118c.1b38: Log file opened: 5.1.9r111957 g_hStartupLog=0000000000000060 g_uNtVerCombined=0xa03a7b00 118c.1b38: \SystemRoot\System32\ntdll.dll: 118c.1b38: CreationTime: 2016-11-12T10:03:35.068381200Z 118c.1b38: LastWriteTime: 2016-11-12T10:03:35.068381200Z 118c.1b38: ChangeTime: 2016-11-18T20:12:03.929449100Z 118c.1b38: FileAttributes: 0x20 118c.1b38: Size: 0x1cdc80 118c.1b38: NT Headers: 0xe0 118c.1b38: Timestamp: 0xdf1e957e 118c.1b38: Machine: 0x8664 - amd64 118c.1b38: Timestamp: 0xdf1e957e 118c.1b38: Image Version: 10.0 118c.1b38: SizeOfImage: 0x1d2000 (1908736) 118c.1b38: Resource Dir: 0x169000 LB 0x67d98 118c.1b38: ProductName: Microsoft® Windows® Operating System 118c.1b38: ProductVersion: 10.0.14971.1000 118c.1b38: FileVersion: 10.0.14971.1000 (rs_prerelease.161111-1700) 118c.1b38: FileDescription: NT Layer DLL 118c.1b38: \SystemRoot\System32\kernel32.dll: 118c.1b38: CreationTime: 2016-11-12T10:03:24.770618000Z 118c.1b38: LastWriteTime: 2016-11-12T10:03:24.770618000Z 118c.1b38: ChangeTime: 2016-11-18T20:12:03.710698800Z 118c.1b38: FileAttributes: 0x20 118c.1b38: Size: 0xaa1b8 118c.1b38: NT Headers: 0xf0 118c.1b38: Timestamp: 0x6d8baca5 118c.1b38: Machine: 0x8664 - amd64 118c.1b38: Timestamp: 0x6d8baca5 118c.1b38: Image Version: 10.0 118c.1b38: SizeOfImage: 0xad000 (708608) 118c.1b38: Resource Dir: 0xab000 LB 0x528 118c.1b38: ProductName: Microsoft® Windows® Operating System 118c.1b38: ProductVersion: 10.0.14971.1000 118c.1b38: FileVersion: 10.0.14971.1000 (rs_prerelease.161111-1700) 118c.1b38: FileDescription: Windows NT BASE API Client DLL 118c.1b38: \SystemRoot\System32\KernelBase.dll: 118c.1b38: CreationTime: 2016-11-12T10:03:32.615044200Z 118c.1b38: LastWriteTime: 2016-11-12T10:03:32.615044200Z 118c.1b38: ChangeTime: 2016-11-18T20:12:03.726323800Z 118c.1b38: FileAttributes: 0x20 118c.1b38: Size: 0x233690 118c.1b38: NT Headers: 0xf0 118c.1b38: Timestamp: 0x26f2fe1c 118c.1b38: Machine: 0x8664 - amd64 118c.1b38: Timestamp: 0x26f2fe1c 118c.1b38: Image Version: 10.0 118c.1b38: SizeOfImage: 0x235000 (2314240) 118c.1b38: Resource Dir: 0x217000 LB 0x550 118c.1b38: ProductName: Microsoft® Windows® Operating System 118c.1b38: ProductVersion: 10.0.14971.1000 118c.1b38: FileVersion: 10.0.14971.1000 (rs_prerelease.161111-1700) 118c.1b38: FileDescription: Windows NT BASE API Client DLL 118c.1b38: \SystemRoot\System32\apisetschema.dll: 118c.1b38: CreationTime: 2016-11-12T10:03:32.568165500Z 118c.1b38: LastWriteTime: 2016-11-12T10:03:32.568165500Z 118c.1b38: ChangeTime: 2016-11-18T20:12:02.413820000Z 118c.1b38: FileAttributes: 0x20 118c.1b38: Size: 0x19310 118c.1b38: NT Headers: 0xc8 118c.1b38: Timestamp: 0x6a79d354 118c.1b38: Machine: 0x8664 - amd64 118c.1b38: Timestamp: 0x6a79d354 118c.1b38: Image Version: 10.0 118c.1b38: SizeOfImage: 0x1b000 (110592) 118c.1b38: Resource Dir: 0x1a000 LB 0x418 118c.1b38: ProductName: Microsoft® Windows® Operating System 118c.1b38: ProductVersion: 10.0.14971.1000 118c.1b38: FileVersion: 10.0.14971.1000 (rs_prerelease.161111-1700) 118c.1b38: FileDescription: ApiSet Schema DLL 118c.1b38: NtOpenDirectoryObject failed on \Driver: 0xc0000022 118c.1b38: supR3HardenedWinFindAdversaries: 0x0 118c.1b38: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox' 118c.1b38: Calling main() 118c.1b38: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2 118c.1b38: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox' 118c.1b38: SUPR3HardenedMain: Respawn #1 118c.1b38: System32: \Device\HarddiskVolume4\Windows\System32 118c.1b38: WinSxS: \Device\HarddiskVolume4\Windows\WinSxS 118c.1b38: KnownDllPath: C:\WINDOWS\System32 118c.1b38: '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports 118c.1b38: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe) 118c.1b38: supR3HardNtEnableThreadCreation: 118c.1b38: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffd6e326c60 pvNtTerminateThread=00007ffd6e3559f0 118c.1b38: supR3HardenedWinDoReSpawn(1): New child 3868.3d60 [kernel32]. 118c.1b38: supR3HardNtChildGatherData: PebBaseAddress=0000000000b99000 cbPeb=0x388 118c.1b38: supR3HardNtPuChFindNtdll: uNtDllParentAddr=00007ffd6e2b0000 uNtDllChildAddr=00007ffd6e2b0000 118c.1b38: supR3HardenedWinSetupChildInit: uLdrInitThunk=00007ffd6e326c60 118c.1b38: supR3HardenedWinSetupChildInit: Start child. 