I had a Windows Update run a couple of days ago. I'm not sure if that
caused any issues but not when I try to start vagrant via the command
'homestead up' the VM in Virtual Box fails.
When I run 'homestead up' I get the following error:
There was an error while executing `VBoxManage`, a CLI used by Vagrant
> for controlling VirtualBox. The command and stderr is shown below.
> Command: ["startvm", "a90c4e9f-2d31-4ce7-8948-4e6ef3874fcc", "--type",
> "headless"]
> Stderr: VBoxManage.exe: error: The virtual machine 'homestead' has
> terminated unexpectedly during startup with exit code 1 (0x1). More
> details may be available in 'C:\Users\ME\VirtualBox
> VMs\homestead\Logs\VBoxHardening.log'
> VBoxManage.exe: error: Details: code E_FAIL (0x80004005), component
> MachineWrap, interface IMachine
When I attempt to run my VM in Virtual Box the log outputs the following
error/s. Any ideas what the problem is and how I can resolve it?
Result Code:
> E_FAIL (0x80004005)
> Component:
> MachineWrap
> Interface:
> IMachine {b2547866-a0a1-4391-8b86-6952d82efaa0}
Below are the last few lines of my log found in: C:\Users\ME\VirtualBox
VMs\homestead\Logs\VBoxHardening.log. The full log file is attached to this
post. Any advice would be extremely helpful.
2b60.b50: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on
> \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
> 2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
> 'advapi32.dll'...
> 2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' ->
> '\Device\HarddiskVolume4\Windows\System32\advapi32.dll'
> [rcNtRedir=0xc0150008]
> 2b60.b50: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on
> \Device\HarddiskVolume4\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
> 2b60.b50: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program
> Files\Oracle\VirtualBox\VirtualBox.dll (rcNtResolve=0xc0150008)
> *pfFlags=0x0 pwszSearchPath=0000000000000a01:<flags> [calling]
> 2b60.b50: supR3HardenedScreenImage/NtCreateSection: cache hit
> (VINF_SUCCESS) on \Device\HarddiskVolume4\Program
> Files\Oracle\VirtualBox\VirtualBox.dll [lacks WinVerifyTrust]
> 2b60.b50: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown
> Status 22900 (0x5974)) on
> \Device\HarddiskVolume4\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
> 2b60.b50: supR3HardenedScreenImage/NtCreateSection: cache hit
> (VINF_SUCCESS) on \Device\HarddiskVolume4\Program
> Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
> 2b60.b50: supR3HardenedScreenImage/NtCreateSection: cache hit
> (VINF_SUCCESS) on \Device\HarddiskVolume4\Program
> Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
> 2b60.b50: supR3HardenedScreenImage/NtCreateSection: cache hit
> (VINF_SUCCESS) on \Device\HarddiskVolume4\Program
> Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
> 2b60.b50: supR3HardenedScreenImage/NtCreateSection: cache hit
> (VINF_SUCCESS) on \Device\HarddiskVolume4\Program
> Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
> 2b60.b50: supR3HardenedScreenImage/NtCreateSection: cache hit
> (VINF_SUCCESS) on \Device\HarddiskVolume4\Program
> Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
> 2b60.b50: supR3HardenedScreenImage/NtCreateSection: cache hit
> (VINF_SUCCESS) on \Device\HarddiskVolume4\Program
> Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
> 2b60.b50: supR3HardenedScreenImage/NtCreateSection: cache hit
> (VINF_SUCCESS) on \Device\HarddiskVolume4\Program
> Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll [lacks WinVerifyTrust]
> 2b60.b50: supR3HardenedScreenImage/NtCreateSection: cache hit
> (VINF_SUCCESS) on \Device\HarddiskVolume4\Program
> Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll [lacks WinVerifyTrust]
> 2b60.b50: supR3HardenedScreenImage/NtCreateSection: cache hit
> (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\winmm.dll [lacks
> WinVerifyTrust]
> 2b60.b50: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown
> Status 22900 (0x5974)) on
> \Device\HarddiskVolume4\Windows\System32\glu32.dll [lacks WinVerifyTrust]
> 2b60.b50: supR3HardenedScreenImage/NtCreateSection: cache hit
> (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\mpr.dll [lacks
> WinVerifyTrust]
> 2b60.b50: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown
> Status 22900 (0x5974)) on
> \Device\HarddiskVolume4\Windows\System32\winspool.drv [lacks WinVerifyTrust]
> 2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1
> 'advapi32.dll'.
> 2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2
> 'gdi32.dll'.
> 2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4
> 'user32.dll'.
> 2b60.b50: supHardenedWinVerifyImageByHandle: -> 0
> (\Device\HarddiskVolume4\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.16299.125_none_88782a244abc4c60\comctl32.dll)
> 2b60.b50: supR3HardenedWinVerifyCacheInsert:
> \Device\HarddiskVolume4\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.16299.125_none_88782a244abc4c60\comctl32.dll
> 2b60.b50: supR3HardenedScreenImage/NtCreateSection: cache hit
> (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\winmmbase.dll
> [lacks WinVerifyTrust]
> 2b60.b50: supR3HardenedScreenImage/NtCreateSection: cache hit
> (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\IPHLPAPI.DLL
> [lacks WinVerifyTrust]
> 2b60.b50: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown
> Status -626 (0xfffffd8e)) on
> \Device\HarddiskVolume4\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
> 2b60.b50: Error (rc=0):
> 2b60.b50: supR3HardenedScreenImage/NtCreateSection: cached rc=Unknown
> Status -626 (0xfffffd8e) fImage=1 fProtect=0x10 fAccess=0xf cHits=4
> \Device\HarddiskVolume4\Windows\System32\bcrypt.dll
> 2b60.b50: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000190
> 'C:\Program Files\Oracle\VirtualBox\VirtualBox.dll'
> b5c.1260: supR3HardNtChildWaitFor[2]: Quitting: ExitCode=0x1
> (rcNtWait=0x0, rcNt1=0x0, rcNt2=0x103, rcNt3=0x103, 1673 ms, the end);
> 35e4.4170: supR3HardNtChildWaitFor[1]: Quitting: ExitCode=0x1
> (rcNtWait=0x0, rcNt1=0x0, rcNt2=0x103, rcNt3=0x103, 2308 ms, the end);
--
This mailing list is governed under the HashiCorp Community Guidelines -
https://www.hashicorp.com/community-guidelines.html. Behavior in violation of
those guidelines may result in your removal from this mailing list.
GitHub Issues: https://github.com/mitchellh/vagrant/issues
IRC: #vagrant on Freenode
---
You received this message because you are subscribed to the Google Groups
"Vagrant" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/vagrant-up/111eeb73-abc0-451b-93cd-a76e1c9248c3%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
35e4.4170: Log file opened: 5.1.14r112924 g_hStartupLog=0000000000000068
g_uNtVerCombined=0xa03fab00
35e4.4170: \SystemRoot\System32\ntdll.dll:
35e4.4170: CreationTime: 2017-12-14T01:38:42.747098400Z
35e4.4170: LastWriteTime: 2017-12-14T01:38:42.762724400Z
35e4.4170: ChangeTime: 2018-04-15T10:18:20.543215800Z
35e4.4170: FileAttributes: 0x20
35e4.4170: Size: 0x1dd100
35e4.4170: NT Headers: 0xe0
35e4.4170: Timestamp: 0x493793ea
35e4.4170: Machine: 0x8664 - amd64
35e4.4170: Timestamp: 0x493793ea
35e4.4170: Image Version: 10.0
35e4.4170: SizeOfImage: 0x1e0000 (1966080)
35e4.4170: Resource Dir: 0x174000 LB 0x6a1d8
35e4.4170: ProductName: Microsoft® Windows® Operating System
35e4.4170: ProductVersion: 10.0.16299.64
35e4.4170: FileVersion: 10.0.16299.64 (WinBuild.160101.0800)
35e4.4170: FileDescription: NT Layer DLL
35e4.4170: \SystemRoot\System32\kernel32.dll:
35e4.4170: CreationTime: 2017-09-29T13:42:04.954227600Z
35e4.4170: LastWriteTime: 2017-09-29T13:42:04.954227600Z
35e4.4170: ChangeTime: 2018-04-14T16:28:06.249793600Z
35e4.4170: FileAttributes: 0x20
35e4.4170: Size: 0xab868
35e4.4170: NT Headers: 0xe8
35e4.4170: Timestamp: 0xc2cf900
35e4.4170: Machine: 0x8664 - amd64
35e4.4170: Timestamp: 0xc2cf900
35e4.4170: Image Version: 10.0
35e4.4170: SizeOfImage: 0xae000 (712704)
35e4.4170: Resource Dir: 0xac000 LB 0x520
35e4.4170: ProductName: Microsoft® Windows® Operating System
35e4.4170: ProductVersion: 10.0.16299.15
35e4.4170: FileVersion: 10.0.16299.15 (WinBuild.160101.0800)
35e4.4170: FileDescription: Windows NT BASE API Client DLL
35e4.4170: \SystemRoot\System32\KernelBase.dll:
35e4.4170: CreationTime: 2017-09-29T13:41:43.124345500Z
35e4.4170: LastWriteTime: 2017-09-29T13:41:43.124345500Z
35e4.4170: ChangeTime: 2018-04-14T16:28:06.562985700Z
35e4.4170: FileAttributes: 0x20
35e4.4170: Size: 0x266000
35e4.4170: NT Headers: 0xf0
35e4.4170: Timestamp: 0x4736733c
35e4.4170: Machine: 0x8664 - amd64
35e4.4170: Timestamp: 0x4736733c
35e4.4170: Image Version: 10.0
35e4.4170: SizeOfImage: 0x266000 (2514944)
35e4.4170: Resource Dir: 0x245000 LB 0x548
35e4.4170: ProductName: Microsoft® Windows® Operating System
35e4.4170: ProductVersion: 10.0.16299.15
35e4.4170: FileVersion: 10.0.16299.15 (WinBuild.160101.0800)
35e4.4170: FileDescription: Windows NT BASE API Client DLL
35e4.4170: \SystemRoot\System32\apisetschema.dll:
35e4.4170: CreationTime: 2017-09-29T13:42:07.095026600Z
35e4.4170: LastWriteTime: 2017-09-29T13:42:07.095026600Z
35e4.4170: ChangeTime: 2018-04-15T10:18:20.558861000Z
35e4.4170: FileAttributes: 0x20
35e4.4170: Size: 0x1b398
35e4.4170: NT Headers: 0xc8
35e4.4170: Timestamp: 0xf30abf31
35e4.4170: Machine: 0x8664 - amd64
35e4.4170: Timestamp: 0xf30abf31
35e4.4170: Image Version: 10.0
35e4.4170: SizeOfImage: 0x1c000 (114688)
35e4.4170: Resource Dir: 0x1b000 LB 0x408
35e4.4170: ProductName: Microsoft® Windows® Operating System
35e4.4170: ProductVersion: 10.0.16299.15
35e4.4170: FileVersion: 10.0.16299.15 (WinBuild.160101.0800)
35e4.4170: FileDescription: ApiSet Schema DLL
35e4.4170: NtOpenDirectoryObject failed on \Driver: 0xc0000022
35e4.4170: supR3HardenedWinFindAdversaries: 0x0
35e4.4170: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume4\Program
Files\Oracle\VirtualBox'
35e4.4170: Calling main()
35e4.4170: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2
35e4.4170: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume4\Program
Files\Oracle\VirtualBox'
35e4.4170: SUPR3HardenedMain: Respawn #1
35e4.4170: System32: \Device\HarddiskVolume4\Windows\System32
35e4.4170: WinSxS: \Device\HarddiskVolume4\Windows\WinSxS
35e4.4170: KnownDllPath: C:\WINDOWS\System32
35e4.4170: '\Device\HarddiskVolume4\Program
Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
35e4.4170: supHardenedWinVerifyImageByHandle: -> 0
(\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe)
35e4.4170: supR3HardNtEnableThreadCreation:
35e4.4170: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ff8046e91b0
pvNtTerminateThread=00007ff804710890
35e4.4170: supR3HardenedWinDoReSpawn(1): New child b5c.1260 [kernel32].
