Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- 1188.1700: Log file opened: 5.1.22r115126 g_hStartupLog=0000000000000068 g_uNtVerCombined=0xa03fab00
- 1188.1700: \SystemRoot\System32\ntdll.dll:
- 1188.1700: CreationTime: 2018-05-15T14:25:58.589093600Z
- 1188.1700: LastWriteTime: 2018-05-15T14:25:58.589093600Z
- 1188.1700: ChangeTime: 2018-05-15T14:28:25.770600600Z
- 1188.1700: FileAttributes: 0x20
- 1188.1700: Size: 0x1dd108
- 1188.1700: NT Headers: 0xe0
- 1188.1700: Timestamp: 0xd826f10d
- 1188.1700: Machine: 0x8664 - amd64
- 1188.1700: Timestamp: 0xd826f10d
- 1188.1700: Image Version: 10.0
- 1188.1700: SizeOfImage: 0x1e0000 (1966080)
- 1188.1700: Resource Dir: 0x174000 LB 0x6a1d8
- 1188.1700: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
- 1188.1700: [Raw version resource data: 0x1740f0 LB 0x380, codepage 0x0 (reserved 0x0)]
- 1188.1700: ProductName: Microsoft® Windows® Operating System
- 1188.1700: ProductVersion: 10.0.16299.402
- 1188.1700: FileVersion: 10.0.16299.402 (WinBuild.160101.0800)
- 1188.1700: FileDescription: NT Layer DLL
- 1188.1700: \SystemRoot\System32\kernel32.dll:
- 1188.1700: CreationTime: 2018-05-15T14:25:54.745155000Z
- 1188.1700: LastWriteTime: 2018-05-15T14:25:54.745155000Z
- 1188.1700: ChangeTime: 2018-05-15T13:40:52.869194100Z
- 1188.1700: FileAttributes: 0x20
- 1188.1700: Size: 0xab868
- 1188.1700: NT Headers: 0xe8
- 1188.1700: Timestamp: 0x309fae94
- 1188.1700: Machine: 0x8664 - amd64
- 1188.1700: Timestamp: 0x309fae94
- 1188.1700: Image Version: 10.0
- 1188.1700: SizeOfImage: 0xae000 (712704)
- 1188.1700: Resource Dir: 0xac000 LB 0x520
- 1188.1700: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
- 1188.1700: [Raw version resource data: 0xac0b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
- 1188.1700: ProductName: Microsoft® Windows® Operating System
- 1188.1700: ProductVersion: 10.0.16299.431
- 1188.1700: FileVersion: 10.0.16299.431 (WinBuild.160101.0800)
- 1188.1700: FileDescription: Windows NT BASE API Client DLL
- 1188.1700: \SystemRoot\System32\KernelBase.dll:
- 1188.1700: CreationTime: 2018-05-15T14:25:58.557842400Z
- 1188.1700: LastWriteTime: 2018-05-15T14:25:58.557842400Z
- 1188.1700: ChangeTime: 2018-05-15T13:40:53.107051900Z
- 1188.1700: FileAttributes: 0x20
- 1188.1700: Size: 0x265c00
- 1188.1700: NT Headers: 0xf0
- 1188.1700: Timestamp: 0xde35406a
- 1188.1700: Machine: 0x8664 - amd64
- 1188.1700: Timestamp: 0xde35406a
- 1188.1700: Image Version: 10.0
- 1188.1700: SizeOfImage: 0x266000 (2514944)
- 1188.1700: Resource Dir: 0x245000 LB 0x548
- 1188.1700: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
- 1188.1700: [Raw version resource data: 0x2450b0 LB 0x3bc, codepage 0x0 (reserved 0x0)]
- 1188.1700: ProductName: Microsoft® Windows® Operating System
- 1188.1700: ProductVersion: 10.0.16299.402
- 1188.1700: FileVersion: 10.0.16299.402 (WinBuild.160101.0800)
- 1188.1700: FileDescription: Windows NT BASE API Client DLL
- 1188.1700: \SystemRoot\System32\apisetschema.dll:
- 1188.1700: CreationTime: 2017-09-29T13:42:07.095026600Z
- 1188.1700: LastWriteTime: 2017-09-29T13:42:07.095026600Z
- 1188.1700: ChangeTime: 2018-05-22T18:30:13.082287000Z
- 1188.1700: FileAttributes: 0x20
- 1188.1700: Size: 0x1b398
- 1188.1700: NT Headers: 0xc8
- 1188.1700: Timestamp: 0xf30abf31
- 1188.1700: Machine: 0x8664 - amd64
- 1188.1700: Timestamp: 0xf30abf31
- 1188.1700: Image Version: 10.0
- 1188.1700: SizeOfImage: 0x1c000 (114688)
- 1188.1700: Resource Dir: 0x1b000 LB 0x408
- 1188.1700: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
- 1188.1700: [Raw version resource data: 0x1b060 LB 0x3a8, codepage 0x0 (reserved 0x0)]
- 1188.1700: ProductName: Microsoft® Windows® Operating System
- 1188.1700: ProductVersion: 10.0.16299.15
- 1188.1700: FileVersion: 10.0.16299.15 (WinBuild.160101.0800)
- 1188.1700: FileDescription: ApiSet Schema DLL
- 1188.1700: NtOpenDirectoryObject failed on \Driver: 0xc0000022
- 1188.1700: supR3HardenedWinFindAdversaries: 0x0
- 1188.1700: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
- 1188.1700: Calling main()
- 1188.1700: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2
- 1188.1700: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
- 1188.1700: SUPR3HardenedMain: Respawn #1
- 1188.1700: System32: \Device\HarddiskVolume2\Windows\System32
- 1188.1700: WinSxS: \Device\HarddiskVolume2\Windows\WinSxS
- 1188.1700: KnownDllPath: C:\WINDOWS\System32
- 1188.1700: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
- 1188.1700: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe)
- 1188.1700: supR3HardNtEnableThreadCreation:
- 1188.1700: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffddc139280 pvNtTerminateThread=00007ffddc160d10
- 1188.1700: supR3HardenedWinDoReSpawn(1): New child 2448.1718 [kernel32].
- 1188.1700: supR3HardNtChildGatherData: PebBaseAddress=0000000000750000 cbPeb=0x388
- 1188.1700: supR3HardNtPuChFindNtdll: uNtDllParentAddr=00007ffddc0c0000 uNtDllChildAddr=00007ffddc0c0000
- 1188.1700: supR3HardenedWinSetupChildInit: uLdrInitThunk=00007ffddc139280
- 1188.1700: supR3HardenedWinSetupChildInit: Start child.
- 1188.1700: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 0 ms.
- 1188.1700: supR3HardNtChildPurify: Startup delay kludge #1/0: 266 ms, 16 sleeps
- 1188.1700: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
- 1188.1700: *0000000000000000-00000000004fffff 0x0001/0x0000 0x0000000
- 1188.1700: *0000000000500000-000000000051ffff 0x0004/0x0004 0x0020000
- 1188.1700: *0000000000520000-0000000000538fff 0x0002/0x0002 0x0040000
- 1188.1700: 0000000000539000-000000000053ffff 0x0001/0x0000 0x0000000
- 1188.1700: *0000000000540000-0000000000543fff 0x0002/0x0002 0x0040000
- 1188.1700: 0000000000544000-000000000054ffff 0x0001/0x0000 0x0000000
- 1188.1700: *0000000000550000-0000000000550fff 0x0004/0x0004 0x0020000
- 1188.1700: 0000000000551000-00000000005fffff 0x0001/0x0000 0x0000000
- 1188.1700: *0000000000600000-000000000074ffff 0x0000/0x0004 0x0020000
- 1188.1700: 0000000000750000-0000000000752fff 0x0004/0x0004 0x0020000
- 1188.1700: 0000000000753000-00000000007fffff 0x0000/0x0004 0x0020000
- 1188.1700: *0000000000800000-00000000008fafff 0x0000/0x0004 0x0020000
- 1188.1700: 00000000008fb000-00000000008fdfff 0x0104/0x0004 0x0020000
- 1188.1700: 00000000008fe000-00000000008fffff 0x0004/0x0004 0x0020000
- 1188.1700: 0000000000900000-000000007ffdffff 0x0001/0x0000 0x0000000
- 1188.1700: *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000
- 1188.1700: *000000007ffe1000-000000007ffeffff 0x0000/0x0002 0x0020000
- 1188.1700: 000000007fff0000-00007ff73f85ffff 0x0001/0x0000 0x0000000
- 1188.1700: *00007ff73f860000-00007ff73f882fff 0x0002/0x0002 0x0040000
- 1188.1700: 00007ff73f883000-00007ff73fdbffff 0x0001/0x0000 0x0000000
- 1188.1700: *00007ff73fdc0000-00007ff73fdc0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
- 1188.1700: 00007ff73fdc1000-00007ff73fe30fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
- 1188.1700: 00007ff73fe31000-00007ff73fe31fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
- 1188.1700: 00007ff73fe32000-00007ff73fe76fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
- 1188.1700: 00007ff73fe77000-00007ff73fe77fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
- 1188.1700: 00007ff73fe78000-00007ff73fe78fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
- 1188.1700: 00007ff73fe79000-00007ff73fe7dfff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
- 1188.1700: 00007ff73fe7e000-00007ff73fe7efff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
- 1188.1700: 00007ff73fe7f000-00007ff73fe7ffff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
- 1188.1700: 00007ff73fe80000-00007ff73fe83fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
- 1188.1700: 00007ff73fe84000-00007ff73fecbfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
- 1188.1700: 00007ff73fecc000-00007ffddc0bffff 0x0001/0x0000 0x0000000
- 1188.1700: *00007ffddc0c0000-00007ffddc0c0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
- 1188.1700: 00007ffddc0c1000-00007ffddc1d2fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
- 1188.1700: 00007ffddc1d3000-00007ffddc218fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
- 1188.1700: 00007ffddc219000-00007ffddc220fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
- 1188.1700: 00007ffddc221000-00007ffddc22efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
- 1188.1700: 00007ffddc22f000-00007ffddc22ffff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
- 1188.1700: 00007ffddc230000-00007ffddc232fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
- 1188.1700: 00007ffddc233000-00007ffddc29ffff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
- 1188.1700: 00007ffddc2a0000-00007ffffffdffff 0x0001/0x0000 0x0000000
- 1188.1700: *00007ffffffe0000-00007ffffffeffff 0x0001/0x0002 0x0020000
- 1188.1700: VirtualBox.exe: timestamp 0x5903619d (rc=VINF_SUCCESS)
- 1188.1700: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
- 1188.1700: '\Device\HarddiskVolume2\Windows\System32\ntdll.dll' has no imports
- 1188.1700: supR3HardNtChildPurify: Done after 312 ms and 0 fixes (loop #0).
- 2448.1718: Log file opened: 5.1.22r115126 g_hStartupLog=0000000000000004 g_uNtVerCombined=0xa03fab00
- 2448.1718: supR3HardenedVmProcessInit: uNtDllAddr=00007ffddc0c0000 g_uNtVerCombined=0xa03fab00
- 2448.1718: ntdll.dll: timestamp 0xd826f10d (rc=VINF_SUCCESS)
- 2448.1718: New simple heap: #1 0000000000a00000 LB 0x400000 (for 1966080 allocation)
- 1188.1700: supR3HardNtEnableThreadCreation:
- 2448.1718: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
- 2448.1718: System32: \Device\HarddiskVolume2\Windows\System32
- 2448.1718: WinSxS: \Device\HarddiskVolume2\Windows\WinSxS
- 2448.1718: KnownDllPath: C:\WINDOWS\System32
- 2448.1718: supR3HardenedVmProcessInit: Opening vboxdrv stub...
- 2448.1718: supR3HardenedVmProcessInit: Restoring LdrInitializeThunk...
- 2448.1718: supR3HardenedVmProcessInit: Returning to LdrInitializeThunk...
- 2448.1718: Registered Dll notification callback with NTDLL.