118c.1b38: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 0 ms. 118c.1b38: supR3HardNtChildPurify: Startup delay kludge #1/0: 264 ms, 25 sleeps 118c.1b38: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION 118c.1b38: *0000000000000000-ffffffffff64ffff 0x0001/0x0000 0x0000000 118c.1b38: *00000000009b0000-000000000098ffff 0x0004/0x0004 0x0020000 118c.1b38: *00000000009d0000-00000000009b7fff 0x0002/0x0002 0x0040000 118c.1b38: 00000000009e8000-00000000009dffff 0x0001/0x0000 0x0000000 118c.1b38: *00000000009f0000-00000000009ebfff 0x0002/0x0002 0x0040000 118c.1b38: 00000000009f4000-00000000009e7fff 0x0001/0x0000 0x0000000 118c.1b38: *0000000000a00000-0000000000866fff 0x0000/0x0004 0x0020000 118c.1b38: 0000000000b99000-0000000000b95fff 0x0004/0x0004 0x0020000 118c.1b38: 0000000000b9c000-0000000000b37fff 0x0000/0x0004 0x0020000 118c.1b38: *0000000000c00000-0000000000b04fff 0x0000/0x0004 0x0020000 118c.1b38: 0000000000cfb000-0000000000cf7fff 0x0104/0x0004 0x0020000 118c.1b38: 0000000000cfe000-0000000000cfbfff 0x0004/0x0004 0x0020000 118c.1b38: *0000000000d00000-0000000000cfdfff 0x0004/0x0004 0x0020000 118c.1b38: 0000000000d02000-ffffffff81a23fff 0x0001/0x0000 0x0000000 118c.1b38: *000000007ffe0000-000000007ffdefff 0x0002/0x0002 0x0020000 118c.1b38: 000000007ffe1000-000000007ffd1fff 0x0000/0x0002 0x0020000 118c.1b38: 000000007fff0000-ffff800ac9c3ffff 0x0001/0x0000 0x0000000 118c.1b38: *00007ff6363a0000-00007ff63637cfff 0x0002/0x0002 0x0040000 118c.1b38: 00007ff6363c3000-00007ff635d95fff 0x0001/0x0000 0x0000000 118c.1b38: *00007ff6369f0000-00007ff6369f0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe 118c.1b38: 00007ff6369f1000-00007ff636a5ffff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe 118c.1b38: 00007ff636a60000-00007ff636a60fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe 118c.1b38: 00007ff636a61000-00007ff636aa5fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe 118c.1b38: 00007ff636aa6000-00007ff636aa6fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe 118c.1b38: 00007ff636aa7000-00007ff636aa7fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe 118c.1b38: 00007ff636aa8000-00007ff636aacfff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe 118c.1b38: 00007ff636aad000-00007ff636aadfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe 118c.1b38: 00007ff636aae000-00007ff636aaefff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe 118c.1b38: 00007ff636aaf000-00007ff636ab2fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe 118c.1b38: 00007ff636ab3000-00007ff636afafff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe 118c.1b38: 00007ff636afb000-00007feeff345fff 0x0001/0x0000 0x0000000 118c.1b38: *00007ffd6e2b0000-00007ffd6e2b0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll 118c.1b38: 00007ffd6e2b1000-00007ffd6e3b9fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll 118c.1b38: 00007ffd6e3ba000-00007ffd6e3fdfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll 118c.1b38: 00007ffd6e3fe000-00007ffd6e405fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll 118c.1b38: 00007ffd6e406000-00007ffd6e413fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll 118c.1b38: 00007ffd6e414000-00007ffd6e414fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll 118c.1b38: 00007ffd6e415000-00007ffd6e417fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll 118c.1b38: 00007ffd6e418000-00007ffd6e481fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll 118c.1b38: 00007ffd6e482000-00007ffadc923fff 0x0001/0x0000 0x0000000 118c.1b38: *00007ffffffe0000-00007ffffffcffff 0x0001/0x0002 0x0020000 118c.1b38: VirtualBox.exe: timestamp 0x582c8767 (rc=VINF_SUCCESS) 118c.1b38: '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports 118c.1b38: Error (rc=-23033): 118c.1b38: supHardenedWinVerifyProcess failed with Unknown Status -23033 (0xffffa607): Certificate is not valid (ValidTime=2088-08-14T12:05:18.000000000Z Validity=[2014-05-28T17:33:33.000000000Z...2029-05-28T17:43:33.000000000Z]): \Device\HarddiskVolume4\Windows\System32\ntdll.dll 118c.1b38: Error -23033 in supR3HardNtChildPurify! (enmWhat=5) 118c.1b38: supHardenedWinVerifyProcess failed with Unknown Status -23033 (0xffffa607): Certificate is not valid (ValidTime=2088-08-14T12:05:18.000000000Z Validity=[2014-05-28T17:33:33.000000000Z...2029-05-28T17:43:33.000000000Z]): \Device\HarddiskVolume4\Windows\System32\ntdll.dll 118c.1b38: supR3HardNtEnableThreadCreation: