Attached logs On Thursday, May 11, 2023 at 8:05:27 PM UTC+5:30 Amitabh Suman wrote:
> I am trying to issue vagrant up command for geerlingguy/centos7 on my Windows > 11 Pro Insider OS > > Versions : (Vagrant 2.3.4, Oracle VirtaulBox Version 7.0.8 r156879 > (Qt5.15.2)). > OS settings : Firewall disabled, Antivirus disabled > RAM assigned to VMs : 2GB > > No matter what I do, "vagrant up" fails always with the below error. I am > unable to find any help on this, not even ChatGPT could help. Can anyone of > you kind helpful folks, help me out. > > 3078.3554: 00007ffa4da8b000-00007ffa4da8dfff 0x0008/0x0080 0x1000000 > \Device\HarddiskVolume3\Windows\System32\ntdll.dll > 3078.3554: 00007ffa4da8e000-00007ffa4da8efff 0x0004/0x0080 0x1000000 > \Device\HarddiskVolume3\Windows\System32\ntdll.dll > 3078.3554: 00007ffa4da8f000-00007ffa4db07fff 0x0002/0x0080 0x1000000 > \Device\HarddiskVolume3\Windows\System32\ntdll.dll > 3078.3554: 00007ffa4db08000-00007ffa4db09fff 0x0000/0x0080 0x1000000 > \Device\HarddiskVolume3\Windows\System32\ntdll.dll > 3078.3554: 00007ffa4db0a000-00007ffffffeffff 0x0001/0x0000 0x0000000 > 3078.3554: VBoxHeadless.exe: Differences in section #8 (.rsrc) between > file and memory: > 3078.3554: 00007ff7d09525f8 / 0x01125f8: 00 != 50 > 3078.3554: 00007ff7d09525f9 / 0x01125f9: 00 != 41 > 3078.3554: 00007ff7d09525fa / 0x01125fa: 00 != 44 > 3078.3554: 00007ff7d09525fb / 0x01125fb: 00 != 44 > 3078.3554: 00007ff7d09525fc / 0x01125fc: 00 != 49 > 3078.3554: 00007ff7d09525fd / 0x01125fd: 00 != 4e > 3078.3554: 00007ff7d09525fe / 0x01125fe: 00 != 47 > 3078.3554: 00007ff7d09525ff / 0x01125ff: 00 != 58 > 3078.3554: Restored 0xa08 bytes of original file content at > 00007ff7d09525f8 > 3078.3554: Error (rc=-5607): > 3078.3554: ntdll.dll: SizeOfImage (0x218000) isn't close enough to the > mapping size (0x21a000) > 3078.3554: Error (rc=-5607): > 3078.3554: supHardenedWinVerifyProcess failed with -5607: ntdll.dll: > SizeOfImage (0x218000) isn't close enough to the mapping size (0x21a000) > 3078.3554: Error -5607 in supR3HardNtChildPurify! (enmWhat=5) > 3078.3554: supHardenedWinVerifyProcess failed with -5607: ntdll.dll: > SizeOfImage (0x218000) isn't close enough to the mapping size (0x21a000) > > What possibly am I doing wrong or what settings needs to be done to fix > it. I have attached the hardening logs as well. Kindly help me. > -- This mailing list is governed under the HashiCorp Community Guidelines - https://www.hashicorp.com/community-guidelines.html. Behavior in violation of those guidelines may result in your removal from this mailing list. GitHub Issues: https://github.com/hashicorp/vagrant/issues Discuss: https://discuss.hashicorp.com/c/vagrant/24 --- You received this message because you are subscribed to the Google Groups "Vagrant" group. To unsubscribe from this group and stop receiving emails from it, send an email to vagrant-up+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/vagrant-up/994b7833-fe55-4eee-893b-a33cc4df6cedn%40googlegroups.com.