- 2448.1718: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\kernel32.dll)
- 2448.1718: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\kernel32.dll
- 2448.1718: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\KERNEL32.DLL (Input=KERNEL32.DLL, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000004001:<flags> [calling]
- 2448.1718: supR3HardenedDllNotificationCallback: load 00007ffdd8d00000 LB 0x00266000 C:\WINDOWS\System32\KERNELBASE.dll [fFlags=0x0]
- 2448.1718: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\KernelBase.dll)
- 2448.1718: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\KernelBase.dll
- 2448.1718: supR3HardenedDllNotificationCallback: load 00007ffddbfe0000 LB 0x000ae000 C:\WINDOWS\System32\KERNEL32.DLL [fFlags=0x0]
- 2448.1718: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
- 2448.1718: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffddbfe0000 'C:\WINDOWS\System32\KERNEL32.DLL'
- 2448.1718: supR3HardenedDllNotificationCallback: load 00007ff73fdc0000 LB 0x0010c000 C:\Program Files\Oracle\VirtualBox\VirtualBox.exe [fFlags=0x0]
- 2448.1718: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
- 2448.1718: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe)
- 2448.1718: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
- 2448.1718: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffddc139280 pvNtTerminateThread=00007ffddc160d10
- 1188.1700: supR3HardNtChildWaitFor: Found expected request 1 (CloseEvents) after 63 ms.
- 2448.1718: \SystemRoot\System32\ntdll.dll:
- 2448.1718: CreationTime: 2018-05-15T14:25:58.589093600Z
- 2448.1718: LastWriteTime: 2018-05-15T14:25:58.589093600Z
- 2448.1718: ChangeTime: 2018-05-15T14:28:25.770600600Z
- 2448.1718: FileAttributes: 0x20
- 2448.1718: Size: 0x1dd108
- 2448.1718: NT Headers: 0xe0
- 2448.1718: Timestamp: 0xd826f10d
- 2448.1718: Machine: 0x8664 - amd64
- 2448.1718: Timestamp: 0xd826f10d
- 2448.1718: Image Version: 10.0
- 2448.1718: SizeOfImage: 0x1e0000 (1966080)
- 2448.1718: Resource Dir: 0x174000 LB 0x6a1d8
- 2448.1718: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
- 2448.1718: [Raw version resource data: 0x1740f0 LB 0x380, codepage 0x0 (reserved 0x0)]
- 2448.1718: ProductName: Microsoft® Windows® Operating System
- 2448.1718: ProductVersion: 10.0.16299.402
- 2448.1718: FileVersion: 10.0.16299.402 (WinBuild.160101.0800)
- 2448.1718: FileDescription: NT Layer DLL
- 2448.1718: \SystemRoot\System32\kernel32.dll:
- 2448.1718: CreationTime: 2018-05-15T14:25:54.745155000Z
- 2448.1718: LastWriteTime: 2018-05-15T14:25:54.745155000Z
- 2448.1718: ChangeTime: 2018-05-15T13:40:52.869194100Z
- 2448.1718: FileAttributes: 0x20
- 2448.1718: Size: 0xab868
- 2448.1718: NT Headers: 0xe8
- 2448.1718: Timestamp: 0x309fae94
- 2448.1718: Machine: 0x8664 - amd64
- 2448.1718: Timestamp: 0x309fae94
- 2448.1718: Image Version: 10.0
- 2448.1718: SizeOfImage: 0xae000 (712704)
- 2448.1718: Resource Dir: 0xac000 LB 0x520
- 2448.1718: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
- 2448.1718: [Raw version resource data: 0xac0b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
- 2448.1718: ProductName: Microsoft® Windows® Operating System
- 2448.1718: ProductVersion: 10.0.16299.431
- 2448.1718: FileVersion: 10.0.16299.431 (WinBuild.160101.0800)
- 2448.1718: FileDescription: Windows NT BASE API Client DLL
- 2448.1718: \SystemRoot\System32\KernelBase.dll:
- 2448.1718: CreationTime: 2018-05-15T14:25:58.557842400Z
- 2448.1718: LastWriteTime: 2018-05-15T14:25:58.557842400Z
- 2448.1718: ChangeTime: 2018-05-15T13:40:53.107051900Z
- 2448.1718: FileAttributes: 0x20
- 2448.1718: Size: 0x265c00
- 2448.1718: NT Headers: 0xf0
- 2448.1718: Timestamp: 0xde35406a
- 2448.1718: Machine: 0x8664 - amd64
- 2448.1718: Timestamp: 0xde35406a
- 2448.1718: Image Version: 10.0
- 2448.1718: SizeOfImage: 0x266000 (2514944)
- 2448.1718: Resource Dir: 0x245000 LB 0x548
- 2448.1718: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
- 2448.1718: [Raw version resource data: 0x2450b0 LB 0x3bc, codepage 0x0 (reserved 0x0)]
- 2448.1718: ProductName: Microsoft® Windows® Operating System
- 2448.1718: ProductVersion: 10.0.16299.402
- 2448.1718: FileVersion: 10.0.16299.402 (WinBuild.160101.0800)
- 2448.1718: FileDescription: Windows NT BASE API Client DLL
- 2448.1718: \SystemRoot\System32\apisetschema.dll:
- 2448.1718: CreationTime: 2017-09-29T13:42:07.095026600Z
- 2448.1718: LastWriteTime: 2017-09-29T13:42:07.095026600Z
- 2448.1718: ChangeTime: 2018-05-22T18:30:13.082287000Z
- 2448.1718: FileAttributes: 0x20
- 2448.1718: Size: 0x1b398
- 2448.1718: NT Headers: 0xc8
- 2448.1718: Timestamp: 0xf30abf31
- 2448.1718: Machine: 0x8664 - amd64
- 2448.1718: Timestamp: 0xf30abf31
- 2448.1718: Image Version: 10.0
- 2448.1718: SizeOfImage: 0x1c000 (114688)
- 2448.1718: Resource Dir: 0x1b000 LB 0x408
- 2448.1718: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
- 2448.1718: [Raw version resource data: 0x1b060 LB 0x3a8, codepage 0x0 (reserved 0x0)]
- 2448.1718: ProductName: Microsoft® Windows® Operating System
- 2448.1718: ProductVersion: 10.0.16299.15
- 2448.1718: FileVersion: 10.0.16299.15 (WinBuild.160101.0800)
- 2448.1718: FileDescription: ApiSet Schema DLL
- 2448.1718: NtOpenDirectoryObject failed on \Driver: 0xc0000022
- 2448.1718: supR3HardenedWinFindAdversaries: 0x0
- 2448.1718: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
- 2448.1718: Calling main()
- 2448.1718: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2
- 2448.1718: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
- 2448.1718: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
- 2448.1718: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe)
- 2448.1718: SUPR3HardenedMain: Respawn #2
- 2448.1718: supR3HardNtEnableThreadCreation:
- 2448.1718: '\Device\HarddiskVolume2\Windows\System32\ntdll.dll' has no imports
- 2448.1718: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\ntdll.dll)
- 2448.1718: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\ntdll.dll
- 2448.1718: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\ntdll.dll (Input=ntdll.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
- 2448.1718: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffddc0c0000 'C:\WINDOWS\System32\ntdll.dll'
- 2448.1718: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffddc139280 pvNtTerminateThread=00007ffddc160d10
- 2448.1718: supR3HardenedWinDoReSpawn(2): New child 498.1b04 [kernel32].