35e4.4170: supR3HardNtChildGatherData: PebBaseAddress=0000000000861000
cbPeb=0x388
35e4.4170: supR3HardNtPuChFindNtdll: uNtDllParentAddr=00007ff804670000
uNtDllChildAddr=00007ff804670000
35e4.4170: supR3HardenedWinSetupChildInit: uLdrInitThunk=00007ff8046e91b0
35e4.4170: supR3HardenedWinSetupChildInit: Start child.
35e4.4170: supR3HardNtChildWaitFor: Found expected request 0
(PurifyChildAndCloseHandles) after 1 ms.
35e4.4170: supR3HardNtChildPurify: Startup delay kludge #1/0: 260 ms, 14 sleeps
35e4.4170: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
35e4.4170: *0000000000000000-ffffffffff81ffff 0x0001/0x0000 0x0000000
35e4.4170: *00000000007e0000-00000000007bffff 0x0004/0x0004 0x0020000
35e4.4170: *0000000000800000-000000000079efff 0x0000/0x0004 0x0020000
35e4.4170: 0000000000861000-000000000085dfff 0x0004/0x0004 0x0020000
35e4.4170: 0000000000864000-00000000006c7fff 0x0000/0x0004 0x0020000
35e4.4170: *0000000000a00000-00000000009e6fff 0x0002/0x0002 0x0040000
35e4.4170: 0000000000a19000-0000000000a11fff 0x0001/0x0000 0x0000000
35e4.4170: *0000000000a20000-0000000000924fff 0x0000/0x0004 0x0020000
35e4.4170: 0000000000b1b000-0000000000b17fff 0x0104/0x0004 0x0020000
35e4.4170: 0000000000b1e000-0000000000b1bfff 0x0004/0x0004 0x0020000
35e4.4170: *0000000000b20000-0000000000b1bfff 0x0002/0x0002 0x0040000
35e4.4170: 0000000000b24000-0000000000b17fff 0x0001/0x0000 0x0000000
35e4.4170: *0000000000b30000-0000000000b2efff 0x0004/0x0004 0x0020000
35e4.4170: 0000000000b31000-ffffffff81681fff 0x0001/0x0000 0x0000000
35e4.4170: *000000007ffe0000-000000007ffdefff 0x0002/0x0002 0x0020000
35e4.4170: *000000007ffe1000-000000007ffd1fff 0x0000/0x0002 0x0020000
35e4.4170: 000000007fff0000-ffff8009e0eaffff 0x0001/0x0000 0x0000000
35e4.4170: *00007ff71f130000-00007ff71f10cfff 0x0002/0x0002 0x0040000
35e4.4170: 00007ff71f153000-00007ff71ee75fff 0x0001/0x0000 0x0000000
35e4.4170: *00007ff71f430000-00007ff71f430fff 0x0002/0x0080 0x1000000
\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
35e4.4170: 00007ff71f431000-00007ff71f49ffff 0x0020/0x0080 0x1000000
\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
35e4.4170: 00007ff71f4a0000-00007ff71f4a0fff 0x0080/0x0080 0x1000000
\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
35e4.4170: 00007ff71f4a1000-00007ff71f4e5fff 0x0002/0x0080 0x1000000
\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
35e4.4170: 00007ff71f4e6000-00007ff71f4e6fff 0x0004/0x0080 0x1000000
\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
35e4.4170: 00007ff71f4e7000-00007ff71f4e7fff 0x0008/0x0080 0x1000000
\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
35e4.4170: 00007ff71f4e8000-00007ff71f4ecfff 0x0004/0x0080 0x1000000
\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
35e4.4170: 00007ff71f4ed000-00007ff71f4edfff 0x0008/0x0080 0x1000000
\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
35e4.4170: 00007ff71f4ee000-00007ff71f4eefff 0x0004/0x0080 0x1000000
\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
35e4.4170: 00007ff71f4ef000-00007ff71f4f2fff 0x0008/0x0080 0x1000000
\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
35e4.4170: 00007ff71f4f3000-00007ff71f53afff 0x0002/0x0080 0x1000000
\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
35e4.4170: 00007ff71f53b000-00007ff63a405fff 0x0001/0x0000 0x0000000
35e4.4170: *00007ff804670000-00007ff804670fff 0x0002/0x0080 0x1000000
\Device\HarddiskVolume4\Windows\System32\ntdll.dll
35e4.4170: 00007ff804671000-00007ff804782fff 0x0020/0x0080 0x1000000
\Device\HarddiskVolume4\Windows\System32\ntdll.dll
35e4.4170: 00007ff804783000-00007ff8047c8fff 0x0002/0x0080 0x1000000
\Device\HarddiskVolume4\Windows\System32\ntdll.dll
35e4.4170: 00007ff8047c9000-00007ff8047d0fff 0x0008/0x0080 0x1000000
\Device\HarddiskVolume4\Windows\System32\ntdll.dll
35e4.4170: 00007ff8047d1000-00007ff8047defff 0x0002/0x0080 0x1000000
\Device\HarddiskVolume4\Windows\System32\ntdll.dll
35e4.4170: 00007ff8047df000-00007ff8047dffff 0x0004/0x0080 0x1000000
\Device\HarddiskVolume4\Windows\System32\ntdll.dll
35e4.4170: 00007ff8047e0000-00007ff8047e2fff 0x0008/0x0080 0x1000000
\Device\HarddiskVolume4\Windows\System32\ntdll.dll
35e4.4170: 00007ff8047e3000-00007ff80484ffff 0x0002/0x0080 0x1000000
\Device\HarddiskVolume4\Windows\System32\ntdll.dll
35e4.4170: 00007ff804850000-00007ff0090bffff 0x0001/0x0000 0x0000000
35e4.4170: *00007ffffffe0000-00007ffffffcffff 0x0001/0x0002 0x0020000
35e4.4170: VirtualBox.exe: timestamp 0x587cf70b (rc=VINF_SUCCESS)
35e4.4170: '\Device\HarddiskVolume4\Program
Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
35e4.4170: '\Device\HarddiskVolume4\Windows\System32\ntdll.dll' has no imports
35e4.4170: supR3HardNtChildPurify: Done after 343 ms and 0 fixes (loop #0).
