3b0c.3ea4: Log file opened: 6.1.14r140239 g_hStartupLog=00000000000000fc g_uNtVerCombined=0xa04a6100 3b0c.3ea4: \SystemRoot\System32\ntdll.dll: 3b0c.3ea4: CreationTime: 2020-09-11T15:15:58.871763000Z 3b0c.3ea4: LastWriteTime: 2020-09-11T15:15:58.926448400Z 3b0c.3ea4: ChangeTime: 2020-10-16T18:08:39.615134000Z 3b0c.3ea4: FileAttributes: 0x20 3b0c.3ea4: Size: 0x1ee118 3b0c.3ea4: NT Headers: 0xe8 3b0c.3ea4: Timestamp: 0x70e69bad 3b0c.3ea4: Machine: 0x8664 - amd64 3b0c.3ea4: Timestamp: 0x70e69bad 3b0c.3ea4: Image Version: 10.0 3b0c.3ea4: SizeOfImage: 0x1f5000 (2052096) 3b0c.3ea4: Resource Dir: 0x184000 LB 0x6fd28 3b0c.3ea4: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)] 3b0c.3ea4: [Raw version resource data: 0x1840f0 LB 0x380, codepage 0x0 (reserved 0x0)] 3b0c.3ea4: ProductName: Microsoft® Windows® Operating System 3b0c.3ea4: ProductVersion: 10.0.19041.488 3b0c.3ea4: FileVersion: 10.0.19041.488 (WinBuild.160101.0800) 3b0c.3ea4: FileDescription: NT Layer DLL 3b0c.3ea4: \SystemRoot\System32\kernel32.dll: 3b0c.3ea4: CreationTime: 2020-09-08T12:27:58.037300300Z 3b0c.3ea4: LastWriteTime: 2020-09-08T12:27:58.037300300Z 3b0c.3ea4: ChangeTime: 2020-10-16T18:08:28.099077800Z 3b0c.3ea4: FileAttributes: 0x20 3b0c.3ea4: Size: 0xbaa28 3b0c.3ea4: NT Headers: 0xf0 3b0c.3ea4: Timestamp: 0x73317569 3b0c.3ea4: Machine: 0x8664 - amd64 3b0c.3ea4: Timestamp: 0x73317569 3b0c.3ea4: Image Version: 10.0 3b0c.3ea4: SizeOfImage: 0xbd000 (774144) 3b0c.3ea4: Resource Dir: 0xbb000 LB 0x520 3b0c.3ea4: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)] 3b0c.3ea4: [Raw version resource data: 0xbb0b0 LB 0x3a4, codepage 0x0 (reserved 0x0)] 3b0c.3ea4: ProductName: Microsoft® Windows® Operating System 3b0c.3ea4: ProductVersion: 10.0.19041.292 3b0c.3ea4: FileVersion: 10.0.19041.292 (WinBuild.160101.0800) 3b0c.3ea4: FileDescription: Windows NT BASE API Client DLL 3b0c.3ea4: \SystemRoot\System32\KernelBase.dll: 3b0c.3ea4: CreationTime: 2020-09-11T15:15:59.958644000Z 3b0c.3ea4: LastWriteTime: 2020-09-11T15:16:00.043895200Z 3b0c.3ea4: ChangeTime: 2020-10-16T18:08:28.161564000Z 3b0c.3ea4: FileAttributes: 0x20 3b0c.3ea4: Size: 0x2c8950 3b0c.3ea4: NT Headers: 0xf0 3b0c.3ea4: Timestamp: 0x5b4a3325 3b0c.3ea4: Machine: 0x8664 - amd64 3b0c.3ea4: Timestamp: 0x5b4a3325 3b0c.3ea4: Image Version: 10.0 3b0c.3ea4: SizeOfImage: 0x2c7000 (2912256) 3b0c.3ea4: Resource Dir: 0x29e000 LB 0x548 3b0c.3ea4: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)] 3b0c.3ea4: [Raw version resource data: 0x29e0b0 LB 0x3bc, codepage 0x0 (reserved 0x0)] 3b0c.3ea4: ProductName: Microsoft® Windows® Operating System 3b0c.3ea4: ProductVersion: 10.0.19041.488 3b0c.3ea4: FileVersion: 10.0.19041.488 (WinBuild.160101.0800) 3b0c.3ea4: FileDescription: Windows NT BASE API Client DLL 3b0c.3ea4: \SystemRoot\System32\apisetschema.dll: 3b0c.3ea4: CreationTime: 2019-12-07T09:08:13.518339400Z 3b0c.3ea4: LastWriteTime: 2019-12-07T09:08:13.518339400Z 3b0c.3ea4: ChangeTime: 2020-10-16T18:08:00.411559000Z 3b0c.3ea4: FileAttributes: 0x20 3b0c.3ea4: Size: 0x1f538 3b0c.3ea4: NT Headers: 0xd0 3b0c.3ea4: Timestamp: 0x31288ce0 3b0c.3ea4: Machine: 0x8664 - amd64 3b0c.3ea4: Timestamp: 0x31288ce0 3b0c.3ea4: Image Version: 10.0 3b0c.3ea4: SizeOfImage: 0x20000 (131072) 3b0c.3ea4: Resource Dir: 0x1f000 LB 0x408 3b0c.3ea4: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)] 3b0c.3ea4: [Raw version resource data: 0x1f060 LB 0x3a8, codepage 0x0 (reserved 0x0)] 3b0c.3ea4: ProductName: Microsoft® Windows® Operating System 3b0c.3ea4: ProductVersion: 10.0.19041.1 3b0c.3ea4: FileVersion: 10.0.19041.1 (WinBuild.160101.0800) 3b0c.3ea4: FileDescription: ApiSet Schema DLL 3b0c.3ea4: NtOpenDirectoryObject failed on \Driver: 0xc0000022 3b0c.3ea4: supR3HardenedWinFindAdversaries: 0x0 3b0c.3ea4: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox' 3b0c.3ea4: Calling main() 3b0c.3ea4: SUPR3HardenedMain: pszProgName=VirtualBoxVM fFlags=0x2 3b0c.3ea4: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox' 3b0c.3ea4: SUPR3HardenedMain: Respawn #1 3b0c.3ea4: System32: \Device\HarddiskVolume5\Windows\System32 3b0c.3ea4: WinSxS: \Device\HarddiskVolume5\Windows\WinSxS 3b0c.3ea4: KnownDllPath: C:\WINDOWS\System32 3b0c.3ea4: supR3HardenedWinInit: Performing a limited self purification... 3b0c.3ea4: supHardNtVpScanVirtualMemory: enmKind=SELF_PURIFICATION 3b0c.3ea4: *0000000000000000-000000000096ffff 0x0001/0x0000 0x0000000 3b0c.3ea4: *0000000000970000-000000000097ffff 0x0004/0x0004 0x0040000 3b0c.3ea4: *0000000000980000-0000000000982fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\sfc.dll 3b0c.3ea4: 0000000000983000-000000000098ffff 0x0001/0x0000 0x0000000 3b0c.3ea4: *0000000000990000-00000000009acfff 0x0002/0x0002 0x0040000 3b0c.3ea4: 00000000009ad000-00000000009affff 0x0001/0x0000 0x0000000 3b0c.3ea4: *00000000009b0000-00000000009b3fff 0x0002/0x0002 0x0040000 3b0c.3ea4: 00000000009b4000-00000000009bffff 0x0001/0x0000 0x0000000 3b0c.3ea4: *00000000009c0000-00000000009c1fff 0x0004/0x0004 0x0020000 3b0c.3ea4: 00000000009c2000-00000000009cffff 0x0001/0x0000 0x0000000 3b0c.3ea4: *00000000009d0000-00000000009d0fff 0x0002/0x0002 0x0040000 3b0c.3ea4: 00000000009d1000-00000000009dffff 0x0001/0x0000 0x0000000 3b0c.3ea4: *00000000009e0000-00000000009e0fff 0x0002/0x0002 0x0040000 3b0c.3ea4: 00000000009e1000-00000000009effff 0x0001/0x0000 0x0000000 3b0c.3ea4: *00000000009f0000-00000000009f0fff 0x0002/0x0002 0x0040000 3b0c.3ea4: 00000000009f1000-00000000009fffff 0x0001/0x0000 0x0000000 3b0c.3ea4: *0000000000a00000-0000000000a7ffff 0x0000/0x0004 0x0020000 3b0c.3ea4: 0000000000a80000-0000000000a82fff 0x0004/0x0004 0x0020000 3b0c.3ea4: 0000000000a83000-0000000000bfffff 0x0000/0x0004 0x0020000 3b0c.3ea4: *0000000000c00000-0000000000cb8fff 0x0000/0x0004 0x0020000 3b0c.3ea4: 0000000000cb9000-0000000000cbbfff 0x0104/0x0004 0x0020000 3b0c.3ea4: 0000000000cbc000-0000000000cfffff 0x0004/0x0004 0x0020000 3b0c.3ea4: *0000000000d00000-0000000000d01fff 0x0004/0x0004 0x0020000 3b0c.3ea4: 0000000000d02000-0000000000d31fff 0x0000/0x0004 0x0020000 3b0c.3ea4: 0000000000d32000-0000000000d3ffff 0x0001/0x0000 0x0000000 3b0c.3ea4: *0000000000d40000-0000000000d43fff 0x0002/0x0002 0x0040000 3b0c.3ea4: 0000000000d44000-0000000000d47fff 0x0000/0x0002 0x0040000 3b0c.3ea4: 0000000000d48000-0000000000d4ffff 0x0001/0x0000 0x0000000 3b0c.3ea4: *0000000000d50000-0000000000d85fff 0x0004/0x0004 0x0020000 3b0c.3ea4: 0000000000d86000-0000000000e4ffff 0x0000/0x0004 0x0020000 3b0c.3ea4: *0000000000e50000-0000000000f18fff 0x0002/0x0002 0x0040000 3b0c.3ea4: 0000000000f19000-0000000000f1ffff 0x0001/0x0000 0x0000000 3b0c.3ea4: *0000000000f20000-0000000000f20fff 0x0004/0x0004 0x0020000 3b0c.3ea4: 0000000000f21000-0000000000f51fff 0x0000/0x0004 0x0020000 3b0c.3ea4: 0000000000f52000-0000000000f5ffff 0x0001/0x0000 0x0000000 3b0c.3ea4: *0000000000f60000-0000000000f61fff 0x0004/0x0004 0x0020000 3b0c.3ea4: 0000000000f62000-0000000000f91fff 0x0000/0x0004 0x0020000 3b0c.3ea4: 0000000000f92000-0000000000f9ffff 0x0001/0x0000 0x0000000 3b0c.3ea4: *0000000000fa0000-0000000000fa6fff 0x0004/0x0004 0x0020000 3b0c.3ea4: 0000000000fa7000-0000000000faffff 0x0000/0x0004 0x0020000 3b0c.3ea4: *0000000000fb0000-000000000127efff 0x0002/0x0002 0x0040000 3b0c.3ea4: 000000000127f000-000000000127ffff 0x0001/0x0000 0x0000000 3b0c.3ea4: *0000000001280000-0000000001290fff 0x0002/0x0002 0x0040000 3b0c.3ea4: 0000000001291000-000000000147ffff 0x0000/0x0002 0x0040000 3b0c.3ea4: *0000000001480000-0000000001600fff 0x0002/0x0002 0x0040000 3b0c.3ea4: 0000000001601000-000000000160ffff 0x0001/0x0000 0x0000000 3b0c.3ea4: *0000000001610000-0000000001690fff 0x0002/0x0002 0x0040000 3b0c.3ea4: 0000000001691000-0000000002a10fff 0x0000/0x0002 0x0040000 3b0c.3ea4: 0000000002a11000-0000000002b0ffff 0x0001/0x0000 0x0000000 3b0c.3ea4: *0000000002b10000-0000000002b1efff 0x0004/0x0004 0x0020000 3b0c.3ea4: 0000000002b1f000-0000000002b1ffff 0x0000/0x0004 0x0020000 3b0c.3ea4: *0000000002b20000-0000000002b2afff 0x0000/0x0004 0x0020000 3b0c.3ea4: 0000000002b2b000-0000000002d20fff 0x0004/0x0004 0x0020000 3b0c.3ea4: 0000000002d21000-0000000002d21fff 0x0000/0x0004 0x0020000 3b0c.3ea4: 0000000002d22000-0000000002d2ffff 0x0001/0x0000 0x0000000 3b0c.3ea4: *0000000002d30000-0000000002d4cfff 0x0004/0x0004 0x0020000 3b0c.3ea4: 0000000002d4d000-0000000002e2ffff 0x0000/0x0004 0x0020000 3b0c.3ea4: 0000000002e30000-000000007ffdffff 0x0001/0x0000 0x0000000 3b0c.3ea4: *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000 3b0c.3ea4: 000000007ffe1000-000000007ffe9fff 0x0001/0x0000 0x0000000 3b0c.3ea4: *000000007ffea000-000000007ffeafff 0x0002/0x0002 0x0020000 3b0c.3ea4: 000000007ffeb000-00007ff42a3cffff 0x0001/0x0000 0x0000000 3b0c.3ea4: *00007ff42a3d0000-00007ff42a3d4fff 0x0002/0x0002 0x0040000 3b0c.3ea4: 00007ff42a3d5000-00007ff42a4cffff 0x0000/0x0002 0x0040000 3b0c.3ea4: *00007ff42a4d0000-00007ff52a4effff 0x0000/0x0004 0x0020000 3b0c.3ea4: *00007ff52a4f0000-00007ff52c4effff 0x0000/0x0004 0x0020000 3b0c.3ea4: 00007ff52c4f0000-00007ff52c4f0fff 0x0004/0x0004 0x0020000 3b0c.3ea4: 00007ff52c4f1000-00007ff52c4fffff 0x0001/0x0000 0x0000000 3b0c.3ea4: *00007ff52c500000-00007ff52c500fff 0x0002/0x0002 0x0040000 3b0c.3ea4: 00007ff52c501000-00007ff52c50ffff 0x0001/0x0000 0x0000000 3b0c.3ea4: *00007ff52c510000-00007ff52c532fff 0x0002/0x0002 0x0040000 3b0c.3ea4: 00007ff52c533000-00007ff71ae2ffff 0x0001/0x0000 0x0000000 3b0c.3ea4: *00007ff71ae30000-00007ff71ae30fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe 3b0c.3ea4: 00007ff71ae31000-00007ff71aea6fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe 3b0c.3ea4: 00007ff71aea7000-00007ff71aea7fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe 3b0c.3ea4: 00007ff71aea8000-00007ff71aeeffff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe 3b0c.3ea4: 00007ff71aef0000-00007ff71aef2fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe 3b0c.3ea4: 00007ff71aef3000-00007ff71aef5fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe 3b0c.3ea4: 00007ff71aef6000-00007ff71aef8fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe 3b0c.3ea4: 00007ff71aef9000-00007ff71aef9fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe 3b0c.3ea4: 00007ff71aefa000-00007ff71aefbfff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe 3b0c.3ea4: 00007ff71aefc000-00007ff71aefcfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe 3b0c.3ea4: 00007ff71aefd000-00007ff71af45fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe 3b0c.3ea4: 00007ff71af46000-00007ffbbddeffff 0x0001/0x0000 0x0000000 3b0c.3ea4: *00007ffbbddf0000-00007ffbbddf0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\AcLayers.dll 3b0c.3ea4: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ffbbddf0000 LB 0x1000 (base 00007ffbbddf0000) - 'AcLayers.dll' 3b0c.3ea4: 00007ffbbddf1000-00007ffbbde1afff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\AcLayers.dll 3b0c.3ea4: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ffbbddf1000 LB 0x2a000 (base 00007ffbbddf0000) - 'AcLayers.dll' 3b0c.3ea4: 00007ffbbde1b000-00007ffbbde37fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\AcLayers.dll 3b0c.3ea4: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ffbbde1b000 LB 0x1d000 (base 00007ffbbddf0000) - 'AcLayers.dll' 3b0c.3ea4: 00007ffbbde38000-00007ffbbde38fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\AcLayers.dll 3b0c.3ea4: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ffbbde38000 LB 0x1000 (base 00007ffbbddf0000) - 'AcLayers.dll' 3b0c.3ea4: 00007ffbbde39000-00007ffbbde3afff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\AcLayers.dll 3b0c.3ea4: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ffbbde39000 LB 0x2000 (base 00007ffbbddf0000) - 'AcLayers.dll' 3b0c.3ea4: 00007ffbbde3b000-00007ffbbde42fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\AcLayers.dll 3b0c.3ea4: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ffbbde3b000 LB 0x8000 (base 00007ffbbddf0000) - 'AcLayers.dll' 3b0c.3ea4: 00007ffbbde43000-00007ffbbe27dfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\AcLayers.dll 3b0c.3ea4: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ffbbde43000 LB 0x43b000 (base 00007ffbbddf0000) - 'AcLayers.dll' 3b0c.3ea4: 00007ffbbe27e000-00007ffbbe27ffff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\AcLayers.dll 3b0c.3ea4: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ffbbe27e000 LB 0x2000 (base 00007ffbbddf0000) - 'AcLayers.dll' 3b0c.3ea4: 00007ffbbe280000-00007ffbbe283fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\AcLayers.dll 3b0c.3ea4: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ffbbe280000 LB 0x4000 (base 00007ffbbddf0000) - 'AcLayers.dll' 3b0c.3ea4: 00007ffbbe284000-00007ffbeb95ffff 0x0001/0x0000 0x0000000 3b0c.3ea4: *00007ffbeb960000-00007ffbeb960fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\winspool.drv 3b0c.3ea4: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ffbeb960000 LB 0x1000 (base 00007ffbeb960000) - 'winspool.drv' 3b0c.3ea4: 00007ffbeb961000-00007ffbeb9affff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\winspool.drv 3b0c.3ea4: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ffbeb961000 LB 0x4f000 (base 00007ffbeb960000) - 'winspool.drv' 3b0c.3ea4: 00007ffbeb9b0000-00007ffbeb9cefff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\winspool.drv 3b0c.3ea4: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ffbeb9b0000 LB 0x1f000 (base 00007ffbeb960000) - 'winspool.drv' 3b0c.3ea4: 00007ffbeb9cf000-00007ffbeb9d0fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\winspool.drv 3b0c.3ea4: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ffbeb9cf000 LB 0x2000 (base 00007ffbeb960000) - 'winspool.drv' 3b0c.3ea4: 00007ffbeb9d1000-00007ffbeb9edfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\winspool.drv 3b0c.3ea4: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ffbeb9d1000 LB 0x1d000 (base 00007ffbeb960000) - 'winspool.drv' 3b0c.3ea4: 00007ffbeb9ee000-00007ffbf27effff 0x0001/0x0000 0x0000000 3b0c.3ea4: *00007ffbf27f0000-00007ffbf27f0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\sfc_os.dll 3b0c.3ea4: 00007ffbf27f1000-00007ffbf27f7fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\sfc_os.dll 3b0c.3ea4: 00007ffbf27f8000-00007ffbf27fcfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\sfc_os.dll 3b0c.3ea4: 00007ffbf27fd000-00007ffbf27fdfff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\sfc_os.dll 3b0c.3ea4: 00007ffbf27fe000-00007ffbf2801fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\sfc_os.dll 3b0c.3ea4: 00007ffbf2802000-00007ffc03d6ffff 0x0001/0x0000 0x0000000 3b0c.3ea4: *00007ffc03d70000-00007ffc03d70fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\SortWindows61.dll 3b0c.3ea4: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ffc03d70000 LB 0x1000 (base 00007ffc03d70000) - 'SortWindows61.dll' 3b0c.3ea4: 00007ffc03d71000-00007ffc03d7bfff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\SortWindows61.dll 3b0c.3ea4: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ffc03d71000 LB 0xb000 (base 00007ffc03d70000) - 'SortWindows61.dll' 3b0c.3ea4: 00007ffc03d7c000-00007ffc03d7cfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\SortWindows61.dll 3b0c.3ea4: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ffc03d7c000 LB 0x1000 (base 00007ffc03d70000) - 'SortWindows61.dll' 3b0c.3ea4: 00007ffc03d7d000-00007ffc03d7dfff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\SortWindows61.dll 3b0c.3ea4: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ffc03d7d000 