28a0.12d8: Log file opened: 5.1.10r112026 g_hStartupLog=0000000000000068 g_uNtVerCombined=0xa03fab00 28a0.12d8: \SystemRoot\System32\ntdll.dll: 28a0.12d8: CreationTime: 2018-02-09T01:52:43.141932300Z 28a0.12d8: LastWriteTime: 2018-02-09T01:52:43.141932300Z 28a0.12d8: ChangeTime: 2018-02-09T01:53:35.112588300Z 28a0.12d8: FileAttributes: 0x20 28a0.12d8: Size: 0x1dd100 28a0.12d8: NT Headers: 0xe0 28a0.12d8: Timestamp: 0x493793ea 28a0.12d8: Machine: 0x8664 - amd64 28a0.12d8: Timestamp: 0x493793ea 28a0.12d8: Image Version: 10.0 28a0.12d8: SizeOfImage: 0x1e0000 (1966080) 28a0.12d8: Resource Dir: 0x174000 LB 0x6a1d8 28a0.12d8: ProductName: Microsoft® Windows® Operating System 28a0.12d8: ProductVersion: 10.0.16299.64 28a0.12d8: FileVersion: 10.0.16299.64 (WinBuild.160101.0800) 28a0.12d8: FileDescription: NT Layer DLL 28a0.12d8: \SystemRoot\System32\kernel32.dll: 28a0.12d8: CreationTime: 2017-09-29T13:42:04.954227600Z 28a0.12d8: LastWriteTime: 2017-09-29T13:42:04.954227600Z 28a0.12d8: ChangeTime: 2018-02-09T01:43:47.973669600Z 28a0.12d8: FileAttributes: 0x20 28a0.12d8: Size: 0xab868 28a0.12d8: NT Headers: 0xe8 28a0.12d8: Timestamp: 0xc2cf900 28a0.12d8: Machine: 0x8664 - amd64 28a0.12d8: Timestamp: 0xc2cf900 28a0.12d8: Image Version: 10.0 28a0.12d8: SizeOfImage: 0xae000 (712704) 28a0.12d8: Resource Dir: 0xac000 LB 0x520 28a0.12d8: ProductName: Microsoft® Windows® Operating System 28a0.12d8: ProductVersion: 10.0.16299.15 28a0.12d8: FileVersion: 10.0.16299.15 (WinBuild.160101.0800) 28a0.12d8: FileDescription: Windows NT BASE API Client DLL 28a0.12d8: \SystemRoot\System32\KernelBase.dll: 28a0.12d8: CreationTime: 2017-09-29T13:41:43.124345500Z 28a0.12d8: LastWriteTime: 2017-09-29T13:41:43.124345500Z 28a0.12d8: ChangeTime: 2018-02-09T01:43:48.036155200Z 28a0.12d8: FileAttributes: 0x20 28a0.12d8: Size: 0x266000 28a0.12d8: NT Headers: 0xf0 28a0.12d8: Timestamp: 0x4736733c 28a0.12d8: Machine: 0x8664 - amd64 28a0.12d8: Timestamp: 0x4736733c 28a0.12d8: Image Version: 10.0 28a0.12d8: SizeOfImage: 0x266000 (2514944) 28a0.12d8: Resource Dir: 0x245000 LB 0x548 28a0.12d8: ProductName: Microsoft® Windows® Operating System 28a0.12d8: ProductVersion: 10.0.16299.15 28a0.12d8: FileVersion: 10.0.16299.15 (WinBuild.160101.0800) 28a0.12d8: FileDescription: Windows NT BASE API Client DLL 28a0.12d8: \SystemRoot\System32\apisetschema.dll: 28a0.12d8: CreationTime: 2017-09-29T13:42:07.095026600Z 28a0.12d8: LastWriteTime: 2017-09-29T13:42:07.095026600Z 28a0.12d8: ChangeTime: 2018-03-01T17:14:27.866351700Z 28a0.12d8: FileAttributes: 0x20 28a0.12d8: Size: 0x1b398 28a0.12d8: NT Headers: 0xc8 28a0.12d8: Timestamp: 0xf30abf31 28a0.12d8: Machine: 0x8664 - amd64 28a0.12d8: Timestamp: 0xf30abf31 28a0.12d8: Image Version: 10.0 28a0.12d8: SizeOfImage: 0x1c000 (114688) 28a0.12d8: Resource Dir: 0x1b000 LB 0x408 28a0.12d8: ProductName: Microsoft® Windows® Operating System 28a0.12d8: ProductVersion: 10.0.16299.15 28a0.12d8: FileVersion: 10.0.16299.15 (WinBuild.160101.0800) 28a0.12d8: FileDescription: ApiSet Schema DLL 28a0.12d8: NtOpenDirectoryObject failed on \Driver: 0xc0000022 28a0.12d8: supR3HardenedWinFindAdversaries: 0x0 28a0.12d8: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume4\Oracle' 28a0.12d8: Calling main() 28a0.12d8: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2 28a0.12d8: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume4\Oracle' 28a0.12d8: SUPR3HardenedMain: Respawn #1 28a0.12d8: System32: \Device\HarddiskVolume2\Windows\System32 28a0.12d8: WinSxS: \Device\HarddiskVolume2\Windows\WinSxS 28a0.12d8: KnownDllPath: C:\WINDOWS\System32 28a0.12d8: '\Device\HarddiskVolume4\Oracle\VirtualBox.exe' has no imports 28a0.12d8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Oracle\VirtualBox.exe) 28a0.12d8: supR3HardNtEnableThreadCreation: 28a0.12d8: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffe02b791b0 pvNtTerminateThread=00007ffe02ba0890 28a0.12d8: supR3HardenedWinDoReSpawn(1): New child 3224.325c [kernel32]. 28a0.12d8: supR3HardNtChildGatherData: PebBaseAddress=0000000000776000 cbPeb=0x388 28a0.12d8: supR3HardNtPuChFindNtdll: uNtDllParentAddr=00007ffe02b00000 uNtDllChildAddr=00007ffe02b00000 28a0.12d8: supR3HardenedWinSetupChildInit: uLdrInitThunk=00007ffe02b791b0 28a0.12d8: supR3HardenedWinSetupChildInit: Start child. 28a0.12d8: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 0 ms. 28a0.12d8: supR3HardNtChildPurify: Startup delay kludge #1/0: 266 ms, 17 sleeps 28a0.12d8: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION 28a0.12d8: *0000000000000000-ffffffffffb2ffff 0x0001/0x0000 0x0000000 28a0.12d8: *00000000004d0000-00000000004affff 0x0004/0x0004 0x0020000 28a0.12d8: *00000000004f0000-00000000004d6fff 0x0002/0x0002 0x0040000 28a0.12d8: 0000000000509000-0000000000501fff 0x0001/0x0000 0x0000000 28a0.12d8: *0000000000510000-000000000050bfff 0x0002/0x0002 0x0040000 28a0.12d8: 0000000000514000-0000000000507fff 0x0001/0x0000 0x0000000 28a0.12d8: *0000000000520000-000000000051efff 0x0004/0x0004 0x0020000 28a0.12d8: 0000000000521000-0000000000441fff 0x0001/0x0000 0x0000000 28a0.12d8: *0000000000600000-0000000000489fff 0x0000/0x0004 0x0020000 28a0.12d8: 0000000000776000-0000000000772fff 0x0004/0x0004 0x0020000 28a0.12d8: 0000000000779000-00000000006f1fff 0x0000/0x0004 0x0020000 28a0.12d8: *0000000000800000-0000000000704fff 0x0000/0x0004 0x0020000 28a0.12d8: 00000000008fb000-00000000008f7fff 0x0104/0x0004 0x0020000 28a0.12d8: 00000000008fe000-00000000008fbfff 0x0004/0x0004 0x0020000 28a0.12d8: 0000000000900000-ffffffff8121ffff 0x0001/0x0000 0x0000000 28a0.12d8: *000000007ffe0000-000000007ffdefff 0x0002/0x0002 0x0020000 28a0.12d8: *000000007ffe1000-000000007ffd1fff 0x0000/0x0002 0x0020000 28a0.12d8: 000000007fff0000-ffff8009736effff 0x0001/0x0000 0x0000000 28a0.12d8: *00007ff78c8f0000-00007ff78c8ccfff 0x0002/0x0002 0x0040000 28a0.12d8: 00007ff78c913000-00007ff78c315fff 0x0001/0x0000 0x0000000 28a0.12d8: *00007ff78cf10000-00007ff78cf10fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Oracle\VirtualBox.exe 28a0.12d8: 00007ff78cf11000-00007ff78cf7ffff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume4\Oracle\VirtualBox.exe 28a0.12d8: 00007ff78cf80000-00007ff78cf80fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume4\Oracle\VirtualBox.exe 28a0.12d8: 00007ff78cf81000-00007ff78cfc5fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Oracle\VirtualBox.exe 28a0.12d8: 00007ff78cfc6000-00007ff78cfc6fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume4\Oracle\VirtualBox.exe 28a0.12d8: 00007ff78cfc7000-00007ff78cfc7fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Oracle\VirtualBox.exe 28a0.12d8: 00007ff78cfc8000-00007ff78cfccfff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume4\Oracle\VirtualBox.exe 28a0.12d8: 00007ff78cfcd000-00007ff78cfcdfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Oracle\VirtualBox.exe 28a0.12d8: 00007ff78cfce000-00007ff78cfcefff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume4\Oracle\VirtualBox.exe 28a0.12d8: 00007ff78cfcf000-00007ff78cfd2fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Oracle\VirtualBox.exe 28a0.12d8: 00007ff78cfd3000-00007ff78d01afff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Oracle\VirtualBox.exe 28a0.12d8: 