API tools faq
paste
Advertisement
Kodos

Untitled

Kodos
Dec 31st, 2017
59
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 98.06 KB | None | 0 0
raw download clone embed print report
  1. 1264.383c: Log file opened: 5.1.2r108956 g_hStartupLog=0000000000000068 g_uNtVerCombined=0xa03fab00
  2. 1264.383c: \SystemRoot\System32\ntdll.dll:
  3. 1264.383c: CreationTime: 2017-12-09T04:04:39.604184300Z
  4. 1264.383c: LastWriteTime: 2017-12-09T04:04:39.604184300Z
  5. 1264.383c: ChangeTime: 2017-12-15T06:38:53.825772200Z
  6. 1264.383c: FileAttributes: 0x20
  7. 1264.383c: Size: 0x1dd100
  8. 1264.383c: NT Headers: 0xe0
  9. 1264.383c: Timestamp: 0x493793ea
  10. 1264.383c: Machine: 0x8664 - amd64
  11. 1264.383c: Timestamp: 0x493793ea
  12. 1264.383c: Image Version: 10.0
  13. 1264.383c: SizeOfImage: 0x1e0000 (1966080)
  14. 1264.383c: Resource Dir: 0x174000 LB 0x6a1d8
  15. 1264.383c: ProductName: Microsoft® Windows® Operating System
  16. 1264.383c: ProductVersion: 10.0.16299.64
  17. 1264.383c: FileVersion: 10.0.16299.64 (WinBuild.160101.0800)
  18. 1264.383c: FileDescription: NT Layer DLL
  19. 1264.383c: \SystemRoot\System32\kernel32.dll:
  20. 1264.383c: CreationTime: 2017-09-29T13:42:04.954227600Z
  21. 1264.383c: LastWriteTime: 2017-09-29T13:42:04.954227600Z
  22. 1264.383c: ChangeTime: 2017-12-09T03:40:33.235355200Z
  23. 1264.383c: FileAttributes: 0x20
  24. 1264.383c: Size: 0xab868
  25. 1264.383c: NT Headers: 0xe8
  26. 1264.383c: Timestamp: 0xc2cf900
  27. 1264.383c: Machine: 0x8664 - amd64
  28. 1264.383c: Timestamp: 0xc2cf900
  29. 1264.383c: Image Version: 10.0
  30. 1264.383c: SizeOfImage: 0xae000 (712704)
  31. 1264.383c: Resource Dir: 0xac000 LB 0x520
  32. 1264.383c: ProductName: Microsoft® Windows® Operating System
  33. 1264.383c: ProductVersion: 10.0.16299.15
  34. 1264.383c: FileVersion: 10.0.16299.15 (WinBuild.160101.0800)
  35. 1264.383c: FileDescription: Windows NT BASE API Client DLL
  36. 1264.383c: \SystemRoot\System32\KernelBase.dll:
  37. 1264.383c: CreationTime: 2017-09-29T13:41:43.124345500Z
  38. 1264.383c: LastWriteTime: 2017-09-29T13:41:43.124345500Z
  39. 1264.383c: ChangeTime: 2017-12-09T03:40:33.360247200Z
  40. 1264.383c: FileAttributes: 0x20
  41. 1264.383c: Size: 0x266000
  42. 1264.383c: NT Headers: 0xf0
  43. 1264.383c: Timestamp: 0x4736733c
  44. 1264.383c: Machine: 0x8664 - amd64
  45. 1264.383c: Timestamp: 0x4736733c
  46. 1264.383c: Image Version: 10.0
  47. 1264.383c: SizeOfImage: 0x266000 (2514944)
  48. 1264.383c: Resource Dir: 0x245000 LB 0x548
  49. 1264.383c: ProductName: Microsoft® Windows® Operating System
  50. 1264.383c: ProductVersion: 10.0.16299.15
  51. 1264.383c: FileVersion: 10.0.16299.15 (WinBuild.160101.0800)
  52. 1264.383c: FileDescription: Windows NT BASE API Client DLL
  53. 1264.383c: \SystemRoot\System32\apisetschema.dll:
  54. 1264.383c: CreationTime: 2017-09-29T13:42:07.095026600Z
  55. 1264.383c: LastWriteTime: 2017-09-29T13:42:07.095026600Z
  56. 1264.383c: ChangeTime: 2017-12-16T04:20:05.679142600Z
  57. 1264.383c: FileAttributes: 0x20
  58. 1264.383c: Size: 0x1b398
  59. 1264.383c: NT Headers: 0xc8
  60. 1264.383c: Timestamp: 0xf30abf31
  61. 1264.383c: Machine: 0x8664 - amd64
  62. 1264.383c: Timestamp: 0xf30abf31
  63. 1264.383c: Image Version: 10.0
  64. 1264.383c: SizeOfImage: 0x1c000 (114688)
  65. 1264.383c: Resource Dir: 0x1b000 LB 0x408
  66. 1264.383c: ProductName: Microsoft® Windows® Operating System
  67. 1264.383c: ProductVersion: 10.0.16299.15
  68. 1264.383c: FileVersion: 10.0.16299.15 (WinBuild.160101.0800)
  69. 1264.383c: FileDescription: ApiSet Schema DLL
  70. 1264.383c: NtOpenDirectoryObject failed on \Driver: 0xc0000022
  71. 1264.383c: supR3HardenedWinFindAdversaries: 0x0
  72. 1264.383c: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
  73. 1264.383c: Calling main()
  74. 1264.383c: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2
  75. 1264.383c: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
  76. 1264.383c: SUPR3HardenedMain: Respawn #1
  77. 1264.383c: System32: \Device\HarddiskVolume3\Windows\System32
  78. 1264.383c: WinSxS: \Device\HarddiskVolume3\Windows\WinSxS
  79. 1264.383c: KnownDllPath: C:\WINDOWS\System32
  80. 1264.383c: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
  81. 1264.383c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe)
  82. 1264.383c: supR3HardNtEnableThreadCreation:
  83. 1264.383c: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffaacf991b0 pvNtTerminateThread=00007ffaacfc0890
  84. 1264.383c: supR3HardenedWinDoReSpawn(1): New child 3b58.3348 [kernel32].
  85. 1264.383c: supR3HardNtChildGatherData: PebBaseAddress=0000000000c4a000 cbPeb=0x388
  86. 1264.383c: supR3HardNtPuChFindNtdll: uNtDllParentAddr=00007ffaacf20000 uNtDllChildAddr=00007ffaacf20000
  87. 1264.383c: supR3HardenedWinSetupChildInit: uLdrInitThunk=00007ffaacf991b0
  88. 1264.383c: supR3HardenedWinSetupChildInit: Start child.
  89. 1264.383c: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 0 ms.