LB 0x1000 (base 00007ffc03d70000) - 'SortWindows61.dll' 3b0c.3ea4: 00007ffc03d7e000-00007ffc03d80fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\SortWindows61.dll 3b0c.3ea4: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ffc03d7e000 LB 0x3000 (base 00007ffc03d70000) - 'SortWindows61.dll' 3b0c.3ea4: 00007ffc03d81000-00007ffc057cffff 0x0001/0x0000 0x0000000 3b0c.3ea4: *00007ffc057d0000-00007ffc057d0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\apphelp.dll 3b0c.3ea4: 00007ffc057d1000-00007ffc0581efff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\apphelp.dll 3b0c.3ea4: 00007ffc0581f000-00007ffc05840fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\apphelp.dll 3b0c.3ea4: 00007ffc05841000-00007ffc05843fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\apphelp.dll 3b0c.3ea4: 00007ffc05844000-00007ffc0585ffff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\apphelp.dll 3b0c.3ea4: 00007ffc05860000-00007ffc0838ffff 0x0001/0x0000 0x0000000 3b0c.3ea4: *00007ffc08390000-00007ffc08390fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\ucrtbase.dll 3b0c.3ea4: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ffc08390000 LB 0x1000 (base 00007ffc08390000) - 'ucrtbase.dll' 3b0c.3ea4: 00007ffc08391000-00007ffc08444fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\ucrtbase.dll 3b0c.3ea4: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ffc08391000 LB 0xb4000 (base 00007ffc08390000) - 'ucrtbase.dll' 3b0c.3ea4: 00007ffc08445000-00007ffc0847efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\ucrtbase.dll 3b0c.3ea4: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ffc08445000 LB 0x3a000 (base 00007ffc08390000) - 'ucrtbase.dll' 3b0c.3ea4: 00007ffc0847f000-00007ffc08481fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\ucrtbase.dll 3b0c.3ea4: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ffc0847f000 LB 0x3000 (base 00007ffc08390000) - 'ucrtbase.dll' 3b0c.3ea4: 00007ffc08482000-00007ffc0848ffff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\ucrtbase.dll 3b0c.3ea4: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ffc08482000 LB 0xe000 (base 00007ffc08390000) - 'ucrtbase.dll' 3b0c.3ea4: *00007ffc08490000-00007ffc08490fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\msvcp_win.dll 3b0c.3ea4: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ffc08490000 LB 0x1000 (base 00007ffc08490000) - 'msvcp_win.dll' 3b0c.3ea4: 00007ffc08491000-00007ffc084e4fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\msvcp_win.dll 3b0c.3ea4: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ffc08491000 LB 0x54000 (base 00007ffc08490000) - 'msvcp_win.dll' 3b0c.3ea4: 00007ffc084e5000-00007ffc08520fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\msvcp_win.dll 3b0c.3ea4: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ffc084e5000 LB 0x3c000 (base 00007ffc08490000) - 'msvcp_win.dll' 3b0c.3ea4: 00007ffc08521000-00007ffc08521fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\msvcp_win.dll 3b0c.3ea4: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ffc08521000 LB 0x1000 (base 00007ffc08490000) - 'msvcp_win.dll' 3b0c.3ea4: 00007ffc08522000-00007ffc08524fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\msvcp_win.dll 3b0c.3ea4: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ffc08522000 LB 0x3000 (base 00007ffc08490000) - 'msvcp_win.dll' 3b0c.3ea4: 00007ffc08525000-00007ffc0852cfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\msvcp_win.dll 3b0c.3ea4: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ffc08525000 LB 0x8000 (base 00007ffc08490000) - 'msvcp_win.dll' 3b0c.3ea4: 00007ffc0852d000-00007ffc0857ffff 0x0001/0x0000 0x0000000 3b0c.3ea4: *00007ffc08580000-00007ffc08580fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\gdi32full.dll 3b0c.3ea4: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ffc08580000 LB 0x1000 (base 00007ffc08580000) - 'gdi32full.dll' 3b0c.3ea4: 00007ffc08581000-00007ffc0861afff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\gdi32full.dll 3b0c.3ea4: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ffc08581000 LB 0x9a000 (base 00007ffc08580000) - 'gdi32full.dll' 3b0c.3ea4: 00007ffc0861b000-00007ffc08667fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\gdi32full.dll 3b0c.3ea4: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ffc0861b000 LB 0x4d000 (base 00007ffc08580000) - 'gdi32full.dll' 3b0c.3ea4: 00007ffc08668000-00007ffc0866bfff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\gdi32full.dll 3b0c.3ea4: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ffc08668000 LB 0x4000 (base 00007ffc08580000) - 'gdi32full.dll' 3b0c.3ea4: 00007ffc0866c000-00007ffc0866cfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\gdi32full.dll 3b0c.3ea4: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ffc0866c000 LB 0x1000 (base 00007ffc08580000) - 'gdi32full.dll' 3b0c.3ea4: 00007ffc0866d000-00007ffc08688fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\gdi32full.dll 3b0c.3ea4: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ffc0866d000 LB 0x1c000 (base 00007ffc08580000) - 'gdi32full.dll' 3b0c.3ea4: 00007ffc08689000-00007ffc0873ffff 0x0001/0x0000 0x0000000 3b0c.3ea4: *00007ffc08740000-00007ffc08740fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\win32u.dll 3b0c.3ea4: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ffc08740000 LB 0x1000 (base 00007ffc08740000) - 'win32u.dll' 3b0c.3ea4: 00007ffc08741000-00007ffc0874bfff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\win32u.dll 3b0c.3ea4: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ffc08741000 LB 0xb000 (base 00007ffc08740000) - 'win32u.dll' 3b0c.3ea4: 00007ffc0874c000-00007ffc0875afff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\win32u.dll 3b0c.3ea4: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ffc0874c000 LB 0xf000 (base 00007ffc08740000) - 'win32u.dll' 3b0c.3ea4: 00007ffc0875b000-00007ffc0875bfff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\win32u.dll 3b0c.3ea4: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ffc0875b000 LB 0x1000 (base 00007ffc08740000) - 'win32u.dll' 3b0c.3ea4: 00007ffc0875c000-00007ffc08761fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\win32u.dll 3b0c.3ea4: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ffc0875c000 LB 0x6000 (base 00007ffc08740000) - 'win32u.dll' 3b0c.3ea4: 00007ffc08762000-00007ffc0876ffff 0x0001/0x0000 0x0000000 3b0c.3ea4: *00007ffc08770000-00007ffc08770fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\KernelBase.dll 3b0c.3ea4: 00007ffc08771000-00007ffc08881fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\KernelBase.dll 3b0c.3ea4: 00007ffc08882000-00007ffc089f8fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\KernelBase.dll 3b0c.3ea4: 00007ffc089f9000-00007ffc089fcfff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\KernelBase.dll 3b0c.3ea4: 00007ffc089fd000-00007ffc089fdfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\KernelBase.dll 3b0c.3ea4: 00007ffc089fe000-00007ffc08a36fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\KernelBase.dll 3b0c.3ea4: 00007ffc08a37000-00007ffc0999ffff 0x0001/0x0000 0x0000000 3b0c.3ea4: *00007ffc099a0000-00007ffc099a0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\kernel32.dll 3b0c.3ea4: 00007ffc099a1000-00007ffc09a1efff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\kernel32.dll 3b0c.3ea4: 00007ffc09a1f000-00007ffc09a51fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\kernel32.dll 3b0c.3ea4: 00007ffc09a52000-00007ffc09a52fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\kernel32.dll 3b0c.3ea4: 00007ffc09a53000-00007ffc09a53fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\kernel32.dll 3b0c.3ea4: 00007ffc09a54000-00007ffc09a5cfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\kernel32.dll 3b0c.3ea4: 00007ffc09a5d000-00007ffc09caffff 0x0001/0x0000 0x0000000 3b0c.3ea4: *00007ffc09cb0000-00007ffc09cb0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\shlwapi.dll 3b0c.3ea4: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ffc09cb0000 LB 0x1000 (base 00007ffc09cb0000) - 'shlwapi.dll' 3b0c.3ea4: 00007ffc09cb1000-00007ffc09cddfff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\shlwapi.dll 3b0c.3ea4: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ffc09cb1000 LB 0x2d000 (base 00007ffc09cb0000) - 'shlwapi.dll' 3b0c.3ea4: 00007ffc09cde000-00007ffc09cfdfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\shlwapi.dll 3b0c.3ea4: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ffc09cde000 LB 0x20000 (base 00007ffc09cb0000) - 'shlwapi.dll' 3b0c.3ea4: 00007ffc09cfe000-00007ffc09cfefff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\shlwapi.dll 3b0c.3ea4: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ffc09cfe000 LB 0x1000 (base 00007ffc09cb0000) - 'shlwapi.dll' 3b0c.3ea4: 00007ffc09cff000-00007ffc09d04fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\shlwapi.dll 3b0c.3ea4: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ffc09cff000 LB 0x6000 (base 00007ffc09cb0000) - 'shlwapi.dll' 3b0c.3ea4: 00007ffc09d05000-00007ffc0a1fffff 0x0001/0x0000 0x0000000 3b0c.3ea4: *00007ffc0a200000-00007ffc0a200fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\advapi32.dll 3b0c.3ea4: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ffc0a200000 LB 0x1000 (base 00007ffc0a200000) - 'advapi32.dll' 3b0c.3ea4: 00007ffc0a201000-00007ffc0a266fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\advapi32.dll 3b0c.3ea4: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ffc0a201000 LB 0x66000 (base 00007ffc0a200000) - 'advapi32.dll' 3b0c.3ea4: 00007ffc0a267000-00007ffc0a29bfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\advapi32.dll 3b0c.3ea4: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ffc0a267000 LB 0x35000 (base 00007ffc0a200000) - 'advapi32.dll' 3b0c.3ea4: 00007ffc0a29c000-00007ffc0a29cfff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\advapi32.dll 3b0c.3ea4: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ffc0a29c000 LB 0x1000 (base 00007ffc0a200000) - 'advapi32.dll' 3b0c.3ea4: 00007ffc0a29d000-00007ffc0a29dfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\advapi32.dll 3b0c.3ea4: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ffc0a29d000 LB 0x1000 (base 00007ffc0a200000) - 'advapi32.dll' 3b0c.3ea4: 00007ffc0a29e000-00007ffc0a29ffff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\advapi32.dll 3b0c.3ea4: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ffc0a29e000 LB 0x2000 (base 00007ffc0a200000) - 'advapi32.dll' 3b0c.3ea4: 00007ffc0a2a0000-00007ffc0a2a0fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\advapi32.dll 3b0c.3ea4: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ffc0a2a0000 LB 0x1000 (base 00007ffc0a200000) - 'advapi32.dll' 3b0c.3ea4: 00007ffc0a2a1000-00007ffc0a2a9fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\advapi32.dll 3b0c.3ea4: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ffc0a2a1000 LB 0x9000 (base 00007ffc0a200000) - 'advapi32.dll' 3b0c.3ea4: 00007ffc0a2aa000-00007ffc0a3effff 0x0001/0x0000 0x0000000 3b0c.3ea4: *00007ffc0a3f0000-00007ffc0a3f0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\sechost.dll 3b0c.3ea4: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ffc0a3f0000 LB 0x1000 (base 00007ffc0a3f0000) - 'sechost.dll' 3b0c.3ea4: 00007ffc0a3f1000-00007ffc0a455fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\sechost.dll 3b0c.3ea4: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ffc0a3f1000 LB 0x65000 (base 00007ffc0a3f0000) - 'sechost.dll' 3b0c.3ea4: 00007ffc0a456000-00007ffc0a47cfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\sechost.dll 3b0c.3ea4: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ffc0a456000 LB 0x27000 (base 00007ffc0a3f0000) - 'sechost.dll' 3b0c.3ea4: 00007ffc0a47d000-00007ffc0a47dfff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\sechost.dll 3b0c.3ea4: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ffc0a47d000 LB 0x1000 (base 00007ffc0a3f0000) - 'sechost.dll' 3b0c.3ea4: 00007ffc0a47e000-00007ffc0a47efff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\sechost.dll 3b0c.3ea4: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ffc0a47e000 LB 0x1000 (base 00007ffc0a3f0000) - 'sechost.dll' 3b0c.3ea4: 00007ffc0a47f000-00007ffc0a480fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\sechost.dll 3b0c.3ea4: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ffc0a47f000 LB 0x2000 (base 00007ffc0a3f0000) - 'sechost.dll' 3b0c.3ea4: 00007ffc0a481000-00007ffc0a48afff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\sechost.dll 3b0c.3ea4: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ffc0a481000 LB 0xa000 (base 00007ffc0a3f0000) - 'sechost.dll' 3b0c.3ea4: 00007ffc0a48b000-00007ffc0a48ffff 0x0001/0x0000 0x0000000 3b0c.3ea4: *00007ffc0a490000-00007ffc0a490fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\msvcrt.dll 3b0c.3ea4: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ffc0a490000 LB 0x1000 (base 00007ffc0a490000) - 'msvcrt.dll' 3b0c.3ea4: 00007ffc0a491000-00007ffc0a505fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\msvcrt.dll 3b0c.3ea4: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ffc0a491000 LB 0x75000 (base 00007ffc0a490000) - 'msvcrt.dll' 3b0c.3ea4: 00007ffc0a506000-00007ffc0a51efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\msvcrt.dll 3b0c.3ea4: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ffc0a506000 LB 0x19000 (base 00007ffc0a490000) - 'msvcrt.dll' 3b0c.3ea4: 00007ffc0a51f000-00007ffc0a520fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\msvcrt.dll 3b0c.3ea4: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ffc0a51f000 LB 0x2000 (base 00007ffc0a490000) - 'msvcrt.dll' 3b0c.3ea4: 00007ffc0a521000-00007ffc0a523fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\msvcrt.dll 3b0c.3ea4: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ffc0a521000 LB 0x3000 (base 00007ffc0a490000) - 'msvcrt.dll' 3b0c.3ea4: 00007ffc0a524000-00007ffc0a525fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\msvcrt.dll 3b0c.3ea4: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ffc0a524000 LB 0x2000 (base 00007ffc0a490000) - 'msvcrt.dll' 3b0c.3ea4: 00007ffc0a526000-00007ffc0a526fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\msvcrt.dll 3b0c.3ea4: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ffc0a526000 LB 0x1000 (base 00007ffc0a490000) - 'msvcrt.dll' 3b0c.3ea4: 00007ffc0a527000-00007ffc0a52dfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\msvcrt.dll 3b0c.3ea4: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ffc0a527000 LB 0x7000 (base 00007ffc0a490000) - 'msvcrt.dll' 3b0c.3ea4: 00007ffc0a52e000-00007ffc0a65ffff 0x0001/0x0000 0x0000000 3b0c.3ea4: *00007ffc0a660000-00007ffc0a660fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\rpcrt4.dll 3b0c.3ea4: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ffc0a660000 LB 0x1000 (base 00007ffc0a660000) - 'rpcrt4.dll' 3b0c.3ea4: 00007ffc0a661000-00007ffc0a741fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\rpcrt4.dll 3b0c.3ea4: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ffc0a661000 LB 0xe1000 (base 00007ffc0a660000) - 'rpcrt4.dll' 3b0c.3ea4: 00007ffc0a742000-00007ffc0a76cfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\rpcrt4.dll 3b0c.3ea4: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ffc0a742000 LB 0x2b000 (base 00007ffc0a660000) - 'rpcrt4.dll' 3b0c.3ea4: 00007ffc0a76d000-00007ffc0a76efff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\rpcrt4.dll 