00007ff78d01b000-00007ff117535fff 0x0001/0x0000 0x0000000 28a0.12d8: *00007ffe02b00000-00007ffe02b00fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll 28a0.12d8: 00007ffe02b01000-00007ffe02c12fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll 28a0.12d8: 00007ffe02c13000-00007ffe02c58fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll 28a0.12d8: 00007ffe02c59000-00007ffe02c60fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll 28a0.12d8: 00007ffe02c61000-00007ffe02c6efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll 28a0.12d8: 00007ffe02c6f000-00007ffe02c6ffff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll 28a0.12d8: 00007ffe02c70000-00007ffe02c72fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll 28a0.12d8: 00007ffe02c73000-00007ffe02cdffff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll 28a0.12d8: 00007ffe02ce0000-00007ffc059dffff 0x0001/0x0000 0x0000000 28a0.12d8: *00007ffffffe0000-00007ffffffcffff 0x0001/0x0002 0x0020000 28a0.12d8: VirtualBox.exe: timestamp 0x58332496 (rc=VINF_SUCCESS) 28a0.12d8: '\Device\HarddiskVolume4\Oracle\VirtualBox.exe' has no imports 28a0.12d8: '\Device\HarddiskVolume2\Windows\System32\ntdll.dll' has no imports 28a0.12d8: supR3HardNtChildPurify: Done after 281 ms and 0 fixes (loop #0). 3224.325c: Log file opened: 5.1.10r112026 g_hStartupLog=0000000000000004 g_uNtVerCombined=0xa03fab00 3224.325c: supR3HardenedVmProcessInit: uNtDllAddr=00007ffe02b00000 g_uNtVerCombined=0xa03fab00 28a0.12d8: supR3HardNtEnableThreadCreation: 3224.325c: ntdll.dll: timestamp 0x493793ea (rc=VINF_SUCCESS) 3224.325c: New simple heap: #1 0000000000a00000 LB 0x400000 (for 1966080 allocation) 3224.325c: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume4\Oracle' 3224.325c: System32: \Device\HarddiskVolume2\Windows\System32 3224.325c: WinSxS: \Device\HarddiskVolume2\Windows\WinSxS 3224.325c: KnownDllPath: C:\WINDOWS\System32 3224.325c: supR3HardenedVmProcessInit: Opening vboxdrv stub... 3224.325c: supR3HardenedVmProcessInit: Restoring LdrInitializeThunk... 3224.325c: supR3HardenedVmProcessInit: Returning to LdrInitializeThunk... 3224.325c: Registered Dll notification callback with NTDLL. 3224.325c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\kernel32.dll) 3224.325c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\kernel32.dll 3224.325c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\KERNEL32.DLL (Input=KERNEL32.DLL, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000004001: [calling] 3224.325c: supR3HardenedDllNotificationCallback: load 00007ffdff3f0000 LB 0x00266000 C:\WINDOWS\System32\KERNELBASE.dll [fFlags=0x0] 3224.325c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\KernelBase.dll) 3224.325c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\KernelBase.dll 3224.325c: supR3HardenedDllNotificationCallback: load 00007ffe020b0000 LB 0x000ae000 C:\WINDOWS\System32\KERNEL32.DLL [fFlags=0x0] 3224.325c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\kernel32.dll [lacks WinVerifyTrust] 3224.325c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe020b0000 'C:\WINDOWS\System32\KERNEL32.DLL' 3224.325c: supR3HardenedDllNotificationCallback: load 00007ff78cf10000 LB 0x0010b000 F:\Oracle\VirtualBox.exe [fFlags=0x0] 3224.325c: '\Device\HarddiskVolume4\Oracle\VirtualBox.exe' has no imports 3224.325c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Oracle\VirtualBox.exe) 3224.325c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Oracle\VirtualBox.exe 3224.325c: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffe02b791b0 pvNtTerminateThread=00007ffe02ba0890 28a0.12d8: supR3HardNtChildWaitFor: Found expected request 1 (CloseEvents) after 63 ms. 3224.325c: \SystemRoot\System32\ntdll.dll: 3224.325c: CreationTime: 2018-02-09T01:52:43.141932300Z 3224.325c: LastWriteTime: 2018-02-09T01:52:43.141932300Z 3224.325c: ChangeTime: 2018-02-09T01:53:35.112588300Z 3224.325c: FileAttributes: 0x20 3224.325c: Size: 0x1dd100 3224.325c: NT Headers: 0xe0 3224.325c: Timestamp: 0x493793ea 3224.325c: Machine: 0x8664 - amd64 3224.325c: Timestamp: 0x493793ea 3224.325c: Image Version: 10.0 3224.325c: SizeOfImage: 0x1e0000 (1966080) 3224.325c: Resource Dir: 0x174000 LB 0x6a1d8 3224.325c: ProductName: Microsoft® Windows® Operating System 3224.325c: ProductVersion: 10.0.16299.64 3224.325c: FileVersion: 10.0.16299.64 (WinBuild.160101.0800) 3224.325c: FileDescription: NT Layer DLL 3224.325c: \SystemRoot\System32\kernel32.dll: 3224.325c: CreationTime: 2017-09-29T13:42:04.954227600Z 3224.325c: LastWriteTime: 2017-09-29T13:42:04.954227600Z 3224.325c: ChangeTime: 2018-02-09T01:43:47.973669600Z 3224.325c: FileAttributes: 0x20 3224.325c: Size: 0xab868 3224.325c: NT Headers: 0xe8 3224.325c: Timestamp: 0xc2cf900 3224.325c: Machine: 0x8664 - amd64 3224.325c: Timestamp: 0xc2cf900 3224.325c: Image Version: 10.0 3224.325c: SizeOfImage: 0xae000 (712704) 3224.325c: Resource Dir: 0xac000 LB 0x520 3224.325c: ProductName: Microsoft® Windows® Operating System 3224.325c: ProductVersion: 10.0.16299.15 3224.325c: FileVersion: 10.0.16299.15 (WinBuild.160101.0800) 3224.325c: FileDescription: Windows NT BASE API Client DLL 3224.325c: \SystemRoot\System32\KernelBase.dll: 3224.325c: CreationTime: 2017-09-29T13:41:43.124345500Z 3224.325c: LastWriteTime: 2017-09-29T13:41:43.124345500Z 3224.325c: ChangeTime: 2018-02-09T01:43:48.036155200Z 3224.325c: FileAttributes: 0x20 3224.325c: Size: 0x266000 3224.325c: NT Headers: 0xf0 3224.325c: Timestamp: 0x4736733c 3224.325c: Machine: 0x8664 - amd64 3224.325c: Timestamp: 0x4736733c 3224.325c: Image Version: 10.0 3224.325c: SizeOfImage: 0x266000 (2514944) 3224.325c: Resource Dir: 0x245000 LB 0x548 3224.325c: ProductName: Microsoft® Windows® Operating System 3224.325c: ProductVersion: 10.0.16299.15 3224.325c: FileVersion: 10.0.16299.15 (WinBuild.160101.0800) 3224.325c: FileDescription: Windows NT BASE API Client DLL 3224.325c: \SystemRoot\System32\apisetschema.dll: 3224.325c: CreationTime: 2017-09-29T13:42:07.095026600Z 3224.325c: LastWriteTime: 2017-09-29T13:42:07.095026600Z 3224.325c: ChangeTime: 2018-03-01T17:14:27.866351700Z 3224.325c: FileAttributes: 0x20 3224.325c: Size: 0x1b398 3224.325c: NT Headers: 0xc8 3224.325c: Timestamp: 0xf30abf31 3224.325c: Machine: 0x8664 - amd64 3224.325c: Timestamp: 0xf30abf31 3224.325c: Image Version: 10.0 3224.325c: SizeOfImage: 0x1c000 (114688) 3224.325c: Resource Dir: 0x1b000 LB 0x408 3224.325c: ProductName: Microsoft® Windows® Operating System 3224.325c: ProductVersion: 10.0.16299.15 3224.325c: FileVersion: 10.0.16299.15 (WinBuild.160101.0800) 3224.325c: FileDescription: ApiSet Schema DLL 3224.325c: NtOpenDirectoryObject failed on \Driver: 0xc0000022 3224.325c: supR3HardenedWinFindAdversaries: 0x0 3224.325c: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume4\Oracle' 3224.325c: Calling main() 3224.325c: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2 3224.325c: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume4\Oracle' 3224.325c: '\Device\HarddiskVolume4\Oracle\VirtualBox.exe' has no imports 3224.325c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Oracle\VirtualBox.exe) 3224.325c: SUPR3HardenedMain: Respawn #2 3224.325c: supR3HardNtEnableThreadCreation: 3224.325c: '\Device\HarddiskVolume2\Windows\System32\ntdll.dll' has no imports 3224.325c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\ntdll.dll) 3224.325c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\ntdll.dll 3224.325c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\ntdll.dll (Input=ntdll.