2c.a24: [Raw version resource data: 0x8060 LB 0x378, codepage 0x0 (reserved 0x0)]
94f2c.a24: ProductName: Malwarebytes' Anti-Malware
95f2c.a24: ProductVersion: 1.60.0.0002
96f2c.a24: FileVersion: 1.60.0.0002 built by: WinDDK
97f2c.a24: FileDescription: Malwarebytes' Anti-Malware
98f2c.a24: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
99f2c.a24: Calling main()
100f2c.a24: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2
101f2c.a24: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
102f2c.a24: SUPR3HardenedMain: Respawn #1
103f2c.a24: System32: \Device\HarddiskVolume2\Windows\System32
104f2c.a24: WinSxS: \Device\HarddiskVolume2\Windows\winsxs
105f2c.a24: KnownDllPath: C:\Windows\system32
106f2c.a24: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
107f2c.a24: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe)
108f2c.a24: supR3HardNtEnableThreadCreation:
109f2c.a24: supR3HardNtDisableThreadCreation: pvLdrInitThunk=0000000076eca360 pvNtTerminateThread=0000000076eec260
110f2c.a24: supR3HardenedWinDoReSpawn(1): New child fcc.1044 [kernel32].
111f2c.a24: supR3HardNtChildGatherData: PebBaseAddress=000007fffffda000 cbPeb=0x380
112f2c.a24: supR3HardNtPuChFindNtdll: uNtDllParentAddr=0000000076ea0000 uNtDllChildAddr=0000000076ea0000
113f2c.a24: supR3HardenedWinSetupChildInit: uLdrInitThunk=0000000076eca360
114f2c.a24: supR3HardenedWinSetupChildInit: Start child.
115f2c.a24: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 0 ms.
116f2c.a24: supR3HardNtChildPurify: Startup delay kludge #1/0: 513 ms, 64 sleeps
117f2c.a24: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
118f2c.a24: *0000000000000000-000000000000ffff 0x0001/0x0000 0x0000000
119f2c.a24: *0000000000010000-000000000002ffff 0x0004/0x0004 0x0020000
120f2c.a24: *0000000000030000-0000000000033fff 0x0002/0x0002 0x0040000
121f2c.a24: 0000000000034000-000000000003ffff 0x0001/0x0000 0x0000000
122f2c.a24: *0000000000040000-0000000000040fff 0x0004/0x0004 0x0020000
123f2c.a24: 0000000000041000-00000000000bffff 0x0001/0x0000 0x0000000
124f2c.a24: *00000000000c0000-00000000001bbfff 0x0000/0x0004 0x0020000
125f2c.a24: 00000000001bc000-00000000001bdfff 0x0104/0x0004 0x0020000
126f2c.a24: 00000000001be000-00000000001bffff 0x0004/0x0004 0x0020000
127f2c.a24: 00000000001c0000-0000000076e9ffff 0x0001/0x0000 0x0000000
128f2c.a24: *0000000076ea0000-0000000076ea0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
129f2c.a24: 0000000076ea1000-0000000076f9dfff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
130f2c.a24: 0000000076f9e000-0000000076fccfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
131f2c.a24: 0000000076fcd000-0000000076fd6fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
132f2c.a24: 0000000076fd7000-0000000076fd7fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
133f2c.a24: 0000000076fd8000-0000000076fdafff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
134f2c.a24: 0000000076fdb000-0000000077049fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
135f2c.a24: 000000007704a000-000000007efdffff 0x0001/0x0000 0x0000000
136f2c.a24: *000000007efe0000-000000007ffdffff 0x0000/0x0002 0x0020000
137f2c.a24: *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000
138f2c.a24: 000000007ffe1000-000000007ffeffff 0x0000/0x0002 0x0020000
139f2c.a24: 000000007fff0000-000000013ffbffff 0x0001/0x0000 0x0000000
140f2c.a24: *000000013ffc0000-000000013ffc0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
141f2c.a24: 000000013ffc1000-0000000140030fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
142f2c.a24: 0000000140031000-0000000140031fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
143f2c.a24: 0000000140032000-0000000140077fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
144f2c.a24: 0000000140078000-0000000140078fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
145f2c.a24: 0000000140079000-0000000140079fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
146f2c.a24: 000000014007a000-000000014007efff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
147f2c.a24: 000000014007f000-000000014007ffff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
148f2c.a24: 0000000140080000-0000000140080fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
149f2c.a24: 0000000140081000-0000000140084fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
150f2c.a24: 0000000140085000-00000001400ccfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
151f2c.a24: 00000001400cd000-000007feff1bffff 0x0001/0x0000 0x0000000
152f2c.a24: *000007feff1c0000-000007feff1c0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\apisetschema.dll
153f2c.a24: 000007feff1c1000-000007fffffaffff 0x0001/0x0000 0x0000000
154f2c.a24: *000007fffffb0000-000007fffffd2fff 0x0002/0x0002 0x0040000
155f2c.a24: 000007fffffd3000-000007fffffd9fff 0x0001/0x0000 0x0000000
156f2c.a24: *000007fffffda000-000007fffffdafff 0x0004/0x0004 0x0020000
157f2c.a24: 000007fffffdb000-000007fffffddfff 0x0001/0x0000 0x0000000
158f2c.a24: *000007fffffde000-000007fffffdffff 0x0004/0x0004 0x0020000
159f2c.a24: *000007fffffe0000-000007fffffeffff 0x0001/0x0002 0x0020000
160f2c.a24: apisetschema.dll: timestamp 0x5915fdad (rc=VINF_SUCCESS)
161f2c.a24: VirtualBox.exe: timestamp 0x596d0abb (rc=VINF_SUCCESS)
162f2c.a24: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
163f2c.a24: '\Device\HarddiskVolume2\Windows\System32\apisetschema.dll' has no imports
164f2c.a24: '\Device\HarddiskVolume2\Windows\System32\ntdll.dll' has no imports
165f2c.a24: supR3HardNtChildPurify: Done after 560 ms and 0 fixes (loop #0).
166fcc.1044: Log file opened: 5.1.24r117012 g_hStartupLog=0000000000000004 g_uNtVerCombined=0x611db100
167fcc.1044: supR3HardenedVmProcessInit: uNtDllAddr=0000000076ea0000 g_uNtVerCombined=0x611db100
168fcc.1044: ntdll.dll: timestamp 0x5915fdce (rc=VINF_SUCCESS)
169fcc.1044: New simple heap: #1 00000000002c0000 LB 0x400000 (for 1744896 allocation)
170f2c.a24: supR3HardNtEnableThreadCreation:
171fcc.1044: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
172fcc.1044: System32: \Device\HarddiskVolume2\Windows\System32
173fcc.1044: WinSxS: \Device\HarddiskVolume2\Windows\winsxs
174fcc.1044: KnownDllPath: C:\Windows\system32
175fcc.1044: supR3HardenedVmProcessInit: Opening vboxdrv stub...
176fcc.1044: supR3HardenedVmProcessInit: Restoring LdrInitializeThunk...
177fcc.1044: supR3HardenedVmProcessInit: Returning to LdrInitializeThunk...
178fcc.1044: Registered Dll notification callback with NTDLL.
179fcc.1044: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\kernel32.dll)
180fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\kernel32.dll
181fcc.1044: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\kernel32.dll (Input=kernel32.dll, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000000000:<flags> [calling]
182fcc.1044: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
183fcc.1044: supR3HardenedDllNotificationCallback: load 0000000076d80000 LB 0x0011f000 C:\Windows\system32\kernel32.dll [fFlags=0x0]
184fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
185fcc.1044: supR3HardenedDllNotificationCallback: load 000007fefcbc0000 LB 0x0006a000 C:\Windows\system32\KERNELBASE.dll [fFlags=0x0]
186fcc.1044: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\KernelBase.dll)
187fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\KernelBase.dll
188fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=0000000076d80000 'C:\Windows\system32\kernel32.dll'
189fcc.1044: supR3HardNtDisableThreadCreation: pvLdrInitThunk=0000000076eca360 pvNtTerminateThread=0000000076eec260
190f2c.a24: supR3HardNtChildWaitFor: Found expected request 1 (CloseEvents) after 27 ms.
