29b4.1e40: Log file opened: 5.2.4r119785 g_hStartupLog=0000000000000084 g_uNtVerCombined=0xa042ee00 29b4.1e40: \SystemRoot\System32\ntdll.dll: 29b4.1e40: CreationTime: 2018-09-13T13:27:57.842097200Z 29b4.1e40: LastWriteTime: 2018-08-09T04:53:50.386880400Z 29b4.1e40: ChangeTime: 2018-09-13T19:07:47.588732700Z 29b4.1e40: FileAttributes: 0x20 29b4.1e40: Size: 0x1db848 29b4.1e40: NT Headers: 0xe8 29b4.1e40: Timestamp: 0xa5a334d4 29b4.1e40: Machine: 0x8664 - amd64 29b4.1e40: Timestamp: 0xa5a334d4 29b4.1e40: Image Version: 10.0 29b4.1e40: SizeOfImage: 0x1e1000 (1970176) 29b4.1e40: Resource Dir: 0x174000 LB 0x6b3e8 29b4.1e40: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)] 29b4.1e40: [Raw version resource data: 0x1740f0 LB 0x380, codepage 0x0 (reserved 0x0)] 29b4.1e40: ProductName: Microsoft® Windows® Operating System 29b4.1e40: ProductVersion: 10.0.17134.254 29b4.1e40: FileVersion: 10.0.17134.254 (WinBuild.160101.0800) 29b4.1e40: FileDescription: NT Layer DLL 29b4.1e40: \SystemRoot\System32\kernel32.dll: 29b4.1e40: CreationTime: 2018-04-11T23:34:40.510607900Z 29b4.1e40: LastWriteTime: 2018-04-11T23:34:40.510607900Z 29b4.1e40: ChangeTime: 2018-05-24T16:10:44.868501400Z 29b4.1e40: FileAttributes: 0x20 29b4.1e40: Size: 0xafef8 29b4.1e40: NT Headers: 0xe8 29b4.1e40: Timestamp: 0x5f488a51 29b4.1e40: Machine: 0x8664 - amd64 29b4.1e40: Timestamp: 0x5f488a51 29b4.1e40: Image Version: 10.0 29b4.1e40: SizeOfImage: 0xb2000 (729088) 29b4.1e40: Resource Dir: 0xb0000 LB 0x520 29b4.1e40: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)] 29b4.1e40: [Raw version resource data: 0xb00b0 LB 0x3a4, codepage 0x0 (reserved 0x0)] 29b4.1e40: ProductName: Microsoft® Windows® Operating System 29b4.1e40: ProductVersion: 10.0.17134.1 29b4.1e40: FileVersion: 10.0.17134.1 (WinBuild.160101.0800) 29b4.1e40: FileDescription: Windows NT BASE API Client DLL 29b4.1e40: \SystemRoot\System32\KernelBase.dll: 29b4.1e40: CreationTime: 2018-07-12T08:34:39.112773600Z 29b4.1e40: LastWriteTime: 2018-07-06T07:25:54.438736600Z 29b4.1e40: ChangeTime: 2018-09-13T13:34:01.008121600Z 29b4.1e40: FileAttributes: 0x20 29b4.1e40: Size: 0x273dd0 29b4.1e40: NT Headers: 0xf8 29b4.1e40: Timestamp: 0xb0bb231d 29b4.1e40: Machine: 0x8664 - amd64 29b4.1e40: Timestamp: 0xb0bb231d 29b4.1e40: Image Version: 10.0 29b4.1e40: SizeOfImage: 0x273000 (2568192) 29b4.1e40: Resource Dir: 0x251000 LB 0x548 29b4.1e40: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)] 29b4.1e40: [Raw version resource data: 0x2510b0 LB 0x3bc, codepage 0x0 (reserved 0x0)] 29b4.1e40: ProductName: Microsoft® Windows® Operating System 29b4.1e40: ProductVersion: 10.0.17134.165 29b4.1e40: FileVersion: 10.0.17134.165 (WinBuild.160101.0800) 29b4.1e40: FileDescription: Windows NT BASE API Client DLL 29b4.1e40: \SystemRoot\System32\apisetschema.dll: 29b4.1e40: CreationTime: 2018-04-11T23:34:44.042150700Z 29b4.1e40: LastWriteTime: 2018-04-11T23:34:44.042150700Z 29b4.1e40: ChangeTime: 2018-05-25T01:52:49.148314000Z 29b4.1e40: FileAttributes: 0x20 29b4.1e40: Size: 0x1bd98 29b4.1e40: NT Headers: 0xd0 29b4.1e40: Timestamp: 0xd02ff418 29b4.1e40: Machine: 0x8664 - amd64 29b4.1e40: Timestamp: 0xd02ff418 29b4.1e40: Image Version: 10.0 29b4.1e40: SizeOfImage: 0x1c000 (114688) 29b4.1e40: Resource Dir: 0x1b000 LB 0x408 29b4.1e40: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)] 29b4.1e40: [Raw version resource data: 0x1b060 LB 0x3a8, codepage 0x0 (reserved 0x0)] 29b4.1e40: ProductName: Microsoft® Windows® Operating System 29b4.1e40: ProductVersion: 10.0.17134.1 29b4.1e40: FileVersion: 10.0.17134.1 (WinBuild.160101.0800) 29b4.1e40: FileDescription: ApiSet Schema DLL 29b4.1e40: NtOpenDirectoryObject failed on \Driver: 0xc0000022 29b4.1e40: supR3HardenedWinFindAdversaries: 0x0 29b4.1e40: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox' 29b4.1e40: Calling main() 29b4.1e40: SUPR3HardenedMain: pszProgName=VBoxHeadless fFlags=0x0 29b4.1e40: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox' 29b4.1e40: SUPR3HardenedMain: Respawn #1 29b4.1e40: System32: \Device\HarddiskVolume4\Windows\System32 29b4.1e40: WinSxS: \Device\HarddiskVolume4\Windows\WinSxS 29b4.1e40: KnownDllPath: C:\WINDOWS\System32 29b4.1e40: '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxHeadless.exe' has no imports 29b4.1e40: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxHeadless.exe) 29b4.1e40: supR3HardNtEnableThreadCreation: 29b4.1e40: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffa392b2ff0 pvNtTerminateThread=00007ffa392da940 29b4.1e40: supR3HardenedWinDoReSpawn(1): New child 11b4.2994 [kernel32]. 29b4.1e40: supR3HardNtChildGatherData: PebBaseAddress=00000000008ae000 cbPeb=0x388 29b4.1e40: supR3HardNtPuChFindNtdll: uNtDllParentAddr=00007ffa39240000 uNtDllChildAddr=00007ffa39240000 29b4.1e40: supR3HardenedWinSetupChildInit: uLdrInitThunk=00007ffa392b2ff0 29b4.1e40: supR3HardenedWinSetupChildInit: Start child. 29b4.1e40: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 0 ms. 29b4.1e40: supR3HardNtChildPurify: Startup delay kludge #1/0: 264 ms, 30 sleeps 29b4.1e40: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION 29b4.1e40: *0000000000000000-000000000060ffff 0x0001/0x0000 0x0000000 29b4.1e40: *0000000000610000-000000000062ffff 0x0004/0x0004 0x0020000 29b4.1e40: *0000000000630000-0000000000648fff 0x0002/0x0002 0x0040000 29b4.1e40: 0000000000649000-000000000064ffff 0x0001/0x0000 0x0000000 29b4.1e40: *0000000000650000-000000000074afff 0x0000/0x0004 0x0020000 29b4.1e40: 000000000074b000-000000000074dfff 0x0104/0x0004 0x0020000 29b4.1e40: 000000000074e000-000000000074ffff 0x0004/0x0004 0x0020000 29b4.1e40: *0000000000750000-0000000000753fff 0x0002/0x0002 0x0040000 29b4.1e40: 0000000000754000-000000000075ffff 0x0001/0x0000 0x0000000 29b4.1e40: *0000000000760000-0000000000760fff 0x0004/0x0004 0x0020000 29b4.1e40: 0000000000761000-00000000007fffff 0x0001/0x0000 0x0000000 29b4.1e40: *0000000000800000-00000000008adfff 0x0000/0x0004 0x0020000 29b4.1e40: 00000000008ae000-00000000008b0fff 0x0004/0x0004 0x0020000 29b4.1e40: 00000000008b1000-00000000009fffff 0x0000/0x0004 0x0020000 29b4.1e40: 0000000000a00000-000000007ffdffff 0x0001/0x0000 0x0000000 29b4.1e40: *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000 29b4.1e40: 000000007ffe1000-00007ff59df0ffff 0x0001/0x0000 0x0000000 29b4.1e40: *00007ff59df10000-00007ff59df32fff 0x0002/0x0002 0x0040000 29b4.1e40: 00007ff59df33000-00007ff6d1c6ffff 0x0001/0x0000 0x0000000 29b4.1e40: *00007ff6d1c70000-00007ff6d1c70fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxHeadless.exe 29b4.1e40: 