Advertisement
Guest User

Untitled

a guest
May 24th, 2018
62
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 100.21 KB | None | 0 0
  1. 1188.1700: Log file opened: 5.1.22r115126 g_hStartupLog=0000000000000068 g_uNtVerCombined=0xa03fab00
  2. 1188.1700: \SystemRoot\System32\ntdll.dll:
  3. 1188.1700: CreationTime: 2018-05-15T14:25:58.589093600Z
  4. 1188.1700: LastWriteTime: 2018-05-15T14:25:58.589093600Z
  5. 1188.1700: ChangeTime: 2018-05-15T14:28:25.770600600Z
  6. 1188.1700: FileAttributes: 0x20
  7. 1188.1700: Size: 0x1dd108
  8. 1188.1700: NT Headers: 0xe0
  9. 1188.1700: Timestamp: 0xd826f10d
  10. 1188.1700: Machine: 0x8664 - amd64
  11. 1188.1700: Timestamp: 0xd826f10d
  12. 1188.1700: Image Version: 10.0
  13. 1188.1700: SizeOfImage: 0x1e0000 (1966080)
  14. 1188.1700: Resource Dir: 0x174000 LB 0x6a1d8
  15. 1188.1700: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
  16. 1188.1700: [Raw version resource data: 0x1740f0 LB 0x380, codepage 0x0 (reserved 0x0)]
  17. 1188.1700: ProductName: Microsoft® Windows® Operating System
  18. 1188.1700: ProductVersion: 10.0.16299.402
  19. 1188.1700: FileVersion: 10.0.16299.402 (WinBuild.160101.0800)
  20. 1188.1700: FileDescription: NT Layer DLL
  21. 1188.1700: \SystemRoot\System32\kernel32.dll:
  22. 1188.1700: CreationTime: 2018-05-15T14:25:54.745155000Z
  23. 1188.1700: LastWriteTime: 2018-05-15T14:25:54.745155000Z
  24. 1188.1700: ChangeTime: 2018-05-15T13:40:52.869194100Z
  25. 1188.1700: FileAttributes: 0x20
  26. 1188.1700: Size: 0xab868
  27. 1188.1700: NT Headers: 0xe8
  28. 1188.1700: Timestamp: 0x309fae94
  29. 1188.1700: Machine: 0x8664 - amd64
  30. 1188.1700: Timestamp: 0x309fae94
  31. 1188.1700: Image Version: 10.0
  32. 1188.1700: SizeOfImage: 0xae000 (712704)
  33. 1188.1700: Resource Dir: 0xac000 LB 0x520
  34. 1188.1700: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
  35. 1188.1700: [Raw version resource data: 0xac0b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
  36. 1188.1700: ProductName: Microsoft® Windows® Operating System
  37. 1188.1700: ProductVersion: 10.0.16299.431
  38. 1188.1700: FileVersion: 10.0.16299.431 (WinBuild.160101.0800)
  39. 1188.1700: FileDescription: Windows NT BASE API Client DLL
  40. 1188.1700: \SystemRoot\System32\KernelBase.dll:
  41. 1188.1700: CreationTime: 2018-05-15T14:25:58.557842400Z
  42. 1188.1700: LastWriteTime: 2018-05-15T14:25:58.557842400Z
  43. 1188.1700: ChangeTime: 2018-05-15T13:40:53.107051900Z
  44. 1188.1700: FileAttributes: 0x20
  45. 1188.1700: Size: 0x265c00
  46. 1188.1700: NT Headers: 0xf0
  47. 1188.1700: Timestamp: 0xde35406a
  48. 1188.1700: Machine: 0x8664 - amd64
  49. 1188.1700: Timestamp: 0xde35406a
  50. 1188.1700: Image Version: 10.0
  51. 1188.1700: SizeOfImage: 0x266000 (2514944)
  52. 1188.1700: Resource Dir: 0x245000 LB 0x548
  53. 1188.1700: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
  54. 1188.1700: [Raw version resource data: 0x2450b0 LB 0x3bc, codepage 0x0 (reserved 0x0)]
  55. 1188.1700: ProductName: Microsoft® Windows® Operating System
  56. 1188.1700: ProductVersion: 10.0.16299.402
  57. 1188.1700: FileVersion: 10.0.16299.402 (WinBuild.160101.0800)
  58. 1188.1700: FileDescription: Windows NT BASE API Client DLL
  59. 1188.1700: \SystemRoot\System32\apisetschema.dll:
  60. 1188.1700: CreationTime: 2017-09-29T13:42:07.095026600Z
  61. 1188.1700: LastWriteTime: 2017-09-29T13:42:07.095026600Z
  62. 1188.1700: ChangeTime: 2018-05-22T18:30:13.082287000Z
  63. 1188.1700: FileAttributes: 0x20
  64. 1188.1700: Size: 0x1b398
  65. 1188.1700: NT Headers: 0xc8
  66. 1188.1700: Timestamp: 0xf30abf31
  67. 1188.1700: Machine: 0x8664 - amd64
  68. 1188.1700: Timestamp: 0xf30abf31
  69. 1188.1700: Image Version: 10.0
  70. 1188.1700: SizeOfImage: 0x1c000 (114688)
  71. 1188.1700: Resource Dir: 0x1b000 LB 0x408
  72. 1188.1700: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
  73. 1188.1700: [Raw version resource data: 0x1b060 LB 0x3a8, codepage 0x0 (reserved 0x0)]
  74. 1188.1700: ProductName: Microsoft® Windows® Operating System
  75. 1188.1700: ProductVersion: 10.0.16299.15
  76. 1188.1700: FileVersion: 10.0.16299.15 (WinBuild.160101.0800)
  77. 1188.1700: FileDescription: ApiSet Schema DLL
  78. 1188.1700: NtOpenDirectoryObject failed on \Driver: 0xc0000022
  79. 1188.1700: supR3HardenedWinFindAdversaries: 0x0
  80. 1188.1700: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
  81. 1188.1700: Calling main()
  82. 1188.1700: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2
  83. 1188.1700: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
  84. 1188.1700: SUPR3HardenedMain: Respawn #1
  85. 1188.1700: System32: \Device\HarddiskVolume2\Windows\System32
  86. 1188.1700: WinSxS: \Device\HarddiskVolume2\Windows\WinSxS
  87. 1188.1700: KnownDllPath: C:\WINDOWS\System32
  88. 1188.1700: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
  89. 1188.1700: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe)
  90. 1188.1700: supR3HardNtEnableThreadCreation:
  91. 1188.1700: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffddc139280 pvNtTerminateThread=00007ffddc160d10
  92. 1188.1700: supR3HardenedWinDoReSpawn(1): New child 2448.1718 [kernel32].
  93. 1188.1700: supR3HardNtChildGatherData: PebBaseAddress=0000000000750000 cbPeb=0x388
  94. 1188.1700: supR3HardNtPuChFindNtdll: uNtDllParentAddr=00007ffddc0c0000 uNtDllChildAddr=00007ffddc0c0000
  95. 1188.1700: supR3HardenedWinSetupChildInit: uLdrInitThunk=00007ffddc139280
  96. 1188.1700: supR3HardenedWinSetupChildInit: Start child.
  97. 1188.1700: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 0 ms.