191fcc.1044: \SystemRoot\System32\ntdll.dll:
192fcc.1044: CreationTime: 2017-07-25T16:33:24.504865500Z
193fcc.1044: LastWriteTime: 2017-05-12T18:24:12.913140800Z
194fcc.1044: ChangeTime: 2017-07-25T16:40:01.298146000Z
195fcc.1044: FileAttributes: 0x20
196fcc.1044: Size: 0x1a7100
197fcc.1044: NT Headers: 0xe0
198fcc.1044: Timestamp: 0x5915fdce
199fcc.1044: Machine: 0x8664 - amd64
200fcc.1044: Timestamp: 0x5915fdce
201fcc.1044: Image Version: 6.1
202fcc.1044: SizeOfImage: 0x1aa000 (1744896)
203fcc.1044: Resource Dir: 0x14e000 LB 0x5a028
204fcc.1044: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
205fcc.1044: [Raw version resource data: 0x14e0f0 LB 0x380, codepage 0x0 (reserved 0x0)]
206fcc.1044: ProductName: Microsoft® Windows® Operating System
207fcc.1044: ProductVersion: 6.1.7601.23807
208fcc.1044: FileVersion: 6.1.7601.23807 (win7sp1_ldr.170512-0600)
209fcc.1044: FileDescription: NT Layer DLL
210fcc.1044: \SystemRoot\System32\kernel32.dll:
211fcc.1044: CreationTime: 2017-07-25T16:33:21.469691900Z
212fcc.1044: LastWriteTime: 2017-05-12T18:22:33.598000000Z
213fcc.1044: ChangeTime: 2017-07-25T16:40:02.202947600Z
214fcc.1044: FileAttributes: 0x20
215fcc.1044: Size: 0x11c000
216fcc.1044: NT Headers: 0xe0
217fcc.1044: Timestamp: 0x5915fe13
218fcc.1044: Machine: 0x8664 - amd64
219fcc.1044: Timestamp: 0x5915fe13
220fcc.1044: Image Version: 6.1
221fcc.1044: SizeOfImage: 0x11f000 (1175552)
222fcc.1044: Resource Dir: 0x116000 LB 0x528
223fcc.1044: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
224fcc.1044: [Raw version resource data: 0x1160b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
225fcc.1044: ProductName: Microsoft® Windows® Operating System
226fcc.1044: ProductVersion: 6.1.7601.23807
227fcc.1044: FileVersion: 6.1.7601.23807 (win7sp1_ldr.170512-0600)
228fcc.1044: FileDescription: Windows NT BASE API Client DLL
229fcc.1044: \SystemRoot\System32\KernelBase.dll:
230fcc.1044: CreationTime: 2017-07-25T16:33:20.163617200Z
231fcc.1044: LastWriteTime: 2017-05-12T18:22:33.598000000Z
232fcc.1044: ChangeTime: 2017-07-25T16:40:02.202947600Z
233fcc.1044: FileAttributes: 0x20
234fcc.1044: Size: 0x66800
235fcc.1044: NT Headers: 0xe8
236fcc.1044: Timestamp: 0x5915fe14
237fcc.1044: Machine: 0x8664 - amd64
238fcc.1044: Timestamp: 0x5915fe14
239fcc.1044: Image Version: 6.1
240fcc.1044: SizeOfImage: 0x6a000 (434176)
241fcc.1044: Resource Dir: 0x68000 LB 0x530
242fcc.1044: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
243fcc.1044: [Raw version resource data: 0x680b0 LB 0x3ac, codepage 0x0 (reserved 0x0)]
244fcc.1044: ProductName: Microsoft® Windows® Operating System
245fcc.1044: ProductVersion: 6.1.7601.23807
246fcc.1044: FileVersion: 6.1.7601.23807 (win7sp1_ldr.170512-0600)
247fcc.1044: FileDescription: Windows NT BASE API Client DLL
248fcc.1044: \SystemRoot\System32\apisetschema.dll:
249fcc.1044: CreationTime: 2017-07-25T16:33:12.850198900Z
250fcc.1044: LastWriteTime: 2017-05-12T18:22:28.981000000Z
251fcc.1044: ChangeTime: 2017-07-25T16:40:01.266946000Z
252fcc.1044: FileAttributes: 0x20
253fcc.1044: Size: 0x1a00
254fcc.1044: NT Headers: 0xc0
255fcc.1044: Timestamp: 0x5915fdad
256fcc.1044: Machine: 0x8664 - amd64
257fcc.1044: Timestamp: 0x5915fdad
258fcc.1044: Image Version: 6.1
259fcc.1044: SizeOfImage: 0x50000 (327680)
260fcc.1044: Resource Dir: 0x30000 LB 0x3f8
261fcc.1044: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
262fcc.1044: [Raw version resource data: 0x30060 LB 0x398, codepage 0x0 (reserved 0x0)]
263fcc.1044: ProductName: Microsoft® Windows® Operating System
264fcc.1044: ProductVersion: 6.1.7601.23807
265fcc.1044: FileVersion: 6.1.7601.23807 (win7sp1_ldr.170512-0600)
266fcc.1044: FileDescription: ApiSet Schema DLL
267fcc.1044: supR3HardenedWinFindAdversaries: 0x80
268fcc.1044: \SystemRoot\System32\drivers\mbam.sys:
269fcc.1044: CreationTime: 2013-01-22T18:56:25.830720100Z
270fcc.1044: LastWriteTime: 2011-12-10T15:24:08.000000000Z
271fcc.1044: ChangeTime: 2013-01-22T18:56:25.830720100Z
272fcc.1044: FileAttributes: 0x20
273fcc.1044: Size: 0x5a70
274fcc.1044: NT Headers: 0xf0
275fcc.1044: Timestamp: 0x4eb140a4
276fcc.1044: Machine: 0x8664 - amd64
277fcc.1044: Timestamp: 0x4eb140a4
278fcc.1044: Image Version: 6.0
279fcc.1044: SizeOfImage: 0xa000 (40960)
280fcc.1044: Resource Dir: 0x8000 LB 0x3d8
281fcc.1044: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
282fcc.1044: [Raw version resource data: 0x8060 LB 0x378, codepage 0x0 (reserved 0x0)]
283fcc.1044: ProductName: Malwarebytes' Anti-Malware
284fcc.1044: ProductVersion: 1.60.0.0002
285fcc.1044: FileVersion: 1.60.0.0002 built by: WinDDK
286fcc.1044: FileDescription: Malwarebytes' Anti-Malware
287fcc.1044: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
288fcc.1044: Calling main()
289fcc.1044: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2
290fcc.1044: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
291fcc.1044: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
292fcc.1044: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe)
293fcc.1044: SUPR3HardenedMain: Respawn #2
294fcc.1044: supR3HardNtEnableThreadCreation:
295fcc.1044: Error -104 in supR3HardenedWinReSpawn! (enmWhat=5)
296fcc.1044: Error relaunching VirtualBox VM process: 5
297Command line: '60eaff78-4bdd-042d-2e72-669728efd737-suplib-3rdchild --comment lubuntu --startvm 416e702c-7f80-4dad-b0ba-9f485bdb75de --no-startvm-errormsgbox "--sup-hardening-log=C:\Users\Oleg\VirtualBox VMs\lubuntu\Logs\VBoxHardening.log"'
298fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'opengl32.dll'.
299fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
300fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'msvcp100.dll'.
301fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcr100.dll'.
302fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'.
303fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'qt5guivbox.dll'.
304fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'qt5widgetsvbox.dll'.
305fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'qt5printsupportvbox.dll'.
306fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'qt5openglvbox.dll'.
307fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'user32.dll'.
308fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'advapi32.dll'.
309fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'shell32.dll'.
310fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'ole32.dll'.
311fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'oleaut32.dll'.
312fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #15 'winmm.dll'.
313fcc.1044: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.dll)
314fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.dll
315fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
316fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume2\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
317fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'.
318fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
319fcc.1044: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\winmm.dll)
320fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\winmm.dll
321fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
322fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume2\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
323fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'ole32.dll'.
324fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'.
325fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'rpcrt4.dll'.
326fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'user32.dll'.
327fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'gdi32.dll'.
328fcc.1044: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\oleaut32.dll)
329fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\oleaut32.dll
330fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
331fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
332fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
333fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'gdi32.dll'.
334fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #25 'user32.dll'.
335fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'rpcrt4.dll'.
336fcc.1044: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\ole32.dll)
337fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\ole32.dll
338fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
339fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume2\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
340fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
341fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #21 'shlwapi.dll'.
342fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #23 'user32.dll'.
343fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #24 'gdi32.dll'.
344fcc.1044: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\shell32.dll)
345fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\shell32.dll
346fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
347fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
348fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
349fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'rpcrt4.dll'.
350fcc.1044: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\advapi32.dll)
351fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\advapi32.dll
352fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
353fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
354fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'gdi32.dll'.
355fcc.1044: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\user32.dll)
356fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\user32.dll
357fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5openglvbox.dll'...
358fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5openglvbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5openglvbox.dll' [rcNtRedir=0xc0150008]
359fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'qt5widgetsvbox.dll'.
360fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'qt5guivbox.dll'.
361fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5corevbox.dll'.
362fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcr100.dll'.
363fcc.1044: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll)
364fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll
365fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5printsupportvbox.dll'...
366fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5printsupportvbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5printsupportvbox.dll' [rcNtRedir=0xc0150008]
367fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
368fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
369fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5widgetsvbox.dll'.
370fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5guivbox.dll'.
371fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'.
372fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'winspool.drv'.
373fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'comdlg32.dll'.
374fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcr100.dll'.
375fcc.1044: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll)
376fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll
377fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
378fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
379fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
380fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
381fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5guivbox.dll'.
382fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5corevbox.dll'.
383fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'shell32.dll'.
384fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
385fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
386fcc.1044: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll)
387fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll
388fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
389fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
390fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'ole32.dll'.
391fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'opengl32.dll'.
392fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
393fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
394fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'.
395fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
396fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
397fcc.1044: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll)
398fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
399fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
400fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
401fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
402fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'shell32.dll'.
403fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ole32.dll'.
404fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'advapi32.dll'.
405fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ws2_32.dll'.
406fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'mpr.dll'.
407fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcp100.dll'.
408fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'msvcr100.dll'.
409fcc.1044: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll)
410fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
411fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
412fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
413fcc.1044: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll)
414fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll
415fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
416fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
417fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
418fcc.1044: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll)
419fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll
420fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
421fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
422fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
423fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
424fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ws2_32.dll'.
425fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'rpcrt4.dll'.
426fcc.1044: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll)
427fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll
428fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
429fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume2\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
430fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
431fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'advapi32.dll'.
432fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'gdi32.dll'.
433fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'glu32.dll'.
434fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'ddraw.dll'.
435fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'user32.dll'.
436fcc.1044: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\opengl32.dll)
437fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\opengl32.dll
438fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
439fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
440fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
441fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ddraw.dll'...
442fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'ddraw.dll' -> '\Device\HarddiskVolume2\Windows\System32\ddraw.dll' [rcNtRedir=0xc0150008]
443fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
444fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
445fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'dciman32.dll'.
446fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'gdi32.dll'.
447fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'setupapi.dll'.
448fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'dwmapi.dll'.
449fcc.1044: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\ddraw.dll)
450fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\ddraw.dll
451fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'glu32.dll'...
452fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'glu32.dll' -> '\Device\HarddiskVolume2\Windows\System32\glu32.dll' [rcNtRedir=0xc0150008]
453fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
454fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'opengl32.dll'.
455fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
456fcc.1044: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\glu32.dll)
457fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\glu32.dll
458fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
459fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
460fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
461fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'lpk.dll'.
462fcc.1044: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\gdi32.dll)
463fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\gdi32.dll
464fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
465fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
466fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
467fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
468fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
469fcc.1044: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\msvcrt.dll)
470fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\msvcrt.dll
471fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
472fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
473fcc.1044: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll)
474fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll
475fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
476fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
477fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
478fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #16 'rpcrt4.dll'.
479fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #17 'nsi.dll'.
480fcc.1044: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\ws2_32.dll)
481fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\ws2_32.dll
482fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
483fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
484fcc.1044: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
485fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
486fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
487fcc.1044: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
488fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
489fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
490fcc.1044: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
491fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
492fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
493fcc.1044: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
494fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
495fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
496fcc.1044: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
497fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mpr.dll'...
498fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'mpr.dll' -> '\Device\HarddiskVolume2\Windows\System32\mpr.dll' [rcNtRedir=0xc0150008]
499fcc.1044: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\mpr.dll)
500fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\mpr.dll
501fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
502fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
503fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\ws2_32.dll [lacks WinVerifyTrust]
504fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
505fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
506fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
507fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
508fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
509fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\ole32.dll [lacks WinVerifyTrust]
510fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
511fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume2\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
512fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\shell32.dll [lacks WinVerifyTrust]
513fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
514fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
515fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
516fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
517fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
518fcc.1044: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
519fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
520fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
521fcc.1044: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
522fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
523fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
524fcc.1044: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
525fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
526fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
527fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
528fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
529fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
530fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
531fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
532fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume2\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
533fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
534fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
535fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
536fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\ole32.dll [lacks WinVerifyTrust]
537fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
538fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
539fcc.1044: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
540fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
541fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
542fcc.1044: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
543fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
544fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume2\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
545fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\shell32.dll [lacks WinVerifyTrust]
546fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
547fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
548fcc.1044: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
549fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
550fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
551fcc.1044: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
552fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
553fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
554fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
555fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
556fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
557fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
558fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
559fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
560fcc.1044: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
561fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'comdlg32.dll'...
562fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'comdlg32.dll' -> '\Device\HarddiskVolume2\Windows\System32\comdlg32.dll' [rcNtRedir=0xc0150008]
563fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
564fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'shlwapi.dll'.
565fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
566fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'gdi32.dll'.
567fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'comctl32.dll'.
568fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'shell32.dll'.
569fcc.1044: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\comdlg32.dll)
570fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\comdlg32.dll
571fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winspool.drv'...
572fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'winspool.drv' -> '\Device\HarddiskVolume2\Windows\System32\winspool.drv' [rcNtRedir=0xc0150008]
573fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
574fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'gdi32.dll'.
575fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'user32.dll'.
576fcc.1044: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\winspool.drv)
577fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\winspool.drv
578fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
579fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
580fcc.1044: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
581fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
582fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
583fcc.1044: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
584fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
585fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
586fcc.1044: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
587fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
588fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
589fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
590fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
591fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
592fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
593fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
594fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
595fcc.1044: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
596fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
597fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
598fcc.1044: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
599fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
600fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
601fcc.1044: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
602fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
603fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
604fcc.1044: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
605fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
606fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
607fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
608fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
609fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
610fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
611fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
612fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
613fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
614fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
615fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
616fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
617fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
618fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
619fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
620fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shlwapi.dll'...
621fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'shlwapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\shlwapi.dll' [rcNtRedir=0xc0150008]
622fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'gdi32.dll'.
623fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
624fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'msvcrt.dll'.
625fcc.1044: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\shlwapi.dll)
626fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\shlwapi.dll
627fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
628fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
629fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
630fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
631fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
632fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
633fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
634fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
635fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
636fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
637fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
638fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
639fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
640fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
641fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
642fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
643fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
644fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
645fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
646fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
647fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
648fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
649fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
650fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
651fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
652fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
653fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
654fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
655fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
656fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\ole32.dll [lacks WinVerifyTrust]
657fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
658fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
659fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
660fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
661fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
662fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
663fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
664fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
665fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
666fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
667fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
668fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
669fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
670fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
671fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
672fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
673fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
674fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
675fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
676fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
677fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
678fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
679fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
680fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
681fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
682fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume2\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
683fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\shell32.dll [lacks WinVerifyTrust]
684fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'comctl32.dll'...
685fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'comctl32.dll' -> '\Device\HarddiskVolume2\Windows\System32\comctl32.dll' [rcNtRedir=0x0]
686fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'advapi32.dll'.
687fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
688fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
689fcc.1044: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\comctl32.dll)
690fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\comctl32.dll
691fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
692fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
693fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
694fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
695fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
696fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
697fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shlwapi.dll'...
698fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'shlwapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\shlwapi.dll' [rcNtRedir=0xc0150008]
699fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\shlwapi.dll [lacks WinVerifyTrust]
700fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
701fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
702fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
703fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'nsi.dll'...
704fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'nsi.dll' -> '\Device\HarddiskVolume2\Windows\System32\nsi.dll' [rcNtRedir=0xc0150008]
705fcc.1044: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\nsi.dll)
706fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\nsi.dll
707fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
708fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
709fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
710fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
711fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
712fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
713fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'lpk.dll'...
714fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'lpk.dll' -> '\Device\HarddiskVolume2\Windows\System32\lpk.dll' [rcNtRedir=0xc0150008]
715fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'gdi32.dll'.
716fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'user32.dll'.
717fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'usp10.dll'.
718fcc.1044: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\lpk.dll)
719fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\lpk.dll
720fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
721fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
722fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
723fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
724fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
725fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
726fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
727fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume2\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
728fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
729fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
730fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
731fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
732fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dwmapi.dll'...
733fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'dwmapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\dwmapi.dll' [rcNtRedir=0xc0150008]
734fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
735fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
736fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
737fcc.1044: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\dwmapi.dll)
738fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\dwmapi.dll
739fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'setupapi.dll'...
740fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'setupapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\setupapi.dll' [rcNtRedir=0xc0150008]
741fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'cfgmgr32.dll'.
742fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'msvcrt.dll'.
743fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'gdi32.dll'.
744fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'rpcrt4.dll'.
745fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'user32.dll'.
746fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'oleaut32.dll'.
747fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'devobj.dll'.
748fcc.1044: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\setupapi.dll)
749fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\setupapi.dll
750fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
751fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
752fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
753fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dciman32.dll'...
754fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'dciman32.dll' -> '\Device\HarddiskVolume2\Windows\System32\dciman32.dll' [rcNtRedir=0xc0150008]
755fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
756fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'gdi32.dll'.
757fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
758fcc.1044: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\dciman32.dll)
759fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\dciman32.dll
760fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
761fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
762fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
763fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
764fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
765fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
766fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
767fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
768fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
769fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
770fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
771fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
772fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
773fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
774fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
775fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'devobj.dll'...
776fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'devobj.dll' -> '\Device\HarddiskVolume2\Windows\System32\devobj.dll' [rcNtRedir=0xc0150008]
777fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
778fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'cfgmgr32.dll'.
779fcc.1044: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\devobj.dll)
780fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\devobj.dll
781fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
782fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume2\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
783fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
784fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
785fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
786fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
787fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
788fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
789fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
790fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
791fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
792fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
793fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
794fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
795fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
796fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'cfgmgr32.dll'...
797fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'cfgmgr32.dll' -> '\Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll' [rcNtRedir=0xc0150008]
798fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
799fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'rpcrt4.dll'.
800fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'advapi32.dll'.
801fcc.1044: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll)
802fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll
803fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
804fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
805fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
806fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
807fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
808fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
809fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
810fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
811fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
812fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'usp10.dll'...
813fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'usp10.dll' -> '\Device\HarddiskVolume2\Windows\System32\usp10.dll' [rcNtRedir=0xc0150008]
814fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
815fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
816fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'gdi32.dll'.
817fcc.1044: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\usp10.dll)
818fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\usp10.dll
819fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
820fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
821fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
822fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
823fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
824fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
825fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
826fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
827fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
828fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
829fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
830fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
831fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
832fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
833fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
834fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
835fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
836fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
837fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
838fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
839fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
840fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
841fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
842fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
843fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
844fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
845fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
846fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
847fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
848fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
849fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
850fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
851fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
852fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'cfgmgr32.dll'...
853fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'cfgmgr32.dll' -> '\Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll' [rcNtRedir=0xc0150008]
854fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll [lacks WinVerifyTrust]
855fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
856fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
857fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
858fcc.1044: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VirtualBox.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000001b5121:<flags> [calling]
859fcc.1044: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.dll [lacks WinVerifyTrust]
860fcc.1044: supR3HardenedDllNotificationCallback: load 000007feebc10000 LB 0x008eb000 C:\Program Files\Oracle\VirtualBox\VirtualBox.dll [fFlags=0x0]
861fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.dll [lacks WinVerifyTrust]
862fcc.1044: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
863fcc.1044: supR3HardenedDllNotificationCallback: load 000007fefa0e0000 LB 0x0011d000 C:\Windows\system32\OPENGL32.dll [fFlags=0x0]
864fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
865fcc.1044: supR3HardenedDllNotificationCallback: load 000007fefeaa0000 LB 0x0009f000 C:\Windows\system32\msvcrt.dll [fFlags=0x0]
866fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
867fcc.1044: supR3HardenedDllNotificationCallback: load 000007fefec90000 LB 0x000db000 C:\Windows\system32\ADVAPI32.dll [fFlags=0x0]
868fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
869fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'msvcrt.dll'.
870fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'rpcrt4.dll'.
871fcc.1044: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\sechost.dll)
872fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\sechost.dll
873fcc.1044: supR3HardenedDllNotificationCallback: load 000007fefee50000 LB 0x0001f000 C:\Windows\SYSTEM32\sechost.dll [fFlags=0x0]
874fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\sechost.dll [lacks WinVerifyTrust]
875fcc.1044: supR3HardenedDllNotificationCallback: load 000007fefcf50000 LB 0x0012d000 C:\Windows\system32\RPCRT4.dll [fFlags=0x0]
876fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
877fcc.1044: supR3HardenedDllNotificationCallback: load 000007fefd650000 LB 0x00067000 C:\Windows\system32\GDI32.dll [fFlags=0x0]
878fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
879fcc.1044: supR3HardenedDllNotificationCallback: load 0000000076c80000 LB 0x000fa000 C:\Windows\system32\USER32.dll [fFlags=0x0]
880fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
881fcc.1044: supR3HardenedDllNotificationCallback: load 000007fefed90000 LB 0x0000e000 C:\Windows\system32\LPK.dll [fFlags=0x0]
882fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\lpk.dll [lacks WinVerifyTrust]
883fcc.1044: supR3HardenedDllNotificationCallback: load 000007fefeb40000 LB 0x000cb000 C:\Windows\system32\USP10.dll [fFlags=0x0]
884fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\usp10.dll [lacks WinVerifyTrust]
885fcc.1044: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\glu32.dll [lacks WinVerifyTrust]
886fcc.1044: supR3HardenedDllNotificationCallback: load 000007fefa220000 LB 0x0002d000 C:\Windows\system32\GLU32.dll [fFlags=0x0]
887fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\glu32.dll [lacks WinVerifyTrust]
888fcc.1044: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\ddraw.dll [lacks WinVerifyTrust]
889fcc.1044: supR3HardenedDllNotificationCallback: load 000007fef2970000 LB 0x000f1000 C:\Windows\system32\DDRAW.dll [fFlags=0x0]
890fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\ddraw.dll [lacks WinVerifyTrust]
891fcc.1044: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\dciman32.dll [lacks WinVerifyTrust]
892fcc.1044: supR3HardenedDllNotificationCallback: load 000007fefa210000 LB 0x00008000 C:\Windows\system32\DCIMAN32.dll [fFlags=0x0]
893fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\dciman32.dll [lacks WinVerifyTrust]
894fcc.1044: supR3HardenedDllNotificationCallback: load 000007fefefd0000 LB 0x001d7000 C:\Windows\system32\SETUPAPI.dll [fFlags=0x0]
895fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\setupapi.dll [lacks WinVerifyTrust]
896fcc.1044: supR3HardenedDllNotificationCallback: load 000007fefcf10000 LB 0x00036000 C:\Windows\system32\CFGMGR32.dll [fFlags=0x0]
897fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll [lacks WinVerifyTrust]
898fcc.1044: supR3HardenedDllNotificationCallback: load 000007fefe720000 LB 0x000da000 C:\Windows\system32\OLEAUT32.dll [fFlags=0x0]
899fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
900fcc.1044: supR3HardenedDllNotificationCallback: load 000007fefd120000 LB 0x001fc000 C:\Windows\system32\ole32.dll [fFlags=0x0]
901fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\ole32.dll [lacks WinVerifyTrust]
902fcc.1044: supR3HardenedDllNotificationCallback: load 000007fefcdf0000 LB 0x0001a000 C:\Windows\system32\DEVOBJ.dll [fFlags=0x0]
903fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\devobj.dll [lacks WinVerifyTrust]
904fcc.1044: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\dwmapi.dll [lacks WinVerifyTrust]
905fcc.1044: supR3HardenedDllNotificationCallback: load 000007fefb040000 LB 0x00018000 C:\Windows\system32\dwmapi.dll [fFlags=0x0]
906fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\dwmapi.dll [lacks WinVerifyTrust]
907fcc.1044: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
908fcc.1044: supR3HardenedDllNotificationCallback: load 000007feec500000 LB 0x0053f000 C:\Program Files\Oracle\VirtualBox\VBoxRT.dll [fFlags=0x0]
909fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
910fcc.1044: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
911fcc.1044: supR3HardenedDllNotificationCallback: load 0000000074620000 LB 0x000d2000 C:\Program Files\Oracle\VirtualBox\MSVCR100.dll [fFlags=0x0]
912fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
913fcc.1044: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
914fcc.1044: supR3HardenedDllNotificationCallback: load 0000000071a20000 LB 0x00098000 C:\Program Files\Oracle\VirtualBox\MSVCP100.dll [fFlags=0x0]
915fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
916fcc.1044: supR3HardenedDllNotificationCallback: load 000007fefee70000 LB 0x0004d000 C:\Windows\system32\WS2_32.dll [fFlags=0x0]
917fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\ws2_32.dll [lacks WinVerifyTrust]
918fcc.1044: supR3HardenedDllNotificationCallback: load 000007fefeec0000 LB 0x00008000 C:\Windows\system32\NSI.dll [fFlags=0x0]
919fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\nsi.dll [lacks WinVerifyTrust]
920fcc.1044: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
921fcc.1044: supR3HardenedDllNotificationCallback: load 0000000071060000 LB 0x00565000 C:\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [fFlags=0x0]
922fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
923fcc.1044: supR3HardenedDllNotificationCallback: load 000007fefd6c0000 LB 0x00d8b000 C:\Windows\system32\SHELL32.dll [fFlags=0x0]
924fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\shell32.dll [lacks WinVerifyTrust]
925fcc.1044: supR3HardenedDllNotificationCallback: load 000007fefec10000 LB 0x00071000 C:\Windows\system32\SHLWAPI.dll [fFlags=0x0]
926fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\shlwapi.dll [lacks WinVerifyTrust]
927fcc.1044: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\mpr.dll [lacks WinVerifyTrust]
928fcc.1044: supR3HardenedDllNotificationCallback: load 000007fef7a00000 LB 0x00018000 C:\Windows\system32\MPR.dll [fFlags=0x0]
929fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\mpr.dll [lacks WinVerifyTrust]
930fcc.1044: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
931fcc.1044: supR3HardenedDllNotificationCallback: load 000007feeb610000 LB 0x005f7000 C:\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [fFlags=0x0]
932fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
933fcc.1044: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
934fcc.1044: supR3HardenedDllNotificationCallback: load 0000000070af0000 LB 0x00561000 C:\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [fFlags=0x0]
935fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
936fcc.1044: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll [lacks WinVerifyTrust]
937fcc.1044: supR3HardenedDllNotificationCallback: load 000007fefa080000 LB 0x00051000 C:\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll [fFlags=0x0]
938fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll [lacks WinVerifyTrust]
939fcc.1044: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\winspool.drv [lacks WinVerifyTrust]
940fcc.1044: supR3HardenedDllNotificationCallback: load 000007fef7a20000 LB 0x00071000 C:\Windows\system32\WINSPOOL.DRV [fFlags=0x0]
941fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\winspool.drv [lacks WinVerifyTrust]
942fcc.1044: supR3HardenedDllNotificationCallback: load 000007fefeed0000 LB 0x00097000 C:\Windows\system32\COMDLG32.dll [fFlags=0x0]
943fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\comdlg32.dll [lacks WinVerifyTrust]
944fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'advapi32.dll'.
945fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
946fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
947fcc.1044: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.18837_none_a4d981ff711297b6\comctl32.dll)
948fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.18837_none_a4d981ff711297b6\comctl32.dll
949fcc.1044: supR3HardenedDllNotificationCallback: load 000007fef5a90000 LB 0x000a0000 C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.18837_none_a4d981ff711297b6\COMCTL32.dll [fFlags=0x0]
950fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.18837_none_a4d981ff711297b6\comctl32.dll [lacks WinVerifyTrust]
951fcc.1044: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll [lacks WinVerifyTrust]
952fcc.1044: supR3HardenedDllNotificationCallback: load 00000000745c0000 LB 0x00054000 C:\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll [fFlags=0x0]
953fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll [lacks WinVerifyTrust]
954fcc.1044: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\winmm.dll [lacks WinVerifyTrust]
955fcc.1044: supR3HardenedDllNotificationCallback: load 000007fefb120000 LB 0x0003b000 C:\Windows\system32\WINMM.dll [fFlags=0x0]
956fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\winmm.dll [lacks WinVerifyTrust]
957fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'user32.dll'.
958fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'gdi32.dll'.
959fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msctf.dll'.
960fcc.1044: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\imm32.dll)
961fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\imm32.dll
962fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msctf.dll'...
963fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'msctf.dll' -> '\Device\HarddiskVolume2\Windows\System32\msctf.dll' [rcNtRedir=0xc0150008]
964fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
965fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'user32.dll'.
966fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'gdi32.dll'.
967fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'imm32.dll'.
968fcc.1044: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\msctf.dll)
969fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\msctf.dll
970fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
971fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
972fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
973fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
974fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
975fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
976fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
977fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
978fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
979fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
980fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
981fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
982fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
983fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
984fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
985fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
986fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
987fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
988fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
989fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
990fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
991fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'...
992fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume2\Windows\System32\imm32.dll' [rcNtRedir=0xc0150008]
993fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\imm32.dll [lacks WinVerifyTrust]
994fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
995fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
996fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
997fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
998fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
999fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
1000fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1001fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1002fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1003fcc.1044: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\IMM32.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000001b3f61:<flags> [calling]
1004fcc.1044: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\imm32.dll [lacks WinVerifyTrust]
1005fcc.1044: supR3HardenedDllNotificationCallback: load 000007fefeda0000 LB 0x0002e000 C:\Windows\system32\IMM32.DLL [fFlags=0x0]
1006fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\imm32.dll [lacks WinVerifyTrust]
1007fcc.1044: supR3HardenedDllNotificationCallback: load 000007fefe800000 LB 0x00109000 C:\Windows\system32\MSCTF.dll [fFlags=0x0]
1008fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msctf.dll [lacks WinVerifyTrust]
1009fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefeda0000 'C:\Windows\system32\IMM32.DLL'
1010fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
1011fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefd650000 'C:\Windows\system32\gdi32.dll'
1012fcc.1044: supR3HardenedIsApiSetDll: '<NULL>' -> true
1013fcc.1044: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-Win-Core-LocalRegistry-L1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=00000000001b4261:<flags> [calling]
1014fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=0000000076d80000 'API-MS-Win-Core-LocalRegistry-L1-1-0.dll'
1015fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1016fcc.1044: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000001b2861:<flags> [calling]
1017fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feec500000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1018fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1019fcc.1044: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000001b2861:<flags> [calling]
1020fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feec500000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1021fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1022fcc.1044: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000001b2861:<flags> [calling]
1023fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feec500000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1024fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1025fcc.1044: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000001b2861:<flags> [calling]
1026fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feec500000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1027fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1028fcc.1044: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000001b2861:<flags> [calling]
1029fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feec500000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1030fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1031fcc.1044: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000001b2861:<flags> [calling]
1032fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feec500000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1033fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1034fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feec500000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1035fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1036fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feec500000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1037fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1038fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feec500000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1039fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1040fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feec500000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1041fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1042fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feec500000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1043fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1044fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feec500000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1045fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1046fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feec500000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1047fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1048fcc.1044: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000001b2861:<flags> [calling]
1049fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feec500000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1050fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1051fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feec500000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1052fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1053fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feec500000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1054fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1055fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feec500000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1056fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1057fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feec500000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1058fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1059fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feec500000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1060fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1061fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feec500000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1062fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1063fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feec500000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1064fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1065fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feec500000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1066fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1067fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feec500000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1068fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1069fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feec500000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1070fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1071fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feec500000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1072fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1073fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feec500000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1074fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1075fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feec500000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1076fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1077fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feec500000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1078fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1079fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feec500000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1080fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1081fcc.1044: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000001b2861:<flags> [calling]
1082fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feec500000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1083fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1084fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feec500000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1085fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
1086fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feec500000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1087fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\imm32.dll [lacks WinVerifyTrust]
1088fcc.1044: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\imm32.dll (Input=imm32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000001b46f1:<flags> [calling]
1089fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefeda0000 'C:\Windows\system32\imm32.dll'
1090fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
1091fcc.1044: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\ADVAPI32.DLL (Input=ADVAPI32.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000001b45d1:<flags> [calling]
1092fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefec90000 'C:\Windows\system32\ADVAPI32.DLL'
1093fcc.1044: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\cryptbase.dll)
1094fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\cryptbase.dll
1095fcc.1044: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\cryptbase.dll (Input=cryptbase.dll, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000000000:<flags> [calling]
1096fcc.1044: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptbase.dll [lacks WinVerifyTrust]
1097fcc.1044: supR3HardenedDllNotificationCallback: load 000007fefca30000 LB 0x0000f000 C:\Windows\system32\cryptbase.dll [fFlags=0x0]
1098fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptbase.dll [lacks WinVerifyTrust]
1099fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefca30000 'C:\Windows\system32\cryptbase.dll'
1100fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feebc10000 'C:\Program Files\Oracle\VirtualBox\VirtualBox.dll'
1101fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\ole32.dll [lacks WinVerifyTrust]
1102fcc.1044: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\ole32.dll (Input=ole32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000001b1a81:<flags> [calling]
1103fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefd120000 'C:\Windows\system32\ole32.dll'
1104fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
1105fcc.1044: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\ADVAPI32.dll (Input=ADVAPI32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000001b1c81:<flags> [calling]
1106fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefec90000 'C:\Windows\system32\ADVAPI32.dll'
1107fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
1108fcc.1044: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\kernel32.dll (Input=kernel32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000001b0a91:<flags> [calling]
1109fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=0000000076d80000 'C:\Windows\system32\kernel32.dll'
1110fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1111fcc.1044: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\profapi.dll)
1112fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\profapi.dll
1113fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1114fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1115fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1116fcc.1044: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\profapi.dll (Input=profapi.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000001b0161:<flags> [calling]
1117fcc.1044: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\profapi.dll [lacks WinVerifyTrust]
1118fcc.1044: supR3HardenedDllNotificationCallback: load 000007fefcb90000 LB 0x0000f000 C:\Windows\system32\profapi.dll [fFlags=0x0]
1119fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\profapi.dll [lacks WinVerifyTrust]
1120fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefcb90000 'C:\Windows\system32\profapi.dll'
1121fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
1122fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'ole32.dll'.
1123fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
1124fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'imm32.dll'.
1125fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'winmm.dll'.
1126fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'oleaut32.dll'.
1127fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'shell32.dll'.
1128fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'advapi32.dll'.
1129fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'qt5guivbox.dll'.
1130fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'qt5corevbox.dll'.
1131fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'msvcr100.dll'.
1132fcc.1044: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\platforms\qwindows.dll)
1133fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\platforms\qwindows.dll
1134fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
1135fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
1136fcc.1044: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
1137fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
1138fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
1139fcc.1044: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
1140fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
1141fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
1142fcc.1044: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
1143fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
1144fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
1145fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
1146fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
1147fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume2\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
1148fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\shell32.dll [lacks WinVerifyTrust]
1149fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
1150fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume2\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
1151fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
1152fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
1153fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume2\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
1154fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\winmm.dll [lacks WinVerifyTrust]
1155fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'...
