VirtualBox

Ticket #15752: VBoxHardening.4.log

File VBoxHardening.4.log, 106.2 KB (added by AnchoDotto, 7 years ago)
Line 
123b0.2088: Log file opened: 5.1.22r115126 g_hStartupLog=0000000000000084 g_uNtVerCombined=0xa03f6d00
223b0.2088: \SystemRoot\System32\ntdll.dll:
323b0.2088: CreationTime: 2017-07-02T05:48:10.225937400Z
423b0.2088: LastWriteTime: 2017-07-02T05:48:10.225937400Z
523b0.2088: ChangeTime: 2017-07-10T16:21:39.395525500Z
623b0.2088: FileAttributes: 0x20
723b0.2088: Size: 0x1dc2b8
823b0.2088: NT Headers: 0xe0
923b0.2088: Timestamp: 0x169de450
1023b0.2088: Machine: 0x8664 - amd64
1123b0.2088: Timestamp: 0x169de450
1223b0.2088: Image Version: 10.0
1323b0.2088: SizeOfImage: 0x1e0000 (1966080)
1423b0.2088: Resource Dir: 0x175000 LB 0x69eb8
1523b0.2088: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
1623b0.2088: [Raw version resource data: 0x1750f0 LB 0x380, codepage 0x0 (reserved 0x0)]
1723b0.2088: ProductName: Microsoft® Windows® Operating System
1823b0.2088: ProductVersion: 10.0.16237.1001
1923b0.2088: FileVersion: 10.0.16237.1001 (WinBuild.160101.0800)
2023b0.2088: FileDescription: NT Layer DLL
2123b0.2088: \SystemRoot\System32\kernel32.dll:
2223b0.2088: CreationTime: 2017-07-02T05:48:40.132130500Z
2323b0.2088: LastWriteTime: 2017-07-02T05:48:40.132130500Z
2423b0.2088: ChangeTime: 2017-07-10T16:21:37.973411000Z
2523b0.2088: FileAttributes: 0x20
2623b0.2088: Size: 0xaa3d0
2723b0.2088: NT Headers: 0xe8
2823b0.2088: Timestamp: 0x4fc42b98
2923b0.2088: Machine: 0x8664 - amd64
3023b0.2088: Timestamp: 0x4fc42b98
3123b0.2088: Image Version: 10.0
3223b0.2088: SizeOfImage: 0xac000 (704512)
3323b0.2088: Resource Dir: 0xaa000 LB 0x520
3423b0.2088: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
3523b0.2088: [Raw version resource data: 0xaa0b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
3623b0.2088: ProductName: Microsoft® Windows® Operating System
3723b0.2088: ProductVersion: 10.0.16237.1001
3823b0.2088: FileVersion: 10.0.16237.1001 (WinBuild.160101.0800)
3923b0.2088: FileDescription: Windows NT BASE API Client DLL
4023b0.2088: \SystemRoot\System32\KernelBase.dll:
4123b0.2088: CreationTime: 2017-07-02T05:48:08.100942400Z
4223b0.2088: LastWriteTime: 2017-07-02T05:48:08.100942400Z
4323b0.2088: ChangeTime: 2017-07-10T16:21:38.035914900Z
4423b0.2088: FileAttributes: 0x20
4523b0.2088: Size: 0x2667f8
4623b0.2088: NT Headers: 0xf8
4723b0.2088: Timestamp: 0xe6f210ec
4823b0.2088: Machine: 0x8664 - amd64
4923b0.2088: Timestamp: 0xe6f210ec
5023b0.2088: Image Version: 10.0
5123b0.2088: SizeOfImage: 0x268000 (2523136)
5223b0.2088: Resource Dir: 0x247000 LB 0x548
5323b0.2088: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
5423b0.2088: [Raw version resource data: 0x2470b0 LB 0x3bc, codepage 0x0 (reserved 0x0)]
5523b0.2088: ProductName: Microsoft® Windows® Operating System
5623b0.2088: ProductVersion: 10.0.16237.1001
5723b0.2088: FileVersion: 10.0.16237.1001 (WinBuild.160101.0800)
5823b0.2088: FileDescription: Windows NT BASE API Client DLL
5923b0.2088: \SystemRoot\System32\apisetschema.dll:
6023b0.2088: CreationTime: 2017-07-02T05:48:41.694628000Z
6123b0.2088: LastWriteTime: 2017-07-02T05:48:41.694628000Z
6223b0.2088: ChangeTime: 2017-07-10T16:21:28.550182200Z
6323b0.2088: FileAttributes: 0x20
6423b0.2088: Size: 0x1a350
6523b0.2088: NT Headers: 0xc8
6623b0.2088: Timestamp: 0xf46ff039
6723b0.2088: Machine: 0x8664 - amd64
6823b0.2088: Timestamp: 0xf46ff039
6923b0.2088: Image Version: 10.0
7023b0.2088: SizeOfImage: 0x1c000 (114688)
7123b0.2088: Resource Dir: 0x1b000 LB 0x408
7223b0.2088: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
7323b0.2088: [Raw version resource data: 0x1b060 LB 0x3a8, codepage 0x0 (reserved 0x0)]
7423b0.2088: ProductName: Microsoft® Windows® Operating System
7523b0.2088: ProductVersion: 10.0.16237.1001
7623b0.2088: FileVersion: 10.0.16237.1001 (WinBuild.160101.0800)
7723b0.2088: FileDescription: ApiSet Schema DLL
7823b0.2088: supR3HardenedWinFindAdversaries: 0x0
7923b0.2088: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
8023b0.2088: Calling main()
8123b0.2088: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2
8223b0.2088: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
8323b0.2088: SUPR3HardenedMain: Respawn #1
8423b0.2088: System32: \Device\HarddiskVolume2\Windows\System32
8523b0.2088: WinSxS: \Device\HarddiskVolume2\Windows\WinSxS
8623b0.2088: KnownDllPath: C:\WINDOWS\System32
8723b0.2088: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
8823b0.2088: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe)
8923b0.2088: supR3HardNtEnableThreadCreation:
9023b0.2088: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffca5ed9270 pvNtTerminateThread=00007ffca5f019c0
9123b0.2088: supR3HardenedWinDoReSpawn(1): New child 277c.c58 [kernel32].
9223b0.2088: supR3HardNtChildGatherData: PebBaseAddress=000000000043c000 cbPeb=0x388
9323b0.2088: supR3HardNtPuChFindNtdll: uNtDllParentAddr=00007ffca5e60000 uNtDllChildAddr=00007ffca5e60000
9423b0.2088: supR3HardenedWinSetupChildInit: uLdrInitThunk=00007ffca5ed9270
9523b0.2088: supR3HardenedWinSetupChildInit: Start child.
9623b0.2088: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 0 ms.
9723b0.2088: supR3HardNtChildPurify: Startup delay kludge #1/0: 266 ms, 17 sleeps
9823b0.2088: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
9923b0.2088: *0000000000000000-000000000027ffff 0x0001/0x0000 0x0000000
10023b0.2088: *0000000000280000-000000000029ffff 0x0004/0x0004 0x0020000
10123b0.2088: *00000000002a0000-00000000002b8fff 0x0002/0x0002 0x0040000
10223b0.2088: 00000000002b9000-00000000002bffff 0x0001/0x0000 0x0000000
10323b0.2088: *00000000002c0000-00000000003bafff 0x0000/0x0004 0x0020000
10423b0.2088: 00000000003bb000-00000000003bdfff 0x0104/0x0004 0x0020000
10523b0.2088: 00000000003be000-00000000003bffff 0x0004/0x0004 0x0020000
10623b0.2088: *00000000003c0000-00000000003c3fff 0x0002/0x0002 0x0040000
10723b0.2088: 00000000003c4000-00000000003cffff 0x0001/0x0000 0x0000000
10823b0.2088: *00000000003d0000-00000000003d0fff 0x0004/0x0004 0x0020000
10923b0.2088: 00000000003d1000-00000000003fffff 0x0001/0x0000 0x0000000
11023b0.2088: *0000000000400000-000000000043bfff 0x0000/0x0004 0x0020000
11123b0.2088: 000000000043c000-000000000043efff 0x0004/0x0004 0x0020000
11223b0.2088: 000000000043f000-00000000005fffff 0x0000/0x0004 0x0020000
11323b0.2088: 0000000000600000-000000007ffdffff 0x0001/0x0000 0x0000000
11423b0.2088: *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000
11523b0.2088: *000000007ffe1000-000000007ffeffff 0x0000/0x0002 0x0020000
11623b0.2088: 000000007fff0000-00007ff6d663ffff 0x0001/0x0000 0x0000000
11723b0.2088: *00007ff6d6640000-00007ff6d6662fff 0x0002/0x0002 0x0040000
11823b0.2088: 00007ff6d6663000-00007ff6d72bffff 0x0001/0x0000 0x0000000
11923b0.2088: *00007ff6d72c0000-00007ff6d72c0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
12023b0.2088: 00007ff6d72c1000-00007ff6d7330fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
12123b0.2088: 00007ff6d7331000-00007ff6d7331fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
12223b0.2088: 00007ff6d7332000-00007ff6d7376fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
12323b0.2088: 00007ff6d7377000-00007ff6d7377fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
12423b0.2088: 00007ff6d7378000-00007ff6d7378fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
12523b0.2088: 00007ff6d7379000-00007ff6d737dfff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
12623b0.2088: 00007ff6d737e000-00007ff6d737efff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
12723b0.2088: 00007ff6d737f000-00007ff6d737ffff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
12823b0.2088: 00007ff6d7380000-00007ff6d7383fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
12923b0.2088: 00007ff6d7384000-00007ff6d73cbfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
13023b0.2088: 00007ff6d73cc000-00007ffca5e5ffff 0x0001/0x0000 0x0000000
13123b0.2088: *00007ffca5e60000-00007ffca5e60fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
13223b0.2088: 00007ffca5e61000-00007ffca5f73fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
13323b0.2088: 00007ffca5f74000-00007ffca5fb9fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
13423b0.2088: 00007ffca5fba000-00007ffca5fc1fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
13523b0.2088: 00007ffca5fc2000-00007ffca5fcffff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
13623b0.2088: 00007ffca5fd0000-00007ffca5fd0fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
13723b0.2088: 00007ffca5fd1000-00007ffca5fd3fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
13823b0.2088: 00007ffca5fd4000-00007ffca603ffff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
13923b0.2088: 00007ffca6040000-00007ffffffdffff 0x0001/0x0000 0x0000000
14023b0.2088: *00007ffffffe0000-00007ffffffeffff 0x0001/0x0002 0x0020000
14123b0.2088: VirtualBox.exe: timestamp 0x5903619d (rc=VINF_SUCCESS)
14223b0.2088: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
14323b0.2088: \Device\HarddiskVolume2\Windows\System32\ntdll.dll: VERR_CR_X509_CPV_NOT_VALID_AT_TIME for 0x169de450; retrying against current time: 0x59658ad0.
14423b0.2088: '\Device\HarddiskVolume2\Windows\System32\ntdll.dll' has no imports
14523b0.2088: supR3HardNtChildPurify: Done after 313 ms and 0 fixes (loop #0).
146277c.c58: Log file opened: 5.1.22r115126 g_hStartupLog=0000000000000004 g_uNtVerCombined=0xa03f6d00
147277c.c58: supR3HardenedVmProcessInit: uNtDllAddr=00007ffca5e60000 g_uNtVerCombined=0xa03f6d00
14823b0.2088: supR3HardNtEnableThreadCreation:
149277c.c58: ntdll.dll: timestamp 0x169de450 (rc=VINF_SUCCESS)
150277c.c58: New simple heap: #1 0000000000700000 LB 0x400000 (for 1966080 allocation)
151277c.c58: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
152277c.c58: System32: \Device\HarddiskVolume2\Windows\System32
153277c.c58: WinSxS: \Device\HarddiskVolume2\Windows\WinSxS
154277c.c58: KnownDllPath: C:\WINDOWS\System32
155277c.c58: supR3HardenedVmProcessInit: Opening vboxdrv stub...
156277c.c58: supR3HardenedVmProcessInit: Restoring LdrInitializeThunk...
157277c.c58: supR3HardenedVmProcessInit: Returning to LdrInitializeThunk...
158277c.c58: Registered Dll notification callback with NTDLL.
159277c.c58: \Device\HarddiskVolume2\Windows\System32\kernel32.dll: VERR_CR_X509_CPV_NOT_VALID_AT_TIME for 0x4fc42b98; retrying against current time: 0x59658ad1.
160277c.c58: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\kernel32.dll)
161277c.c58: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\kernel32.dll
162277c.c58: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\KERNEL32.DLL (Input=KERNEL32.DLL, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000004001:<flags> [calling]
163277c.c58: supR3HardenedDllNotificationCallback: load 00007ffca2f70000 LB 0x00268000 C:\WINDOWS\System32\KERNELBASE.dll [fFlags=0x0]
164277c.c58: \Device\HarddiskVolume2\Windows\System32\KernelBase.dll: VERR_CR_X509_CPV_NOT_VALID_AT_TIME for 0xe6f210ec; retrying against current time: 0x59658ad1.
165277c.c58: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\KernelBase.dll)
166277c.c58: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\KernelBase.dll
167277c.c58: supR3HardenedDllNotificationCallback: load 00007ffca33d0000 LB 0x000ac000 C:\WINDOWS\System32\KERNEL32.DLL [fFlags=0x0]
168277c.c58: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
169277c.c58: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffca33d0000 'C:\WINDOWS\System32\KERNEL32.DLL'
170277c.c58: supR3HardenedDllNotificationCallback: load 00007ff6d72c0000 LB 0x0010c000 C:\Program Files\Oracle\VirtualBox\VirtualBox.exe [fFlags=0x0]
171277c.c58: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
172277c.c58: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe)
173277c.c58: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
174277c.c58: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffca5ed9270 pvNtTerminateThread=00007ffca5f019c0
17523b0.2088: supR3HardNtChildWaitFor: Found expected request 1 (CloseEvents) after 174 ms.