  98. 1188.1700: supR3HardNtChildPurify: Startup delay kludge #1/0: 266 ms, 16 sleeps
  99. 1188.1700: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
  100. 1188.1700: *0000000000000000-00000000004fffff 0x0001/0x0000 0x0000000
  101. 1188.1700: *0000000000500000-000000000051ffff 0x0004/0x0004 0x0020000
  102. 1188.1700: *0000000000520000-0000000000538fff 0x0002/0x0002 0x0040000
  103. 1188.1700: 0000000000539000-000000000053ffff 0x0001/0x0000 0x0000000
  104. 1188.1700: *0000000000540000-0000000000543fff 0x0002/0x0002 0x0040000
  105. 1188.1700: 0000000000544000-000000000054ffff 0x0001/0x0000 0x0000000
  106. 1188.1700: *0000000000550000-0000000000550fff 0x0004/0x0004 0x0020000
  107. 1188.1700: 0000000000551000-00000000005fffff 0x0001/0x0000 0x0000000
  108. 1188.1700: *0000000000600000-000000000074ffff 0x0000/0x0004 0x0020000
  109. 1188.1700: 0000000000750000-0000000000752fff 0x0004/0x0004 0x0020000
  110. 1188.1700: 0000000000753000-00000000007fffff 0x0000/0x0004 0x0020000
  111. 1188.1700: *0000000000800000-00000000008fafff 0x0000/0x0004 0x0020000
  112. 1188.1700: 00000000008fb000-00000000008fdfff 0x0104/0x0004 0x0020000
  113. 1188.1700: 00000000008fe000-00000000008fffff 0x0004/0x0004 0x0020000
  114. 1188.1700: 0000000000900000-000000007ffdffff 0x0001/0x0000 0x0000000
  115. 1188.1700: *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000
  116. 1188.1700: *000000007ffe1000-000000007ffeffff 0x0000/0x0002 0x0020000
  117. 1188.1700: 000000007fff0000-00007ff73f85ffff 0x0001/0x0000 0x0000000
  118. 1188.1700: *00007ff73f860000-00007ff73f882fff 0x0002/0x0002 0x0040000
  119. 1188.1700: 00007ff73f883000-00007ff73fdbffff 0x0001/0x0000 0x0000000
  120. 1188.1700: *00007ff73fdc0000-00007ff73fdc0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
  121. 1188.1700: 00007ff73fdc1000-00007ff73fe30fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
  122. 1188.1700: 00007ff73fe31000-00007ff73fe31fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
  123. 1188.1700: 00007ff73fe32000-00007ff73fe76fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
  124. 1188.1700: 00007ff73fe77000-00007ff73fe77fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
  125. 1188.1700: 00007ff73fe78000-00007ff73fe78fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
  126. 1188.1700: 00007ff73fe79000-00007ff73fe7dfff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
  127. 1188.1700: 00007ff73fe7e000-00007ff73fe7efff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
  128. 1188.1700: 00007ff73fe7f000-00007ff73fe7ffff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
  129. 1188.1700: 00007ff73fe80000-00007ff73fe83fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
  130. 1188.1700: 00007ff73fe84000-00007ff73fecbfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
  131. 1188.1700: 00007ff73fecc000-00007ffddc0bffff 0x0001/0x0000 0x0000000
  132. 1188.1700: *00007ffddc0c0000-00007ffddc0c0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
  133. 1188.1700: 00007ffddc0c1000-00007ffddc1d2fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
  134. 1188.1700: 00007ffddc1d3000-00007ffddc218fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
  135. 1188.1700: 00007ffddc219000-00007ffddc220fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
  136. 1188.1700: 00007ffddc221000-00007ffddc22efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
  137. 1188.1700: 00007ffddc22f000-00007ffddc22ffff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
  138. 1188.1700: 00007ffddc230000-00007ffddc232fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
  139. 1188.1700: 00007ffddc233000-00007ffddc29ffff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
  140. 1188.1700: 00007ffddc2a0000-00007ffffffdffff 0x0001/0x0000 0x0000000
  141. 1188.1700: *00007ffffffe0000-00007ffffffeffff 0x0001/0x0002 0x0020000
  142. 1188.1700: VirtualBox.exe: timestamp 0x5903619d (rc=VINF_SUCCESS)
  143. 1188.1700: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
  144. 1188.1700: '\Device\HarddiskVolume2\Windows\System32\ntdll.dll' has no imports
  145. 1188.1700: supR3HardNtChildPurify: Done after 312 ms and 0 fixes (loop #0).
  146. 2448.1718: Log file opened: 5.1.22r115126 g_hStartupLog=0000000000000004 g_uNtVerCombined=0xa03fab00
  147. 2448.1718: supR3HardenedVmProcessInit: uNtDllAddr=00007ffddc0c0000 g_uNtVerCombined=0xa03fab00
  148. 2448.1718: ntdll.dll: timestamp 0xd826f10d (rc=VINF_SUCCESS)
  149. 2448.1718: New simple heap: #1 0000000000a00000 LB 0x400000 (for 1966080 allocation)
  150. 1188.1700: supR3HardNtEnableThreadCreation:
  151. 2448.1718: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
  152. 2448.1718: System32: \Device\HarddiskVolume2\Windows\System32
  153. 2448.1718: WinSxS: \Device\HarddiskVolume2\Windows\WinSxS
  154. 2448.1718: KnownDllPath: C:\WINDOWS\System32
  155. 2448.1718: supR3HardenedVmProcessInit: Opening vboxdrv stub...
  156. 2448.1718: supR3HardenedVmProcessInit: Restoring LdrInitializeThunk...
  157. 2448.1718: supR3HardenedVmProcessInit: Returning to LdrInitializeThunk...
  158. 2448.1718: Registered Dll notification callback with NTDLL.
  159. 2448.1718: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\kernel32.dll)
  160. 2448.1718: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\kernel32.dll
  161. 2448.1718: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\KERNEL32.DLL (Input=KERNEL32.DLL, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000004001:<flags> [calling]
  162. 2448.1718: supR3HardenedDllNotificationCallback: load 00007ffdd8d00000 LB 0x00266000 C:\WINDOWS\System32\KERNELBASE.dll [fFlags=0x0]
  163. 2448.1718: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\KernelBase.dll)
  164. 2448.1718: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\KernelBase.dll
  165. 2448.1718: supR3HardenedDllNotificationCallback: load 00007ffddbfe0000 LB 0x000ae000 C:\WINDOWS\System32\KERNEL32.DLL [fFlags=0x0]
  166. 2448.1718: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
  167. 2448.1718: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffddbfe0000 'C:\WINDOWS\System32\KERNEL32.DLL'
  168. 2448.1718: supR3HardenedDllNotificationCallback: load 00007ff73fdc0000 LB 0x0010c000 C:\Program Files\Oracle\VirtualBox\VirtualBox.exe [fFlags=0x0]
  169. 2448.1718: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
  170. 2448.1718: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe)
  171. 2448.1718: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
  172. 2448.1718: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffddc139280 pvNtTerminateThread=00007ffddc160d10
  173. 1188.1700: supR3HardNtChildWaitFor: Found expected request 1 (CloseEvents) after 63 ms.
  174. 2448.1718: \SystemRoot\System32\ntdll.dll:
  175. 2448.1718: CreationTime: 2018-05-15T14:25:58.589093600Z
  176. 2448.1718: LastWriteTime: 2018-05-15T14:25:58.589093600Z
  177. 2448.1718: ChangeTime: 2018-05-15T14:28:25.770600600Z
  178. 2448.1718: FileAttributes: 0x20
  179. 2448.1718: Size: 0x1dd108
  180. 2448.1718: NT Headers: 0xe0
  181. 2448.1718: Timestamp: 0xd826f10d
  182. 2448.1718: Machine: 0x8664 - amd64
  183. 2448.1718: Timestamp: 0xd826f10d
  184. 2448.1718: Image Version: 10.0
  185. 2448.1718: SizeOfImage: 0x1e0000 (1966080)
  186. 2448.1718: Resource Dir: 0x174000 LB 0x6a1d8
  187. 2448.1718: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
  188. 2448.1718: [Raw version resource data: 0x1740f0 LB 0x380, codepage 0x0 (reserved 0x0)]
  189. 2448.1718: ProductName: Microsoft® Windows® Operating System
  190. 2448.1718: ProductVersion: 10.0.16299.402
  191. 2448.1718: FileVersion: 10.0.16299.402 (WinBuild.160101.0800)
  192. 2448.1718: FileDescription: NT Layer DLL
  193. 2448.1718: \SystemRoot\System32\kernel32.dll:
  194. 2448.1718: CreationTime: 2018-05-15T14:25:54.745155000Z
  195. 2448.1718: LastWriteTime: 2018-05-15T14:25:54.745155000Z
  196. 2448.1718: ChangeTime: 2018-05-15T13:40:52.869194100Z
  197. 2448.1718: FileAttributes: 0x20
  198. 2448.1718: Size: 0xab868
  199. 2448.1718: NT Headers: 0xe8
  200. 2448.1718: Timestamp: 0x309fae94
  201. 2448.1718: Machine: 0x8664 - amd64
  202. 2448.1718: Timestamp: 0x309fae94
  203. 2448.1718: Image Version: 10.0
  204. 2448.1718: SizeOfImage: 0xae000 (712704)
  205. 2448.1718: Resource Dir: 0xac000 LB 0x520
  206. 2448.1718: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
  207. 2448.1718: [Raw version resource data: 0xac0b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
  208. 2448.1718: ProductName: Microsoft® Windows® Operating System
  209. 2448.1718: ProductVersion: 10.0.16299.431
  210. 2448.1718: FileVersion: 10.0.16299.431 (WinBuild.160101.0800)
  211. 2448.1718: FileDescription: Windows NT BASE API Client DLL
  212. 2448.1718: \SystemRoot\System32\KernelBase.dll:
  213. 2448.1718: CreationTime: 2018-05-15T14:25:58.557842400Z
  214. 2448.1718: LastWriteTime: 2018-05-15T14:25:58.557842400Z
  215. 2448.1718: ChangeTime: 2018-05-15T13:40:53.107051900Z
  216. 2448.1718: FileAttributes: 0x20
  217. 2448.1718: Size: 0x265c00
  218. 2448.1718: NT Headers: 0xf0
  219. 2448.1718: Timestamp: 0xde35406a
  220. 2448.1718: Machine: 0x8664 - amd64
  221. 2448.1718: Timestamp: 0xde35406a
  222. 2448.1718: Image Version: 10.0
  223. 2448.1718: SizeOfImage: 0x266000 (2514944)
  224. 2448.1718: Resource Dir: 0x245000 LB 0x548
  225. 2448.1718: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
  226. 2448.1718: [Raw version resource data: 0x2450b0 LB 0x3bc, codepage 0x0 (reserved 0x0)]
  227. 2448.1718: ProductName: Microsoft® Windows® Operating System
  228. 2448.1718: ProductVersion: 10.0.16299.402
  229. 2448.1718: FileVersion: 10.0.16299.402 (WinBuild.160101.0800)
  230. 2448.1718: FileDescription: Windows NT BASE API Client DLL
  231. 2448.1718: \SystemRoot\System32\apisetschema.dll:
  232. 2448.1718: CreationTime: 2017-09-29T13:42:07.095026600Z
  233. 2448.1718: LastWriteTime: 2017-09-29T13:42:07.095026600Z
  234. 2448.1718: ChangeTime: 2018-05-22T18:30:13.082287000Z
  235. 2448.1718: FileAttributes: 0x20
  236. 2448.1718: Size: 0x1b398
  237. 2448.1718: NT Headers: 0xc8
  238. 2448.1718: Timestamp: 0xf30abf31
  239. 2448.1718: Machine: 0x8664 - amd64
  240. 2448.1718: Timestamp: 0xf30abf31
  241. 2448.1718: Image Version: 10.0
  242. 2448.1718: SizeOfImage: 0x1c000 (114688)
  243. 2448.1718: Resource Dir: 0x1b000 LB 0x408
  244. 2448.1718: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
  245. 2448.1718: [Raw version resource data: 0x1b060 LB 0x3a8, codepage 0x0 (reserved 0x0)]
  246. 2448.1718: ProductName: Microsoft® Windows® Operating System
  247. 2448.1718: ProductVersion: 10.0.16299.15
  248. 2448.1718: FileVersion: 10.0.16299.15 (WinBuild.160101.0800)
  249. 2448.1718: FileDescription: ApiSet Schema DLL
  250. 2448.1718: NtOpenDirectoryObject failed on \Driver: 0xc0000022
  251. 2448.1718: supR3HardenedWinFindAdversaries: 0x0
  252. 2448.1718: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
  253. 2448.1718: Calling main()
  254. 2448.1718: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2
  255. 2448.1718: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
  256. 2448.1718: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
  257. 2448.1718: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe)
  258. 2448.1718: SUPR3HardenedMain: Respawn #2
  259. 2448.1718: supR3HardNtEnableThreadCreation:
  260. 2448.1718: '\Device\HarddiskVolume2\Windows\System32\ntdll.dll' has no imports
  261. 2448.1718: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\ntdll.dll)
  262. 2448.1718: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\ntdll.dll
  263. 2448.1718: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\ntdll.dll (Input=ntdll.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
  264. 2448.1718: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffddc0c0000 'C:\WINDOWS\System32\ntdll.dll'
  265. 2448.1718: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffddc139280 pvNtTerminateThread=00007ffddc160d10
  266. 2448.1718: supR3HardenedWinDoReSpawn(2): New child 498.1b04 [kernel32].
  267. 2448.1718: supR3HardenedWinReSpawn: NtSetInformationThread/ThreadHideFromDebugger failed: 0xc0000022 (harmless)
  268. 2448.1718: supR3HardNtChildGatherData: PebBaseAddress=0000000000e46000 cbPeb=0x388
  269. 2448.1718: supR3HardNtPuChFindNtdll: uNtDllParentAddr=00007ffddc0c0000 uNtDllChildAddr=00007ffddc0c0000
  270. 2448.1718: supR3HardenedWinSetupChildInit: uLdrInitThunk=00007ffddc139280
  271. 2448.1718: supR3HardenedWinSetupChildInit: Start child.
  272. 2448.1718: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 0 ms.
  273. 2448.1718: supR3HardNtChildPurify: Startup delay kludge #1/0: 266 ms, 17 sleeps
  274. 2448.1718: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
  275. 2448.1718: *0000000000000000-0000000000d1ffff 0x0001/0x0000 0x0000000
  276. 2448.1718: *0000000000d20000-0000000000d3ffff 0x0004/0x0004 0x0020000
  277. 2448.1718: *0000000000d40000-0000000000d58fff 0x0002/0x0002 0x0040000
  278. 2448.1718: 0000000000d59000-0000000000d5ffff 0x0001/0x0000 0x0000000
  279. 2448.1718: *0000000000d60000-0000000000d63fff 0x0002/0x0002 0x0040000
  280. 2448.1718: 0000000000d64000-0000000000d6ffff 0x0001/0x0000 0x0000000
  281. 2448.1718: *0000000000d70000-0000000000d70fff 0x0004/0x0004 0x0020000
  282. 2448.1718: 0000000000d71000-0000000000dfffff 0x0001/0x0000 0x0000000
  283. 2448.1718: *0000000000e00000-0000000000e45fff 0x0000/0x0004 0x0020000
  284. 2448.1718: 0000000000e46000-0000000000e48fff 0x0004/0x0004 0x0020000
  285. 2448.1718: 0000000000e49000-0000000000ffffff 0x0000/0x0004 0x0020000
  286. 2448.1718: *0000000001000000-00000000010fafff 0x0000/0x0004 0x0020000
  287. 2448.1718: 00000000010fb000-00000000010fdfff 0x0104/0x0004 0x0020000
  288. 2448.1718: 00000000010fe000-00000000010fffff 0x0004/0x0004 0x0020000
  289. 2448.1718: 0000000001100000-000000007ffdffff 0x0001/0x0000 0x0000000
  290. 2448.1718: *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000
  291. 2448.1718: *000000007ffe1000-000000007ffeffff 0x0000/0x0002 0x0020000
  292. 2448.1718: 000000007fff0000-00007ff73f28ffff 0x0001/0x0000 0x0000000
  293. 2448.1718: *00007ff73f290000-00007ff73f2b2fff 0x0002/0x0002 0x0040000
  294. 2448.1718: 00007ff73f2b3000-00007ff73fdbffff 0x0001/0x0000 0x0000000
  295. 2448.1718: *00007ff73fdc0000-00007ff73fdc0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
  296. 2448.1718: 00007ff73fdc1000-00007ff73fe30fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
  297. 2448.1718: 00007ff73fe31000-00007ff73fe31fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
  298. 2448.1718: 00007ff73fe32000-00007ff73fe76fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
  299. 2448.1718: 00007ff73fe77000-00007ff73fe77fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
  300. 2448.1718: 00007ff73fe78000-00007ff73fe78fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
  301. 2448.1718: 00007ff73fe79000-00007ff73fe7dfff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
  302. 2448.1718: 00007ff73fe7e000-00007ff73fe7efff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
  303. 2448.1718: 00007ff73fe7f000-00007ff73fe7ffff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
  304. 2448.1718: 00007ff73fe80000-00007ff73fe83fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
  305. 2448.1718: 00007ff73fe84000-00007ff73fecbfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
  306. 2448.1718: 00007ff73fecc000-00007ffddc0bffff 0x0001/0x0000 0x0000000
  307. 2448.1718: *00007ffddc0c0000-00007ffddc0c0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
  308. 2448.1718: 00007ffddc0c1000-00007ffddc1d2fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
  309. 2448.1718: 00007ffddc1d3000-00007ffddc218fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
  310. 2448.1718: 00007ffddc219000-00007ffddc220fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
  311. 2448.1718: 00007ffddc221000-00007ffddc22efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
  312. 2448.1718: 00007ffddc22f000-00007ffddc22ffff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
  313. 2448.1718: 00007ffddc230000-00007ffddc232fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
  314. 2448.1718: 00007ffddc233000-00007ffddc29ffff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
  315. 2448.1718: 00007ffddc2a0000-00007ffffffdffff 0x0001/0x0000 0x0000000
  316. 2448.1718: *00007ffffffe0000-00007ffffffeffff 0x0001/0x0002 0x0020000
  317. 2448.1718: VirtualBox.exe: timestamp 0x5903619d (rc=VINF_SUCCESS)
  318. 2448.1718: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
  319. 2448.1718: '\Device\HarddiskVolume2\Windows\System32\ntdll.dll' has no imports
  320. 2448.1718: supR3HardNtChildPurify: Done after 297 ms and 0 fixes (loop #0).
  321. 498.1b04: Log file opened: 5.1.22r115126 g_hStartupLog=0000000000000004 g_uNtVerCombined=0xa03fab00
  322. 498.1b04: supR3HardenedVmProcessInit: uNtDllAddr=00007ffddc0c0000 g_uNtVerCombined=0xa03fab00
  323. 2448.1718: supR3HardenedEarlyCompact: Removed heap 1 (0x00000000a00000 LB 0x400000)
  324. 498.1b04: ntdll.dll: timestamp 0xd826f10d (rc=VINF_SUCCESS)
  325. 2448.1718: supR3HardNtEnableThreadCreation:
  326. 498.1b04: New simple heap: #1 0000000001200000 LB 0x400000 (for 1966080 allocation)
  327. 498.1b04: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
  328. 498.1b04: System32: \Device\HarddiskVolume2\Windows\System32
  329. 498.1b04: WinSxS: \Device\HarddiskVolume2\Windows\WinSxS
  330. 498.1b04: KnownDllPath: C:\WINDOWS\System32
  331. 498.1b04: supR3HardenedVmProcessInit: Opening vboxdrv...
  332. 498.1b04: supR3HardenedVmProcessInit: Restoring LdrInitializeThunk...
  333. 498.1b04: supR3HardenedVmProcessInit: Returning to LdrInitializeThunk...
  334. 498.1b04: Registered Dll notification callback with NTDLL.
  335. 498.1b04: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\kernel32.dll)
  336. 498.1b04: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\kernel32.dll
  337. 498.1b04: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\KERNEL32.DLL (Input=KERNEL32.DLL, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000004001:<flags> [calling]
  338. 498.1b04: supR3HardenedDllNotificationCallback: load 00007ffdd8d00000 LB 0x00266000 C:\WINDOWS\System32\KERNELBASE.dll [fFlags=0x0]
  339. 498.1b04: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\KernelBase.dll)
  340. 498.1b04: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\KernelBase.dll
  341. 498.1b04: supR3HardenedDllNotificationCallback: load 00007ffddbfe0000 LB 0x000ae000 C:\WINDOWS\System32\KERNEL32.DLL [fFlags=0x0]
  342. 498.1b04: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
  343. 498.1b04: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffddbfe0000 'C:\WINDOWS\System32\KERNEL32.DLL'
  344. 498.1b04: supR3HardenedDllNotificationCallback: load 00007ff73fdc0000 LB 0x0010c000 C:\Program Files\Oracle\VirtualBox\VirtualBox.exe [fFlags=0x0]
  345. 498.1b04: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
  346. 498.1b04: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe)
  347. 498.1b04: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
  348. 498.1b04: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffddc139280 pvNtTerminateThread=00007ffddc160d10
  349. 2448.1718: supR3HardNtChildWaitFor: Found expected request 1 (CloseEvents) after 141 ms.