  90. 1264.383c: supR3HardNtChildPurify: Startup delay kludge #1/0: 266 ms, 16 sleeps
  91. 1264.383c: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
  92. 1264.383c: *0000000000000000-ffffffffff4fffff 0x0001/0x0000 0x0000000
  93. 1264.383c: *0000000000b00000-0000000000adffff 0x0004/0x0004 0x0020000
  94. 1264.383c: *0000000000b20000-0000000000b06fff 0x0002/0x0002 0x0040000
  95. 1264.383c: 0000000000b39000-0000000000b31fff 0x0001/0x0000 0x0000000
  96. 1264.383c: *0000000000b40000-0000000000b3bfff 0x0002/0x0002 0x0040000
  97. 1264.383c: 0000000000b44000-0000000000b37fff 0x0001/0x0000 0x0000000
  98. 1264.383c: *0000000000b50000-0000000000b4efff 0x0004/0x0004 0x0020000
  99. 1264.383c: 0000000000b51000-0000000000aa1fff 0x0001/0x0000 0x0000000
  100. 1264.383c: *0000000000c00000-0000000000bb5fff 0x0000/0x0004 0x0020000
  101. 1264.383c: 0000000000c4a000-0000000000c46fff 0x0004/0x0004 0x0020000
  102. 1264.383c: 0000000000c4d000-0000000000a99fff 0x0000/0x0004 0x0020000
  103. 1264.383c: *0000000000e00000-0000000000d04fff 0x0000/0x0004 0x0020000
  104. 1264.383c: 0000000000efb000-0000000000ef7fff 0x0104/0x0004 0x0020000
  105. 1264.383c: 0000000000efe000-0000000000efbfff 0x0004/0x0004 0x0020000
  106. 1264.383c: 0000000000f00000-ffffffff81e1ffff 0x0001/0x0000 0x0000000
  107. 1264.383c: *000000007ffe0000-000000007ffdefff 0x0002/0x0002 0x0020000
  108. 1264.383c: *000000007ffe1000-000000007ffd1fff 0x0000/0x0002 0x0020000
  109. 1264.383c: 000000007fff0000-ffff8009d8efffff 0x0001/0x0000 0x0000000
  110. 1264.383c: *00007ff7270e0000-00007ff7270bcfff 0x0002/0x0002 0x0040000
  111. 1264.383c: 00007ff727103000-00007ff7267d5fff 0x0001/0x0000 0x0000000
  112. 1264.383c: *00007ff727a30000-00007ff727a30fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
  113. 1264.383c: 00007ff727a31000-00007ff727a9ffff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
  114. 1264.383c: 00007ff727aa0000-00007ff727aa0fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
  115. 1264.383c: 00007ff727aa1000-00007ff727ae4fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
  116. 1264.383c: 00007ff727ae5000-00007ff727ae5fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
  117. 1264.383c: 00007ff727ae6000-00007ff727ae6fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
  118. 1264.383c: 00007ff727ae7000-00007ff727aebfff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
  119. 1264.383c: 00007ff727aec000-00007ff727aecfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
  120. 1264.383c: 00007ff727aed000-00007ff727aedfff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
  121. 1264.383c: 00007ff727aee000-00007ff727af1fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
  122. 1264.383c: 00007ff727af2000-00007ff727b39fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
  123. 1264.383c: 00007ff727b3a000-00007ff3a2753fff 0x0001/0x0000 0x0000000
  124. 1264.383c: *00007ffaacf20000-00007ffaacf20fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
  125. 1264.383c: 00007ffaacf21000-00007ffaad032fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
  126. 1264.383c: 00007ffaad033000-00007ffaad078fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
  127. 1264.383c: 00007ffaad079000-00007ffaad080fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
  128. 1264.383c: 00007ffaad081000-00007ffaad08efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
  129. 1264.383c: 00007ffaad08f000-00007ffaad08ffff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
  130. 1264.383c: 00007ffaad090000-00007ffaad092fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
  131. 1264.383c: 00007ffaad093000-00007ffaad0fffff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
  132. 1264.383c: 00007ffaad100000-00007ff55a21ffff 0x0001/0x0000 0x0000000
  133. 1264.383c: *00007ffffffe0000-00007ffffffcffff 0x0001/0x0002 0x0020000
  134. 1264.383c: VirtualBox.exe: timestamp 0x5790f053 (rc=VINF_SUCCESS)
  135. 1264.383c: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
  136. 1264.383c: '\Device\HarddiskVolume3\Windows\System32\ntdll.dll' has no imports
  137. 1264.383c: supR3HardNtChildPurify: Done after 313 ms and 0 fixes (loop #0).
  138. 3b58.3348: Log file opened: 5.1.2r108956 g_hStartupLog=0000000000000004 g_uNtVerCombined=0xa03fab00
  139. 3b58.3348: supR3HardenedVmProcessInit: uNtDllAddr=00007ffaacf20000 g_uNtVerCombined=0xa03fab00
  140. 1264.383c: supR3HardNtEnableThreadCreation:
  141. 3b58.3348: ntdll.dll: timestamp 0x493793ea (rc=VINF_SUCCESS)
  142. 3b58.3348: New simple heap: #1 0000000001000000 LB 0x400000 (for 1966080 allocation)
  143. 3b58.3348: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
  144. 3b58.3348: System32: \Device\HarddiskVolume3\Windows\System32
  145. 3b58.3348: WinSxS: \Device\HarddiskVolume3\Windows\WinSxS
  146. 3b58.3348: KnownDllPath: C:\WINDOWS\System32
  147. 3b58.3348: supR3HardenedVmProcessInit: Opening vboxdrv stub...
  148. 3b58.3348: supR3HardenedVmProcessInit: Restoring LdrInitializeThunk...
  149. 3b58.3348: supR3HardenedVmProcessInit: Returning to LdrInitializeThunk...
  150. 3b58.3348: Registered Dll notification callback with NTDLL.
  151. 3b58.3348: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\kernel32.dll)
  152. 3b58.3348: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\kernel32.dll
  153. 3b58.3348: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\KERNEL32.DLL (Input=KERNEL32.DLL, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000004001:<flags> [calling]
  154. 3b58.3348: supR3HardenedDllNotificationCallback: load 00007ffaa9320000 LB 0x00266000 C:\WINDOWS\System32\KERNELBASE.dll [fFlags=0x0]
  155. 3b58.3348: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\KernelBase.dll)
  156. 3b58.3348: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
  157. 3b58.3348: supR3HardenedDllNotificationCallback: load 00007ffaace40000 LB 0x000ae000 C:\WINDOWS\System32\KERNEL32.DLL [fFlags=0x0]
  158. 3b58.3348: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
  159. 3b58.3348: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffaace40000 'C:\WINDOWS\System32\KERNEL32.DLL'
  160. 3b58.3348: supR3HardenedDllNotificationCallback: load 00007ff727a30000 LB 0x0010a000 C:\Program Files\Oracle\VirtualBox\VirtualBox.exe [fFlags=0x0]
  161. 3b58.3348: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
  162. 3b58.3348: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe)
  163. 3b58.3348: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
  164. 3b58.3348: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffaacf991b0 pvNtTerminateThread=00007ffaacfc0890
  165. 1264.383c: supR3HardNtChildWaitFor: Found expected request 1 (CloseEvents) after 47 ms.