64f8.1380: \SystemRoot\System32\ntdll.dll: 64f8.1380: CreationTime: 2023-04-16T04:49:40.964343900Z 64f8.1380: LastWriteTime: 2023-04-16T04:49:40.964343900Z 64f8.1380: ChangeTime: 2023-04-21T17:19:13.652504200Z 64f8.1380: FileAttributes: 0x20 64f8.1380: Size: 0x216bf8 64f8.1380: NT Headers: 0xe8 64f8.1380: Timestamp: 0xe8e54198 64f8.1380: Machine: 0x8664 - amd64 64f8.1380: Timestamp: 0xe8e54198 64f8.1380: Image Version: 10.0 64f8.1380: SizeOfImage: 0x218000 (2195456) 64f8.1380: Resource Dir: 0x1a0000 LB 0x765c8 64f8.1380: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)] 64f8.1380: [Raw version resource data: 0x1a00f0 LB 0x380, codepage 0x0 (reserved 0x0)] 64f8.1380: ProductName: Microsoft® Windows® Operating System 64f8.1380: ProductVersion: 10.0.25346.1001 64f8.1380: FileVersion: 10.0.25346.1001 (WinBuild.160101.0800) 64f8.1380: FileDescription: NT Layer DLL 64f8.1380: \SystemRoot\System32\kernel32.dll: 64f8.1380: CreationTime: 2023-04-16T04:49:42.276869500Z 64f8.1380: LastWriteTime: 2023-04-16T04:49:42.276869500Z 64f8.1380: ChangeTime: 2023-05-01T17:24:39.251906600Z 64f8.1380: FileAttributes: 0x20 64f8.1380: Size: 0xc3cb8 64f8.1380: NT Headers: 0xf8 64f8.1380: Timestamp: 0x7a37a198 64f8.1380: Machine: 0x8664 - amd64 64f8.1380: Timestamp: 0x7a37a198 64f8.1380: Image Version: 10.0 64f8.1380: SizeOfImage: 0xc2000 (794624) 64f8.1380: Resource Dir: 0xc0000 LB 0x520 64f8.1380: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)] 64f8.1380: [Raw version resource data: 0xc00b0 LB 0x3a4, codepage 0x0 (reserved 0x0)] 64f8.1380: ProductName: Microsoft® Windows® Operating System 64f8.1380: ProductVersion: 10.0.25346.1001 64f8.1380: FileVersion: 10.0.25346.1001 (WinBuild.160101.0800) 64f8.1380: FileDescription: Windows NT BASE API Client DLL 64f8.1380: \SystemRoot\System32\KernelBase.dll: 64f8.1380: CreationTime: 2023-04-16T04:49:40.839331100Z 64f8.1380: LastWriteTime: 2023-04-16T04:49:40.854961500Z 64f8.1380: ChangeTime: 2023-05-01T17:24:39.439405900Z 64f8.1380: FileAttributes: 0x20 64f8.1380: Size: 0x354848 64f8.1380: NT Headers: 0x100 64f8.1380: Timestamp: 0x6120004 64f8.1380: Machine: 0x8664 - amd64 64f8.1380: Timestamp: 0x6120004 64f8.1380: Image Version: 10.0 64f8.1380: SizeOfImage: 0x34f000 (3469312) 64f8.1380: Resource Dir: 0x31c000 LB 0x548 64f8.1380: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)] 64f8.1380: [Raw version resource data: 0x31c0b0 LB 0x3bc, codepage 0x0 (reserved 0x0)] 64f8.1380: ProductName: Microsoft® Windows® Operating System 64f8.1380: ProductVersion: 10.0.25346.1001 64f8.1380: FileVersion: 10.0.25346.1001 (WinBuild.160101.0800) 64f8.1380: FileDescription: Windows NT BASE API Client DLL 64f8.1380: \SystemRoot\System32\apisetschema.dll: 64f8.1380: CreationTime: 2023-04-16T04:49:35.761050500Z 64f8.1380: LastWriteTime: 2023-04-16T04:49:35.761050500Z 64f8.1380: ChangeTime: 2023-04-21T17:19:11.289166400Z 64f8.1380: FileAttributes: 0x20 64f8.1380: Size: 0x24120 64f8.1380: NT Headers: 0xd0 64f8.1380: Timestamp: 0x8758c2dd 64f8.1380: Machine: 0x8664 - amd64 64f8.1380: Timestamp: 0x8758c2dd 64f8.1380: Image Version: 10.0 64f8.1380: SizeOfImage: 0x24000 (147456) 64f8.1380: Resource Dir: 0x23000 LB 0x408 64f8.1380: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)] 64f8.1380: [Raw version resource data: 0x23060 LB 0x3a8, codepage 0x0 (reserved 0x0)] 64f8.1380: ProductName: Microsoft® Windows® Operating System 64f8.1380: ProductVersion: 10.0.25346.1001 64f8.1380: FileVersion: 10.0.25346.1001 (WinBuild.160101.0800) 64f8.1380: FileDescription: ApiSet Schema DLL 64f8.1380: NtOpenDirectoryObject failed on \Driver: 0xc0000022 64f8.1380: supR3HardenedWinFindAdversaries: 0x0 64f8.1380: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox' 64f8.1380: Calling main() 64f8.1380: SUPR3HardenedMain: pszProgName=VBoxHeadless fFlags=0x0 64f8.1380: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox' 64f8.1380: SUPR3HardenedMain: Respawn #1 64f8.1380: System32: \Device\HarddiskVolume3\Windows\System32 64f8.1380: WinSxS: \Device\HarddiskVolume3\Windows\WinSxS 64f8.1380: KnownDllPath: C:\WINDOWS\System32 64f8.1380: supR3HardenedWinInit: Performing a limited self purification... 64f8.1380: supHardNtVpScanVirtualMemory: enmKind=SELF_PURIFICATION 64f8.1380: *0000000000000000-000000007ffdffff 0x0001/0x0000 0x0000000 64f8.1380: *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000 64f8.1380: 000000007ffe1000-000000007ffe8fff 0x0001/0x0000 0x0000000 64f8.1380: *000000007ffe9000-000000007ffe9fff 0x0002/0x0002 0x0020000 64f8.1380: 000000007ffea000-0000006a215fffff 0x0001/0x0000 0x0000000 64f8.1380: *0000006a21600000-0000006a217cbfff 0x0000/0x0004 0x0020000 64f8.1380: 0000006a217cc000-0000006a217cefff 0x0004/0x0004 0x0020000 64f8.1380: 0000006a217cf000-0000006a217fffff 0x0000/0x0004 0x0020000 64f8.1380: *0000006a21800000-0000006a218b8fff 0x0000/0x0004 0x0020000 64f8.1380: 0000006a218b9000-0000006a218bbfff 0x0104/0x0004 0x0020000 64f8.1380: 0000006a218bc000-0000006a218fffff 0x0004/0x0004 0x0020000 64f8.1380: 0000006a21900000-000001e32538ffff 0x0001/0x0000 0x0000000 64f8.1380: *000001e325390000-000001e32539ffff 0x0004/0x0004 0x0040000 64f8.1380: *000001e3253a0000-000001e3253a2fff 0x0002/0x0002 0x0040000 64f8.1380: 000001e3253a3000-000001e3253affff 0x0001/0x0000 0x0000000 64f8.1380: *000001e3253b0000-000001e3253cffff 0x0002/0x0002 0x0040000 64f8.1380: *000001e3253d0000-000001e3253d3fff 0x0002/0x0002 0x0040000 64f8.1380: 000001e3253d4000-000001e3253dffff 0x0001/0x0000 0x0000000 64f8.1380: *000001e3253e0000-000001e3253e0fff 0x0002/0x0002 0x0040000 64f8.1380: 000001e3253e1000-000001e3253effff 0x0001/0x0000 0x0000000 64f8.1380: *000001e3253f0000-000001e3253f1fff 0x0004/0x0004 0x0020000 64f8.1380: 000001e3253f2000-000001e3253fffff 0x0001/0x0000 0x0000000 64f8.1380: *000001e325400000-000001e325402fff 0x0002/0x0002 0x0040000 64f8.1380: 000001e325403000-000001e32542ffff 0x0001/0x0000 0x0000000 64f8.1380: *000001e325430000-000001e32543cfff 0x0004/0x0004 0x0020000 64f8.1380: 000001e32543d000-000001e32552ffff 0x0000/0x0004 0x0020000 64f8.1380: *000001e325530000-000001e325531fff 0x0004/0x0004 0x0020000 64f8.1380: 000001e325532000-000001e325591fff 0x0000/0x0004 0x0020000 64f8.1380: 000001e325592000-000001e32559ffff 0x0001/0x0000 0x0000000 64f8.1380: *000001e3255a0000-000001e32566dfff 0x0002/0x0002 0x0040000 64f8.1380: 000001e32566e000-000001e32566ffff 0x0001/0x0000 0x0000000 64f8.1380: *000001e325670000-000001e325671fff 0x0004/0x0004 0x0020000 64f8.1380: 000001e325672000-000001e3256d1fff 0x0000/0x0004 0x0020000 64f8.1380: 000001e3256d2000-000001e32578ffff 0x0001/0x0000 0x0000000 64f8.1380: *000001e325790000-000001e32579efff 0x0004/0x0004 0x0020000 64f8.1380: 000001e32579f000-000001e32579ffff 0x0000/0x0004 0x0020000 64f8.1380: *000001e3257a0000-000001e3257a3fff 0x0000/0x0004 