  350. 498.1b04: \SystemRoot\System32\ntdll.dll:
  351. 498.1b04: CreationTime: 2018-05-15T14:25:58.589093600Z
  352. 498.1b04: LastWriteTime: 2018-05-15T14:25:58.589093600Z
  353. 498.1b04: ChangeTime: 2018-05-15T14:28:25.770600600Z
  354. 498.1b04: FileAttributes: 0x20
  355. 498.1b04: Size: 0x1dd108
  356. 498.1b04: NT Headers: 0xe0
  357. 498.1b04: Timestamp: 0xd826f10d
  358. 498.1b04: Machine: 0x8664 - amd64
  359. 498.1b04: Timestamp: 0xd826f10d
  360. 498.1b04: Image Version: 10.0
  361. 498.1b04: SizeOfImage: 0x1e0000 (1966080)
  362. 498.1b04: Resource Dir: 0x174000 LB 0x6a1d8
  363. 498.1b04: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
  364. 498.1b04: [Raw version resource data: 0x1740f0 LB 0x380, codepage 0x0 (reserved 0x0)]
  365. 498.1b04: ProductName: Microsoft® Windows® Operating System
  366. 498.1b04: ProductVersion: 10.0.16299.402
  367. 498.1b04: FileVersion: 10.0.16299.402 (WinBuild.160101.0800)
  368. 498.1b04: FileDescription: NT Layer DLL
  369. 498.1b04: \SystemRoot\System32\kernel32.dll:
  370. 498.1b04: CreationTime: 2018-05-15T14:25:54.745155000Z
  371. 498.1b04: LastWriteTime: 2018-05-15T14:25:54.745155000Z
  372. 498.1b04: ChangeTime: 2018-05-15T13:40:52.869194100Z
  373. 498.1b04: FileAttributes: 0x20
  374. 498.1b04: Size: 0xab868
  375. 498.1b04: NT Headers: 0xe8
  376. 498.1b04: Timestamp: 0x309fae94
  377. 498.1b04: Machine: 0x8664 - amd64
  378. 498.1b04: Timestamp: 0x309fae94
  379. 498.1b04: Image Version: 10.0
  380. 498.1b04: SizeOfImage: 0xae000 (712704)
  381. 498.1b04: Resource Dir: 0xac000 LB 0x520
  382. 498.1b04: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
  383. 498.1b04: [Raw version resource data: 0xac0b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
  384. 498.1b04: ProductName: Microsoft® Windows® Operating System
  385. 498.1b04: ProductVersion: 10.0.16299.431
  386. 498.1b04: FileVersion: 10.0.16299.431 (WinBuild.160101.0800)
  387. 498.1b04: FileDescription: Windows NT BASE API Client DLL
  388. 498.1b04: \SystemRoot\System32\KernelBase.dll:
  389. 498.1b04: CreationTime: 2018-05-15T14:25:58.557842400Z
  390. 498.1b04: LastWriteTime: 2018-05-15T14:25:58.557842400Z
  391. 498.1b04: ChangeTime: 2018-05-15T13:40:53.107051900Z
  392. 498.1b04: FileAttributes: 0x20
  393. 498.1b04: Size: 0x265c00
  394. 498.1b04: NT Headers: 0xf0
  395. 498.1b04: Timestamp: 0xde35406a
  396. 498.1b04: Machine: 0x8664 - amd64
  397. 498.1b04: Timestamp: 0xde35406a
  398. 498.1b04: Image Version: 10.0
  399. 498.1b04: SizeOfImage: 0x266000 (2514944)
  400. 498.1b04: Resource Dir: 0x245000 LB 0x548
  401. 498.1b04: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
  402. 498.1b04: [Raw version resource data: 0x2450b0 LB 0x3bc, codepage 0x0 (reserved 0x0)]
  403. 498.1b04: ProductName: Microsoft® Windows® Operating System
  404. 498.1b04: ProductVersion: 10.0.16299.402
  405. 498.1b04: FileVersion: 10.0.16299.402 (WinBuild.160101.0800)
  406. 498.1b04: FileDescription: Windows NT BASE API Client DLL
  407. 498.1b04: \SystemRoot\System32\apisetschema.dll:
  408. 498.1b04: CreationTime: 2017-09-29T13:42:07.095026600Z
  409. 498.1b04: LastWriteTime: 2017-09-29T13:42:07.095026600Z
  410. 498.1b04: ChangeTime: 2018-05-22T18:30:13.082287000Z
  411. 498.1b04: FileAttributes: 0x20
  412. 498.1b04: Size: 0x1b398
  413. 498.1b04: NT Headers: 0xc8
  414. 498.1b04: Timestamp: 0xf30abf31
  415. 498.1b04: Machine: 0x8664 - amd64
  416. 498.1b04: Timestamp: 0xf30abf31
  417. 498.1b04: Image Version: 10.0
  418. 498.1b04: SizeOfImage: 0x1c000 (114688)
  419. 498.1b04: Resource Dir: 0x1b000 LB 0x408
  420. 498.1b04: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
  421. 498.1b04: [Raw version resource data: 0x1b060 LB 0x3a8, codepage 0x0 (reserved 0x0)]
  422. 498.1b04: ProductName: Microsoft® Windows® Operating System
  423. 498.1b04: ProductVersion: 10.0.16299.15
  424. 498.1b04: FileVersion: 10.0.16299.15 (WinBuild.160101.0800)
  425. 498.1b04: FileDescription: ApiSet Schema DLL
  426. 498.1b04: NtOpenDirectoryObject failed on \Driver: 0xc0000022
  427. 498.1b04: supR3HardenedWinFindAdversaries: 0x0
  428. 498.1b04: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
  429. 498.1b04: Calling main()
  430. 498.1b04: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2
  431. 498.1b04: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
  432. 498.1b04: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
  433. 498.1b04: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe)
  434. 498.1b04: SUPR3HardenedMain: Final process, opening VBoxDrv...
  435. 498.1b04: supR3HardenedEarlyCompact: Removed heap 1 (0x00000001200000 LB 0x400000)
  436. 498.1b04: supR3HardNtEnableThreadCreation:
  437. 498.1b04: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSupLib.dll)
  438. 498.1b04: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSupLib.dll
  439. 498.1b04: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
  440. 498.1b04: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
  441. 498.1b04: supR3HardenedDllNotificationCallback: load 00007ffdd1960000 LB 0x00005000 C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL [fFlags=0x0]
  442. 498.1b04: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
  443. 498.1b04: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
  444. 498.1b04: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  445. 498.1b04: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdd1960000 'C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL'
  446. 498.1b04: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
  447. 498.1b04: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  448. 498.1b04: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdd1960000 'C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL'
  449. 498.1b04: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdd1960000 'C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL'
  450. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  451. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msasn1.dll'.
  452. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'crypt32.dll'.
  453. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27 'rpcrt4.dll'.
  454. 498.1b04: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\wintrust.dll)
  455. 498.1b04: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\wintrust.dll
  456. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  457. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  458. 498.1b04: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll)
  459. 498.1b04: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll
  460. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'crypt32.dll'...
  461. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'crypt32.dll' -> '\Device\HarddiskVolume2\Windows\System32\crypt32.dll' [rcNtRedir=0xc0150008]
  462. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #33 'msasn1.dll'.
  463. 498.1b04: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\crypt32.dll)
  464. 498.1b04: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\crypt32.dll
  465. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msasn1.dll'...
  466. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'msasn1.dll' -> '\Device\HarddiskVolume2\Windows\System32\msasn1.dll' [rcNtRedir=0xc0150008]
  467. 498.1b04: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\msasn1.dll)
  468. 498.1b04: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\msasn1.dll
  469. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  470. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  471. 498.1b04: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\msvcrt.dll)
  472. 498.1b04: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\msvcrt.dll
  473. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msasn1.dll'...
  474. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'msasn1.dll' -> '\Device\HarddiskVolume2\Windows\System32\msasn1.dll' [rcNtRedir=0xc0150008]
  475. 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msasn1.dll [lacks WinVerifyTrust]
  476. 498.1b04: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\Wintrust.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
  477. 498.1b04: supR3HardenedDllNotificationCallback: load 00007ffdd9690000 LB 0x0009d000 C:\WINDOWS\System32\msvcrt.dll [fFlags=0x0]
  478. 498.1b04: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  479. 498.1b04: supR3HardenedDllNotificationCallback: load 00007ffdd8410000 LB 0x00012000 C:\WINDOWS\System32\MSASN1.dll [fFlags=0x0]
  480. 498.1b04: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msasn1.dll [lacks WinVerifyTrust]
  481. 498.1b04: supR3HardenedDllNotificationCallback: load 00007ffdd9490000 LB 0x000f6000 C:\WINDOWS\System32\ucrtbase.dll [fFlags=0x0]
  482. 498.1b04: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\ucrtbase.dll)
  483. 498.1b04: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\ucrtbase.dll
  484. 498.1b04: supR3HardenedDllNotificationCallback: load 00007ffdd9170000 LB 0x001ce000 C:\WINDOWS\System32\CRYPT32.dll [fFlags=0x0]
  485. 498.1b04: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
  486. 498.1b04: supR3HardenedDllNotificationCallback: load 00007ffddace0000 LB 0x0011f000 C:\WINDOWS\System32\RPCRT4.dll [fFlags=0x0]
  487. 498.1b04: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  488. 498.1b04: supR3HardenedDllNotificationCallback: load 00007ffdd9590000 LB 0x0005b000 C:\WINDOWS\System32\sechost.dll [fFlags=0x0]
  489. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'rpcrt4.dll'.
  490. 498.1b04: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\sechost.dll)
  491. 498.1b04: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\sechost.dll
  492. 498.1b04: supR3HardenedDllNotificationCallback: load 00007ffddb1d0000 LB 0x000a1000 C:\WINDOWS\System32\advapi32.dll [fFlags=0x0]
  493. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  494. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'sechost.dll'.
  495. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27 'rpcrt4.dll'.
  496. 498.1b04: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\advapi32.dll)
  497. 498.1b04: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\advapi32.dll
  498. 498.1b04: supR3HardenedDllNotificationCallback: load 00007ffdd9110000 LB 0x00058000 C:\WINDOWS\System32\Wintrust.dll [fFlags=0x0]
  499. 498.1b04: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
  500. 498.1b04: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
  501. 498.1b04: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdd8d00000 'api-ms-win-core-synch-l1-2-0'
  502. 498.1b04: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
  503. 498.1b04: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdd8d00000 'api-ms-win-core-fibers-l1-1-1'
  504. 498.1b04: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
  505. 498.1b04: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdd8d00000 'api-ms-win-core-fibers-l1-1-1'
  506. 498.1b04: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
  507. 498.1b04: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdd8d00000 'api-ms-win-core-synch-l1-2-0'
  508. 498.1b04: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-l1-2-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
  509. 498.1b04: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdd8d00000 'api-ms-win-core-localization-l1-2-1'
  510. 498.1b04: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdd9110000 'C:\WINDOWS\system32\Wintrust.dll'
  511. 498.1b04: supHardenedWinVerifyImageByHandle: -> -626 (\Device\HarddiskVolume2\Windows\System32\bcrypt.dll)
  512. 498.1b04: Error (rc=0):
  513. 498.1b04: supR3HardenedScreenImage/LdrLoadDll: rc=Unknown Status -626 (0xfffffd8e) fImage=1 fProtect=0x0 fAccess=0x0 \Device\HarddiskVolume2\Windows\System32\bcrypt.dll: Grown load config (244 to 256 bytes) includes non-zero bytes: 00 00 00 00 60 a9 01 80 01 00 00 00
  514. 498.1b04: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\bcrypt.dll
  515. 498.1b04: Error (rc=0):
  516. 498.1b04: supR3HardenedMonitor_LdrLoadDll: rejecting 'C:\WINDOWS\system32\bcrypt.dll' (C:\WINDOWS\system32\bcrypt.dll): rcNt=0xc0000190
  517. 498.1b04: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000190 'C:\WINDOWS\system32\bcrypt.dll'
  518. 498.1b04: Warning! Failed to load bcrypt.dll
  519. 498.1b04: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
  520. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  521. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  522. 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  523. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'sechost.dll'...
  524. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'sechost.dll' -> '\Device\HarddiskVolume2\Windows\System32\sechost.dll' [rcNtRedir=0xc0150008]
  525. 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\sechost.dll [lacks WinVerifyTrust]
  526. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  527. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  528. 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  529. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  530. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  531. 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  532. 498.1b04: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\WINTRUST.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  533. 498.1b04: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdd9110000 'C:\Windows\System32\WINTRUST.DLL'
  534. 498.1b04: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
  535. 498.1b04: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\WINTRUST.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  536. 498.1b04: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdd9110000 'C:\Windows\System32\WINTRUST.DLL'
  537. 498.1b04: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
  538. 498.1b04: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\WINTRUST.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  539. 498.1b04: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdd9110000 'C:\Windows\System32\WINTRUST.DLL'
  540. 498.1b04: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
  541. 498.1b04: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\WINTRUST.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  542. 498.1b04: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdd9110000 'C:\Windows\System32\WINTRUST.DLL'
  543. 498.1b04: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
  544. 498.1b04: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\WINTRUST.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  545. 498.1b04: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdd9110000 'C:\Windows\System32\WINTRUST.DLL'
  546. 498.1b04: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
  547. 498.1b04: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\WINTRUST.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  548. 498.1b04: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdd9110000 'C:\Windows\System32\WINTRUST.DLL'
  549. 498.1b04: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
  550. 498.1b04: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\WINTRUST.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  551. 498.1b04: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdd9110000 'C:\Windows\System32\WINTRUST.DLL'
  552. 498.1b04: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\cryptsp.dll)
  553. 498.1b04: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\cryptsp.dll
  554. 498.1b04: supR3HardenedDllNotificationCallback: load 00007ffdd7e10000 LB 0x00017000 C:\WINDOWS\SYSTEM32\CRYPTSP.dll [fFlags=0x0]
  555. 498.1b04: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\cryptsp.dll [lacks WinVerifyTrust]
  556. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'bcrypt.dll'.
  557. 498.1b04: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\rsaenh.dll)
  558. 498.1b04: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\rsaenh.dll
  559. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcrypt.dll'...
  560. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcrypt.dll' -> '\Device\HarddiskVolume2\Windows\System32\bcrypt.dll' [rcNtRedir=0xc0150008]
  561. 498.1b04: supR3HardenedScreenImage/Imports: cache hit (Unknown Status -626 (0xfffffd8e)) on \Device\HarddiskVolume2\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
  562. 498.1b04: Error (rc=0):
  563. 498.1b04: supR3HardenedScreenImage/Imports: cached rc=Unknown Status -626 (0xfffffd8e) fImage=1 fProtect=0x0 fAccess=0x0 cHits=1 \Device\HarddiskVolume2\Windows\System32\bcrypt.dll
  564. 498.1b04: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
  565. 498.1b04: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
  566. 498.1b04: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status -626 (0xfffffd8e)) on \Device\HarddiskVolume2\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
  567. 498.1b04: Error (rc=0):
  568. 498.1b04: supR3HardenedScreenImage/NtCreateSection: cached rc=Unknown Status -626 (0xfffffd8e) fImage=1 fProtect=0x10 fAccess=0xf cHits=2 \Device\HarddiskVolume2\Windows\System32\bcrypt.dll
  569. 498.1b04: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000190 'C:\WINDOWS\system32\rsaenh.dll'
  570. 498.1b04: supR3HardNtViCallWinVerifyTrust: WinVerifyTrust failed with 0x8 (<NULL>) on '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe'
  571. 498.1b04: Error -22919 in VirtualBox! (enmWhat=1)
  572. 498.1b04: WinVerifyTrust failed on stub executable: WinVerifyTrust failed with hrc=Unknown Status 0x8 on '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe'
  573. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'opengl32.dll'.