  166. 3b58.3348: \SystemRoot\System32\ntdll.dll:
  167. 3b58.3348: CreationTime: 2017-12-09T04:04:39.604184300Z
  168. 3b58.3348: LastWriteTime: 2017-12-09T04:04:39.604184300Z
  169. 3b58.3348: ChangeTime: 2017-12-15T06:38:53.825772200Z
  170. 3b58.3348: FileAttributes: 0x20
  171. 3b58.3348: Size: 0x1dd100
  172. 3b58.3348: NT Headers: 0xe0
  173. 3b58.3348: Timestamp: 0x493793ea
  174. 3b58.3348: Machine: 0x8664 - amd64
  175. 3b58.3348: Timestamp: 0x493793ea
  176. 3b58.3348: Image Version: 10.0
  177. 3b58.3348: SizeOfImage: 0x1e0000 (1966080)
  178. 3b58.3348: Resource Dir: 0x174000 LB 0x6a1d8
  179. 3b58.3348: ProductName: Microsoft® Windows® Operating System
  180. 3b58.3348: ProductVersion: 10.0.16299.64
  181. 3b58.3348: FileVersion: 10.0.16299.64 (WinBuild.160101.0800)
  182. 3b58.3348: FileDescription: NT Layer DLL
  183. 3b58.3348: \SystemRoot\System32\kernel32.dll:
  184. 3b58.3348: CreationTime: 2017-09-29T13:42:04.954227600Z
  185. 3b58.3348: LastWriteTime: 2017-09-29T13:42:04.954227600Z
  186. 3b58.3348: ChangeTime: 2017-12-09T03:40:33.235355200Z
  187. 3b58.3348: FileAttributes: 0x20
  188. 3b58.3348: Size: 0xab868
  189. 3b58.3348: NT Headers: 0xe8
  190. 3b58.3348: Timestamp: 0xc2cf900
  191. 3b58.3348: Machine: 0x8664 - amd64
  192. 3b58.3348: Timestamp: 0xc2cf900
  193. 3b58.3348: Image Version: 10.0
  194. 3b58.3348: SizeOfImage: 0xae000 (712704)
  195. 3b58.3348: Resource Dir: 0xac000 LB 0x520
  196. 3b58.3348: ProductName: Microsoft® Windows® Operating System
  197. 3b58.3348: ProductVersion: 10.0.16299.15
  198. 3b58.3348: FileVersion: 10.0.16299.15 (WinBuild.160101.0800)
  199. 3b58.3348: FileDescription: Windows NT BASE API Client DLL
  200. 3b58.3348: \SystemRoot\System32\KernelBase.dll:
  201. 3b58.3348: CreationTime: 2017-09-29T13:41:43.124345500Z
  202. 3b58.3348: LastWriteTime: 2017-09-29T13:41:43.124345500Z
  203. 3b58.3348: ChangeTime: 2017-12-09T03:40:33.360247200Z
  204. 3b58.3348: FileAttributes: 0x20
  205. 3b58.3348: Size: 0x266000
  206. 3b58.3348: NT Headers: 0xf0
  207. 3b58.3348: Timestamp: 0x4736733c
  208. 3b58.3348: Machine: 0x8664 - amd64
  209. 3b58.3348: Timestamp: 0x4736733c
  210. 3b58.3348: Image Version: 10.0
  211. 3b58.3348: SizeOfImage: 0x266000 (2514944)
  212. 3b58.3348: Resource Dir: 0x245000 LB 0x548
  213. 3b58.3348: ProductName: Microsoft® Windows® Operating System
  214. 3b58.3348: ProductVersion: 10.0.16299.15
  215. 3b58.3348: FileVersion: 10.0.16299.15 (WinBuild.160101.0800)
  216. 3b58.3348: FileDescription: Windows NT BASE API Client DLL
  217. 3b58.3348: \SystemRoot\System32\apisetschema.dll:
  218. 3b58.3348: CreationTime: 2017-09-29T13:42:07.095026600Z
  219. 3b58.3348: LastWriteTime: 2017-09-29T13:42:07.095026600Z
  220. 3b58.3348: ChangeTime: 2017-12-16T04:20:05.679142600Z
  221. 3b58.3348: FileAttributes: 0x20
  222. 3b58.3348: Size: 0x1b398
  223. 3b58.3348: NT Headers: 0xc8
  224. 3b58.3348: Timestamp: 0xf30abf31
  225. 3b58.3348: Machine: 0x8664 - amd64
  226. 3b58.3348: Timestamp: 0xf30abf31
  227. 3b58.3348: Image Version: 10.0
  228. 3b58.3348: SizeOfImage: 0x1c000 (114688)
  229. 3b58.3348: Resource Dir: 0x1b000 LB 0x408
  230. 3b58.3348: ProductName: Microsoft® Windows® Operating System
  231. 3b58.3348: ProductVersion: 10.0.16299.15
  232. 3b58.3348: FileVersion: 10.0.16299.15 (WinBuild.160101.0800)
  233. 3b58.3348: FileDescription: ApiSet Schema DLL
  234. 3b58.3348: NtOpenDirectoryObject failed on \Driver: 0xc0000022
  235. 3b58.3348: supR3HardenedWinFindAdversaries: 0x0
  236. 3b58.3348: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
  237. 3b58.3348: Calling main()
  238. 3b58.3348: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2
  239. 3b58.3348: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
  240. 3b58.3348: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
  241. 3b58.3348: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe)
  242. 3b58.3348: SUPR3HardenedMain: Respawn #2
  243. 3b58.3348: supR3HardNtEnableThreadCreation:
  244. 3b58.3348: '\Device\HarddiskVolume3\Windows\System32\ntdll.dll' has no imports
  245. 3b58.3348: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ntdll.dll)
  246. 3b58.3348: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ntdll.dll
  247. 3b58.3348: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\ntdll.dll (Input=ntdll.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
  248. 3b58.3348: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffaacf20000 'C:\WINDOWS\System32\ntdll.dll'
  249. 3b58.3348: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffaacf991b0 pvNtTerminateThread=00007ffaacfc0890
  250. 3b58.3348: supR3HardenedWinDoReSpawn(2): New child 357c.14bc [kernel32].
  251. 3b58.3348: supR3HardenedWinReSpawn: NtSetInformationThread/ThreadHideFromDebugger failed: 0xc0000022 (harmless)
  252. 3b58.3348: supR3HardNtChildGatherData: PebBaseAddress=0000000000615000 cbPeb=0x388
  253. 3b58.3348: supR3HardNtPuChFindNtdll: uNtDllParentAddr=00007ffaacf20000 uNtDllChildAddr=00007ffaacf20000
  254. 3b58.3348: supR3HardenedWinSetupChildInit: uLdrInitThunk=00007ffaacf991b0
  255. 3b58.3348: supR3HardenedWinSetupChildInit: Start child.
  256. 3b58.3348: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 0 ms.
  257. 3b58.3348: supR3HardNtChildPurify: Startup delay kludge #1/0: 265 ms, 17 sleeps
  258. 3b58.3348: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
  259. 3b58.3348: *0000000000000000-ffffffffffb6ffff 0x0001/0x0000 0x0000000
  260. 3b58.3348: *0000000000490000-000000000046ffff 0x0004/0x0004 0x0020000
  261. 3b58.3348: *00000000004b0000-0000000000496fff 0x0002/0x0002 0x0040000
  262. 3b58.3348: 00000000004c9000-00000000004c1fff 0x0001/0x0000 0x0000000
  263. 3b58.3348: *00000000004d0000-00000000003d4fff 0x0000/0x0004 0x0020000
  264. 3b58.3348: 00000000005cb000-00000000005c7fff 0x0104/0x0004 0x0020000
  265. 3b58.3348: 00000000005ce000-00000000005cbfff 0x0004/0x0004 0x0020000
  266. 3b58.3348: *00000000005d0000-00000000005cbfff 0x0002/0x0002 0x0040000
  267. 3b58.3348: 00000000005d4000-00000000005c7fff 0x0001/0x0000 0x0000000
  268. 3b58.3348: *00000000005e0000-00000000005defff 0x0004/0x0004 0x0020000
  269. 3b58.3348: 00000000005e1000-00000000005c1fff 0x0001/0x0000 0x0000000
  270. 3b58.3348: *0000000000600000-00000000005eafff 0x0000/0x0004 0x0020000
  271. 3b58.3348: 0000000000615000-0000000000611fff 0x0004/0x0004 0x0020000
  272. 3b58.3348: 0000000000618000-000000000042ffff 0x0000/0x0004 0x0020000
  273. 3b58.3348: 0000000000800000-ffffffff8101ffff 0x0001/0x0000 0x0000000
  274. 3b58.3348: *000000007ffe0000-000000007ffdefff 0x0002/0x0002 0x0020000
  275. 3b58.3348: *000000007ffe1000-000000007ffd1fff 0x0000/0x0002 0x0020000
  276. 3b58.3348: 000000007fff0000-ffff8009d93cffff 0x0001/0x0000 0x0000000
  277. 3b58.3348: *00007ff726c10000-00007ff726becfff 0x0002/0x0002 0x0040000
  278. 3b58.3348: 00007ff726c33000-00007ff725e35fff 0x0001/0x0000 0x0000000
  279. 3b58.3348: *00007ff727a30000-00007ff727a30fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
  280. 3b58.3348: 00007ff727a31000-00007ff727a9ffff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
  281. 3b58.3348: 00007ff727aa0000-00007ff727aa0fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
  282. 3b58.3348: 00007ff727aa1000-00007ff727ae4fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
  283. 3b58.3348: 00007ff727ae5000-00007ff727ae5fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
  284. 3b58.3348: 00007ff727ae6000-00007ff727ae6fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
  285. 3b58.3348: 00007ff727ae7000-00007ff727aebfff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
  286. 3b58.3348: 00007ff727aec000-00007ff727aecfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
  287. 3b58.3348: 00007ff727aed000-00007ff727aedfff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
  288. 3b58.3348: 00007ff727aee000-00007ff727af1fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
  289. 3b58.3348: 00007ff727af2000-00007ff727b39fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
  290. 3b58.3348: 00007ff727b3a000-00007ff3a2753fff 0x0001/0x0000 0x0000000
  291. 3b58.3348: *00007ffaacf20000-00007ffaacf20fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
  292. 3b58.3348: 00007ffaacf21000-00007ffaad032fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
  293. 3b58.3348: 00007ffaad033000-00007ffaad078fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
  294. 3b58.3348: 00007ffaad079000-00007ffaad080fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
  295. 3b58.3348: 00007ffaad081000-00007ffaad08efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
  296. 3b58.3348: 00007ffaad08f000-00007ffaad08ffff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
  297. 3b58.3348: 00007ffaad090000-00007ffaad092fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
  298. 3b58.3348: 00007ffaad093000-00007ffaad0fffff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
  299. 3b58.3348: 00007ffaad100000-00007ff55a21ffff 0x0001/0x0000 0x0000000
  300. 3b58.3348: *00007ffffffe0000-00007ffffffcffff 0x0001/0x0002 0x0020000
  301. 3b58.3348: VirtualBox.exe: timestamp 0x5790f053 (rc=VINF_SUCCESS)
  302. 3b58.3348: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
  303. 3b58.3348: '\Device\HarddiskVolume3\Windows\System32\ntdll.dll' has no imports
  304. 3b58.3348: supR3HardNtChildPurify: Done after 281 ms and 0 fixes (loop #0).
  305. 3b58.3348: supR3HardenedEarlyCompact: Removed heap 1 (0x00000001000000 LB 0x400000)
  306. 357c.14bc: Log file opened: 5.1.2r108956 g_hStartupLog=0000000000000004 g_uNtVerCombined=0xa03fab00
  307. 357c.14bc: supR3HardenedVmProcessInit: uNtDllAddr=00007ffaacf20000 g_uNtVerCombined=0xa03fab00
  308. 3b58.3348: supR3HardNtEnableThreadCreation:
  309. 357c.14bc: ntdll.dll: timestamp 0x493793ea (rc=VINF_SUCCESS)
  310. 357c.14bc: New simple heap: #1 0000000000900000 LB 0x400000 (for 1966080 allocation)
  311. 357c.14bc: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
  312. 357c.14bc: System32: \Device\HarddiskVolume3\Windows\System32
  313. 357c.14bc: WinSxS: \Device\HarddiskVolume3\Windows\WinSxS
  314. 357c.14bc: KnownDllPath: C:\WINDOWS\System32
  315. 357c.14bc: supR3HardenedVmProcessInit: Opening vboxdrv...
  316. 357c.14bc: supR3HardenedVmProcessInit: Restoring LdrInitializeThunk...
  317. 357c.14bc: supR3HardenedVmProcessInit: Returning to LdrInitializeThunk...
  318. 357c.14bc: Registered Dll notification callback with NTDLL.
  319. 357c.14bc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\kernel32.dll)
  320. 357c.14bc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\kernel32.dll
  321. 357c.14bc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\KERNEL32.DLL (Input=KERNEL32.DLL, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000004001:<flags> [calling]
  322. 357c.14bc: supR3HardenedDllNotificationCallback: load 00007ffaa9320000 LB 0x00266000 C:\WINDOWS\System32\KERNELBASE.dll [fFlags=0x0]
  323. 357c.14bc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\KernelBase.dll)
  324. 357c.14bc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
  325. 357c.14bc: supR3HardenedDllNotificationCallback: load 00007ffaace40000 LB 0x000ae000 C:\WINDOWS\System32\KERNEL32.DLL [fFlags=0x0]
  326. 357c.14bc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
  327. 357c.14bc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffaace40000 'C:\WINDOWS\System32\KERNEL32.DLL'
  328. 357c.14bc: supR3HardenedDllNotificationCallback: load 00007ff727a30000 LB 0x0010a000 C:\Program Files\Oracle\VirtualBox\VirtualBox.exe [fFlags=0x0]
  329. 357c.14bc: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
  330. 357c.14bc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe)
  331. 357c.14bc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
  332. 357c.14bc: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffaacf991b0 pvNtTerminateThread=00007ffaacfc0890
  333. 3b58.3348: supR3HardNtChildWaitFor: Found expected request 1 (CloseEvents) after 78 ms.