- 2448.1718: supR3HardenedWinReSpawn: NtSetInformationThread/ThreadHideFromDebugger failed: 0xc0000022 (harmless)
- 2448.1718: supR3HardNtChildGatherData: PebBaseAddress=0000000000e46000 cbPeb=0x388
- 2448.1718: supR3HardNtPuChFindNtdll: uNtDllParentAddr=00007ffddc0c0000 uNtDllChildAddr=00007ffddc0c0000
- 2448.1718: supR3HardenedWinSetupChildInit: uLdrInitThunk=00007ffddc139280
- 2448.1718: supR3HardenedWinSetupChildInit: Start child.
- 2448.1718: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 0 ms.
- 2448.1718: supR3HardNtChildPurify: Startup delay kludge #1/0: 266 ms, 17 sleeps
- 2448.1718: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
- 2448.1718: *0000000000000000-0000000000d1ffff 0x0001/0x0000 0x0000000
- 2448.1718: *0000000000d20000-0000000000d3ffff 0x0004/0x0004 0x0020000
- 2448.1718: *0000000000d40000-0000000000d58fff 0x0002/0x0002 0x0040000
- 2448.1718: 0000000000d59000-0000000000d5ffff 0x0001/0x0000 0x0000000
- 2448.1718: *0000000000d60000-0000000000d63fff 0x0002/0x0002 0x0040000
- 2448.1718: 0000000000d64000-0000000000d6ffff 0x0001/0x0000 0x0000000
- 2448.1718: *0000000000d70000-0000000000d70fff 0x0004/0x0004 0x0020000
- 2448.1718: 0000000000d71000-0000000000dfffff 0x0001/0x0000 0x0000000
- 2448.1718: *0000000000e00000-0000000000e45fff 0x0000/0x0004 0x0020000
- 2448.1718: 0000000000e46000-0000000000e48fff 0x0004/0x0004 0x0020000
- 2448.1718: 0000000000e49000-0000000000ffffff 0x0000/0x0004 0x0020000
- 2448.1718: *0000000001000000-00000000010fafff 0x0000/0x0004 0x0020000
- 2448.1718: 00000000010fb000-00000000010fdfff 0x0104/0x0004 0x0020000
- 2448.1718: 00000000010fe000-00000000010fffff 0x0004/0x0004 0x0020000
- 2448.1718: 0000000001100000-000000007ffdffff 0x0001/0x0000 0x0000000
- 2448.1718: *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000
- 2448.1718: *000000007ffe1000-000000007ffeffff 0x0000/0x0002 0x0020000
- 2448.1718: 000000007fff0000-00007ff73f28ffff 0x0001/0x0000 0x0000000
- 2448.1718: *00007ff73f290000-00007ff73f2b2fff 0x0002/0x0002 0x0040000
- 2448.1718: 00007ff73f2b3000-00007ff73fdbffff 0x0001/0x0000 0x0000000
- 2448.1718: *00007ff73fdc0000-00007ff73fdc0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
- 2448.1718: 00007ff73fdc1000-00007ff73fe30fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
- 2448.1718: 00007ff73fe31000-00007ff73fe31fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
- 2448.1718: 00007ff73fe32000-00007ff73fe76fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
- 2448.1718: 00007ff73fe77000-00007ff73fe77fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
- 2448.1718: 00007ff73fe78000-00007ff73fe78fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
- 2448.1718: 00007ff73fe79000-00007ff73fe7dfff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
- 2448.1718: 00007ff73fe7e000-00007ff73fe7efff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
- 2448.1718: 00007ff73fe7f000-00007ff73fe7ffff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
- 2448.1718: 00007ff73fe80000-00007ff73fe83fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
- 2448.1718: 00007ff73fe84000-00007ff73fecbfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
- 2448.1718: 00007ff73fecc000-00007ffddc0bffff 0x0001/0x0000 0x0000000
- 2448.1718: *00007ffddc0c0000-00007ffddc0c0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
- 2448.1718: 00007ffddc0c1000-00007ffddc1d2fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
- 2448.1718: 00007ffddc1d3000-00007ffddc218fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
- 2448.1718: 00007ffddc219000-00007ffddc220fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
- 2448.1718: 00007ffddc221000-00007ffddc22efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
- 2448.1718: 00007ffddc22f000-00007ffddc22ffff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
- 2448.1718: 00007ffddc230000-00007ffddc232fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
- 2448.1718: 00007ffddc233000-00007ffddc29ffff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
- 2448.1718: 00007ffddc2a0000-00007ffffffdffff 0x0001/0x0000 0x0000000
- 2448.1718: *00007ffffffe0000-00007ffffffeffff 0x0001/0x0002 0x0020000
- 2448.1718: VirtualBox.exe: timestamp 0x5903619d (rc=VINF_SUCCESS)
- 2448.1718: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
- 2448.1718: '\Device\HarddiskVolume2\Windows\System32\ntdll.dll' has no imports
- 2448.1718: supR3HardNtChildPurify: Done after 297 ms and 0 fixes (loop #0).
