f2c.a24: Log file opened: 5.1.24r117012 g_hStartupLog=0000000000000014 g_uNtVerCombined=0x611db110 f2c.a24: \SystemRoot\System32\ntdll.dll: f2c.a24: CreationTime: 2017-07-25T16:33:24.504865500Z f2c.a24: LastWriteTime: 2017-05-12T18:24:12.913140800Z f2c.a24: ChangeTime: 2017-07-25T16:40:01.298146000Z f2c.a24: FileAttributes: 0x20 f2c.a24: Size: 0x1a7100 f2c.a24: NT Headers: 0xe0 f2c.a24: Timestamp: 0x5915fdce f2c.a24: Machine: 0x8664 - amd64 f2c.a24: Timestamp: 0x5915fdce f2c.a24: Image Version: 6.1 f2c.a24: SizeOfImage: 0x1aa000 (1744896) f2c.a24: Resource Dir: 0x14e000 LB 0x5a028 f2c.a24: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)] f2c.a24: [Raw version resource data: 0x14e0f0 LB 0x380, codepage 0x0 (reserved 0x0)] f2c.a24: ProductName: Microsoft® Windows® Operating System f2c.a24: ProductVersion: 6.1.7601.23807 f2c.a24: FileVersion: 6.1.7601.23807 (win7sp1_ldr.170512-0600) f2c.a24: FileDescription: NT Layer DLL f2c.a24: \SystemRoot\System32\kernel32.dll: f2c.a24: CreationTime: 2017-07-25T16:33:21.469691900Z f2c.a24: LastWriteTime: 2017-05-12T18:22:33.598000000Z f2c.a24: ChangeTime: 2017-07-25T16:40:02.202947600Z f2c.a24: FileAttributes: 0x20 f2c.a24: Size: 0x11c000 f2c.a24: NT Headers: 0xe0 f2c.a24: Timestamp: 0x5915fe13 f2c.a24: Machine: 0x8664 - amd64 f2c.a24: Timestamp: 0x5915fe13 f2c.a24: Image Version: 6.1 f2c.a24: SizeOfImage: 0x11f000 (1175552) f2c.a24: Resource Dir: 0x116000 LB 0x528 f2c.a24: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)] f2c.a24: [Raw version resource data: 0x1160b0 LB 0x3a4, codepage 0x0 (reserved 0x0)] f2c.a24: ProductName: Microsoft® Windows® Operating System f2c.a24: ProductVersion: 6.1.7601.23807 f2c.a24: FileVersion: 6.1.7601.23807 (win7sp1_ldr.170512-0600) f2c.a24: FileDescription: Windows NT BASE API Client DLL f2c.a24: \SystemRoot\System32\KernelBase.dll: f2c.a24: CreationTime: 2017-07-25T16:33:20.163617200Z f2c.a24: LastWriteTime: 2017-05-12T18:22:33.598000000Z f2c.a24: ChangeTime: 2017-07-25T16:40:02.202947600Z f2c.a24: FileAttributes: 0x20 f2c.a24: Size: 0x66800 f2c.a24: NT Headers: 0xe8 f2c.a24: Timestamp: 0x5915fe14 f2c.a24: Machine: 0x8664 - amd64 f2c.a24: Timestamp: 0x5915fe14 f2c.a24: Image Version: 6.1 f2c.a24: SizeOfImage: 0x6a000 (434176) f2c.a24: Resource Dir: 0x68000 LB 0x530 f2c.a24: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)] f2c.a24: [Raw version resource data: 0x680b0 LB 0x3ac, codepage 0x0 (reserved 0x0)] f2c.a24: ProductName: Microsoft® Windows® Operating System f2c.a24: ProductVersion: 6.1.7601.23807 f2c.a24: FileVersion: 6.1.7601.23807 (win7sp1_ldr.170512-0600) f2c.a24: FileDescription: Windows NT BASE API Client DLL f2c.a24: \SystemRoot\System32\apisetschema.dll: f2c.a24: CreationTime: 2017-07-25T16:33:12.850198900Z f2c.a24: LastWriteTime: 2017-05-12T18:22:28.981000000Z f2c.a24: ChangeTime: 2017-07-25T16:40:01.266946000Z f2c.a24: FileAttributes: 0x20 f2c.a24: Size: 0x1a00 f2c.a24: NT Headers: 0xc0 f2c.a24: Timestamp: 0x5915fdad f2c.a24: Machine: 0x8664 - amd64 f2c.a24: Timestamp: 0x5915fdad f2c.a24: Image Version: 6.1 f2c.a24: SizeOfImage: 0x50000 (327680) f2c.a24: Resource Dir: 0x30000 LB 0x3f8 f2c.a24: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)] f2c.a24: [Raw version resource data: 0x30060 LB 0x398, codepage 0x0 (reserved 0x0)] f2c.a24: ProductName: Microsoft® Windows® Operating System f2c.a24: ProductVersion: 6.1.7601.23807 f2c.a24: FileVersion: 6.1.7601.23807 (win7sp1_ldr.170512-0600) f2c.a24: FileDescription: ApiSet Schema DLL f2c.a24: supR3HardenedWinFindAdversaries: 0x80 f2c.a24: \SystemRoot\System32\drivers\mbam.sys: f2c.a24: CreationTime: 2013-01-22T18:56:25.830720100Z f2c.a24: LastWriteTime: 2011-12-10T15:24:08.000000000Z f2c.a24: ChangeTime: 2013-01-22T18:56:25.830720100Z f2c.a24: FileAttributes: 0x20 f2c.a24: Size: 0x5a70 f2c.a24: NT Headers: 0xf0 f2c.a24: Timestamp: 0x4eb140a4 f2c.a24: Machine: 0x8664 - amd64 f2c.a24: Timestamp: 0x4eb140a4 f2c.a24: Image Version: 6.0 f2c.a24: SizeOfImage: 0xa000 (40960) f2c.a24: Resource Dir: 0x8000 LB 0x3d8 f2c.a24: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)] f2c.a24: [Raw version resource data: 0x8060 LB 0x378, codepage 0x0 (reserved 0x0)] f2c.a24: ProductName: Malwarebytes' Anti-Malware f2c.a24: ProductVersion: 1.60.0.0002 f2c.a24: FileVersion: 1.60.0.0002 built by: WinDDK f2c.a24: FileDescription: Malwarebytes' Anti-Malware f2c.a24: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox' f2c.a24: Calling main() f2c.a24: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2 f2c.a24: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox' f2c.a24: SUPR3HardenedMain: Respawn #1 f2c.a24: System32: \Device\HarddiskVolume2\Windows\System32 f2c.a24: WinSxS: \Device\HarddiskVolume2\Windows\winsxs f2c.a24: KnownDllPath: C:\Windows\system32 f2c.a24: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports f2c.a24: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe) f2c.a24: supR3HardNtEnableThreadCreation: f2c.a24: supR3HardNtDisableThreadCreation: pvLdrInitThunk=0000000076eca360 pvNtTerminateThread=0000000076eec260 f2c.a24: supR3HardenedWinDoReSpawn(1): New child fcc.1044 [kernel32]. f2c.a24: supR3HardNtChildGatherData: PebBaseAddress=000007fffffda000 cbPeb=0x380 f2c.a24: supR3HardNtPuChFindNtdll: uNtDllParentAddr=0000000076ea0000 uNtDllChildAddr=0000000076ea0000 f2c.a24: supR3HardenedWinSetupChildInit: uLdrInitThunk=0000000076eca360 f2c.a24: supR3HardenedWinSetupChildInit: Start child. f2c.a24: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 0 ms. f2c.a24: supR3HardNtChildPurify: Startup delay kludge #1/0: 513 ms, 64 sleeps f2c.a24: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION f2c.a24: *0000000000000000-000000000000ffff 0x0001/0x0000 0x0000000 f2c.a24: *0000000000010000-000000000002ffff 0x0004/0x0004 0x0020000 f2c.a24: *0000000000030000-0000000000033fff 0x0002/0x0002 0x0040000 f2c.a24: 0000000000034000-000000000003ffff 0x0001/0x0000 0x0000000 f2c.a24: *0000000000040000-0000000000040fff 0x0004/0x0004 0x0020000 f2c.a24: 0000000000041000-00000000000bffff 0x0001/0x0000 0x0000000 f2c.a24: *00000000000c0000-00000000001bbfff 0x0000/0x0004 0x0020000 f2c.a24: 00000000001bc000-00000000001bdfff 0x0104/0x0004 0x0020000 f2c.a24: 00000000001be000-00000000001bffff 0x0004/0x0004 0x0020000 f2c.a24: 00000000001c0000-0000000076e9ffff 0x0001/0x0000 0x0000000 f2c.a24: *0000000076ea0000-0000000076ea0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll f2c.a24: 0000000076ea1000-0000000076f9dfff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll f2c.a24: 0000000076f9e000-0000000076fccfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll f2c.a24: 0000000076fcd000-0000000076fd6fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll f2c.a24: 0000000076fd7000-0000000076fd7fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll f2c.a24: 0000000076fd8000-0000000076fdafff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll f2c.a24: 0000000076fdb000-0000000077049fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll f2c.a24: 000000007704a000-000000007efdffff 0x0001/0x0000 0x0000000 f2c.a24: *000000007efe0000-000000007ffdffff 0x0000/0x0002 0x0020000 f2c.a24: *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000 f2c.a24: 000000007ffe1000-000000007ffeffff 0x0000/0x0002 0x0020000 f2c.a24: 000000007fff0000-000000013ffbffff 0x0001/0x0000 0x0000000 f2c.a24: *000000013ffc0000-000000013ffc0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe f2c.a24: 000000013ffc1000-0000000140030fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe f2c.a24: 0000000140031000-0000000140031fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe f2c.a24: 0000000140032000-0000000140077fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe f2c.a24: 0000000140078000-0000000140078fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe f2c.a24: 0000000140079000-0000000140079fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe f2c.a24: 000000014007a000-000000014007efff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe f2c.a24: 000000014007f000-000000014007ffff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe f2c.a24: 0000000140080000-0000000140080fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe f2c.a24: 0000000140081000-0000000140084fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe f2c.a24: 0000000140085000-00000001400ccfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe f2c.a24: 00000001400cd000-000007feff1bffff 0x0001/0x0000 0x0000000 f2c.a24: *000007feff1c0000-000007feff1c0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\apisetschema.dll f2c.a24: 000007feff1c1000-000007fffffaffff 0x0001/0x0000 0x0000000 f2c.a24: *000007fffffb0000-000007fffffd2fff 0x0002/0x0002 0x0040000 f2c.a24: 000007fffffd3000-000007fffffd9fff 0x0001/0x0000 0x0000000 f2c.a24: *000007fffffda000-000007fffffdafff 0x0004/0x0004 0x0020000 f2c.a24: 000007fffffdb000-000007fffffddfff 0x0001/0x0000 0x0000000 f2c.a24: *000007fffffde000-000007fffffdffff 0x0004/0x0004 0x0020000 f2c.a24: *000007fffffe0000-000007fffffeffff 0x0001/0x0002 0x0020000 f2c.a24: apisetschema.dll: timestamp 0x5915fdad (rc=VINF_SUCCESS) f2c.a24: VirtualBox.exe: timestamp 0x596d0abb (rc=VINF_SUCCESS) f2c.a24: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports f2c.a24: '\Device\HarddiskVolume2\Windows\System32\apisetschema.dll' has no imports f2c.a24: '\Device\HarddiskVolume2\Windows\System32\ntdll.dll' has no imports f2c.a24: supR3HardNtChildPurify: Done after 560 ms and 0 fixes (loop #0). fcc.1044: Log file opened: 5.1.24r117012 g_hStartupLog=0000000000000004 g_uNtVerCombined=0x611db100 fcc.1044: supR3HardenedVmProcessInit: uNtDllAddr=0000000076ea0000 g_uNtVerCombined=0x611db100 fcc.1044: ntdll.dll: timestamp 0x5915fdce (rc=VINF_SUCCESS) fcc.1044: New simple heap: #1 00000000002c0000 LB 0x400000 (for 1744896 allocation) f2c.a24: supR3HardNtEnableThreadCreation: fcc.1044: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox' fcc.1044: System32: \Device\HarddiskVolume2\Windows\System32 fcc.1044: WinSxS: \Device\HarddiskVolume2\Windows\winsxs fcc.1044: KnownDllPath: C:\Windows\system32 fcc.1044: supR3HardenedVmProcessInit: Opening vboxdrv stub... fcc.1044: supR3HardenedVmProcessInit: Restoring LdrInitializeThunk... fcc.1044: supR3HardenedVmProcessInit: Returning to LdrInitializeThunk... fcc.1044: Registered Dll notification callback with NTDLL. fcc.1044: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\kernel32.dll) fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\kernel32.dll fcc.1044: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\kernel32.dll (Input=kernel32.dll, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000000000: [calling] fcc.1044: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\kernel32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedDllNotificationCallback: load 0000000076d80000 LB 0x0011f000 