0x0020000 64f8.1380: 000001e3257a4000-000001e3259bcfff 0x0004/0x0004 0x0020000 64f8.1380: 000001e3259bd000-000001e3259bdfff 0x0000/0x0004 0x0020000 64f8.1380: 000001e3259be000-000001e3259bffff 0x0001/0x0000 0x0000000 64f8.1380: *000001e3259c0000-000001e3259edfff 0x0004/0x0004 0x0020000 64f8.1380: 000001e3259ee000-000001e325abffff 0x0000/0x0004 0x0020000 64f8.1380: 000001e325ac0000-00007df4f171ffff 0x0001/0x0000 0x0000000 64f8.1380: *00007df4f1720000-00007df4f1724fff 0x0002/0x0002 0x0040000 64f8.1380: 00007df4f1725000-00007df4f181ffff 0x0000/0x0002 0x0040000 64f8.1380: *00007df4f1820000-00007df5f183ffff 0x0000/0x0004 0x0020000 64f8.1380: *00007df5f1840000-00007df5f383ffff 0x0000/0x0004 0x0020000 64f8.1380: 00007df5f3840000-00007df5f3840fff 0x0004/0x0004 0x0020000 64f8.1380: 00007df5f3841000-00007df5f384ffff 0x0001/0x0000 0x0000000 64f8.1380: *00007df5f3850000-00007df5f3850fff 0x0002/0x0002 0x0040000 64f8.1380: 00007df5f3851000-00007df5f385ffff 0x0001/0x0000 0x0000000 64f8.1380: *00007df5f3860000-00007df5f4c61fff 0x0000/0x0001 0x0040000 64f8.1380: 00007df5f4c62000-00007df5f4ccffff 0x0001/0x0001 0x0040000 64f8.1380: 00007df5f4cd0000-00007df5f562bfff 0x0000/0x0001 0x0040000 64f8.1380: 00007df5f562c000-00007df5f562cfff 0x0001/0x0001 0x0040000 64f8.1380: 00007df5f562d000-00007df5f5648fff 0x0000/0x0001 0x0040000 64f8.1380: 00007df5f5649000-00007df5f565ffff 0x0001/0x0001 0x0040000 64f8.1380: 00007df5f5660000-00007ff5d2c80fff 0x0000/0x0001 0x0040000 64f8.1380: 00007ff5d2c81000-00007ff5d2c85fff 0x0002/0x0001 0x0040000 64f8.1380: 00007ff5d2c86000-00007ff5d8c9efff 0x0000/0x0001 0x0040000 64f8.1380: 00007ff5d8c9f000-00007ff5dcb14fff 0x0001/0x0001 0x0040000 64f8.1380: 00007ff5dcb15000-00007ff5dcb22fff 0x0002/0x0001 0x0040000 64f8.1380: 00007ff5dcb23000-00007ff5dcb67fff 0x0001/0x0001 0x0040000 64f8.1380: 00007ff5dcb68000-00007ff5dcb6bfff 0x0002/0x0001 0x0040000 64f8.1380: 00007ff5dcb6c000-00007ff5dcbc2fff 0x0001/0x0001 0x0040000 64f8.1380: 00007ff5dcbc3000-00007ff5dcbccfff 0x0002/0x0001 0x0040000 64f8.1380: 00007ff5dcbcd000-00007ff5f385ffff 0x0000/0x0001 0x0040000 64f8.1380: 00007ff5f3860000-00007ff7d083ffff 0x0001/0x0000 0x0000000 64f8.1380: *00007ff7d0840000-00007ff7d0840fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxHeadless.exe 64f8.1380: 00007ff7d0841000-00007ff7d08aafff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxHeadless.exe 64f8.1380: 00007ff7d08ab000-00007ff7d08abfff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxHeadless.exe 64f8.1380: 00007ff7d08ac000-00007ff7d08fefff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxHeadless.exe 64f8.1380: 00007ff7d08ff000-00007ff7d0901fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxHeadless.exe 64f8.1380: 00007ff7d0902000-00007ff7d0904fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxHeadless.exe 64f8.1380: 00007ff7d0905000-00007ff7d0907fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxHeadless.exe 64f8.1380: 00007ff7d0908000-00007ff7d0908fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxHeadless.exe 64f8.1380: 00007ff7d0909000-00007ff7d090afff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxHeadless.exe 64f8.1380: 00007ff7d090b000-00007ff7d090bfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxHeadless.exe 