  574. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
  575. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'msvcp100.dll'.
  576. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcr100.dll'.
  577. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'.
  578. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'qt5guivbox.dll'.
  579. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'qt5widgetsvbox.dll'.
  580. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'qt5printsupportvbox.dll'.
  581. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'qt5openglvbox.dll'.
  582. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'user32.dll'.
  583. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'advapi32.dll'.
  584. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'shell32.dll'.
  585. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'ole32.dll'.
  586. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'oleaut32.dll'.
  587. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #15 'winmm.dll'.
  588. 498.1b04: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.dll)
  589. 498.1b04: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.dll
  590. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
  591. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume2\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
  592. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'winmmbase.dll'.
  593. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'msvcrt.dll'.
  594. 498.1b04: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\winmm.dll)
  595. 498.1b04: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\winmm.dll
  596. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
  597. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume2\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
  598. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
  599. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'combase.dll'.
  600. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #23 'rpcrt4.dll'.
  601. 498.1b04: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\oleaut32.dll)
  602. 498.1b04: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\oleaut32.dll
  603. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
  604. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
  605. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #22 'rpcrt4.dll'.
  606. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #46 'gdi32.dll'.
  607. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #47 'user32.dll'.
  608. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #48 'combase.dll'.
  609. 498.1b04: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\ole32.dll)
  610. 498.1b04: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\ole32.dll
  611. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
  612. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume2\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
  613. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  614. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #73 'user32.dll'.
  615. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #75 'gdi32.dll'.
  616. 498.1b04: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\shell32.dll)
  617. 498.1b04: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\shell32.dll
  618. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
  619. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
  620. 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
  621. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  622. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  623. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'win32u.dll'.
  624. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'gdi32.dll'.
  625. 498.1b04: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\user32.dll)
  626. 498.1b04: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\user32.dll
  627. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5openglvbox.dll'...
  628. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5openglvbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5openglvbox.dll' [rcNtRedir=0xc0150008]
  629. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'qt5widgetsvbox.dll'.
  630. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'qt5guivbox.dll'.
  631. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5corevbox.dll'.
  632. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcr100.dll'.
  633. 498.1b04: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll)
  634. 498.1b04: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll
  635. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5printsupportvbox.dll'...
  636. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5printsupportvbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5printsupportvbox.dll' [rcNtRedir=0xc0150008]
  637. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
  638. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
  639. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5widgetsvbox.dll'.
  640. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5guivbox.dll'.
  641. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'.
  642. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'winspool.drv'.
  643. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'comdlg32.dll'.
  644. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcr100.dll'.
  645. 498.1b04: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll)
  646. 498.1b04: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll
  647. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
  648. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
  649. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
  650. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
  651. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5guivbox.dll'.
  652. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5corevbox.dll'.
  653. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'shell32.dll'.
  654. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
  655. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
  656. 498.1b04: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll)
  657. 498.1b04: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll
  658. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
  659. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
  660. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'ole32.dll'.
  661. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'opengl32.dll'.
  662. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
  663. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
  664. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'.
  665. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
  666. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
  667. 498.1b04: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll)
  668. 498.1b04: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
  669. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
  670. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
  671. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
  672. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'shell32.dll'.
  673. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ole32.dll'.
  674. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'advapi32.dll'.
  675. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ws2_32.dll'.
  676. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'mpr.dll'.
  677. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcp100.dll'.
  678. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'msvcr100.dll'.
  679. 498.1b04: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll)
  680. 498.1b04: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
  681. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
  682. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
  683. 498.1b04: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll)
  684. 498.1b04: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll
  685. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
  686. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
  687. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
  688. 498.1b04: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll)
  689. 498.1b04: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll
  690. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
  691. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
  692. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
  693. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
  694. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ws2_32.dll'.
  695. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'rpcrt4.dll'.
  696. 498.1b04: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll)
  697. 498.1b04: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll
  698. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
  699. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume2\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
  700. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  701. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'advapi32.dll'.
  702. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
  703. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'gdi32.dll'.
  704. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'glu32.dll'.
  705. 498.1b04: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\opengl32.dll)
  706. 498.1b04: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\opengl32.dll
  707. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'glu32.dll'...
  708. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'glu32.dll' -> '\Device\HarddiskVolume2\Windows\System32\glu32.dll' [rcNtRedir=0xc0150008]
  709. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  710. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
  711. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'opengl32.dll'.
  712. 498.1b04: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\glu32.dll)
  713. 498.1b04: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\glu32.dll
  714. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  715. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  716. 498.1b04: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\gdi32.dll)
  717. 498.1b04: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\gdi32.dll
  718. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  719. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  720. 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
  721. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
  722. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
  723. 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
  724. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  725. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  726. 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  727. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  728. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  729. 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  730. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
  731. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
  732. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'rpcrt4.dll'.
  733. 498.1b04: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\ws2_32.dll)
  734. 498.1b04: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\ws2_32.dll
  735. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
  736. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
  737. 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
  738. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
  739. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
  740. 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
  741. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
  742. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
  743. 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
  744. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
  745. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
  746. 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
  747. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
  748. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
  749. 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
  750. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mpr.dll'...
  751. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'mpr.dll' -> '\Device\HarddiskVolume2\Windows\System32\mpr.dll' [rcNtRedir=0xc0150008]
  752. 498.1b04: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\mpr.dll)
  753. 498.1b04: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\mpr.dll
  754. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
  755. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
  756. 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ws2_32.dll [lacks WinVerifyTrust]
  757. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
  758. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
  759. 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
  760. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
  761. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
  762. 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ole32.dll [lacks WinVerifyTrust]
  763. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
  764. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume2\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
  765. 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\shell32.dll [lacks WinVerifyTrust]
  766. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  767. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  768. 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
  769. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
  770. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
  771. 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
  772. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
  773. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
  774. 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
  775. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
  776. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
  777. 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
  778. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  779. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  780. 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
  781. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  782. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  783. 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  784. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
  785. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume2\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
  786. 498.1b04: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
  787. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
  788. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
  789. 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ole32.dll [lacks WinVerifyTrust]
  790. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
  791. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
  792. 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
  793. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
  794. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
  795. 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
  796. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
  797. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume2\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
  798. 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\shell32.dll [lacks WinVerifyTrust]
  799. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
  800. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
  801. 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
  802. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
  803. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
  804. 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
  805. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  806. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  807. 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
  808. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  809. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  810. 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  811. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
  812. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
  813. 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
  814. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'comdlg32.dll'...
  815. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'comdlg32.dll' -> '\Device\HarddiskVolume2\Windows\System32\comdlg32.dll' [rcNtRedir=0xc0150008]
  816. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  817. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'user32.dll'.
  818. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #37 'shlwapi.dll'.
  819. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #38 'gdi32.dll'.
  820. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #39 'comctl32.dll'.
  821. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #40 'shell32.dll'.
  822. 498.1b04: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\comdlg32.dll)
  823. 498.1b04: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\comdlg32.dll
  824. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winspool.drv'...
  825. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'winspool.drv' -> '\Device\HarddiskVolume2\Windows\System32\winspool.drv' [rcNtRedir=0xc0150008]
  826. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  827. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #25 'iphlpapi.dll'.
  828. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'bcrypt.dll'.
  829. 498.1b04: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\winspool.drv)
  830. 498.1b04: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\winspool.drv
  831. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
  832. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
  833. 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
  834. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
  835. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
  836. 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
  837. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
  838. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
  839. 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
  840. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  841. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  842. 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
  843. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  844. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  845. 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  846. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
  847. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
  848. 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
  849. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
  850. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
  851. 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
  852. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
  853. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
  854. 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
  855. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
  856. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
  857. 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
  858. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  859. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  860. 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  861. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
  862. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume2\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
  863. 498.1b04: '\Device\HarddiskVolume2\Windows\System32\win32u.dll' has no imports
  864. 498.1b04: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\win32u.dll)
  865. 498.1b04: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\win32u.dll
  866. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  867. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  868. 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  869. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  870. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  871. 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
  872. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  873. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  874. 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  875. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
  876. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume2\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
  877. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
  878. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #45 'bcryptprimitives.dll'.
  879. 498.1b04: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\combase.dll)
  880. 498.1b04: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\combase.dll
  881. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  882. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  883. 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
  884. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  885. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  886. 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  887. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  888. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  889. 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  890. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  891. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  892. 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  893. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
  894. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume2\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
  895. 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\combase.dll [lacks WinVerifyTrust]
  896. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
  897. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
  898. 498.1b04: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll)
  899. 498.1b04: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\msvcp_win.dll
  900. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  901. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  902. 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  903. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmmbase.dll'...
  904. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmmbase.dll' -> '\Device\HarddiskVolume2\Windows\System32\winmmbase.dll' [rcNtRedir=0xc0150008]
  905. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  906. 498.1b04: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\winmmbase.dll)
  907. 498.1b04: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\winmmbase.dll
  908. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  909. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  910. 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  911. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'...
  912. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume2\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008]
  913. 498.1b04: supHardenedWinVerifyImageByHandle: -> -626 (\Device\HarddiskVolume2\Windows\System32\bcryptprimitives.dll)
  914. 498.1b04: Error (rc=0):
  915. 498.1b04: supR3HardenedScreenImage/Imports: rc=Unknown Status -626 (0xfffffd8e) fImage=1 fProtect=0x0 fAccess=0x0 \Device\HarddiskVolume2\Windows\System32\bcryptprimitives.dll: Grown load config (244 to 256 bytes) includes non-zero bytes: 00 00 00 00 40 16 06 80 01 00 00 00
  916. 498.1b04: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\bcryptprimitives.dll
  917. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  918. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  919. 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  920. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcrypt.dll'...
  921. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcrypt.dll' -> '\Device\HarddiskVolume2\Windows\System32\bcrypt.dll' [rcNtRedir=0xc0150008]
  922. 498.1b04: supR3HardenedScreenImage/Imports: cache hit (Unknown Status -626 (0xfffffd8e)) on \Device\HarddiskVolume2\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
  923. 498.1b04: Error (rc=0):
  924. 498.1b04: supR3HardenedScreenImage/Imports: cached rc=Unknown Status -626 (0xfffffd8e) fImage=1 fProtect=0x0 fAccess=0x0 cHits=3 \Device\HarddiskVolume2\Windows\System32\bcrypt.dll
  925. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'iphlpapi.dll'...
  926. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'iphlpapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\iphlpapi.dll' [rcNtRedir=0xc0150008]
  927. 498.1b04: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\IPHLPAPI.DLL)
  928. 498.1b04: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\IPHLPAPI.DLL
  929. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  930. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  931. 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  932. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
  933. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume2\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
  934. 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\shell32.dll [lacks WinVerifyTrust]
  935. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'comctl32.dll'...
  936. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'comctl32.dll' -> '\Device\HarddiskVolume2\Windows\System32\comctl32.dll' [rcNtRedir=0x0]
  937. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'advapi32.dll'.
  938. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
  939. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
  940. 498.1b04: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\comctl32.dll)
  941. 498.1b04: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\comctl32.dll
  942. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  943. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  944. 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  945. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shlwapi.dll'...
  946. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'shlwapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\shlwapi.dll' [rcNtRedir=0xc0150008]
  947. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'.
  948. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #45 'gdi32.dll'.
  949. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #46 'user32.dll'.
  950. 498.1b04: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\shlwapi.dll)
  951. 498.1b04: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\shlwapi.dll
  952. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  953. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  954. 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
  955. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  956. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  957. 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  958. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  959. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  960. 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  961. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
  962. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume2\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
  963. 498.1b04: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
  964. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  965. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  966. 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
  967. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  968. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  969. 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  970. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  971. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  972. 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
  973. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  974. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  975. 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  976. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  977. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  978. 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  979. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  980. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  981. 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
  982. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  983. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  984. 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  985. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
  986. 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
  987. 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
  988. 498.1b04: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VirtualBox.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000a01:<flags> [calling]
  989. 498.1b04: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.dll [lacks WinVerifyTrust]
  990. 498.1b04: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
  991. 498.1b04: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
  992. 498.1b04: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
  993. 498.1b04: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
  994. 498.1b04: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
  995. 498.1b04: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
  996. 498.1b04: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
  997. 498.1b04: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll [lacks WinVerifyTrust]
  998. 498.1b04: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll [lacks WinVerifyTrust]
  999. 498.1b04: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winmm.dll [lacks WinVerifyTrust]
  1000. 498.1b04: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\glu32.dll [lacks WinVerifyTrust]
  1001. 498.1b04: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\mpr.dll [lacks WinVerifyTrust]
  1002. 498.1b04: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\winspool.drv [lacks WinVerifyTrust]
  1003. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'advapi32.dll'.
  1004. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
  1005. 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
  1006. 498.1b04: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.16299.431_none_887985224abb0026\comctl32.dll)
  1007. 498.1b04: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.16299.431_none_887985224abb0026\comctl32.dll
  1008. 498.1b04: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winmmbase.dll [lacks WinVerifyTrust]
  1009. 498.1b04: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\IPHLPAPI.DLL [lacks WinVerifyTrust]
  1010. 498.1b04: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status -626 (0xfffffd8e)) on \Device\HarddiskVolume2\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
  1011. 498.1b04: Error (rc=0):
  1012. 498.1b04: supR3HardenedScreenImage/NtCreateSection: cached rc=Unknown Status -626 (0xfffffd8e) fImage=1 fProtect=0x10 fAccess=0xf cHits=4 \Device\HarddiskVolume2\Windows\System32\bcrypt.dll
  1013. 498.1b04: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000190 'C:\Program Files\Oracle\VirtualBox\VirtualBox.dll'
  1014. 2448.1718: supR3HardNtChildWaitFor[2]: Quitting: ExitCode=0x1 (rcNtWait=0x0, rcNt1=0x0, rcNt2=0x103, rcNt3=0x103, 797 ms, the end);
  1015. 1188.1700: supR3HardNtChildWaitFor[1]: Quitting: ExitCode=0x1 (rcNtWait=0x0, rcNt1=0x0, rcNt2=0x103, rcNt3=0x103, 1359 ms, the end);
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement