Hi,
After installing the Local 3-0-4 for windows, with windows 10, I cannot even start the Local Machine for initialization.
I added the log file. Can you assist?
Yael
1918.738: Log file opened: 5.2.20r125813 g_hStartupLog=00000084 g_uNtVerCombined=0xa0456300
1918.738: \SystemRoot\System32\ntdll.dll:
1918.738: CreationTime: 2019-02-13T11:17:24.304597200Z
1918.738: LastWriteTime: 2019-02-13T11:17:24.504486700Z
1918.738: ChangeTime: 2019-02-14T16:42:07.769656900Z
1918.738: FileAttributes: 0x20
1918.738: Size: 0x193c40
1918.738: NT Headers: 0xf0
1918.738: Timestamp: 0xd9f605a2
1918.738: Machine: 0x14c - i386
1918.738: Timestamp: 0xd9f605a2
1918.738: Image Version: 10.0
1918.738: SizeOfImage: 0x197000 (1667072)
1918.738: Resource Dir: 0x123000 LB 0x6ea08
1918.738: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
1918.738: [Raw version resource data: 0x1230f0 LB 0x380, codepage 0x0 (reserved 0x0)]
1918.738: ProductName: Microsoft® Windows® Operating System
1918.738: ProductVersion: 10.0.17763.292
1918.738: FileVersion: 10.0.17763.292 (WinBuild.160101.0800)
1918.738: FileDescription: NT Layer DLL
1918.738: \SystemRoot\System32\kernel32.dll:
1918.738: CreationTime: 2019-02-13T11:16:45.747822200Z
1918.738: LastWriteTime: 2019-02-13T11:16:45.805299400Z
1918.738: ChangeTime: 2019-02-14T16:42:06.717671500Z
1918.738: FileAttributes: 0x20
1918.738: Size: 0x9b718
1918.738: NT Headers: 0xf0
1918.738: Timestamp: 0x352bace6
1918.738: Machine: 0x14c - i386
1918.738: Timestamp: 0x352bace6
1918.738: Image Version: 10.0
1918.738: SizeOfImage: 0x98000 (622592)
1918.738: Resource Dir: 0x92000 LB 0x520
1918.738: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
1918.738: [Raw version resource data: 0x920b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
1918.738: ProductName: Microsoft® Windows® Operating System
1918.738: ProductVersion: 10.0.17763.292
1918.738: FileVersion: 10.0.17763.292 (WinBuild.160101.0800)
1918.738: FileDescription: Windows NT BASE API Client DLL
1918.738: \SystemRoot\System32\KernelBase.dll:
1918.738: CreationTime: 2019-02-13T11:17:26.792515500Z
1918.738: LastWriteTime: 2019-02-13T11:17:27.078220900Z
1918.738: ChangeTime: 2019-02-14T16:42:07.915367800Z
1918.738: FileAttributes: 0x20
1918.738: Size: 0x1f1b50
1918.738: NT Headers: 0xf0
1918.738: Timestamp: 0xb868bcc3
1918.738: Machine: 0x14c - i386
1918.738: Timestamp: 0xb868bcc3
1918.738: Image Version: 10.0
1918.738: SizeOfImage: 0x1f1000 (2035712)
1918.738: Resource Dir: 0x1c6000 LB 0x548
1918.738: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
1918.738: [Raw version resource data: 0x1c60b0 LB 0x3bc, codepage 0x0 (reserved 0x0)]
1918.738: ProductName: Microsoft® Windows® Operating System
1918.738: ProductVersion: 10.0.17763.292
1918.738: FileVersion: 10.0.17763.292 (WinBuild.160101.0800)
1918.738: FileDescription: Windows NT BASE API Client DLL
1918.738: \SystemRoot\System32\apisetschema.dll:
1918.738: CreationTime: 2018-09-15T05:06:29.341535600Z
1918.738: LastWriteTime: 2018-09-15T05:06:29.341535600Z
1918.738: ChangeTime: 2018-12-18T17:44:10.472013400Z
1918.738: FileAttributes: 0x20
1918.738: Size: 0x1c738
1918.738: NT Headers: 0xd0
1918.738: Timestamp: 0x688569a9
1918.738: Machine: 0x14c - i386
1918.738: Timestamp: 0x688569a9
1918.738: Image Version: 10.0
1918.738: SizeOfImage: 0x1d000 (118784)
1918.738: Resource Dir: 0x1c000 LB 0x408
1918.738: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
1918.738: [Raw version resource data: 0x1c060 LB 0x3a8, codepage 0x0 (reserved 0x0)]
1918.738: ProductName: Microsoft® Windows® Operating System
1918.738: ProductVersion: 10.0.17763.1
1918.738: FileVersion: 10.0.17763.1 (WinBuild.160101.0800)
1918.738: FileDescription: ApiSet Schema DLL
1918.738: NtOpenDirectoryObject failed on \Driver: 0xc0000022
1918.738: supR3HardenedWinFindAdversaries: 0x0
1918.738: supR3HardenedWinInitAppBin(0x0): ‘\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox’
1918.738: Calling main()
1918.738: SUPR3HardenedMain: pszProgName=VBoxHeadless fFlags=0x0
1918.738: supR3HardenedWinInitAppBin(0x0): ‘\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox’
1918.738: SUPR3HardenedMain: Respawn #1
1918.738: System32: \Device\HarddiskVolume4\Windows\System32
1918.738: WinSxS: \Device\HarddiskVolume4\Windows\WinSxS
1918.738: KnownDllPath: C:\WINDOWS\System32
1918.738: ‘\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxHeadless.exe’ has no imports
1918.738: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxHeadless.exe)
1918.738: supR3HardNtEnableThreadCreation:
1918.738: supR3HardNtDisableThreadCreation: pvLdrInitThunk=772e7b40 pvNtTerminateThread=772fd6b0
1918.738: supR3HardenedWinDoReSpawn(1): New child 680.1554 [kernel32].
1918.738: supR3HardNtChildGatherData: PebBaseAddress=00267000 cbPeb=0x250
1918.738: supR3HardNtPuChFindNtdll: uNtDllParentAddr=77270000 uNtDllChildAddr=77270000
1918.738: supR3HardenedWinSetupChildInit: uLdrInitThunk=772e7b40
1918.738: supR3HardenedWinSetupChildInit: Start child.
1918.738: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 1 ms.
1918.738: supR3HardNtChildPurify: Startup delay kludge #1/0: 263 ms, 0 sleeps
1918.738: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
1918.738: *00000000-001cffff 0x0001/0x0000 0x0000000
1918.738: *001d0000-001effff 0x0004/0x0004 0x0020000
1918.738: *001f0000-001f3fff 0x0002/0x0002 0x0040000
1918.738: 001f4000-001fffff 0x0001/0x0000 0x0000000
1918.738: *00200000-00266fff 0x0000/0x0004 0x0020000
1918.738: 00267000-00268fff 0x0004/0x0004 0x0020000
1918.738: 00269000-003fffff 0x0000/0x0004 0x0020000
1918.738: *00400000-00419fff 0x0002/0x0002 0x0040000
1918.738: 0041a000-0041ffff 0x0001/0x0000 0x0000000
1918.738: *00420000-0051bfff 0x0000/0x0004 0x0020000
1918.738: 0051c000-0051dfff 0x0104/0x0004 0x0020000
1918.738: 0051e000-0051ffff 0x0004/0x0004 0x0020000
1918.738: *00520000-00521fff 0x0004/0x0004 0x0020000
1918.738: 00522000-00c0ffff 0x0001/0x0000 0x0000000
1918.738: *00c10000-00c10fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxHeadless.exe
1918.738: 00c11000-00c76fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxHeadless.exe
1918.738: 00c77000-00c77fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxHeadless.exe
1918.738: 00c78000-00cb1fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxHeadless.exe
1918.738: 00cb2000-00cb2fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxHeadless.exe
1918.738: 00cb3000-00cb3fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxHeadless.exe
1918.738: 00cb4000-00cb4fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxHeadless.exe
1918.738: 00cb5000-00cb5fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxHeadless.exe
1918.738: 00cb6000-00cbafff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxHeadless.exe
1918.738: 00cbb000-00cbdfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxHeadless.exe
1918.738: 00cbe000-00d01fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxHeadless.exe
1918.738: 00d02000-7726ffff 0x0001/0x0000 0x0000000
1918.738: *77270000-77270fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
1918.738: 77271000-77388fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
1918.738: 77389000-7738efff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
1918.738: 7738f000-7738ffff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
1918.738: 77390000-77391fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
1918.738: 77392000-77406fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
1918.738: 77407000-7f2dffff 0x0001/0x0000 0x0000000
1918.738: *7f2e0000-7f2e0fff 0x0002/0x0002 0x0040000
1918.738: 7f2e1000-7f2effff 0x0001/0x0000 0x0000000
1918.738: *7f2f0000-7f312fff 0x0002/0x0002 0x0040000
1918.738: 7f313000-7ffdffff 0x0001/0x0000 0x0000000
1918.738: *7ffe0000-7ffe0fff 0x0002/0x0002 0x0020000
1918.738: 7ffe1000-7ffe3fff 0x0001/0x0000 0x0000000
1918.738: *7ffe4000-7ffe4fff 0x0002/0x0002 0x0020000
1918.738: 7ffe5000-7ffeffff 0x0001/0x0000 0x0000000
1918.738: VBoxHeadless.exe: timestamp 0x5bc4a6b8 (rc=VINF_SUCCESS)
1918.738: ‘\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxHeadless.exe’ has no imports
1918.738: ‘\Device\HarddiskVolume4\Windows\System32\ntdll.dll’ has no imports
1918.738: supR3HardNtChildPurify: Done after 408 ms and 0 fixes (loop #0).
680.1554: Log file opened: 5.2.20r125813 g_hStartupLog=00000008 g_uNtVerCombined=0xa0456300
680.1554: supR3HardenedVmProcessInit: uNtDllAddr=77270000 g_uNtVerCombined=0xa0456300
680.1554: ntdll.dll: timestamp 0xd9f605a2 (rc=VINF_SUCCESS)
680.1554: New simple heap: #1 00630000 LB 0x400000 (for 1667072 allocation)
680.1554: supR3HardenedWinInitAppBin(0x0): ‘\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox’
680.1554: System32: \Device\HarddiskVolume4\Windows\System32
680.1554: WinSxS: \Device\HarddiskVolume4\Windows\WinSxS
680.1554: KnownDllPath: C:\WINDOWS\System32
680.1554: supR3HardenedVmProcessInit: Opening vboxdrv stub…
1918.738: supR3HardNtEnableThreadCreation:
680.1554: supR3HardenedVmProcessInit: Restoring LdrInitializeThunk…
680.1554: supR3HardenedVmProcessInit: Returning to LdrInitializeThunk…
680.1554: Registered Dll notification callback with NTDLL.
680.1554: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\kernel32.dll)
680.1554: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\kernel32.dll
680.1554: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\KERNEL32.DLL (Input=KERNEL32.DLL, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=00004001: [calling]
680.1554: supR3HardenedDllNotificationCallback: load 73e20000 LB 0x001f1000 C:\WINDOWS\System32\KERNELBASE.dll [fFlags=0x0]
680.1554: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\KernelBase.dll)
680.1554: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\KernelBase.dll
680.1554: supR3HardenedDllNotificationCallback: load 74fc0000 LB 0x00098000 C:\WINDOWS\System32\KERNEL32.DLL [fFlags=0x0]
680.1554: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
680.1554: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=74fc0000 ‘C:\WINDOWS\System32\KERNEL32.DLL’
680.1554: supR3HardenedDllNotificationCallback: load 00c10000 LB 0x000f2000 C:\Program Files\Oracle\VirtualBox\VBoxHeadless.exe [fFlags=0x0]
680.1554: ‘\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxHeadless.exe’ has no imports
680.1554: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxHeadless.exe)
680.1554: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxHeadless.exe
680.1554: supR3HardNtDisableThreadCreation: pvLdrInitThunk=772e7b40 pvNtTerminateThread=772fd6b0
1918.738: supR3HardNtChildWaitFor: Found expected request 1 (CloseEvents) after 338 ms.
680.1554: \SystemRoot\System32\ntdll.dll:
680.1554: CreationTime: 2019-02-13T11:17:24.304597200Z
680.1554: LastWriteTime: 2019-02-13T11:17:24.504486700Z
680.1554: ChangeTime: 2019-02-14T16:42:07.769656900Z
680.1554: FileAttributes: 0x20
680.1554: Size: 0x193c40
680.1554: NT Headers: 0xf0
680.1554: Timestamp: 0xd9f605a2
680.1554: Machine: 0x14c - i386
680.1554: Timestamp: 0xd9f605a2
680.1554: Image Version: 10.0
680.1554: SizeOfImage: 0x197000 (1667072)
680.1554: Resource Dir: 0x123000 LB 0x6ea08
680.1554: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
680.1554: [Raw version resource data: 0x1230f0 LB 0x380, codepage 0x0 (reserved 0x0)]
680.1554: ProductName: Microsoft® Windows® Operating System
680.1554: ProductVersion: 10.0.17763.292
680.1554: FileVersion: 10.0.17763.292 (WinBuild.160101.0800)
680.1554: FileDescription: NT Layer DLL
680.1554: \SystemRoot\System32\kernel32.dll:
680.1554: CreationTime: 2019-02-13T11:16:45.747822200Z
680.1554: LastWriteTime: 2019-02-13T11:16:45.805299400Z
680.1554: ChangeTime: 2019-02-14T16:42:06.717671500Z
680.1554: FileAttributes: 0x20
680.1554: Size: 0x9b718
680.1554: NT Headers: 0xf0
680.1554: Timestamp: 0x352bace6
680.1554: Machine: 0x14c - i386
680.1554: Timestamp: 0x352bace6
680.1554: Image Version: 10.0
680.1554: SizeOfImage: 0x98000 (622592)
680.1554: Resource Dir: 0x92000 LB 0x520
680.1554: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
680.1554: [Raw version resource data: 0x920b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
680.1554: ProductName: Microsoft® Windows® Operating System
680.1554: ProductVersion: 10.0.17763.292
680.1554: FileVersion: 10.0.17763.292 (WinBuild.160101.0800)
680.1554: FileDescription: Windows NT BASE API Client DLL
680.1554: \SystemRoot\System32\KernelBase.dll:
680.1554: CreationTime: 2019-02-13T11:17:26.792515500Z
680.1554: LastWriteTime: 2019-02-13T11:17:27.078220900Z
680.1554: ChangeTime: 2019-02-14T16:42:07.915367800Z
680.1554: FileAttributes: 0x20
680.1554: Size: 0x1f1b50
680.1554: NT Headers: 0xf0
680.1554: Timestamp: 0xb868bcc3
680.1554: Machine: 0x14c - i386
680.1554: Timestamp: 0xb868bcc3
680.1554: Image Version: 10.0
680.1554: SizeOfImage: 0x1f1000 (2035712)
680.1554: Resource Dir: 0x1c6000 LB 0x548
680.1554: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
680.1554: [Raw version resource data: 0x1c60b0 LB 0x3bc, codepage 0x0 (reserved 0x0)]
680.1554: ProductName: Microsoft® Windows® Operating System
680.1554: ProductVersion: 10.0.17763.292
680.1554: FileVersion: 10.0.17763.292 (WinBuild.160101.0800)
680.1554: FileDescription: Windows NT BASE API Client DLL
680.1554: \SystemRoot\System32\apisetschema.dll:
680.1554: CreationTime: 2018-09-15T05:06:29.341535600Z
680.1554: LastWriteTime: 2018-09-15T05:06:29.341535600Z
680.1554: ChangeTime: 2018-12-18T17:44:10.472013400Z
680.1554: FileAttributes: 0x20
680.1554: Size: 0x1c738
680.1554: NT Headers: 0xd0
680.1554: Timestamp: 0x688569a9
680.1554: Machine: 0x14c - i386
680.1554: Timestamp: 0x688569a9
680.1554: Image Version: 10.0
680.1554: SizeOfImage: 0x1d000 (118784)
680.1554: Resource Dir: 0x1c000 LB 0x408
680.1554: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
680.1554: [Raw version resource data: 0x1c060 LB 0x3a8, codepage 0x0 (reserved 0x0)]
680.1554: ProductName: Microsoft® Windows® Operating System
680.1554: ProductVersion: 10.0.17763.1
680.1554: FileVersion: 10.0.17763.1 (WinBuild.160101.0800)
680.1554: FileDescription: ApiSet Schema DLL
680.1554: NtOpenDirectoryObject failed on \Driver: 0xc0000022
680.1554: supR3HardenedWinFindAdversaries: 0x0
680.1554: supR3HardenedWinInitAppBin(0x0): ‘\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox’
680.1554: Calling main()
680.1554: SUPR3HardenedMain: pszProgName=VBoxHeadless fFlags=0x0
680.1554: supR3HardenedWinInitAppBin(0x0): ‘\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox’
680.1554: ‘\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxHeadless.exe’ has no imports
680.1554: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxHeadless.exe)
680.1554: SUPR3HardenedMain: Respawn #2
680.1554: supR3HardNtEnableThreadCreation:
680.1554: supR3HardenedDllNotificationCallback: load 77080000 LB 0x000bf000 C:\WINDOWS\System32\RPCRT4.dll [fFlags=0x0]
680.1554: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll)
680.1554: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll
680.1554: supR3HardenedDllNotificationCallback: load 76d10000 LB 0x00079000 C:\WINDOWS\System32\sechost.dll [fFlags=0x0]
680.1554: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 ‘rpcrt4.dll’.
680.1554: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\sechost.dll)
680.1554: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\sechost.dll
680.1554: ‘\Device\HarddiskVolume4\Windows\System32\ntdll.dll’ has no imports
680.1554: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\ntdll.dll)
680.1554: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\ntdll.dll
680.1554: supR3HardenedWinVerifyCacheProcessImportTodos: Processing ‘rpcrt4.dll’…
680.1554: supR3HardenedWinVerifyCacheProcessImportTodos: ‘rpcrt4.dll’ -> ‘\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll’ [rcNtRedir=0xc0150008]
680.1554: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
680.1554: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\ntdll.dll (Input=ntdll.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000801: [calling]
680.1554: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=77270000 ‘C:\WINDOWS\System32\ntdll.dll’
680.1554: supR3HardNtDisableThreadCreation: pvLdrInitThunk=772e7b40 pvNtTerminateThread=772fd6b0
680.1554: supR3HardenedWinDoReSpawn(2): New child 1af4.214c [kernel32].
680.1554: supR3HardenedWinReSpawn: NtSetInformationThread/ThreadHideFromDebugger failed: 0xc0000022 (harmless)
680.1554: supR3HardNtChildGatherData: PebBaseAddress=004ee000 cbPeb=0x250
680.1554: supR3HardNtPuChFindNtdll: uNtDllParentAddr=77270000 uNtDllChildAddr=77270000
680.1554: supR3HardenedWinSetupChildInit: uLdrInitThunk=772e7b40
680.1554: supR3HardenedWinSetupChildInit: Start child.
680.1554: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 1 ms.
680.1554: supR3HardNtChildPurify: Startup delay kludge #1/0: 260 ms, 0 sleeps
680.1554: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
680.1554: *00000000-003effff 0x0001/0x0000 0x0000000
680.1554: *003f0000-003f3fff 0x0002/0x0002 0x0040000
680.1554: 003f4000-003fffff 0x0001/0x0000 0x0000000
680.1554: *00400000-004edfff 0x0000/0x0004 0x0020000
680.1554: 004ee000-004effff 0x0004/0x0004 0x0020000
680.1554: 004f0000-005fffff 0x0000/0x0004 0x0020000
680.1554: *00600000-0061ffff 0x0004/0x0004 0x0020000
680.1554: *00620000-00639fff 0x0002/0x0002 0x0040000
680.1554: 0063a000-0063ffff 0x0001/0x0000 0x0000000
680.1554: *00640000-0073bfff 0x0000/0x0004 0x0020000
680.1554: 0073c000-0073dfff 0x0104/0x0004 0x0020000
680.1554: 0073e000-0073ffff 0x0004/0x0004 0x0020000
680.1554: *00740000-00741fff 0x0004/0x0004 0x0020000
680.1554: 00742000-00c0ffff 0x0001/0x0000 0x0000000
680.1554: *00c10000-00c10fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxHeadless.exe
680.1554: 00c11000-00c76fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxHeadless.exe
680.1554: 00c77000-00c77fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxHeadless.exe
680.1554: 00c78000-00cb1fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxHeadless.exe
680.1554: 00cb2000-00cb2fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxHeadless.exe
680.1554: 00cb3000-00cb3fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxHeadless.exe
680.1554: 00cb4000-00cb4fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxHeadless.exe
680.1554: 00cb5000-00cb5fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxHeadless.exe
680.1554: 00cb6000-00cbafff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxHeadless.exe
680.1554: 00cbb000-00cbdfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxHeadless.exe
680.1554: 00cbe000-00d01fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxHeadless.exe
680.1554: 00d02000-7726ffff 0x0001/0x0000 0x0000000
680.1554: *77270000-77270fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
680.1554: 77271000-77388fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
680.1554: 77389000-7738efff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
680.1554: 7738f000-7738ffff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
680.1554: 77390000-77391fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
680.1554: 77392000-77406fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
680.1554: 77407000-7f52ffff 0x0001/0x0000 0x0000000
680.1554: *7f530000-7f530fff 0x0002/0x0002 0x0040000
680.1554: 7f531000-7f53ffff 0x0001/0x0000 0x0000000
680.1554: *7f540000-7f562fff 0x0002/0x0002 0x0040000
680.1554: 7f563000-7ffdffff 0x0001/0x0000 0x0000000
680.1554: *7ffe0000-7ffe0fff 0x0002/0x0002 0x0020000
680.1554: 7ffe1000-7ffe3fff 0x0001/0x0000 0x0000000
680.1554: *7ffe4000-7ffe4fff 0x0002/0x0002 0x0020000
680.1554: 7ffe5000-7ffeffff 0x0001/0x0000 0x0000000
680.1554: VBoxHeadless.exe: timestamp 0x5bc4a6b8 (rc=VINF_SUCCESS)
680.1554: ‘\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxHeadless.exe’ has no imports
680.1554: ‘\Device\HarddiskVolume4\Windows\System32\ntdll.dll’ has no imports
680.1554: supR3HardNtChildPurify: Done after 382 ms and 0 fixes (loop #0).
1af4.214c: Log file opened: 5.2.20r125813 g_hStartupLog=00000008 g_uNtVerCombined=0xa0456300
1af4.214c: supR3HardenedVmProcessInit: uNtDllAddr=77270000 g_uNtVerCombined=0xa0456300
680.1554: supR3HardenedEarlyCompact: Removed heap 1 (0x630000 LB 0x400000)
680.1554: supR3HardNtEnableThreadCreation:
1af4.214c: ntdll.dll: timestamp 0xd9f605a2 (rc=VINF_SUCCESS)
1af4.214c: New simple heap: #1 00d10000 LB 0x400000 (for 1667072 allocation)
1af4.214c: supR3HardenedWinInitAppBin(0x0): ‘\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox’
1af4.214c: System32: \Device\HarddiskVolume4\Windows\System32
1af4.214c: WinSxS: \Device\HarddiskVolume4\Windows\WinSxS
1af4.214c: KnownDllPath: C:\WINDOWS\System32
1af4.214c: supR3HardenedVmProcessInit: Opening vboxdrv…
1af4.214c: supR3HardenedVmProcessInit: Restoring LdrInitializeThunk…
1af4.214c: supR3HardenedVmProcessInit: Returning to LdrInitializeThunk…
1af4.214c: Registered Dll notification callback with NTDLL.
1af4.214c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\kernel32.dll)
1af4.214c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\kernel32.dll
1af4.214c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\KERNEL32.DLL (Input=KERNEL32.DLL, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=00004001: [calling]
1af4.214c: supR3HardenedDllNotificationCallback: load 73e20000 LB 0x001f1000 C:\WINDOWS\System32\KERNELBASE.dll [fFlags=0x0]
1af4.214c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\KernelBase.dll)
1af4.214c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\KernelBase.dll
1af4.214c: supR3HardenedDllNotificationCallback: load 74fc0000 LB 0x00098000 C:\WINDOWS\System32\KERNEL32.DLL [fFlags=0x0]
1af4.214c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
1af4.214c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=74fc0000 ‘C:\WINDOWS\System32\KERNEL32.DLL’
1af4.214c: supR3HardenedDllNotificationCallback: load 00c10000 LB 0x000f2000 C:\Program Files\Oracle\VirtualBox\VBoxHeadless.exe [fFlags=0x0]
1af4.214c: ‘\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxHeadless.exe’ has no imports
1af4.214c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxHeadless.exe)
1af4.214c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxHeadless.exe
1af4.214c: supR3HardNtDisableThreadCreation: pvLdrInitThunk=772e7b40 pvNtTerminateThread=772fd6b0
680.1554: supR3HardNtChildWaitFor: Found expected request 1 (CloseEvents) after 295 ms.
1af4.214c: \SystemRoot\System32\ntdll.dll:
1af4.214c: CreationTime: 2019-02-13T11:17:24.304597200Z
1af4.214c: LastWriteTime: 2019-02-13T11:17:24.504486700Z
1af4.214c: ChangeTime: 2019-02-14T16:42:07.769656900Z
1af4.214c: FileAttributes: 0x20
1af4.214c: Size: 0x193c40
1af4.214c: NT Headers: 0xf0
1af4.214c: Timestamp: 0xd9f605a2
1af4.214c: Machine: 0x14c - i386
1af4.214c: Timestamp: 0xd9f605a2
1af4.214c: Image Version: 10.0
1af4.214c: SizeOfImage: 0x197000 (1667072)
1af4.214c: Resource Dir: 0x123000 LB 0x6ea08
1af4.214c: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
1af4.214c: [Raw version resource data: 0x1230f0 LB 0x380, codepage 0x0 (reserved 0x0)]
1af4.214c: ProductName: Microsoft® Windows® Operating System
1af4.214c: ProductVersion: 10.0.17763.292
1af4.214c: FileVersion: 10.0.17763.292 (WinBuild.160101.0800)
1af4.214c: FileDescription: NT Layer DLL
1af4.214c: \SystemRoot\System32\kernel32.dll:
1af4.214c: CreationTime: 2019-02-13T11:16:45.747822200Z
1af4.214c: LastWriteTime: 2019-02-13T11:16:45.805299400Z
1af4.214c: ChangeTime: 2019-02-14T16:42:06.717671500Z
1af4.214c: FileAttributes: 0x20
1af4.214c: Size: 0x9b718
1af4.214c: NT Headers: 0xf0
1af4.214c: Timestamp: 0x352bace6
1af4.214c: Machine: 0x14c - i386
1af4.214c: Timestamp: 0x352bace6
1af4.214c: Image Version: 10.0
1af4.214c: SizeOfImage: 0x98000 (622592)
1af4.214c: Resource Dir: 0x92000 LB 0x520
1af4.214c: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
1af4.214c: [Raw version resource data: 0x920b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