64f8.1380: 00007ff7d090c000-00007ff7d0953fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxHeadless.exe 64f8.1380: 00007ff7d0954000-00007ffa4ad5ffff 0x0001/0x0000 0x0000000 64f8.1380: *00007ffa4ad60000-00007ffa4ad60fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\KernelBase.dll 64f8.1380: 00007ffa4ad61000-00007ffa4aea3fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\KernelBase.dll 64f8.1380: 00007ffa4aea4000-00007ffa4b063fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\KernelBase.dll 64f8.1380: 00007ffa4b064000-00007ffa4b068fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\KernelBase.dll 64f8.1380: 00007ffa4b069000-00007ffa4b0aefff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\KernelBase.dll 64f8.1380: 00007ffa4b0af000-00007ffa4b0b0fff 0x0000/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\KernelBase.dll 64f8.1380: 00007ffa4b0b1000-00007ffa4c21ffff 0x0001/0x0000 0x0000000 64f8.1380: *00007ffa4c220000-00007ffa4c220fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\kernel32.dll 64f8.1380: 00007ffa4c221000-00007ffa4c29ffff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\kernel32.dll 64f8.1380: 00007ffa4c2a0000-00007ffa4c2d6fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\kernel32.dll 64f8.1380: 00007ffa4c2d7000-00007ffa4c2d7fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\kernel32.dll 64f8.1380: 00007ffa4c2d8000-00007ffa4c2d8fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\kernel32.dll 64f8.1380: 00007ffa4c2d9000-00007ffa4c2e1fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\kernel32.dll 64f8.1380: 00007ffa4c2e2000-00007ffa4c2e3fff 0x0000/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\kernel32.dll 64f8.1380: 00007ffa4c2e4000-00007ffa4d8effff 0x0001/0x0000 0x0000000 64f8.1380: *00007ffa4d8f0000-00007ffa4d8f0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll 64f8.1380: 00007ffa4d8f1000-00007ffa4da23fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll 64f8.1380: 00007ffa4da24000-00007ffa4da72fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll 64f8.1380: 00007ffa4da73000-00007ffa4da7bfff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll 64f8.1380: 00007ffa4da7c000-00007ffa4db07fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll 64f8.1380: 00007ffa4db08000-00007ffa4db09fff 0x0000/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll 64f8.1380: 00007ffa4db0a000-00007ffffffeffff 0x0001/0x0000 0x0000000 64f8.1380: kernel32.dll: timestamp 0x7a37a198 (rc=VINF_SUCCESS) 64f8.1380: kernelbase.dll: timestamp 0x6120004 (rc=VINF_SUCCESS) 64f8.1380: VBoxHeadless.exe: timestamp 0x643d695f (rc=VINF_SUCCESS) 64f8.1380: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxHeadless.exe: Signature #1/2: info status: 24202 64f8.1380: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxHeadless.exe' has no imports 64f8.1380: VBoxHeadless.exe: Differences in section #7 (.00cfg) between file and memory: 64f8.1380: 00007ff7d0913000 / 0x00d3000: 00 != 30 64f8.1380: 00007ff7d0913001 / 0x00d3001: 0b != fc 64f8.1380: 00007ff7d0913002 / 0x00d3002: 86 != 97 64f8.1380: 00007ff7d0913003 / 0x00d3003: d0 != 4d 64f8.1380: 00007ff7d0913004 / 0x00d3004: f7 != fa 64f8.1380: 00007ff7d0913008 / 0x00d3008: 00 != 30 64f8.1380: 00007ff7d0913009 / 0x00d3009: 