00007ff6d1c71000-00007ff6d1ce1fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxHeadless.exe 29b4.1e40: 00007ff6d1ce2000-00007ff6d1ce2fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxHeadless.exe 29b4.1e40: 00007ff6d1ce3000-00007ff6d1d28fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxHeadless.exe 29b4.1e40: 00007ff6d1d29000-00007ff6d1d29fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxHeadless.exe 29b4.1e40: 00007ff6d1d2a000-00007ff6d1d2afff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxHeadless.exe 29b4.1e40: 00007ff6d1d2b000-00007ff6d1d2ffff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxHeadless.exe 29b4.1e40: 00007ff6d1d30000-00007ff6d1d30fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxHeadless.exe 29b4.1e40: 00007ff6d1d31000-00007ff6d1d31fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxHeadless.exe 29b4.1e40: 00007ff6d1d32000-00007ff6d1d35fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxHeadless.exe 29b4.1e40: 00007ff6d1d36000-00007ff6d1d7dfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxHeadless.exe 29b4.1e40: 00007ff6d1d7e000-00007ffa3923ffff 0x0001/0x0000 0x0000000 29b4.1e40: *00007ffa39240000-00007ffa39240fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll 29b4.1e40: 00007ffa39241000-00007ffa3934ffff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll 29b4.1e40: 00007ffa39350000-00007ffa39395fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll 29b4.1e40: 00007ffa39396000-00007ffa393a0fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll 29b4.1e40: 00007ffa393a1000-00007ffa393aefff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll 29b4.1e40: 00007ffa393af000-00007ffa393affff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll 29b4.1e40: 00007ffa393b0000-00007ffa393b2fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll 29b4.1e40: 00007ffa393b3000-00007ffa39420fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll 29b4.1e40: 00007ffa39421000-00007ffffffeffff 0x0001/0x0000 0x0000000 29b4.1e40: VBoxHeadless.exe: timestamp 0x5a37e336 (rc=VINF_SUCCESS) 29b4.1e40: '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxHeadless.exe' has no imports 29b4.1e40: '\Device\HarddiskVolume4\Windows\System32\ntdll.dll' has no imports 29b4.1e40: supR3HardNtChildPurify: Done after 302 ms and 0 fixes (loop #0). 29b4.1e40: supR3HardNtEnableThreadCreation: 11b4.2994: Log file opened: 5.2.4r119785 g_hStartupLog=0000000000000008 g_uNtVerCombined=0xa042ee00 11b4.2994: supR3HardenedVmProcessInit: uNtDllAddr=00007ffa39240000 g_uNtVerCombined=0xa042ee00 11b4.2994: ntdll.dll: timestamp 0xa5a334d4 (rc=VINF_SUCCESS) 11b4.2994: New simple heap: #1 0000000000b00000 LB 0x400000 (for 1970176 allocation) 11b4.2994: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox' 11b4.2994: System32: \Device\HarddiskVolume4\Windows\System32 11b4.2994: WinSxS: \Device\HarddiskVolume4\Windows\WinSxS 11b4.2994: KnownDllPath: C:\WINDOWS\System32 11b4.2994: supR3HardenedVmProcessInit: Opening vboxdrv stub... 11b4.2994: supR3HardenedVmProcessInit: Restoring LdrInitializeThunk... 11b4.2994: supR3HardenedVmProcessInit: Returning to LdrInitializeThunk... 11b4.2994: Registered Dll notification callback with NTDLL. 11b4.2994: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\kernel32.dll) 11b4.2994: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\kernel32.dll 11b4.2994: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\KERNEL32.DLL (Input=KERNEL32.DLL, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000004001: [calling] 11b4.2994: supR3HardenedDllNotificationCallback: load 00007ffa35730000 LB 0x00273000 C:\WINDOWS\System32\KERNELBASE.dll [fFlags=0x0] 11b4.2994: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\KernelBase.dll) 11b4.2994: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\KernelBase.dll 11b4.2994: supR3HardenedDllNotificationCallback: load 00007ffa379e0000 LB 0x000b2000 C:\WINDOWS\System32\KERNEL32.DLL [fFlags=0x0] 11b4.2994: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\kernel32.dll [lacks WinVerifyTrust] 11b4.2994: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa379e0000 'C:\WINDOWS\System32\KERNEL32.DLL' 11b4.2994: supR3HardenedDllNotificationCallback: load 00007ff6d1c70000 LB 0x0010e000 C:\Program Files\Oracle\VirtualBox\VBoxHeadless.exe [fFlags=0x0] 11b4.2994: '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxHeadless.exe' has no imports 11b4.2994: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxHeadless.exe) 11b4.2994: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxHeadless.exe 11b4.2994: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffa392b2ff0 pvNtTerminateThread=00007ffa392da940 29b4.1e40: supR3HardNtChildWaitFor: Found expected request 1 (CloseEvents) after 74 ms. 11b4.2994: \SystemRoot\System32\ntdll.dll: 11b4.2994: CreationTime: 2018-09-13T13:27:57.842097200Z 11b4.2994: LastWriteTime: 2018-08-09T04:53:50.386880400Z 11b4.2994: ChangeTime: 2018-09-13T19:07:47.588732700Z 11b4.2994: FileAttributes: 0x20 11b4.2994: Size: 0x1db848 11b4.2994: NT Headers: 0xe8 11b4.2994: Timestamp: 0xa5a334d4 11b4.2994: Machine: 0x8664 - amd64 11b4.2994: Timestamp: 0xa5a334d4 11b4.2994: Image Version: 10.0 11b4.2994: SizeOfImage: 0x1e1000 (1970176) 11b4.2994: Resource Dir: 0x174000 LB 0x6b3e8 11b4.2994: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)] 11b4.2994: [Raw version resource data: 0x1740f0 LB 0x380, codepage 0x0 (reserved 0x0)] 11b4.2994: ProductName: Microsoft® Windows® Operating System 11b4.2994: ProductVersion: 10.0.17134.254 11b4.2994: FileVersion: 10.0.17134.254 (WinBuild.160101.0800) 11b4.2994: FileDescription: NT Layer DLL 11b4.2994: \SystemRoot\System32\kernel32.dll: 11b4.2994: CreationTime: 2018-04-11T23:34:40.510607900Z 11b4.2994: LastWriteTime: 2018-04-11T23:34:40.510607900Z 11b4.2994: ChangeTime: 2018-05-24T16:10:44.868501400Z 11b4.2994: FileAttributes: 0x20 11b4.2994: Size: 0xafef8 11b4.2994: NT Headers: 0xe8 11b4.2994: Timestamp: 0x5f488a51 11b4.2994: Machine: 0x8664 - amd64 11b4.2994: Timestamp: 0x5f488a51 11b4.2994: Image Version: 10.0 11b4.2994: SizeOfImage: 0xb2000 (729088) 11b4.2994: Resource Dir: 0xb0000 LB 0x520 11b4.2994: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)] 11b4.2994: [Raw version resource data: 0xb00b0 LB 0x3a4, codepage 0x0 (reserved 0x0)] 11b4.2994: ProductName: Microsoft® Windows® Operating System 11b4.2994: ProductVersion: 10.0.17134.1 11b4.2994: FileVersion: 10.0.17134.1 (WinBuild.160101.0800) 11b4.2994: FileDescription: Windows NT BASE API Client DLL 11b4.2994: \SystemRoot\System32\KernelBase.dll: 11b4.2994: CreationTime: 2018-07-12T08:34:39.112773600Z 11b4.2994: LastWriteTime: 2018-07-06T07:25:54.438736600Z 11b4.2994: ChangeTime: 2018-09-13T13:34:01.008121600Z 11b4.2994: FileAttributes: 0x20 11b4.2994: Size: 0x273dd0 11b4.2994: NT Headers: 0xf8 11b4.2994: Timestamp: 0xb0bb231d 11b4.2994: Machine: 0x8664 - amd64 11b4.2994: Timestamp: 0xb0bb231d 11b4.2994: Image Version: 10.0 11b4.2994: SizeOfImage: 0x273000 (2568192) 11b4.2994: Resource Dir: 0x251000 LB 0x548 11b4.2994: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)] 11b4.2994: [Raw version resource data: 0x2510b0 LB 0x3bc, codepage 0x0 (reserved 0x0)] 11b4.2994: ProductName: Microsoft® Windows® Operating System 11b4.2994: ProductVersion: 10.0.17134.165 11b4.2994: FileVersion: 10.0.17134.165 (WinBuild.160101.0800) 11b4.2994: FileDescription: Windows NT BASE API Client DLL 11b4.2994: \SystemRoot\System32\apisetschema.dll: 11b4.2994: CreationTime: 2018-04-11T23:34:44.042150700Z 11b4.2994: LastWriteTime: 2018-04-11T23:34:44.042150700Z 11b4.2994: ChangeTime: 2018-05-25T01:52:49.148314000Z 11b4.2994: FileAttributes: 0x20 11b4.2994: Size: 0x1bd98 11b4.2994: NT Headers: 0xd0 11b4.2994: Timestamp: 0xd02ff418 11b4.2994: Machine: 0x8664 - amd64 11b4.2994: Timestamp: 0xd02ff418 11b4.2994: Image Version: 10.0 11b4.2994: SizeOfImage: 0x1c000 (114688) 11b4.2994: Resource Dir: 0x1b000 LB 0x408 11b4.2994: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)] 11b4.2994: [Raw version resource data: 0x1b060 LB 0x3a8, codepage 0x0 (reserved 0x0)] 11b4.2994: ProductName: Microsoft® Windows® Operating System 11b4.2994: ProductVersion: 10.0.17134.1 11b4.2994: FileVersion: 10.0.17134.1 (WinBuild.160101.0800) 11b4.2994: FileDescription: ApiSet Schema DLL 11b4.2994: NtOpenDirectoryObject failed on \Driver: 0xc0000022 11b4.2994: supR3HardenedWinFindAdversaries: 0x0 11b4.2994: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox' 11b4.2994: Calling main() 11b4.2994: SUPR3HardenedMain: pszProgName=VBoxHeadless fFlags=0x0 11b4.2994: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox' 11b4.2994: '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxHeadless.exe' has no imports 11b4.2994: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VBoxHeadless.exe) 11b4.2994: SUPR3HardenedMain: Respawn #2 11b4.2994: supR3HardNtEnableThreadCreation: 11b4.2994: '\Device\HarddiskVolume4\Windows\System32\ntdll.dll' has no imports 11b4.2994: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\ntdll.dll) 11b4.2994: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\ntdll.dll 11b4.2994: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\ntdll.dll (Input=ntdll.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801: [calling] 11b4.2994: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa39240000 'C:\WINDOWS\System32\ntdll.dll' 11b4.2994: Error -104 in supR3HardenedWinReSpawn! (enmWhat=5) 11b4.2994: Error relaunching VirtualBox VM process: 5 Command line: '60eaff78-4bdd-042d-2e72-669728efd737-suplib-3rdchild --comment local-by-flywheel --startvm 97d6361c-1d86-4cbf-afe0-37ab49d4afe9 --vrde config --sup-hardening-log=C:\Users\W10\.docker\machine\machines\local-by-flywheel\local-by-flywheel\Logs\VBoxHardening.log' 29b4.1e40: supR3HardNtChildWaitFor[1]: Quitting: ExitCode=0x1 (rcNtWait=0x0, rcNt1=0x0, rcNt2=0x103, rcNt3=0x103, 68 ms, the end);