C:\Windows\system32\kernel32.dll [fFlags=0x0] fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\kernel32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedDllNotificationCallback: load 000007fefcbc0000 LB 0x0006a000 C:\Windows\system32\KERNELBASE.dll [fFlags=0x0] fcc.1044: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\KernelBase.dll) fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\KernelBase.dll fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=0000000076d80000 'C:\Windows\system32\kernel32.dll' fcc.1044: supR3HardNtDisableThreadCreation: pvLdrInitThunk=0000000076eca360 pvNtTerminateThread=0000000076eec260 f2c.a24: supR3HardNtChildWaitFor: Found expected request 1 (CloseEvents) after 27 ms. fcc.1044: \SystemRoot\System32\ntdll.dll: fcc.1044: CreationTime: 2017-07-25T16:33:24.504865500Z fcc.1044: LastWriteTime: 2017-05-12T18:24:12.913140800Z fcc.1044: ChangeTime: 2017-07-25T16:40:01.298146000Z fcc.1044: FileAttributes: 0x20 fcc.1044: Size: 0x1a7100 fcc.1044: NT Headers: 0xe0 fcc.1044: Timestamp: 0x5915fdce fcc.1044: Machine: 0x8664 - amd64 fcc.1044: Timestamp: 0x5915fdce fcc.1044: Image Version: 6.1 fcc.1044: SizeOfImage: 0x1aa000 (1744896) fcc.1044: Resource Dir: 0x14e000 LB 0x5a028 fcc.1044: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)] fcc.1044: [Raw version resource data: 0x14e0f0 LB 0x380, codepage 0x0 (reserved 0x0)] fcc.1044: ProductName: Microsoft® Windows® Operating System fcc.1044: ProductVersion: 6.1.7601.23807 fcc.1044: FileVersion: 6.1.7601.23807 (win7sp1_ldr.170512-0600) fcc.1044: FileDescription: NT Layer DLL fcc.1044: \SystemRoot\System32\kernel32.dll: fcc.1044: CreationTime: 2017-07-25T16:33:21.469691900Z fcc.1044: LastWriteTime: 2017-05-12T18:22:33.598000000Z fcc.1044: ChangeTime: 2017-07-25T16:40:02.202947600Z fcc.1044: FileAttributes: 0x20 fcc.1044: Size: 0x11c000 fcc.1044: NT Headers: 0xe0 fcc.1044: Timestamp: 0x5915fe13 fcc.1044: Machine: 0x8664 - amd64 fcc.1044: Timestamp: 0x5915fe13 fcc.1044: Image Version: 6.1 fcc.1044: SizeOfImage: 0x11f000 (1175552) fcc.1044: Resource Dir: 0x116000 LB 0x528 fcc.1044: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)] fcc.1044: [Raw version resource data: 0x1160b0 LB 0x3a4, codepage 0x0 (reserved 0x0)] fcc.1044: ProductName: Microsoft® Windows® Operating System fcc.1044: ProductVersion: 6.1.7601.23807 fcc.1044: FileVersion: 6.1.7601.23807 (win7sp1_ldr.170512-0600) fcc.1044: FileDescription: Windows NT BASE API Client DLL fcc.1044: \SystemRoot\System32\KernelBase.dll: fcc.1044: CreationTime: 2017-07-25T16:33:20.163617200Z fcc.1044: LastWriteTime: 2017-05-12T18:22:33.598000000Z fcc.1044: ChangeTime: 2017-07-25T16:40:02.202947600Z fcc.1044: FileAttributes: 0x20 fcc.1044: Size: 0x66800 fcc.1044: NT Headers: 0xe8 fcc.1044: Timestamp: 0x5915fe14 fcc.1044: Machine: 0x8664 - amd64 fcc.1044: Timestamp: 0x5915fe14 fcc.1044: Image Version: 6.1 fcc.1044: SizeOfImage: 0x6a000 (434176) fcc.1044: Resource Dir: 0x68000 LB 0x530 fcc.1044: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)] fcc.1044: [Raw version resource data: 0x680b0 LB 0x3ac, codepage 0x0 (reserved 0x0)] fcc.1044: ProductName: Microsoft® Windows® Operating System fcc.1044: ProductVersion: 6.1.7601.23807 fcc.1044: FileVersion: 6.1.7601.23807 (win7sp1_ldr.170512-0600) fcc.1044: FileDescription: Windows NT BASE API Client DLL fcc.1044: \SystemRoot\System32\apisetschema.dll: fcc.1044: CreationTime: 2017-07-25T16:33:12.850198900Z fcc.1044: LastWriteTime: 2017-05-12T18:22:28.981000000Z fcc.1044: ChangeTime: 2017-07-25T16:40:01.266946000Z fcc.1044: FileAttributes: 0x20 fcc.1044: Size: 0x1a00 fcc.1044: NT Headers: 0xc0 fcc.1044: Timestamp: 0x5915fdad fcc.1044: Machine: 0x8664 - amd64 fcc.1044: Timestamp: 0x5915fdad fcc.1044: Image Version: 6.1 fcc.1044: SizeOfImage: 0x50000 (327680) fcc.1044: Resource Dir: 0x30000 LB 0x3f8 fcc.1044: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)] fcc.1044: [Raw version resource data: 0x30060 LB 0x398, codepage 0x0 (reserved 0x0)] fcc.1044: ProductName: Microsoft® Windows® Operating System fcc.1044: ProductVersion: 6.1.7601.23807 fcc.1044: FileVersion: 6.1.7601.23807 (win7sp1_ldr.170512-0600) fcc.1044: FileDescription: ApiSet Schema DLL fcc.1044: supR3HardenedWinFindAdversaries: 0x80 fcc.1044: \SystemRoot\System32\drivers\mbam.sys: fcc.1044: CreationTime: 2013-01-22T18:56:25.830720100Z fcc.1044: LastWriteTime: 2011-12-10T15:24:08.000000000Z fcc.1044: ChangeTime: 2013-01-22T18:56:25.830720100Z fcc.1044: FileAttributes: 0x20 fcc.1044: Size: 0x5a70 fcc.1044: NT Headers: 0xf0 fcc.1044: Timestamp: 0x4eb140a4 fcc.1044: Machine: 0x8664 - amd64 fcc.1044: Timestamp: 0x4eb140a4 fcc.1044: Image Version: 6.0 fcc.1044: SizeOfImage: 0xa000 (40960) fcc.1044: Resource Dir: 0x8000 LB 0x3d8 fcc.1044: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)] fcc.1044: [Raw version resource data: 0x8060 LB 0x378, codepage 0x0 (reserved 0x0)] fcc.1044: ProductName: Malwarebytes' Anti-Malware fcc.1044: ProductVersion: 1.60.0.0002 fcc.1044: FileVersion: 1.60.0.0002 built by: WinDDK fcc.1044: FileDescription: Malwarebytes' Anti-Malware fcc.1044: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox' fcc.1044: Calling main() fcc.1044: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2 fcc.1044: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox' fcc.1044: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports fcc.1044: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe) fcc.1044: SUPR3HardenedMain: Respawn #2 fcc.1044: supR3HardNtEnableThreadCreation: fcc.1044: Error -104 in supR3HardenedWinReSpawn! (enmWhat=5) fcc.1044: Error relaunching VirtualBox VM process: 5 Command line: '60eaff78-4bdd-042d-2e72-669728efd737-suplib-3rdchild --comment lubuntu --startvm 416e702c-7f80-4dad-b0ba-9f485bdb75de --no-startvm-errormsgbox "--sup-hardening-log=C:\Users\Oleg\VirtualBox VMs\lubuntu\Logs\VBoxHardening.log"' fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'opengl32.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'msvcp100.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcr100.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'qt5guivbox.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'qt5widgetsvbox.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'qt5printsupportvbox.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'qt5openglvbox.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'user32.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'advapi32.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'shell32.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'ole32.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'oleaut32.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #15 'winmm.dll'. fcc.1044: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.dll) fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.dll fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume2\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'. fcc.1044: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\winmm.dll) fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\winmm.dll fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume2\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'ole32.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'rpcrt4.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'user32.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'gdi32.dll'. fcc.1044: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\oleaut32.dll) fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\oleaut32.dll fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'gdi32.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #25 'user32.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'rpcrt4.dll'. fcc.1044: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\ole32.dll) fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\ole32.dll fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume2\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #21 'shlwapi.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #23 'user32.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #24 'gdi32.dll'. fcc.1044: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\shell32.dll) fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\shell32.dll fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'rpcrt4.dll'. fcc.1044: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\advapi32.dll) fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\advapi32.dll fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'gdi32.dll'. fcc.1044: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\user32.dll) fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\user32.dll fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5openglvbox.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5openglvbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5openglvbox.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'qt5widgetsvbox.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'qt5guivbox.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5corevbox.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcr100.dll'. fcc.1044: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll) fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5printsupportvbox.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5printsupportvbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5printsupportvbox.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5widgetsvbox.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5guivbox.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'winspool.drv'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'comdlg32.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcr100.dll'. fcc.1044: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll) fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5guivbox.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5corevbox.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'shell32.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'. fcc.1044: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll) fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'ole32.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'opengl32.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'. fcc.1044: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll) fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'shell32.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ole32.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'advapi32.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ws2_32.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'mpr.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcp100.