0b != fc 64f8.1380: 00007ff7d091300a / 0x00d300a: 86 != 97 64f8.1380: 00007ff7d091300b / 0x00d300b: d0 != 4d 64f8.1380: 00007ff7d091300c / 0x00d300c: f7 != fa 64f8.1380: 00007ff7d0913010 / 0x00d3010: 40 != 70 64f8.1380: 00007ff7d0913011 / 0x00d3011: a9 != fd 64f8.1380: 00007ff7d0913012 / 0x00d3012: 8a != 97 64f8.1380: 00007ff7d0913013 / 0x00d3013: d0 != 4d 64f8.1380: 00007ff7d0913014 / 0x00d3014: f7 != fa 64f8.1380: 00007ff7d0913018 / 0x00d3018: 60 != 70 64f8.1380: 00007ff7d0913019 / 0x00d3019: a9 != fd 64f8.1380: 00007ff7d091301a / 0x00d301a: 8a != 97 64f8.1380: 00007ff7d091301b / 0x00d301b: d0 != 4d 64f8.1380: 00007ff7d091301c / 0x00d301c: f7 != fa 64f8.1380: 00007ff7d0913020 / 0x00d3020: 60 != 70 64f8.1380: 00007ff7d0913021 / 0x00d3021: a9 != fd 64f8.1380: 00007ff7d0913022 / 0x00d3022: 8a != 97 64f8.1380: 00007ff7d0913023 / 0x00d3023: d0 != 4d 64f8.1380: 00007ff7d0913024 / 0x00d3024: f7 != fa 64f8.1380: Restored 0x28 bytes of original file content at 00007ff7d0913000 64f8.1380: VBoxHeadless.exe: Differences in section #8 (.rsrc) between file and memory: 64f8.1380: 00007ff7d09525f8 / 0x01125f8: 00 != 50 64f8.1380: 00007ff7d09525f9 / 0x01125f9: 00 != 41 64f8.1380: 00007ff7d09525fa / 0x01125fa: 00 != 44 64f8.1380: 00007ff7d09525fb / 0x01125fb: 00 != 44 64f8.1380: 00007ff7d09525fc / 0x01125fc: 00 != 49 64f8.1380: 00007ff7d09525fd / 0x01125fd: 00 != 4e 64f8.1380: 00007ff7d09525fe / 0x01125fe: 00 != 47 64f8.1380: 00007ff7d09525ff / 0x01125ff: 00 != 58 64f8.1380: Restored 0xa08 bytes of original file content at 00007ff7d09525f8 64f8.1380: \SystemRoot\System32\ntdll.dll: Signature #1/1: VERR_CR_X509_CPV_NOT_VALID_AT_TIME for 0xe8e54198; retrying against current time: 0x645cf161. 64f8.1380: '\Device\HarddiskVolume3\Windows\System32\ntdll.dll' has no imports 64f8.1380: Error (rc=-5607): 64f8.1380: ntdll.dll: SizeOfImage (0x218000) isn't close enough to the mapping size (0x21a000) 64f8.1380: supHardNtVpCheckHandles: 64f8.1380: supHardNtVpCheckHandles: Inheritable file handle: 0000000000000064 64f8.1380: supHardNtVpCheckHandles: Inheritable file handle: 0000000000000060 64f8.1380: supHardNtVpCheckHandles: Inheritable file handle: 000000000000005c 64f8.1380: supR3HardenedWinInit: SUPHARDNTVPKIND_SELF_PURIFICATION_LIMITED -> VINF_SUCCESS, cFixes=2 64f8.1380: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxHeadless.exe: Signature #1/2: info status: 24202 64f8.1380: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxHeadless.exe' has no imports 64f8.1380: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxHeadless.exe) 64f8.1380: supR3HardNtEnableThreadCreationEx: 64f8.1380: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffa4d963350 pvNtTerminateThread=00007ffa4d990bd0 64f8.1380: supR3HardenedWinDoReSpawn(1): New child 11a4.22e0 [kernel32]. 64f8.1380: supR3HardNtChildGatherData: PebBaseAddress=000000d29c07b000 cbPeb=0x388 64f8.1380: supR3HardNtPuChFindNtdll: uNtDllParentAddr=00007ffa4d8f0000 uNtDllChildAddr=00007ffa4d8f0000 64f8.1380: supR3HardenedWinSetupChildInit: uLdrInitThunk=00007ffa4d963350 64f8.1380: supR3HardenedWinSetupChildInit: Initial context: rax=0000000000000000 rbx=0000000000000000 rcx=00007ff7d084b5a0 rdx=000000d29c07b000 rsi=0000000000000000 rdi=0000000000000000 r8 =0000000000000000 r9 =0000000000000000 r10=0000000000000000 r11=0000000000000000 r12=0000000000000000 r13=0000000000000000 r14=0000000000000000 r15=0000000000000000 P1=0000000000000000 P2=0000000000000000 rip=00007ffa4d8f3280 rsp=000000d29bfefdb8 rbp=0000000000000000 ctxflags=0010001b cs=0033 ss=002b ds=0000 es=0000 fs=0000 gs=0000 eflags=00000200 mxcrx=00001f80 P3=0000000000000000 P4=0000000000000000 P5=0000000000000000 P6=0000000000000000 dr0=0000000000000000 dr1=0000000000000000 dr2=0000000000000000 dr3=0000000000000000 dr6=0000000000000000 dr7=0000000000000000 vcr=0000000000000000 dcr=0000000000000000 lbt=0000000000000000 lbf=0000000000000000 lxt=0000000000000000 lxf=0000000000000000 64f8.1380: supR3HardenedWinSetupChildInit: Start child. 64f8.1380: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 0 ms. 64f8.1380: supR3HardNtChildPurify: Startup delay kludge #1/0: 262 ms, 17 sleeps 64f8.1380: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION 64f8.1380: *0000000000000000-000000007ffdffff 0x0001/0x0000 0x0000000 64f8.1380: *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000 64f8.1380: 000000007ffe1000-000000007ffe8fff 0x0001/0x0000 0x0000000 64f8.1380: *000000007ffe9000-000000007ffe9fff 0x0002/0x0002 0x0020000 64f8.1380: 000000007ffea000-000000d29beeffff 0x0001/0x0000 0x0000000 64f8.1380: *000000d29bef0000-000000d29bfeafff 0x0000/0x0004 0x0020000 64f8.1380: 000000d29bfeb000-000000d29bfedfff 0x0104/0x0004 0x0020000 64f8.1380: 000000d29bfee000-000000d29bfeffff 0x0004/0x0004 0x0020000 64f8.1380: 000000d29bff0000-000000d29bffffff 0x0001/0x0000 0x0000000 64f8.1380: *000000d29c000000-000000d29c07afff 0x0000/0x0004 0x0020000 64f8.1380: 000000d29c07b000-000000d29c07dfff 0x0004/0x0004 0x0020000 64f8.1380: 000000d29c07e000-000000d29c1fffff 0x0000/0x0004 0x0020000 64f8.1380: 000000d29c200000-000001f47f4effff 0x0001/0x0000 0x0000000 64f8.1380: *000001f47f4f0000-000001f47f50ffff 0x0004/0x0004 0x0020000 64f8.1380: *000001f47f510000-000001f47f52ffff 0x0002/0x0002 0x0040000 64f8.1380: *000001f47f530000-000001f47f533fff 0x0002/0x0002 0x0040000 64f8.1380: 000001f47f534000-000001f47f53ffff 0x0001/0x0000 0x0000000 64f8.1380: *000001f47f540000-000001f47f540fff 0x0002/0x0002 0x0040000 64f8.1380: 000001f47f541000-000001f47f54ffff 0x0001/0x0000 0x0000000 64f8.1380: *000001f47f550000-000001f47f551fff 0x0004/0x0004 0x0020000 64f8.1380: 000001f47f552000-00007df5f384ffff 0x0001/0x0000 0x0000000 64f8.1380: *00007df5f3850000-00007df5f3850fff 0x0002/0x0002 0x0040000 64f8.1380: 00007df5f3851000-00007df5f385ffff 0x0001/0x0000 0x0000000 64f8.1380: *00007df5f3860000-00007df5f4c61fff 0x0000/0x0001 0x0040000 64f8.1380: 00007df5f4c62000-00007df5f4ccffff 0x0001/0x0001 0x0040000 64f8.1380: 00007df5f4cd0000-00007df5f562bfff 0x0000/0x0001 0x0040000 64f8.1380: 00007df5f562c000-00007df5f562cfff 0x0001/0x0001 0x0040000 64f8.1380: 00007df5f562d000-00007df5f5648fff 0x0000/0x0001 0x0040000 64f8.1380: 00007df5f5649000-00007df5f565ffff 0x0001/0x0001 0x0040000 64f8.1380: 00007df5f5660000-00007ff5d2c80fff 0x0000/0x0001 0x0040000 64f8.1380: 00007ff5d2c81000-00007ff5d2c85fff 0x0002/0x0001 0x0040000 64f8.1380: 00007ff5d2c86000-00007ff5d8c9efff 0x0000/0x0001 0x0040000 64f8.1380: 00007ff5d8c9f000-00007ff5dcbc2fff 0x0001/0x0001 0x0040000 64f8.1380: 00007ff5dcbc3000-00007ff5dcbccfff 