35e4.4170: supR3HardNtEnableThreadCreation:
b5c.1260: Log file opened: 5.1.14r112924 g_hStartupLog=0000000000000004
g_uNtVerCombined=0xa03fab00
b5c.1260: supR3HardenedVmProcessInit: uNtDllAddr=00007ff804670000
g_uNtVerCombined=0xa03fab00
b5c.1260: ntdll.dll: timestamp 0x493793ea (rc=VINF_SUCCESS)
b5c.1260: New simple heap: #1 0000000000c40000 LB 0x400000 (for 1966080
allocation)
b5c.1260: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume4\Program
Files\Oracle\VirtualBox'
b5c.1260: System32: \Device\HarddiskVolume4\Windows\System32
b5c.1260: WinSxS: \Device\HarddiskVolume4\Windows\WinSxS
b5c.1260: KnownDllPath: C:\WINDOWS\System32
b5c.1260: supR3HardenedVmProcessInit: Opening vboxdrv stub...
b5c.1260: supR3HardenedVmProcessInit: Restoring LdrInitializeThunk...
b5c.1260: supR3HardenedVmProcessInit: Returning to LdrInitializeThunk...
b5c.1260: Registered Dll notification callback with NTDLL.
b5c.1260: supHardenedWinVerifyImageByHandle: -> 0
(\Device\HarddiskVolume4\Windows\System32\kernel32.dll)
b5c.1260: supR3HardenedWinVerifyCacheInsert:
\Device\HarddiskVolume4\Windows\System32\kernel32.dll
b5c.1260: supR3HardenedMonitor_LdrLoadDll:
pName=C:\WINDOWS\System32\KERNEL32.DLL (Input=KERNEL32.DLL,
rcNtResolve=0xc0150008) *pfFlags=0xffffffff
pwszSearchPath=0000000000004001:<flags> [calling]
b5c.1260: supR3HardenedDllNotificationCallback: load 00007ff801790000 LB
0x00266000 C:\WINDOWS\System32\KERNELBASE.dll [fFlags=0x0]
b5c.1260: supHardenedWinVerifyImageByHandle: -> 0
(\Device\HarddiskVolume4\Windows\System32\KernelBase.dll)
b5c.1260: supR3HardenedWinVerifyCacheInsert:
\Device\HarddiskVolume4\Windows\System32\KernelBase.dll
b5c.1260: supR3HardenedDllNotificationCallback: load 00007ff803fb0000 LB
0x000ae000 C:\WINDOWS\System32\KERNEL32.DLL [fFlags=0x0]
b5c.1260: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
b5c.1260: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0
hMod=00007ff803fb0000 'C:\WINDOWS\System32\KERNEL32.DLL'
b5c.1260: supR3HardenedDllNotificationCallback: load 00007ff71f430000 LB
0x0010b000 C:\Program Files\Oracle\VirtualBox\VirtualBox.exe [fFlags=0x0]
b5c.1260: '\Device\HarddiskVolume4\Program
Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
b5c.1260: supHardenedWinVerifyImageByHandle: -> 0
(\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe)
b5c.1260: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program
Files\Oracle\VirtualBox\VirtualBox.exe
b5c.1260: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ff8046e91b0
pvNtTerminateThread=00007ff804710890
35e4.4170: supR3HardNtChildWaitFor: Found expected request 1 (CloseEvents)
after 187 ms.
b5c.1260: \SystemRoot\System32\ntdll.dll:
b5c.1260: CreationTime: 2017-12-14T01:38:42.747098400Z
b5c.1260: LastWriteTime: 2017-12-14T01:38:42.762724400Z
b5c.1260: ChangeTime: 2018-04-15T10:18:20.543215800Z
b5c.1260: FileAttributes: 0x20
b5c.1260: Size: 0x1dd100
b5c.1260: NT Headers: 0xe0
b5c.1260: Timestamp: 0x493793ea
b5c.1260: Machine: 0x8664 - amd64
b5c.1260: Timestamp: 0x493793ea
b5c.1260: Image Version: 10.0
b5c.1260: SizeOfImage: 0x1e0000 (1966080)
b5c.1260: Resource Dir: 0x174000 LB 0x6a1d8
b5c.1260: ProductName: Microsoft® Windows® Operating System
b5c.1260: ProductVersion: 10.0.16299.64
b5c.1260: FileVersion: 10.0.16299.64 (WinBuild.160101.0800)
b5c.1260: FileDescription: NT Layer DLL
b5c.1260: \SystemRoot\System32\kernel32.dll:
b5c.1260: CreationTime: 2017-09-29T13:42:04.954227600Z
b5c.1260: LastWriteTime: 2017-09-29T13:42:04.954227600Z
b5c.1260: ChangeTime: 2018-04-14T16:28:06.249793600Z
b5c.1260: FileAttributes: 0x20
b5c.1260: Size: 0xab868
b5c.1260: NT Headers: 0xe8
b5c.1260: Timestamp: 0xc2cf900
b5c.1260: Machine: 0x8664 - amd64
b5c.1260: Timestamp: 0xc2cf900
b5c.1260: Image Version: 10.0
b5c.1260: SizeOfImage: 0xae000 (712704)
b5c.1260: Resource Dir: 0xac000 LB 0x520
b5c.1260: ProductName: Microsoft® Windows® Operating System
b5c.1260: ProductVersion: 10.0.16299.15
b5c.1260: FileVersion: 10.0.16299.15 (WinBuild.160101.0800)
b5c.1260: FileDescription: Windows NT BASE API Client DLL
b5c.1260: \SystemRoot\System32\KernelBase.dll:
b5c.1260: CreationTime: 2017-09-29T13:41:43.124345500Z
b5c.1260: LastWriteTime: 2017-09-29T13:41:43.124345500Z
b5c.1260: ChangeTime: 2018-04-14T16:28:06.562985700Z
b5c.1260: FileAttributes: 0x20
b5c.1260: Size: 0x266000
b5c.1260: NT Headers: 0xf0
b5c.1260: Timestamp: 0x4736733c
b5c.1260: Machine: 0x8664 - amd64
b5c.1260: Timestamp: 0x4736733c
b5c.1260: Image Version: 10.0
b5c.1260: SizeOfImage: 0x266000 (2514944)
b5c.1260: Resource Dir: 0x245000 LB 0x548
b5c.1260: ProductName: Microsoft® Windows® Operating System
b5c.1260: ProductVersion: 10.0.16299.15
b5c.1260: FileVersion: 10.0.16299.15 (WinBuild.160101.0800)
b5c.1260: FileDescription: Windows NT BASE API Client DLL
b5c.1260: \SystemRoot\System32\apisetschema.dll:
b5c.1260: CreationTime: 2017-09-29T13:42:07.095026600Z
b5c.1260: LastWriteTime: 2017-09-29T13:42:07.095026600Z
b5c.1260: ChangeTime: 2018-04-15T10:18:20.558861000Z
b5c.1260: FileAttributes: 0x20
b5c.1260: Size: 0x1b398
b5c.1260: NT Headers: 0xc8
b5c.1260: Timestamp: 0xf30abf31
b5c.1260: Machine: 0x8664 - amd64
b5c.1260: Timestamp: 0xf30abf31
b5c.1260: Image Version: 10.0
b5c.1260: SizeOfImage: 0x1c000 (114688)
b5c.1260: Resource Dir: 0x1b000 LB 0x408
b5c.1260: ProductName: Microsoft® Windows® Operating System
b5c.1260: ProductVersion: 10.0.16299.15
b5c.1260: FileVersion: 10.0.16299.15 (WinBuild.160101.0800)
b5c.1260: FileDescription: ApiSet Schema DLL
b5c.1260: NtOpenDirectoryObject failed on \Driver: 0xc0000022
b5c.1260: supR3HardenedWinFindAdversaries: 0x0
b5c.1260: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume4\Program
Files\Oracle\VirtualBox'
b5c.1260: Calling main()
b5c.1260: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2
b5c.1260: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume4\Program
Files\Oracle\VirtualBox'
b5c.1260: '\Device\HarddiskVolume4\Program
Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
b5c.1260: supHardenedWinVerifyImageByHandle: -> 0
(\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe)
b5c.1260: SUPR3HardenedMain: Respawn #2
b5c.1260: supR3HardNtEnableThreadCreation:
b5c.1260: '\Device\HarddiskVolume4\Windows\System32\ntdll.dll' has no imports
b5c.1260: supHardenedWinVerifyImageByHandle: -> 0
(\Device\HarddiskVolume4\Windows\System32\ntdll.dll)
b5c.1260: supR3HardenedWinVerifyCacheInsert:
\Device\HarddiskVolume4\Windows\System32\ntdll.dll
b5c.1260: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\ntdll.dll
(Input=ntdll.dll, rcNtResolve=0xc0150008) *pfFlags=0x0
pwszSearchPath=0000000000000801:<flags> [calling]
b5c.1260: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0
hMod=00007ff804670000 'C:\WINDOWS\System32\ntdll.dll'
b5c.1260: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ff8046e91b0
pvNtTerminateThread=00007ff804710890
b5c.1260: supR3HardenedWinDoReSpawn(2): New child 2b60.b50 [kernel32].
b5c.1260: supR3HardenedWinReSpawn:
NtSetInformationThread/ThreadHideFromDebugger failed: 0xc0000022 (harmless)
b5c.1260: supR3HardNtChildGatherData: PebBaseAddress=0000000000b6e000
cbPeb=0x388
b5c.1260: supR3HardNtPuChFindNtdll: uNtDllParentAddr=00007ff804670000
uNtDllChildAddr=00007ff804670000
b5c.1260: supR3HardenedWinSetupChildInit: uLdrInitThunk=00007ff8046e91b0
b5c.1260: supR3HardenedWinSetupChildInit: Start child.
b5c.1260: supR3HardNtChildWaitFor: Found expected request 0
(PurifyChildAndCloseHandles) after 2 ms.