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'msvcr100.dll'. fcc.1044: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll) fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008] fcc.1044: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll) fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'. fcc.1044: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll) fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ws2_32.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'rpcrt4.dll'. fcc.1044: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll) fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume2\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'advapi32.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'gdi32.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'glu32.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'ddraw.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'user32.dll'. fcc.1044: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\opengl32.dll) fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\opengl32.dll fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ddraw.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'ddraw.dll' -> '\Device\HarddiskVolume2\Windows\System32\ddraw.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'dciman32.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'gdi32.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'setupapi.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'dwmapi.dll'. fcc.1044: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\ddraw.dll) fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\ddraw.dll fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'glu32.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'glu32.dll' -> '\Device\HarddiskVolume2\Windows\System32\glu32.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'opengl32.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'. fcc.1044: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\glu32.dll) fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\glu32.dll fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'lpk.dll'. fcc.1044: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\gdi32.dll) fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\gdi32.dll fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] fcc.1044: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\msvcrt.dll) fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\msvcrt.dll fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008] fcc.1044: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll) fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #16 'rpcrt4.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #17 'nsi.dll'. fcc.1044: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\ws2_32.dll) fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\ws2_32.dll fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mpr.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'mpr.dll' -> '\Device\HarddiskVolume2\Windows\System32\mpr.dll' [rcNtRedir=0xc0150008] fcc.1044: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\mpr.dll) fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\mpr.dll fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\ws2_32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\ole32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume2\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\shell32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume2\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\opengl32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\ole32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume2\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\shell32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'comdlg32.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'comdlg32.dll' -> '\Device\HarddiskVolume2\Windows\System32\comdlg32.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'shlwapi.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'gdi32.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'comctl32.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'shell32.dll'. fcc.1044: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\comdlg32.dll) fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\comdlg32.dll fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winspool.drv'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'winspool.drv' -> '\Device\HarddiskVolume2\Windows\System32\winspool.drv' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'gdi32.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'user32.dll'. fcc.1044: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\winspool.drv) fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\winspool.drv fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shlwapi.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'shlwapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\shlwapi.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'gdi32.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'msvcrt.dll'. fcc.1044: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\shlwapi.dll) fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\shlwapi.dll fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\ole32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume2\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\shell32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'comctl32.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'comctl32.dll' -> '\Device\HarddiskVolume2\Windows\System32\comctl32.dll' [rcNtRedir=0x0] fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'advapi32.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'. fcc.1044: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\comctl32.dll) fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\comctl32.dll fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shlwapi.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'shlwapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\shlwapi.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\shlwapi.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'nsi.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'nsi.dll' -> '\Device\HarddiskVolume2\Windows\System32\nsi.dll' [rcNtRedir=0xc0150008] fcc.1044: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\nsi.dll) fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\nsi.dll fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'lpk.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'lpk.dll' -> '\Device\HarddiskVolume2\Windows\System32\lpk.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'gdi32.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'user32.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'usp10.dll'. fcc.1044: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\lpk.dll) fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\lpk.dll fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume2\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\opengl32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dwmapi.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'dwmapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\dwmapi.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'. fcc.1044: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\dwmapi.dll) fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\dwmapi.dll fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'setupapi.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'setupapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\setupapi.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'cfgmgr32.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'msvcrt.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'gdi32.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'rpcrt4.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'user32.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'oleaut32.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'devobj.dll'. fcc.1044: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\setupapi.dll) fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\setupapi.dll fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dciman32.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'dciman32.dll' -> '\Device\HarddiskVolume2\Windows\System32\dciman32.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'gdi32.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'. fcc.1044: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\dciman32.dll) fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\dciman32.dll fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'devobj.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'devobj.dll' -> '\Device\HarddiskVolume2\Windows\System32\devobj.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'cfgmgr32.dll'. fcc.1044: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\devobj.dll) fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\devobj.dll fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume2\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\oleaut32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'cfgmgr32.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'cfgmgr32.dll' -> '\Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'rpcrt4.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'advapi32.dll'. fcc.1044: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll) fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'usp10.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'usp10.dll' -> '\Device\HarddiskVolume2\Windows\System32\usp10.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'gdi32.dll'. fcc.1044: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\usp10.dll) fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\usp10.dll fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'cfgmgr32.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'cfgmgr32.dll' -> '\Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VirtualBox.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000001b5121: [calling] fcc.1044: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedDllNotificationCallback: load 000007feebc10000 LB 0x008eb000 C:\Program Files\Oracle\VirtualBox\VirtualBox.dll [fFlags=0x0] fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\opengl32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedDllNotificationCallback: load 000007fefa0e0000 LB 0x0011d000 C:\Windows\system32\OPENGL32.dll [fFlags=0x0] fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\opengl32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedDllNotificationCallback: load 000007fefeaa0000 LB 0x0009f000 C:\Windows\system32\msvcrt.dll [fFlags=0x0] fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedDllNotificationCallback: load 000007fefec90000 LB 0x000db000 C:\Windows\system32\ADVAPI32.dll [fFlags=0x0] fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'msvcrt.