3b0c.3ea4: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ffc0a76d000 LB 0x2000 (base 00007ffc0a660000) - 'rpcrt4.dll' 3b0c.3ea4: 00007ffc0a76f000-00007ffc0a783fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\rpcrt4.dll 3b0c.3ea4: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ffc0a76f000 LB 0x15000 (base 00007ffc0a660000) - 'rpcrt4.dll' 3b0c.3ea4: 00007ffc0a784000-00007ffc0a78ffff 0x0001/0x0000 0x0000000 3b0c.3ea4: *00007ffc0a790000-00007ffc0a790fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\imm32.dll 3b0c.3ea4: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ffc0a790000 LB 0x1000 (base 00007ffc0a790000) - 'imm32.dll' 3b0c.3ea4: 00007ffc0a791000-00007ffc0a7aefff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\imm32.dll 3b0c.3ea4: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ffc0a791000 LB 0x1e000 (base 00007ffc0a790000) - 'imm32.dll' 3b0c.3ea4: 00007ffc0a7af000-00007ffc0a7b5fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\imm32.dll 3b0c.3ea4: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ffc0a7af000 LB 0x7000 (base 00007ffc0a790000) - 'imm32.dll' 3b0c.3ea4: 00007ffc0a7b6000-00007ffc0a7b6fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\imm32.dll 3b0c.3ea4: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ffc0a7b6000 LB 0x1000 (base 00007ffc0a790000) - 'imm32.dll' 3b0c.3ea4: 00007ffc0a7b7000-00007ffc0a7bffff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\imm32.dll 3b0c.3ea4: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ffc0a7b7000 LB 0x9000 (base 00007ffc0a790000) - 'imm32.dll' 3b0c.3ea4: 00007ffc0a7c0000-00007ffc0a81ffff 0x0001/0x0000 0x0000000 3b0c.3ea4: *00007ffc0a820000-00007ffc0a820fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\user32.dll 3b0c.3ea4: 00007ffc0a821000-00007ffc0a8b0fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\user32.dll 3b0c.3ea4: 00007ffc0a8b1000-00007ffc0a8d1fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\user32.dll 3b0c.3ea4: 00007ffc0a8d2000-00007ffc0a8d3fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\user32.dll 3b0c.3ea4: 00007ffc0a8d4000-00007ffc0a9bffff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\user32.dll 3b0c.3ea4: *00007ffc0a9c0000-00007ffc0a9c0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\gdi32.dll 3b0c.3ea4: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ffc0a9c0000 LB 0x1000 (base 00007ffc0a9c0000) - 'gdi32.dll' 3b0c.3ea4: 00007ffc0a9c1000-00007ffc0a9cefff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\gdi32.dll 3b0c.3ea4: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ffc0a9c1000 LB 0xe000 (base 00007ffc0a9c0000) - 'gdi32.dll' 3b0c.3ea4: 00007ffc0a9cf000-00007ffc0a9e2fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\gdi32.dll 3b0c.3ea4: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ffc0a9cf000 LB 0x14000 (base 00007ffc0a9c0000) - 'gdi32.dll' 3b0c.3ea4: 00007ffc0a9e3000-00007ffc0a9e3fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\gdi32.dll 3b0c.3ea4: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ffc0a9e3000 LB 0x1000 (base 00007ffc0a9c0000) - 'gdi32.dll' 3b0c.3ea4: 00007ffc0a9e4000-00007ffc0a9e9fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\gdi32.dll 3b0c.3ea4: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ffc0a9e4000 LB 0x6000 (base 00007ffc0a9c0000) - 'gdi32.dll' 3b0c.3ea4: 00007ffc0a9ea000-00007ffc0ab6ffff 0x0001/0x0000 0x0000000 3b0c.3ea4: *00007ffc0ab70000-00007ffc0ab70fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\ntdll.dll 3b0c.3ea4: 00007ffc0ab71000-00007ffc0ac8bfff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\ntdll.dll 3b0c.3ea4: 00007ffc0ac8c000-00007ffc0acd3fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\ntdll.dll 3b0c.3ea4: 00007ffc0acd4000-00007ffc0acd4fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\ntdll.dll 3b0c.3ea4: 00007ffc0acd5000-00007ffc0acd6fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\ntdll.dll 3b0c.3ea4: 00007ffc0acd7000-00007ffc0acdffff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\ntdll.dll 3b0c.3ea4: 00007ffc0ace0000-00007ffc0ad64fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\ntdll.dll 3b0c.3ea4: 00007ffc0ad65000-00007ffffffeffff 0x0001/0x0000 0x0000000 3b0c.3ea4: user32.dll: timestamp 0xc141c6aa (rc=VINF_SUCCESS) 3b0c.3ea4: kernel32.dll: timestamp 0x73317569 (rc=VINF_SUCCESS) 3b0c.3ea4: kernelbase.dll: timestamp 0x5b4a3325 (rc=VINF_SUCCESS) 3b0c.3ea4: apphelp.dll: timestamp 0x86c12c1a (rc=VINF_SUCCESS) 3b0c.3ea4: sfc_os.dll: timestamp 0x7d56360e (rc=VINF_SUCCESS) 3b0c.3ea4: VirtualBoxVM.exe: timestamp 0x5f51ed66 (rc=VINF_SUCCESS) 3b0c.3ea4: sfc.dll: timestamp 0xafb16197 (rc=VINF_SUCCESS) 3b0c.3ea4: '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports 3b0c.3ea4: \Device\HarddiskVolume5\Windows\System32\ntdll.dll: Owner is not trusted installer (01 02 00 00 00 00 00 05 20 00 00 00 21 02 00 00) 3b0c.3ea4: \Device\HarddiskVolume5\Windows\System32\ntdll.dll: Relaxing the TrustedInstaller requirement for this DLL (it's in system32). 3b0c.3ea4: '\Device\HarddiskVolume5\Windows\System32\ntdll.dll' has no imports 3b0c.3ea4: \Device\HarddiskVolume5\Windows\System32\user32.dll: Owner is not trusted installer (01 02 00 00 00 00 00 05 20 00 00 00 21 02 00 00) 3b0c.3ea4: \Device\HarddiskVolume5\Windows\System32\user32.dll: Relaxing the TrustedInstaller requirement for this DLL (it's in system32). 3b0c.3ea4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'win32u.dll'. 3b0c.3ea4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #37 'gdi32.dll'. 3b0c.3ea4: supHardNtVpGetImport: Failed to find symbol 0xffffffff / 'NtMITSetInputDelegationMode' in 'win32u.dll': Unknown Status -610 (0xfffffd9e) 3b0c.3ea4: Error (rc=-5629): 3b0c.3ea4: RTLdrGetBits failed on image user32.dll: Unknown Status -610 (0xfffffd9e) 3b0c.3ea4: supR3HardenedWinInit: SUPHARDNTVPKIND_SELF_PURIFICATION_LIMITED -> Unknown Status -5629 (0xffffea03), cFixes=0 3b0c.3ea4: '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports 3b0c.3ea4: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe) 3b0c.3ea4: supR3HardNtEnableThreadCreationEx: 3b0c.3ea4: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffc0abe45c0 pvNtTerminateThread=00007ffc0ac0c810 3b0c.3ea4: supR3HardenedWinDoReSpawn(1): New child 24bc.26d4 [kernel32]. 3b0c.3ea4: supR3HardNtChildGatherData: PebBaseAddress=0000000000c93000 cbPeb=0x388 3b0c.3ea4: supR3HardNtPuChFindNtdll: uNtDllParentAddr=00007ffc0ab70000 uNtDllChildAddr=00007ffc0ab70000 3b0c.3ea4: supR3HardenedWinSetupChildInit: uLdrInitThunk=00007ffc0abe45c0 3b0c.3ea4: supR3HardenedWinSetupChildInit: Initial context: rax=0000000000000000 rbx=0000000000000000 rcx=00007ff71ae37900 rdx=0000000000c93000 rsi=0000000000000000 rdi=0000000000000000 r8 =0000000000000000 r9 =0000000000000000 r10=0000000000000000 r11=0000000000000000 r12=0000000000000000 r13=0000000000000000 r14=0000000000000000 r15=0000000000000000 P1=0000000000000000 P2=0000000000000000 rip=00007ffc0abbcea0 rsp=0000000000eff7e8 rbp=0000000000000000 ctxflags=0010001b cs=0033 ss=002b ds=0000 es=0000 fs=0000 gs=0000 eflags=00000200 mxcrx=00001f80 P3=0000000000000000 P4=0000000000000000 P5=0000000000000000 P6=0000000000000000 dr0=0000000000000000 dr1=0000000000000000 dr2=0000000000000000 dr3=0000000000000000 dr6=0000000000000000 dr7=0000000000000000 vcr=0000000000000000 dcr=0000000000000000 lbt=0000000000000000 lbf=0000000000000000 lxt=0000000000000000 lxf=0000000000000000 3b0c.3ea4: supR3HardenedWinSetupChildInit: Start child. 3b0c.3ea4: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 1 ms. 3b0c.3ea4: supR3HardNtChildPurify: Startup delay kludge #1/0: 261 ms, 16 sleeps 3b0c.3ea4: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION 3b0c.3ea4: *0000000000000000-0000000000b0ffff 0x0001/0x0000 0x0000000 3b0c.3ea4: *0000000000b10000-0000000000b2ffff 0x0004/0x0004 0x0020000 3b0c.3ea4: *0000000000b30000-0000000000b4cfff 0x0002/0x0002 0x0040000 3b0c.3ea4: 0000000000b4d000-0000000000b4ffff 0x0001/0x0000 0x0000000 3b0c.3ea4: *0000000000b50000-0000000000b53fff 0x0002/0x0002 0x0040000 3b0c.3ea4: 0000000000b54000-0000000000b5ffff 0x0001/0x0000 0x0000000 3b0c.3ea4: *0000000000b60000-0000000000b61fff 0x0004/0x0004 0x0020000 3b0c.3ea4: 0000000000b62000-0000000000bfffff 0x0001/0x0000 0x0000000 3b0c.3ea4: *0000000000c00000-0000000000c92fff 0x0000/0x0004 0x0020000 3b0c.3ea4: 0000000000c93000-0000000000c95fff 0x0004/0x0004 0x0020000 3b0c.3ea4: 0000000000c96000-0000000000dfffff 0x0000/0x0004 0x0020000 3b0c.3ea4: *0000000000e00000-0000000000efafff 0x0000/0x0004 0x0020000 3b0c.3ea4: 0000000000efb000-0000000000efdfff 0x0104/0x0004 0x0020000 3b0c.3ea4: 0000000000efe000-0000000000efffff 0x0004/0x0004 0x0020000 3b0c.3ea4: 0000000000f00000-000000007ffdffff 0x0001/0x0000 0x0000000 3b0c.3ea4: *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000 3b0c.3ea4: 000000007ffe1000-000000007ffe9fff 0x0001/0x0000 0x0000000 3b0c.3ea4: *000000007ffea000-000000007ffeafff 0x0002/0x0002 0x0020000 3b0c.3ea4: 000000007ffeb000-00007ff54618ffff 0x0001/0x0000 0x0000000 3b0c.3ea4: *00007ff546190000-00007ff546190fff 0x0002/0x0002 0x0040000 3b0c.3ea4: 00007ff546191000-00007ff54619ffff 0x0001/0x0000 0x0000000 3b0c.3ea4: *00007ff5461a0000-00007ff5461c2fff 0x0002/0x0002 0x0040000 3b0c.3ea4: 00007ff5461c3000-00007ff71ae2ffff 0x0001/0x0000 0x0000000 3b0c.3ea4: *00007ff71ae30000-00007ff71ae30fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe 3b0c.3ea4: 00007ff71ae31000-00007ff71aea6fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe 3b0c.3ea4: 00007ff71aea7000-00007ff71aea7fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe 3b0c.3ea4: 00007ff71aea8000-00007ff71aeeffff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe 3b0c.3ea4: 00007ff71aef0000-00007ff71aef0fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe 3b0c.3ea4: 00007ff71aef1000-00007ff71aef1fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe 3b0c.3ea4: 00007ff71aef2000-00007ff71aef6fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe 3b0c.3ea4: 00007ff71aef7000-00007ff71aef7fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe 3b0c.3ea4: 00007ff71aef8000-00007ff71aef8fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe 3b0c.3ea4: 00007ff71aef9000-00007ff71aefcfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe 3b0c.3ea4: 00007ff71aefd000-00007ff71af45fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe 3b0c.3ea4: 00007ff71af46000-00007ffc0ab6ffff 0x0001/0x0000 0x0000000 3b0c.3ea4: *00007ffc0ab70000-00007ffc0ab70fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\ntdll.dll 3b0c.3ea4: 00007ffc0ab71000-00007ffc0ac8bfff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\ntdll.dll 3b0c.3ea4: 00007ffc0ac8c000-00007ffc0acd3fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\ntdll.dll 3b0c.3ea4: 00007ffc0acd4000-00007ffc0acdffff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\ntdll.dll 3b0c.3ea4: 00007ffc0ace0000-00007ffc0aceefff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\ntdll.dll 3b0c.3ea4: 00007ffc0acef000-00007ffc0aceffff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\ntdll.dll 3b0c.3ea4: 00007ffc0acf0000-00007ffc0acf2fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\ntdll.dll 3b0c.3ea4: 00007ffc0acf3000-00007ffc0ad64fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume5\Windows\System32\ntdll.dll 3b0c.3ea4: 00007ffc0ad65000-00007ffffffeffff 0x0001/0x0000 0x0000000 3b0c.3ea4: supR3HardNtChildPurify: Done after 265 ms and 0 fixes (loop #0). 3b0c.3ea4: supR3HardNtEnableThreadCreationEx: 24bc.26d4: Log file opened: 6.1.14r140239 g_hStartupLog=0000000000000004 g_uNtVerCombined=0xa04a6100 24bc.26d4: supR3HardenedVmProcessInit: uNtDllAddr=00007ffc0ab70000 g_uNtVerCombined=0xa04a6100 (stack ~0000000000eff278) 24bc.26d4: ntdll.dll: timestamp 0x70e69bad (rc=VINF_SUCCESS) 24bc.26d4: New simple heap: #1 0000000001000000 LB 0x400000 (for 2052096 allocation) 24bc.26d4: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox' 24bc.26d4: System32: \Device\HarddiskVolume5\Windows\System32 24bc.26d4: WinSxS: \Device\HarddiskVolume5\Windows\WinSxS 24bc.26d4: KnownDllPath: C:\WINDOWS\System32 24bc.26d4: supR3HardenedVmProcessInit: Opening vboxdrv stub... 24bc.26d4: supR3HardenedVmProcessInit: Restoring LdrInitializeThunk... 24bc.26d4: supR3HardenedVmProcessInit: Returning to LdrInitializeThunk... 24bc.26d4: Registered Dll notification callback with NTDLL. 24bc.26d4: \Device\HarddiskVolume5\Windows\System32\kernel32.dll: Owner is not trusted installer (01 02 00 00 00 00 00 05 20 00 00 00 21 02 00 00) 24bc.26d4: \Device\HarddiskVolume5\Windows\System32\kernel32.dll: Relaxing the TrustedInstaller requirement for this DLL (it's in system32). 24bc.26d4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\kernel32.dll) 24bc.26d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\kernel32.dll 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\KERNEL32.DLL (Input=KERNEL32.DLL, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000004001: [calling] 24bc.26d4: supR3HardenedDllNotificationCallback: load 00007ffc08770000 LB 0x002c7000 C:\WINDOWS\System32\KERNELBASE.dll [fFlags=0x0] 24bc.26d4: \Device\HarddiskVolume5\Windows\System32\KernelBase.dll: Owner is not trusted installer (01 02 00 00 00 00 00 05 20 00 00 00 21 02 00 00) 24bc.26d4: \Device\HarddiskVolume5\Windows\System32\KernelBase.dll: Relaxing the TrustedInstaller requirement for this DLL (it's in system32). 24bc.26d4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\KernelBase.dll) 24bc.26d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\KernelBase.dll 24bc.26d4: supR3HardenedDllNotificationCallback: load 00007ffc099a0000 LB 0x000bd000 C:\WINDOWS\System32\KERNEL32.DLL [fFlags=0x0] 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\kernel32.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc099a0000 'C:\WINDOWS\System32\KERNEL32.DLL' 24bc.26d4: supR3HardenedDllNotificationCallback: load 00007ff71ae30000 LB 0x00116000 C:\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe [fFlags=0x0] 24bc.26d4: '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports 24bc.26d4: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe) 24bc.26d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe 24bc.26d4: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffc0abe45c0 pvNtTerminateThread=00007ffc0ac0c810 3b0c.3ea4: supR3HardNtChildWaitFor: Found expected request 1 (CloseEvents) after 109 ms. 24bc.26d4: \SystemRoot\System32\ntdll.dll: 24bc.26d4: CreationTime: 2020-09-11T15:15:58.871763000Z 24bc.26d4: LastWriteTime: 2020-09-11T15:15:58.926448400Z 24bc.26d4: ChangeTime: 2020-10-16T18:08:39.615134000Z 24bc.26d4: FileAttributes: 0x20 24bc.26d4: Size: 0x1ee118 24bc.26d4: NT Headers: 0xe8 24bc.26d4: Timestamp: 0x70e69bad 24bc.26d4: Machine: 0x8664 - amd64 24bc.26d4: Timestamp: 0x70e69bad 24bc.26d4: Image Version: 10.0 24bc.26d4: SizeOfImage: 0x1f5000 (2052096) 24bc.26d4: Resource Dir: 0x184000 LB 0x6fd28 24bc.26d4: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)] 24bc.26d4: [Raw version resource data: 0x1840f0 LB 0x380, codepage 0x0 (reserved 0x0)] 24bc.26d4: ProductName: Microsoft® Windows® Operating System 24bc.26d4: ProductVersion: 10.0.19041.488 24bc.26d4: FileVersion: 10.0.19041.488 (WinBuild.160101.0800) 24bc.26d4: FileDescription: NT Layer DLL 24bc.26d4: \SystemRoot\System32\kernel32.dll: 24bc.26d4: CreationTime: 2020-09-08T12:27:58.037300300Z 24bc.26d4: LastWriteTime: 2020-09-08T12:27:58.037300300Z 24bc.26d4: ChangeTime: 2020-10-16T18:08:28.099077800Z 24bc.26d4: FileAttributes: 0x20 24bc.26d4: Size: 0xbaa28 24bc.26d4: NT Headers: 0xf0 24bc.26d4: Timestamp: 0x73317569 24bc.26d4: Machine: 0x8664 - amd64 24bc.26d4: Timestamp: 0x73317569 24bc.26d4: Image Version: 10.0 24bc.26d4: SizeOfImage: 0xbd000 (774144) 24bc.26d4: Resource Dir: 0xbb000 LB 0x520 24bc.26d4: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)] 24bc.26d4: [Raw version resource data: 0xbb0b0 LB 0x3a4, codepage 0x0 (reserved 0x0)] 24bc.26d4: ProductName: Microsoft® Windows® Operating System 24bc.26d4: ProductVersion: 10.0.19041.292 24bc.26d4: FileVersion: 10.0.19041.292 (WinBuild.160101.0800) 24bc.26d4: FileDescription: Windows NT BASE API Client DLL 24bc.26d4: \SystemRoot\System32\KernelBase.dll: 24bc.26d4: CreationTime: 2020-09-11T15:15:59.958644000Z 24bc.26d4: LastWriteTime: 2020-09-11T15:16:00.043895200Z 24bc.26d4: ChangeTime: 2020-10-16T18:08:28.161564000Z 24bc.26d4: FileAttributes: 0x20 24bc.26d4: Size: 0x2c8950 24bc.26d4: NT Headers: 0xf0 24bc.26d4: Timestamp: 0x5b4a3325 24bc.26d4: Machine: 0x8664 - amd64 24bc.26d4: Timestamp: 0x5b4a3325 24bc.26d4: Image Version: 10.0 24bc.26d4: SizeOfImage: 0x2c7000 (2912256) 24bc.26d4: Resource Dir: 0x29e000 LB 0x548 24bc.26d4: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)] 24bc.26d4: [Raw version resource data: 0x29e0b0 LB 0x3bc, codepage 0x0 (reserved 0x0)] 24bc.26d4: ProductName: Microsoft® Windows® Operating System 24bc.26d4: ProductVersion: 10.0.19041.488 24bc.26d4: FileVersion: 10.0.19041.488 (WinBuild.160101.0800) 24bc.26d4: FileDescription: Windows NT BASE API Client DLL 24bc.26d4: \SystemRoot\System32\apisetschema.dll: 24bc.26d4: CreationTime: 2019-12-07T09:08:13.518339400Z 24bc.26d4: LastWriteTime: 2019-12-07T09:08:13.518339400Z 24bc.26d4: ChangeTime: 2020-10-16T18:08:00.411559000Z 24bc.26d4: FileAttributes: 0x20 24bc.26d4: Size: 0x1f538 24bc.26d4: NT Headers: 0xd0 24bc.26d4: Timestamp: 0x31288ce0 24bc.26d4: Machine: 0x8664 - amd64 24bc.26d4: Timestamp: 0x31288ce0 24bc.26d4: Image Version: 10.0 24bc.26d4: SizeOfImage: 0x20000 (131072) 24bc.26d4: Resource Dir: 0x1f000 LB 0x408 24bc.26d4: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)] 24bc.26d4: [Raw version resource data: 0x1f060 LB 0x3a8, codepage 0x0 (reserved 0x0)] 24bc.26d4: ProductName: Microsoft® Windows® Operating System 24bc.26d4: ProductVersion: 10.0.19041.1 24bc.26d4: FileVersion: 10.0.19041.1 (WinBuild.160101.0800) 24bc.26d4: FileDescription: ApiSet Schema DLL 24bc.26d4: NtOpenDirectoryObject failed on \Driver: 0xc0000022 24bc.26d4: supR3HardenedWinFindAdversaries: 0x0 24bc.26d4: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox' 24bc.26d4: Calling main() 24bc.26d4: SUPR3HardenedMain: pszProgName=VirtualBoxVM fFlags=0x2 24bc.26d4: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox' 24bc.26d4: '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports 24bc.26d4: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe) 24bc.26d4: SUPR3HardenedMain: Respawn #2 24bc.26d4: supR3HardNtEnableThreadCreationEx: 24bc.26d4: supR3HardenedDllNotificationCallback: load 00007ffc0a660000 LB 0x00124000 C:\WINDOWS\System32\RPCRT4.dll [fFlags=0x0] 24bc.26d4: \Device\HarddiskVolume5\Windows\System32\rpcrt4.dll: Owner is not trusted installer (01 02 00 00 00 00 00 05 20 00 00 00 21 02 00 00) 24bc.26d4: \Device\HarddiskVolume5\Windows\System32\rpcrt4.dll: Relaxing the TrustedInstaller requirement for this DLL (it's in system32). 24bc.26d4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\rpcrt4.dll) 24bc.26d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\rpcrt4.dll 24bc.26d4: supR3HardenedDllNotificationCallback: load 00007ffc0a3f0000 LB 0x0009b000 C:\WINDOWS\System32\sechost.dll [fFlags=0x0] 24bc.26d4: \Device\HarddiskVolume5\Windows\System32\sechost.dll: Owner is not trusted installer (01 02 00 00 00 00 00 05 20 00 00 00 21 02 00 00) 24bc.26d4: \Device\HarddiskVolume5\Windows\System32\sechost.dll: Relaxing the TrustedInstaller requirement for this DLL (it's in system32). 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'rpcrt4.dll'. 24bc.26d4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\sechost.dll) 24bc.26d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\sechost.dll 24bc.26d4: \Device\HarddiskVolume5\Windows\System32\ntdll.dll: Owner is not trusted installer (01 02 00 00 00 00 00 05 20 00 00 00 21 02 00 00) 24bc.26d4: \Device\HarddiskVolume5\Windows\System32\ntdll.dll: Relaxing the TrustedInstaller requirement for this DLL (it's in system32). 24bc.26d4: '\Device\HarddiskVolume5\Windows\System32\ntdll.dll' has no imports 24bc.26d4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\ntdll.dll) 24bc.26d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\ntdll.dll 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume5\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\ntdll.dll (Input=ntdll.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801: [calling] 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc0ab70000 'C:\WINDOWS\System32\ntdll.dll' 24bc.26d4: \Device\HarddiskVolume5\Windows\System32\apphelp.dll: Owner is not trusted installer (01 02 00 00 00 00 00 05 20 00 00 00 21 02 00 00) 24bc.26d4: \Device\HarddiskVolume5\Windows\System32\apphelp.dll: Relaxing the TrustedInstaller requirement for this DLL (it's in system32). 24bc.26d4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume5\Windows\System32\apphelp.dll) 24bc.26d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\apphelp.dll 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\apphelp.dll (rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000000000: [calling] 24bc.26d4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume5\Windows\System32\apphelp.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedDllNotificationCallback: load 00007ffc057d0000 LB 0x00090000 C:\WINDOWS\system32\apphelp.dll [fFlags=0x0] 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume5\Windows\System32\apphelp.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\ntdll.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\ntdll.dll (Input=ntdll.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801: [calling] 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc0ab70000 'C:\WINDOWS\System32\ntdll.dll' 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc057d0000 'C:\WINDOWS\system32\apphelp.dll' 24bc.26d4: Error -104 in supR3HardenedWinReSpawn! (enmWhat=5) 24bc.26d4: Error relaunching VirtualBox VM process: 5 Command line: '60eaff78-4bdd-042d-2e72-669728efd737-suplib-3rdchild --comment macos --startvm 2c94c8ee-5940-4e43-9e8b-9733df9a14d5 --no-startvm-errormsgbox "--sup-hardening-log=C:\Users\yoyo\VirtualBox VMs\macos\Logs\VBoxHardening.log"' 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'opengl32.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'uicommon.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcp100.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'msvcr100.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'qt5corevbox.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'qt5guivbox.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'qt5widgetsvbox.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'qt5openglvbox.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'user32.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'ole32.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'oleaut32.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'winmm.dll'. 24bc.26d4: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll) 24bc.26d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume5\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008] 24bc.26d4: \Device\HarddiskVolume5\Windows\System32\winmm.dll: Owner is not trusted installer (01 02 00 00 00 00 00 05 20 00 00 00 21 02 00 00) 24bc.26d4: \Device\HarddiskVolume5\Windows\System32\winmm.dll: Relaxing the TrustedInstaller requirement for this DLL (it's in system32). 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'. 24bc.26d4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\winmm.dll) 24bc.26d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\winmm.dll 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume5\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008] 24bc.26d4: \Device\HarddiskVolume5\Windows\System32\oleaut32.dll: Owner is not trusted installer (01 02 00 00 00 00 00 05 20 00 00 00 21 02 00 00) 24bc.26d4: \Device\HarddiskVolume5\Windows\System32\oleaut32.dll: Relaxing the TrustedInstaller requirement for this DLL (it's in system32). 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'combase.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #21 'rpcrt4.dll'. 24bc.26d4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\oleaut32.dll) 24bc.26d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\oleaut32.dll 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume5\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008] 24bc.26d4: \Device\HarddiskVolume5\Windows\System32\ole32.dll: Owner is not trusted installer (01 02 00 00 00 00 00 05 20 00 00 00 21 02 00 00) 24bc.26d4: \Device\HarddiskVolume5\Windows\System32\ole32.dll: Relaxing the TrustedInstaller requirement for this DLL (it's in system32). 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #21 'rpcrt4.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #49 'gdi32.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #50 'user32.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #51 'combase.dll'. 24bc.26d4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\ole32.dll) 24bc.26d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\ole32.dll 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume5\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] 24bc.26d4: \Device\HarddiskVolume5\Windows\System32\user32.dll: Owner is not trusted installer (01 02 00 00 00 00 00 05 20 00 00 00 21 02 00 00) 24bc.26d4: \Device\HarddiskVolume5\Windows\System32\user32.dll: Relaxing the TrustedInstaller requirement for this DLL (it's in system32). 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'win32u.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #37 'gdi32.dll'. 24bc.26d4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\user32.dll) 24bc.26d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\user32.dll 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5openglvbox.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5openglvbox.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\qt5openglvbox.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'qt5widgetsvbox.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'qt5guivbox.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5corevbox.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcr100.dll'. 24bc.26d4: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll) 24bc.26d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5guivbox.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5corevbox.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'shell32.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'. 24bc.26d4: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll) 24bc.26d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'ole32.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'opengl32.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'. 24bc.26d4: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll) 24bc.26d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'shell32.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ole32.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'advapi32.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ws2_32.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'mpr.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcp100.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'msvcr100.dll'. 24bc.26d4: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll) 24bc.26d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcr100.dll) 24bc.26d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcr100.dll 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'. 24bc.26d4: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcp100.dll) 24bc.26d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcp100.dll 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ws2_32.dll'. 24bc.26d4: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxRT.dll) 24bc.26d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxRT.dll 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'uicommon.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'uicommon.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\uicommon.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'vboxrt.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcr100.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5corevbox.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5guivbox.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5widgetsvbox.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'user32.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'advapi32.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'ole32.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'oleaut32.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'rpcrt4.dll'. 24bc.26d4: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\UICommon.dll) 24bc.26d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\UICommon.dll 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume5\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008] 24bc.26d4: \Device\HarddiskVolume5\Windows\System32\opengl32.dll: Owner is not trusted installer (01 02 00 00 00 00 00 05 20 00 00 00 21 02 00 00) 24bc.26d4: \Device\HarddiskVolume5\Windows\System32\opengl32.dll: Relaxing the TrustedInstaller requirement for this DLL (it's in system32). 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'advapi32.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'gdi32.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'glu32.dll'. 24bc.26d4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume5\Windows\System32\opengl32.dll) 24bc.26d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\opengl32.dll 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'glu32.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'glu32.dll' -> '\Device\HarddiskVolume5\Windows\System32\glu32.dll' [rcNtRedir=0xc0150008] 24bc.26d4: \Device\HarddiskVolume5\Windows\System32\glu32.dll: Owner is not trusted installer (01 02 00 00 00 00 00 05 20 00 00 00 21 02 00 00) 24bc.26d4: \Device\HarddiskVolume5\Windows\System32\glu32.dll: Relaxing the TrustedInstaller requirement for this DLL (it's in system32). 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'opengl32.dll'. 24bc.26d4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume5\Windows\System32\glu32.dll) 24bc.26d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\glu32.dll 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume5\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008] 24bc.26d4: \Device\HarddiskVolume5\Windows\System32\gdi32.dll: Owner is not trusted installer (01 02 00 00 00 00 00 05 20 00 00 00 21 02 00 00) 24bc.26d4: \Device\HarddiskVolume5\Windows\System32\gdi32.dll: Relaxing the TrustedInstaller requirement for this DLL (it's in system32). 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'win32u.dll'. 24bc.26d4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\gdi32.dll) 24bc.26d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\gdi32.dll 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume5\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\user32.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume5\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008] 24bc.26d4: \Device\HarddiskVolume5\Windows\System32\advapi32.dll: Owner is not trusted installer (01 02 00 00 00 00 00 05 20 00 00 00 21 02 00 00) 24bc.26d4: \Device\HarddiskVolume5\Windows\System32\advapi32.dll: Relaxing the TrustedInstaller requirement for this DLL (it's in system32). 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'sechost.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27 'rpcrt4.dll'. 24bc.26d4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\advapi32.dll) 24bc.26d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\advapi32.dll 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume5\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 24bc.26d4: \Device\HarddiskVolume5\Windows\System32\msvcrt.dll: Owner is not trusted installer (01 02 00 00 00 00 00 05 20 00 00 00 21 02 00 00) 24bc.26d4: \Device\HarddiskVolume5\Windows\System32\msvcrt.dll: Relaxing the TrustedInstaller requirement for this DLL (it's in system32). 24bc.26d4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\msvcrt.dll) 24bc.26d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\msvcrt.dll 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume5\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume5\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\oleaut32.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume5\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\ole32.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume5\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\advapi32.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume5\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\user32.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume5\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008] 24bc.26d4: \Device\HarddiskVolume5\Windows\System32\ws2_32.dll: Owner is not trusted installer (01 02 00 00 00 00 00 05 20 00 00 00 21 02 00 00) 24bc.26d4: \Device\HarddiskVolume5\Windows\System32\ws2_32.dll: Relaxing the TrustedInstaller requirement for this DLL (it's in system32). 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'rpcrt4.dll'. 24bc.26d4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\ws2_32.dll) 24bc.26d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\ws2_32.dll 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume5\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mpr.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'mpr.dll' -> '\Device\HarddiskVolume5\Windows\System32\mpr.dll' [rcNtRedir=0xc0150008] 24bc.26d4: \Device\HarddiskVolume5\Windows\System32\mpr.dll: Owner is not trusted installer (01 02 00 00 00 00 00 05 20 00 00 00 21 02 00 00) 24bc.26d4: \Device\HarddiskVolume5\Windows\System32\mpr.dll: Relaxing the TrustedInstaller requirement for this DLL (it's in system32). 24bc.26d4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\mpr.dll) 24bc.26d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\mpr.dll 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume5\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\ws2_32.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume5\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\advapi32.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume5\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\ole32.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume5\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008] 24bc.26d4: \Device\HarddiskVolume5\Windows\System32\shell32.dll: Owner is not trusted installer (01 02 00 00 00 00 00 05 20 00 00 00 21 02 00 00) 24bc.26d4: \Device\HarddiskVolume5\Windows\System32\shell32.dll: Relaxing the TrustedInstaller requirement for this DLL (it's in system32). 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #72 'user32.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #74 'gdi32.dll'. 24bc.26d4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\shell32.dll) 24bc.26d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\shell32.dll 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume5\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\user32.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume5\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\user32.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume5\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\gdi32.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume5\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume5\Windows\System32\opengl32.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume5\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\ole32.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume5\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\shell32.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume5\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\user32.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume5\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\gdi32.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume5\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\gdi32.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume5\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008] 24bc.26d4: \Device\HarddiskVolume5\Windows\System32\win32u.dll: Owner is not trusted installer (01 02 00 00 00 00 00 05 20 00 00 00 21 02 00 00) 24bc.26d4: \Device\HarddiskVolume5\Windows\System32\win32u.dll: Relaxing the TrustedInstaller requirement for this DLL (it's in system32). 24bc.26d4: '\Device\HarddiskVolume5\Windows\System32\win32u.dll' has no imports 24bc.26d4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\win32u.dll) 24bc.26d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\win32u.dll 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume5\Windows\System32\combase.dll' [rcNtRedir=0xc0150008] 24bc.26d4: \Device\HarddiskVolume5\Windows\System32\combase.dll: Owner is not trusted installer (01 02 00 00 00 00 00 05 20 00 00 00 21 02 00 00) 24bc.26d4: \Device\HarddiskVolume5\Windows\System32\combase.dll: Relaxing the TrustedInstaller requirement for this DLL (it's in system32). 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'. 24bc.26d4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\combase.dll) 24bc.26d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\combase.dll 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume5\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\user32.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume5\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\gdi32.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume5\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume5\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume5\Windows\System32\combase.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\combase.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume5\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008] 24bc.26d4: \Device\HarddiskVolume5\Windows\System32\msvcp_win.dll: Owner is not trusted installer (01 02 00 00 00 00 00 05 20 00 00 00 21 02 00 00) 24bc.26d4: \Device\HarddiskVolume5\Windows\System32\msvcp_win.dll: Relaxing the TrustedInstaller requirement for this DLL (it's in system32). 24bc.26d4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\msvcp_win.dll) 24bc.26d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\msvcp_win.dll 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume5\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume5\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume5\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\gdi32.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume5\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\user32.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume5\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume5\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume5\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'sechost.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'sechost.dll' -> '\Device\HarddiskVolume5\Windows\System32\sechost.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\sechost.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume5\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume5\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\win32u.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume5\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume5\Windows\System32\opengl32.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume5\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\user32.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume5\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000a01: [calling] 24bc.26d4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume5\Windows\System32\opengl32.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\UICommon.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\winmm.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume5\Windows\System32\glu32.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\mpr.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedDllNotificationCallback: load 00007ffc0a490000 LB 0x0009e000 C:\WINDOWS\System32\msvcrt.dll [fFlags=0x0] 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedDllNotificationCallback: load 00007ffc0a200000 LB 0x000aa000 C:\WINDOWS\System32\ADVAPI32.dll [fFlags=0x0] 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\advapi32.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedDllNotificationCallback: load 00007ffc08740000 LB 0x00022000 C:\WINDOWS\System32\win32u.dll [fFlags=0x0] 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\win32u.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedDllNotificationCallback: load 00007ffc08390000 LB 0x00100000 C:\WINDOWS\System32\ucrtbase.dll [fFlags=0x0] 24bc.26d4: \Device\HarddiskVolume5\Windows\System32\ucrtbase.dll: Owner is not trusted installer (01 02 00 00 00 00 00 05 20 00 00 00 21 02 00 00) 24bc.26d4: \Device\HarddiskVolume5\Windows\System32\ucrtbase.dll: Relaxing the TrustedInstaller requirement for this DLL (it's in system32). 24bc.26d4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\ucrtbase.dll) 24bc.26d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\ucrtbase.dll 24bc.26d4: supR3HardenedDllNotificationCallback: load 00007ffc08490000 LB 0x0009d000 C:\WINDOWS\System32\msvcp_win.dll [fFlags=0x0] 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedDllNotificationCallback: load 00007ffc08580000 LB 0x00109000 C:\WINDOWS\System32\gdi32full.dll [fFlags=0x0] 24bc.26d4: \Device\HarddiskVolume5\Windows\System32\gdi32full.dll: Owner is not trusted installer (01 02 00 00 00 00 00 05 20 00 00 00 21 02 00 00) 24bc.26d4: \Device\HarddiskVolume5\Windows\System32\gdi32full.dll: Relaxing the TrustedInstaller requirement for this DLL (it's in system32). 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #33 'gdi32.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'user32.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'win32u.dll'. 24bc.26d4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\gdi32full.dll) 24bc.26d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\gdi32full.dll 24bc.26d4: supR3HardenedDllNotificationCallback: load 00007ffc0a9c0000 LB 0x0002a000 C:\WINDOWS\System32\GDI32.dll [fFlags=0x0] 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\gdi32.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedDllNotificationCallback: load 00007ffc0a820000 LB 0x001a0000 C:\WINDOWS\System32\USER32.dll [fFlags=0x0] 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\user32.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedDllNotificationCallback: load 00007ffc09d10000 LB 0x00355000 C:\WINDOWS\System32\combase.dll [fFlags=0x0] 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\combase.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedDllNotificationCallback: load 00007ffc03d00000 LB 0x0002c000 C:\WINDOWS\SYSTEM32\GLU32.dll [fFlags=0x0] 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume5\Windows\System32\glu32.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedDllNotificationCallback: load 00007ffbe97f0000 LB 0x00125000 C:\WINDOWS\SYSTEM32\OPENGL32.dll [fFlags=0x0] 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume5\Windows\System32\opengl32.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedDllNotificationCallback: load 0000000075470000 LB 0x000d2000 C:\Program Files\Oracle\VirtualBox\MSVCR100.dll [fFlags=0x0] 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedDllNotificationCallback: load 00000000748f0000 LB 0x00098000 C:\Program Files\Oracle\VirtualBox\MSVCP100.dll [fFlags=0x0] 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedDllNotificationCallback: load 00007ffc09a60000 LB 0x0006b000 C:\WINDOWS\System32\WS2_32.dll [fFlags=0x0] 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\ws2_32.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedDllNotificationCallback: load 00007ffbbbc00000 LB 0x005e0000 C:\Program Files\Oracle\VirtualBox\VBoxRT.dll [fFlags=0x0] 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedDllNotificationCallback: load 00007ffc08bd0000 LB 0x00741000 C:\WINDOWS\System32\SHELL32.dll [fFlags=0x0] 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\shell32.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedDllNotificationCallback: load 00007ffc0a530000 LB 0x00129000 C:\WINDOWS\System32\ole32.dll [fFlags=0x0] 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\ole32.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedDllNotificationCallback: load 00007ffc015f0000 LB 0x0001d000 C:\WINDOWS\SYSTEM32\MPR.dll [fFlags=0x0] 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\mpr.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedDllNotificationCallback: load 0000000074f00000 LB 0x00565000 C:\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [fFlags=0x0] 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedDllNotificationCallback: load 00007ffbbb600000 LB 0x005f7000 C:\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [fFlags=0x0] 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedDllNotificationCallback: load 0000000074990000 LB 0x00561000 C:\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [fFlags=0x0] 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedDllNotificationCallback: load 00007ffc0a120000 LB 0x000cd000 C:\WINDOWS\System32\OLEAUT32.dll [fFlags=0x0] 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\oleaut32.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedDllNotificationCallback: load 00007ffbb7b30000 LB 0x02317000 C:\Program Files\Oracle\VirtualBox\UICommon.dll [fFlags=0x0] 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\UICommon.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedDllNotificationCallback: load 0000000074890000 LB 0x00054000 C:\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll [fFlags=0x0] 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedDllNotificationCallback: load 00007ffbfd5b0000 LB 0x00027000 C:\WINDOWS\SYSTEM32\WINMM.dll [fFlags=0x0] 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\winmm.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedDllNotificationCallback: load 00007ffbc75a0000 LB 0x001c8000 C:\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll [fFlags=0x0] 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801: [calling] 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc08770000 'api-ms-win-core-synch-l1-2-0' 24bc.26d4: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801: [calling] 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc08770000 'api-ms-win-core-fibers-l1-1-1' 24bc.26d4: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801: [calling] 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc08770000 'api-ms-win-core-fibers-l1-1-1' 24bc.26d4: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801: [calling] 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc08770000 'api-ms-win-core-synch-l1-2-0' 24bc.26d4: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-l1-2-1) -> 0x0, fPresent=1 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-l1-2-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801: [calling] 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc08770000 'api-ms-win-core-localization-l1-2-1' 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\kernel32.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume5\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\win32u.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume5\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\user32.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume5\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\gdi32.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume5\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\kernel32.dll (Input=kernel32, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801: [calling] 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc099a0000 'C:\WINDOWS\System32\kernel32.dll' 24bc.26d4: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-string-l1-1-0) -> 0x0, fPresent=1 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-string-l1-1-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801: [calling] 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc08770000 'api-ms-win-core-string-l1-1-0' 24bc.26d4: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-datetime-l1-1-1) -> 0x0, fPresent=1 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-datetime-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801: [calling] 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc08770000 'api-ms-win-core-datetime-l1-1-1' 24bc.26d4: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-obsolete-l1-2-0) -> 0x0, fPresent=1 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-obsolete-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801: [calling] 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc08770000 'api-ms-win-core-localization-obsolete-l1-2-0' 24bc.26d4: \Device\HarddiskVolume5\Windows\System32\imm32.dll: Owner is not trusted installer (01 02 00 00 00 00 00 05 20 00 00 00 21 02 00 00) 24bc.26d4: \Device\HarddiskVolume5\Windows\System32\imm32.dll: Relaxing the TrustedInstaller requirement for this DLL (it's in system32). 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'user32.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #25 'win32u.dll'. 24bc.26d4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\imm32.dll) 24bc.26d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\imm32.dll 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume5\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\win32u.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume5\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\user32.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\IMM32.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009: [calling] 24bc.26d4: supR3HardenedDllNotificationCallback: load 00007ffc0a790000 LB 0x00030000 C:\WINDOWS\System32\IMM32.DLL [fFlags=0x0] 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\imm32.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc0a790000 'C:\WINDOWS\system32\IMM32.DLL' 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: error opening 'C:\WINDOWS\System32\edgegdi.dll': 0 (NtPath=\??\C:\WINDOWS\System32\edgegdi.dll; Input=edgegdi.dll; rcNtGetDll=0xc0000135 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000034 'C:\WINDOWS\System32\edgegdi.dll' 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001: [calling] 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbbbc00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001: [calling] 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbbbc00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001: [calling] 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbbbc00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001: [calling] 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbbbc00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001: [calling] 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbbbc00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbbbc00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbbbc00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbbbc00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbbbc00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbbbc00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbbbc00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbbbc00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001: [calling] 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbbbc00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbbbc00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbbbc00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbbbc00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbbbc00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbbbc00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbbbc00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbbbc00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbbbc00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbbbc00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbbbc00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbbbc00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbbbc00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbbbc00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbbbc00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbbbc00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001: [calling] 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbbbc00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbbbc00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbbbc00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbbbc00000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\advapi32.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\ADVAPI32.DLL (Input=ADVAPI32.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001: [calling] 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc0a200000 'C:\WINDOWS\System32\ADVAPI32.DLL' 24bc.26d4: \Device\HarddiskVolume5\Windows\System32\cryptbase.dll: Owner is not trusted installer (01 02 00 00 00 00 00 05 20 00 00 00 21 02 00 00) 24bc.26d4: \Device\HarddiskVolume5\Windows\System32\cryptbase.dll: Relaxing the TrustedInstaller requirement for this DLL (it's in system32). 24bc.26d4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\cryptbase.dll) 24bc.26d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\cryptbase.dll 24bc.26d4: supR3HardenedDllNotificationCallback: load 00007ffc07b20000 LB 0x0000c000 C:\WINDOWS\SYSTEM32\CRYPTBASE.DLL [fFlags=0x0] 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\cryptbase.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedDllNotificationCallback: load 00007ffc08310000 LB 0x0007f000 C:\WINDOWS\System32\bcryptPrimitives.dll [fFlags=0x0] 24bc.26d4: \Device\HarddiskVolume5\Windows\System32\bcryptprimitives.dll: Owner is not trusted installer (01 02 00 00 00 00 00 05 20 00 00 00 21 02 00 00) 24bc.26d4: \Device\HarddiskVolume5\Windows\System32\bcryptprimitives.dll: Relaxing the TrustedInstaller requirement for this DLL (it's in system32). 24bc.26d4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\bcryptprimitives.dll) 24bc.26d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\bcryptprimitives.dll 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbc75a0000 'C:\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll' 24bc.26d4: \Device\HarddiskVolume5\Windows\System32\windows.storage.dll: Owner is not trusted installer (01 02 00 00 00 00 00 05 20 00 00 00 21 02 00 00) 24bc.26d4: \Device\HarddiskVolume5\Windows\System32\windows.storage.dll: Relaxing the TrustedInstaller requirement for this DLL (it's in system32). 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #31 'combase.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #32 'msvcp_win.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'wldp.dll'. 24bc.26d4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\windows.storage.dll) 24bc.26d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\windows.storage.dll 24bc.26d4: \Device\HarddiskVolume5\Windows\System32\wldp.dll: Owner is not trusted installer (01 02 00 00 00 00 00 05 20 00 00 00 21 02 00 00) 24bc.26d4: \Device\HarddiskVolume5\Windows\System32\wldp.dll: Relaxing the TrustedInstaller requirement for this DLL (it's in system32). 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 24bc.26d4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\wldp.dll) 24bc.26d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\wldp.dll 24bc.26d4: supR3HardenedDllNotificationCallback: load 00007ffc07c50000 LB 0x0002c000 C:\WINDOWS\SYSTEM32\Wldp.dll [fFlags=0x0] 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\wldp.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedDllNotificationCallback: load 00007ffc06390000 LB 0x00793000 C:\WINDOWS\SYSTEM32\windows.storage.dll [fFlags=0x0] 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\windows.storage.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedDllNotificationCallback: load 00007ffc0a070000 LB 0x000ae000 C:\WINDOWS\System32\SHCORE.dll [fFlags=0x0] 24bc.26d4: \Device\HarddiskVolume5\Windows\System32\SHCore.dll: Owner is not trusted installer (01 02 00 00 00 00 00 05 20 00 00 00 21 02 00 00) 24bc.26d4: \Device\HarddiskVolume5\Windows\System32\SHCore.dll: Relaxing the TrustedInstaller requirement for this DLL (it's in system32). 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #42 'combase.dll'. 24bc.26d4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\SHCore.dll) 24bc.26d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\SHCore.dll 24bc.26d4: supR3HardenedDllNotificationCallback: load 00007ffc09cb0000 LB 0x00055000 C:\WINDOWS\System32\shlwapi.dll [fFlags=0x0] 24bc.26d4: \Device\HarddiskVolume5\Windows\System32\shlwapi.dll: Owner is not trusted installer (01 02 00 00 00 00 00 05 20 00 00 00 21 02 00 00) 24bc.26d4: \Device\HarddiskVolume5\Windows\System32\shlwapi.dll: Relaxing the TrustedInstaller requirement for this DLL (it's in system32). 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'. 24bc.26d4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\shlwapi.dll) 24bc.26d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\shlwapi.dll 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\kernel32.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume5\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume5\Windows\System32\combase.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\combase.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume5\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume5\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'wldp.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'wldp.dll' -> '\Device\HarddiskVolume5\Windows\System32\wldp.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\wldp.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume5\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume5\Windows\System32\combase.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\combase.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\kernel32.dll (Input=kernel32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001: [calling] 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc099a0000 'C:\WINDOWS\System32\kernel32.dll' 24bc.26d4: \Device\HarddiskVolume5\Windows\System32\profapi.dll: Owner is not trusted installer (01 02 00 00 00 00 00 05 20 00 00 00 21 02 00 00) 24bc.26d4: \Device\HarddiskVolume5\Windows\System32\profapi.dll: Relaxing the TrustedInstaller requirement for this DLL (it's in system32). 24bc.26d4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\profapi.dll) 24bc.26d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\profapi.dll 24bc.26d4: supR3HardenedDllNotificationCallback: load 00007ffc081e0000 LB 0x00026000 C:\WINDOWS\SYSTEM32\profapi.dll [fFlags=0x0] 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\profapi.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'ole32.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'imm32.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'winmm.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'oleaut32.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'shell32.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'advapi32.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'qt5guivbox.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'qt5corevbox.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'msvcr100.dll'. 24bc.26d4: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\platforms\qwindows.dll) 24bc.26d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\platforms\qwindows.dll 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume5\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\advapi32.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume5\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\shell32.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume5\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\oleaut32.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume5\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\winmm.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume5\Windows\System32\imm32.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\imm32.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume5\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\user32.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume5\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\ole32.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume5\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\gdi32.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001: [calling] 24bc.26d4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\platforms\qwindows.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedDllNotificationCallback: load 00007ffbe91e0000 LB 0x0012e000 C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll [fFlags=0x0] 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume5\Program Files\Oracle\VirtualBox\platforms\qwindows.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbe91e0000 'C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll' 24bc.26d4: \Device\HarddiskVolume5\Windows\System32\kernel.appcore.dll: Owner is not trusted installer (01 02 00 00 00 00 00 05 20 00 00 00 21 02 00 00) 24bc.26d4: \Device\HarddiskVolume5\Windows\System32\kernel.appcore.dll: Relaxing the TrustedInstaller requirement for this DLL (it's in system32). 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcrt.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'rpcrt4.dll'. 24bc.26d4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\kernel.appcore.dll) 24bc.26d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\kernel.appcore.dll 24bc.26d4: supR3HardenedDllNotificationCallback: load 00007ffc06bb0000 LB 0x00013000 C:\WINDOWS\SYSTEM32\kernel.appcore.dll [fFlags=0x0] 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\kernel.appcore.dll [lacks WinVerifyTrust] 24bc.26d4: \Device\HarddiskVolume5\Windows\System32\uxtheme.dll: Owner is not trusted installer (01 02 00 00 00 00 00 05 20 00 00 00 21 02 00 00) 24bc.26d4: \Device\HarddiskVolume5\Windows\System32\uxtheme.dll: Relaxing the TrustedInstaller requirement for this DLL (it's in system32). 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #33 'gdi32.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'user32.dll'. 24bc.26d4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume5\Windows\System32\uxtheme.dll) 24bc.26d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\uxtheme.dll 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume5\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\user32.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume5\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\gdi32.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume5\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume5\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume5\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009: [calling] 24bc.26d4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume5\Windows\System32\uxtheme.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedDllNotificationCallback: load 00007ffc058d0000 LB 0x0009f000 C:\WINDOWS\system32\uxtheme.dll [fFlags=0x0] 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume5\Windows\System32\uxtheme.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc058d0000 'C:\WINDOWS\system32\uxtheme.dll' 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\user32.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc0a820000 'C:\WINDOWS\system32\user32.dll' 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\shell32.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001: [calling] 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc08bd0000 'C:\WINDOWS\system32\shell32.dll' 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\SHCore.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\SHCore.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001: [calling] 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc0a070000 'C:\WINDOWS\system32\SHCore.dll' 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: error opening 'C:\WINDOWS\system32\wintab32.dll': 0 (NtPath=\??\C:\WINDOWS\system32\wintab32.dll; Input=C:\WINDOWS\system32\wintab32.dll; rcNtGetDll=0x0 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000034 'C:\WINDOWS\system32\wintab32.dll' 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\winmm.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\winmm.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001: [calling] 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfd5b0000 'C:\WINDOWS\system32\winmm.dll' 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\winmm.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\winmm.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001: [calling] 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbfd5b0000 'C:\WINDOWS\system32\winmm.dll' 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\shell32.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001: [calling] 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc08bd0000 'C:\WINDOWS\system32\shell32.dll' 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume5\Windows\System32\uxtheme.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001: [calling] 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc058d0000 'C:\WINDOWS\system32\uxtheme.dll' 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\gdi32.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc0a9c0000 'C:\WINDOWS\system32\gdi32.dll' 24bc.26d4: supR3HardenedDllNotificationCallback: load 00007ffc09320000 LB 0x00115000 C:\WINDOWS\System32\MSCTF.dll [fFlags=0x0] 24bc.26d4: \Device\HarddiskVolume5\Windows\System32\msctf.dll: Owner is not trusted installer (01 02 00 00 00 00 00 05 20 00 00 00 21 02 00 00) 24bc.26d4: \Device\HarddiskVolume5\Windows\System32\msctf.dll: Relaxing the TrustedInstaller requirement for this DLL (it's in system32). 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'oleaut32.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'user32.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #37 'gdi32.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #38 'imm32.dll'. 24bc.26d4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\msctf.dll) 24bc.26d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\msctf.dll 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume5\Windows\System32\imm32.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\imm32.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume5\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\gdi32.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume5\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\user32.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume5\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\oleaut32.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume5\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc0a660000 'C:\WINDOWS\System32\rpcrt4.dll' 24bc.26d4: supR3HardenedDllNotificationCallback: load 00007ffc0a2b0000 LB 0x000a8000 C:\WINDOWS\System32\clbcatq.dll [fFlags=0x0] 24bc.26d4: \Device\HarddiskVolume5\Windows\System32\clbcatq.dll: Owner is not trusted installer (01 02 00 00 00 00 00 05 20 00 00 00 21 02 00 00) 24bc.26d4: \Device\HarddiskVolume5\Windows\System32\clbcatq.dll: Relaxing the TrustedInstaller requirement for this DLL (it's in system32). 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #30 'rpcrt4.dll'. 24bc.26d4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\clbcatq.dll) 24bc.26d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\clbcatq.dll 24bc.26d4: \Device\HarddiskVolume5\Windows\System32\DataExchange.dll: Owner is not trusted installer (01 02 00 00 00 00 00 05 20 00 00 00 21 02 00 00) 24bc.26d4: \Device\HarddiskVolume5\Windows\System32\DataExchange.dll: Relaxing the TrustedInstaller requirement for this DLL (it's in system32). 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'd3d11.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27 'dcomp.dll'. 24bc.26d4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume5\Windows\System32\DataExchange.dll) 24bc.26d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\DataExchange.dll 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dcomp.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'dcomp.dll' -> '\Device\HarddiskVolume5\Windows\System32\dcomp.dll' [rcNtRedir=0xc0150008] 24bc.26d4: \Device\HarddiskVolume5\Windows\System32\dcomp.dll: Owner is not trusted installer (01 02 00 00 00 00 00 05 20 00 00 00 21 02 00 00) 24bc.26d4: \Device\HarddiskVolume5\Windows\System32\dcomp.dll: Relaxing the TrustedInstaller requirement for this DLL (it's in system32). 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'win32u.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp_win.dll'. 24bc.26d4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\dcomp.dll) 24bc.26d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\dcomp.dll 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'd3d11.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'd3d11.dll' -> '\Device\HarddiskVolume5\Windows\System32\d3d11.dll' [rcNtRedir=0xc0150008] 24bc.26d4: \Device\HarddiskVolume5\Windows\System32\d3d11.dll: Owner is not trusted installer (01 02 00 00 00 00 00 05 20 00 00 00 21 02 00 00) 24bc.26d4: \Device\HarddiskVolume5\Windows\System32\d3d11.dll: Relaxing the TrustedInstaller requirement for this DLL (it's in system32). 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'dxgi.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #28 'win32u.dll'. 24bc.26d4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\d3d11.dll) 24bc.26d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\d3d11.dll 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume5\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume5\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume5\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume5\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\win32u.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dxgi.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'dxgi.dll' -> '\Device\HarddiskVolume5\Windows\System32\dxgi.dll' [rcNtRedir=0xc0150008] 24bc.26d4: \Device\HarddiskVolume5\Windows\System32\dxgi.dll: Owner is not trusted installer (01 02 00 00 00 00 00 05 20 00 00 00 21 02 00 00) 24bc.26d4: \Device\HarddiskVolume5\Windows\System32\dxgi.dll: Relaxing the TrustedInstaller requirement for this DLL (it's in system32). 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'win32u.dll'. 24bc.26d4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\dxgi.dll) 24bc.26d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\dxgi.dll 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume5\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume5\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume5\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\win32u.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume5\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\win32u.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 24bc.26d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume5\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 24bc.26d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\dataexchange.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009: [calling] 24bc.26d4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume5\Windows\System32\DataExchange.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\d3d11.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\dcomp.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\dxgi.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedDllNotificationCallback: load 00007ffc06bd0000 LB 0x000f3000 C:\WINDOWS\system32\dxgi.dll [fFlags=0x0] 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\dxgi.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedDllNotificationCallback: load 00007ffc043d0000 LB 0x00263000 C:\WINDOWS\system32\d3d11.dll [fFlags=0x0] 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\d3d11.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedDllNotificationCallback: load 00007ffc04c00000 LB 0x001e5000 C:\WINDOWS\system32\dcomp.dll [fFlags=0x0] 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\dcomp.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedDllNotificationCallback: load 00007ffbe2dc0000 LB 0x0003e000 C:\WINDOWS\system32\dataexchange.dll [fFlags=0x0] 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume5\Windows\System32\DataExchange.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\gdi32.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc0a9c0000 'C:\WINDOWS\System32\gdi32.dll' 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbe2dc0000 'C:\WINDOWS\system32\dataexchange.dll' 24bc.26d4: \Device\HarddiskVolume5\Windows\System32\twinapi.appcore.dll: Owner is not trusted installer (01 02 00 00 00 00 00 05 20 00 00 00 21 02 00 00) 24bc.26d4: \Device\HarddiskVolume5\Windows\System32\twinapi.appcore.dll: Relaxing the TrustedInstaller requirement for this DLL (it's in system32). 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #30 'rpcrt4.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #43 'combase.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #45 'msvcp_win.dll'. 24bc.26d4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\twinapi.appcore.dll) 24bc.26d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\twinapi.appcore.dll 24bc.26d4: supR3HardenedDllNotificationCallback: load 00007ffc00fb0000 LB 0x00207000 C:\WINDOWS\system32\twinapi.appcore.dll [fFlags=0x0] 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\twinapi.appcore.dll [lacks WinVerifyTrust] 24bc.3edc: \Device\HarddiskVolume5\Windows\System32\winmmbase.dll: Owner is not trusted installer (01 02 00 00 00 00 00 05 20 00 00 00 21 02 00 00) 24bc.3edc: \Device\HarddiskVolume5\Windows\System32\winmmbase.dll: Relaxing the TrustedInstaller requirement for this DLL (it's in system32). 24bc.3edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 24bc.3edc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\winmmbase.dll) 24bc.3edc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\winmmbase.dll 24bc.3edc: supR3HardenedDllNotificationCallback: load 00007ffbdd730000 LB 0x00026000 C:\WINDOWS\SYSTEM32\winmmbase.dll [fFlags=0x0] 24bc.3edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\winmmbase.dll [lacks WinVerifyTrust] 24bc.26d4: \Device\HarddiskVolume5\Windows\System32\TextInputFramework.dll: Owner is not trusted installer (01 02 00 00 00 00 00 05 20 00 00 00 21 02 00 00) 24bc.26d4: \Device\HarddiskVolume5\Windows\System32\TextInputFramework.dll: Relaxing the TrustedInstaller requirement for this DLL (it's in system32). 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #15 'oleaut32.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #17 'rpcrt4.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #20 'coreuicomponents.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #21 'coremessaging.dll'. 24bc.26d4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\TextInputFramework.dll) 24bc.26d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\TextInputFramework.dll 24bc.26d4: \Device\HarddiskVolume5\Windows\System32\CoreUIComponents.dll: Owner is not trusted installer (01 02 00 00 00 00 00 05 20 00 00 00 21 02 00 00) 24bc.26d4: \Device\HarddiskVolume5\Windows\System32\CoreUIComponents.dll: Relaxing the TrustedInstaller requirement for this DLL (it's in system32). 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'coremessaging.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #40 'rpcrt4.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #48 'shcore.dll'. 24bc.26d4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\CoreUIComponents.dll) 24bc.26d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\CoreUIComponents.dll 24bc.26d4: \Device\HarddiskVolume5\Windows\System32\CoreMessaging.dll: Owner is not trusted installer (01 02 00 00 00 00 00 05 20 00 00 00 21 02 00 00) 24bc.26d4: \Device\HarddiskVolume5\Windows\System32\CoreMessaging.dll: Relaxing the TrustedInstaller requirement for this DLL (it's in system32). 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #20 'ws2_32.dll'. 24bc.26d4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\CoreMessaging.dll) 24bc.26d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\CoreMessaging.dll 24bc.26d4: \Device\HarddiskVolume5\Windows\System32\ntmarta.dll: Owner is not trusted installer (01 02 00 00 00 00 00 05 20 00 00 00 21 02 00 00) 24bc.26d4: \Device\HarddiskVolume5\Windows\System32\ntmarta.dll: Relaxing the TrustedInstaller requirement for this DLL (it's in system32). 24bc.26d4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\ntmarta.dll) 24bc.26d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\ntmarta.dll 24bc.26d4: \Device\HarddiskVolume5\Windows\System32\WinTypes.dll: Owner is not trusted installer (01 02 00 00 00 00 00 05 20 00 00 00 21 02 00 00) 24bc.26d4: \Device\HarddiskVolume5\Windows\System32\WinTypes.dll: Relaxing the TrustedInstaller requirement for this DLL (it's in system32). 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'combase.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #24 'rpcrt4.dll'. 24bc.26d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #32 'bcryptprimitives.dll'. 24bc.26d4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\WinTypes.dll) 24bc.26d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\WinTypes.dll 24bc.26d4: supR3HardenedDllNotificationCallback: load 00007ffc07080000 LB 0x00033000 C:\WINDOWS\SYSTEM32\ntmarta.dll [fFlags=0x0] 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\ntmarta.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedDllNotificationCallback: load 00007ffc054e0000 LB 0x000f2000 C:\WINDOWS\System32\CoreMessaging.dll [fFlags=0x0] 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\CoreMessaging.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedDllNotificationCallback: load 00007ffc03e10000 LB 0x00156000 C:\WINDOWS\SYSTEM32\wintypes.dll [fFlags=0x0] 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\WinTypes.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedDllNotificationCallback: load 00007ffc05180000 LB 0x0035a000 C:\WINDOWS\System32\CoreUIComponents.dll [fFlags=0x0] 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\CoreUIComponents.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedDllNotificationCallback: load 00007ffbf4160000 LB 0x000fd000 C:\WINDOWS\SYSTEM32\textinputframework.dll [fFlags=0x0] 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\TextInputFramework.dll [lacks WinVerifyTrust] 24bc.3edc: \Device\HarddiskVolume5\Windows\System32\MMDevAPI.dll: Owner is not trusted installer (01 02 00 00 00 00 00 05 20 00 00 00 21 02 00 00) 24bc.3edc: \Device\HarddiskVolume5\Windows\System32\MMDevAPI.dll: Relaxing the TrustedInstaller requirement for this DLL (it's in system32). 24bc.3edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'. 24bc.3edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #16 'rpcrt4.dll'. 24bc.3edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #28 'devobj.dll'. 24bc.3edc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\MMDevAPI.dll) 24bc.3edc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\MMDevAPI.dll 24bc.3edc: \Device\HarddiskVolume5\Windows\System32\devobj.dll: Owner is not trusted installer (01 02 00 00 00 00 00 05 20 00 00 00 21 02 00 00) 24bc.3edc: \Device\HarddiskVolume5\Windows\System32\devobj.dll: Relaxing the TrustedInstaller requirement for this DLL (it's in system32). 24bc.3edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'cfgmgr32.dll'. 24bc.3edc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\devobj.dll) 24bc.3edc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\devobj.dll 24bc.3edc: supR3HardenedDllNotificationCallback: load 00007ffc08530000 LB 0x0004d000 C:\WINDOWS\System32\cfgmgr32.dll [fFlags=0x0] 24bc.3edc: \Device\HarddiskVolume5\Windows\System32\cfgmgr32.dll: Owner is not trusted installer (01 02 00 00 00 00 00 05 20 00 00 00 21 02 00 00) 24bc.3edc: \Device\HarddiskVolume5\Windows\System32\cfgmgr32.dll: Relaxing the TrustedInstaller requirement for this DLL (it's in system32). 24bc.3edc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\cfgmgr32.dll) 24bc.3edc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\cfgmgr32.dll 24bc.3edc: supR3HardenedDllNotificationCallback: load 00007ffc07f90000 LB 0x0002c000 C:\WINDOWS\SYSTEM32\DEVOBJ.dll [fFlags=0x0] 24bc.3edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\devobj.dll [lacks WinVerifyTrust] 24bc.3edc: supR3HardenedDllNotificationCallback: load 00007ffc00040000 LB 0x00072000 C:\WINDOWS\SYSTEM32\MMDevAPI.DLL [fFlags=0x0] 24bc.3edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust] 24bc.3edc: \Device\HarddiskVolume5\Windows\System32\wdmaud.drv: Owner is not trusted installer (01 02 00 00 00 00 00 05 20 00 00 00 21 02 00 00) 24bc.3edc: \Device\HarddiskVolume5\Windows\System32\wdmaud.drv: Relaxing the TrustedInstaller requirement for this DLL (it's in system32). 24bc.3edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 24bc.3edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'mmdevapi.dll'. 24bc.3edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'ksuser.dll'. 24bc.3edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #30 'avrt.dll'. 24bc.3edc: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume5\Windows\System32\wdmaud.drv) 24bc.3edc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\wdmaud.drv 24bc.3edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'avrt.dll'... 24bc.3edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'avrt.dll' -> '\Device\HarddiskVolume5\Windows\System32\avrt.dll' [rcNtRedir=0xc0150008] 24bc.3edc: \Device\HarddiskVolume5\Windows\System32\avrt.dll: Owner is not trusted installer (01 02 00 00 00 00 00 05 20 00 00 00 21 02 00 00) 24bc.3edc: \Device\HarddiskVolume5\Windows\System32\avrt.dll: Relaxing the TrustedInstaller requirement for this DLL (it's in system32). 24bc.3edc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\avrt.dll) 24bc.3edc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\avrt.dll 24bc.3edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ksuser.dll'... 24bc.3edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'ksuser.dll' -> '\Device\HarddiskVolume5\Windows\System32\ksuser.dll' [rcNtRedir=0xc0150008] 24bc.3edc: \Device\HarddiskVolume5\Windows\System32\ksuser.dll: Owner is not trusted installer (01 02 00 00 00 00 00 05 20 00 00 00 21 02 00 00) 24bc.3edc: \Device\HarddiskVolume5\Windows\System32\ksuser.dll: Relaxing the TrustedInstaller requirement for this DLL (it's in system32). 24bc.3edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 24bc.3edc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume5\Windows\System32\ksuser.dll) 24bc.3edc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\ksuser.dll 24bc.3edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mmdevapi.dll'... 24bc.3edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'mmdevapi.dll' -> '\Device\HarddiskVolume5\Windows\System32\mmdevapi.dll' [rcNtRedir=0xc0150008] 24bc.3edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust] 24bc.3edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 24bc.3edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume5\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 24bc.3edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 24bc.3edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'cfgmgr32.dll'... 24bc.3edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'cfgmgr32.dll' -> '\Device\HarddiskVolume5\Windows\System32\cfgmgr32.dll' [rcNtRedir=0xc0150008] 24bc.3edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\cfgmgr32.dll [lacks WinVerifyTrust] 24bc.3edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'devobj.dll'... 24bc.3edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'devobj.dll' -> '\Device\HarddiskVolume5\Windows\System32\devobj.dll' [rcNtRedir=0xc0150008] 24bc.3edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\devobj.dll [lacks WinVerifyTrust] 24bc.3edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... 24bc.3edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume5\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008] 24bc.3edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] 24bc.3edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'... 24bc.3edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume5\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008] 24bc.3edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust] 24bc.3edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'... 24bc.3edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume5\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008] 24bc.3edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust] 24bc.3edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... 24bc.3edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume5\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008] 24bc.3edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] 24bc.3edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'... 24bc.3edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume5\Windows\System32\combase.dll' [rcNtRedir=0xc0150008] 24bc.3edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\combase.dll [lacks WinVerifyTrust] 24bc.3edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'... 24bc.3edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume5\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008] 24bc.3edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\ws2_32.dll [lacks WinVerifyTrust] 24bc.3edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 24bc.3edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume5\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 24bc.3edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 24bc.3edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shcore.dll'... 24bc.3edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'shcore.dll' -> '\Device\HarddiskVolume5\Windows\System32\shcore.dll' [rcNtRedir=0xc0150008] 24bc.3edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\SHCore.dll [lacks WinVerifyTrust] 24bc.3edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... 24bc.3edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume5\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008] 24bc.3edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] 24bc.3edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coremessaging.dll'... 24bc.3edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'coremessaging.dll' -> '\Device\HarddiskVolume5\Windows\System32\coremessaging.dll' [rcNtRedir=0xc0150008] 24bc.3edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\CoreMessaging.dll [lacks WinVerifyTrust] 24bc.3edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 24bc.3edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume5\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 24bc.3edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 24bc.3edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coremessaging.dll'... 24bc.3edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'coremessaging.dll' -> '\Device\HarddiskVolume5\Windows\System32\coremessaging.dll' [rcNtRedir=0xc0150008] 24bc.3edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\CoreMessaging.dll [lacks WinVerifyTrust] 24bc.3edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coreuicomponents.dll'... 24bc.3edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'coreuicomponents.dll' -> '\Device\HarddiskVolume5\Windows\System32\coreuicomponents.dll' [rcNtRedir=0xc0150008] 24bc.3edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\CoreUIComponents.dll [lacks WinVerifyTrust] 24bc.3edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... 24bc.3edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume5\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008] 24bc.3edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] 24bc.3edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'... 24bc.3edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume5\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008] 24bc.3edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\oleaut32.dll [lacks WinVerifyTrust] 24bc.3edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 24bc.3edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume5\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 24bc.3edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 24bc.3edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 24bc.3edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume5\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 24bc.3edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 24bc.3edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'... 24bc.3edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume5\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008] 24bc.3edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust] 24bc.3edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'... 24bc.3edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume5\Windows\System32\combase.dll' [rcNtRedir=0xc0150008] 24bc.3edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\combase.dll [lacks WinVerifyTrust] 24bc.3edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... 24bc.3edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume5\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008] 24bc.3edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] 24bc.3edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 24bc.3edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume5\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 24bc.3edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 24bc.3edc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001: [calling] 24bc.3edc: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume5\Windows\System32\wdmaud.drv [lacks WinVerifyTrust] 24bc.3edc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\ksuser.dll [lacks WinVerifyTrust] 24bc.3edc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\avrt.dll [lacks WinVerifyTrust] 24bc.3edc: supR3HardenedDllNotificationCallback: load 00007ffc03d30000 LB 0x00009000 C:\WINDOWS\SYSTEM32\ksuser.dll [fFlags=0x0] 24bc.3edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\ksuser.dll [lacks WinVerifyTrust] 24bc.3edc: supR3HardenedDllNotificationCallback: load 00007ffc028d0000 LB 0x0000a000 C:\WINDOWS\SYSTEM32\AVRT.dll [fFlags=0x0] 24bc.3edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\avrt.dll [lacks WinVerifyTrust] 24bc.3edc: supR3HardenedDllNotificationCallback: load 00007ffbed140000 LB 0x00046000 C:\WINDOWS\System32\wdmaud.drv [fFlags=0x0] 24bc.3edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume5\Windows\System32\wdmaud.drv [lacks WinVerifyTrust] 24bc.3edc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbed140000 'C:\WINDOWS\System32\wdmaud.drv' 24bc.3edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume5\Windows\System32\wdmaud.drv [lacks WinVerifyTrust] 24bc.3edc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001: [calling] 24bc.3edc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbed140000 'C:\WINDOWS\System32\wdmaud.drv' 24bc.26d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume5\Windows\System32\msctf.dll [lacks WinVerifyTrust] 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\MSCTF.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009: [calling] 24bc.26d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc09320000 'C:\WINDOWS\System32\MSCTF.dll' 3b0c.3ea4: supR3HardNtChildWaitFor[1]: Quitting: ExitCode=0x1 (rcNtWait=0x0, rcNt1=0x0, rcNt2=0x103, rcNt3=0x103, 151344 ms, the end);