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801: [calling] 3224.325c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe02b00000 'C:\WINDOWS\System32\ntdll.dll' 3224.325c: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffe02b791b0 pvNtTerminateThread=00007ffe02ba0890 3224.325c: supR3HardenedWinDoReSpawn(2): New child d4.e24 [kernel32]. 3224.325c: supR3HardenedWinReSpawn: NtSetInformationThread/ThreadHideFromDebugger failed: 0xc0000022 (harmless) 3224.325c: supR3HardNtChildGatherData: PebBaseAddress=000000000054b000 cbPeb=0x388 3224.325c: supR3HardNtPuChFindNtdll: uNtDllParentAddr=00007ffe02b00000 uNtDllChildAddr=00007ffe02b00000 3224.325c: supR3HardenedWinSetupChildInit: uLdrInitThunk=00007ffe02b791b0 3224.325c: supR3HardenedWinSetupChildInit: Start child. 3224.325c: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 0 ms. 3224.325c: supR3HardNtChildPurify: Startup delay kludge #1/0: 266 ms, 17 sleeps 3224.325c: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION 3224.325c: *0000000000000000-ffffffffffccffff 0x0001/0x0000 0x0000000 3224.325c: *0000000000330000-000000000030ffff 0x0004/0x0004 0x0020000 3224.325c: *0000000000350000-0000000000336fff 0x0002/0x0002 0x0040000 3224.325c: 0000000000369000-0000000000361fff 0x0001/0x0000 0x0000000 3224.325c: *0000000000370000-000000000036bfff 0x0002/0x0002 0x0040000 3224.325c: 0000000000374000-0000000000367fff 0x0001/0x0000 0x0000000 3224.325c: *0000000000380000-000000000037efff 0x0004/0x0004 0x0020000 3224.325c: 0000000000381000-0000000000301fff 0x0001/0x0000 0x0000000 3224.325c: *0000000000400000-00000000002b4fff 0x0000/0x0004 0x0020000 3224.325c: 000000000054b000-0000000000547fff 0x0004/0x0004 0x0020000 3224.325c: 000000000054e000-000000000049bfff 0x0000/0x0004 0x0020000 3224.325c: *0000000000600000-0000000000504fff 0x0000/0x0004 0x0020000 3224.325c: 00000000006fb000-00000000006f7fff 0x0104/0x0004 0x0020000 3224.325c: 00000000006fe000-00000000006fbfff 0x0004/0x0004 0x0020000 3224.325c: 0000000000700000-ffffffff80e1ffff 0x0001/0x0000 0x0000000 3224.325c: *000000007ffe0000-000000007ffdefff 0x0002/0x0002 0x0020000 3224.325c: *000000007ffe1000-000000007ffd1fff 0x0000/0x0002 0x0020000 3224.325c: 000000007fff0000-ffff8009731affff 0x0001/0x0000 0x0000000 3224.325c: *00007ff78ce30000-00007ff78ce0cfff 0x0002/0x0002 0x0040000 3224.325c: 00007ff78ce53000-00007ff78cd95fff 0x0001/0x0000 0x0000000 3224.325c: *00007ff78cf10000-00007ff78cf10fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Oracle\VirtualBox.exe 3224.325c: 00007ff78cf11000-00007ff78cf7ffff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume4\Oracle\VirtualBox.exe 3224.325c: 00007ff78cf80000-00007ff78cf80fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume4\Oracle\VirtualBox.exe 3224.325c: 00007ff78cf81000-00007ff78cfc5fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Oracle\VirtualBox.exe 3224.325c: 00007ff78cfc6000-00007ff78cfc6fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume4\Oracle\VirtualBox.exe 3224.325c: 00007ff78cfc7000-00007ff78cfc7fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Oracle\VirtualBox.exe 3224.325c: 00007ff78cfc8000-00007ff78cfccfff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume4\Oracle\VirtualBox.exe 3224.325c: 00007ff78cfcd000-00007ff78cfcdfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Oracle\VirtualBox.exe 3224.325c: 00007ff78cfce000-00007ff78cfcefff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume4\Oracle\VirtualBox.exe 3224.325c: 00007ff78cfcf000-00007ff78cfd2fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Oracle\VirtualBox.exe 3224.325c: 00007ff78cfd3000-00007ff78d01afff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Oracle\VirtualBox.exe 3224.325c: 00007ff78d01b000-00007ff117535fff 0x0001/0x0000 0x0000000 3224.325c: *00007ffe02b00000-00007ffe02b00fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll 3224.325c: 00007ffe02b01000-00007ffe02c12fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll 3224.325c: 00007ffe02c13000-00007ffe02c58fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll 3224.325c: 00007ffe02c59000-00007ffe02c60fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll 3224.325c: 00007ffe02c61000-00007ffe02c6efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll 3224.325c: 00007ffe02c6f000-00007ffe02c6ffff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll 3224.325c: 00007ffe02c70000-00007ffe02c72fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll 3224.325c: 00007ffe02c73000-00007ffe02cdffff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll 3224.325c: 00007ffe02ce0000-00007ffc059dffff 0x0001/0x0000 0x0000000 3224.325c: *00007ffffffe0000-00007ffffffcffff 0x0001/0x0002 0x0020000 3224.325c: VirtualBox.exe: timestamp 0x58332496 (rc=VINF_SUCCESS) 3224.325c: '\Device\HarddiskVolume4\Oracle\VirtualBox.exe' has no imports 3224.325c: '\Device\HarddiskVolume2\Windows\System32\ntdll.dll' has no imports 3224.325c: supR3HardNtChildPurify: Done after 281 ms and 0 fixes (loop #0). 3224.325c: supR3HardenedEarlyCompact: Removed heap 1 (0x00000000a00000 LB 0x400000) d4.e24: Log file opened: 5.1.10r112026 g_hStartupLog=0000000000000004 g_uNtVerCombined=0xa03fab00 d4.e24: supR3HardenedVmProcessInit: uNtDllAddr=00007ffe02b00000 g_uNtVerCombined=0xa03fab00 3224.325c: supR3HardNtEnableThreadCreation: d4.e24: ntdll.dll: timestamp 0x493793ea (rc=VINF_SUCCESS) d4.e24: New simple heap: #1 0000000000800000 LB 0x400000 (for 1966080 allocation) d4.e24: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume4\Oracle' d4.e24: System32: \Device\HarddiskVolume2\Windows\System32 d4.e24: WinSxS: \Device\HarddiskVolume2\Windows\WinSxS d4.e24: KnownDllPath: C:\WINDOWS\System32 d4.e24: supR3HardenedVmProcessInit: Opening vboxdrv... d4.e24: supR3HardenedVmProcessInit: Restoring LdrInitializeThunk... d4.e24: supR3HardenedVmProcessInit: Returning to LdrInitializeThunk... d4.e24: Registered Dll notification callback with NTDLL. d4.e24: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\kernel32.dll) d4.e24: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\kernel32.dll d4.e24: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\KERNEL32.DLL (Input=KERNEL32.DLL, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000004001: [calling] d4.e24: supR3HardenedDllNotificationCallback: load 00007ffdff3f0000 LB 0x00266000 C:\WINDOWS\System32\KERNELBASE.dll [fFlags=0x0] d4.e24: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\KernelBase.dll) d4.e24: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\KernelBase.dll d4.e24: supR3HardenedDllNotificationCallback: load 00007ffe020b0000 LB 0x000ae000 C:\WINDOWS\System32\KERNEL32.DLL [fFlags=0x0] d4.e24: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\kernel32.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe020b0000 'C:\WINDOWS\System32\KERNEL32.DLL' d4.e24: supR3HardenedDllNotificationCallback: load 00007ff78cf10000 LB 0x0010b000 F:\Oracle\VirtualBox.exe [fFlags=0x0] d4.e24: '\Device\HarddiskVolume4\Oracle\VirtualBox.exe' has no imports d4.e24: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Oracle\VirtualBox.exe) d4.e24: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Oracle\VirtualBox.exe d4.e24: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffe02b791b0 pvNtTerminateThread=00007ffe02ba0890 3224.325c: supR3HardNtChildWaitFor: Found expected request 1 (CloseEvents) after 78 ms. d4.e24: \SystemRoot\System32\ntdll.dll: d4.e24: CreationTime: 2018-02-09T01:52:43.141932300Z d4.e24: LastWriteTime: 2018-02-09T01:52:43.141932300Z d4.e24: ChangeTime: 2018-02-09T01:53:35.112588300Z d4.e24: FileAttributes: 0x20 d4.e24: Size: 0x1dd100 d4.e24: NT Headers: 0xe0 d4.e24: Timestamp: 0x493793ea d4.e24: Machine: 0x8664 - amd64 d4.e24: Timestamp: 0x493793ea d4.e24: Image Version: 10.0 d4.e24: SizeOfImage: 0x1e0000 (1966080) d4.e24: Resource Dir: 0x174000 LB 0x6a1d8 d4.e24: ProductName: Microsoft® Windows® Operating System d4.e24: ProductVersion: 10.0.16299.64 d4.e24: FileVersion: 10.0.16299.64 (WinBuild.160101.0800) d4.e24: FileDescription: NT Layer DLL d4.e24: \SystemRoot\System32\kernel32.dll: d4.e24: CreationTime: 2017-09-29T13:42:04.954227600Z d4.e24: LastWriteTime: 2017-09-29T13:42:04.954227600Z d4.e24: ChangeTime: 2018-02-09T01:43:47.973669600Z d4.e24: FileAttributes: 0x20 d4.e24: Size: 0xab868 d4.e24: NT Headers: 0xe8 d4.e24: Timestamp: 0xc2cf900 d4.e24: Machine: 0x8664 - amd64 d4.e24: Timestamp: 0xc2cf900 d4.e24: Image Version: 10.0 d4.e24: SizeOfImage: 0xae000 (712704) d4.e24: Resource Dir: 0xac000 LB 0x520 d4.e24: ProductName: Microsoft® Windows® Operating System d4.e24: ProductVersion: 10.0.16299.15 d4.e24: FileVersion: 10.0.16299.15 (WinBuild.160101.0800) d4.e24: FileDescription: Windows NT BASE API Client DLL d4.e24: \SystemRoot\System32\KernelBase.dll: d4.e24: CreationTime: 2017-09-29T13:41:43.124345500Z d4.e24: LastWriteTime: 2017-09-29T13:41:43.124345500Z d4.e24: ChangeTime: 2018-02-09T01:43:48.036155200Z d4.e24: FileAttributes: 0x20 d4.e24: Size: 0x266000 d4.e24: NT Headers: 0xf0 d4.e24: Timestamp: 0x4736733c d4.e24: Machine: 0x8664 - amd64 d4.e24: Timestamp: 0x4736733c d4.e24: Image Version: 10.0 d4.e24: SizeOfImage: 0x266000 (2514944) d4.e24: Resource Dir: 0x245000 LB 0x548 d4.e24: ProductName: Microsoft® Windows® Operating System d4.e24: ProductVersion: 10.0.16299.15 d4.e24: FileVersion: 10.0.16299.15 (WinBuild.160101.0800) d4.e24: FileDescription: Windows NT BASE API Client DLL d4.e24: \SystemRoot\System32\apisetschema.dll: d4.e24: CreationTime: 2017-09-29T13:42:07.095026600Z d4.e24: LastWriteTime: 2017-09-29T13:42:07.095026600Z d4.e24: ChangeTime: 2018-03-01T17:14:27.866351700Z d4.e24: FileAttributes: 0x20 d4.e24: Size: 0x1b398 d4.e24: NT Headers: 0xc8 d4.e24: Timestamp: 0xf30abf31 d4.e24: Machine: 0x8664 - amd64 d4.e24: Timestamp: 0xf30abf31 d4.e24: Image Version: 10.0 d4.e24: SizeOfImage: 0x1c000 (114688) d4.e24: Resource Dir: 0x1b000 LB 0x408 d4.e24: ProductName: Microsoft® Windows® Operating System d4.e24: ProductVersion: 10.0.16299.15 d4.e24: FileVersion: 10.0.16299.15 (WinBuild.160101.0800) d4.e24: FileDescription: ApiSet Schema DLL d4.e24: NtOpenDirectoryObject failed on \Driver: 0xc0000022 d4.e24: supR3HardenedWinFindAdversaries: 0x0 d4.e24: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume4\Oracle' d4.e24: Calling main() d4.e24: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2 d4.e24: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume4\Oracle' d4.e24: '\Device\HarddiskVolume4\Oracle\VirtualBox.exe' has no imports d4.e24: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Oracle\VirtualBox.exe) d4.e24: SUPR3HardenedMain: Final process, opening VBoxDrv... d4.e24: supR3HardenedEarlyCompact: Removed heap 1 (0x00000000800000 LB 0x400000) d4.e24: supR3HardNtEnableThreadCreation: d4.e24: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Oracle\VBoxSupLib.dll) d4.e24: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Oracle\VBoxSupLib.dll d4.e24: supR3HardenedMonitor_LdrLoadDll: pName=F:\Oracle\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801: [calling] d4.e24: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Oracle\VBoxSupLib.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedDllNotificationCallback: load 00007ffdfd010000 LB 0x00005000 F:\Oracle\VBoxSupLib.DLL [fFlags=0x0] d4.e24: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Oracle\VBoxSupLib.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Oracle\VBoxSupLib.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedMonitor_LdrLoadDll: pName=F:\Oracle\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001: [calling] d4.e24: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdfd010000 'F:\Oracle\VBoxSupLib.DLL' d4.e24: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Oracle\VBoxSupLib.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedMonitor_LdrLoadDll: pName=F:\Oracle\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001: [calling] d4.e24: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdfd010000 'F:\Oracle\VBoxSupLib.DLL' d4.e24: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdfd010000 'F:\Oracle\VBoxSupLib.DLL' d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msasn1.dll'. d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'crypt32.dll'. d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27 'rpcrt4.dll'. d4.e24: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\wintrust.dll) d4.e24: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\wintrust.dll d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008] d4.e24: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll) d4.e24: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'crypt32.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'crypt32.dll' -> '\Device\HarddiskVolume2\Windows\System32\crypt32.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #33 'msasn1.dll'. d4.e24: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\crypt32.dll) d4.e24: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\crypt32.dll d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msasn1.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'msasn1.dll' -> '\Device\HarddiskVolume2\Windows\System32\msasn1.dll' [rcNtRedir=0xc0150008] d4.e24: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\msasn1.dll) d4.e24: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\msasn1.dll d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] d4.e24: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\msvcrt.dll) d4.e24: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\msvcrt.dll d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msasn1.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'msasn1.dll' -> '\Device\HarddiskVolume2\Windows\System32\msasn1.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msasn1.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\Wintrust.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801: [calling] d4.e24: supR3HardenedDllNotificationCallback: load 00007ffe02a30000 LB 0x0009d000 C:\WINDOWS\System32\msvcrt.dll [fFlags=0x0] d4.e24: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedDllNotificationCallback: load 00007ffdfee50000 LB 0x00012000 C:\WINDOWS\System32\MSASN1.dll [fFlags=0x0] d4.e24: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msasn1.