176277c.c58: \SystemRoot\System32\ntdll.dll:
177277c.c58: CreationTime: 2017-07-02T05:48:10.225937400Z
178277c.c58: LastWriteTime: 2017-07-02T05:48:10.225937400Z
179277c.c58: ChangeTime: 2017-07-10T16:21:39.395525500Z
180277c.c58: FileAttributes: 0x20
181277c.c58: Size: 0x1dc2b8
182277c.c58: NT Headers: 0xe0
183277c.c58: Timestamp: 0x169de450
184277c.c58: Machine: 0x8664 - amd64
185277c.c58: Timestamp: 0x169de450
186277c.c58: Image Version: 10.0
187277c.c58: SizeOfImage: 0x1e0000 (1966080)
188277c.c58: Resource Dir: 0x175000 LB 0x69eb8
189277c.c58: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
190277c.c58: [Raw version resource data: 0x1750f0 LB 0x380, codepage 0x0 (reserved 0x0)]
191277c.c58: ProductName: Microsoft® Windows® Operating System
192277c.c58: ProductVersion: 10.0.16237.1001
193277c.c58: FileVersion: 10.0.16237.1001 (WinBuild.160101.0800)
194277c.c58: FileDescription: NT Layer DLL
195277c.c58: \SystemRoot\System32\kernel32.dll:
196277c.c58: CreationTime: 2017-07-02T05:48:40.132130500Z
197277c.c58: LastWriteTime: 2017-07-02T05:48:40.132130500Z
198277c.c58: ChangeTime: 2017-07-10T16:21:37.973411000Z
199277c.c58: FileAttributes: 0x20
200277c.c58: Size: 0xaa3d0
201277c.c58: NT Headers: 0xe8
202277c.c58: Timestamp: 0x4fc42b98
203277c.c58: Machine: 0x8664 - amd64
204277c.c58: Timestamp: 0x4fc42b98
205277c.c58: Image Version: 10.0
206277c.c58: SizeOfImage: 0xac000 (704512)
207277c.c58: Resource Dir: 0xaa000 LB 0x520
208277c.c58: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
209277c.c58: [Raw version resource data: 0xaa0b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
210277c.c58: ProductName: Microsoft® Windows® Operating System
211277c.c58: ProductVersion: 10.0.16237.1001
212277c.c58: FileVersion: 10.0.16237.1001 (WinBuild.160101.0800)
213277c.c58: FileDescription: Windows NT BASE API Client DLL
214277c.c58: \SystemRoot\System32\KernelBase.dll:
215277c.c58: CreationTime: 2017-07-02T05:48:08.100942400Z
216277c.c58: LastWriteTime: 2017-07-02T05:48:08.100942400Z
217277c.c58: ChangeTime: 2017-07-10T16:21:38.035914900Z
218277c.c58: FileAttributes: 0x20
219277c.c58: Size: 0x2667f8
220277c.c58: NT Headers: 0xf8
221277c.c58: Timestamp: 0xe6f210ec
222277c.c58: Machine: 0x8664 - amd64
223277c.c58: Timestamp: 0xe6f210ec
224277c.c58: Image Version: 10.0
225277c.c58: SizeOfImage: 0x268000 (2523136)
226277c.c58: Resource Dir: 0x247000 LB 0x548
227277c.c58: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
228277c.c58: [Raw version resource data: 0x2470b0 LB 0x3bc, codepage 0x0 (reserved 0x0)]
229277c.c58: ProductName: Microsoft® Windows® Operating System
230277c.c58: ProductVersion: 10.0.16237.1001
231277c.c58: FileVersion: 10.0.16237.1001 (WinBuild.160101.0800)
232277c.c58: FileDescription: Windows NT BASE API Client DLL
233277c.c58: \SystemRoot\System32\apisetschema.dll:
234277c.c58: CreationTime: 2017-07-02T05:48:41.694628000Z
235277c.c58: LastWriteTime: 2017-07-02T05:48:41.694628000Z
236277c.c58: ChangeTime: 2017-07-10T16:21:28.550182200Z
237277c.c58: FileAttributes: 0x20
238277c.c58: Size: 0x1a350
239277c.c58: NT Headers: 0xc8
240277c.c58: Timestamp: 0xf46ff039
241277c.c58: Machine: 0x8664 - amd64
242277c.c58: Timestamp: 0xf46ff039
243277c.c58: Image Version: 10.0
244277c.c58: SizeOfImage: 0x1c000 (114688)
245277c.c58: Resource Dir: 0x1b000 LB 0x408
246277c.c58: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
247277c.c58: [Raw version resource data: 0x1b060 LB 0x3a8, codepage 0x0 (reserved 0x0)]
248277c.c58: ProductName: Microsoft® Windows® Operating System
249277c.c58: ProductVersion: 10.0.16237.1001
250277c.c58: FileVersion: 10.0.16237.1001 (WinBuild.160101.0800)
251277c.c58: FileDescription: ApiSet Schema DLL
252277c.c58: supR3HardenedWinFindAdversaries: 0x0
253277c.c58: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
254277c.c58: Calling main()
255277c.c58: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2
256277c.c58: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
257277c.c58: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
258277c.c58: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe)
259277c.c58: SUPR3HardenedMain: Respawn #2
260277c.c58: supR3HardNtEnableThreadCreation:
261277c.c58: \Device\HarddiskVolume2\Windows\System32\ntdll.dll: VERR_CR_X509_CPV_NOT_VALID_AT_TIME for 0x169de450; retrying against current time: 0x59658ad1.
262277c.c58: '\Device\HarddiskVolume2\Windows\System32\ntdll.dll' has no imports
263277c.c58: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\ntdll.dll)
264277c.c58: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\ntdll.dll
265277c.c58: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\ntdll.dll (Input=ntdll.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
266277c.c58: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffca5e60000 'C:\WINDOWS\System32\ntdll.dll'
267277c.c58: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\apphelp.dll)
268277c.c58: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\apphelp.dll
269277c.c58: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\apphelp.dll (rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000000000:<flags> [calling]
270277c.c58: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\apphelp.dll [lacks WinVerifyTrust]
271277c.c58: supR3HardenedDllNotificationCallback: load 00007ffca05a0000 LB 0x00081000 C:\WINDOWS\system32\apphelp.dll [fFlags=0x0]
272277c.c58: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\apphelp.dll [lacks WinVerifyTrust]
273277c.c58: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ntdll.dll [lacks WinVerifyTrust]
274277c.c58: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\ntdll.dll (Input=ntdll.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
275277c.c58: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffca5e60000 'C:\WINDOWS\System32\ntdll.dll'
276277c.c58: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffca05a0000 'C:\WINDOWS\system32\apphelp.dll'
277277c.c58: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffca5ed9270 pvNtTerminateThread=00007ffca5f019c0
278277c.c58: supR3HardenedWinDoReSpawn(2): New child 1dd0.2354 [kernel32].
279277c.c58: supR3HardenedWinReSpawn: NtSetInformationThread/ThreadHideFromDebugger failed: 0xc0000022 (harmless)
280277c.c58: supR3HardNtChildGatherData: PebBaseAddress=0000000000c5b000 cbPeb=0x388
281277c.c58: supR3HardNtPuChFindNtdll: uNtDllParentAddr=00007ffca5e60000 uNtDllChildAddr=00007ffca5e60000
282277c.c58: supR3HardenedWinSetupChildInit: uLdrInitThunk=00007ffca5ed9270
283277c.c58: supR3HardenedWinSetupChildInit: Start child.
284277c.c58: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 0 ms.
285277c.c58: supR3HardNtChildPurify: Startup delay kludge #1/0: 266 ms, 17 sleeps
286277c.c58: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
287277c.c58: *0000000000000000-0000000000b3ffff 0x0001/0x0000 0x0000000
288277c.c58: *0000000000b40000-0000000000b5ffff 0x0004/0x0004 0x0020000
289277c.c58: *0000000000b60000-0000000000b78fff 0x0002/0x0002 0x0040000
290277c.c58: 0000000000b79000-0000000000b7ffff 0x0001/0x0000 0x0000000
291277c.c58: *0000000000b80000-0000000000b83fff 0x0002/0x0002 0x0040000
292277c.c58: 0000000000b84000-0000000000b8ffff 0x0001/0x0000 0x0000000
293277c.c58: *0000000000b90000-0000000000b90fff 0x0004/0x0004 0x0020000
294277c.c58: 0000000000b91000-0000000000bfffff 0x0001/0x0000 0x0000000
295277c.c58: *0000000000c00000-0000000000c5afff 0x0000/0x0004 0x0020000
296277c.c58: 0000000000c5b000-0000000000c5dfff 0x0004/0x0004 0x0020000
297277c.c58: 0000000000c5e000-0000000000dfffff 0x0000/0x0004 0x0020000
298277c.c58: *0000000000e00000-0000000000efafff 0x0000/0x0004 0x0020000
299277c.c58: 0000000000efb000-0000000000efdfff 0x0104/0x0004 0x0020000
300277c.c58: 0000000000efe000-0000000000efffff 0x0004/0x0004 0x0020000
301277c.c58: 0000000000f00000-000000007ffdffff 0x0001/0x0000 0x0000000
302277c.c58: *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000
303277c.c58: *000000007ffe1000-000000007ffeffff 0x0000/0x0002 0x0020000
304277c.c58: 000000007fff0000-00007ff6d6b2ffff 0x0001/0x0000 0x0000000
305277c.c58: *00007ff6d6b30000-00007ff6d6b52fff 0x0002/0x0002 0x0040000
306277c.c58: 00007ff6d6b53000-00007ff6d72bffff 0x0001/0x0000 0x0000000
307277c.c58: *00007ff6d72c0000-00007ff6d72c0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
308277c.c58: 00007ff6d72c1000-00007ff6d7330fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
309277c.c58: 00007ff6d7331000-00007ff6d7331fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
310277c.c58: 00007ff6d7332000-00007ff6d7376fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
311277c.c58: 00007ff6d7377000-00007ff6d7377fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
312277c.c58: 00007ff6d7378000-00007ff6d7378fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
313277c.c58: 00007ff6d7379000-00007ff6d737dfff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
314277c.c58: 00007ff6d737e000-00007ff6d737efff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
315277c.c58: 00007ff6d737f000-00007ff6d737ffff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
316277c.c58: 00007ff6d7380000-00007ff6d7383fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
317277c.c58: 00007ff6d7384000-00007ff6d73cbfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
318277c.c58: 00007ff6d73cc000-00007ffca5e5ffff 0x0001/0x0000 0x0000000
319277c.c58: *00007ffca5e60000-00007ffca5e60fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
320277c.c58: 00007ffca5e61000-00007ffca5f73fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
321277c.c58: 00007ffca5f74000-00007ffca5fb9fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
322277c.c58: 00007ffca5fba000-00007ffca5fc1fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
323277c.c58: 00007ffca5fc2000-00007ffca5fcffff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
324277c.c58: 00007ffca5fd0000-00007ffca5fd0fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
325277c.c58: 00007ffca5fd1000-00007ffca5fd3fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
326277c.c58: 00007ffca5fd4000-00007ffca603ffff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
327277c.c58: 00007ffca6040000-00007ffffffdffff 0x0001/0x0000 0x0000000
328277c.c58: *00007ffffffe0000-00007ffffffeffff 0x0001/0x0002 0x0020000
329277c.c58: VirtualBox.exe: timestamp 0x5903619d (rc=VINF_SUCCESS)
330277c.c58: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
331277c.c58: \Device\HarddiskVolume2\Windows\System32\ntdll.dll: VERR_CR_X509_CPV_NOT_VALID_AT_TIME for 0x169de450; retrying against current time: 0x59658ad1.