  334. 357c.14bc: \SystemRoot\System32\ntdll.dll:
  335. 357c.14bc: CreationTime: 2017-12-09T04:04:39.604184300Z
  336. 357c.14bc: LastWriteTime: 2017-12-09T04:04:39.604184300Z
  337. 357c.14bc: ChangeTime: 2017-12-15T06:38:53.825772200Z
  338. 357c.14bc: FileAttributes: 0x20
  339. 357c.14bc: Size: 0x1dd100
  340. 357c.14bc: NT Headers: 0xe0
  341. 357c.14bc: Timestamp: 0x493793ea
  342. 357c.14bc: Machine: 0x8664 - amd64
  343. 357c.14bc: Timestamp: 0x493793ea
  344. 357c.14bc: Image Version: 10.0
  345. 357c.14bc: SizeOfImage: 0x1e0000 (1966080)
  346. 357c.14bc: Resource Dir: 0x174000 LB 0x6a1d8
  347. 357c.14bc: ProductName: Microsoft® Windows® Operating System
  348. 357c.14bc: ProductVersion: 10.0.16299.64
  349. 357c.14bc: FileVersion: 10.0.16299.64 (WinBuild.160101.0800)
  350. 357c.14bc: FileDescription: NT Layer DLL
  351. 357c.14bc: \SystemRoot\System32\kernel32.dll:
  352. 357c.14bc: CreationTime: 2017-09-29T13:42:04.954227600Z
  353. 357c.14bc: LastWriteTime: 2017-09-29T13:42:04.954227600Z
  354. 357c.14bc: ChangeTime: 2017-12-09T03:40:33.235355200Z
  355. 357c.14bc: FileAttributes: 0x20
  356. 357c.14bc: Size: 0xab868
  357. 357c.14bc: NT Headers: 0xe8
  358. 357c.14bc: Timestamp: 0xc2cf900
  359. 357c.14bc: Machine: 0x8664 - amd64
  360. 357c.14bc: Timestamp: 0xc2cf900
  361. 357c.14bc: Image Version: 10.0
  362. 357c.14bc: SizeOfImage: 0xae000 (712704)
  363. 357c.14bc: Resource Dir: 0xac000 LB 0x520
  364. 357c.14bc: ProductName: Microsoft® Windows® Operating System
  365. 357c.14bc: ProductVersion: 10.0.16299.15
  366. 357c.14bc: FileVersion: 10.0.16299.15 (WinBuild.160101.0800)
  367. 357c.14bc: FileDescription: Windows NT BASE API Client DLL
  368. 357c.14bc: \SystemRoot\System32\KernelBase.dll:
  369. 357c.14bc: CreationTime: 2017-09-29T13:41:43.124345500Z
  370. 357c.14bc: LastWriteTime: 2017-09-29T13:41:43.124345500Z
  371. 357c.14bc: ChangeTime: 2017-12-09T03:40:33.360247200Z
  372. 357c.14bc: FileAttributes: 0x20
  373. 357c.14bc: Size: 0x266000
  374. 357c.14bc: NT Headers: 0xf0
  375. 357c.14bc: Timestamp: 0x4736733c
  376. 357c.14bc: Machine: 0x8664 - amd64
  377. 357c.14bc: Timestamp: 0x4736733c
  378. 357c.14bc: Image Version: 10.0
  379. 357c.14bc: SizeOfImage: 0x266000 (2514944)
  380. 357c.14bc: Resource Dir: 0x245000 LB 0x548
  381. 357c.14bc: ProductName: Microsoft® Windows® Operating System
  382. 357c.14bc: ProductVersion: 10.0.16299.15
  383. 357c.14bc: FileVersion: 10.0.16299.15 (WinBuild.160101.0800)
  384. 357c.14bc: FileDescription: Windows NT BASE API Client DLL
  385. 357c.14bc: \SystemRoot\System32\apisetschema.dll:
  386. 357c.14bc: CreationTime: 2017-09-29T13:42:07.095026600Z
  387. 357c.14bc: LastWriteTime: 2017-09-29T13:42:07.095026600Z
  388. 357c.14bc: ChangeTime: 2017-12-16T04:20:05.679142600Z
  389. 357c.14bc: FileAttributes: 0x20
  390. 357c.14bc: Size: 0x1b398
  391. 357c.14bc: NT Headers: 0xc8
  392. 357c.14bc: Timestamp: 0xf30abf31
  393. 357c.14bc: Machine: 0x8664 - amd64
  394. 357c.14bc: Timestamp: 0xf30abf31
  395. 357c.14bc: Image Version: 10.0
  396. 357c.14bc: SizeOfImage: 0x1c000 (114688)
  397. 357c.14bc: Resource Dir: 0x1b000 LB 0x408
  398. 357c.14bc: ProductName: Microsoft® Windows® Operating System
  399. 357c.14bc: ProductVersion: 10.0.16299.15
  400. 357c.14bc: FileVersion: 10.0.16299.15 (WinBuild.160101.0800)
  401. 357c.14bc: FileDescription: ApiSet Schema DLL
  402. 357c.14bc: NtOpenDirectoryObject failed on \Driver: 0xc0000022
  403. 357c.14bc: supR3HardenedWinFindAdversaries: 0x0
  404. 357c.14bc: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
  405. 357c.14bc: Calling main()
  406. 357c.14bc: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2
  407. 357c.14bc: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
  408. 357c.14bc: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
  409. 357c.14bc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe)
  410. 357c.14bc: SUPR3HardenedMain: Final process, opening VBoxDrv...
  411. 357c.14bc: supR3HardenedEarlyCompact: Removed heap 1 (0x00000000900000 LB 0x400000)
  412. 357c.14bc: supR3HardNtEnableThreadCreation:
  413. 357c.14bc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSupLib.dll)
  414. 357c.14bc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSupLib.dll
  415. 357c.14bc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
  416. 357c.14bc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
  417. 357c.14bc: supR3HardenedDllNotificationCallback: load 00007ffa91f50000 LB 0x00005000 C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL [fFlags=0x0]
  418. 357c.14bc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
  419. 357c.14bc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
  420. 357c.14bc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  421. 357c.14bc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa91f50000 'C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL'
  422. 357c.14bc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
  423. 357c.14bc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  424. 357c.14bc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa91f50000 'C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL'
  425. 357c.14bc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa91f50000 'C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL'
  426. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  427. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msasn1.dll'.
  428. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'crypt32.dll'.
  429. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27 'rpcrt4.dll'.
  430. 357c.14bc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\wintrust.dll)
  431. 357c.14bc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\wintrust.dll
  432. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  433. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  434. 357c.14bc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll)
  435. 357c.14bc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll
  436. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'crypt32.dll'...
  437. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'crypt32.dll' -> '\Device\HarddiskVolume3\Windows\System32\crypt32.dll' [rcNtRedir=0xc0150008]
  438. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #33 'msasn1.dll'.
  439. 357c.14bc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\crypt32.dll)
  440. 357c.14bc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\crypt32.dll
  441. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msasn1.dll'...
  442. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msasn1.dll' -> '\Device\HarddiskVolume3\Windows\System32\msasn1.dll' [rcNtRedir=0xc0150008]
  443. 357c.14bc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\msasn1.dll)
  444. 357c.14bc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msasn1.dll
  445. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  446. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  447. 357c.14bc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\msvcrt.dll)
  448. 357c.14bc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
  449. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msasn1.dll'...
  450. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msasn1.dll' -> '\Device\HarddiskVolume3\Windows\System32\msasn1.dll' [rcNtRedir=0xc0150008]
  451. 357c.14bc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msasn1.dll [lacks WinVerifyTrust]
  452. 357c.14bc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\Wintrust.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
  453. 357c.14bc: supR3HardenedDllNotificationCallback: load 00007ffaaa630000 LB 0x0009d000 C:\WINDOWS\System32\msvcrt.dll [fFlags=0x0]
  454. 357c.14bc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  455. 357c.14bc: supR3HardenedDllNotificationCallback: load 00007ffaa92b0000 LB 0x00012000 C:\WINDOWS\System32\MSASN1.dll [fFlags=0x0]
  456. 357c.14bc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msasn1.dll [lacks WinVerifyTrust]
  457. 357c.14bc: supR3HardenedDllNotificationCallback: load 00007ffaa9590000 LB 0x000f6000 C:\WINDOWS\System32\ucrtbase.dll [fFlags=0x0]
  458. 357c.14bc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ucrtbase.dll)
  459. 357c.14bc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll
  460. 357c.14bc: supR3HardenedDllNotificationCallback: load 00007ffaa9f30000 LB 0x001ce000 C:\WINDOWS\System32\CRYPT32.dll [fFlags=0x0]
  461. 357c.14bc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
  462. 357c.14bc: supR3HardenedDllNotificationCallback: load 00007ffaaca30000 LB 0x0011f000 C:\WINDOWS\System32\RPCRT4.dll [fFlags=0x0]
  463. 357c.14bc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  464. 357c.14bc: supR3HardenedDllNotificationCallback: load 00007ffaacde0000 LB 0x0005b000 C:\WINDOWS\System32\sechost.dll [fFlags=0x0]
  465. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'rpcrt4.dll'.