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedDllNotificationCallback: load 00007ffdff6c0000 LB 0x000f6000 C:\WINDOWS\System32\ucrtbase.dll [fFlags=0x0] d4.e24: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\ucrtbase.dll) d4.e24: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\ucrtbase.dll d4.e24: supR3HardenedDllNotificationCallback: load 00007ffdfef00000 LB 0x001ce000 C:\WINDOWS\System32\CRYPT32.dll [fFlags=0x0] d4.e24: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\crypt32.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedDllNotificationCallback: load 00007ffe02300000 LB 0x0011f000 C:\WINDOWS\System32\RPCRT4.dll [fFlags=0x0] d4.e24: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedDllNotificationCallback: load 00007ffe01ee0000 LB 0x0005b000 C:\WINDOWS\System32\sechost.dll [fFlags=0x0] d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'rpcrt4.dll'. d4.e24: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\sechost.dll) d4.e24: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\sechost.dll d4.e24: supR3HardenedDllNotificationCallback: load 00007ffe01c00000 LB 0x000a1000 C:\WINDOWS\System32\advapi32.dll [fFlags=0x0] d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'sechost.dll'. d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27 'rpcrt4.dll'. d4.e24: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\advapi32.dll) d4.e24: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\advapi32.dll d4.e24: supR3HardenedDllNotificationCallback: load 00007ffdff660000 LB 0x00058000 C:\WINDOWS\System32\Wintrust.dll [fFlags=0x0] d4.e24: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wintrust.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801: [calling] d4.e24: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdff3f0000 'api-ms-win-core-synch-l1-2-0' d4.e24: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801: [calling] d4.e24: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdff3f0000 'api-ms-win-core-fibers-l1-1-1' d4.e24: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801: [calling] d4.e24: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdff3f0000 'api-ms-win-core-fibers-l1-1-1' d4.e24: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801: [calling] d4.e24: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdff3f0000 'api-ms-win-core-synch-l1-2-0' d4.e24: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-l1-2-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801: [calling] d4.e24: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdff3f0000 'api-ms-win-core-localization-l1-2-1' d4.e24: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdff660000 'C:\WINDOWS\system32\Wintrust.dll' d4.e24: supHardenedWinVerifyImageByHandle: -> -626 (\Device\HarddiskVolume2\Windows\System32\bcrypt.dll) d4.e24: Error (rc=0): d4.e24: supR3HardenedScreenImage/LdrLoadDll: rc=Unknown Status -626 (0xfffffd8e) fImage=1 fProtect=0x0 fAccess=0x0 \Device\HarddiskVolume2\Windows\System32\bcrypt.dll: Grown load config (232 to 256 bytes) includes non-zero bytes: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 a9 01 80 01 00 00 00 d4.e24: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\bcrypt.dll d4.e24: Error (rc=0): d4.e24: supR3HardenedMonitor_LdrLoadDll: rejecting 'C:\WINDOWS\system32\bcrypt.dll' (C:\WINDOWS\system32\bcrypt.dll): rcNt=0xc0000190 d4.e24: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000190 'C:\WINDOWS\system32\bcrypt.dll' d4.e24: Warning! Failed to load bcrypt.dll d4.e24: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wintrust.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'sechost.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'sechost.dll' -> '\Device\HarddiskVolume2\Windows\System32\sechost.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\sechost.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\WINTRUST.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001: [calling] d4.e24: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdff660000 'C:\Windows\System32\WINTRUST.DLL' d4.e24: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wintrust.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\WINTRUST.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001: [calling] d4.e24: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdff660000 'C:\Windows\System32\WINTRUST.DLL' d4.e24: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wintrust.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\WINTRUST.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001: [calling] d4.e24: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdff660000 'C:\Windows\System32\WINTRUST.DLL' d4.e24: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wintrust.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\WINTRUST.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001: [calling] d4.e24: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdff660000 'C:\Windows\System32\WINTRUST.DLL' d4.e24: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wintrust.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\WINTRUST.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001: [calling] d4.e24: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdff660000 'C:\Windows\System32\WINTRUST.DLL' d4.e24: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wintrust.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\WINTRUST.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001: [calling] d4.e24: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdff660000 'C:\Windows\System32\WINTRUST.DLL' d4.e24: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wintrust.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\WINTRUST.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001: [calling] d4.e24: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdff660000 'C:\Windows\System32\WINTRUST.DLL' d4.e24: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\cryptsp.dll) d4.e24: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\cryptsp.dll d4.e24: supR3HardenedDllNotificationCallback: load 00007ffdfe8a0000 LB 0x00017000 C:\WINDOWS\SYSTEM32\CRYPTSP.dll [fFlags=0x0] d4.e24: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\cryptsp.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'bcrypt.dll'. d4.e24: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\rsaenh.dll) d4.e24: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\rsaenh.dll d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcrypt.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcrypt.dll' -> '\Device\HarddiskVolume2\Windows\System32\bcrypt.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedScreenImage/Imports: cache hit (Unknown Status -626 (0xfffffd8e)) on \Device\HarddiskVolume2\Windows\System32\bcrypt.dll [lacks WinVerifyTrust] d4.e24: Error (rc=0): d4.e24: supR3HardenedScreenImage/Imports: cached rc=Unknown Status -626 (0xfffffd8e) fImage=1 fProtect=0x0 fAccess=0x0 cHits=1 \Device\HarddiskVolume2\Windows\System32\bcrypt.dll d4.e24: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001: [calling] d4.e24: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rsaenh.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status -626 (0xfffffd8e)) on \Device\HarddiskVolume2\Windows\System32\bcrypt.dll [lacks WinVerifyTrust] d4.e24: Error (rc=0): d4.e24: supR3HardenedScreenImage/NtCreateSection: cached rc=Unknown Status -626 (0xfffffd8e) fImage=1 fProtect=0x10 fAccess=0xf cHits=2 \Device\HarddiskVolume2\Windows\System32\bcrypt.dll d4.e24: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000190 'C:\WINDOWS\system32\rsaenh.dll' d4.e24: supR3HardNtViCallWinVerifyTrust: WinVerifyTrust failed with 0x8 () on '\Device\HarddiskVolume4\Oracle\VirtualBox.exe' d4.e24: Error -22919 in VirtualBox! (enmWhat=1) d4.e24: WinVerifyTrust failed on stub executable: WinVerifyTrust failed with hrc=Unknown Status 0x8 on '\Device\HarddiskVolume4\Oracle\VirtualBox.exe' d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'opengl32.dll'. d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'. d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'msvcp100.dll'. d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcr100.dll'. d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'. d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'qt5guivbox.dll'. d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'qt5widgetsvbox.dll'. d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'qt5printsupportvbox.dll'. d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'qt5openglvbox.dll'. d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'user32.dll'. d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'advapi32.dll'. d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'shell32.dll'. d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'ole32.dll'. d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'oleaut32.dll'. d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #15 'winmm.dll'. d4.e24: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Oracle\VirtualBox.dll) d4.e24: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Oracle\VirtualBox.dll d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume2\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'winmmbase.dll'. d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'msvcrt.dll'. d4.e24: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\winmm.dll) d4.e24: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\winmm.dll d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume2\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'. d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'combase.dll'. d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #23 'rpcrt4.dll'. d4.e24: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\oleaut32.dll) d4.e24: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\oleaut32.dll d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #22 'rpcrt4.dll'. d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #46 'gdi32.dll'. d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #47 'user32.dll'. d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #48 'combase.dll'. d4.e24: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\ole32.dll) d4.e24: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\ole32.dll d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume2\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #73 'user32.dll'. d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #75 'gdi32.dll'. d4.e24: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\shell32.dll) d4.e24: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\shell32.dll d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'win32u.dll'. d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'gdi32.dll'. d4.e24: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\user32.dll) d4.e24: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\user32.dll d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5openglvbox.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5openglvbox.dll' -> '\Device\HarddiskVolume4\Oracle\qt5openglvbox.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'qt5widgetsvbox.dll'. d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'qt5guivbox.dll'. d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5corevbox.dll'. d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcr100.dll'. d4.e24: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Oracle\Qt5OpenGLVBox.dll) d4.e24: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Oracle\Qt5OpenGLVBox.dll d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5printsupportvbox.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5printsupportvbox.dll' -> '\Device\HarddiskVolume4\Oracle\qt5printsupportvbox.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'. d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'. d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5widgetsvbox.dll'. d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5guivbox.dll'. d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'. d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'winspool.drv'. d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'comdlg32.dll'. d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcr100.dll'. d4.e24: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Oracle\Qt5PrintSupportVBox.dll) d4.e24: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Oracle\Qt5PrintSupportVBox.dll d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume4\Oracle\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'. d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'. d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5guivbox.dll'. d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5corevbox.dll'. d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'shell32.dll'. d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'. d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'. d4.e24: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Oracle\Qt5WidgetsVBox.dll) d4.e24: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Oracle\Qt5WidgetsVBox.dll d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume4\Oracle\qt5guivbox.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'ole32.dll'. d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'opengl32.dll'. d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'. d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'. d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'. d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'. d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'. d4.e24: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Oracle\Qt5GuiVBox.dll) d4.e24: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Oracle\Qt5GuiVBox.dll d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume4\Oracle\qt5corevbox.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'. d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'shell32.dll'. d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ole32.dll'. d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'advapi32.dll'. d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ws2_32.dll'. d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'mpr.dll'. d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcp100.dll'. d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'msvcr100.dll'. d4.e24: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Oracle\Qt5CoreVBox.dll) d4.e24: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Oracle\Qt5CoreVBox.dll d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume4\Oracle\msvcr100.dll' [rcNtRedir=0xc0150008] d4.e24: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Oracle\msvcr100.dll) d4.e24: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Oracle\msvcr100.dll d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume4\Oracle\msvcp100.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'. d4.e24: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Oracle\msvcp100.dll) d4.e24: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Oracle\msvcp100.dll d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume4\Oracle\vboxrt.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'. d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'. d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ws2_32.dll'. d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'rpcrt4.dll'. d4.e24: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Oracle\VBoxRT.dll) d4.e24: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Oracle\VBoxRT.dll d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume2\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'advapi32.dll'. d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'. d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'gdi32.dll'. d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'glu32.dll'. d4.e24: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\opengl32.dll) d4.e24: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\opengl32.dll d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'glu32.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'glu32.dll' -> '\Device\HarddiskVolume2\Windows\System32\glu32.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'. d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'opengl32.dll'. d4.e24: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\glu32.dll) d4.e24: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\glu32.dll d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008] d4.e24: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\gdi32.dll) d4.e24: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\gdi32.dll d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'rpcrt4.dll'. d4.e24: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\ws2_32.dll) d4.e24: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\ws2_32.dll d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume4\Oracle\msvcp100.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Oracle\msvcp100.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume4\Oracle\msvcr100.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Oracle\msvcr100.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume4\Oracle\msvcr100.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Oracle\msvcr100.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume4\Oracle\msvcr100.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Oracle\msvcr100.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume4\Oracle\msvcp100.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Oracle\msvcp100.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mpr.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'mpr.dll' -> '\Device\HarddiskVolume2\Windows\System32\mpr.dll' [rcNtRedir=0xc0150008] d4.e24: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\mpr.dll) d4.e24: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\mpr.dll d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ws2_32.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ole32.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume2\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\shell32.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume4\Oracle\msvcr100.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Oracle\msvcr100.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume4\Oracle\msvcp100.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Oracle\msvcp100.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume4\Oracle\qt5corevbox.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Oracle\Qt5CoreVBox.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume2\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\opengl32.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ole32.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume4\Oracle\msvcr100.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Oracle\msvcr100.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume4\Oracle\msvcp100.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Oracle\msvcp100.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume2\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\shell32.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume4\Oracle\qt5corevbox.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Oracle\Qt5CoreVBox.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume4\Oracle\qt5guivbox.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Oracle\Qt5GuiVBox.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume4\Oracle\msvcr100.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Oracle\msvcr100.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'comdlg32.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'comdlg32.dll' -> '\Device\HarddiskVolume2\Windows\System32\comdlg32.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'user32.dll'. d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #37 'shlwapi.dll'. d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #38 'gdi32.dll'. d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #39 'comctl32.dll'. d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #40 'shell32.dll'. d4.e24: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\comdlg32.dll) d4.e24: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\comdlg32.dll d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winspool.drv'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'winspool.drv' -> '\Device\HarddiskVolume2\Windows\System32\winspool.drv' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #25 'iphlpapi.dll'. d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'bcrypt.dll'. d4.e24: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\winspool.drv) d4.e24: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\winspool.drv d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume4\Oracle\qt5corevbox.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Oracle\Qt5CoreVBox.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume4\Oracle\qt5guivbox.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Oracle\Qt5GuiVBox.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume4\Oracle\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Oracle\Qt5WidgetsVBox.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume4\Oracle\msvcr100.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Oracle\msvcr100.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume4\Oracle\qt5corevbox.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Oracle\Qt5CoreVBox.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume4\Oracle\qt5guivbox.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Oracle\Qt5GuiVBox.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume4\Oracle\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Oracle\Qt5WidgetsVBox.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume2\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008] d4.e24: '\Device\HarddiskVolume2\Windows\System32\win32u.dll' has no imports d4.e24: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\win32u.dll) d4.e24: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\win32u.dll d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume2\Windows\System32\combase.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'. d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #45 'bcryptprimitives.dll'. d4.e24: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\combase.dll) d4.e24: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\combase.dll d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume2\Windows\System32\combase.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\combase.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008] d4.e24: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll) d4.e24: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\msvcp_win.dll d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmmbase.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmmbase.dll' -> '\Device\HarddiskVolume2\Windows\System32\winmmbase.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. d4.e24: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\winmmbase.dll) d4.e24: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\winmmbase.dll d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume2\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008] d4.e24: supHardenedWinVerifyImageByHandle: -> -626 (\Device\HarddiskVolume2\Windows\System32\bcryptprimitives.dll) d4.e24: Error (rc=0): d4.e24: supR3HardenedScreenImage/Imports: rc=Unknown Status -626 (0xfffffd8e) fImage=1 fProtect=0x0 fAccess=0x0 \Device\HarddiskVolume2\Windows\System32\bcryptprimitives.dll: Grown load config (232 to 256 bytes) includes non-zero bytes: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 16 06 80 01 00 00 00 d4.e24: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\bcryptprimitives.dll d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcrypt.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcrypt.dll' -> '\Device\HarddiskVolume2\Windows\System32\bcrypt.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedScreenImage/Imports: cache hit (Unknown Status -626 (0xfffffd8e)) on \Device\HarddiskVolume2\Windows\System32\bcrypt.dll [lacks WinVerifyTrust] d4.e24: Error (rc=0): d4.e24: supR3HardenedScreenImage/Imports: cached rc=Unknown Status -626 (0xfffffd8e) fImage=1 fProtect=0x0 fAccess=0x0 cHits=3 \Device\HarddiskVolume2\Windows\System32\bcrypt.dll d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'iphlpapi.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'iphlpapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\iphlpapi.dll' [rcNtRedir=0xc0150008] d4.e24: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\IPHLPAPI.DLL) d4.e24: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\IPHLPAPI.DLL d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume2\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\shell32.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'comctl32.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'comctl32.dll' -> '\Device\HarddiskVolume2\Windows\System32\comctl32.dll' [rcNtRedir=0x0] d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'advapi32.dll'. d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'. d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'. d4.e24: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\comctl32.dll) d4.e24: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\comctl32.dll d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shlwapi.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'shlwapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\shlwapi.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'. d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #45 'gdi32.dll'. d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #46 'user32.dll'. d4.e24: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\shlwapi.dll) d4.e24: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\shlwapi.dll d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume2\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\opengl32.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'... d4.e24: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008] d4.e24: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedMonitor_LdrLoadDll: pName=F:\Oracle\VirtualBox.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000a01: [calling] d4.e24: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Oracle\VirtualBox.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\opengl32.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Oracle\VBoxRT.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Oracle\msvcp100.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Oracle\msvcr100.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Oracle\Qt5CoreVBox.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Oracle\Qt5GuiVBox.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Oracle\Qt5WidgetsVBox.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Oracle\Qt5PrintSupportVBox.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Oracle\Qt5OpenGLVBox.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winmm.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\glu32.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\mpr.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\winspool.drv [lacks WinVerifyTrust] d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'advapi32.dll'. d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'. d4.e24: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'. d4.e24: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.16299.125_none_88782a244abc4c60\comctl32.dll) d4.e24: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.16299.125_none_88782a244abc4c60\comctl32.dll d4.e24: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winmmbase.dll [lacks WinVerifyTrust] d4.e24: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\IPHLPAPI.DLL [lacks WinVerifyTrust] d4.e24: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status -626 (0xfffffd8e)) on \Device\HarddiskVolume2\Windows\System32\bcrypt.dll [lacks WinVerifyTrust] d4.e24: Error (rc=0): d4.e24: supR3HardenedScreenImage/NtCreateSection: cached rc=Unknown Status -626 (0xfffffd8e) fImage=1 fProtect=0x10 fAccess=0xf cHits=4 \Device\HarddiskVolume2\Windows\System32\bcrypt.dll d4.e24: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000190 'F:\Oracle\VirtualBox.dll' 3224.325c: supR3HardNtChildWaitFor[2]: Quitting: ExitCode=0x1 (rcNtWait=0x0, rcNt1=0x0, rcNt2=0x103, rcNt3=0x103, 563 ms, the end); 28a0.12d8: supR3HardNtChildWaitFor[1]: Quitting: ExitCode=0x1 (rcNtWait=0x0, rcNt1=0x0, rcNt2=0x103, rcNt3=0x103, 1016 ms, the end);