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'rpcrt4.dll'. fcc.1044: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\sechost.dll) fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\sechost.dll fcc.1044: supR3HardenedDllNotificationCallback: load 000007fefee50000 LB 0x0001f000 C:\Windows\SYSTEM32\sechost.dll [fFlags=0x0] fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\sechost.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedDllNotificationCallback: load 000007fefcf50000 LB 0x0012d000 C:\Windows\system32\RPCRT4.dll [fFlags=0x0] fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedDllNotificationCallback: load 000007fefd650000 LB 0x00067000 C:\Windows\system32\GDI32.dll [fFlags=0x0] fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedDllNotificationCallback: load 0000000076c80000 LB 0x000fa000 C:\Windows\system32\USER32.dll [fFlags=0x0] fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedDllNotificationCallback: load 000007fefed90000 LB 0x0000e000 C:\Windows\system32\LPK.dll [fFlags=0x0] fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\lpk.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedDllNotificationCallback: load 000007fefeb40000 LB 0x000cb000 C:\Windows\system32\USP10.dll [fFlags=0x0] fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\usp10.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\glu32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedDllNotificationCallback: load 000007fefa220000 LB 0x0002d000 C:\Windows\system32\GLU32.dll [fFlags=0x0] fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\glu32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\ddraw.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedDllNotificationCallback: load 000007fef2970000 LB 0x000f1000 C:\Windows\system32\DDRAW.dll [fFlags=0x0] fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\ddraw.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\dciman32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedDllNotificationCallback: load 000007fefa210000 LB 0x00008000 C:\Windows\system32\DCIMAN32.dll [fFlags=0x0] fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\dciman32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedDllNotificationCallback: load 000007fefefd0000 LB 0x001d7000 C:\Windows\system32\SETUPAPI.dll [fFlags=0x0] fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\setupapi.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedDllNotificationCallback: load 000007fefcf10000 LB 0x00036000 C:\Windows\system32\CFGMGR32.dll [fFlags=0x0] fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedDllNotificationCallback: load 000007fefe720000 LB 0x000da000 C:\Windows\system32\OLEAUT32.dll [fFlags=0x0] fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\oleaut32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedDllNotificationCallback: load 000007fefd120000 LB 0x001fc000 C:\Windows\system32\ole32.dll [fFlags=0x0] fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\ole32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedDllNotificationCallback: load 000007fefcdf0000 LB 0x0001a000 C:\Windows\system32\DEVOBJ.dll [fFlags=0x0] fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\devobj.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\dwmapi.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedDllNotificationCallback: load 000007fefb040000 LB 0x00018000 C:\Windows\system32\dwmapi.dll [fFlags=0x0] fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\dwmapi.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedDllNotificationCallback: load 000007feec500000 LB 0x0053f000 C:\Program Files\Oracle\VirtualBox\VBoxRT.dll [fFlags=0x0] fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedDllNotificationCallback: load 0000000074620000 LB 0x000d2000 C:\Program Files\Oracle\VirtualBox\MSVCR100.dll [fFlags=0x0] fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedDllNotificationCallback: load 0000000071a20000 LB 0x00098000 C:\Program Files\Oracle\VirtualBox\MSVCP100.dll [fFlags=0x0] fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedDllNotificationCallback: load 000007fefee70000 LB 0x0004d000 C:\Windows\system32\WS2_32.dll [fFlags=0x0] fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\ws2_32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedDllNotificationCallback: load 000007fefeec0000 LB 0x00008000 C:\Windows\system32\NSI.dll [fFlags=0x0] fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\nsi.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedDllNotificationCallback: load 0000000071060000 LB 0x00565000 C:\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [fFlags=0x0] fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedDllNotificationCallback: load 000007fefd6c0000 LB 0x00d8b000 C:\Windows\system32\SHELL32.dll [fFlags=0x0] fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\shell32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedDllNotificationCallback: load 000007fefec10000 LB 0x00071000 C:\Windows\system32\SHLWAPI.dll [fFlags=0x0] fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\shlwapi.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\mpr.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedDllNotificationCallback: load 000007fef7a00000 LB 0x00018000 C:\Windows\system32\MPR.dll [fFlags=0x0] fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\mpr.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedDllNotificationCallback: load 000007feeb610000 LB 0x005f7000 C:\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [fFlags=0x0] fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedDllNotificationCallback: load 0000000070af0000 LB 0x00561000 C:\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [fFlags=0x0] fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedDllNotificationCallback: load 000007fefa080000 LB 0x00051000 C:\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll [fFlags=0x0] fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\winspool.drv [lacks WinVerifyTrust] fcc.1044: supR3HardenedDllNotificationCallback: load 000007fef7a20000 LB 0x00071000 C:\Windows\system32\WINSPOOL.DRV [fFlags=0x0] fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\winspool.drv [lacks WinVerifyTrust] fcc.1044: supR3HardenedDllNotificationCallback: load 000007fefeed0000 LB 0x00097000 C:\Windows\system32\COMDLG32.dll [fFlags=0x0] fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\comdlg32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'advapi32.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'. fcc.1044: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.18837_none_a4d981ff711297b6\comctl32.dll) fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.18837_none_a4d981ff711297b6\comctl32.dll fcc.1044: supR3HardenedDllNotificationCallback: load 000007fef5a90000 LB 0x000a0000 C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.18837_none_a4d981ff711297b6\COMCTL32.dll [fFlags=0x0] fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.18837_none_a4d981ff711297b6\comctl32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedDllNotificationCallback: load 00000000745c0000 LB 0x00054000 C:\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll [fFlags=0x0] fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\winmm.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedDllNotificationCallback: load 000007fefb120000 LB 0x0003b000 C:\Windows\system32\WINMM.dll [fFlags=0x0] fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\winmm.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'user32.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'gdi32.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msctf.dll'. fcc.1044: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\imm32.dll) fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\imm32.dll fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msctf.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'msctf.dll' -> '\Device\HarddiskVolume2\Windows\System32\msctf.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'user32.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'gdi32.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'imm32.dll'. fcc.1044: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\msctf.dll) fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\msctf.dll fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume2\Windows\System32\imm32.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\imm32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\IMM32.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000001b3f61: [calling] fcc.1044: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\imm32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedDllNotificationCallback: load 000007fefeda0000 LB 0x0002e000 C:\Windows\system32\IMM32.DLL [fFlags=0x0] fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\imm32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedDllNotificationCallback: load 000007fefe800000 LB 0x00109000 C:\Windows\system32\MSCTF.dll [fFlags=0x0] fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msctf.