- 498.1b04: Log file opened: 5.1.22r115126 g_hStartupLog=0000000000000004 g_uNtVerCombined=0xa03fab00
- 498.1b04: supR3HardenedVmProcessInit: uNtDllAddr=00007ffddc0c0000 g_uNtVerCombined=0xa03fab00
- 2448.1718: supR3HardenedEarlyCompact: Removed heap 1 (0x00000000a00000 LB 0x400000)
- 498.1b04: ntdll.dll: timestamp 0xd826f10d (rc=VINF_SUCCESS)
- 2448.1718: supR3HardNtEnableThreadCreation:
- 498.1b04: New simple heap: #1 0000000001200000 LB 0x400000 (for 1966080 allocation)
- 498.1b04: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
- 498.1b04: System32: \Device\HarddiskVolume2\Windows\System32
- 498.1b04: WinSxS: \Device\HarddiskVolume2\Windows\WinSxS
- 498.1b04: KnownDllPath: C:\WINDOWS\System32
- 498.1b04: supR3HardenedVmProcessInit: Opening vboxdrv...
- 498.1b04: supR3HardenedVmProcessInit: Restoring LdrInitializeThunk...
- 498.1b04: supR3HardenedVmProcessInit: Returning to LdrInitializeThunk...
- 498.1b04: Registered Dll notification callback with NTDLL.
- 498.1b04: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\kernel32.dll)
- 498.1b04: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\kernel32.dll
- 498.1b04: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\KERNEL32.DLL (Input=KERNEL32.DLL, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000004001:<flags> [calling]
- 498.1b04: supR3HardenedDllNotificationCallback: load 00007ffdd8d00000 LB 0x00266000 C:\WINDOWS\System32\KERNELBASE.dll [fFlags=0x0]
- 498.1b04: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\KernelBase.dll)
- 498.1b04: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\KernelBase.dll
- 498.1b04: supR3HardenedDllNotificationCallback: load 00007ffddbfe0000 LB 0x000ae000 C:\WINDOWS\System32\KERNEL32.DLL [fFlags=0x0]
- 498.1b04: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffddbfe0000 'C:\WINDOWS\System32\KERNEL32.DLL'
- 498.1b04: supR3HardenedDllNotificationCallback: load 00007ff73fdc0000 LB 0x0010c000 C:\Program Files\Oracle\VirtualBox\VirtualBox.exe [fFlags=0x0]
- 498.1b04: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
- 498.1b04: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe)
- 498.1b04: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
- 498.1b04: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffddc139280 pvNtTerminateThread=00007ffddc160d10
- 2448.1718: supR3HardNtChildWaitFor: Found expected request 1 (CloseEvents) after 141 ms.
- 498.1b04: \SystemRoot\System32\ntdll.dll:
- 498.1b04: CreationTime: 2018-05-15T14:25:58.589093600Z
- 498.1b04: LastWriteTime: 2018-05-15T14:25:58.589093600Z
- 498.1b04: ChangeTime: 2018-05-15T14:28:25.770600600Z
- 498.1b04: FileAttributes: 0x20
- 498.1b04: Size: 0x1dd108
- 498.1b04: NT Headers: 0xe0
- 498.1b04: Timestamp: 0xd826f10d
- 498.1b04: Machine: 0x8664 - amd64
- 498.1b04: Timestamp: 0xd826f10d
- 498.1b04: Image Version: 10.0
- 498.1b04: SizeOfImage: 0x1e0000 (1966080)
- 498.1b04: Resource Dir: 0x174000 LB 0x6a1d8
- 498.1b04: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
- 498.1b04: [Raw version resource data: 0x1740f0 LB 0x380, codepage 0x0 (reserved 0x0)]
- 498.1b04: ProductName: Microsoft® Windows® Operating System
- 498.1b04: ProductVersion: 10.0.16299.402
- 498.1b04: FileVersion: 10.0.16299.402 (WinBuild.160101.0800)
- 498.1b04: FileDescription: NT Layer DLL
- 498.1b04: \SystemRoot\System32\kernel32.dll:
- 498.1b04: CreationTime: 2018-05-15T14:25:54.745155000Z
- 498.1b04: LastWriteTime: 2018-05-15T14:25:54.745155000Z
- 498.1b04: ChangeTime: 2018-05-15T13:40:52.869194100Z
- 498.1b04: FileAttributes: 0x20
- 498.1b04: Size: 0xab868
- 498.1b04: NT Headers: 0xe8
- 498.1b04: Timestamp: 0x309fae94
- 498.1b04: Machine: 0x8664 - amd64
- 498.1b04: Timestamp: 0x309fae94
- 498.1b04: Image Version: 10.0
- 498.1b04: SizeOfImage: 0xae000 (712704)
- 498.1b04: Resource Dir: 0xac000 LB 0x520
- 498.1b04: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
- 498.1b04: [Raw version resource data: 0xac0b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
- 498.1b04: ProductName: Microsoft® Windows® Operating System
- 498.1b04: ProductVersion: 10.0.16299.431
- 498.1b04: FileVersion: 10.0.16299.431 (WinBuild.160101.0800)
- 498.1b04: FileDescription: Windows NT BASE API Client DLL
- 498.1b04: \SystemRoot\System32\KernelBase.dll:
- 498.1b04: CreationTime: 2018-05-15T14:25:58.557842400Z
- 498.1b04: LastWriteTime: 2018-05-15T14:25:58.557842400Z
- 498.1b04: ChangeTime: 2018-05-15T13:40:53.107051900Z
- 498.1b04: FileAttributes: 0x20
- 498.1b04: Size: 0x265c00
- 498.1b04: NT Headers: 0xf0
- 498.1b04: Timestamp: 0xde35406a
- 498.1b04: Machine: 0x8664 - amd64
- 498.1b04: Timestamp: 0xde35406a
- 498.1b04: Image Version: 10.0
- 498.1b04: SizeOfImage: 0x266000 (2514944)
- 498.1b04: Resource Dir: 0x245000 LB 0x548
- 498.1b04: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
- 498.1b04: [Raw version resource data: 0x2450b0 LB 0x3bc, codepage 0x0 (reserved 0x0)]
- 498.1b04: ProductName: Microsoft® Windows® Operating System
- 498.1b04: ProductVersion: 10.0.16299.402
- 498.1b04: FileVersion: 10.0.16299.402 (WinBuild.160101.0800)
- 498.1b04: FileDescription: Windows NT BASE API Client DLL
- 498.1b04: \SystemRoot\System32\apisetschema.dll:
- 498.1b04: CreationTime: 2017-09-29T13:42:07.095026600Z
- 498.1b04: LastWriteTime: 2017-09-29T13:42:07.095026600Z
- 498.1b04: ChangeTime: 2018-05-22T18:30:13.082287000Z
- 498.1b04: FileAttributes: 0x20
- 498.1b04: Size: 0x1b398
- 498.1b04: NT Headers: 0xc8
- 498.1b04: Timestamp: 0xf30abf31