  466. 357c.14bc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\sechost.dll)
  467. 357c.14bc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\sechost.dll
  468. 357c.14bc: supR3HardenedDllNotificationCallback: load 00007ffaac980000 LB 0x000a1000 C:\WINDOWS\System32\advapi32.dll [fFlags=0x0]
  469. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  470. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'sechost.dll'.
  471. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27 'rpcrt4.dll'.
  472. 357c.14bc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\advapi32.dll)
  473. 357c.14bc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\advapi32.dll
  474. 357c.14bc: supR3HardenedDllNotificationCallback: load 00007ffaa9e50000 LB 0x00058000 C:\WINDOWS\System32\Wintrust.dll [fFlags=0x0]
  475. 357c.14bc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
  476. 357c.14bc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
  477. 357c.14bc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffaa9320000 'api-ms-win-core-synch-l1-2-0'
  478. 357c.14bc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
  479. 357c.14bc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffaa9320000 'api-ms-win-core-fibers-l1-1-1'
  480. 357c.14bc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
  481. 357c.14bc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffaa9320000 'api-ms-win-core-fibers-l1-1-1'
  482. 357c.14bc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
  483. 357c.14bc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffaa9320000 'api-ms-win-core-synch-l1-2-0'
  484. 357c.14bc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-l1-2-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
  485. 357c.14bc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffaa9320000 'api-ms-win-core-localization-l1-2-1'
  486. 357c.14bc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffaa9e50000 'C:\WINDOWS\system32\Wintrust.dll'
  487. 357c.14bc: supHardenedWinVerifyImageByHandle: -> -626 (\Device\HarddiskVolume3\Windows\System32\bcrypt.dll)
  488. 357c.14bc: Error (rc=0):
  489. 357c.14bc: supR3HardenedScreenImage/LdrLoadDll: rc=Unknown Status -626 (0xfffffd8e) fImage=1 fProtect=0x0 fAccess=0x0 \Device\HarddiskVolume3\Windows\System32\bcrypt.dll: Grown load config (192 to 256 bytes) includes non-zero bytes: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 a9 01 80 01 00 00 00
  490. 357c.14bc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\bcrypt.dll
  491. 357c.14bc: Error (rc=0):
  492. 357c.14bc: supR3HardenedMonitor_LdrLoadDll: rejecting 'C:\WINDOWS\system32\bcrypt.dll' (C:\WINDOWS\system32\bcrypt.dll): rcNt=0xc0000190
  493. 357c.14bc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000190 'C:\WINDOWS\system32\bcrypt.dll'
  494. 357c.14bc: Warning! Failed to load bcrypt.dll
  495. 357c.14bc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
  496. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  497. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  498. 357c.14bc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  499. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'sechost.dll'...
  500. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'sechost.dll' -> '\Device\HarddiskVolume3\Windows\System32\sechost.dll' [rcNtRedir=0xc0150008]
  501. 357c.14bc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\sechost.dll [lacks WinVerifyTrust]
  502. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  503. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  504. 357c.14bc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  505. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  506. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  507. 357c.14bc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  508. 357c.14bc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\WINTRUST.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  509. 357c.14bc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffaa9e50000 'C:\Windows\System32\WINTRUST.DLL'
  510. 357c.14bc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
  511. 357c.14bc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\WINTRUST.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  512. 357c.14bc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffaa9e50000 'C:\Windows\System32\WINTRUST.DLL'
  513. 357c.14bc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
  514. 357c.14bc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\WINTRUST.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  515. 357c.14bc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffaa9e50000 'C:\Windows\System32\WINTRUST.DLL'
  516. 357c.14bc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
  517. 357c.14bc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\WINTRUST.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  518. 357c.14bc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffaa9e50000 'C:\Windows\System32\WINTRUST.DLL'
  519. 357c.14bc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
  520. 357c.14bc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\WINTRUST.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  521. 357c.14bc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffaa9e50000 'C:\Windows\System32\WINTRUST.DLL'
  522. 357c.14bc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
  523. 357c.14bc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\WINTRUST.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  524. 357c.14bc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffaa9e50000 'C:\Windows\System32\WINTRUST.DLL'
  525. 357c.14bc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
  526. 357c.14bc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\WINTRUST.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  527. 357c.14bc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffaa9e50000 'C:\Windows\System32\WINTRUST.DLL'
  528. 357c.14bc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\cryptsp.dll)
  529. 357c.14bc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\cryptsp.dll
  530. 357c.14bc: supR3HardenedDllNotificationCallback: load 00007ffaa8cd0000 LB 0x00017000 C:\WINDOWS\SYSTEM32\CRYPTSP.dll [fFlags=0x0]
  531. 357c.14bc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\cryptsp.dll [lacks WinVerifyTrust]
  532. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'bcrypt.dll'.
  533. 357c.14bc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\rsaenh.dll)
  534. 357c.14bc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
  535. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcrypt.dll'...
  536. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcrypt.dll' -> '\Device\HarddiskVolume3\Windows\System32\bcrypt.dll' [rcNtRedir=0xc0150008]
  537. 357c.14bc: supR3HardenedScreenImage/Imports: cache hit (Unknown Status -626 (0xfffffd8e)) on \Device\HarddiskVolume3\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
  538. 357c.14bc: Error (rc=0):
  539. 357c.14bc: supR3HardenedScreenImage/Imports: cached rc=Unknown Status -626 (0xfffffd8e) fImage=1 fProtect=0x0 fAccess=0x0 cHits=1 \Device\HarddiskVolume3\Windows\System32\bcrypt.dll
  540. 357c.14bc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  541. 357c.14bc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
  542. 357c.14bc: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status -626 (0xfffffd8e)) on \Device\HarddiskVolume3\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
  543. 357c.14bc: Error (rc=0):
  544. 357c.14bc: supR3HardenedScreenImage/NtCreateSection: cached rc=Unknown Status -626 (0xfffffd8e) fImage=1 fProtect=0x10 fAccess=0xf cHits=2 \Device\HarddiskVolume3\Windows\System32\bcrypt.dll
  545. 357c.14bc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000190 'C:\WINDOWS\system32\rsaenh.dll'
  546. 357c.14bc: supR3HardNtViCallWinVerifyTrust: WinVerifyTrust failed with 0x8 (<NULL>) on '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe'
  547. 357c.14bc: Error -22919 in VirtualBox! (enmWhat=1)
  548. 357c.14bc: WinVerifyTrust failed on stub executable: WinVerifyTrust failed with hrc=Unknown Status 0x8 on '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe'
  549. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'opengl32.dll'.
  550. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
  551. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'msvcp100.dll'.
  552. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcr100.dll'.
  553. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'.
  554. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'qt5guivbox.dll'.
  555. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'qt5widgetsvbox.dll'.
  556. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'qt5printsupportvbox.dll'.
  557. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'qt5openglvbox.dll'.
  558. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'user32.dll'.
  559. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'advapi32.dll'.
  560. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'shell32.dll'.
  561. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'ole32.dll'.
  562. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'oleaut32.dll'.
  563. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #15 'winmm.dll'.
  564. 357c.14bc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.dll)
  565. 357c.14bc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.dll
  566. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
  567. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume3\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
  568. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'winmmbase.dll'.
  569. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'msvcrt.dll'.
  570. 357c.14bc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\winmm.dll)
  571. 357c.14bc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\winmm.dll
  572. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
  573. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
  574. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
  575. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'combase.dll'.
  576. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #23 'rpcrt4.dll'.
  577. 357c.14bc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\oleaut32.dll)
  578. 357c.14bc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\oleaut32.dll
  579. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
  580. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
  581. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #22 'rpcrt4.dll'.
  582. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #46 'gdi32.dll'.
  583. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #47 'user32.dll'.
  584. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #48 'combase.dll'.
  585. 357c.14bc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ole32.dll)
  586. 357c.14bc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ole32.dll
  587. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
  588. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
  589. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  590. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #73 'user32.dll'.
  591. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #75 'gdi32.dll'.
  592. 357c.14bc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\shell32.dll)
  593. 357c.14bc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\shell32.dll
  594. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
  595. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
  596. 357c.14bc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
  597. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  598. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  599. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'win32u.dll'.
  600. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'gdi32.dll'.
  601. 357c.14bc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\user32.dll)
  602. 357c.14bc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\user32.dll
  603. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5openglvbox.dll'...
  604. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5openglvbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5openglvbox.dll' [rcNtRedir=0xc0150008]
  605. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'qt5widgetsvbox.dll'.
  606. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'qt5guivbox.dll'.
  607. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5corevbox.dll'.
  608. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcr100.dll'.
  609. 357c.14bc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll)
  610. 357c.14bc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll
  611. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5printsupportvbox.dll'...
  612. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5printsupportvbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5printsupportvbox.dll' [rcNtRedir=0xc0150008]
  613. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
  614. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
  615. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5widgetsvbox.dll'.
  616. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5guivbox.dll'.
  617. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'.
  618. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'winspool.drv'.
  619. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'comdlg32.dll'.
  620. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcr100.dll'.
  621. 357c.14bc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll)
  622. 357c.14bc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll
  623. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
  624. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
  625. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
  626. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
  627. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5guivbox.dll'.
  628. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5corevbox.dll'.
  629. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'shell32.dll'.
  630. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcr100.dll'.
  631. 357c.14bc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll)
  632. 357c.14bc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll
  633. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
  634. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
  635. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'opengl32.dll'.
  636. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'gdi32.dll'.
  637. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
  638. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5corevbox.dll'.
  639. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'msvcp100.dll'.
  640. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcr100.dll'.
  641. 357c.14bc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll)
  642. 357c.14bc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
  643. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
  644. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
  645. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
  646. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'shell32.dll'.
  647. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ole32.dll'.
  648. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'advapi32.dll'.
  649. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ws2_32.dll'.
  650. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'mpr.dll'.
  651. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcp100.dll'.
  652. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'msvcr100.dll'.
  653. 357c.14bc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll)
  654. 357c.14bc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
  655. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
  656. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
  657. 357c.14bc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll)
  658. 357c.14bc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll
  659. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
  660. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
  661. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
  662. 357c.14bc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll)
  663. 357c.14bc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll
  664. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
  665. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
  666. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
  667. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
  668. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ws2_32.dll'.
  669. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'rpcrt4.dll'.
  670. 357c.14bc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll)
  671. 357c.14bc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
  672. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
  673. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume3\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
  674. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  675. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'advapi32.dll'.
  676. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
  677. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'gdi32.dll'.
  678. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'glu32.dll'.
  679. 357c.14bc: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\opengl32.dll)
  680. 357c.14bc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\opengl32.dll
  681. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'glu32.dll'...
  682. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'glu32.dll' -> '\Device\HarddiskVolume3\Windows\System32\glu32.dll' [rcNtRedir=0xc0150008]
  683. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  684. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
  685. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'opengl32.dll'.
  686. 357c.14bc: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\glu32.dll)
  687. 357c.14bc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\glu32.dll
  688. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  689. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  690. 357c.14bc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\gdi32.dll)
  691. 357c.14bc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\gdi32.dll
  692. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  693. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  694. 357c.14bc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  695. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
  696. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
  697. 357c.14bc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
  698. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  699. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  700. 357c.14bc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  701. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  702. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  703. 357c.14bc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  704. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
  705. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
  706. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'rpcrt4.dll'.
  707. 357c.14bc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ws2_32.dll)
  708. 357c.14bc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ws2_32.dll
  709. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
  710. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
  711. 357c.14bc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
  712. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
  713. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
  714. 357c.14bc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
  715. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
  716. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
  717. 357c.14bc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
  718. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
  719. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
  720. 357c.14bc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
  721. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
  722. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
  723. 357c.14bc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
  724. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mpr.dll'...
  725. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'mpr.dll' -> '\Device\HarddiskVolume3\Windows\System32\mpr.dll' [rcNtRedir=0xc0150008]
  726. 357c.14bc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\mpr.dll)
  727. 357c.14bc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\mpr.dll
  728. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
  729. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
  730. 357c.14bc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ws2_32.dll [lacks WinVerifyTrust]
  731. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
  732. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
  733. 357c.14bc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
  734. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
  735. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
  736. 357c.14bc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll [lacks WinVerifyTrust]
  737. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
  738. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
  739. 357c.14bc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll [lacks WinVerifyTrust]
  740. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  741. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  742. 357c.14bc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  743. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
  744. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
  745. 357c.14bc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
  746. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
  747. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
  748. 357c.14bc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
  749. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
  750. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
  751. 357c.14bc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
  752. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  753. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  754. 357c.14bc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  755. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  756. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  757. 357c.14bc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  758. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
  759. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume3\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
  760. 357c.14bc: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
  761. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
  762. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
  763. 357c.14bc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
  764. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
  765. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
  766. 357c.14bc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll [lacks WinVerifyTrust]
  767. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
  768. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
  769. 357c.14bc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
  770. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
  771. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
  772. 357c.14bc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
  773. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  774. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  775. 357c.14bc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  776. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  777. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  778. 357c.14bc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  779. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
  780. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
  781. 357c.14bc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
  782. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'comdlg32.dll'...
  783. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'comdlg32.dll' -> '\Device\HarddiskVolume3\Windows\System32\comdlg32.dll' [rcNtRedir=0xc0150008]
  784. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  785. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'user32.dll'.
  786. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #37 'shlwapi.dll'.
  787. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #38 'gdi32.dll'.
  788. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #39 'comctl32.dll'.
  789. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #40 'shell32.dll'.
  790. 357c.14bc: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\comdlg32.dll)
  791. 357c.14bc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\comdlg32.dll
  792. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winspool.drv'...