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefeda0000 'C:\Windows\system32\IMM32.DLL' fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefd650000 'C:\Windows\system32\gdi32.dll' fcc.1044: supR3HardenedIsApiSetDll: '' -> true fcc.1044: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-Win-Core-LocalRegistry-L1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=00000000001b4261: [calling] fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=0000000076d80000 'API-MS-Win-Core-LocalRegistry-L1-1-0.dll' fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000001b2861: [calling] fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feec500000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000001b2861: [calling] fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feec500000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000001b2861: [calling] fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feec500000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000001b2861: [calling] fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feec500000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000001b2861: [calling] fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feec500000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000001b2861: [calling] fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feec500000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feec500000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feec500000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feec500000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feec500000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feec500000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feec500000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feec500000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000001b2861: [calling] fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feec500000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feec500000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feec500000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feec500000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feec500000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feec500000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feec500000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feec500000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feec500000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feec500000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feec500000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feec500000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feec500000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feec500000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feec500000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feec500000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000001b2861: [calling] fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feec500000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feec500000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feec500000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\imm32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\imm32.dll (Input=imm32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000001b46f1: [calling] fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefeda0000 'C:\Windows\system32\imm32.dll' fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\ADVAPI32.DLL (Input=ADVAPI32.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000001b45d1: [calling] fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefec90000 'C:\Windows\system32\ADVAPI32.DLL' fcc.1044: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\cryptbase.dll) fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\cryptbase.dll fcc.1044: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\cryptbase.dll (Input=cryptbase.dll, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000000000: [calling] fcc.1044: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptbase.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedDllNotificationCallback: load 000007fefca30000 LB 0x0000f000 C:\Windows\system32\cryptbase.dll [fFlags=0x0] fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptbase.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefca30000 'C:\Windows\system32\cryptbase.dll' fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feebc10000 'C:\Program Files\Oracle\VirtualBox\VirtualBox.dll' fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\ole32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\ole32.dll (Input=ole32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000001b1a81: [calling] fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefd120000 'C:\Windows\system32\ole32.dll' fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\ADVAPI32.dll (Input=ADVAPI32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000001b1c81: [calling] fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefec90000 'C:\Windows\system32\ADVAPI32.dll' fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\kernel32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\kernel32.dll (Input=kernel32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000001b0a91: [calling] fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=0000000076d80000 'C:\Windows\system32\kernel32.dll' fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. fcc.1044: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\profapi.dll) fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\profapi.dll fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\profapi.dll (Input=profapi.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000001b0161: [calling] fcc.1044: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\profapi.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedDllNotificationCallback: load 000007fefcb90000 LB 0x0000f000 C:\Windows\system32\profapi.dll [fFlags=0x0] fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\profapi.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefcb90000 'C:\Windows\system32\profapi.dll' fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'ole32.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'imm32.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'winmm.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'oleaut32.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'shell32.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'advapi32.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'qt5guivbox.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'qt5corevbox.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'msvcr100.dll'. fcc.1044: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\platforms\qwindows.dll) fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\platforms\qwindows.dll fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume2\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\shell32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume2\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\oleaut32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume2\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\winmm.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume2\Windows\System32\imm32.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\imm32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\ole32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000001b2451: [calling] fcc.1044: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\platforms\qwindows.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedDllNotificationCallback: load 000007fef2750000 LB 0x0012e000 C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll [fFlags=0x0] fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\platforms\qwindows.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef2750000 'C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll' fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptbase.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\CRYPTBASE.dll (Input=CRYPTBASE.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000001b2381: [calling] fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefca30000 'C:\Windows\system32\CRYPTBASE.dll' fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'user32.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'gdi32.dll'. fcc.1044: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\uxtheme.dll) fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\uxtheme.dll fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000001b1e51: [calling] fcc.1044: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\uxtheme.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedDllNotificationCallback: load 000007fefb0c0000 LB 0x00056000 C:\Windows\system32\uxtheme.dll [fFlags=0x0] fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\uxtheme.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefb0c0000 'C:\Windows\system32\uxtheme.dll' fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\uxtheme.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000001b1891: [calling] fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefb0c0000 'C:\Windows\system32\uxtheme.dll' fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=0000000076c80000 'C:\Windows\system32\user32.dll' fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\shell32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000001b2691: [calling] fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefd6c0000 'C:\Windows\system32\shell32.dll' fcc.1044: supR3HardenedMonitor_LdrLoadDll: error opening 'C:\Windows\system32\wintab32.dll': 127 (NtPath=\??\C:\Windows\system32\wintab32.dll; Input=C:\Windows\system32\wintab32.dll; rcNtGetDll=0x0 fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000034 'C:\Windows\system32\wintab32.dll' fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\dwmapi.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\dwmapi.dll (Input=dwmapi.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000001b1d31: [calling] fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefb040000 'C:\Windows\system32\dwmapi.dll' fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\winmm.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\winmm.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000001b2ab1: [calling] fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefb120000 'C:\Windows\system32\winmm.dll' fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\winmm.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\winmm.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000001b2ab1: [calling] fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefb120000 'C:\Windows\system32\winmm.dll' fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\shell32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000001b2d91: [calling] fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefd6c0000 'C:\Windows\system32\shell32.dll' fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\uxtheme.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000001b2d61: [calling] fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefb0c0000 'C:\Windows\system32\uxtheme.dll' fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefd650000 'C:\Windows\system32\gdi32.dll' fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefcf50000 'C:\Windows\system32\rpcrt4.dll' fcc.1044: supR3HardenedIsApiSetDll: '' -> true fcc.1044: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-Win-Security-LSALookup-L1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=00000000001b1901: [calling] fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefee50000 'API-MS-Win-Security-LSALookup-L1-1-0.dll' fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefec90000 'C:\Windows\system32\ADVAPI32.dll' fcc.1044: supR3HardenedIsApiSetDll: '' -> true fcc.1044: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-Win-Security-LSALookup-L1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=00000000001b21c1: [calling] fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefee50000 'API-MS-Win-Security-LSALookup-L1-1-0.dll' fcc.1044: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\cryptsp.dll) fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\cryptsp.dll fcc.1044: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\CRYPTSP.dll (Input=CRYPTSP.