b5c.1260: supR3HardNtChildPurify: Startup delay kludge #1/0: 272 ms, 15 sleeps
b5c.1260: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
b5c.1260: *0000000000000000-ffffffffff7affff 0x0001/0x0000 0x0000000
b5c.1260: *0000000000850000-000000000082ffff 0x0004/0x0004 0x0020000
b5c.1260: *0000000000870000-0000000000856fff 0x0002/0x0002 0x0040000
b5c.1260: 0000000000889000-0000000000881fff 0x0001/0x0000 0x0000000
b5c.1260: *0000000000890000-0000000000794fff 0x0000/0x0004 0x0020000
b5c.1260: 000000000098b000-0000000000987fff 0x0104/0x0004 0x0020000
b5c.1260: 000000000098e000-000000000098bfff 0x0004/0x0004 0x0020000
b5c.1260: *0000000000990000-000000000098bfff 0x0002/0x0002 0x0040000
b5c.1260: 0000000000994000-0000000000987fff 0x0001/0x0000 0x0000000
b5c.1260: *00000000009a0000-000000000099efff 0x0004/0x0004 0x0020000
b5c.1260: 00000000009a1000-0000000000941fff 0x0001/0x0000 0x0000000
b5c.1260: *0000000000a00000-0000000000891fff 0x0000/0x0004 0x0020000
b5c.1260: 0000000000b6e000-0000000000b6afff 0x0004/0x0004 0x0020000
b5c.1260: 0000000000b71000-0000000000ae1fff 0x0000/0x0004 0x0020000
b5c.1260: 0000000000c00000-ffffffff8181ffff 0x0001/0x0000 0x0000000
b5c.1260: *000000007ffe0000-000000007ffdefff 0x0002/0x0002 0x0020000
b5c.1260: *000000007ffe1000-000000007ffd1fff 0x0000/0x0002 0x0020000
b5c.1260: 000000007fff0000-ffff8009e0f0ffff 0x0001/0x0000 0x0000000
b5c.1260: *00007ff71f0d0000-00007ff71f0acfff 0x0002/0x0002 0x0040000
b5c.1260: 00007ff71f0f3000-00007ff71edb5fff 0x0001/0x0000 0x0000000
b5c.1260: *00007ff71f430000-00007ff71f430fff 0x0002/0x0080 0x1000000
\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
b5c.1260: 00007ff71f431000-00007ff71f49ffff 0x0020/0x0080 0x1000000
\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
b5c.1260: 00007ff71f4a0000-00007ff71f4a0fff 0x0080/0x0080 0x1000000
\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
b5c.1260: 00007ff71f4a1000-00007ff71f4e5fff 0x0002/0x0080 0x1000000
\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
b5c.1260: 00007ff71f4e6000-00007ff71f4e6fff 0x0004/0x0080 0x1000000
\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
b5c.1260: 00007ff71f4e7000-00007ff71f4e7fff 0x0008/0x0080 0x1000000
\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
b5c.1260: 00007ff71f4e8000-00007ff71f4ecfff 0x0004/0x0080 0x1000000
\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
b5c.1260: 00007ff71f4ed000-00007ff71f4edfff 0x0008/0x0080 0x1000000
\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
b5c.1260: 00007ff71f4ee000-00007ff71f4eefff 0x0004/0x0080 0x1000000
\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
b5c.1260: 00007ff71f4ef000-00007ff71f4f2fff 0x0008/0x0080 0x1000000
\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
b5c.1260: 00007ff71f4f3000-00007ff71f53afff 0x0002/0x0080 0x1000000
\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
b5c.1260: 00007ff71f53b000-00007ff63a405fff 0x0001/0x0000 0x0000000
b5c.1260: *00007ff804670000-00007ff804670fff 0x0002/0x0080 0x1000000
\Device\HarddiskVolume4\Windows\System32\ntdll.dll
b5c.1260: 00007ff804671000-00007ff804782fff 0x0020/0x0080 0x1000000
\Device\HarddiskVolume4\Windows\System32\ntdll.dll
b5c.1260: 00007ff804783000-00007ff8047c8fff 0x0002/0x0080 0x1000000
\Device\HarddiskVolume4\Windows\System32\ntdll.dll
b5c.1260: 00007ff8047c9000-00007ff8047d0fff 0x0008/0x0080 0x1000000
\Device\HarddiskVolume4\Windows\System32\ntdll.dll
b5c.1260: 00007ff8047d1000-00007ff8047defff 0x0002/0x0080 0x1000000
\Device\HarddiskVolume4\Windows\System32\ntdll.dll
b5c.1260: 00007ff8047df000-00007ff8047dffff 0x0004/0x0080 0x1000000
\Device\HarddiskVolume4\Windows\System32\ntdll.dll
b5c.1260: 00007ff8047e0000-00007ff8047e2fff 0x0008/0x0080 0x1000000
\Device\HarddiskVolume4\Windows\System32\ntdll.dll
b5c.1260: 00007ff8047e3000-00007ff80484ffff 0x0002/0x0080 0x1000000
\Device\HarddiskVolume4\Windows\System32\ntdll.dll
b5c.1260: 00007ff804850000-00007ff0090bffff 0x0001/0x0000 0x0000000
b5c.1260: *00007ffffffe0000-00007ffffffcffff 0x0001/0x0002 0x0020000
b5c.1260: VirtualBox.exe: timestamp 0x587cf70b (rc=VINF_SUCCESS)
b5c.1260: '\Device\HarddiskVolume4\Program
Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
b5c.1260: '\Device\HarddiskVolume4\Windows\System32\ntdll.dll' has no imports
b5c.1260: supR3HardNtChildPurify: Done after 347 ms and 0 fixes (loop #0).
b5c.1260: supR3HardenedEarlyCompact: Removed heap 1 (0x00000000c40000 LB
0x400000)
2b60.b50: Log file opened: 5.1.14r112924 g_hStartupLog=0000000000000004
g_uNtVerCombined=0xa03fab00
2b60.b50: supR3HardenedVmProcessInit: uNtDllAddr=00007ff804670000
g_uNtVerCombined=0xa03fab00
b5c.1260: supR3HardNtEnableThreadCreation:
2b60.b50: ntdll.dll: timestamp 0x493793ea (rc=VINF_SUCCESS)
2b60.b50: New simple heap: #1 0000000000d00000 LB 0x400000 (for 1966080
allocation)
2b60.b50: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume4\Program
Files\Oracle\VirtualBox'
2b60.b50: System32: \Device\HarddiskVolume4\Windows\System32
2b60.b50: WinSxS: \Device\HarddiskVolume4\Windows\WinSxS
2b60.b50: KnownDllPath: C:\WINDOWS\System32
2b60.b50: supR3HardenedVmProcessInit: Opening vboxdrv...
2b60.b50: supR3HardenedVmProcessInit: Restoring LdrInitializeThunk...
2b60.b50: supR3HardenedVmProcessInit: Returning to LdrInitializeThunk...
2b60.b50: Registered Dll notification callback with NTDLL.
2b60.b50: supHardenedWinVerifyImageByHandle: -> 0
(\Device\HarddiskVolume4\Windows\System32\kernel32.dll)
2b60.b50: supR3HardenedWinVerifyCacheInsert:
\Device\HarddiskVolume4\Windows\System32\kernel32.dll
2b60.b50: supR3HardenedMonitor_LdrLoadDll:
pName=C:\WINDOWS\System32\KERNEL32.DLL (Input=KERNEL32.DLL,
rcNtResolve=0xc0150008) *pfFlags=0xffffffff
pwszSearchPath=0000000000004001:<flags> [calling]
2b60.b50: supR3HardenedDllNotificationCallback: load 00007ff801790000 LB
0x00266000 C:\WINDOWS\System32\KERNELBASE.dll [fFlags=0x0]
2b60.b50: supHardenedWinVerifyImageByHandle: -> 0
(\Device\HarddiskVolume4\Windows\System32\KernelBase.dll)
2b60.b50: supR3HardenedWinVerifyCacheInsert:
\Device\HarddiskVolume4\Windows\System32\KernelBase.dll
2b60.b50: supR3HardenedDllNotificationCallback: load 00007ff803fb0000 LB
0x000ae000 C:\WINDOWS\System32\KERNEL32.DLL [fFlags=0x0]
2b60.b50: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
2b60.b50: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0
hMod=00007ff803fb0000 'C:\WINDOWS\System32\KERNEL32.DLL'
2b60.b50: supR3HardenedDllNotificationCallback: load 00007ff71f430000 LB
0x0010b000 C:\Program Files\Oracle\VirtualBox\VirtualBox.exe [fFlags=0x0]
2b60.b50: '\Device\HarddiskVolume4\Program
Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
2b60.b50: supHardenedWinVerifyImageByHandle: -> 0
(\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe)
2b60.b50: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program
Files\Oracle\VirtualBox\VirtualBox.exe
2b60.b50: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ff8046e91b0
pvNtTerminateThread=00007ff804710890
b5c.1260: supR3HardNtChildWaitFor: Found expected request 1 (CloseEvents) after
201 ms.
2b60.b50: \SystemRoot\System32\ntdll.dll:
2b60.b50: CreationTime: 2017-12-14T01:38:42.747098400Z
2b60.b50: LastWriteTime: 2017-12-14T01:38:42.762724400Z
2b60.b50: ChangeTime: 2018-04-15T10:18:20.543215800Z
2b60.b50: FileAttributes: 0x20
2b60.b50: Size: 0x1dd100
2b60.b50: NT Headers: 0xe0
2b60.b50: Timestamp: 0x493793ea
2b60.b50: Machine: 0x8664 - amd64
2b60.b50: Timestamp: 0x493793ea
2b60.b50: Image Version: 10.0
2b60.b50: SizeOfImage: 0x1e0000 (1966080)
2b60.b50: Resource Dir: 0x174000 LB 0x6a1d8
2b60.b50: ProductName: Microsoft® Windows® Operating System
2b60.b50: ProductVersion: 10.0.16299.64
2b60.b50: FileVersion: 10.0.16299.64 (WinBuild.160101.0800)
2b60.b50: FileDescription: NT Layer DLL
2b60.b50: \SystemRoot\System32\kernel32.dll:
2b60.b50: CreationTime: 2017-09-29T13:42:04.954227600Z
2b60.b50: LastWriteTime: 2017-09-29T13:42:04.954227600Z
2b60.b50: ChangeTime: 2018-04-14T16:28:06.249793600Z
2b60.b50: FileAttributes: 0x20
2b60.b50: Size: 0xab868
2b60.b50: NT Headers: 0xe8
2b60.b50: Timestamp: 0xc2cf900
2b60.b50: Machine: 0x8664 - amd64
2b60.b50: Timestamp: 0xc2cf900
2b60.b50: Image Version: 10.0
2b60.b50: SizeOfImage: 0xae000 (712704)
2b60.b50: Resource Dir: 0xac000 LB 0x520
2b60.b50: ProductName: Microsoft® Windows® Operating System
2b60.b50: ProductVersion: 10.0.16299.15
2b60.b50: FileVersion: 10.0.16299.15 (WinBuild.160101.0800)
2b60.b50: FileDescription: Windows NT BASE API Client DLL
2b60.b50: \SystemRoot\System32\KernelBase.dll:
2b60.b50: CreationTime: 2017-09-29T13:41:43.124345500Z
2b60.b50: LastWriteTime: 2017-09-29T13:41:43.124345500Z
2b60.b50: ChangeTime: 2018-04-14T16:28:06.562985700Z
2b60.b50: FileAttributes: 0x20
2b60.b50: Size: 0x266000
2b60.b50: NT Headers: 0xf0
2b60.b50: Timestamp: 0x4736733c
2b60.b50: Machine: 0x8664 - amd64
2b60.b50: Timestamp: 0x4736733c
2b60.b50: Image Version: 10.0
2b60.b50: SizeOfImage: 0x266000 (2514944)
2b60.b50: Resource Dir: 0x245000 LB 0x548
2b60.b50: ProductName: Microsoft® Windows® Operating System
2b60.b50: ProductVersion: 10.0.16299.15
2b60.b50: FileVersion: 10.0.16299.15 (WinBuild.160101.0800)
2b60.b50: FileDescription: Windows NT BASE API Client DLL
2b60.b50: \SystemRoot\System32\apisetschema.dll:
2b60.b50: CreationTime: 2017-09-29T13:42:07.095026600Z
2b60.b50: LastWriteTime: 2017-09-29T13:42:07.095026600Z
2b60.b50: ChangeTime: 2018-04-15T10:18:20.558861000Z
2b60.b50: FileAttributes: 0x20
2b60.b50: Size: 0x1b398
2b60.b50: NT Headers: 0xc8
2b60.b50: Timestamp: 0xf30abf31
2b60.b50: Machine: 0x8664 - amd64
2b60.b50: Timestamp: 0xf30abf31
2b60.b50: Image Version: 10.0
2b60.b50: SizeOfImage: 0x1c000 (114688)
2b60.b50: Resource Dir: 0x1b000 LB 0x408
2b60.b50: ProductName: Microsoft® Windows® Operating System
2b60.b50: ProductVersion: 10.0.16299.15
2b60.b50: FileVersion: 10.0.16299.15 (WinBuild.160101.0800)
2b60.b50: FileDescription: ApiSet Schema DLL
2b60.b50: NtOpenDirectoryObject failed on \Driver: 0xc0000022
2b60.b50: supR3HardenedWinFindAdversaries: 0x0
2b60.b50: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume4\Program
Files\Oracle\VirtualBox'
2b60.b50: Calling main()
2b60.b50: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2
2b60.b50: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume4\Program
Files\Oracle\VirtualBox'
2b60.b50: '\Device\HarddiskVolume4\Program
Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
2b60.b50: supHardenedWinVerifyImageByHandle: -> 0
(\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe)
2b60.b50: SUPR3HardenedMain: Final process, opening VBoxDrv...
2b60.b50: supR3HardenedEarlyCompact: Removed heap 1 (0x00000000d00000 LB
0x400000)
2b60.b50: supR3HardNtEnableThreadCreation:
2b60.b50: supHardenedWinVerifyImageByHandle: -> 0
(\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxSupLib.dll)
2b60.b50: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program
Files\Oracle\VirtualBox\VBoxSupLib.dll
2b60.b50: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program
Files\Oracle\VirtualBox\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0
pwszSearchPath=0000000000000801:<flags> [calling]
2b60.b50: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks
WinVerifyTrust]
2b60.b50: supR3HardenedDllNotificationCallback: load 00007ffffc200000 LB
0x00005000 C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL [fFlags=0x0]
2b60.b50: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks
WinVerifyTrust]
2b60.b50: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks
WinVerifyTrust]
2b60.b50: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program
Files\Oracle\VirtualBox\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0
pwszSearchPath=0000000000000001:<flags> [calling]
2b60.b50: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0
hMod=00007ffffc200000 'C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL'
2b60.b50: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks
WinVerifyTrust]
2b60.b50: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program
Files\Oracle\VirtualBox\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0
pwszSearchPath=0000000000000001:<flags> [calling]
2b60.b50: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0
hMod=00007ffffc200000 'C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL'
2b60.b50: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0
hMod=00007ffffc200000 'C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL'
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0
'msvcrt.dll'.
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1
'msasn1.dll'.
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6
'crypt32.dll'.
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27
'rpcrt4.dll'.
2b60.b50: supHardenedWinVerifyImageByHandle: -> 0
(\Device\HarddiskVolume4\Windows\System32\wintrust.dll)
2b60.b50: supR3HardenedWinVerifyCacheInsert:
\Device\HarddiskVolume4\Windows\System32\wintrust.dll
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'rpcrt4.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' ->
'\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
2b60.b50: supHardenedWinVerifyImageByHandle: -> 0
(\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll)
2b60.b50: supR3HardenedWinVerifyCacheInsert:
\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'crypt32.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'crypt32.dll' ->
'\Device\HarddiskVolume4\Windows\System32\crypt32.dll' [rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #33
'msasn1.dll'.
2b60.b50: supHardenedWinVerifyImageByHandle: -> 0
(\Device\HarddiskVolume4\Windows\System32\crypt32.dll)
2b60.b50: supR3HardenedWinVerifyCacheInsert:
\Device\HarddiskVolume4\Windows\System32\crypt32.dll
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'msasn1.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'msasn1.dll' ->
'\Device\HarddiskVolume4\Windows\System32\msasn1.dll' [rcNtRedir=0xc0150008]
2b60.b50: supHardenedWinVerifyImageByHandle: -> 0
(\Device\HarddiskVolume4\Windows\System32\msasn1.dll)
2b60.b50: supR3HardenedWinVerifyCacheInsert:
\Device\HarddiskVolume4\Windows\System32\msasn1.dll
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'msvcrt.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' ->
'\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
2b60.b50: supHardenedWinVerifyImageByHandle: -> 0
(\Device\HarddiskVolume4\Windows\System32\msvcrt.dll)
2b60.b50: supR3HardenedWinVerifyCacheInsert:
\Device\HarddiskVolume4\Windows\System32\msvcrt.dll
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'msasn1.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'msasn1.dll' ->
'\Device\HarddiskVolume4\Windows\System32\msasn1.dll' [rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Windows\System32\msasn1.dll [lacks WinVerifyTrust]
2b60.b50: supR3HardenedMonitor_LdrLoadDll:
pName=C:\WINDOWS\system32\Wintrust.dll (rcNtResolve=0xc0150008) *pfFlags=0x0
pwszSearchPath=0000000000000801:<flags> [calling]
2b60.b50: supR3HardenedDllNotificationCallback: load 00007ff803f10000 LB
0x0009d000 C:\WINDOWS\System32\msvcrt.dll [fFlags=0x0]
2b60.b50: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
2b60.b50: supR3HardenedDllNotificationCallback: load 00007ff800a30000 LB
0x00012000 C:\WINDOWS\System32\MSASN1.dll [fFlags=0x0]
2b60.b50: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Windows\System32\msasn1.dll [lacks WinVerifyTrust]
2b60.b50: supR3HardenedDllNotificationCallback: load 00007ff8013c0000 LB
0x000f6000 C:\WINDOWS\System32\ucrtbase.dll [fFlags=0x0]
2b60.b50: supHardenedWinVerifyImageByHandle: -> 0
(\Device\HarddiskVolume4\Windows\System32\ucrtbase.dll)
2b60.b50: supR3HardenedWinVerifyCacheInsert:
\Device\HarddiskVolume4\Windows\System32\ucrtbase.dll
2b60.b50: supR3HardenedDllNotificationCallback: load 00007ff801570000 LB
0x001ce000 C:\WINDOWS\System32\CRYPT32.dll [fFlags=0x0]
2b60.b50: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
2b60.b50: supR3HardenedDllNotificationCallback: load 00007ff8029a0000 LB
0x0011f000 C:\WINDOWS\System32\RPCRT4.dll [fFlags=0x0]
2b60.b50: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
2b60.b50: supR3HardenedDllNotificationCallback: load 00007ff801be0000 LB
0x0005b000 C:\WINDOWS\System32\sechost.dll [fFlags=0x0]
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2
'rpcrt4.dll'.
2b60.b50: supHardenedWinVerifyImageByHandle: -> 0
(\Device\HarddiskVolume4\Windows\System32\sechost.dll)
2b60.b50: supR3HardenedWinVerifyCacheInsert:
\Device\HarddiskVolume4\Windows\System32\sechost.dll
2b60.b50: supR3HardenedDllNotificationCallback: load 00007ff8022e0000 LB
0x000a1000 C:\WINDOWS\System32\advapi32.dll [fFlags=0x0]
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0
'msvcrt.dll'.
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6
'sechost.dll'.
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27
'rpcrt4.dll'.
2b60.b50: supHardenedWinVerifyImageByHandle: -> 0
(\Device\HarddiskVolume4\Windows\System32\advapi32.dll)
2b60.b50: supR3HardenedWinVerifyCacheInsert:
\Device\HarddiskVolume4\Windows\System32\advapi32.dll
2b60.b50: supR3HardenedDllNotificationCallback: load 00007ff800c10000 LB
0x00058000 C:\WINDOWS\System32\Wintrust.dll [fFlags=0x0]
2b60.b50: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
2b60.b50: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0
(rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
2b60.b50: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0
hMod=00007ff801790000 'api-ms-win-core-synch-l1-2-0'
2b60.b50: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1
(rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
2b60.b50: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0
hMod=00007ff801790000 'api-ms-win-core-fibers-l1-1-1'
2b60.b50: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1
(rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
2b60.b50: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0
hMod=00007ff801790000 'api-ms-win-core-fibers-l1-1-1'
2b60.b50: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0
(rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
2b60.b50: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0
hMod=00007ff801790000 'api-ms-win-core-synch-l1-2-0'
2b60.b50: supR3HardenedMonitor_LdrLoadDll:
pName=api-ms-win-core-localization-l1-2-1 (rcNtResolve=0x0) *pfFlags=0x0
pwszSearchPath=0000000000000801:<flags> [calling]
2b60.b50: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0
hMod=00007ff801790000 'api-ms-win-core-localization-l1-2-1'
2b60.b50: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0
hMod=00007ff800c10000 'C:\WINDOWS\system32\Wintrust.dll'
2b60.b50: supHardenedWinVerifyImageByHandle: -> -626
(\Device\HarddiskVolume4\Windows\System32\bcrypt.dll)
2b60.b50: Error (rc=0):
2b60.b50: supR3HardenedScreenImage/LdrLoadDll: rc=Unknown Status -626
(0xfffffd8e) fImage=1 fProtect=0x0 fAccess=0x0
\Device\HarddiskVolume4\Windows\System32\bcrypt.dll: Grown load config (244 to
256 bytes) includes non-zero bytes: 00 00 00 00 60 a9 01 80 01 00 00 00
2b60.b50: supR3HardenedWinVerifyCacheInsert:
\Device\HarddiskVolume4\Windows\System32\bcrypt.dll
2b60.b50: Error (rc=0):
2b60.b50: supR3HardenedMonitor_LdrLoadDll: rejecting
'C:\WINDOWS\system32\bcrypt.dll' (C:\WINDOWS\system32\bcrypt.dll):
rcNt=0xc0000190
2b60.b50: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000190
'C:\WINDOWS\system32\bcrypt.dll'
2b60.b50: Warning! Failed to load bcrypt.dll
2b60.b50: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'rpcrt4.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' ->
'\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'sechost.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'sechost.dll' ->
'\Device\HarddiskVolume4\Windows\System32\sechost.dll' [rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Windows\System32\sechost.dll [lacks WinVerifyTrust]
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'msvcrt.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' ->
'\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'rpcrt4.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' ->
'\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
2b60.b50: supR3HardenedMonitor_LdrLoadDll:
pName=C:\Windows\System32\WINTRUST.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0
pwszSearchPath=0000000000000001:<flags> [calling]
2b60.b50: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0
hMod=00007ff800c10000 'C:\Windows\System32\WINTRUST.DLL'
2b60.b50: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
2b60.b50: supR3HardenedMonitor_LdrLoadDll:
pName=C:\Windows\System32\WINTRUST.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0
pwszSearchPath=0000000000000001:<flags> [calling]
2b60.b50: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0
hMod=00007ff800c10000 'C:\Windows\System32\WINTRUST.DLL'
2b60.b50: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
2b60.b50: supR3HardenedMonitor_LdrLoadDll:
pName=C:\Windows\System32\WINTRUST.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0
pwszSearchPath=0000000000000001:<flags> [calling]
2b60.b50: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0
hMod=00007ff800c10000 'C:\Windows\System32\WINTRUST.DLL'
2b60.b50: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
2b60.b50: supR3HardenedMonitor_LdrLoadDll:
pName=C:\Windows\System32\WINTRUST.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0
pwszSearchPath=0000000000000001:<flags> [calling]
2b60.b50: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0
hMod=00007ff800c10000 'C:\Windows\System32\WINTRUST.DLL'
2b60.b50: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
2b60.b50: supR3HardenedMonitor_LdrLoadDll:
pName=C:\Windows\System32\WINTRUST.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0
pwszSearchPath=0000000000000001:<flags> [calling]
2b60.b50: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0
hMod=00007ff800c10000 'C:\Windows\System32\WINTRUST.DLL'
2b60.b50: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
2b60.b50: supR3HardenedMonitor_LdrLoadDll:
pName=C:\Windows\System32\WINTRUST.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0
pwszSearchPath=0000000000000001:<flags> [calling]
2b60.b50: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0
hMod=00007ff800c10000 'C:\Windows\System32\WINTRUST.DLL'
2b60.b50: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
2b60.b50: supR3HardenedMonitor_LdrLoadDll:
pName=C:\Windows\System32\WINTRUST.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0
pwszSearchPath=0000000000000001:<flags> [calling]
2b60.b50: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0
hMod=00007ff800c10000 'C:\Windows\System32\WINTRUST.DLL'
2b60.b50: supHardenedWinVerifyImageByHandle: -> 0
(\Device\HarddiskVolume4\Windows\System32\cryptsp.dll)
2b60.b50: supR3HardenedWinVerifyCacheInsert:
\Device\HarddiskVolume4\Windows\System32\cryptsp.dll
2b60.b50: supR3HardenedDllNotificationCallback: load 00007ff800410000 LB
0x00017000 C:\WINDOWS\SYSTEM32\CRYPTSP.dll [fFlags=0x0]
2b60.b50: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Windows\System32\cryptsp.dll [lacks WinVerifyTrust]
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18
'bcrypt.dll'.
2b60.b50: supHardenedWinVerifyImageByHandle: -> 0
(\Device\HarddiskVolume4\Windows\System32\rsaenh.dll)
2b60.b50: supR3HardenedWinVerifyCacheInsert:
\Device\HarddiskVolume4\Windows\System32\rsaenh.dll
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'bcrypt.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcrypt.dll' ->
'\Device\HarddiskVolume4\Windows\System32\bcrypt.dll' [rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedScreenImage/Imports: cache hit (Unknown Status -626
(0xfffffd8e)) on \Device\HarddiskVolume4\Windows\System32\bcrypt.dll [lacks
WinVerifyTrust]
2b60.b50: Error (rc=0):
2b60.b50: supR3HardenedScreenImage/Imports: cached rc=Unknown Status -626
(0xfffffd8e) fImage=1 fProtect=0x0 fAccess=0x0 cHits=1
\Device\HarddiskVolume4\Windows\System32\bcrypt.dll
2b60.b50: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll
(rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags>
[calling]
2b60.b50: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
2b60.b50: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status
-626 (0xfffffd8e)) on \Device\HarddiskVolume4\Windows\System32\bcrypt.dll
[lacks WinVerifyTrust]
2b60.b50: Error (rc=0):
2b60.b50: supR3HardenedScreenImage/NtCreateSection: cached rc=Unknown Status
-626 (0xfffffd8e) fImage=1 fProtect=0x10 fAccess=0xf cHits=2
\Device\HarddiskVolume4\Windows\System32\bcrypt.dll
2b60.b50: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000190
'C:\WINDOWS\system32\rsaenh.dll'
2b60.b50: supR3HardNtViCallWinVerifyTrust: WinVerifyTrust failed with 0x8
(<NULL>) on '\Device\HarddiskVolume4\Program
Files\Oracle\VirtualBox\VirtualBox.exe'
2b60.b50: Error -22919 in VirtualBox! (enmWhat=1)
2b60.b50: WinVerifyTrust failed on stub executable: WinVerifyTrust failed with
hrc=Unknown Status 0x8 on '\Device\HarddiskVolume4\Program
Files\Oracle\VirtualBox\VirtualBox.exe'
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0
'opengl32.dll'.
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1
'vboxrt.dll'.
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2
'msvcp100.dll'.
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3
'msvcr100.dll'.
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4
'qt5corevbox.dll'.
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5
'qt5guivbox.dll'.
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6
'qt5widgetsvbox.dll'.
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7
'qt5printsupportvbox.dll'.
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8
'qt5openglvbox.dll'.
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10
'user32.dll'.
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11
'advapi32.dll'.
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12
'shell32.dll'.
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13
'ole32.dll'.
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14
'oleaut32.dll'.
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #15
'winmm.dll'.
2b60.b50: supHardenedWinVerifyImageByHandle: -> 0
(\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.dll)
2b60.b50: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program
Files\Oracle\VirtualBox\VirtualBox.dll
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'winmm.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' ->
'\Device\HarddiskVolume4\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1
'winmmbase.dll'.
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4
'msvcrt.dll'.
2b60.b50: supHardenedWinVerifyImageByHandle: -> 0
(\Device\HarddiskVolume4\Windows\System32\winmm.dll)
2b60.b50: supR3HardenedWinVerifyCacheInsert:
\Device\HarddiskVolume4\Windows\System32\winmm.dll
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'oleaut32.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' ->
'\Device\HarddiskVolume4\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0
'msvcp_win.dll'.
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5
'combase.dll'.
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #23
'rpcrt4.dll'.
2b60.b50: supHardenedWinVerifyImageByHandle: -> 0
(\Device\HarddiskVolume4\Windows\System32\oleaut32.dll)
2b60.b50: supR3HardenedWinVerifyCacheInsert:
\Device\HarddiskVolume4\Windows\System32\oleaut32.dll
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'ole32.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' ->
'\Device\HarddiskVolume4\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #22
'rpcrt4.dll'.
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #46
'gdi32.dll'.
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #47
'user32.dll'.
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #48
'combase.dll'.
2b60.b50: supHardenedWinVerifyImageByHandle: -> 0
(\Device\HarddiskVolume4\Windows\System32\ole32.dll)
2b60.b50: supR3HardenedWinVerifyCacheInsert:
\Device\HarddiskVolume4\Windows\System32\ole32.dll
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'shell32.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' ->
'\Device\HarddiskVolume4\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0
'msvcrt.dll'.
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #73
'user32.dll'.
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #75
'gdi32.dll'.
2b60.b50: supHardenedWinVerifyImageByHandle: -> 0
(\Device\HarddiskVolume4\Windows\System32\shell32.dll)
2b60.b50: supR3HardenedWinVerifyCacheInsert:
\Device\HarddiskVolume4\Windows\System32\shell32.dll
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'advapi32.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' ->
'\Device\HarddiskVolume4\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'user32.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' ->
'\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0
'win32u.dll'.
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34
'gdi32.dll'.
2b60.b50: supHardenedWinVerifyImageByHandle: -> 0
(\Device\HarddiskVolume4\Windows\System32\user32.dll)
2b60.b50: supR3HardenedWinVerifyCacheInsert:
\Device\HarddiskVolume4\Windows\System32\user32.dll
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'qt5openglvbox.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5openglvbox.dll' ->
'\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5openglvbox.dll'
[rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0
'qt5widgetsvbox.dll'.
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1
'qt5guivbox.dll'.
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2
'qt5corevbox.dll'.
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3
'msvcr100.dll'.
2b60.b50: supHardenedWinVerifyImageByHandle: -> 0
(\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll)
2b60.b50: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program
Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'qt5printsupportvbox.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos:
'qt5printsupportvbox.dll' -> '\Device\HarddiskVolume4\Program
Files\Oracle\VirtualBox\qt5printsupportvbox.dll' [rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0
'gdi32.dll'.
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1
'user32.dll'.
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2
'qt5widgetsvbox.dll'.
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3
'qt5guivbox.dll'.
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4
'qt5corevbox.dll'.
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5
'winspool.drv'.
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6
'comdlg32.dll'.
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7
'msvcr100.dll'.
2b60.b50: supHardenedWinVerifyImageByHandle: -> 0
(\Device\HarddiskVolume4\Program
Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll)
2b60.b50: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program
Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'qt5widgetsvbox.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll'
-> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll'
[rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0
'gdi32.dll'.
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1
'user32.dll'.
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2
'qt5guivbox.dll'.
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3
'qt5corevbox.dll'.
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4
'shell32.dll'.
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5
'msvcp100.dll'.
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6
'msvcr100.dll'.
2b60.b50: supHardenedWinVerifyImageByHandle: -> 0
(\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll)
2b60.b50: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program
Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'qt5guivbox.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' ->
'\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5guivbox.dll'
[rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0
'ole32.dll'.
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1
'opengl32.dll'.
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2
'gdi32.dll'.
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3
'user32.dll'.
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4
'qt5corevbox.dll'.
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5
'msvcp100.dll'.
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6
'msvcr100.dll'.
2b60.b50: supHardenedWinVerifyImageByHandle: -> 0
(\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll)
2b60.b50: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program
Files\Oracle\VirtualBox\Qt5GuiVBox.dll
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'qt5corevbox.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' ->
'\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5corevbox.dll'
[rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1
'user32.dll'.
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2
'shell32.dll'.
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3
'ole32.dll'.
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4
'advapi32.dll'.
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5
'ws2_32.dll'.
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'mpr.dll'.
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7
'msvcp100.dll'.
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8
'msvcr100.dll'.
2b60.b50: supHardenedWinVerifyImageByHandle: -> 0
(\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll)
2b60.b50: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program
Files\Oracle\VirtualBox\Qt5CoreVBox.dll
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'msvcr100.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' ->
'\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll'
[rcNtRedir=0xc0150008]
2b60.b50: supHardenedWinVerifyImageByHandle: -> 0
(\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll)
2b60.b50: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program
Files\Oracle\VirtualBox\msvcr100.dll
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'msvcp100.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' ->
'\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll'
[rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0
'msvcr100.dll'.
2b60.b50: supHardenedWinVerifyImageByHandle: -> 0
(\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll)
2b60.b50: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program
Files\Oracle\VirtualBox\msvcp100.dll
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'vboxrt.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' ->
'\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\vboxrt.dll'
[rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0
'msvcr100.dll'.
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1
'msvcp100.dll'.
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3
'ws2_32.dll'.
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4
'rpcrt4.dll'.
2b60.b50: supHardenedWinVerifyImageByHandle: -> 0
(\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll)
2b60.b50: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program
Files\Oracle\VirtualBox\VBoxRT.dll
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'opengl32.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' ->
'\Device\HarddiskVolume4\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0
'msvcrt.dll'.
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2
'advapi32.dll'.
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3
'user32.dll'.
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5
'gdi32.dll'.
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6
'glu32.dll'.
2b60.b50: supHardenedWinVerifyImageByHandle: -> 22900
(\Device\HarddiskVolume4\Windows\System32\opengl32.dll)
2b60.b50: supR3HardenedWinVerifyCacheInsert:
\Device\HarddiskVolume4\Windows\System32\opengl32.dll
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'glu32.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'glu32.dll' ->
'\Device\HarddiskVolume4\Windows\System32\glu32.dll' [rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0
'msvcrt.dll'.
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2
'user32.dll'.
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3
'opengl32.dll'.
2b60.b50: supHardenedWinVerifyImageByHandle: -> 22900
(\Device\HarddiskVolume4\Windows\System32\glu32.dll)
2b60.b50: supR3HardenedWinVerifyCacheInsert:
\Device\HarddiskVolume4\Windows\System32\glu32.dll
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'gdi32.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' ->
'\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
2b60.b50: supHardenedWinVerifyImageByHandle: -> 0
(\Device\HarddiskVolume4\Windows\System32\gdi32.dll)
2b60.b50: supR3HardenedWinVerifyCacheInsert:
\Device\HarddiskVolume4\Windows\System32\gdi32.dll
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'user32.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' ->
'\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'advapi32.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' ->
'\Device\HarddiskVolume4\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'msvcrt.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' ->
'\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'rpcrt4.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' ->
'\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'ws2_32.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' ->
'\Device\HarddiskVolume4\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26
'rpcrt4.dll'.
2b60.b50: supHardenedWinVerifyImageByHandle: -> 0
(\Device\HarddiskVolume4\Windows\System32\ws2_32.dll)
2b60.b50: supR3HardenedWinVerifyCacheInsert:
\Device\HarddiskVolume4\Windows\System32\ws2_32.dll
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'msvcp100.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' ->
'\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll'
[rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks
WinVerifyTrust]
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'msvcr100.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' ->
'\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll'
[rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks
WinVerifyTrust]
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'msvcr100.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' ->
'\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll'
[rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks
WinVerifyTrust]
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'msvcr100.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' ->
'\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll'
[rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks
WinVerifyTrust]
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'msvcp100.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' ->
'\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll'
[rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks
WinVerifyTrust]
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mpr.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'mpr.dll' ->
'\Device\HarddiskVolume4\Windows\System32\mpr.dll' [rcNtRedir=0xc0150008]
2b60.b50: supHardenedWinVerifyImageByHandle: -> 0
(\Device\HarddiskVolume4\Windows\System32\mpr.dll)
2b60.b50: supR3HardenedWinVerifyCacheInsert:
\Device\HarddiskVolume4\Windows\System32\mpr.dll
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'ws2_32.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' ->
'\Device\HarddiskVolume4\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Windows\System32\ws2_32.dll [lacks WinVerifyTrust]
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'advapi32.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' ->
'\Device\HarddiskVolume4\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'ole32.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' ->
'\Device\HarddiskVolume4\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Windows\System32\ole32.dll [lacks WinVerifyTrust]
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'shell32.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' ->
'\Device\HarddiskVolume4\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Windows\System32\shell32.dll [lacks WinVerifyTrust]
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'user32.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' ->
'\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'msvcr100.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' ->
'\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll'
[rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks
WinVerifyTrust]
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'msvcp100.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' ->
'\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll'
[rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks
WinVerifyTrust]
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'qt5corevbox.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' ->
'\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5corevbox.dll'
[rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks
WinVerifyTrust]
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'user32.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' ->
'\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'gdi32.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' ->
'\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'opengl32.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' ->
'\Device\HarddiskVolume4\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900
(0x5974)) on \Device\HarddiskVolume4\Windows\System32\opengl32.dll [lacks
WinVerifyTrust]
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'ole32.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' ->
'\Device\HarddiskVolume4\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Windows\System32\ole32.dll [lacks WinVerifyTrust]
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'msvcr100.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' ->
'\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll'
[rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks
WinVerifyTrust]
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'msvcp100.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' ->
'\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll'
[rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks
WinVerifyTrust]
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'shell32.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' ->
'\Device\HarddiskVolume4\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Windows\System32\shell32.dll [lacks WinVerifyTrust]
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'qt5corevbox.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' ->
'\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5corevbox.dll'
[rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks
WinVerifyTrust]
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'qt5guivbox.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' ->
'\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5guivbox.dll'
[rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks
WinVerifyTrust]
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'user32.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' ->
'\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'gdi32.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' ->
'\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'msvcr100.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' ->
'\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll'
[rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks
WinVerifyTrust]
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'comdlg32.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'comdlg32.dll' ->
'\Device\HarddiskVolume4\Windows\System32\comdlg32.dll' [rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0
'msvcrt.dll'.
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36
'user32.dll'.
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #37
'shlwapi.dll'.
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #38
'gdi32.dll'.
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #39
'comctl32.dll'.
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #40
'shell32.dll'.
2b60.b50: supHardenedWinVerifyImageByHandle: -> 22900
(\Device\HarddiskVolume4\Windows\System32\comdlg32.dll)
2b60.b50: supR3HardenedWinVerifyCacheInsert:
\Device\HarddiskVolume4\Windows\System32\comdlg32.dll
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'winspool.drv'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'winspool.drv' ->
'\Device\HarddiskVolume4\Windows\System32\winspool.drv' [rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0
'msvcrt.dll'.
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #25
'iphlpapi.dll'.
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34
'bcrypt.dll'.
2b60.b50: supHardenedWinVerifyImageByHandle: -> 22900
(\Device\HarddiskVolume4\Windows\System32\winspool.drv)
2b60.b50: supR3HardenedWinVerifyCacheInsert:
\Device\HarddiskVolume4\Windows\System32\winspool.drv
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'qt5corevbox.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' ->
'\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5corevbox.dll'
[rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks
WinVerifyTrust]
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'qt5guivbox.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' ->
'\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5guivbox.dll'
[rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks
WinVerifyTrust]
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'qt5widgetsvbox.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll'
-> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll'
[rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll
[lacks WinVerifyTrust]
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'user32.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' ->
'\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'gdi32.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' ->
'\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'msvcr100.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' ->
'\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll'
[rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks
WinVerifyTrust]
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'qt5corevbox.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' ->
'\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5corevbox.dll'
[rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks
WinVerifyTrust]
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'qt5guivbox.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' ->
'\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5guivbox.dll'
[rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks
WinVerifyTrust]
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'qt5widgetsvbox.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll'
-> '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll'
[rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll
[lacks WinVerifyTrust]
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'gdi32.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' ->
'\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'win32u.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' ->
'\Device\HarddiskVolume4\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
2b60.b50: '\Device\HarddiskVolume4\Windows\System32\win32u.dll' has no imports
2b60.b50: supHardenedWinVerifyImageByHandle: -> 0
(\Device\HarddiskVolume4\Windows\System32\win32u.dll)
2b60.b50: supR3HardenedWinVerifyCacheInsert:
\Device\HarddiskVolume4\Windows\System32\win32u.dll
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'gdi32.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' ->
'\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'user32.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' ->
'\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'msvcrt.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' ->
'\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'combase.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' ->
'\Device\HarddiskVolume4\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3
'rpcrt4.dll'.
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #45
'bcryptprimitives.dll'.
2b60.b50: supHardenedWinVerifyImageByHandle: -> 0
(\Device\HarddiskVolume4\Windows\System32\combase.dll)
2b60.b50: supR3HardenedWinVerifyCacheInsert:
\Device\HarddiskVolume4\Windows\System32\combase.dll
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'user32.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' ->
'\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'gdi32.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' ->
'\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'rpcrt4.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' ->
'\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'rpcrt4.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' ->
'\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'combase.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' ->
'\Device\HarddiskVolume4\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Windows\System32\combase.dll [lacks WinVerifyTrust]
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'msvcp_win.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' ->
'\Device\HarddiskVolume4\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
2b60.b50: supHardenedWinVerifyImageByHandle: -> 0
(\Device\HarddiskVolume4\Windows\System32\msvcp_win.dll)
2b60.b50: supR3HardenedWinVerifyCacheInsert:
\Device\HarddiskVolume4\Windows\System32\msvcp_win.dll
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'msvcrt.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' ->
'\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'winmmbase.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmmbase.dll' ->
'\Device\HarddiskVolume4\Windows\System32\winmmbase.dll' [rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0
'msvcrt.dll'.
2b60.b50: supHardenedWinVerifyImageByHandle: -> 0
(\Device\HarddiskVolume4\Windows\System32\winmmbase.dll)
2b60.b50: supR3HardenedWinVerifyCacheInsert:
\Device\HarddiskVolume4\Windows\System32\winmmbase.dll
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'msvcrt.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' ->
'\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'bcryptprimitives.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll'
-> '\Device\HarddiskVolume4\Windows\System32\bcryptprimitives.dll'
[rcNtRedir=0xc0150008]
2b60.b50: supHardenedWinVerifyImageByHandle: -> -626
(\Device\HarddiskVolume4\Windows\System32\bcryptprimitives.dll)
2b60.b50: Error (rc=0):
2b60.b50: supR3HardenedScreenImage/Imports: rc=Unknown Status -626 (0xfffffd8e)
fImage=1 fProtect=0x0 fAccess=0x0
\Device\HarddiskVolume4\Windows\System32\bcryptprimitives.dll: Grown load
config (244 to 256 bytes) includes non-zero bytes: 00 00 00 00 40 16 06 80 01
00 00 00
2b60.b50: supR3HardenedWinVerifyCacheInsert:
\Device\HarddiskVolume4\Windows\System32\bcryptprimitives.dll
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'rpcrt4.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' ->
'\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'bcrypt.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcrypt.dll' ->
'\Device\HarddiskVolume4\Windows\System32\bcrypt.dll' [rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedScreenImage/Imports: cache hit (Unknown Status -626
(0xfffffd8e)) on \Device\HarddiskVolume4\Windows\System32\bcrypt.dll [lacks
WinVerifyTrust]
2b60.b50: Error (rc=0):
2b60.b50: supR3HardenedScreenImage/Imports: cached rc=Unknown Status -626
(0xfffffd8e) fImage=1 fProtect=0x0 fAccess=0x0 cHits=3
\Device\HarddiskVolume4\Windows\System32\bcrypt.dll
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'iphlpapi.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'iphlpapi.dll' ->
'\Device\HarddiskVolume4\Windows\System32\iphlpapi.dll' [rcNtRedir=0xc0150008]
2b60.b50: supHardenedWinVerifyImageByHandle: -> 0
(\Device\HarddiskVolume4\Windows\System32\IPHLPAPI.DLL)
2b60.b50: supR3HardenedWinVerifyCacheInsert:
\Device\HarddiskVolume4\Windows\System32\IPHLPAPI.DLL
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'msvcrt.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' ->
'\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'shell32.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' ->
'\Device\HarddiskVolume4\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Windows\System32\shell32.dll [lacks WinVerifyTrust]
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'comctl32.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'comctl32.dll' ->
'\Device\HarddiskVolume4\Windows\System32\comctl32.dll' [rcNtRedir=0x0]
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1
'advapi32.dll'.
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2
'gdi32.dll'.
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4
'user32.dll'.
2b60.b50: supHardenedWinVerifyImageByHandle: -> 0
(\Device\HarddiskVolume4\Windows\System32\comctl32.dll)
2b60.b50: supR3HardenedWinVerifyCacheInsert:
\Device\HarddiskVolume4\Windows\System32\comctl32.dll
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'gdi32.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' ->
'\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'shlwapi.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'shlwapi.dll' ->
'\Device\HarddiskVolume4\Windows\System32\shlwapi.dll' [rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1
'msvcrt.dll'.
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #45
'gdi32.dll'.
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #46
'user32.dll'.
2b60.b50: supHardenedWinVerifyImageByHandle: -> 0
(\Device\HarddiskVolume4\Windows\System32\shlwapi.dll)
2b60.b50: supR3HardenedWinVerifyCacheInsert:
\Device\HarddiskVolume4\Windows\System32\shlwapi.dll
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'user32.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' ->
'\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'msvcrt.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' ->
'\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'rpcrt4.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' ->
'\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'opengl32.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' ->
'\Device\HarddiskVolume4\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900
(0x5974)) on \Device\HarddiskVolume4\Windows\System32\opengl32.dll [lacks
WinVerifyTrust]
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'user32.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' ->
'\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'msvcrt.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' ->
'\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'user32.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' ->
'\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'gdi32.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' ->
'\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'msvcrt.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' ->
'\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'user32.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' ->
'\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'gdi32.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' ->
'\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: Processing
'advapi32.dll'...
2b60.b50: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' ->
'\Device\HarddiskVolume4\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
2b60.b50: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
2b60.b50: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program
Files\Oracle\VirtualBox\VirtualBox.dll (rcNtResolve=0xc0150008) *pfFlags=0x0
pwszSearchPath=0000000000000a01:<flags> [calling]
2b60.b50: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.dll [lacks
WinVerifyTrust]
2b60.b50: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status
22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\opengl32.dll [lacks
WinVerifyTrust]
2b60.b50: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks
WinVerifyTrust]
2b60.b50: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks
WinVerifyTrust]
2b60.b50: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks
WinVerifyTrust]
2b60.b50: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks
WinVerifyTrust]
2b60.b50: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks
WinVerifyTrust]
2b60.b50: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll
[lacks WinVerifyTrust]
2b60.b50: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll
[lacks WinVerifyTrust]
2b60.b50: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll
[lacks WinVerifyTrust]
2b60.b50: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Windows\System32\winmm.dll [lacks WinVerifyTrust]
2b60.b50: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status
22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\glu32.dll [lacks
WinVerifyTrust]
2b60.b50: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Windows\System32\mpr.dll [lacks WinVerifyTrust]
2b60.b50: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status
22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\winspool.drv [lacks
WinVerifyTrust]
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1
'advapi32.dll'.
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2
'gdi32.dll'.
2b60.b50: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4
'user32.dll'.
2b60.b50: supHardenedWinVerifyImageByHandle: -> 0
(\Device\HarddiskVolume4\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.16299.125_none_88782a244abc4c60\comctl32.dll)
2b60.b50: supR3HardenedWinVerifyCacheInsert:
\Device\HarddiskVolume4\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.16299.125_none_88782a244abc4c60\comctl32.dll
2b60.b50: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Windows\System32\winmmbase.dll [lacks WinVerifyTrust]
2b60.b50: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on
\Device\HarddiskVolume4\Windows\System32\IPHLPAPI.DLL [lacks WinVerifyTrust]
2b60.b50: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status
-626 (0xfffffd8e)) on \Device\HarddiskVolume4\Windows\System32\bcrypt.dll
[lacks WinVerifyTrust]
2b60.b50: Error (rc=0):
2b60.b50: supR3HardenedScreenImage/NtCreateSection: cached rc=Unknown Status
-626 (0xfffffd8e) fImage=1 fProtect=0x10 fAccess=0xf cHits=4
\Device\HarddiskVolume4\Windows\System32\bcrypt.dll
2b60.b50: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000190 'C:\Program
Files\Oracle\VirtualBox\VirtualBox.dll'
b5c.1260: supR3HardNtChildWaitFor[2]: Quitting: ExitCode=0x1 (rcNtWait=0x0,
rcNt1=0x0, rcNt2=0x103, rcNt3=0x103, 1673 ms, the end);
35e4.4170: supR3HardNtChildWaitFor[1]: Quitting: ExitCode=0x1 (rcNtWait=0x0,
rcNt1=0x0, rcNt2=0x103, rcNt3=0x103, 2308 ms, the end);