- 498.1b04: Machine: 0x8664 - amd64
- 498.1b04: Timestamp: 0xf30abf31
- 498.1b04: Image Version: 10.0
- 498.1b04: SizeOfImage: 0x1c000 (114688)
- 498.1b04: Resource Dir: 0x1b000 LB 0x408
- 498.1b04: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
- 498.1b04: [Raw version resource data: 0x1b060 LB 0x3a8, codepage 0x0 (reserved 0x0)]
- 498.1b04: ProductName: Microsoft® Windows® Operating System
- 498.1b04: ProductVersion: 10.0.16299.15
- 498.1b04: FileVersion: 10.0.16299.15 (WinBuild.160101.0800)
- 498.1b04: FileDescription: ApiSet Schema DLL
- 498.1b04: NtOpenDirectoryObject failed on \Driver: 0xc0000022
- 498.1b04: supR3HardenedWinFindAdversaries: 0x0
- 498.1b04: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
- 498.1b04: Calling main()
- 498.1b04: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2
- 498.1b04: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
- 498.1b04: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
- 498.1b04: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe)
- 498.1b04: SUPR3HardenedMain: Final process, opening VBoxDrv...
- 498.1b04: supR3HardenedEarlyCompact: Removed heap 1 (0x00000001200000 LB 0x400000)
- 498.1b04: supR3HardNtEnableThreadCreation:
- 498.1b04: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSupLib.dll)
- 498.1b04: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSupLib.dll
- 498.1b04: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
- 498.1b04: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedDllNotificationCallback: load 00007ffdd1960000 LB 0x00005000 C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL [fFlags=0x0]
- 498.1b04: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
- 498.1b04: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdd1960000 'C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL'
- 498.1b04: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
- 498.1b04: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdd1960000 'C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL'
- 498.1b04: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdd1960000 'C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL'
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msasn1.dll'.
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'crypt32.dll'.
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27 'rpcrt4.dll'.
- 498.1b04: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\wintrust.dll)
- 498.1b04: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\wintrust.dll
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll)
- 498.1b04: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'crypt32.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'crypt32.dll' -> '\Device\HarddiskVolume2\Windows\System32\crypt32.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #33 'msasn1.dll'.
- 498.1b04: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\crypt32.dll)
- 498.1b04: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\crypt32.dll
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msasn1.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'msasn1.dll' -> '\Device\HarddiskVolume2\Windows\System32\msasn1.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\msasn1.dll)
- 498.1b04: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\msasn1.dll
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\msvcrt.dll)
- 498.1b04: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\msvcrt.dll
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msasn1.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'msasn1.dll' -> '\Device\HarddiskVolume2\Windows\System32\msasn1.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msasn1.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\Wintrust.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
- 498.1b04: supR3HardenedDllNotificationCallback: load 00007ffdd9690000 LB 0x0009d000 C:\WINDOWS\System32\msvcrt.dll [fFlags=0x0]
- 498.1b04: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedDllNotificationCallback: load 00007ffdd8410000 LB 0x00012000 C:\WINDOWS\System32\MSASN1.dll [fFlags=0x0]
- 498.1b04: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msasn1.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedDllNotificationCallback: load 00007ffdd9490000 LB 0x000f6000 C:\WINDOWS\System32\ucrtbase.dll [fFlags=0x0]
- 498.1b04: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\ucrtbase.dll)
- 498.1b04: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\ucrtbase.dll
- 498.1b04: supR3HardenedDllNotificationCallback: load 00007ffdd9170000 LB 0x001ce000 C:\WINDOWS\System32\CRYPT32.dll [fFlags=0x0]
- 498.1b04: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedDllNotificationCallback: load 00007ffddace0000 LB 0x0011f000 C:\WINDOWS\System32\RPCRT4.dll [fFlags=0x0]
- 498.1b04: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedDllNotificationCallback: load 00007ffdd9590000 LB 0x0005b000 C:\WINDOWS\System32\sechost.dll [fFlags=0x0]
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'rpcrt4.dll'.
- 498.1b04: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\sechost.dll)
- 498.1b04: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\sechost.dll
- 498.1b04: supR3HardenedDllNotificationCallback: load 00007ffddb1d0000 LB 0x000a1000 C:\WINDOWS\System32\advapi32.dll [fFlags=0x0]
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'sechost.dll'.
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27 'rpcrt4.dll'.