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000001b2401: [calling] fcc.1044: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptsp.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedDllNotificationCallback: load 000007fefc5b0000 LB 0x00018000 C:\Windows\system32\CRYPTSP.dll [fFlags=0x0] fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptsp.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefc5b0000 'C:\Windows\system32\CRYPTSP.dll' fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. fcc.1044: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\rsaenh.dll) fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\rsaenh.dll fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000001b2311: [calling] fcc.1044: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rsaenh.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedDllNotificationCallback: load 000007fefc110000 LB 0x00047000 C:\Windows\system32\rsaenh.dll [fFlags=0x0] fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rsaenh.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefc110000 'C:\Windows\system32\rsaenh.dll' fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefec90000 'C:\Windows\system32\ADVAPI32.dll' fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptbase.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\CRYPTBASE.dll (Input=CRYPTBASE.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000001b1f21: [calling] fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefca30000 'C:\Windows\system32\CRYPTBASE.dll' fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'rpcrt4.dll'. fcc.1044: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\RpcRtRemote.dll) fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\RpcRtRemote.dll fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\RpcRtRemote.dll (Input=RpcRtRemote.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000001b1fc1: [calling] fcc.1044: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\RpcRtRemote.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedDllNotificationCallback: load 000007fefcae0000 LB 0x00014000 C:\Windows\system32\RpcRtRemote.dll [fFlags=0x0] fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\RpcRtRemote.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefcae0000 'C:\Windows\system32\RpcRtRemote.dll' fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\winmm.dll [lacks WinVerifyTrust] fcc.d9c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\WINMM.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=000000000353f4d1: [calling] fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefb120000 'C:\Windows\system32\WINMM.dll' fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\ole32.dll [lacks WinVerifyTrust] fcc.d9c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\ole32.dll (Input=ole32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=000000000353f831: [calling] fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefd120000 'C:\Windows\system32\ole32.dll' fcc.d9c: supR3HardenedIsApiSetDll: '' -> true fcc.d9c: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-WIN-Service-Management-L1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=000000000353f411: [calling] fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefee50000 'API-MS-WIN-Service-Management-L1-1-0.dll' fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\ole32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\ole32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000001b1c21: [calling] fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefd120000 'C:\Windows\system32\ole32.dll' fcc.d9c: supR3HardenedIsApiSetDll: '' -> true fcc.d9c: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-WIN-Service-winsvc-L1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=000000000353f411: [calling] fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefee50000 'API-MS-WIN-Service-winsvc-L1-1-0.dll' fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefcf50000 'C:\Windows\system32\RPCRT4.dll' fcc.d9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. fcc.d9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'user32.dll'. fcc.d9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'rpcrt4.dll'. fcc.d9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'propsys.dll'. fcc.d9c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\MMDevAPI.dll) fcc.d9c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\MMDevAPI.dll fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'propsys.dll'... fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'propsys.dll' -> '\Device\HarddiskVolume2\Windows\System32\propsys.dll' [rcNtRedir=0xc0150008] fcc.d9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. fcc.d9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ole32.dll'. fcc.d9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'oleaut32.dll'. fcc.d9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'user32.dll'. fcc.d9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'rpcrt4.dll'. fcc.d9c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\propsys.dll) fcc.d9c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\propsys.dll fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008] fcc.d9c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] fcc.d9c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust] fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] fcc.d9c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008] fcc.d9c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] fcc.d9c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust] fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'... fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume2\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008] fcc.d9c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\oleaut32.dll [lacks WinVerifyTrust] fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'... fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008] fcc.d9c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\ole32.dll [lacks WinVerifyTrust] fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] fcc.d9c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] fcc.d9c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\MMDevAPI.DLL (Input=MMDevAPI.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=000000000353f471: [calling] fcc.d9c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust] fcc.d9c: supR3HardenedDllNotificationCallback: load 000007fefb9a0000 LB 0x0004b000 C:\Windows\system32\MMDevAPI.DLL [fFlags=0x0] fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust] fcc.d9c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\propsys.dll [lacks WinVerifyTrust] fcc.d9c: supR3HardenedDllNotificationCallback: load 000007fefb870000 LB 0x0012c000 C:\Windows\system32\PROPSYS.dll [fFlags=0x0] fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\propsys.dll [lacks WinVerifyTrust] fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust] fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefec90000 'C:\Windows\system32\ADVAPI32.dll' fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefb9a0000 'C:\Windows\system32\MMDevAPI.DLL' fcc.d9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. fcc.d9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'advapi32.dll'. fcc.d9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'ole32.dll'. fcc.d9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'user32.dll'. fcc.d9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'winmm.dll'. fcc.d9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'ksuser.dll'. fcc.d9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'mmdevapi.dll'. fcc.d9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'avrt.dll'. fcc.d9c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\wdmaud.drv) fcc.d9c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\wdmaud.drv fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'avrt.dll'... fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'avrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\avrt.dll' [rcNtRedir=0xc0150008] fcc.d9c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\avrt.dll) fcc.d9c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\avrt.dll fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mmdevapi.dll'... fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'mmdevapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\mmdevapi.dll' [rcNtRedir=0xc0150008] fcc.d9c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust] fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ksuser.dll'... fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ksuser.dll' -> '\Device\HarddiskVolume2\Windows\System32\ksuser.dll' [rcNtRedir=0xc0150008] fcc.d9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. fcc.d9c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\ksuser.dll) fcc.d9c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\ksuser.dll fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'... fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume2\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008] fcc.d9c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\winmm.dll [lacks WinVerifyTrust] fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] fcc.d9c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust] fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'... fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008] fcc.d9c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\ole32.dll [lacks WinVerifyTrust] fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'... fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008] fcc.d9c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust] fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] fcc.d9c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] fcc.d9c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] fcc.d9c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=000000000353efe1: [calling] fcc.d9c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv [lacks WinVerifyTrust] fcc.d9c: supR3HardenedDllNotificationCallback: load 000007fef4c80000 LB 0x0003b000 C:\Windows\system32\wdmaud.drv [fFlags=0x0] fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv [lacks WinVerifyTrust] fcc.d9c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\ksuser.dll [lacks WinVerifyTrust] fcc.d9c: supR3HardenedDllNotificationCallback: load 0000000074840000 LB 0x00006000 C:\Windows\system32\ksuser.dll [fFlags=0x0] fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\ksuser.dll [lacks WinVerifyTrust] fcc.d9c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\avrt.dll [lacks WinVerifyTrust] fcc.d9c: supR3HardenedDllNotificationCallback: load 000007fefb830000 LB 0x00009000 C:\Windows\system32\AVRT.dll [fFlags=0x0] fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\avrt.dll [lacks WinVerifyTrust] fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef4c80000 'C:\Windows\system32\wdmaud.drv' fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv [lacks WinVerifyTrust] fcc.d9c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=000000000353efe1: [calling] fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef4c80000 'C:\Windows\system32\wdmaud.drv' fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\ole32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefd120000 'C:\Windows\system32\ole32.dll' fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'ole32.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'advapi32.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'oleaut32.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'rpcrt4.dll'. fcc.1044: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\clbcatq.dll) fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\clbcatq.dll fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume2\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\oleaut32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\ole32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\CLBCatQ.DLL (Input=CLBCatQ.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000001b11e1: [calling] fcc.1044: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\clbcatq.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedDllNotificationCallback: load 000007fefd080000 LB 0x00099000 C:\Windows\system32\CLBCatQ.DLL [fFlags=0x0] fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\clbcatq.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefd080000 'C:\Windows\system32\CLBCatQ.DLL' fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msctf.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\MSCTF.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000001b24f1: [calling] fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefe800000 'C:\Windows\system32\MSCTF.dll' fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv [lacks WinVerifyTrust] fcc.d9c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=000000000353f191: [calling] fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef4c80000 'C:\Windows\system32\wdmaud.drv' fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust] fcc.d9c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\MMDEVAPI.DLL (Input=MMDEVAPI.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=000000000353f321: [calling] fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefb9a0000 'C:\Windows\system32\MMDEVAPI.DLL' fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\ole32.dll [lacks WinVerifyTrust] fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefd120000 'C:\Windows\system32\ole32.dll' fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\setupapi.dll [lacks WinVerifyTrust] fcc.d9c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\SETUPAPI.dll (Input=SETUPAPI.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=000000000353f0c1: [calling] fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefefd0000 'C:\Windows\system32\SETUPAPI.dll' fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv [lacks WinVerifyTrust] fcc.d9c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=000000000353f191: [calling] fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef4c80000 'C:\Windows\system32\wdmaud.drv' fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv [lacks WinVerifyTrust] fcc.d9c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=000000000353f191: [calling] fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef4c80000 'C:\Windows\system32\wdmaud.drv' fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\shlwapi.dll [lacks WinVerifyTrust] fcc.d9c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\SHLWAPI.dll (Input=SHLWAPI.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=000000000353ea61: [calling] fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefec10000 'C:\Windows\system32\SHLWAPI.dll' fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\ole32.dll [lacks WinVerifyTrust] fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefd120000 'C:\Windows\system32\ole32.dll' fcc.d9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. fcc.d9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'advapi32.dll'. fcc.d9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'ole32.dll'. fcc.d9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'oleaut32.dll'. fcc.d9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'user32.dll'. fcc.d9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'rpcrt4.dll'. fcc.d9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'mmdevapi.dll'. fcc.d9c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\AudioSes.dll) fcc.d9c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\AudioSes.dll fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mmdevapi.dll'... fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'mmdevapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\mmdevapi.dll' [rcNtRedir=0xc0150008] fcc.d9c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust] fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008] fcc.d9c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] fcc.d9c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust] fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'... fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume2\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008] fcc.d9c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\oleaut32.dll [lacks WinVerifyTrust] fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'... fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008] fcc.d9c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\ole32.dll [lacks WinVerifyTrust] fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'... fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008] fcc.d9c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust] fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] fcc.d9c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] fcc.d9c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\AUDIOSES.DLL (Input=AUDIOSES.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=000000000353f1a1: [calling] fcc.d9c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\AudioSes.dll [lacks WinVerifyTrust] fcc.d9c: supR3HardenedDllNotificationCallback: load 000007fefac00000 LB 0x0004f000 C:\Windows\system32\AUDIOSES.DLL [fFlags=0x0] fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\AudioSes.dll [lacks WinVerifyTrust] fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefac00000 'C:\Windows\system32\AUDIOSES.DLL' fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv [lacks WinVerifyTrust] fcc.d9c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=000000000353f191: [calling] fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef4c80000 'C:\Windows\system32\wdmaud.drv' fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv [lacks WinVerifyTrust] fcc.d9c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=000000000353f191: [calling] fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef4c80000 'C:\Windows\system32\wdmaud.drv' fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv [lacks WinVerifyTrust] fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef4c80000 'C:\Windows\system32\wdmaud.drv' fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv [lacks WinVerifyTrust] fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef4c80000 'C:\Windows\system32\wdmaud.drv' fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv [lacks WinVerifyTrust] fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef4c80000 'C:\Windows\system32\wdmaud.drv' fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv [lacks WinVerifyTrust] fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef4c80000 'C:\Windows\system32\wdmaud.drv' fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv [lacks WinVerifyTrust] fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef4c80000 'C:\Windows\system32\wdmaud.drv' fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv [lacks WinVerifyTrust] fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef4c80000 'C:\Windows\system32\wdmaud.drv' fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv [lacks WinVerifyTrust] fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef4c80000 'C:\Windows\system32\wdmaud.drv' fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv [lacks WinVerifyTrust] fcc.d9c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=000000000353f191: [calling] fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef4c80000 'C:\Windows\system32\wdmaud.drv' fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv [lacks WinVerifyTrust] fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef4c80000 'C:\Windows\system32\wdmaud.drv' fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv [lacks WinVerifyTrust] fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef4c80000 'C:\Windows\system32\wdmaud.drv' fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv [lacks WinVerifyTrust] fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef4c80000 'C:\Windows\system32\wdmaud.drv' fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv [lacks WinVerifyTrust] fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef4c80000 'C:\Windows\system32\wdmaud.drv' fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv [lacks WinVerifyTrust] fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef4c80000 'C:\Windows\system32\wdmaud.drv' fcc.d9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. fcc.d9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'. fcc.d9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'winmm.dll'. fcc.d9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'msacm32.dll'. fcc.d9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'mmdevapi.dll'. fcc.d9c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\msacm32.drv) fcc.d9c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\msacm32.drv fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mmdevapi.dll'... fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'mmdevapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\mmdevapi.dll' [rcNtRedir=0xc0150008] fcc.d9c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust] fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msacm32.dll'... fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msacm32.dll' -> '\Device\HarddiskVolume2\Windows\System32\msacm32.dll' [rcNtRedir=0xc0150008] fcc.d9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. fcc.d9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'advapi32.dll'. fcc.d9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'. fcc.d9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'gdi32.dll'. fcc.d9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'winmm.dll'. fcc.d9c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\msacm32.dll) fcc.d9c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\msacm32.dll fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'... fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume2\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008] fcc.d9c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\winmm.dll [lacks WinVerifyTrust] fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] fcc.d9c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust] fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] fcc.d9c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'... fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume2\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008] fcc.d9c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\winmm.dll [lacks WinVerifyTrust] fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008] fcc.d9c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust] fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] fcc.d9c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust] fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'... fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008] fcc.d9c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust] fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] fcc.d9c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] fcc.d9c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=000000000353ef91: [calling] fcc.d9c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msacm32.drv [lacks WinVerifyTrust] fcc.d9c: supR3HardenedDllNotificationCallback: load 000007fef4c70000 LB 0x0000a000 C:\Windows\system32\msacm32.drv [fFlags=0x0] fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msacm32.drv [lacks WinVerifyTrust] fcc.d9c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msacm32.dll [lacks WinVerifyTrust] fcc.d9c: supR3HardenedDllNotificationCallback: load 000007fef4c50000 LB 0x00018000 C:\Windows\system32\MSACM32.dll [fFlags=0x0] fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msacm32.dll [lacks WinVerifyTrust] fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef4c70000 'C:\Windows\system32\msacm32.drv' fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msacm32.drv [lacks WinVerifyTrust] fcc.d9c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=000000000353e991: [calling] fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef4c70000 'C:\Windows\system32\msacm32.drv' fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msacm32.drv [lacks WinVerifyTrust] fcc.d9c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=000000000353e991: [calling] fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef4c70000 'C:\Windows\system32\msacm32.drv' fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msacm32.drv [lacks WinVerifyTrust] fcc.d9c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=000000000353e991: [calling] fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef4c70000 'C:\Windows\system32\msacm32.drv' fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msacm32.drv [lacks WinVerifyTrust] fcc.d9c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=000000000353e991: [calling] fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef4c70000 'C:\Windows\system32\msacm32.drv' fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msacm32.drv [lacks WinVerifyTrust] fcc.d9c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=000000000353e991: [calling] fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef4c70000 'C:\Windows\system32\msacm32.drv' fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msacm32.drv [lacks WinVerifyTrust] fcc.d9c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=000000000353e991: [calling] fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef4c70000 'C:\Windows\system32\msacm32.drv' fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msacm32.drv [lacks WinVerifyTrust] fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef4c70000 'C:\Windows\system32\msacm32.drv' fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msacm32.drv [lacks WinVerifyTrust] fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef4c70000 'C:\Windows\system32\msacm32.drv' fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msacm32.drv [lacks WinVerifyTrust] fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef4c70000 'C:\Windows\system32\msacm32.drv' fcc.d9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. fcc.d9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'. fcc.d9c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'winmm.dll'. fcc.d9c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\midimap.dll) fcc.d9c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\midimap.dll fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'... fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume2\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008] fcc.d9c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\winmm.dll [lacks WinVerifyTrust] fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] fcc.d9c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust] fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... fcc.d9c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] fcc.d9c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] fcc.d9c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=000000000353ef91: [calling] fcc.d9c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\midimap.dll [lacks WinVerifyTrust] fcc.d9c: supR3HardenedDllNotificationCallback: load 000007fef4c40000 LB 0x00009000 C:\Windows\system32\midimap.dll [fFlags=0x0] fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\midimap.dll [lacks WinVerifyTrust] fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef4c40000 'C:\Windows\system32\midimap.dll' fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\midimap.dll [lacks WinVerifyTrust] fcc.d9c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=000000000353e961: [calling] fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef4c40000 'C:\Windows\system32\midimap.dll' fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\midimap.dll [lacks WinVerifyTrust] fcc.d9c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=000000000353e961: [calling] fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef4c40000 'C:\Windows\system32\midimap.dll' fcc.d9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\midimap.dll [lacks WinVerifyTrust] fcc.d9c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=000000000353ef91: [calling] fcc.d9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef4c40000 'C:\Windows\system32\midimap.dll' fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\winmm.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefb120000 'C:\Windows\system32\WINMM.dll' fcc.a3c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\AudioSes.dll [lacks WinVerifyTrust] fcc.a3c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\audioses.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000003b4d801: [calling] fcc.a3c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefac00000 'C:\Windows\System32\audioses.dll' fcc.f9c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll [lacks WinVerifyTrust] fcc.f9c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\CFGMGR32.dll (Input=CFGMGR32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000003f8f981: [calling] fcc.f9c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefcf10000 'C:\Windows\system32\CFGMGR32.dll' fcc.a3c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\oleaut32.dll [lacks WinVerifyTrust] fcc.a3c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\OLEAUT32.dll (Input=OLEAUT32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000003b4f551: [calling] fcc.a3c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefe720000 'C:\Windows\system32\OLEAUT32.dll' fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'crypt32.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msasn1.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'rpcrt4.dll'. fcc.1044: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\wintrust.dll) fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\wintrust.dll fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msasn1.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'msasn1.dll' -> '\Device\HarddiskVolume2\Windows\System32\msasn1.dll' [rcNtRedir=0xc0150008] fcc.1044: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\msasn1.dll) fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\msasn1.dll fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'crypt32.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'crypt32.dll' -> '\Device\HarddiskVolume2\Windows\System32\crypt32.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. fcc.1044: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msasn1.dll'. fcc.1044: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\crypt32.dll) fcc.1044: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\crypt32.dll fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msasn1.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'msasn1.dll' -> '\Device\HarddiskVolume2\Windows\System32\msasn1.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msasn1.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... fcc.1044: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] fcc.1044: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\WINTRUST.dll (Input=WINTRUST.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000001b2871: [calling] fcc.1044: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wintrust.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedDllNotificationCallback: load 000007fefcc30000 LB 0x0003b000 C:\Windows\system32\WINTRUST.dll [fFlags=0x0] fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wintrust.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedDllNotificationCallback: load 000007fefcc80000 LB 0x0016d000 C:\Windows\system32\CRYPT32.dll [fFlags=0x0] fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\crypt32.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedDllNotificationCallback: load 000007fefcba0000 LB 0x0000f000 C:\Windows\system32\MSASN1.dll [fFlags=0x0] fcc.1044: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msasn1.dll [lacks WinVerifyTrust] fcc.1044: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefcc30000 'C:\Windows\system32\WINTRUST.dll' f2c.a24: supR3HardNtChildWaitFor[1]: Quitting: ExitCode=0x1 (rcNtWait=0x0, rcNt1=0x0, rcNt2=0x103, rcNt3=0x103, 15165 ms, the end);