0x0002/0x0001 0x0040000 64f8.1380: 00007ff5dcbcd000-00007ff5f385ffff 0x0000/0x0001 0x0040000 64f8.1380: 00007ff5f3860000-00007ff7d083ffff 0x0001/0x0000 0x0000000 64f8.1380: *00007ff7d0840000-00007ff7d0840fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxHeadless.exe 64f8.1380: 00007ff7d0841000-00007ff7d08aafff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxHeadless.exe 64f8.1380: 00007ff7d08ab000-00007ff7d08abfff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxHeadless.exe 64f8.1380: 00007ff7d08ac000-00007ff7d08fefff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxHeadless.exe 64f8.1380: 00007ff7d08ff000-00007ff7d08fffff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxHeadless.exe 64f8.1380: 00007ff7d0900000-00007ff7d0900fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxHeadless.exe 64f8.1380: 00007ff7d0901000-00007ff7d0905fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxHeadless.exe 64f8.1380: 00007ff7d0906000-00007ff7d090bfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxHeadless.exe 64f8.1380: 00007ff7d090c000-00007ff7d0953fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxHeadless.exe 64f8.1380: 00007ff7d0954000-00007ffa4d8effff 0x0001/0x0000 0x0000000 64f8.1380: *00007ffa4d8f0000-00007ffa4d8f0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll 64f8.1380: 00007ffa4d8f1000-00007ffa4da23fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll 64f8.1380: 00007ffa4da24000-00007ffa4da72fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll 64f8.1380: 00007ffa4da73000-00007ffa4da7bfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll 64f8.1380: 00007ffa4da7c000-00007ffa4da8afff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll 64f8.1380: 00007ffa4da8b000-00007ffa4da8dfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll 64f8.1380: 00007ffa4da8e000-00007ffa4da8efff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll 64f8.1380: 00007ffa4da8f000-00007ffa4db07fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll 64f8.1380: 00007ffa4db08000-00007ffa4db09fff 0x0000/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll 64f8.1380: 00007ffa4db0a000-00007ffffffeffff 0x0001/0x0000 0x0000000 64f8.1380: VBoxHeadless.exe: Differences in section #8 (.rsrc) between file and memory: 64f8.1380: 00007ff7d09525f8 / 0x01125f8: 00 != 50 64f8.1380: 00007ff7d09525f9 / 0x01125f9: 00 != 41 64f8.1380: 00007ff7d09525fa / 0x01125fa: 00 != 44 64f8.1380: 00007ff7d09525fb / 0x01125fb: 00 != 44 64f8.1380: 00007ff7d09525fc / 0x01125fc: 00 != 49 64f8.1380: 00007ff7d09525fd / 0x01125fd: 00 != 4e 64f8.1380: 00007ff7d09525fe / 0x01125fe: 00 != 47 64f8.1380: 00007ff7d09525ff / 0x01125ff: 00 != 58 64f8.1380: Restored 0xa08 bytes of original file content at 00007ff7d09525f8 64f8.1380: Error (rc=-5607): 64f8.1380: ntdll.dll: SizeOfImage (0x218000) isn't close enough to the mapping size (0x21a000) 64f8.1380: Error (rc=-5607): 64f8.1380: supHardenedWinVerifyProcess failed with -5607: ntdll.dll: SizeOfImage (0x218000) isn't close enough to the mapping size (0x21a000) 64f8.1380: Error -5607 in supR3HardNtChildPurify! (enmWhat=5) 64f8.1380: supHardenedWinVerifyProcess failed with -5607: ntdll.dll: SizeOfImage (0x218000) isn't close enough to the mapping size (0x21a000)