  793. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'winspool.drv' -> '\Device\HarddiskVolume3\Windows\System32\winspool.drv' [rcNtRedir=0xc0150008]
  794. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  795. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #25 'iphlpapi.dll'.
  796. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'bcrypt.dll'.
  797. 357c.14bc: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\winspool.drv)
  798. 357c.14bc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\winspool.drv
  799. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
  800. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
  801. 357c.14bc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
  802. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
  803. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
  804. 357c.14bc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
  805. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
  806. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
  807. 357c.14bc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
  808. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  809. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  810. 357c.14bc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  811. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  812. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  813. 357c.14bc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  814. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
  815. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
  816. 357c.14bc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
  817. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
  818. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
  819. 357c.14bc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
  820. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
  821. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
  822. 357c.14bc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
  823. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
  824. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
  825. 357c.14bc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
  826. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  827. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  828. 357c.14bc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  829. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
  830. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
  831. 357c.14bc: '\Device\HarddiskVolume3\Windows\System32\win32u.dll' has no imports
  832. 357c.14bc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\win32u.dll)
  833. 357c.14bc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\win32u.dll
  834. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  835. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  836. 357c.14bc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  837. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  838. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  839. 357c.14bc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  840. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  841. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  842. 357c.14bc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  843. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
  844. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
  845. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
  846. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #45 'bcryptprimitives.dll'.
  847. 357c.14bc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\combase.dll)
  848. 357c.14bc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\combase.dll
  849. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  850. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  851. 357c.14bc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  852. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  853. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  854. 357c.14bc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  855. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  856. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  857. 357c.14bc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  858. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  859. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  860. 357c.14bc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  861. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
  862. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
  863. 357c.14bc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [lacks WinVerifyTrust]
  864. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
  865. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
  866. 357c.14bc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll)
  867. 357c.14bc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll
  868. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  869. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  870. 357c.14bc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  871. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmmbase.dll'...
  872. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmmbase.dll' -> '\Device\HarddiskVolume3\Windows\System32\winmmbase.dll' [rcNtRedir=0xc0150008]
  873. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  874. 357c.14bc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\winmmbase.dll)
  875. 357c.14bc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\winmmbase.dll
  876. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  877. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  878. 357c.14bc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  879. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'...
  880. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008]
  881. 357c.14bc: supHardenedWinVerifyImageByHandle: -> -626 (\Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll)
  882. 357c.14bc: Error (rc=0):
  883. 357c.14bc: supR3HardenedScreenImage/Imports: rc=Unknown Status -626 (0xfffffd8e) fImage=1 fProtect=0x0 fAccess=0x0 \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll: Grown load config (192 to 256 bytes) includes non-zero bytes: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 16 06 80 01 00 00 00
  884. 357c.14bc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll
  885. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  886. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  887. 357c.14bc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  888. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcrypt.dll'...
  889. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcrypt.dll' -> '\Device\HarddiskVolume3\Windows\System32\bcrypt.dll' [rcNtRedir=0xc0150008]
  890. 357c.14bc: supR3HardenedScreenImage/Imports: cache hit (Unknown Status -626 (0xfffffd8e)) on \Device\HarddiskVolume3\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
  891. 357c.14bc: Error (rc=0):
  892. 357c.14bc: supR3HardenedScreenImage/Imports: cached rc=Unknown Status -626 (0xfffffd8e) fImage=1 fProtect=0x0 fAccess=0x0 cHits=3 \Device\HarddiskVolume3\Windows\System32\bcrypt.dll
  893. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'iphlpapi.dll'...
  894. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'iphlpapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\iphlpapi.dll' [rcNtRedir=0xc0150008]
  895. 357c.14bc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL)
  896. 357c.14bc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL
  897. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  898. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  899. 357c.14bc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  900. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
  901. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
  902. 357c.14bc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll [lacks WinVerifyTrust]
  903. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'comctl32.dll'...
  904. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'comctl32.dll' -> '\Device\HarddiskVolume3\Windows\System32\comctl32.dll' [rcNtRedir=0x0]
  905. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'advapi32.dll'.
  906. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
  907. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
  908. 357c.14bc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\comctl32.dll)
  909. 357c.14bc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\comctl32.dll
  910. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  911. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  912. 357c.14bc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  913. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shlwapi.dll'...
  914. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'shlwapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\shlwapi.dll' [rcNtRedir=0xc0150008]
  915. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'.
  916. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #45 'gdi32.dll'.
  917. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #46 'user32.dll'.
  918. 357c.14bc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\shlwapi.dll)
  919. 357c.14bc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\shlwapi.dll
  920. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  921. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  922. 357c.14bc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  923. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  924. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  925. 357c.14bc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  926. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  927. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  928. 357c.14bc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  929. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
  930. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume3\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
  931. 357c.14bc: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
  932. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  933. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  934. 357c.14bc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  935. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  936. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  937. 357c.14bc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  938. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  939. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  940. 357c.14bc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  941. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  942. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  943. 357c.14bc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  944. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  945. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  946. 357c.14bc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  947. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  948. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  949. 357c.14bc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
  950. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  951. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  952. 357c.14bc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  953. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
  954. 357c.14bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
  955. 357c.14bc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
  956. 357c.14bc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VirtualBox.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000a01:<flags> [calling]
  957. 357c.14bc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.dll [lacks WinVerifyTrust]
  958. 357c.14bc: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
  959. 357c.14bc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  960. 357c.14bc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
  961. 357c.14bc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
  962. 357c.14bc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
  963. 357c.14bc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
  964. 357c.14bc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
  965. 357c.14bc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll [lacks WinVerifyTrust]
  966. 357c.14bc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll [lacks WinVerifyTrust]
  967. 357c.14bc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll [lacks WinVerifyTrust]
  968. 357c.14bc: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\glu32.dll [lacks WinVerifyTrust]
  969. 357c.14bc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\mpr.dll [lacks WinVerifyTrust]
  970. 357c.14bc: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\winspool.drv [lacks WinVerifyTrust]
  971. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'advapi32.dll'.
  972. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
  973. 357c.14bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
  974. 357c.14bc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.16299.125_none_88782a244abc4c60\comctl32.dll)
  975. 357c.14bc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.16299.125_none_88782a244abc4c60\comctl32.dll
  976. 357c.14bc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmmbase.dll [lacks WinVerifyTrust]
  977. 357c.14bc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL [lacks WinVerifyTrust]
  978. 357c.14bc: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status -626 (0xfffffd8e)) on \Device\HarddiskVolume3\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
  979. 357c.14bc: Error (rc=0):
  980. 357c.14bc: supR3HardenedScreenImage/NtCreateSection: cached rc=Unknown Status -626 (0xfffffd8e) fImage=1 fProtect=0x10 fAccess=0xf cHits=4 \Device\HarddiskVolume3\Windows\System32\bcrypt.dll
  981. 357c.14bc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000190 'C:\Program Files\Oracle\VirtualBox\VirtualBox.dll'
  982. 3b58.3348: supR3HardNtChildWaitFor[2]: Quitting: ExitCode=0x1 (rcNtWait=0x0, rcNt1=0x0, rcNt2=0x103, rcNt3=0x103, 516 ms, the end);
  983. 1264.383c: supR3HardNtChildWaitFor[1]: Quitting: ExitCode=0x1 (rcNtWait=0x0, rcNt1=0x0, rcNt2=0x103, rcNt3=0x103, 958 ms, the end);
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!