- 498.1b04: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\advapi32.dll)
- 498.1b04: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\advapi32.dll
- 498.1b04: supR3HardenedDllNotificationCallback: load 00007ffdd9110000 LB 0x00058000 C:\WINDOWS\System32\Wintrust.dll [fFlags=0x0]
- 498.1b04: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
- 498.1b04: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdd8d00000 'api-ms-win-core-synch-l1-2-0'
- 498.1b04: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
- 498.1b04: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdd8d00000 'api-ms-win-core-fibers-l1-1-1'
- 498.1b04: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
- 498.1b04: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdd8d00000 'api-ms-win-core-fibers-l1-1-1'
- 498.1b04: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
- 498.1b04: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdd8d00000 'api-ms-win-core-synch-l1-2-0'
- 498.1b04: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-l1-2-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
- 498.1b04: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdd8d00000 'api-ms-win-core-localization-l1-2-1'
- 498.1b04: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdd9110000 'C:\WINDOWS\system32\Wintrust.dll'
- 498.1b04: supHardenedWinVerifyImageByHandle: -> -626 (\Device\HarddiskVolume2\Windows\System32\bcrypt.dll)
- 498.1b04: Error (rc=0):
- 498.1b04: supR3HardenedScreenImage/LdrLoadDll: rc=Unknown Status -626 (0xfffffd8e) fImage=1 fProtect=0x0 fAccess=0x0 \Device\HarddiskVolume2\Windows\System32\bcrypt.dll: Grown load config (244 to 256 bytes) includes non-zero bytes: 00 00 00 00 60 a9 01 80 01 00 00 00
- 498.1b04: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\bcrypt.dll
- 498.1b04: Error (rc=0):
- 498.1b04: supR3HardenedMonitor_LdrLoadDll: rejecting 'C:\WINDOWS\system32\bcrypt.dll' (C:\WINDOWS\system32\bcrypt.dll): rcNt=0xc0000190
- 498.1b04: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000190 'C:\WINDOWS\system32\bcrypt.dll'
- 498.1b04: Warning! Failed to load bcrypt.dll
- 498.1b04: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'sechost.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'sechost.dll' -> '\Device\HarddiskVolume2\Windows\System32\sechost.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\sechost.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\WINTRUST.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
- 498.1b04: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdd9110000 'C:\Windows\System32\WINTRUST.DLL'
- 498.1b04: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\WINTRUST.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
- 498.1b04: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdd9110000 'C:\Windows\System32\WINTRUST.DLL'
- 498.1b04: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\WINTRUST.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
- 498.1b04: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdd9110000 'C:\Windows\System32\WINTRUST.DLL'
- 498.1b04: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\WINTRUST.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
- 498.1b04: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdd9110000 'C:\Windows\System32\WINTRUST.DLL'
- 498.1b04: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\WINTRUST.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
- 498.1b04: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdd9110000 'C:\Windows\System32\WINTRUST.DLL'
- 498.1b04: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\WINTRUST.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
- 498.1b04: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdd9110000 'C:\Windows\System32\WINTRUST.DLL'
- 498.1b04: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\WINTRUST.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
- 498.1b04: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdd9110000 'C:\Windows\System32\WINTRUST.DLL'
- 498.1b04: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\cryptsp.dll)
- 498.1b04: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\cryptsp.dll
- 498.1b04: supR3HardenedDllNotificationCallback: load 00007ffdd7e10000 LB 0x00017000 C:\WINDOWS\SYSTEM32\CRYPTSP.dll [fFlags=0x0]
- 498.1b04: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\cryptsp.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'bcrypt.dll'.
- 498.1b04: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\rsaenh.dll)
- 498.1b04: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\rsaenh.dll
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcrypt.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcrypt.dll' -> '\Device\HarddiskVolume2\Windows\System32\bcrypt.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedScreenImage/Imports: cache hit (Unknown Status -626 (0xfffffd8e)) on \Device\HarddiskVolume2\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
- 498.1b04: Error (rc=0):
- 498.1b04: supR3HardenedScreenImage/Imports: cached rc=Unknown Status -626 (0xfffffd8e) fImage=1 fProtect=0x0 fAccess=0x0 cHits=1 \Device\HarddiskVolume2\Windows\System32\bcrypt.dll
- 498.1b04: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
- 498.1b04: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status -626 (0xfffffd8e)) on \Device\HarddiskVolume2\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
- 498.1b04: Error (rc=0):
- 498.1b04: supR3HardenedScreenImage/NtCreateSection: cached rc=Unknown Status -626 (0xfffffd8e) fImage=1 fProtect=0x10 fAccess=0xf cHits=2 \Device\HarddiskVolume2\Windows\System32\bcrypt.dll
- 498.1b04: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000190 'C:\WINDOWS\system32\rsaenh.dll'
- 498.1b04: supR3HardNtViCallWinVerifyTrust: WinVerifyTrust failed with 0x8 (<NULL>) on '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe'
- 498.1b04: Error -22919 in VirtualBox! (enmWhat=1)
- 498.1b04: WinVerifyTrust failed on stub executable: WinVerifyTrust failed with hrc=Unknown Status 0x8 on '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe'
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'opengl32.dll'.
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'msvcp100.dll'.
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcr100.dll'.
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'.
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'qt5guivbox.dll'.
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'qt5widgetsvbox.dll'.
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'qt5printsupportvbox.dll'.
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'qt5openglvbox.dll'.
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'user32.dll'.
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'advapi32.dll'.
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'shell32.dll'.
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'ole32.dll'.
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'oleaut32.dll'.
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #15 'winmm.dll'.
- 498.1b04: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.dll)
- 498.1b04: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.dll
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume2\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'winmmbase.dll'.
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'msvcrt.dll'.
- 498.1b04: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\winmm.dll)
- 498.1b04: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\winmm.dll
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume2\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'combase.dll'.
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #23 'rpcrt4.dll'.
- 498.1b04: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\oleaut32.dll)
- 498.1b04: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\oleaut32.dll
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #22 'rpcrt4.dll'.
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #46 'gdi32.dll'.
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #47 'user32.dll'.
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #48 'combase.dll'.
- 498.1b04: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\ole32.dll)
- 498.1b04: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\ole32.dll
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume2\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #73 'user32.dll'.
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #75 'gdi32.dll'.
- 498.1b04: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\shell32.dll)
- 498.1b04: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\shell32.dll
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'win32u.dll'.
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'gdi32.dll'.
- 498.1b04: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\user32.dll)
- 498.1b04: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\user32.dll
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5openglvbox.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5openglvbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5openglvbox.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'qt5widgetsvbox.dll'.
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'qt5guivbox.dll'.
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5corevbox.dll'.
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcr100.dll'.
- 498.1b04: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll)
- 498.1b04: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5printsupportvbox.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5printsupportvbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5printsupportvbox.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5widgetsvbox.dll'.
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5guivbox.dll'.
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'.
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'winspool.drv'.
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'comdlg32.dll'.
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcr100.dll'.
- 498.1b04: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll)
- 498.1b04: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5guivbox.dll'.
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5corevbox.dll'.
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'shell32.dll'.
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
- 498.1b04: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll)
- 498.1b04: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'ole32.dll'.
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'opengl32.dll'.
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'.
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
- 498.1b04: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll)
- 498.1b04: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'shell32.dll'.
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ole32.dll'.
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'advapi32.dll'.
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ws2_32.dll'.
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'mpr.dll'.
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcp100.dll'.
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'msvcr100.dll'.
- 498.1b04: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll)
- 498.1b04: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll)
- 498.1b04: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
- 498.1b04: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll)
- 498.1b04: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ws2_32.dll'.
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'rpcrt4.dll'.
- 498.1b04: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll)
- 498.1b04: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume2\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'advapi32.dll'.
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'gdi32.dll'.
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'glu32.dll'.
- 498.1b04: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\opengl32.dll)
- 498.1b04: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\opengl32.dll
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'glu32.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'glu32.dll' -> '\Device\HarddiskVolume2\Windows\System32\glu32.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'opengl32.dll'.
- 498.1b04: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\glu32.dll)
- 498.1b04: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\glu32.dll
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\gdi32.dll)
- 498.1b04: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\gdi32.dll
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'rpcrt4.dll'.
- 498.1b04: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\ws2_32.dll)
- 498.1b04: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\ws2_32.dll
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mpr.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'mpr.dll' -> '\Device\HarddiskVolume2\Windows\System32\mpr.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\mpr.dll)
- 498.1b04: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\mpr.dll
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ws2_32.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ole32.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume2\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\shell32.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume2\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ole32.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume2\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\shell32.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'comdlg32.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'comdlg32.dll' -> '\Device\HarddiskVolume2\Windows\System32\comdlg32.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'user32.dll'.
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #37 'shlwapi.dll'.
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #38 'gdi32.dll'.
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #39 'comctl32.dll'.
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #40 'shell32.dll'.
- 498.1b04: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\comdlg32.dll)
- 498.1b04: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\comdlg32.dll
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winspool.drv'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'winspool.drv' -> '\Device\HarddiskVolume2\Windows\System32\winspool.drv' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #25 'iphlpapi.dll'.
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'bcrypt.dll'.
- 498.1b04: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\winspool.drv)
- 498.1b04: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\winspool.drv
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume2\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
- 498.1b04: '\Device\HarddiskVolume2\Windows\System32\win32u.dll' has no imports
- 498.1b04: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\win32u.dll)
- 498.1b04: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\win32u.dll
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume2\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #45 'bcryptprimitives.dll'.
- 498.1b04: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\combase.dll)
- 498.1b04: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\combase.dll
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume2\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\combase.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll)
- 498.1b04: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\msvcp_win.dll
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmmbase.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmmbase.dll' -> '\Device\HarddiskVolume2\Windows\System32\winmmbase.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
- 498.1b04: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\winmmbase.dll)
- 498.1b04: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\winmmbase.dll
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume2\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supHardenedWinVerifyImageByHandle: -> -626 (\Device\HarddiskVolume2\Windows\System32\bcryptprimitives.dll)
- 498.1b04: Error (rc=0):
- 498.1b04: supR3HardenedScreenImage/Imports: rc=Unknown Status -626 (0xfffffd8e) fImage=1 fProtect=0x0 fAccess=0x0 \Device\HarddiskVolume2\Windows\System32\bcryptprimitives.dll: Grown load config (244 to 256 bytes) includes non-zero bytes: 00 00 00 00 40 16 06 80 01 00 00 00
- 498.1b04: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\bcryptprimitives.dll
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcrypt.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcrypt.dll' -> '\Device\HarddiskVolume2\Windows\System32\bcrypt.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedScreenImage/Imports: cache hit (Unknown Status -626 (0xfffffd8e)) on \Device\HarddiskVolume2\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
- 498.1b04: Error (rc=0):
- 498.1b04: supR3HardenedScreenImage/Imports: cached rc=Unknown Status -626 (0xfffffd8e) fImage=1 fProtect=0x0 fAccess=0x0 cHits=3 \Device\HarddiskVolume2\Windows\System32\bcrypt.dll
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'iphlpapi.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'iphlpapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\iphlpapi.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\IPHLPAPI.DLL)
- 498.1b04: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\IPHLPAPI.DLL
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume2\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\shell32.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'comctl32.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'comctl32.dll' -> '\Device\HarddiskVolume2\Windows\System32\comctl32.dll' [rcNtRedir=0x0]
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'advapi32.dll'.
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
- 498.1b04: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\comctl32.dll)
- 498.1b04: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\comctl32.dll
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shlwapi.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'shlwapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\shlwapi.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'.
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #45 'gdi32.dll'.
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #46 'user32.dll'.
- 498.1b04: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\shlwapi.dll)
- 498.1b04: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\shlwapi.dll
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume2\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
- 498.1b04: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
- 498.1b04: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VirtualBox.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000a01:<flags> [calling]
- 498.1b04: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winmm.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\glu32.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\mpr.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\winspool.drv [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'advapi32.dll'.
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
- 498.1b04: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
- 498.1b04: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.16299.431_none_887985224abb0026\comctl32.dll)
- 498.1b04: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.16299.431_none_887985224abb0026\comctl32.dll
- 498.1b04: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winmmbase.dll [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\IPHLPAPI.DLL [lacks WinVerifyTrust]
- 498.1b04: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status -626 (0xfffffd8e)) on \Device\HarddiskVolume2\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
- 498.1b04: Error (rc=0):
- 498.1b04: supR3HardenedScreenImage/NtCreateSection: cached rc=Unknown Status -626 (0xfffffd8e) fImage=1 fProtect=0x10 fAccess=0xf cHits=4 \Device\HarddiskVolume2\Windows\System32\bcrypt.dll
- 498.1b04: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000190 'C:\Program Files\Oracle\VirtualBox\VirtualBox.dll'
- 2448.1718: supR3HardNtChildWaitFor[2]: Quitting: ExitCode=0x1 (rcNtWait=0x0, rcNt1=0x0, rcNt2=0x103, rcNt3=0x103, 797 ms, the end);
- 1188.1700: supR3HardNtChildWaitFor[1]: Quitting: ExitCode=0x1 (rcNtWait=0x0, rcNt1=0x0, rcNt2=0x103, rcNt3=0x103, 1359 ms, the end);
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement