cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
dan007004
  • 8 Posts
  • 0 Likes Given
  • 1 Solutions
  • 0 Likes Received
This widget could not be displayed.

Re: Error Result Code: E_FAIL (0x80004005) but VM enabled

by Fluorite | Level 6 in SAS Programming
‎08-28-2018 01:25 AM
‎08-28-2018 01:25 AM
@ballardw wrote: Which browser do you use? Did it update recently?   There have been repeated instances of Chrome updating and breaking the install for University Edition. If this sounds likely you might try backing the level of the browser to the previous version. @ballardw wrote: Which browser do you use? Did it update recently?   There have been repeated instances of Chrome updating and breaking the install for University Edition. If this sounds likely you might try backing the level of the browser to the previous version. @ballardw wrote: Which browser do you use? Did it update recently?   There have been repeated instances of Chrome updating and breaking the install for University Edition. If this sounds likely you might try backing the level of the browser to the previous version. @ballardw wrote: Which browser do you use? Did it update recently?   There have been repeated instances of Chrome updating and breaking the install for University Edition. If this sounds likely you might try backing the level of the browser to the previous version. Hi,   I eventually tried these steps and it's worked:-   1. Uninstalled VM completely and removed all of the VM and old log files from the c:. Cleaned out all the files. 2. Restarted PC and installed Virtual Box 5.2.18. 3. Installed university edition 4. Configured for Redhat 64 bit processor 5. Located the shared folder (C:\SASUniversityEdition\myfolders) 6. Rebooted 7. Launched and it's worked.   I am guessing either Chrome or Windows update caused something to go wrong with the links....   All resolved but thanks for your help as always. Please close down the ticket.   Dan ... View more

Re: Error Result Code: E_FAIL (0x80004005) but VM enabled

by Fluorite | Level 6 in SAS Programming
‎08-28-2018 01:23 AM
‎08-28-2018 01:23 AM
Hi,   I eventually tried these steps and it's worked:-   1. Uninstalled VM completely and removed all of the VM and old log files from the c:. Cleaned out all the files. 2. Restarted PC and installed Virtual Box 5.2.18. 3. Installed university edition 4. Configured for Redhat 64 bit processor 5. Located the shared folder (C:\SASUniversityEdition\myfolders) 6. Rebooted 7. Launched and it's worked.   I am guessing either Chrome or Windows update caused something to go wrong with the links....   All resolved but thanks for your help as always. Please close down the ticket.   Dan ... View more

Error Result Code: E_FAIL (0x80004005) but VM enabled

by Fluorite | Level 6 in SAS Programming
‎08-27-2018 05:55 AM
‎08-27-2018 05:55 AM
Hi all,   I've had SAS university edition running for several weeks now/months without issues. Suddenly when I launched SAS yesterday I was prompted wiht the above error. I've now checked VM is enabled in the Bios and it is definitely enabled.   I reinstalled the VM completely and it started working again. Today it's happened again.   Do you know how to fix this issue?   Would be very grateful if you can help.   Error:-   Failed to open a session for the virtual machine SAS University Edition. The virtual machine 'SAS University Edition' has terminated unexpectedly during startup with exit code 1 (0x1). More details may be available in 'C:\Users\danie\VirtualBox VMs\SAS University Edition\Logs\VBoxHardening.log'. Result Code: E_FAIL (0x80004005) Component: MachineWrap Interface: IMachine {85cd948e-a71f-4289-281e-0ca7ad48cd89}   Output from error log:-   798.2ba4: Log file opened: 5.2.18r124319 g_hStartupLog=0000000000000068 g_uNtVerCombined=0xa042ee00 798.2ba4: \SystemRoot\System32\ntdll.dll: 798.2ba4: CreationTime: 2018-08-20T07:01:23.890832300Z 798.2ba4: LastWriteTime: 2018-08-03T03:38:55.954592700Z 798.2ba4: ChangeTime: 2018-08-20T07:14:46.324289700Z 798.2ba4: FileAttributes: 0x20 798.2ba4: Size: 0x1db0c0 798.2ba4: NT Headers: 0xe8 798.2ba4: Timestamp: 0x6d15b6d7 798.2ba4: Machine: 0x8664 - amd64 798.2ba4: Timestamp: 0x6d15b6d7 798.2ba4: Image Version: 10.0 798.2ba4: SizeOfImage: 0x1e1000 (1970176) 798.2ba4: Resource Dir: 0x174000 LB 0x6b3e8 798.2ba4: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)] 798.2ba4: [Raw version resource data: 0x1740f0 LB 0x380, codepage 0x0 (reserved 0x0)] 798.2ba4: ProductName: Microsoft® Windows® Operating System 798.2ba4: ProductVersion: 10.0.17134.228 798.2ba4: FileVersion: 10.0.17134.228 (WinBuild.160101.0800) 798.2ba4: FileDescription: NT Layer DLL 798.2ba4: \SystemRoot\System32\kernel32.dll: 798.2ba4: CreationTime: 2018-04-11T23:34:40.510607900Z 798.2ba4: LastWriteTime: 2018-04-11T23:34:40.510607900Z 798.2ba4: ChangeTime: 2018-07-30T11:51:19.879679400Z 798.2ba4: FileAttributes: 0x20 798.2ba4: Size: 0xafef8 798.2ba4: NT Headers: 0xe8 798.2ba4: Timestamp: 0x5f488a51 798.2ba4: Machine: 0x8664 - amd64 798.2ba4: Timestamp: 0x5f488a51 798.2ba4: Image Version: 10.0 798.2ba4: SizeOfImage: 0xb2000 (729088) 798.2ba4: Resource Dir: 0xb0000 LB 0x520 798.2ba4: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)] 798.2ba4: [Raw version resource data: 0xb00b0 LB 0x3a4, codepage 0x0 (reserved 0x0)] 798.2ba4: ProductName: Microsoft® Windows® Operating System 798.2ba4: ProductVersion: 10.0.17134.1 798.2ba4: FileVersion: 10.0.17134.1 (WinBuild.160101.0800) 798.2ba4: FileDescription: Windows NT BASE API Client DLL 798.2ba4: \SystemRoot\System32\KernelBase.dll: 798.2ba4: CreationTime: 2018-07-30T10:55:22.030023200Z 798.2ba4: LastWriteTime: 2018-07-30T10:55:22.063236400Z 798.2ba4: ChangeTime: 2018-08-20T07:04:15.071933000Z 798.2ba4: FileAttributes: 0x20 798.2ba4: Size: 0x273dd0 798.2ba4: NT Headers: 0xf8 798.2ba4: Timestamp: 0xb0bb231d 798.2ba4: Machine: 0x8664 - amd64 798.2ba4: Timestamp: 0xb0bb231d 798.2ba4: Image Version: 10.0 798.2ba4: SizeOfImage: 0x273000 (2568192) 798.2ba4: Resource Dir: 0x251000 LB 0x548 798.2ba4: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)] 798.2ba4: [Raw version resource data: 0x2510b0 LB 0x3bc, codepage 0x0 (reserved 0x0)] 798.2ba4: ProductName: Microsoft® Windows® Operating System 798.2ba4: ProductVersion: 10.0.17134.165 798.2ba4: FileVersion: 10.0.17134.165 (WinBuild.160101.0800) 798.2ba4: FileDescription: Windows NT BASE API Client DLL 798.2ba4: \SystemRoot\System32\apisetschema.dll: 798.2ba4: CreationTime: 2018-04-11T23:34:44.042150700Z 798.2ba4: LastWriteTime: 2018-04-11T23:34:44.042150700Z 798.2ba4: ChangeTime: 2018-07-30T10:36:52.710859100Z 798.2ba4: FileAttributes: 0x20 798.2ba4: Size: 0x1bd98 798.2ba4: NT Headers: 0xd0 798.2ba4: Timestamp: 0xd02ff418 798.2ba4: Machine: 0x8664 - amd64 798.2ba4: Timestamp: 0xd02ff418 798.2ba4: Image Version: 10.0 798.2ba4: SizeOfImage: 0x1c000 (114688) 798.2ba4: Resource Dir: 0x1b000 LB 0x408 798.2ba4: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)] 798.2ba4: [Raw version resource data: 0x1b060 LB 0x3a8, codepage 0x0 (reserved 0x0)] 798.2ba4: ProductName: Microsoft® Windows® Operating System 798.2ba4: ProductVersion: 10.0.17134.1 798.2ba4: FileVersion: 10.0.17134.1 (WinBuild.160101.0800) 798.2ba4: FileDescription: ApiSet Schema DLL 798.2ba4: NtOpenDirectoryObject failed on \Driver: 0xc0000022 798.2ba4: supR3HardenedWinFindAdversaries: 0x0 798.2ba4: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox' 798.2ba4: Calling main() 798.2ba4: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2 798.2ba4: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox' 798.2ba4: SUPR3HardenedMain: Respawn #1 798.2ba4: System32: \Device\HarddiskVolume3\Windows\System32 798.2ba4: WinSxS: \Device\HarddiskVolume3\Windows\WinSxS 798.2ba4: KnownDllPath: C:\WINDOWS\System32 798.2ba4: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports 798.2ba4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe) 798.2ba4: supR3HardNtEnableThreadCreation: 798.2ba4: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007fffda822fc0 pvNtTerminateThread=00007fffda84a900 798.2ba4: supR3HardenedWinDoReSpawn(1): New child 924.3004 [kernel32]. 798.2ba4: supR3HardNtChildGatherData: PebBaseAddress=0000000000dec000 cbPeb=0x388 798.2ba4: supR3HardNtPuChFindNtdll: uNtDllParentAddr=00007fffda7b0000 uNtDllChildAddr=00007fffda7b0000 798.2ba4: supR3HardenedWinSetupChildInit: uLdrInitThunk=00007fffda822fc0 798.2ba4: supR3HardenedWinSetupChildInit: Start child. 798.2ba4: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 0 ms. 798.2ba4: supR3HardNtChildPurify: Startup delay kludge #1/0: 264 ms, 32 sleeps 798.2ba4: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION 798.2ba4: *0000000000000000-0000000000aeffff 0x0001/0x0000 0x0000000 798.2ba4: *0000000000af0000-0000000000b0ffff 0x0004/0x0004 0x0020000 798.2ba4: *0000000000b10000-0000000000b28fff 0x0002/0x0002 0x0040000 798.2ba4: 0000000000b29000-0000000000b2ffff 0x0001/0x0000 0x0000000 798.2ba4: *0000000000b30000-0000000000b33fff 0x0002/0x0002 0x0040000 798.2ba4: 0000000000b34000-0000000000b3ffff 0x0001/0x0000 0x0000000 798.2ba4: *0000000000b40000-0000000000b40fff 0x0004/0x0004 0x0020000 798.2ba4: 0000000000b41000-0000000000bfffff 0x0001/0x0000 0x0000000 798.2ba4: *0000000000c00000-0000000000debfff 0x0000/0x0004 0x0020000 798.2ba4: 0000000000dec000-0000000000deefff 0x0004/0x0004 0x0020000 798.2ba4: 0000000000def000-0000000000dfffff 0x0000/0x0004 0x0020000 798.2ba4: *0000000000e00000-0000000000efafff 0x0000/0x0004 0x0020000 798.2ba4: 0000000000efb000-0000000000efdfff 0x0104/0x0004 0x0020000 798.2ba4: 0000000000efe000-0000000000efffff 0x0004/0x0004 0x0020000 798.2ba4: 0000000000f00000-000000007ffdffff 0x0001/0x0000 0x0000000 798.2ba4: *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000 798.2ba4: 000000007ffe1000-00007ff5bd41ffff 0x0001/0x0000 0x0000000 798.2ba4: *00007ff5bd420000-00007ff5bd442fff 0x0002/0x0002 0x0040000 798.2ba4: 00007ff5bd443000-00007ff68eb4ffff 0x0001/0x0000 0x0000000 798.2ba4: *00007ff68eb50000-00007ff68eb50fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe 798.2ba4: 00007ff68eb51000-00007ff68ebc1fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe 798.2ba4: 00007ff68ebc2000-00007ff68ebc2fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe 798.2ba4: 00007ff68ebc3000-00007ff68ec08fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe 798.2ba4: 00007ff68ec09000-00007ff68ec09fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe 798.2ba4: 00007ff68ec0a000-00007ff68ec0afff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe 798.2ba4: 00007ff68ec0b000-00007ff68ec0ffff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe 798.2ba4: 00007ff68ec10000-00007ff68ec10fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe 798.2ba4: 00007ff68ec11000-00007ff68ec11fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe 798.2ba4: 00007ff68ec12000-00007ff68ec15fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe 798.2ba4: 00007ff68ec16000-00007ff68ec5dfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe 798.2ba4: 00007ff68ec5e000-00007fffda7affff 0x0001/0x0000 0x0000000 798.2ba4: *00007fffda7b0000-00007fffda7b0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll 798.2ba4: 00007fffda7b1000-00007fffda8bffff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll 798.2ba4: 00007fffda8c0000-00007fffda905fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll 798.2ba4: 00007fffda906000-00007fffda910fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll 798.2ba4: 00007fffda911000-00007fffda91efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll 798.2ba4: 00007fffda91f000-00007fffda91ffff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll 798.2ba4: 00007fffda920000-00007fffda922fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll 798.2ba4: 00007fffda923000-00007fffda990fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll 798.2ba4: 00007fffda991000-00007ffffffeffff 0x0001/0x0000 0x0000000 798.2ba4: VirtualBox.exe: timestamp 0x5b72bf7e (rc=VINF_SUCCESS) 798.2ba4: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports 798.2ba4: '\Device\HarddiskVolume3\Windows\System32\ntdll.dll' has no imports 798.2ba4: supR3HardNtChildPurify: Done after 323 ms and 0 fixes (loop #0). 798.2ba4: supR3HardNtEnableThreadCreation: 924.3004: Log file opened: 5.2.18r124319 g_hStartupLog=0000000000000004 g_uNtVerCombined=0xa042ee00 924.3004: supR3HardenedVmProcessInit: uNtDllAddr=00007fffda7b0000 g_uNtVerCombined=0xa042ee00 924.3004: ntdll.dll: timestamp 0x6d15b6d7 (rc=VINF_SUCCESS) 924.3004: New simple heap: #1 0000000001000000 LB 0x400000 (for 1970176 allocation) 924.3004: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox' 924.3004: System32: \Device\HarddiskVolume3\Windows\System32 924.3004: WinSxS: \Device\HarddiskVolume3\Windows\WinSxS 924.3004: KnownDllPath: C:\WINDOWS\System32 924.3004: supR3HardenedVmProcessInit: Opening vboxdrv stub... 924.3004: supR3HardenedVmProcessInit: Restoring LdrInitializeThunk... 924.3004: supR3HardenedVmProcessInit: Returning to LdrInitializeThunk... 924.3004: Registered Dll notification callback with NTDLL. 924.3004: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\kernel32.dll) 924.3004: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\kernel32.dll 924.3004: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\KERNEL32.DLL (Input=KERNEL32.DLL, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000004001:<flags> [calling] 924.3004: supR3HardenedDllNotificationCallback: load 00007fffd6c80000 LB 0x00273000 C:\WINDOWS\System32\KERNELBASE.dll [fFlags=0x0] 924.3004: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\KernelBase.dll) 924.3004: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\KernelBase.dll 924.3004: supR3HardenedDllNotificationCallback: load 00007fffd7e20000 LB 0x000b2000 C:\WINDOWS\System32\KERNEL32.DLL [fFlags=0x0] 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\kernel32.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffd7e20000 'C:\WINDOWS\System32\KERNEL32.DLL' 924.3004: supR3HardenedDllNotificationCallback: load 00007ff68eb50000 LB 0x0010e000 C:\Program Files\Oracle\VirtualBox\VirtualBox.exe [fFlags=0x0] 924.3004: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports 924.3004: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe) 924.3004: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe 924.3004: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007fffda822fc0 pvNtTerminateThread=00007fffda84a900 798.2ba4: supR3HardNtChildWaitFor: Found expected request 1 (CloseEvents) after 83 ms. 924.3004: \SystemRoot\System32\ntdll.dll: 924.3004: CreationTime: 2018-08-20T07:01:23.890832300Z 924.3004: LastWriteTime: 2018-08-03T03:38:55.954592700Z 924.3004: ChangeTime: 2018-08-20T07:14:46.324289700Z 924.3004: FileAttributes: 0x20 924.3004: Size: 0x1db0c0 924.3004: NT Headers: 0xe8 924.3004: Timestamp: 0x6d15b6d7 924.3004: Machine: 0x8664 - amd64 924.3004: Timestamp: 0x6d15b6d7 924.3004: Image Version: 10.0 924.3004: SizeOfImage: 0x1e1000 (1970176) 924.3004: Resource Dir: 0x174000 LB 0x6b3e8 924.3004: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)] 924.3004: [Raw version resource data: 0x1740f0 LB 0x380, codepage 0x0 (reserved 0x0)] 924.3004: ProductName: Microsoft® Windows® Operating System 924.3004: ProductVersion: 10.0.17134.228 924.3004: FileVersion: 10.0.17134.228 (WinBuild.160101.0800) 924.3004: FileDescription: NT Layer DLL 924.3004: \SystemRoot\System32\kernel32.dll: 924.3004: CreationTime: 2018-04-11T23:34:40.510607900Z 924.3004: LastWriteTime: 2018-04-11T23:34:40.510607900Z 924.3004: ChangeTime: 2018-07-30T11:51:19.879679400Z 924.3004: FileAttributes: 0x20 924.3004: Size: 0xafef8 924.3004: NT Headers: 0xe8 924.3004: Timestamp: 0x5f488a51 924.3004: Machine: 0x8664 - amd64 924.3004: Timestamp: 0x5f488a51 924.3004: Image Version: 10.0 924.3004: SizeOfImage: 0xb2000 (729088) 924.3004: Resource Dir: 0xb0000 LB 0x520 924.3004: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)] 924.3004: [Raw version resource data: 0xb00b0 LB 0x3a4, codepage 0x0 (reserved 0x0)] 924.3004: ProductName: Microsoft® Windows® Operating System 924.3004: ProductVersion: 10.0.17134.1 924.3004: FileVersion: 10.0.17134.1 (WinBuild.160101.0800) 924.3004: FileDescription: Windows NT BASE API Client DLL 924.3004: \SystemRoot\System32\KernelBase.dll: 924.3004: CreationTime: 2018-07-30T10:55:22.030023200Z 924.3004: LastWriteTime: 2018-07-30T10:55:22.063236400Z 924.3004: ChangeTime: 2018-08-20T07:04:15.071933000Z 924.3004: FileAttributes: 0x20 924.3004: Size: 0x273dd0 924.3004: NT Headers: 0xf8 924.3004: Timestamp: 0xb0bb231d 924.3004: Machine: 0x8664 - amd64 924.3004: Timestamp: 0xb0bb231d 924.3004: Image Version: 10.0 924.3004: SizeOfImage: 0x273000 (2568192) 924.3004: Resource Dir: 0x251000 LB 0x548 924.3004: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)] 924.3004: [Raw version resource data: 0x2510b0 LB 0x3bc, codepage 0x0 (reserved 0x0)] 924.3004: ProductName: Microsoft® Windows® Operating System 924.3004: ProductVersion: 10.0.17134.165 924.3004: FileVersion: 10.0.17134.165 (WinBuild.160101.0800) 924.3004: FileDescription: Windows NT BASE API Client DLL 924.3004: \SystemRoot\System32\apisetschema.dll: 924.3004: CreationTime: 2018-04-11T23:34:44.042150700Z 924.3004: LastWriteTime: 2018-04-11T23:34:44.042150700Z 924.3004: ChangeTime: 2018-07-30T10:36:52.710859100Z 924.3004: FileAttributes: 0x20 924.3004: Size: 0x1bd98 924.3004: NT Headers: 0xd0 924.3004: Timestamp: 0xd02ff418 924.3004: Machine: 0x8664 - amd64 924.3004: Timestamp: 0xd02ff418 924.3004: Image Version: 10.0 924.3004: SizeOfImage: 0x1c000 (114688) 924.3004: Resource Dir: 0x1b000 LB 0x408 924.3004: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)] 924.3004: [Raw version resource data: 0x1b060 LB 0x3a8, codepage 0x0 (reserved 0x0)] 924.3004: ProductName: Microsoft® Windows® Operating System 924.3004: ProductVersion: 10.0.17134.1 924.3004: FileVersion: 10.0.17134.1 (WinBuild.160101.0800) 924.3004: FileDescription: ApiSet Schema DLL 924.3004: NtOpenDirectoryObject failed on \Driver: 0xc0000022 924.3004: supR3HardenedWinFindAdversaries: 0x0 924.3004: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox' 924.3004: Calling main() 924.3004: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2 924.3004: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox' 924.3004: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports 924.3004: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe) 924.3004: SUPR3HardenedMain: Respawn #2 924.3004: supR3HardNtEnableThreadCreation: 924.3004: '\Device\HarddiskVolume3\Windows\System32\ntdll.dll' has no imports 924.3004: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ntdll.dll) 924.3004: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ntdll.dll 924.3004: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\ntdll.dll (Input=ntdll.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling] 924.3004: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffda7b0000 'C:\WINDOWS\System32\ntdll.dll' 924.3004: Error -104 in supR3HardenedWinReSpawn! (enmWhat=5) 924.3004: Error relaunching VirtualBox VM process: 5 Command line: '60eaff78-4bdd-042d-2e72-669728efd737-suplib-3rdchild --comment "SAS University Edition" --startvm 082c31a0-6d47-4324-8200-f57ce6693d40 --no-startvm-errormsgbox "--sup-hardening-log=C:\Users\danie\VirtualBox VMs\SAS University Edition\Logs\VBoxHardening.log"' 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'opengl32.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'msvcp100.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcr100.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'qt5guivbox.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'qt5widgetsvbox.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'qt5printsupportvbox.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'qt5openglvbox.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'user32.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'advapi32.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'shell32.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'ole32.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'oleaut32.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #15 'winmm.dll'. 924.3004: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.dll) 924.3004: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.dll 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume3\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'winmmbase.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'msvcrt.dll'. 924.3004: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\winmm.dll) 924.3004: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\winmm.dll 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'combase.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #23 'rpcrt4.dll'. 924.3004: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\oleaut32.dll) 924.3004: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\oleaut32.dll 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #23 'rpcrt4.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #48 'gdi32.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #49 'user32.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #50 'combase.dll'. 924.3004: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ole32.dll) 924.3004: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ole32.dll 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #74 'user32.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #76 'gdi32.dll'. 924.3004: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\shell32.dll) 924.3004: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\shell32.dll 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'sechost.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27 'rpcrt4.dll'. 924.3004: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\advapi32.dll) 924.3004: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\advapi32.dll 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'win32u.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'gdi32.dll'. 924.3004: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\user32.dll) 924.3004: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\user32.dll 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5openglvbox.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5openglvbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5openglvbox.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'qt5widgetsvbox.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'qt5guivbox.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5corevbox.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcr100.dll'. 924.3004: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll) 924.3004: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5printsupportvbox.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5printsupportvbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5printsupportvbox.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5widgetsvbox.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5guivbox.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'winspool.drv'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'comdlg32.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcr100.dll'. 924.3004: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll) 924.3004: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5guivbox.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5corevbox.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'shell32.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'. 924.3004: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll) 924.3004: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'ole32.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'opengl32.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'. 924.3004: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll) 924.3004: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'shell32.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ole32.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'advapi32.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ws2_32.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'mpr.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcp100.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'msvcr100.dll'. 924.3004: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll) 924.3004: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008] 924.3004: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll) 924.3004: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'. 924.3004: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll) 924.3004: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ws2_32.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'rpcrt4.dll'. 924.3004: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll) 924.3004: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume3\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'advapi32.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'gdi32.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'glu32.dll'. 924.3004: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\opengl32.dll) 924.3004: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\opengl32.dll 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'glu32.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'glu32.dll' -> '\Device\HarddiskVolume3\Windows\System32\glu32.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'opengl32.dll'. 924.3004: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\glu32.dll) 924.3004: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\glu32.dll 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008] 924.3004: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\gdi32.dll) 924.3004: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\gdi32.dll 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 924.3004: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\msvcrt.dll) 924.3004: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msvcrt.dll 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008] 924.3004: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll) 924.3004: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'rpcrt4.dll'. 924.3004: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ws2_32.dll) 924.3004: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ws2_32.dll 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mpr.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'mpr.dll' -> '\Device\HarddiskVolume3\Windows\System32\mpr.dll' [rcNtRedir=0xc0150008] 924.3004: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\mpr.dll) 924.3004: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\mpr.dll 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ws2_32.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume3\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\opengl32.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'comdlg32.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'comdlg32.dll' -> '\Device\HarddiskVolume3\Windows\System32\comdlg32.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'user32.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'shlwapi.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #37 'gdi32.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #38 'comctl32.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #39 'shell32.dll'. 924.3004: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\comdlg32.dll) 924.3004: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\comdlg32.dll 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winspool.drv'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'winspool.drv' -> '\Device\HarddiskVolume3\Windows\System32\winspool.drv' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #24 'propsys.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #29 'iphlpapi.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #38 'bcrypt.dll'. 924.3004: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\winspool.drv) 924.3004: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\winspool.drv 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008] 924.3004: '\Device\HarddiskVolume3\Windows\System32\win32u.dll' has no imports 924.3004: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\win32u.dll) 924.3004: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\win32u.dll 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'sechost.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'sechost.dll' -> '\Device\HarddiskVolume3\Windows\System32\sechost.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'rpcrt4.dll'. 924.3004: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\sechost.dll) 924.3004: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\sechost.dll 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #45 'bcryptprimitives.dll'. 924.3004: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\combase.dll) 924.3004: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\combase.dll 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008] 924.3004: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll) 924.3004: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmmbase.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmmbase.dll' -> '\Device\HarddiskVolume3\Windows\System32\winmmbase.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 924.3004: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\winmmbase.dll) 924.3004: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\winmmbase.dll 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008] 924.3004: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll) 924.3004: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcrypt.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcrypt.dll' -> '\Device\HarddiskVolume3\Windows\System32\bcrypt.dll' [rcNtRedir=0xc0150008] 924.3004: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\bcrypt.dll) 924.3004: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\bcrypt.dll 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'iphlpapi.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'iphlpapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\iphlpapi.dll' [rcNtRedir=0xc0150008] 924.3004: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL) 924.3004: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'propsys.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'propsys.dll' -> '\Device\HarddiskVolume3\Windows\System32\propsys.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #15 'oleaut32.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #31 'rpcrt4.dll'. 924.3004: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\propsys.dll) 924.3004: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\propsys.dll 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'comctl32.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'comctl32.dll' -> '\Device\HarddiskVolume3\Windows\System32\comctl32.dll' [rcNtRedir=0x0] 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'advapi32.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'. 924.3004: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\comctl32.dll) 924.3004: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\comctl32.dll 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shlwapi.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'shlwapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\shlwapi.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #44 'gdi32.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #45 'user32.dll'. 924.3004: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\shlwapi.dll) 924.3004: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\shlwapi.dll 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume3\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\opengl32.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VirtualBox.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000a01:<flags> [calling] 924.3004: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\opengl32.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\glu32.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\mpr.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\winspool.drv [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'advapi32.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'. 924.3004: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.17134.228_none_f95000f73097dead\comctl32.dll) 924.3004: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.17134.228_none_f95000f73097dead\comctl32.dll 924.3004: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmmbase.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\propsys.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL [lacks WinVerifyTrust] 924.3004: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcrypt.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedDllNotificationCallback: load 00007fffd87e0000 LB 0x0009e000 C:\WINDOWS\System32\msvcrt.dll [fFlags=0x0] 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedDllNotificationCallback: load 00007fffd7c40000 LB 0x00124000 C:\WINDOWS\System32\RPCRT4.dll [fFlags=0x0] 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedDllNotificationCallback: load 00007fffd8b40000 LB 0x0005b000 C:\WINDOWS\System32\sechost.dll [fFlags=0x0] 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\sechost.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedDllNotificationCallback: load 00007fffd7d70000 LB 0x000a1000 C:\WINDOWS\System32\ADVAPI32.dll [fFlags=0x0] 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedDllNotificationCallback: load 00007fffd6f00000 LB 0x00020000 C:\WINDOWS\System32\win32u.dll [fFlags=0x0] 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedDllNotificationCallback: load 00007fffd6f20000 LB 0x000fa000 C:\WINDOWS\System32\ucrtbase.dll [fFlags=0x0] 924.3004: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ucrtbase.dll) 924.3004: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll 924.3004: supR3HardenedDllNotificationCallback: load 00007fffd73b0000 LB 0x0009f000 C:\WINDOWS\System32\msvcp_win.dll [fFlags=0x0] 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedDllNotificationCallback: load 00007fffd7210000 LB 0x00192000 C:\WINDOWS\System32\gdi32full.dll [fFlags=0x0] 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #33 'gdi32.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'user32.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'win32u.dll'. 924.3004: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\gdi32full.dll) 924.3004: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\gdi32full.dll 924.3004: supR3HardenedDllNotificationCallback: load 00007fffd7fd0000 LB 0x00028000 C:\WINDOWS\System32\GDI32.dll [fFlags=0x0] 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedDllNotificationCallback: load 00007fffd8000000 LB 0x00190000 C:\WINDOWS\System32\USER32.dll [fFlags=0x0] 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedDllNotificationCallback: load 00007fffbf510000 LB 0x0002c000 C:\WINDOWS\SYSTEM32\GLU32.dll [fFlags=0x0] 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\glu32.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedDllNotificationCallback: load 00007fffbf5a0000 LB 0x00120000 C:\WINDOWS\SYSTEM32\OPENGL32.dll [fFlags=0x0] 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\opengl32.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedDllNotificationCallback: load 000000006c5c0000 LB 0x000d2000 C:\Program Files\Oracle\VirtualBox\MSVCR100.dll [fFlags=0x0] 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedDllNotificationCallback: load 000000006c520000 LB 0x00098000 C:\Program Files\Oracle\VirtualBox\MSVCP100.dll [fFlags=0x0] 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedDllNotificationCallback: load 00007fffd8ad0000 LB 0x0006c000 C:\WINDOWS\System32\WS2_32.dll [fFlags=0x0] 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ws2_32.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedDllNotificationCallback: load 00007fffa29b0000 LB 0x00595000 C:\Program Files\Oracle\VirtualBox\VBoxRT.dll [fFlags=0x0] 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedDllNotificationCallback: load 00007fffd6b80000 LB 0x00049000 C:\WINDOWS\System32\cfgmgr32.dll [fFlags=0x0] 924.3004: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll) 924.3004: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll 924.3004: supR3HardenedDllNotificationCallback: load 00007fffd7bc0000 LB 0x0007a000 C:\WINDOWS\System32\bcryptPrimitives.dll [fFlags=0x0] 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedDllNotificationCallback: load 00007fffda3c0000 LB 0x00323000 C:\WINDOWS\System32\combase.dll [fFlags=0x0] 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedDllNotificationCallback: load 00007fffd8880000 LB 0x000a9000 C:\WINDOWS\System32\shcore.dll [fFlags=0x0] 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #37 'rpcrt4.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #44 'combase.dll'. 924.3004: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\SHCore.dll) 924.3004: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\SHCore.dll 924.3004: supR3HardenedDllNotificationCallback: load 00007fffd8330000 LB 0x00051000 C:\WINDOWS\System32\shlwapi.dll [fFlags=0x0] 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shlwapi.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedDllNotificationCallback: load 00007fffd6b20000 LB 0x00011000 C:\WINDOWS\System32\kernel.appcore.dll [fFlags=0x0] 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcrt.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'rpcrt4.dll'. 924.3004: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll) 924.3004: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll 924.3004: supR3HardenedDllNotificationCallback: load 00007fffd6b40000 LB 0x0001f000 C:\WINDOWS\System32\profapi.dll [fFlags=0x0] 924.3004: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\profapi.dll) 924.3004: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\profapi.dll 924.3004: supR3HardenedDllNotificationCallback: load 00007fffd6ad0000 LB 0x0004c000 C:\WINDOWS\System32\powrprof.dll [fFlags=0x0] 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'rpcrt4.dll'. 924.3004: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\powrprof.dll) 924.3004: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\powrprof.dll 924.3004: supR3HardenedDllNotificationCallback: load 00007fffd6ac0000 LB 0x0000a000 C:\WINDOWS\System32\FLTLIB.DLL [fFlags=0x0] 924.3004: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\fltLib.dll) 924.3004: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\fltLib.dll 924.3004: supR3HardenedDllNotificationCallback: load 00007fffd7450000 LB 0x0070d000 C:\WINDOWS\System32\windows.storage.dll [fFlags=0x0] 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'rpcrt4.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #54 'combase.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #58 'profapi.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #81 'fltlib.dll'. 924.3004: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\windows.storage.dll) 924.3004: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\windows.storage.dll 924.3004: supR3HardenedDllNotificationCallback: load 00007fffd8d20000 LB 0x01440000 C:\WINDOWS\System32\SHELL32.dll [fFlags=0x0] 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedDllNotificationCallback: load 00007fffda260000 LB 0x00151000 C:\WINDOWS\System32\ole32.dll [fFlags=0x0] 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedDllNotificationCallback: load 00007fffcaef0000 LB 0x0001a000 C:\WINDOWS\SYSTEM32\MPR.dll [fFlags=0x0] 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\mpr.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedDllNotificationCallback: load 000000006bfb0000 LB 0x00565000 C:\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [fFlags=0x0] 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedDllNotificationCallback: load 00007fffa19a0000 LB 0x005f7000 C:\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [fFlags=0x0] 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedDllNotificationCallback: load 000000006b9e0000 LB 0x00561000 C:\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [fFlags=0x0] 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedDllNotificationCallback: load 00007fffd8ba0000 LB 0x000c2000 C:\WINDOWS\System32\OLEAUT32.dll [fFlags=0x0] 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedDllNotificationCallback: load 00007fffd3150000 LB 0x001b4000 C:\WINDOWS\SYSTEM32\PROPSYS.dll [fFlags=0x0] 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\propsys.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedDllNotificationCallback: load 00007fffd6060000 LB 0x00038000 C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL [fFlags=0x0] 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL [lacks WinVerifyTrust] 924.3004: supR3HardenedDllNotificationCallback: load 00007fffd6620000 LB 0x00025000 C:\WINDOWS\SYSTEM32\bcrypt.dll [fFlags=0x0] 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcrypt.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedDllNotificationCallback: load 00007fffbaf30000 LB 0x00084000 C:\WINDOWS\SYSTEM32\WINSPOOL.DRV [fFlags=0x0] 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\winspool.drv [lacks WinVerifyTrust] 924.3004: supR3HardenedDllNotificationCallback: load 00007fffa1890000 LB 0x000a7000 C:\WINDOWS\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.17134.228_none_f95000f73097dead\COMCTL32.dll [fFlags=0x0] 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.17134.228_none_f95000f73097dead\comctl32.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedDllNotificationCallback: load 00007fffd7ee0000 LB 0x000ed000 C:\WINDOWS\System32\COMDLG32.dll [fFlags=0x0] 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\comdlg32.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedDllNotificationCallback: load 00007fffa1940000 LB 0x00051000 C:\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll [fFlags=0x0] 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedDllNotificationCallback: load 000000006bf50000 LB 0x00054000 C:\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll [fFlags=0x0] 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedDllNotificationCallback: load 00007fffd3500000 LB 0x0002a000 C:\WINDOWS\SYSTEM32\WINMMBASE.dll [fFlags=0x0] 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmmbase.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedDllNotificationCallback: load 00007fffd3530000 LB 0x00023000 C:\WINDOWS\SYSTEM32\WINMM.dll [fFlags=0x0] 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedDllNotificationCallback: load 00007fffa1fa0000 LB 0x00a06000 C:\Program Files\Oracle\VirtualBox\VirtualBox.dll [fFlags=0x0] 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1 924.3004: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling] 924.3004: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffd6c80000 'api-ms-win-core-synch-l1-2-0' 924.3004: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1 924.3004: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling] 924.3004: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffd6c80000 'api-ms-win-core-fibers-l1-1-1' 924.3004: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1 924.3004: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling] 924.3004: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffd6c80000 'api-ms-win-core-fibers-l1-1-1' 924.3004: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1 924.3004: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling] 924.3004: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffd6c80000 'api-ms-win-core-synch-l1-2-0' 924.3004: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-l1-2-1) -> 0x0, fPresent=1 924.3004: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-l1-2-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling] 924.3004: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffd6c80000 'api-ms-win-core-localization-l1-2-1' 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\kernel32.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'fltlib.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'fltlib.dll' -> '\Device\HarddiskVolume3\Windows\System32\fltlib.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\fltLib.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'profapi.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'profapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\profapi.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\profapi.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\kernel32.dll (Input=kernel32, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling] 924.3004: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffd7e20000 'C:\WINDOWS\System32\kernel32.dll' 924.3004: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-string-l1-1-0) -> 0x0, fPresent=1 924.3004: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-string-l1-1-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling] 924.3004: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffd6c80000 'api-ms-win-core-string-l1-1-0' 924.3004: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-datetime-l1-1-1) -> 0x0, fPresent=1 924.3004: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-datetime-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling] 924.3004: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffd6c80000 'api-ms-win-core-datetime-l1-1-1' 924.3004: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-obsolete-l1-2-0) -> 0x0, fPresent=1 924.3004: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-obsolete-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling] 924.3004: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffd6c80000 'api-ms-win-core-localization-obsolete-l1-2-0' 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'user32.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #25 'win32u.dll'. 924.3004: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\imm32.dll) 924.3004: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\imm32.dll 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\IMM32.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling] 924.3004: supR3HardenedDllNotificationCallback: load 00007fffd8c70000 LB 0x0002d000 C:\WINDOWS\System32\IMM32.DLL [fFlags=0x0] 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\imm32.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffd8c70000 'C:\WINDOWS\system32\IMM32.DLL' 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling] 924.3004: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffa29b0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling] 924.3004: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffa29b0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling] 924.3004: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffa29b0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling] 924.3004: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffa29b0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling] 924.3004: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffa29b0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling] 924.3004: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffa29b0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffa29b0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffa29b0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffa29b0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffa29b0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffa29b0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffa29b0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffa29b0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling] 924.3004: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffa29b0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffa29b0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffa29b0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffa29b0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffa29b0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffa29b0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffa29b0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffa29b0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffa29b0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffa29b0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffa29b0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffa29b0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffa29b0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffa29b0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffa29b0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffa29b0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling] 924.3004: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffa29b0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffa29b0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffa29b0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\imm32.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\imm32.dll (Input=imm32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling] 924.3004: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffd8c70000 'C:\WINDOWS\System32\imm32.dll' 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\ADVAPI32.DLL (Input=ADVAPI32.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling] 924.3004: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffd7d70000 'C:\WINDOWS\System32\ADVAPI32.DLL' 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'bcryptprimitives.dll'. 924.3004: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\cryptbase.dll) 924.3004: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\cryptbase.dll 924.3004: supR3HardenedDllNotificationCallback: load 00007fffd6510000 LB 0x0000b000 C:\WINDOWS\SYSTEM32\CRYPTBASE.DLL [fFlags=0x0] 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\cryptbase.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffa1fa0000 'C:\Program Files\Oracle\VirtualBox\VirtualBox.dll' 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\kernel32.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\kernel32.dll (Input=kernel32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling] 924.3004: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffd7e20000 'C:\WINDOWS\System32\kernel32.dll' 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'ole32.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'imm32.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'winmm.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'oleaut32.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'shell32.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'advapi32.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'qt5guivbox.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'qt5corevbox.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'msvcr100.dll'. 924.3004: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\platforms\qwindows.dll) 924.3004: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\platforms\qwindows.dll 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume3\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume3\Windows\System32\imm32.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\imm32.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling] 924.3004: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\platforms\qwindows.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedDllNotificationCallback: load 00007fffa15e0000 LB 0x0012e000 C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll [fFlags=0x0] 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\platforms\qwindows.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffa15e0000 'C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll' 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #33 'gdi32.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'user32.dll'. 924.3004: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\uxtheme.dll) 924.3004: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\uxtheme.dll 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling] 924.3004: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\uxtheme.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedDllNotificationCallback: load 00007fffd4cc0000 LB 0x00098000 C:\WINDOWS\system32\uxtheme.dll [fFlags=0x0] 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\uxtheme.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffd4cc0000 'C:\WINDOWS\system32\uxtheme.dll' 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffd8000000 'C:\WINDOWS\system32\user32.dll' 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling] 924.3004: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffd8d20000 'C:\WINDOWS\system32\shell32.dll' 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\SHCore.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\SHCore.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling] 924.3004: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffd8880000 'C:\WINDOWS\system32\SHCore.dll' 924.3004: supR3HardenedMonitor_LdrLoadDll: error opening 'C:\WINDOWS\system32\wintab32.dll': 0 (NtPath=\??\C:\WINDOWS\system32\wintab32.dll; Input=C:\WINDOWS\system32\wintab32.dll; rcNtGetDll=0x0 924.3004: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000034 'C:\WINDOWS\system32\wintab32.dll' 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #21 'win32u.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #22 'user32.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #23 'gdi32.dll'. 924.3004: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\dwmapi.dll) 924.3004: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\dwmapi.dll 924.3004: supR3HardenedDllNotificationCallback: load 00007fffd4fc0000 LB 0x00029000 C:\WINDOWS\system32\dwmapi.dll [fFlags=0x0] 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dwmapi.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\winmm.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling] 924.3004: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffd3530000 'C:\WINDOWS\system32\winmm.dll' 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\winmm.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling] 924.3004: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffd3530000 'C:\WINDOWS\system32\winmm.dll' 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling] 924.3004: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffd8d20000 'C:\WINDOWS\system32\shell32.dll' 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\uxtheme.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling] 924.3004: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffd4cc0000 'C:\WINDOWS\system32\uxtheme.dll' 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\gdi32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling] 924.3004: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffd7fd0000 'C:\WINDOWS\system32\gdi32.dll' 924.3004: supR3HardenedDllNotificationCallback: load 00007fffd81a0000 LB 0x00175000 C:\WINDOWS\System32\MSCTF.dll [fFlags=0x0] 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'oleaut32.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #38 'user32.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #39 'gdi32.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #40 'imm32.dll'. 924.3004: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\msctf.dll) 924.3004: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msctf.dll 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume3\Windows\System32\imm32.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\imm32.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffd7c40000 'C:\WINDOWS\System32\rpcrt4.dll' 924.3004: supR3HardenedDllNotificationCallback: load 00007fffda160000 LB 0x000a0000 C:\WINDOWS\System32\clbcatq.dll [fFlags=0x0] 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #28 'rpcrt4.dll'. 924.3004: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\clbcatq.dll) 924.3004: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\clbcatq.dll 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'shcore.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #29 'combase.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'd3d11.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'dcomp.dll'. 924.3004: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\DataExchange.dll) 924.3004: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\DataExchange.dll 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dcomp.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'dcomp.dll' -> '\Device\HarddiskVolume3\Windows\System32\dcomp.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'win32u.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp_win.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'oleaut32.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #37 'dxgi.dll'. 924.3004: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\dcomp.dll) 924.3004: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\dcomp.dll 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'd3d11.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'd3d11.dll' -> '\Device\HarddiskVolume3\Windows\System32\d3d11.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'dxgi.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'win32u.dll'. 924.3004: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\d3d11.dll) 924.3004: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\d3d11.dll 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shcore.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'shcore.dll' -> '\Device\HarddiskVolume3\Windows\System32\shcore.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\SHCore.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dxgi.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'dxgi.dll' -> '\Device\HarddiskVolume3\Windows\System32\dxgi.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'win32u.dll'. 924.3004: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\dxgi.dll) 924.3004: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\dxgi.dll 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dxgi.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'dxgi.dll' -> '\Device\HarddiskVolume3\Windows\System32\dxgi.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dxgi.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\dataexchange.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling] 924.3004: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\DataExchange.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\d3d11.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dcomp.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dxgi.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedDllNotificationCallback: load 00007fffd5880000 LB 0x000bb000 C:\WINDOWS\system32\dxgi.dll [fFlags=0x0] 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dxgi.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedDllNotificationCallback: load 00007fffd4120000 LB 0x0030b000 C:\WINDOWS\system32\d3d11.dll [fFlags=0x0] 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\d3d11.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedDllNotificationCallback: load 00007fffd4450000 LB 0x0019c000 C:\WINDOWS\system32\dcomp.dll [fFlags=0x0] 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dcomp.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedDllNotificationCallback: load 00007fffbbce0000 LB 0x00058000 C:\WINDOWS\system32\dataexchange.dll [fFlags=0x0] 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\DataExchange.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffd7fd0000 'C:\WINDOWS\System32\gdi32.dll' 924.3004: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffbbce0000 'C:\WINDOWS\system32\dataexchange.dll' 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'rmclient.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #30 'rpcrt4.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #44 'combase.dll'. 924.3004: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll) 924.3004: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'rpcrt4.dll'. 924.3004: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\rmclient.dll) 924.3004: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\rmclient.dll 924.3004: supR3HardenedDllNotificationCallback: load 00007fffd50a0000 LB 0x00021000 C:\WINDOWS\system32\RMCLIENT.dll [fFlags=0x0] 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rmclient.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedDllNotificationCallback: load 00007fffd5150000 LB 0x001b8000 C:\WINDOWS\system32\twinapi.appcore.dll [fFlags=0x0] 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll [lacks WinVerifyTrust] 924.2328: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #16 'rpcrt4.dll'. 924.2328: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'devobj.dll'. 924.2328: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'propsys.dll'. 924.2328: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll) 924.2328: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll 924.2328: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #17 'cfgmgr32.dll'. 924.2328: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\devobj.dll) 924.2328: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\devobj.dll 924.2328: supR3HardenedDllNotificationCallback: load 00007fffd68d0000 LB 0x00027000 C:\WINDOWS\SYSTEM32\DEVOBJ.dll [fFlags=0x0] 924.2328: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\devobj.dll [lacks WinVerifyTrust] 924.2328: supR3HardenedDllNotificationCallback: load 00007fffcbf90000 LB 0x00076000 C:\WINDOWS\SYSTEM32\MMDevAPI.DLL [fFlags=0x0] 924.2328: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust] 924.2328: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 924.2328: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'mmdevapi.dll'. 924.2328: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27 'ksuser.dll'. 924.2328: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #28 'avrt.dll'. 924.2328: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\wdmaud.drv) 924.2328: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\wdmaud.drv 924.2328: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'avrt.dll'... 924.2328: supR3HardenedWinVerifyCacheProcessImportTodos: 'avrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\avrt.dll' [rcNtRedir=0xc0150008] 924.2328: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\avrt.dll) 924.2328: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\avrt.dll 924.2328: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ksuser.dll'... 924.2328: supR3HardenedWinVerifyCacheProcessImportTodos: 'ksuser.dll' -> '\Device\HarddiskVolume3\Windows\System32\ksuser.dll' [rcNtRedir=0xc0150008] 924.2328: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 924.2328: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ksuser.dll) 924.2328: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ksuser.dll 924.2328: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mmdevapi.dll'... 924.2328: supR3HardenedWinVerifyCacheProcessImportTodos: 'mmdevapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\mmdevapi.dll' [rcNtRedir=0xc0150008] 924.2328: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust] 924.2328: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 924.2328: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 924.2328: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 924.2328: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'cfgmgr32.dll'... 924.2328: supR3HardenedWinVerifyCacheProcessImportTodos: 'cfgmgr32.dll' -> '\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll' [rcNtRedir=0xc0150008] 924.2328: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll [lacks WinVerifyTrust] 924.2328: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'propsys.dll'... 924.2328: supR3HardenedWinVerifyCacheProcessImportTodos: 'propsys.dll' -> '\Device\HarddiskVolume3\Windows\System32\propsys.dll' [rcNtRedir=0xc0150008] 924.2328: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\propsys.dll [lacks WinVerifyTrust] 924.2328: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'devobj.dll'... 924.2328: supR3HardenedWinVerifyCacheProcessImportTodos: 'devobj.dll' -> '\Device\HarddiskVolume3\Windows\System32\devobj.dll' [rcNtRedir=0xc0150008] 924.2328: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\devobj.dll [lacks WinVerifyTrust] 924.2328: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... 924.2328: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008] 924.2328: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] 924.2328: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... 924.2328: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008] 924.2328: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] 924.2328: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 924.2328: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 924.2328: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 924.2328: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'... 924.2328: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008] 924.2328: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [lacks WinVerifyTrust] 924.2328: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... 924.2328: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008] 924.2328: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] 924.2328: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rmclient.dll'... 924.2328: supR3HardenedWinVerifyCacheProcessImportTodos: 'rmclient.dll' -> '\Device\HarddiskVolume3\Windows\System32\rmclient.dll' [rcNtRedir=0xc0150008] 924.2328: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rmclient.dll [lacks WinVerifyTrust] 924.2328: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 924.2328: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 924.2328: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 924.2328: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 924.2328: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 924.2328: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 924.2328: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling] 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #15 'coreuicomponents.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #16 'coremessaging.dll'. 924.3004: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\TextInputFramework.dll) 924.3004: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\TextInputFramework.dll 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'coremessaging.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #48 'shcore.dll'. 924.3004: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\CoreUIComponents.dll) 924.3004: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\CoreUIComponents.dll 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #24 'rpcrt4.dll'. 924.3004: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll) 924.3004: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll 924.3004: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ntmarta.dll) 924.3004: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ntmarta.dll 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'combase.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #22 'rpcrt4.dll'. 924.3004: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #29 'bcryptprimitives.dll'. 924.3004: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\WinTypes.dll) 924.3004: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\WinTypes.dll 924.3004: supR3HardenedDllNotificationCallback: load 00007fffd5bb0000 LB 0x00031000 C:\WINDOWS\SYSTEM32\ntmarta.dll [fFlags=0x0] 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ntmarta.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedDllNotificationCallback: load 00007fffd4930000 LB 0x000da000 C:\WINDOWS\System32\CoreMessaging.dll [fFlags=0x0] 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedDllNotificationCallback: load 00007fffd25d0000 LB 0x0014d000 C:\WINDOWS\SYSTEM32\wintypes.dll [fFlags=0x0] 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\WinTypes.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedDllNotificationCallback: load 00007fffd27e0000 LB 0x0031e000 C:\WINDOWS\System32\CoreUIComponents.dll [fFlags=0x0] 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\CoreUIComponents.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedDllNotificationCallback: load 00007fffc2b20000 LB 0x00097000 C:\WINDOWS\System32\TextInputFramework.dll [fFlags=0x0] 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\TextInputFramework.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust] 924.2328: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] 924.2328: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ksuser.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shcore.dll'... 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'shcore.dll' -> '\Device\HarddiskVolume3\Windows\System32\shcore.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\SHCore.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coremessaging.dll'... 924.2328: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\avrt.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'coremessaging.dll' -> '\Device\HarddiskVolume3\Windows\System32\coremessaging.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 924.2328: supR3HardenedDllNotificationCallback: load 00007fffcdf70000 LB 0x00009000 C:\WINDOWS\SYSTEM32\ksuser.dll [fFlags=0x0] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 924.2328: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ksuser.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 924.2328: supR3HardenedDllNotificationCallback: load 00007fffd2cd0000 LB 0x0000a000 C:\WINDOWS\SYSTEM32\AVRT.dll [fFlags=0x0] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coremessaging.dll'... 924.2328: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\avrt.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'coremessaging.dll' -> '\Device\HarddiskVolume3\Windows\System32\coremessaging.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll [lacks WinVerifyTrust] 924.2328: supR3HardenedDllNotificationCallback: load 00007fffcdf80000 LB 0x00044000 C:\WINDOWS\System32\wdmaud.drv [fFlags=0x0] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coreuicomponents.dll'... 924.2328: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'coreuicomponents.dll' -> '\Device\HarddiskVolume3\Windows\System32\coreuicomponents.dll' [rcNtRedir=0xc0150008] 924.2328: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffcdf80000 'C:\WINDOWS\System32\wdmaud.drv' 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\CoreUIComponents.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 924.2328: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust] 924.2328: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling] 924.2328: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffcdf80000 'C:\WINDOWS\System32\wdmaud.drv' 924.3004: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 924.3004: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\OLEAUT32.DLL (Input=OLEAUT32.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling] 924.3004: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffd8ba0000 'C:\WINDOWS\System32\OLEAUT32.DLL' 924.2328: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust] 924.2328: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\MMDEVAPI.DLL (Input=MMDEVAPI.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling] 924.2328: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffcbf90000 'C:\WINDOWS\System32\MMDEVAPI.DLL' 924.3004: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(ext-ms-win-rtcore-ntuser-window-ext-l1-1-0.dll) -> 0x0, fPresent=1 924.3004: supR3HardenedMonitor_LdrLoadDll: pName=ext-ms-win-rtcore-ntuser-window-ext-l1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling] 924.3004: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffd8000000 'ext-ms-win-rtcore-ntuser-window-ext-l1-1-0.dll' 924.3004: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(ext-ms-win-rtcore-ntuser-integration-l1-1-0.dll) -> 0x0, fPresent=1 924.3004: supR3HardenedMonitor_LdrLoadDll: pName=ext-ms-win-rtcore-ntuser-integration-l1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling] 924.3004: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffd8000000 'ext-ms-win-rtcore-ntuser-integration-l1-1-0.dll' 924.3004: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-com-l1-1-0.dll) -> 0x0, fPresent=1 924.3004: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-com-l1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling] 924.3004: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffda3c0000 'api-ms-win-core-com-l1-1-0.dll' 924.3004: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msctf.dll [lacks WinVerifyTrust] 924.3004: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\MSCTF.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling] 924.3004: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffd81a0000 'C:\WINDOWS\System32\MSCTF.dll' 924.2328: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust] 924.2328: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling] 924.2328: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffcdf80000 'C:\WINDOWS\System32\wdmaud.drv' 924.2328: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust] 924.2328: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling] 924.2328: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffcdf80000 'C:\WINDOWS\System32\wdmaud.drv' 924.2328: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust] 924.2328: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling] 924.2328: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffcdf80000 'C:\WINDOWS\System32\wdmaud.drv' 924.2328: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'. 924.2328: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'rpcrt4.dll'. 924.2328: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'oleaut32.dll'. 924.2328: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #55 'mmdevapi.dll'. 924.2328: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #56 'avrt.dll'. 924.2328: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\AudioSes.dll) 924.2328: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\AudioSes.dll 924.2328: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'avrt.dll'... 924.2328: supR3HardenedWinVerifyCacheProcessImportTodos: 'avrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\avrt.dll' [rcNtRedir=0xc0150008] 924.2328: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\avrt.dll [lacks WinVerifyTrust] 924.2328: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mmdevapi.dll'... 924.2328: supR3HardenedWinVerifyCacheProcessImportTodos: 'mmdevapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\mmdevapi.dll' [rcNtRedir=0xc0150008] 924.2328: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust] 924.2328: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'... 924.2328: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008] 924.2328: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll [lacks WinVerifyTrust] 924.2328: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... 924.2328: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008] 924.2328: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] 924.2328: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'... 924.2328: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008] 924.2328: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust] 924.2328: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\AUDIOSES.DLL (Input=AUDIOSES.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling] 924.2328: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\AudioSes.dll [lacks WinVerifyTrust] 924.2328: supR3HardenedDllNotificationCallback: load 00007fffc3b10000 LB 0x0012c000 C:\WINDOWS\System32\AUDIOSES.DLL [fFlags=0x0] 924.2328: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\AudioSes.dll [lacks WinVerifyTrust] 924.2328: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffc3b10000 'C:\WINDOWS\System32\AUDIOSES.DLL' 924.2328: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust] 924.2328: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling] 924.2328: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffcdf80000 'C:\WINDOWS\System32\wdmaud.drv' 924.2328: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust] 924.2328: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling] 924.2328: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffcdf80000 'C:\WINDOWS\System32\wdmaud.drv' 924.2328: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv [lacks WinVerifyTrust] 924.2328: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffcdf80000 'C:\WINDOWS\System32\wdmaud.drv' 924.2328: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 924.2328: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'mmdevapi.dll'. 924.2328: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'msacm32.dll'. 924.2328: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'winmmbase.dll'. 924.2328: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\msacm32.drv) 924.2328: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msacm32.drv 924.2328: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmmbase.dll'... 924.2328: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmmbase.dll' -> '\Device\HarddiskVolume3\Windows\System32\winmmbase.dll' [rcNtRedir=0xc0150008] 924.2328: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmmbase.dll [lacks WinVerifyTrust] 924.2328: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msacm32.dll'... 924.2328: supR3HardenedWinVerifyCacheProcessImportTodos: 'msacm32.dll' -> '\Device\HarddiskVolume3\Windows\System32\msacm32.dll' [rcNtRedir=0xc0150008] 924.2328: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 924.2328: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\msacm32.dll) 924.2328: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msacm32.dll 924.2328: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mmdevapi.dll'... 924.2328: supR3HardenedWinVerifyCacheProcessImportTodos: 'mmdevapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\mmdevapi.dll' [rcNtRedir=0xc0150008] 924.2328: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust] 924.2328: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 924.2328: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 924.2328: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 924.2328: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 924.2328: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 924.2328: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 924.2328: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling] 924.2328: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust] 924.2328: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msacm32.dll [lacks WinVerifyTrust] 924.2328: supR3HardenedDllNotificationCallback: load 00007fffcdf40000 LB 0x0001c000 C:\WINDOWS\SYSTEM32\MSACM32.dll [fFlags=0x0] 924.2328: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msacm32.dll [lacks WinVerifyTrust] 924.2328: supR3HardenedDllNotificationCallback: load 00007fffcdf60000 LB 0x0000d000 C:\WINDOWS\System32\msacm32.drv [fFlags=0x0] 924.2328: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust] 924.2328: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffcdf60000 'C:\WINDOWS\System32\msacm32.drv' 924.2328: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust] 924.2328: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling] 924.2328: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffcdf60000 'C:\WINDOWS\System32\msacm32.drv' 924.2328: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust] 924.2328: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling] 924.2328: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffcdf60000 'C:\WINDOWS\System32\msacm32.drv' 924.2328: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust] 924.2328: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling] 924.2328: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffcdf60000 'C:\WINDOWS\System32\msacm32.drv' 924.2328: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust] 924.2328: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling] 924.2328: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffcdf60000 'C:\WINDOWS\System32\msacm32.drv' 924.2328: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust] 924.2328: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling] 924.2328: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffcdf60000 'C:\WINDOWS\System32\msacm32.drv' 924.2328: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust] 924.2328: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling] 924.2328: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffcdf60000 'C:\WINDOWS\System32\msacm32.drv' 924.2328: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust] 924.2328: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffcdf60000 'C:\WINDOWS\System32\msacm32.drv' 924.2328: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust] 924.2328: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffcdf60000 'C:\WINDOWS\System32\msacm32.drv' 924.2328: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv [lacks WinVerifyTrust] 924.2328: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffcdf60000 'C:\WINDOWS\System32\msacm32.drv' 924.2328: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 924.2328: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'winmm.dll'. 924.2328: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\midimap.dll) 924.2328: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\midimap.dll 924.2328: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'... 924.2328: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume3\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008] 924.2328: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll [lacks WinVerifyTrust] 924.2328: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 924.2328: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 924.2328: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 924.2328: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling] 924.2328: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\midimap.dll [lacks WinVerifyTrust] 924.2328: supR3HardenedDllNotificationCallback: load 00007fffcdf30000 LB 0x0000a000 C:\WINDOWS\System32\midimap.dll [fFlags=0x0] 924.2328: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\midimap.dll [lacks WinVerifyTrust] 924.2328: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffcdf30000 'C:\WINDOWS\System32\midimap.dll' 924.2328: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\midimap.dll [lacks WinVerifyTrust] 924.2328: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling] 924.2328: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffcdf30000 'C:\WINDOWS\System32\midimap.dll' 924.2328: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\midimap.dll [lacks WinVerifyTrust] 924.2328: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling] 924.2328: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffcdf30000 'C:\WINDOWS\System32\midimap.dll' 924.2328: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\midimap.dll [lacks WinVerifyTrust] 924.2328: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling] 924.2328: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffcdf30000 'C:\WINDOWS\System32\midimap.dll' 924.1cf0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll [lacks WinVerifyTrust] 924.1cf0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\MMDevApi.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling] 924.1cf0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffcbf90000 'C:\WINDOWS\System32\MMDevApi.dll' 798.2ba4: supR3HardNtChildWaitFor[1]: Quitting: ExitCode=0x1 (rcNtWait=0x0, rcNt1=0x0, rcNt2=0x103, rcNt3=0x103, 3121 ms, the end);   ... View more

Re: SAS University program - error on redirect from SASUser

by Fluorite | Level 6 in SAS Programming
‎07-15-2018 01:55 PM
‎07-15-2018 01:55 PM
Hi Cynthia Thank you very much. The data load fixed the issue. I can now point to sasuser and redirects successfully ... View more

Re: SAS University program - error on redirect from SASUser

by Fluorite | Level 6 in SAS Programming
‎07-14-2018 02:43 PM
‎07-14-2018 02:43 PM
Thanks Cynthia. That's fab. I will review in the morning. ... View more

Re: SAS University program - error on redirect from SASUser

by Fluorite | Level 6 in SAS Programming
‎07-14-2018 01:16 PM
‎07-14-2018 01:16 PM
Hi Cynthia I didn't create the data no. Is this why I an experiencing the error? No data present? How do I load the data and where? Also, I have tried loading files into sas university edition from text or excel. It doesn't work. Does this version support loading files? Thanks Dan. ... View more

SAS University program - error on redirect from SASUser

by Fluorite | Level 6 in SAS Programming
‎07-14-2018 11:41 AM
‎07-14-2018 11:41 AM
Hi all,   I have just downloaded SAS University edition and starting on my study. As instructed SASUser in University Edition is actually NOT writable, so I created a redirect using the redirect (1), the output was successful (2).   Then I tried to run a standard code (3) and receive an error. Can anyone please tell me how to avoid this. I thought the redirect would work?   Thanks,       1. Submitted Redirect:-   libname sasuser "/folders/myfolders/certprep";   2. Log:-   Version:1.0 StartHTML:000000293 EndHTML:000108984 StartFragment:000108047 EndFragment:000108850 StartSelection:000108047 EndSelection:000108850 SourceURL:http://localhost:10080/SASStudio/371/main?locale=en_GB&zone=GMT%252B01%253A00&http%3A%2F%2Flocalhost%3A10080%2FSASStudio%2F371%2F= SAS Studio   1 OPTIONS NONOTES NOSTIMER NOSOURCE NOSYNTAXCHECK; 72 73 libname sasuser "/folders/myfolders/certprep"; NOTE: Libref SASUSER refers to the same physical library as CERTPREP. NOTE: Libref SASUSER was successfully assigned as follows: Engine: V9 Physical Name: /folders/myfolders/certprep 74 75 OPTIONS NONOTES NOSTIMER NOSOURCE NOSYNTAXCHECK; 88   3. Code from book data sasuser.admit2;    set sasuser.admit;     where age>39;run;   proc print data=sasuser.admit2;   run;   4:- Log         Version:1.0 StartHTML:000000293 EndHTML:000110368 StartFragment:000108053 EndFragment:000110234 StartSelection:000108053 EndSelection:000110234 SourceURL:http://localhost:10080/SASStudio/371/main?locale=en_GB&zone=GMT%252B01%253A00&http%3A%2F%2Flocalhost%3A10080%2FSASStudio%2F371%2F= SAS Studio   1 OPTIONS NONOTES NOSTIMER NOSOURCE NOSYNTAXCHECK; 72 73 74 data sasuser.admit2; 75 set sasuser.admit; ERROR: File SASUSER.ADMIT.DATA does not exist. 76 where age>39; 77 run;   NOTE: The SAS System stopped processing this step because of errors. WARNING: The data set SASUSER.ADMIT2 may be incomplete. When this step was stopped there were 0 observations and 0 variables. WARNING: Data set SASUSER.ADMIT2 was not replaced because this step was stopped. NOTE: DATA statement used (Total process time): real time 0.02 seconds cpu time 0.00 seconds     78 79 proc print data=sasuser.admit2; 80 81 run;   NOTE: No variables in data set SASUSER.ADMIT2. NOTE: PROCEDURE PRINT used (Total process time): real time 0.00 seconds cpu time 0.00 seconds     82 83 84 OPTIONS NONOTES NOSTIMER NOSOURCE NOSYNTAXCHECK; 97     ... View more

Loading in files on a mac

by Fluorite | Level 6 in SAS Programming
‎07-12-2018 03:33 PM
‎07-12-2018 03:33 PM
Heya,   Learning how to load some files into SAS. I have setup the virtual box using the below address. Unfortunately the top row will display however is not displaying any of the rows below, I'm also seeing an error that advises that I have a lockdown state?   I have setup virtual box and it's running Ok.   data sasdata.text15; infile "/Users/NAME/Documents/SASUniversityEdition/myfolders/testfile.rtf" LRECL=100 DLM="" firstobs=2; input T L M ; run;   Is this because of running this on a mac and it won't locate the file? Any ideas?   Really appreciate the help,   Thanks,   ... View more
Contact Me
Quick links