1156fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume2\Windows\System32\imm32.dll' [rcNtRedir=0xc0150008]
1157fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\imm32.dll [lacks WinVerifyTrust]
1158fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
1159fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
1160fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
1161fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
1162fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
1163fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\ole32.dll [lacks WinVerifyTrust]
1164fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
1165fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
1166fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
1167fcc.1044: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000001b2451:<flags> [calling]
1168fcc.1044: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\platforms\qwindows.dll [lacks WinVerifyTrust]
1169fcc.1044: supR3HardenedDllNotificationCallback: load 000007fef2750000 LB 0x0012e000 C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll [fFlags=0x0]
1170fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\platforms\qwindows.dll [lacks WinVerifyTrust]
1171fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef2750000 'C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll'
1172fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptbase.dll [lacks WinVerifyTrust]
1173fcc.1044: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\CRYPTBASE.dll (Input=CRYPTBASE.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000001b2381:<flags> [calling]
1174fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefca30000 'C:\Windows\system32\CRYPTBASE.dll'
1175fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1176fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'user32.dll'.
1177fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'gdi32.dll'.
1178fcc.1044: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\uxtheme.dll)
1179fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\uxtheme.dll
1180fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
1181fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
1182fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
1183fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
1184fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
1185fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
1186fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1187fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1188fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1189fcc.1044: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000001b1e51:<flags> [calling]
1190fcc.1044: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\uxtheme.dll [lacks WinVerifyTrust]
1191fcc.1044: supR3HardenedDllNotificationCallback: load 000007fefb0c0000 LB 0x00056000 C:\Windows\system32\uxtheme.dll [fFlags=0x0]
1192fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\uxtheme.dll [lacks WinVerifyTrust]
1193fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefb0c0000 'C:\Windows\system32\uxtheme.dll'
1194fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\uxtheme.dll [lacks WinVerifyTrust]
1195fcc.1044: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000001b1891:<flags> [calling]
1196fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefb0c0000 'C:\Windows\system32\uxtheme.dll'
1197fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
1198fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=0000000076c80000 'C:\Windows\system32\user32.dll'
1199fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\shell32.dll [lacks WinVerifyTrust]
1200fcc.1044: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000001b2691:<flags> [calling]
1201fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefd6c0000 'C:\Windows\system32\shell32.dll'
1202fcc.1044: supR3HardenedMonitor_LdrLoadDll: error opening 'C:\Windows\system32\wintab32.dll': 127 (NtPath=\??\C:\Windows\system32\wintab32.dll; Input=C:\Windows\system32\wintab32.dll; rcNtGetDll=0x0
1203fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000034 'C:\Windows\system32\wintab32.dll'
1204fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\dwmapi.dll [lacks WinVerifyTrust]
1205fcc.1044: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\dwmapi.dll (Input=dwmapi.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000001b1d31:<flags> [calling]
1206fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefb040000 'C:\Windows\system32\dwmapi.dll'
1207fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\winmm.dll [lacks WinVerifyTrust]
1208fcc.1044: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\winmm.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000001b2ab1:<flags> [calling]
1209fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefb120000 'C:\Windows\system32\winmm.dll'
1210fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\winmm.dll [lacks WinVerifyTrust]
1211fcc.1044: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\winmm.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000001b2ab1:<flags> [calling]
1212fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefb120000 'C:\Windows\system32\winmm.dll'
1213fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\shell32.dll [lacks WinVerifyTrust]
1214fcc.1044: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000001b2d91:<flags> [calling]
1215fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefd6c0000 'C:\Windows\system32\shell32.dll'
1216fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\uxtheme.dll [lacks WinVerifyTrust]
1217fcc.1044: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000001b2d61:<flags> [calling]
1218fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefb0c0000 'C:\Windows\system32\uxtheme.dll'
1219fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
1220fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefd650000 'C:\Windows\system32\gdi32.dll'
1221fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
1222fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefcf50000 'C:\Windows\system32\rpcrt4.dll'
1223fcc.1044: supR3HardenedIsApiSetDll: '<NULL>' -> true
1224fcc.1044: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-Win-Security-LSALookup-L1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=00000000001b1901:<flags> [calling]
1225fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefee50000 'API-MS-Win-Security-LSALookup-L1-1-0.dll'
1226fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
1227fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefec90000 'C:\Windows\system32\ADVAPI32.dll'
1228fcc.1044: supR3HardenedIsApiSetDll: '<NULL>' -> true
1229fcc.1044: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-Win-Security-LSALookup-L1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=00000000001b21c1:<flags> [calling]
1230fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefee50000 'API-MS-Win-Security-LSALookup-L1-1-0.dll'
1231fcc.1044: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\cryptsp.dll)
1232fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\cryptsp.dll
1233fcc.1044: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\CRYPTSP.dll (Input=CRYPTSP.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000001b2401:<flags> [calling]
1234fcc.1044: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptsp.dll [lacks WinVerifyTrust]
1235fcc.1044: supR3HardenedDllNotificationCallback: load 000007fefc5b0000 LB 0x00018000 C:\Windows\system32\CRYPTSP.dll [fFlags=0x0]
1236fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptsp.dll [lacks WinVerifyTrust]
1237fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefc5b0000 'C:\Windows\system32\CRYPTSP.dll'
1238fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1239fcc.1044: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\rsaenh.dll)
1240fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\rsaenh.dll
1241fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1242fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1243fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1244fcc.1044: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000001b2311:<flags> [calling]
1245fcc.1044: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
1246fcc.1044: supR3HardenedDllNotificationCallback: load 000007fefc110000 LB 0x00047000 C:\Windows\system32\rsaenh.dll [fFlags=0x0]
1247fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
1248fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefc110000 'C:\Windows\system32\rsaenh.dll'
1249fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
1250fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefec90000 'C:\Windows\system32\ADVAPI32.dll'
1251fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptbase.dll [lacks WinVerifyTrust]
1252fcc.1044: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\CRYPTBASE.dll (Input=CRYPTBASE.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000001b1f21:<flags> [calling]
1253fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefca30000 'C:\Windows\system32\CRYPTBASE.dll'
1254fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'rpcrt4.dll'.
1255fcc.1044: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\RpcRtRemote.dll)
1256fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\RpcRtRemote.dll
1257fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
1258fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
1259fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
1260fcc.1044: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\RpcRtRemote.dll (Input=RpcRtRemote.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000001b1fc1:<flags> [calling]
1261fcc.1044: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\RpcRtRemote.dll [lacks WinVerifyTrust]
1262fcc.1044: supR3HardenedDllNotificationCallback: load 000007fefcae0000 LB 0x00014000 C:\Windows\system32\RpcRtRemote.dll [fFlags=0x0]
1263fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\RpcRtRemote.dll [lacks WinVerifyTrust]
1264fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefcae0000 'C:\Windows\system32\RpcRtRemote.dll'
1265fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\winmm.dll [lacks WinVerifyTrust]
1266fcc.d9c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\WINMM.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=000000000353f4d1:<flags> [calling]
1267fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefb120000 'C:\Windows\system32\WINMM.dll'
1268fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\ole32.dll [lacks WinVerifyTrust]
1269fcc.d9c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\ole32.dll (Input=ole32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=000000000353f831:<flags> [calling]
1270fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefd120000 'C:\Windows\system32\ole32.dll'
1271fcc.d9c: supR3HardenedIsApiSetDll: '<NULL>' -> true
1272fcc.d9c: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-WIN-Service-Management-L1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=000000000353f411:<flags> [calling]
1273fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefee50000 'API-MS-WIN-Service-Management-L1-1-0.dll'
1274fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\ole32.dll [lacks WinVerifyTrust]
1275fcc.1044: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\ole32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000001b1c21:<flags> [calling]
1276fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefd120000 'C:\Windows\system32\ole32.dll'
1277fcc.d9c: supR3HardenedIsApiSetDll: '<NULL>' -> true
1278fcc.d9c: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-WIN-Service-winsvc-L1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=000000000353f411:<flags> [calling]
1279fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefee50000 'API-MS-WIN-Service-winsvc-L1-1-0.dll'
1280fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
1281fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefcf50000 'C:\Windows\system32\RPCRT4.dll'
1282fcc.d9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1283fcc.d9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'user32.dll'.
1284fcc.d9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'rpcrt4.dll'.
1285fcc.d9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'propsys.dll'.
1286fcc.d9c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\MMDevAPI.dll)
1287fcc.d9c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\MMDevAPI.dll
1288fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'propsys.dll'...
1289fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'propsys.dll' -> '\Device\HarddiskVolume2\Windows\System32\propsys.dll' [rcNtRedir=0xc0150008]
1290fcc.d9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1291fcc.d9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ole32.dll'.
1292fcc.d9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'oleaut32.dll'.
1293fcc.d9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'user32.dll'.
1294fcc.d9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'rpcrt4.dll'.
1295fcc.d9c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\propsys.dll)
1296fcc.d9c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\propsys.dll
1297fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
1298fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
1299fcc.d9c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
1300fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
1301fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
1302fcc.d9c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
1303fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1304fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1305fcc.d9c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1306fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
1307fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
1308fcc.d9c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
1309fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
1310fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
1311fcc.d9c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
1312fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
1313fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume2\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
1314fcc.d9c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
1315fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
1316fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
1317fcc.d9c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\ole32.dll [lacks WinVerifyTrust]
1318fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1319fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1320fcc.d9c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1321fcc.d9c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\MMDevAPI.DLL (Input=MMDevAPI.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=000000000353f471:<flags> [calling]
1322fcc.d9c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
1323fcc.d9c: supR3HardenedDllNotificationCallback: load 000007fefb9a0000 LB 0x0004b000 C:\Windows\system32\MMDevAPI.DLL [fFlags=0x0]
1324fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
1325fcc.d9c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\propsys.dll [lacks WinVerifyTrust]
1326fcc.d9c: supR3HardenedDllNotificationCallback: load 000007fefb870000 LB 0x0012c000 C:\Windows\system32\PROPSYS.dll [fFlags=0x0]
1327fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\propsys.dll [lacks WinVerifyTrust]
1328fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
1329fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefec90000 'C:\Windows\system32\ADVAPI32.dll'
1330fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefb9a0000 'C:\Windows\system32\MMDevAPI.DLL'
1331fcc.d9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1332fcc.d9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'advapi32.dll'.
1333fcc.d9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'ole32.dll'.
1334fcc.d9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'user32.dll'.
1335fcc.d9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'winmm.dll'.
1336fcc.d9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'ksuser.dll'.
1337fcc.d9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'mmdevapi.dll'.
1338fcc.d9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'avrt.dll'.
1339fcc.d9c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\wdmaud.drv)
1340fcc.d9c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\wdmaud.drv
1341fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'avrt.dll'...
1342fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'avrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\avrt.dll' [rcNtRedir=0xc0150008]
1343fcc.d9c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\avrt.dll)
1344fcc.d9c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\avrt.dll
1345fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mmdevapi.dll'...
1346fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'mmdevapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\mmdevapi.dll' [rcNtRedir=0xc0150008]
1347fcc.d9c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
1348fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ksuser.dll'...
1349fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ksuser.dll' -> '\Device\HarddiskVolume2\Windows\System32\ksuser.dll' [rcNtRedir=0xc0150008]
1350fcc.d9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1351fcc.d9c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\ksuser.dll)
1352fcc.d9c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\ksuser.dll
1353fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
1354fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume2\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
1355fcc.d9c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\winmm.dll [lacks WinVerifyTrust]
1356fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
1357fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
1358fcc.d9c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
1359fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
1360fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
1361fcc.d9c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\ole32.dll [lacks WinVerifyTrust]
1362fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
1363fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
1364fcc.d9c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
1365fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1366fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1367fcc.d9c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1368fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1369fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1370fcc.d9c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1371fcc.d9c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=000000000353efe1:<flags> [calling]
1372fcc.d9c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
1373fcc.d9c: supR3HardenedDllNotificationCallback: load 000007fef4c80000 LB 0x0003b000 C:\Windows\system32\wdmaud.drv [fFlags=0x0]
1374fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
1375fcc.d9c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\ksuser.dll [lacks WinVerifyTrust]
1376fcc.d9c: supR3HardenedDllNotificationCallback: load 0000000074840000 LB 0x00006000 C:\Windows\system32\ksuser.dll [fFlags=0x0]
1377fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\ksuser.dll [lacks WinVerifyTrust]
1378fcc.d9c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\avrt.dll [lacks WinVerifyTrust]
1379fcc.d9c: supR3HardenedDllNotificationCallback: load 000007fefb830000 LB 0x00009000 C:\Windows\system32\AVRT.dll [fFlags=0x0]
1380fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\avrt.dll [lacks WinVerifyTrust]
1381fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef4c80000 'C:\Windows\system32\wdmaud.drv'
1382fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
1383fcc.d9c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=000000000353efe1:<flags> [calling]
1384fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef4c80000 'C:\Windows\system32\wdmaud.drv'
1385fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\ole32.dll [lacks WinVerifyTrust]
1386fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefd120000 'C:\Windows\system32\ole32.dll'
1387fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1388fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'ole32.dll'.
1389fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
1390fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'advapi32.dll'.
1391fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'oleaut32.dll'.
1392fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'rpcrt4.dll'.
1393fcc.1044: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\clbcatq.dll)
1394fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\clbcatq.dll
1395fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
1396fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
1397fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
1398fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
1399fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume2\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
1400fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
1401fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
1402fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
1403fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
1404fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
1405fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
1406fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
1407fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
1408fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
1409fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\ole32.dll [lacks WinVerifyTrust]
1410fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1411fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1412fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1413fcc.1044: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\CLBCatQ.DLL (Input=CLBCatQ.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000001b11e1:<flags> [calling]
1414fcc.1044: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\clbcatq.dll [lacks WinVerifyTrust]
1415fcc.1044: supR3HardenedDllNotificationCallback: load 000007fefd080000 LB 0x00099000 C:\Windows\system32\CLBCatQ.DLL [fFlags=0x0]
1416fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\clbcatq.dll [lacks WinVerifyTrust]
1417fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefd080000 'C:\Windows\system32\CLBCatQ.DLL'
1418fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msctf.dll [lacks WinVerifyTrust]
1419fcc.1044: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\MSCTF.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000001b24f1:<flags> [calling]
1420fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefe800000 'C:\Windows\system32\MSCTF.dll'
1421fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
1422fcc.d9c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=000000000353f191:<flags> [calling]
1423fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef4c80000 'C:\Windows\system32\wdmaud.drv'
1424fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
1425fcc.d9c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\MMDEVAPI.DLL (Input=MMDEVAPI.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=000000000353f321:<flags> [calling]
1426fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefb9a0000 'C:\Windows\system32\MMDEVAPI.DLL'
1427fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\ole32.dll [lacks WinVerifyTrust]
1428fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefd120000 'C:\Windows\system32\ole32.dll'
1429fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\setupapi.dll [lacks WinVerifyTrust]
1430fcc.d9c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\SETUPAPI.dll (Input=SETUPAPI.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=000000000353f0c1:<flags> [calling]
1431fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefefd0000 'C:\Windows\system32\SETUPAPI.dll'
1432fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
1433fcc.d9c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=000000000353f191:<flags> [calling]
1434fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef4c80000 'C:\Windows\system32\wdmaud.drv'
1435fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
1436fcc.d9c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=000000000353f191:<flags> [calling]
1437fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef4c80000 'C:\Windows\system32\wdmaud.drv'
1438fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\shlwapi.dll [lacks WinVerifyTrust]
1439fcc.d9c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\SHLWAPI.dll (Input=SHLWAPI.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=000000000353ea61:<flags> [calling]
1440fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefec10000 'C:\Windows\system32\SHLWAPI.dll'
1441fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\ole32.dll [lacks WinVerifyTrust]
1442fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefd120000 'C:\Windows\system32\ole32.dll'
1443fcc.d9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1444fcc.d9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'advapi32.dll'.
1445fcc.d9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'ole32.dll'.
1446fcc.d9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'oleaut32.dll'.
1447fcc.d9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'user32.dll'.
1448fcc.d9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'rpcrt4.dll'.
1449fcc.d9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'mmdevapi.dll'.
1450fcc.d9c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\AudioSes.dll)
1451fcc.d9c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\AudioSes.dll
1452fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mmdevapi.dll'...
1453fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'mmdevapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\mmdevapi.dll' [rcNtRedir=0xc0150008]
1454fcc.d9c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
1455fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
1456fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
1457fcc.d9c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
1458fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
1459fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
1460fcc.d9c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
1461fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
1462fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume2\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
1463fcc.d9c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
1464fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
1465fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
1466fcc.d9c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\ole32.dll [lacks WinVerifyTrust]
1467fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
1468fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
1469fcc.d9c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
1470fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1471fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1472fcc.d9c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1473fcc.d9c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\AUDIOSES.DLL (Input=AUDIOSES.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=000000000353f1a1:<flags> [calling]
1474fcc.d9c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\AudioSes.dll [lacks WinVerifyTrust]
1475fcc.d9c: supR3HardenedDllNotificationCallback: load 000007fefac00000 LB 0x0004f000 C:\Windows\system32\AUDIOSES.DLL [fFlags=0x0]
1476fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\AudioSes.dll [lacks WinVerifyTrust]
1477fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefac00000 'C:\Windows\system32\AUDIOSES.DLL'
1478fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
1479fcc.d9c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=000000000353f191:<flags> [calling]
1480fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef4c80000 'C:\Windows\system32\wdmaud.drv'
1481fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
1482fcc.d9c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=000000000353f191:<flags> [calling]
1483fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef4c80000 'C:\Windows\system32\wdmaud.drv'
1484fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
1485fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef4c80000 'C:\Windows\system32\wdmaud.drv'
1486fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
1487fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef4c80000 'C:\Windows\system32\wdmaud.drv'
1488fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
1489fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef4c80000 'C:\Windows\system32\wdmaud.drv'
1490fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
1491fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef4c80000 'C:\Windows\system32\wdmaud.drv'
1492fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
1493fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef4c80000 'C:\Windows\system32\wdmaud.drv'
1494fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
1495fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef4c80000 'C:\Windows\system32\wdmaud.drv'
1496fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
1497fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef4c80000 'C:\Windows\system32\wdmaud.drv'
1498fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
1499fcc.d9c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=000000000353f191:<flags> [calling]
1500fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef4c80000 'C:\Windows\system32\wdmaud.drv'
1501fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
1502fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef4c80000 'C:\Windows\system32\wdmaud.drv'
1503fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
1504fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef4c80000 'C:\Windows\system32\wdmaud.drv'
1505fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
1506fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef4c80000 'C:\Windows\system32\wdmaud.drv'
1507fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
1508fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef4c80000 'C:\Windows\system32\wdmaud.drv'
1509fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv [lacks WinVerifyTrust]
1510fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef4c80000 'C:\Windows\system32\wdmaud.drv'
1511fcc.d9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1512fcc.d9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
1513fcc.d9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'winmm.dll'.
1514fcc.d9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'msacm32.dll'.
1515fcc.d9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'mmdevapi.dll'.
1516fcc.d9c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\msacm32.drv)
1517fcc.d9c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\msacm32.drv
1518fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mmdevapi.dll'...
1519fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'mmdevapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\mmdevapi.dll' [rcNtRedir=0xc0150008]
1520fcc.d9c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust]
1521fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msacm32.dll'...
1522fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msacm32.dll' -> '\Device\HarddiskVolume2\Windows\System32\msacm32.dll' [rcNtRedir=0xc0150008]
1523fcc.d9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1524fcc.d9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'advapi32.dll'.
1525fcc.d9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
1526fcc.d9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'gdi32.dll'.
1527fcc.d9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'winmm.dll'.
1528fcc.d9c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\msacm32.dll)
1529fcc.d9c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\msacm32.dll
1530fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
1531fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume2\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
1532fcc.d9c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\winmm.dll [lacks WinVerifyTrust]
1533fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
1534fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
1535fcc.d9c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
1536fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1537fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1538fcc.d9c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1539fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
1540fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume2\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
1541fcc.d9c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\winmm.dll [lacks WinVerifyTrust]
1542fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
1543fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
1544fcc.d9c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
1545fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
1546fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
1547fcc.d9c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
1548fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
1549fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
1550fcc.d9c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
1551fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1552fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1553fcc.d9c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1554fcc.d9c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=000000000353ef91:<flags> [calling]
1555fcc.d9c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
1556fcc.d9c: supR3HardenedDllNotificationCallback: load 000007fef4c70000 LB 0x0000a000 C:\Windows\system32\msacm32.drv [fFlags=0x0]
1557fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
1558fcc.d9c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msacm32.dll [lacks WinVerifyTrust]
1559fcc.d9c: supR3HardenedDllNotificationCallback: load 000007fef4c50000 LB 0x00018000 C:\Windows\system32\MSACM32.dll [fFlags=0x0]
1560fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msacm32.dll [lacks WinVerifyTrust]
1561fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef4c70000 'C:\Windows\system32\msacm32.drv'
1562fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
1563fcc.d9c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=000000000353e991:<flags> [calling]
1564fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef4c70000 'C:\Windows\system32\msacm32.drv'
1565fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
1566fcc.d9c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=000000000353e991:<flags> [calling]
1567fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef4c70000 'C:\Windows\system32\msacm32.drv'
1568fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
1569fcc.d9c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=000000000353e991:<flags> [calling]
1570fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef4c70000 'C:\Windows\system32\msacm32.drv'
1571fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
1572fcc.d9c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=000000000353e991:<flags> [calling]
1573fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef4c70000 'C:\Windows\system32\msacm32.drv'
1574fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
1575fcc.d9c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=000000000353e991:<flags> [calling]
1576fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef4c70000 'C:\Windows\system32\msacm32.drv'
1577fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
1578fcc.d9c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=000000000353e991:<flags> [calling]
1579fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef4c70000 'C:\Windows\system32\msacm32.drv'
1580fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
1581fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef4c70000 'C:\Windows\system32\msacm32.drv'
1582fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
1583fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef4c70000 'C:\Windows\system32\msacm32.drv'
1584fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msacm32.drv [lacks WinVerifyTrust]
1585fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef4c70000 'C:\Windows\system32\msacm32.drv'
1586fcc.d9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1587fcc.d9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
1588fcc.d9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'winmm.dll'.
1589fcc.d9c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\midimap.dll)
1590fcc.d9c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\midimap.dll
1591fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
1592fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume2\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
1593fcc.d9c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\winmm.dll [lacks WinVerifyTrust]
1594fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
1595fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
1596fcc.d9c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
1597fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1598fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1599fcc.d9c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1600fcc.d9c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=000000000353ef91:<flags> [calling]
1601fcc.d9c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\midimap.dll [lacks WinVerifyTrust]
1602fcc.d9c: supR3HardenedDllNotificationCallback: load 000007fef4c40000 LB 0x00009000 C:\Windows\system32\midimap.dll [fFlags=0x0]
1603fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\midimap.dll [lacks WinVerifyTrust]
1604fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef4c40000 'C:\Windows\system32\midimap.dll'
1605fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\midimap.dll [lacks WinVerifyTrust]
1606fcc.d9c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=000000000353e961:<flags> [calling]
1607fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef4c40000 'C:\Windows\system32\midimap.dll'
1608fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\midimap.dll [lacks WinVerifyTrust]
1609fcc.d9c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=000000000353e961:<flags> [calling]
1610fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef4c40000 'C:\Windows\system32\midimap.dll'
1611fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\midimap.dll [lacks WinVerifyTrust]
1612fcc.d9c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=000000000353ef91:<flags> [calling]
1613fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef4c40000 'C:\Windows\system32\midimap.dll'
1614fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\winmm.dll [lacks WinVerifyTrust]
1615fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefb120000 'C:\Windows\system32\WINMM.dll'
1616fcc.a3c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\AudioSes.dll [lacks WinVerifyTrust]
1617fcc.a3c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\audioses.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000003b4d801:<flags> [calling]
1618fcc.a3c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefac00000 'C:\Windows\System32\audioses.dll'
1619fcc.f9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll [lacks WinVerifyTrust]
1620fcc.f9c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\CFGMGR32.dll (Input=CFGMGR32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000003f8f981:<flags> [calling]
1621fcc.f9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefcf10000 'C:\Windows\system32\CFGMGR32.dll'
1622fcc.a3c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
1623fcc.a3c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\OLEAUT32.dll (Input=OLEAUT32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000003b4f551:<flags> [calling]
1624fcc.a3c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefe720000 'C:\Windows\system32\OLEAUT32.dll'
1625fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1626fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'crypt32.dll'.
1627fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msasn1.dll'.
1628fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'rpcrt4.dll'.
1629fcc.1044: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\wintrust.dll)
1630fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\wintrust.dll
1631fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
1632fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
1633fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
1634fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msasn1.dll'...
1635fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'msasn1.dll' -> '\Device\HarddiskVolume2\Windows\System32\msasn1.dll' [rcNtRedir=0xc0150008]
1636fcc.1044: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\msasn1.dll)
1637fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\msasn1.dll
1638fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'crypt32.dll'...
1639fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'crypt32.dll' -> '\Device\HarddiskVolume2\Windows\System32\crypt32.dll' [rcNtRedir=0xc0150008]
1640fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1641fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msasn1.dll'.
1642fcc.1044: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\crypt32.dll)
1643fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\crypt32.dll
1644fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1645fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1646fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1647fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msasn1.dll'...
1648fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'msasn1.dll' -> '\Device\HarddiskVolume2\Windows\System32\msasn1.dll' [rcNtRedir=0xc0150008]
1649fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msasn1.dll [lacks WinVerifyTrust]
1650fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1651fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1652fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1653fcc.1044: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\WINTRUST.dll (Input=WINTRUST.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000001b2871:<flags> [calling]
1654fcc.1044: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
1655fcc.1044: supR3HardenedDllNotificationCallback: load 000007fefcc30000 LB 0x0003b000 C:\Windows\system32\WINTRUST.dll [fFlags=0x0]
1656fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
1657fcc.1044: supR3HardenedDllNotificationCallback: load 000007fefcc80000 LB 0x0016d000 C:\Windows\system32\CRYPT32.dll [fFlags=0x0]
1658fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
1659fcc.1044: supR3HardenedDllNotificationCallback: load 000007fefcba0000 LB 0x0000f000 C:\Windows\system32\MSASN1.dll [fFlags=0x0]
1660fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msasn1.dll [lacks WinVerifyTrust]
1661fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefcc30000 'C:\Windows\system32\WINTRUST.dll'
1662f2c.a24: supR3HardNtChildWaitFor[1]: Quitting: ExitCode=0x1 (rcNtWait=0x0, rcNt1=0x0, rcNt2=0x103, rcNt3=0x103, 15165 ms, the end);

© 2024 Oracle Support Privacy / Do Not Sell My Info Terms of Use Trademark Policy Automated Access Etiquette