1af4.214c: ProductName: Microsoft® Windows® Operating System
1af4.214c: ProductVersion: 10.0.17763.292
1af4.214c: FileVersion: 10.0.17763.292 (WinBuild.160101.0800)
1af4.214c: FileDescription: Windows NT BASE API Client DLL
1af4.214c: \SystemRoot\System32\KernelBase.dll:
1af4.214c: CreationTime: 2019-02-13T11:17:26.792515500Z
1af4.214c: LastWriteTime: 2019-02-13T11:17:27.078220900Z
1af4.214c: ChangeTime: 2019-02-14T16:42:07.915367800Z
1af4.214c: FileAttributes: 0x20
1af4.214c: Size: 0x1f1b50
1af4.214c: NT Headers: 0xf0
1af4.214c: Timestamp: 0xb868bcc3
1af4.214c: Machine: 0x14c - i386
1af4.214c: Timestamp: 0xb868bcc3
1af4.214c: Image Version: 10.0
1af4.214c: SizeOfImage: 0x1f1000 (2035712)
1af4.214c: Resource Dir: 0x1c6000 LB 0x548
1af4.214c: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
1af4.214c: [Raw version resource data: 0x1c60b0 LB 0x3bc, codepage 0x0 (reserved 0x0)]
1af4.214c: ProductName: Microsoft® Windows® Operating System
1af4.214c: ProductVersion: 10.0.17763.292
1af4.214c: FileVersion: 10.0.17763.292 (WinBuild.160101.0800)
1af4.214c: FileDescription: Windows NT BASE API Client DLL
1af4.214c: \SystemRoot\System32\apisetschema.dll:
1af4.214c: CreationTime: 2018-09-15T05:06:29.341535600Z
1af4.214c: LastWriteTime: 2018-09-15T05:06:29.341535600Z
1af4.214c: ChangeTime: 2018-12-18T17:44:10.472013400Z
1af4.214c: FileAttributes: 0x20
1af4.214c: Size: 0x1c738
1af4.214c: NT Headers: 0xd0
1af4.214c: Timestamp: 0x688569a9
1af4.214c: Machine: 0x14c - i386
1af4.214c: Timestamp: 0x688569a9
1af4.214c: Image Version: 10.0
1af4.214c: SizeOfImage: 0x1d000 (118784)
1af4.214c: Resource Dir: 0x1c000 LB 0x408
1af4.214c: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
1af4.214c: [Raw version resource data: 0x1c060 LB 0x3a8, codepage 0x0 (reserved 0x0)]
1af4.214c: ProductName: Microsoft® Windows® Operating System
1af4.214c: ProductVersion: 10.0.17763.1
1af4.214c: FileVersion: 10.0.17763.1 (WinBuild.160101.0800)
1af4.214c: FileDescription: ApiSet Schema DLL
1af4.214c: NtOpenDirectoryObject failed on \Driver: 0xc0000022
1af4.214c: supR3HardenedWinFindAdversaries: 0x0
1af4.214c: supR3HardenedWinInitAppBin(0x0): ‘\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox’
1af4.214c: Calling main()
1af4.214c: SUPR3HardenedMain: pszProgName=VBoxHeadless fFlags=0x0
1af4.214c: supR3HardenedWinInitAppBin(0x0): ‘\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox’
1af4.214c: ‘\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxHeadless.exe’ has no imports
1af4.214c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxHeadless.exe)
1af4.214c: SUPR3HardenedMain: Final process, opening VBoxDrv…
1af4.214c: supR3HardenedEarlyCompact: Removed heap 1 (0xd10000 LB 0x400000)
1af4.214c: supR3HardNtEnableThreadCreation:
1af4.214c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxSupLib.dll)
1af4.214c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxSupLib.dll
1af4.214c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000801: [calling]
1af4.214c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
1af4.214c: supR3HardenedDllNotificationCallback: load 6c2b0000 LB 0x00005000 C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL [fFlags=0x0]
1af4.214c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
1af4.214c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
1af4.214c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000001: [calling]
1af4.214c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=6c2b0000 ‘C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL’
1af4.214c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
1af4.214c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000001: [calling]
1af4.214c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=6c2b0000 ‘C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL’
1af4.214c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=6c2b0000 ‘C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL’
1af4.214c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 ‘msvcrt.dll’.