332277c.c58: '\Device\HarddiskVolume2\Windows\System32\ntdll.dll' has no imports
333277c.c58: supR3HardNtChildPurify: Done after 313 ms and 0 fixes (loop #0).
3341dd0.2354: Log file opened: 5.1.22r115126 g_hStartupLog=0000000000000004 g_uNtVerCombined=0xa03f6d00
3351dd0.2354: supR3HardenedVmProcessInit: uNtDllAddr=00007ffca5e60000 g_uNtVerCombined=0xa03f6d00
336277c.c58: supR3HardenedEarlyCompact: Removed heap 1 (0x00000000700000 LB 0x400000)
337277c.c58: supR3HardNtEnableThreadCreation:
3381dd0.2354: ntdll.dll: timestamp 0x169de450 (rc=VINF_SUCCESS)
3391dd0.2354: New simple heap: #1 0000000001000000 LB 0x400000 (for 1966080 allocation)
3401dd0.2354: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
3411dd0.2354: System32: \Device\HarddiskVolume2\Windows\System32
3421dd0.2354: WinSxS: \Device\HarddiskVolume2\Windows\WinSxS
3431dd0.2354: KnownDllPath: C:\WINDOWS\System32
3441dd0.2354: supR3HardenedVmProcessInit: Opening vboxdrv...
3451dd0.2354: supR3HardenedVmProcessInit: Restoring LdrInitializeThunk...
3461dd0.2354: supR3HardenedVmProcessInit: Returning to LdrInitializeThunk...
3471dd0.2354: Registered Dll notification callback with NTDLL.
3481dd0.2354: \Device\HarddiskVolume2\Windows\System32\kernel32.dll: VERR_CR_X509_CPV_NOT_VALID_AT_TIME for 0x4fc42b98; retrying against current time: 0x59658ad1.
3491dd0.2354: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\kernel32.dll)
3501dd0.2354: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\kernel32.dll
3511dd0.2354: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\KERNEL32.DLL (Input=KERNEL32.DLL, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000004001:<flags> [calling]
3521dd0.2354: supR3HardenedDllNotificationCallback: load 00007ffca2f70000 LB 0x00268000 C:\WINDOWS\System32\KERNELBASE.dll [fFlags=0x0]
3531dd0.2354: \Device\HarddiskVolume2\Windows\System32\KernelBase.dll: VERR_CR_X509_CPV_NOT_VALID_AT_TIME for 0xe6f210ec; retrying against current time: 0x59658ad1.
3541dd0.2354: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\KernelBase.dll)
3551dd0.2354: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\KernelBase.dll
3561dd0.2354: supR3HardenedDllNotificationCallback: load 00007ffca33d0000 LB 0x000ac000 C:\WINDOWS\System32\KERNEL32.DLL [fFlags=0x0]
3571dd0.2354: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
3581dd0.2354: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffca33d0000 'C:\WINDOWS\System32\KERNEL32.DLL'
3591dd0.2354: supR3HardenedDllNotificationCallback: load 00007ff6d72c0000 LB 0x0010c000 C:\Program Files\Oracle\VirtualBox\VirtualBox.exe [fFlags=0x0]
3601dd0.2354: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
3611dd0.2354: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe)
3621dd0.2354: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
3631dd0.2354: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffca5ed9270 pvNtTerminateThread=00007ffca5f019c0
364277c.c58: supR3HardNtChildWaitFor: Found expected request 1 (CloseEvents) after 172 ms.
3651dd0.2354: \SystemRoot\System32\ntdll.dll:
3661dd0.2354: CreationTime: 2017-07-02T05:48:10.225937400Z
3671dd0.2354: LastWriteTime: 2017-07-02T05:48:10.225937400Z
3681dd0.2354: ChangeTime: 2017-07-10T16:21:39.395525500Z
3691dd0.2354: FileAttributes: 0x20
3701dd0.2354: Size: 0x1dc2b8
3711dd0.2354: NT Headers: 0xe0
3721dd0.2354: Timestamp: 0x169de450
3731dd0.2354: Machine: 0x8664 - amd64
3741dd0.2354: Timestamp: 0x169de450
3751dd0.2354: Image Version: 10.0
3761dd0.2354: SizeOfImage: 0x1e0000 (1966080)
3771dd0.2354: Resource Dir: 0x175000 LB 0x69eb8
3781dd0.2354: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
3791dd0.2354: [Raw version resource data: 0x1750f0 LB 0x380, codepage 0x0 (reserved 0x0)]
3801dd0.2354: ProductName: Microsoft® Windows® Operating System
3811dd0.2354: ProductVersion: 10.0.16237.1001
3821dd0.2354: FileVersion: 10.0.16237.1001 (WinBuild.160101.0800)
3831dd0.2354: FileDescription: NT Layer DLL
3841dd0.2354: \SystemRoot\System32\kernel32.dll:
3851dd0.2354: CreationTime: 2017-07-02T05:48:40.132130500Z
3861dd0.2354: LastWriteTime: 2017-07-02T05:48:40.132130500Z
3871dd0.2354: ChangeTime: 2017-07-10T16:21:37.973411000Z
3881dd0.2354: FileAttributes: 0x20
3891dd0.2354: Size: 0xaa3d0
3901dd0.2354: NT Headers: 0xe8
3911dd0.2354: Timestamp: 0x4fc42b98
3921dd0.2354: Machine: 0x8664 - amd64
3931dd0.2354: Timestamp: 0x4fc42b98
3941dd0.2354: Image Version: 10.0
3951dd0.2354: SizeOfImage: 0xac000 (704512)
3961dd0.2354: Resource Dir: 0xaa000 LB 0x520
3971dd0.2354: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
3981dd0.2354: [Raw version resource data: 0xaa0b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
3991dd0.2354: ProductName: Microsoft® Windows® Operating System
4001dd0.2354: ProductVersion: 10.0.16237.1001
4011dd0.2354: FileVersion: 10.0.16237.1001 (WinBuild.160101.0800)
4021dd0.2354: FileDescription: Windows NT BASE API Client DLL
4031dd0.2354: \SystemRoot\System32\KernelBase.dll:
4041dd0.2354: CreationTime: 2017-07-02T05:48:08.100942400Z
4051dd0.2354: LastWriteTime: 2017-07-02T05:48:08.100942400Z
4061dd0.2354: ChangeTime: 2017-07-10T16:21:38.035914900Z
4071dd0.2354: FileAttributes: 0x20
4081dd0.2354: Size: 0x2667f8
4091dd0.2354: NT Headers: 0xf8
4101dd0.2354: Timestamp: 0xe6f210ec
4111dd0.2354: Machine: 0x8664 - amd64
4121dd0.2354: Timestamp: 0xe6f210ec
4131dd0.2354: Image Version: 10.0
4141dd0.2354: SizeOfImage: 0x268000 (2523136)
4151dd0.2354: Resource Dir: 0x247000 LB 0x548
4161dd0.2354: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
4171dd0.2354: [Raw version resource data: 0x2470b0 LB 0x3bc, codepage 0x0 (reserved 0x0)]
4181dd0.2354: ProductName: Microsoft® Windows® Operating System
4191dd0.2354: ProductVersion: 10.0.16237.1001
4201dd0.2354: FileVersion: 10.0.16237.1001 (WinBuild.160101.0800)
4211dd0.2354: FileDescription: Windows NT BASE API Client DLL
4221dd0.2354: \SystemRoot\System32\apisetschema.dll:
4231dd0.2354: CreationTime: 2017-07-02T05:48:41.694628000Z
4241dd0.2354: LastWriteTime: 2017-07-02T05:48:41.694628000Z
4251dd0.2354: ChangeTime: 2017-07-10T16:21:28.550182200Z
4261dd0.2354: FileAttributes: 0x20
4271dd0.2354: Size: 0x1a350
4281dd0.2354: NT Headers: 0xc8
4291dd0.2354: Timestamp: 0xf46ff039
4301dd0.2354: Machine: 0x8664 - amd64
4311dd0.2354: Timestamp: 0xf46ff039
4321dd0.2354: Image Version: 10.0
4331dd0.2354: SizeOfImage: 0x1c000 (114688)
4341dd0.2354: Resource Dir: 0x1b000 LB 0x408
4351dd0.2354: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
4361dd0.2354: [Raw version resource data: 0x1b060 LB 0x3a8, codepage 0x0 (reserved 0x0)]
4371dd0.2354: ProductName: Microsoft® Windows® Operating System
4381dd0.2354: ProductVersion: 10.0.16237.1001
4391dd0.2354: FileVersion: 10.0.16237.1001 (WinBuild.160101.0800)
4401dd0.2354: FileDescription: ApiSet Schema DLL
4411dd0.2354: supR3HardenedWinFindAdversaries: 0x0
4421dd0.2354: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
4431dd0.2354: Calling main()
4441dd0.2354: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2
4451dd0.2354: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
4461dd0.2354: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
4471dd0.2354: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe)
4481dd0.2354: SUPR3HardenedMain: Final process, opening VBoxDrv...
4491dd0.2354: supR3HardenedEarlyCompact: Removed heap 1 (0x00000001000000 LB 0x400000)
4501dd0.2354: supR3HardNtEnableThreadCreation:
4511dd0.2354: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSupLib.dll)
4521dd0.2354: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSupLib.dll
4531dd0.2354: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
4541dd0.2354: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
4551dd0.2354: supR3HardenedDllNotificationCallback: load 00007ffc9f050000 LB 0x00005000 C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL [fFlags=0x0]
4561dd0.2354: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
4571dd0.2354: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
4581dd0.2354: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
4591dd0.2354: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc9f050000 'C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL'
4601dd0.2354: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
4611dd0.2354: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
4621dd0.2354: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc9f050000 'C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL'
4631dd0.2354: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc9f050000 'C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL'
4641dd0.2354: \Device\HarddiskVolume2\Windows\System32\wintrust.dll: VERR_CR_X509_CPV_NOT_VALID_AT_TIME for 0x30ef84fa; retrying against current time: 0x59658ad1.
4651dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
4661dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msasn1.dll'.
4671dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'crypt32.dll'.
4681dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27 'rpcrt4.dll'.
4691dd0.2354: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\wintrust.dll)
4701dd0.2354: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\wintrust.dll
4711dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
4721dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
4731dd0.2354: \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll: VERR_CR_X509_CPV_NOT_VALID_AT_TIME for 0x884b69ac; retrying against current time: 0x59658ad1.
4741dd0.2354: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll)
4751dd0.2354: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll
4761dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'crypt32.dll'...
4771dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'crypt32.dll' -> '\Device\HarddiskVolume2\Windows\System32\crypt32.dll' [rcNtRedir=0xc0150008]
4781dd0.2354: \Device\HarddiskVolume2\Windows\System32\crypt32.dll: VERR_CR_X509_CPV_NOT_VALID_AT_TIME for 0x9ad46f36; retrying against current time: 0x59658ad1.
4791dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #33 'msasn1.dll'.
4801dd0.2354: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\crypt32.dll)
4811dd0.2354: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\crypt32.dll
4821dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msasn1.dll'...
4831dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'msasn1.dll' -> '\Device\HarddiskVolume2\Windows\System32\msasn1.dll' [rcNtRedir=0xc0150008]
4841dd0.2354: \Device\HarddiskVolume2\Windows\System32\msasn1.dll: VERR_CR_X509_CPV_NOT_VALID_AT_TIME for 0x527804d8; retrying against current time: 0x59658ad1.
4851dd0.2354: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\msasn1.dll)
4861dd0.2354: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\msasn1.dll
4871dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
4881dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
4891dd0.2354: \Device\HarddiskVolume2\Windows\System32\msvcrt.dll: VERR_CR_X509_CPV_NOT_VALID_AT_TIME for 0xcfb9733b; retrying against current time: 0x59658ad1.
4901dd0.2354: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\msvcrt.dll)
4911dd0.2354: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\msvcrt.dll
4921dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msasn1.dll'...
4931dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'msasn1.dll' -> '\Device\HarddiskVolume2\Windows\System32\msasn1.dll' [rcNtRedir=0xc0150008]
4941dd0.2354: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msasn1.dll [lacks WinVerifyTrust]
4951dd0.2354: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\Wintrust.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
4961dd0.2354: supR3HardenedDllNotificationCallback: load 00007ffca4b10000 LB 0x0009d000 C:\WINDOWS\System32\msvcrt.dll [fFlags=0x0]
4971dd0.2354: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
4981dd0.2354: supR3HardenedDllNotificationCallback: load 00007ffca21d0000 LB 0x00012000 C:\WINDOWS\System32\MSASN1.dll [fFlags=0x0]
4991dd0.2354: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msasn1.dll [lacks WinVerifyTrust]
5001dd0.2354: supR3HardenedDllNotificationCallback: load 00007ffca2ce0000 LB 0x000fa000 C:\WINDOWS\System32\ucrtbase.dll [fFlags=0x0]
5011dd0.2354: \Device\HarddiskVolume2\Windows\System32\ucrtbase.dll: VERR_CR_X509_CPV_NOT_VALID_AT_TIME for 0xff9dadd8; retrying against current time: 0x59658ad1.
5021dd0.2354: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\ucrtbase.dll)
5031dd0.2354: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\ucrtbase.dll
5041dd0.2354: supR3HardenedDllNotificationCallback: load 00007ffca2260000 LB 0x001ce000 C:\WINDOWS\System32\CRYPT32.dll [fFlags=0x0]
5051dd0.2354: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
5061dd0.2354: supR3HardenedDllNotificationCallback: load 00007ffca5170000 LB 0x00121000 C:\WINDOWS\System32\RPCRT4.dll [fFlags=0x0]
5071dd0.2354: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
5081dd0.2354: supR3HardenedDllNotificationCallback: load 00007ffca52b0000 LB 0x0005a000 C:\WINDOWS\System32\sechost.dll [fFlags=0x0]
5091dd0.2354: \Device\HarddiskVolume2\Windows\System32\sechost.dll: VERR_CR_X509_CPV_NOT_VALID_AT_TIME for 0xb5ff34cc; retrying against current time: 0x59658ad1.
5101dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'rpcrt4.dll'.
5111dd0.2354: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\sechost.dll)
5121dd0.2354: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\sechost.dll
5131dd0.2354: supR3HardenedDllNotificationCallback: load 00007ffca5310000 LB 0x000a1000 C:\WINDOWS\System32\advapi32.dll [fFlags=0x0]
5141dd0.2354: \Device\HarddiskVolume2\Windows\System32\advapi32.dll: VERR_CR_X509_CPV_NOT_VALID_AT_TIME for 0xecaf3300; retrying against current time: 0x59658ad1.
5151dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
5161dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'sechost.dll'.
5171dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'rpcrt4.dll'.
5181dd0.2354: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\advapi32.dll)
5191dd0.2354: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\advapi32.dll
5201dd0.2354: supR3HardenedDllNotificationCallback: load 00007ffca32d0000 LB 0x00058000 C:\WINDOWS\System32\Wintrust.dll [fFlags=0x0]
5211dd0.2354: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
5221dd0.2354: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
5231dd0.2354: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffca2f70000 'api-ms-win-core-synch-l1-2-0'
5241dd0.2354: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
5251dd0.2354: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffca2f70000 'api-ms-win-core-fibers-l1-1-1'
5261dd0.2354: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
5271dd0.2354: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffca2f70000 'api-ms-win-core-fibers-l1-1-1'
5281dd0.2354: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
5291dd0.2354: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffca2f70000 'api-ms-win-core-synch-l1-2-0'
5301dd0.2354: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-l1-2-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
5311dd0.2354: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffca2f70000 'api-ms-win-core-localization-l1-2-1'
5321dd0.2354: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffca32d0000 'C:\WINDOWS\system32\Wintrust.dll'
5331dd0.2354: supHardenedWinVerifyImageByHandle: -> -626 (\Device\HarddiskVolume2\Windows\System32\bcrypt.dll)
5341dd0.2354: Error (rc=0):
5351dd0.2354: supR3HardenedScreenImage/LdrLoadDll: rc=Unknown Status -626 (0xfffffd8e) fImage=1 fProtect=0x0 fAccess=0x0 \Device\HarddiskVolume2\Windows\System32\bcrypt.dll: Grown load config (244 to 256 bytes) includes non-zero bytes: 00 00 00 00 60 a9 01 80 01 00 00 00
5361dd0.2354: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\bcrypt.dll
5371dd0.2354: Error (rc=0):
5381dd0.2354: supR3HardenedMonitor_LdrLoadDll: rejecting 'C:\WINDOWS\system32\bcrypt.dll' (C:\WINDOWS\system32\bcrypt.dll): rcNt=0xc0000190
5391dd0.2354: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000190 'C:\WINDOWS\system32\bcrypt.dll'
5401dd0.2354: Warning! Failed to load bcrypt.dll
5411dd0.2354: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
5421dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
5431dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
5441dd0.2354: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
5451dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'sechost.dll'...
5461dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'sechost.dll' -> '\Device\HarddiskVolume2\Windows\System32\sechost.dll' [rcNtRedir=0xc0150008]
5471dd0.2354: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\sechost.dll [lacks WinVerifyTrust]
5481dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
5491dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
5501dd0.2354: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
5511dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
5521dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
5531dd0.2354: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
5541dd0.2354: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\WINTRUST.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
5551dd0.2354: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffca32d0000 'C:\Windows\System32\WINTRUST.DLL'
5561dd0.2354: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
5571dd0.2354: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\WINTRUST.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
5581dd0.2354: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffca32d0000 'C:\Windows\System32\WINTRUST.DLL'
5591dd0.2354: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
5601dd0.2354: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\WINTRUST.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
5611dd0.2354: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffca32d0000 'C:\Windows\System32\WINTRUST.DLL'
5621dd0.2354: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
5631dd0.2354: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\WINTRUST.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
5641dd0.2354: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffca32d0000 'C:\Windows\System32\WINTRUST.DLL'
5651dd0.2354: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
5661dd0.2354: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\WINTRUST.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
5671dd0.2354: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffca32d0000 'C:\Windows\System32\WINTRUST.DLL'
5681dd0.2354: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
5691dd0.2354: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\WINTRUST.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
5701dd0.2354: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffca32d0000 'C:\Windows\System32\WINTRUST.DLL'
5711dd0.2354: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
5721dd0.2354: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\WINTRUST.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
5731dd0.2354: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffca32d0000 'C:\Windows\System32\WINTRUST.DLL'
5741dd0.2354: \Device\HarddiskVolume2\Windows\System32\cryptsp.dll: VERR_CR_X509_CPV_NOT_VALID_AT_TIME for 0x981ac005; retrying against current time: 0x59658ad1.
5751dd0.2354: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\cryptsp.dll)
5761dd0.2354: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\cryptsp.dll
5771dd0.2354: supR3HardenedDllNotificationCallback: load 00007ffca1bb0000 LB 0x00017000 C:\WINDOWS\SYSTEM32\CRYPTSP.dll [fFlags=0x0]
5781dd0.2354: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\cryptsp.dll [lacks WinVerifyTrust]
5791dd0.2354: \Device\HarddiskVolume2\Windows\System32\rsaenh.dll: VERR_CR_X509_CPV_NOT_VALID_AT_TIME for 0x2f19baa8; retrying against current time: 0x59658ad1.
5801dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'bcrypt.dll'.
5811dd0.2354: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\rsaenh.dll)
5821dd0.2354: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\rsaenh.dll
5831dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcrypt.dll'...
5841dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcrypt.dll' -> '\Device\HarddiskVolume2\Windows\System32\bcrypt.dll' [rcNtRedir=0xc0150008]
5851dd0.2354: supR3HardenedScreenImage/Imports: cache hit (Unknown Status -626 (0xfffffd8e)) on \Device\HarddiskVolume2\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
5861dd0.2354: Error (rc=0):
5871dd0.2354: supR3HardenedScreenImage/Imports: cached rc=Unknown Status -626 (0xfffffd8e) fImage=1 fProtect=0x0 fAccess=0x0 cHits=1 \Device\HarddiskVolume2\Windows\System32\bcrypt.dll
5881dd0.2354: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
5891dd0.2354: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
5901dd0.2354: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status -626 (0xfffffd8e)) on \Device\HarddiskVolume2\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
5911dd0.2354: Error (rc=0):
5921dd0.2354: supR3HardenedScreenImage/NtCreateSection: cached rc=Unknown Status -626 (0xfffffd8e) fImage=1 fProtect=0x10 fAccess=0xf cHits=2 \Device\HarddiskVolume2\Windows\System32\bcrypt.dll
5931dd0.2354: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000190 'C:\WINDOWS\system32\rsaenh.dll'
5941dd0.2354: supR3HardNtViCallWinVerifyTrust: WinVerifyTrust failed with 0x8 (<NULL>) on '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe'
5951dd0.2354: Error -22919 in VirtualBox! (enmWhat=1)
5961dd0.2354: WinVerifyTrust failed on stub executable: WinVerifyTrust failed with hrc=Unknown Status 0x8 on '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe'
5971dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'opengl32.dll'.
5981dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
5991dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'msvcp100.dll'.
6001dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcr100.dll'.
6011dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'.
6021dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'qt5guivbox.dll'.
6031dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'qt5widgetsvbox.dll'.
6041dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'qt5printsupportvbox.dll'.
6051dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'qt5openglvbox.dll'.
6061dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'user32.dll'.
6071dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'advapi32.dll'.
6081dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'shell32.dll'.
6091dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'ole32.dll'.
6101dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'oleaut32.dll'.
6111dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #15 'winmm.dll'.
6121dd0.2354: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.dll)
6131dd0.2354: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.dll
6141dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
6151dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume2\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
6161dd0.2354: \Device\HarddiskVolume2\Windows\System32\winmm.dll: VERR_CR_X509_CPV_NOT_VALID_AT_TIME for 0x5a9d3d16; retrying against current time: 0x59658ad1.
6171dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'winmmbase.dll'.
6181dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'msvcrt.dll'.
6191dd0.2354: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\winmm.dll)
6201dd0.2354: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\winmm.dll
6211dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
6221dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume2\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
6231dd0.2354: \Device\HarddiskVolume2\Windows\System32\oleaut32.dll: VERR_CR_X509_CPV_NOT_VALID_AT_TIME for 0x5dcd01c; retrying against current time: 0x59658ad2.
6241dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
6251dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'combase.dll'.
6261dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #23 'rpcrt4.dll'.
6271dd0.2354: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\oleaut32.dll)
6281dd0.2354: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\oleaut32.dll
6291dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
6301dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
6311dd0.2354: \Device\HarddiskVolume2\Windows\System32\ole32.dll: VERR_CR_X509_CPV_NOT_VALID_AT_TIME for 0x54729f9e; retrying against current time: 0x59658ad2.
6321dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #22 'rpcrt4.dll'.
6331dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #46 'gdi32.dll'.
6341dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #47 'user32.dll'.
6351dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #48 'combase.dll'.
6361dd0.2354: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\ole32.dll)
6371dd0.2354: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\ole32.dll
6381dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
6391dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume2\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
6401dd0.2354: \Device\HarddiskVolume2\Windows\System32\shell32.dll: VERR_CR_X509_CPV_NOT_VALID_AT_TIME for 0x214078c4; retrying against current time: 0x59658ad2.
6411dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
6421dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #73 'user32.dll'.
6431dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #75 'gdi32.dll'.
6441dd0.2354: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\shell32.dll)
6451dd0.2354: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\shell32.dll
6461dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
6471dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
6481dd0.2354: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
6491dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
6501dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
6511dd0.2354: \Device\HarddiskVolume2\Windows\System32\user32.dll: VERR_CR_X509_CPV_NOT_VALID_AT_TIME for 0xf7d682bf; retrying against current time: 0x59658ad2.
6521dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'win32u.dll'.
6531dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #33 'gdi32.dll'.
6541dd0.2354: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\user32.dll)
6551dd0.2354: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\user32.dll
6561dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5openglvbox.dll'...
6571dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5openglvbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5openglvbox.dll' [rcNtRedir=0xc0150008]
6581dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'qt5widgetsvbox.dll'.
6591dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'qt5guivbox.dll'.
6601dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5corevbox.dll'.
6611dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcr100.dll'.
6621dd0.2354: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll)
6631dd0.2354: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll
6641dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5printsupportvbox.dll'...
6651dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5printsupportvbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5printsupportvbox.dll' [rcNtRedir=0xc0150008]
6661dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
6671dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
6681dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5widgetsvbox.dll'.
6691dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5guivbox.dll'.
6701dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'.
6711dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'winspool.drv'.
6721dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'comdlg32.dll'.
6731dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcr100.dll'.
6741dd0.2354: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll)
6751dd0.2354: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll
6761dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
6771dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
6781dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
6791dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
6801dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5guivbox.dll'.
6811dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5corevbox.dll'.
6821dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'shell32.dll'.
6831dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
6841dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
6851dd0.2354: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll)
6861dd0.2354: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll
6871dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
6881dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
6891dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'ole32.dll'.
6901dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'opengl32.dll'.
6911dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
6921dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
6931dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'.
6941dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
6951dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
6961dd0.2354: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll)
6971dd0.2354: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
6981dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
6991dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
7001dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
7011dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'shell32.dll'.
7021dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ole32.dll'.
7031dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'advapi32.dll'.
7041dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ws2_32.dll'.
7051dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'mpr.dll'.
7061dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcp100.dll'.
7071dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'msvcr100.dll'.
7081dd0.2354: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll)
7091dd0.2354: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
7101dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
7111dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
7121dd0.2354: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll)
7131dd0.2354: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll
7141dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
7151dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
7161dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
7171dd0.2354: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll)
7181dd0.2354: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll
7191dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
7201dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
7211dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
7221dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
7231dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ws2_32.dll'.
7241dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'rpcrt4.dll'.
7251dd0.2354: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll)
7261dd0.2354: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll
7271dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
7281dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume2\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
7291dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
7301dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'advapi32.dll'.
7311dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
7321dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'gdi32.dll'.
7331dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'glu32.dll'.
7341dd0.2354: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\opengl32.dll)
7351dd0.2354: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\opengl32.dll
7361dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'glu32.dll'...
7371dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'glu32.dll' -> '\Device\HarddiskVolume2\Windows\System32\glu32.dll' [rcNtRedir=0xc0150008]
7381dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
7391dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
7401dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'opengl32.dll'.
7411dd0.2354: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\glu32.dll)
7421dd0.2354: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\glu32.dll
7431dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
7441dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
7451dd0.2354: \Device\HarddiskVolume2\Windows\System32\gdi32.dll: VERR_CR_X509_CPV_NOT_VALID_AT_TIME for 0xee71a833; retrying against current time: 0x59658ad2.
7461dd0.2354: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\gdi32.dll)
7471dd0.2354: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\gdi32.dll
7481dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
7491dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
7501dd0.2354: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
7511dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
7521dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
7531dd0.2354: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
7541dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
7551dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
7561dd0.2354: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
7571dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
7581dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
7591dd0.2354: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
7601dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
7611dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
7621dd0.2354: \Device\HarddiskVolume2\Windows\System32\ws2_32.dll: VERR_CR_X509_CPV_NOT_VALID_AT_TIME for 0xbfa4e57b; retrying against current time: 0x59658ad2.
7631dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'rpcrt4.dll'.
7641dd0.2354: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\ws2_32.dll)
7651dd0.2354: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\ws2_32.dll
7661dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
7671dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
7681dd0.2354: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
7691dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
7701dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
7711dd0.2354: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
7721dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
7731dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
7741dd0.2354: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
7751dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
7761dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
7771dd0.2354: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
7781dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
7791dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
7801dd0.2354: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
7811dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mpr.dll'...
7821dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'mpr.dll' -> '\Device\HarddiskVolume2\Windows\System32\mpr.dll' [rcNtRedir=0xc0150008]
7831dd0.2354: \Device\HarddiskVolume2\Windows\System32\mpr.dll: VERR_CR_X509_CPV_NOT_VALID_AT_TIME for 0xd5c4e340; retrying against current time: 0x59658ad2.
7841dd0.2354: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\mpr.dll)
7851dd0.2354: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\mpr.dll
7861dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
7871dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
7881dd0.2354: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ws2_32.dll [lacks WinVerifyTrust]
7891dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
7901dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
7911dd0.2354: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
7921dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
7931dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
7941dd0.2354: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ole32.dll [lacks WinVerifyTrust]
7951dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
7961dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume2\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
7971dd0.2354: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\shell32.dll [lacks WinVerifyTrust]
7981dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
7991dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
8001dd0.2354: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
8011dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
8021dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
8031dd0.2354: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
8041dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
8051dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
8061dd0.2354: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
8071dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
8081dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
8091dd0.2354: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
8101dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
8111dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
8121dd0.2354: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
8131dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
8141dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
8151dd0.2354: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
8161dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
8171dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume2\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
8181dd0.2354: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
8191dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
8201dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
8211dd0.2354: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ole32.dll [lacks WinVerifyTrust]
8221dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
8231dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
8241dd0.2354: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
8251dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
8261dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
8271dd0.2354: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
8281dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
8291dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume2\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
8301dd0.2354: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\shell32.dll [lacks WinVerifyTrust]
8311dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
8321dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
8331dd0.2354: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
8341dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
8351dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
8361dd0.2354: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
8371dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
8381dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
8391dd0.2354: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
8401dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
8411dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
8421dd0.2354: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
8431dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
8441dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
8451dd0.2354: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
8461dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'comdlg32.dll'...
8471dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'comdlg32.dll' -> '\Device\HarddiskVolume2\Windows\System32\comdlg32.dll' [rcNtRedir=0xc0150008]
8481dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
8491dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'user32.dll'.
8501dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #37 'shlwapi.dll'.
8511dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #38 'gdi32.dll'.
8521dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #39 'comctl32.dll'.
8531dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #40 'shell32.dll'.
8541dd0.2354: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\comdlg32.dll)
8551dd0.2354: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\comdlg32.dll
8561dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winspool.drv'...
8571dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'winspool.drv' -> '\Device\HarddiskVolume2\Windows\System32\winspool.drv' [rcNtRedir=0xc0150008]
8581dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
8591dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #25 'iphlpapi.dll'.
8601dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'bcrypt.dll'.
8611dd0.2354: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\winspool.drv)
8621dd0.2354: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\winspool.drv
8631dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
8641dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
8651dd0.2354: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
8661dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
8671dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
8681dd0.2354: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
8691dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
8701dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
8711dd0.2354: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
8721dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
8731dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
8741dd0.2354: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
8751dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
8761dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
8771dd0.2354: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
8781dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
8791dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
8801dd0.2354: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
8811dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
8821dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
8831dd0.2354: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
8841dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
8851dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
8861dd0.2354: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
8871dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
8881dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
8891dd0.2354: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
8901dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
8911dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
8921dd0.2354: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
8931dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
8941dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume2\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
8951dd0.2354: \Device\HarddiskVolume2\Windows\System32\win32u.dll: VERR_CR_X509_CPV_NOT_VALID_AT_TIME for 0xe1fc4b47; retrying against current time: 0x59658ad2.
8961dd0.2354: '\Device\HarddiskVolume2\Windows\System32\win32u.dll' has no imports
8971dd0.2354: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\win32u.dll)
8981dd0.2354: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\win32u.dll
8991dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
9001dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
9011dd0.2354: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
9021dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
9031dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
9041dd0.2354: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
9051dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
9061dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
9071dd0.2354: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
9081dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
9091dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume2\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
9101dd0.2354: \Device\HarddiskVolume2\Windows\System32\combase.dll: VERR_CR_X509_CPV_NOT_VALID_AT_TIME for 0xe2090a73; retrying against current time: 0x59658ad2.
9111dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
9121dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #45 'bcryptprimitives.dll'.
9131dd0.2354: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\combase.dll)
9141dd0.2354: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\combase.dll
9151dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
9161dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
9171dd0.2354: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
9181dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
9191dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
9201dd0.2354: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
9211dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
9221dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
9231dd0.2354: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
9241dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
9251dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
9261dd0.2354: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
9271dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
9281dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume2\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
9291dd0.2354: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\combase.dll [lacks WinVerifyTrust]
9301dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
9311dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
9321dd0.2354: \Device\HarddiskVolume2\Windows\System32\msvcp_win.dll: VERR_CR_X509_CPV_NOT_VALID_AT_TIME for 0x9a273a17; retrying against current time: 0x59658ad2.
9331dd0.2354: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll)
9341dd0.2354: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\msvcp_win.dll
9351dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
9361dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
9371dd0.2354: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
9381dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmmbase.dll'...
9391dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmmbase.dll' -> '\Device\HarddiskVolume2\Windows\System32\winmmbase.dll' [rcNtRedir=0xc0150008]
9401dd0.2354: \Device\HarddiskVolume2\Windows\System32\winmmbase.dll: VERR_CR_X509_CPV_NOT_VALID_AT_TIME for 0x6ce423c5; retrying against current time: 0x59658ad2.
9411dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
9421dd0.2354: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\winmmbase.dll)
9431dd0.2354: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\winmmbase.dll
9441dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
9451dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
9461dd0.2354: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
9471dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'...
9481dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume2\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008]
9491dd0.2354: supHardenedWinVerifyImageByHandle: -> -626 (\Device\HarddiskVolume2\Windows\System32\bcryptprimitives.dll)
9501dd0.2354: Error (rc=0):
9511dd0.2354: supR3HardenedScreenImage/Imports: rc=Unknown Status -626 (0xfffffd8e) fImage=1 fProtect=0x0 fAccess=0x0 \Device\HarddiskVolume2\Windows\System32\bcryptprimitives.dll: Grown load config (244 to 256 bytes) includes non-zero bytes: 00 00 00 00 40 16 06 80 01 00 00 00
9521dd0.2354: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\bcryptprimitives.dll
9531dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
9541dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
9551dd0.2354: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
9561dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcrypt.dll'...
9571dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcrypt.dll' -> '\Device\HarddiskVolume2\Windows\System32\bcrypt.dll' [rcNtRedir=0xc0150008]
9581dd0.2354: supR3HardenedScreenImage/Imports: cache hit (Unknown Status -626 (0xfffffd8e)) on \Device\HarddiskVolume2\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
9591dd0.2354: Error (rc=0):
9601dd0.2354: supR3HardenedScreenImage/Imports: cached rc=Unknown Status -626 (0xfffffd8e) fImage=1 fProtect=0x0 fAccess=0x0 cHits=3 \Device\HarddiskVolume2\Windows\System32\bcrypt.dll
9611dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'iphlpapi.dll'...
9621dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'iphlpapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\iphlpapi.dll' [rcNtRedir=0xc0150008]
9631dd0.2354: \Device\HarddiskVolume2\Windows\System32\IPHLPAPI.DLL: VERR_CR_X509_CPV_NOT_VALID_AT_TIME for 0xfa530d0c; retrying against current time: 0x59658ad2.
9641dd0.2354: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\IPHLPAPI.DLL)
9651dd0.2354: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\IPHLPAPI.DLL
9661dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
9671dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
9681dd0.2354: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
9691dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
9701dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume2\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
9711dd0.2354: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\shell32.dll [lacks WinVerifyTrust]
9721dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'comctl32.dll'...
9731dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'comctl32.dll' -> '\Device\HarddiskVolume2\Windows\System32\comctl32.dll' [rcNtRedir=0x0]
9741dd0.2354: \Device\HarddiskVolume2\Windows\System32\comctl32.dll: VERR_CR_X509_CPV_NOT_VALID_AT_TIME for 0xd459d392; retrying against current time: 0x59658ad2.
9751dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'advapi32.dll'.
9761dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
9771dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
9781dd0.2354: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\comctl32.dll)
9791dd0.2354: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\comctl32.dll
9801dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
9811dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
9821dd0.2354: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
9831dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shlwapi.dll'...
9841dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'shlwapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\shlwapi.dll' [rcNtRedir=0xc0150008]
9851dd0.2354: \Device\HarddiskVolume2\Windows\System32\shlwapi.dll: VERR_CR_X509_CPV_NOT_VALID_AT_TIME for 0x1c427dab; retrying against current time: 0x59658ad2.
9861dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'.
9871dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #45 'gdi32.dll'.
9881dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #46 'user32.dll'.
9891dd0.2354: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\shlwapi.dll)
9901dd0.2354: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\shlwapi.dll
9911dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
9921dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
9931dd0.2354: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
9941dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
9951dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
9961dd0.2354: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
9971dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
9981dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
9991dd0.2354: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
10001dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
10011dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume2\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
10021dd0.2354: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
10031dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
10041dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
10051dd0.2354: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
10061dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
10071dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
10081dd0.2354: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
10091dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
10101dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
10111dd0.2354: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
10121dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
10131dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
10141dd0.2354: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
10151dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
10161dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
10171dd0.2354: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
10181dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
10191dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
10201dd0.2354: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
10211dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
10221dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
10231dd0.2354: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
10241dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
10251dd0.2354: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
10261dd0.2354: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
10271dd0.2354: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VirtualBox.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000a01:<flags> [calling]
10281dd0.2354: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.dll [lacks WinVerifyTrust]
10291dd0.2354: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
10301dd0.2354: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
10311dd0.2354: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
10321dd0.2354: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
10331dd0.2354: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
10341dd0.2354: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
10351dd0.2354: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
10361dd0.2354: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll [lacks WinVerifyTrust]
10371dd0.2354: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll [lacks WinVerifyTrust]
10381dd0.2354: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winmm.dll [lacks WinVerifyTrust]
10391dd0.2354: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\glu32.dll [lacks WinVerifyTrust]
10401dd0.2354: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\mpr.dll [lacks WinVerifyTrust]
10411dd0.2354: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\winspool.drv [lacks WinVerifyTrust]
10421dd0.2354: \Device\HarddiskVolume2\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.16237.1001_none_219520f0daa2f6b0\comctl32.dll: VERR_CR_X509_CPV_NOT_VALID_AT_TIME for 0xd459d392; retrying against current time: 0x59658ad2.
10431dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'advapi32.dll'.
10441dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
10451dd0.2354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
10461dd0.2354: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.16237.1001_none_219520f0daa2f6b0\comctl32.dll)
10471dd0.2354: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.16237.1001_none_219520f0daa2f6b0\comctl32.dll
10481dd0.2354: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winmmbase.dll [lacks WinVerifyTrust]
10491dd0.2354: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\IPHLPAPI.DLL [lacks WinVerifyTrust]
10501dd0.2354: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status -626 (0xfffffd8e)) on \Device\HarddiskVolume2\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
10511dd0.2354: Error (rc=0):
10521dd0.2354: supR3HardenedScreenImage/NtCreateSection: cached rc=Unknown Status -626 (0xfffffd8e) fImage=1 fProtect=0x10 fAccess=0xf cHits=4 \Device\HarddiskVolume2\Windows\System32\bcrypt.dll
10531dd0.2354: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000190 'C:\Program Files\Oracle\VirtualBox\VirtualBox.dll'
1054277c.c58: supR3HardNtChildWaitFor[2]: Quitting: ExitCode=0x1 (rcNtWait=0x0, rcNt1=0x0, rcNt2=0x103, rcNt3=0x103, 1186 ms, the end);
105523b0.2088: supR3HardNtChildWaitFor[1]: Quitting: ExitCode=0x1 (rcNtWait=0x0, rcNt1=0x0, rcNt2=0x103, rcNt3=0x103, 1749 ms, the end);

© 2024 Oracle Support Privacy / Do Not Sell My Info Terms of Use Trademark Policy