1af4.214c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 ‘msasn1.dll’.
1af4.214c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 ‘crypt32.dll’.
1af4.214c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 ‘rpcrt4.dll’.
1af4.214c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\wintrust.dll)
1af4.214c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\wintrust.dll
1af4.214c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing ‘rpcrt4.dll’…
1af4.214c: supR3HardenedWinVerifyCacheProcessImportTodos: ‘rpcrt4.dll’ -> ‘\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll’ [rcNtRedir=0xc0150008]
1af4.214c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll)
1af4.214c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll
1af4.214c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing ‘crypt32.dll’…
1af4.214c: supR3HardenedWinVerifyCacheProcessImportTodos: ‘crypt32.dll’ -> ‘\Device\HarddiskVolume4\Windows\System32\crypt32.dll’ [rcNtRedir=0xc0150008]
1af4.214c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 ‘msasn1.dll’.
1af4.214c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\crypt32.dll)
1af4.214c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\crypt32.dll
1af4.214c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing ‘msasn1.dll’…
1af4.214c: supR3HardenedWinVerifyCacheProcessImportTodos: ‘msasn1.dll’ -> ‘\Device\HarddiskVolume4\Windows\System32\msasn1.dll’ [rcNtRedir=0xc0150008]
1af4.214c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\msasn1.dll)
1af4.214c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\msasn1.dll
1af4.214c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing ‘msvcrt.dll’…
1af4.214c: supR3HardenedWinVerifyCacheProcessImportTodos: ‘msvcrt.dll’ -> ‘\Device\HarddiskVolume4\Windows\System32\msvcrt.dll’ [rcNtRedir=0xc0150008]
1af4.214c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\msvcrt.dll)
1af4.214c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\msvcrt.dll
1af4.214c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing ‘msasn1.dll’…
1af4.214c: supR3HardenedWinVerifyCacheProcessImportTodos: ‘msasn1.dll’ -> ‘\Device\HarddiskVolume4\Windows\System32\msasn1.dll’ [rcNtRedir=0xc0150008]
1af4.214c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msasn1.dll [lacks WinVerifyTrust]
1af4.214c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\Wintrust.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000801: [calling]
1af4.214c: supR3HardenedDllNotificationCallback: load 75090000 LB 0x000c0000 C:\WINDOWS\System32\msvcrt.dll [fFlags=0x0]
1af4.214c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
1af4.214c: supR3HardenedDllNotificationCallback: load 73b40000 LB 0x0000e000 C:\WINDOWS\System32\MSASN1.dll [fFlags=0x0]
1af4.214c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msasn1.dll [lacks WinVerifyTrust]
1af4.214c: supR3HardenedDllNotificationCallback: load 73bd0000 LB 0x00123000 C:\WINDOWS\System32\ucrtbase.dll [fFlags=0x0]
1af4.214c: supHardenedWinVerifyImageByHandle: -> -626 (\Device\HarddiskVolume4\Windows\System32\ucrtbase.dll)
1af4.214c: Error (rc=0):
1af4.214c: supR3HardenedScreenImage/LdrLoadDll: rc=Unknown Status -626 (0xfffffd8e) fImage=1 fProtect=0x0 fAccess=0x0 \Device\HarddiskVolume4\Windows\System32\ucrtbase.dll: Grown load config (160 to 164 bytes, dir 164) includes non-zero bytes: b4 b2 00 10
1af4.214c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\ucrtbase.dll
1af4.214c: Fatal error:
1af4.214c: supR3HardenedDllNotificationCallback: supR3HardenedScreenImage failed on ‘C:\WINDOWS\System32\ucrtbase.dll’ / ‘??\C:\WINDOWS\System32\ucrtbase.dll’: 0xc0000190
680.1554: supR3HardNtChildWaitFor[2]: Quitting: ExitCode=0x1 (rcNtWait=0x0, rcNt1=0x0, rcNt2=0x103, rcNt3=0x103, 333 ms, the end);
1918.738: supR3HardNtChildWaitFor[1]: Quitting: ExitCode=0x1 (rcNtWait=0x0, rcNt1=0x0, rcNt2=0x103, rcNt3=0x103, 1260 ms, the end);