VirtualBox

Ticket #15478: vboxservice.log

File vboxservice.log, 326.1 KB (added by alanbirtles, 6 years ago)
Line 
109:31:03.177572 vminfo Session LogonType=2 is supported -- looking up SID + type ...
209:31:03.192259 vminfo Account User=user, Session=1, LogonID=0,1970648, AuthPkg=Negotiate, Domain=DOMAIN
309:31:03.192259 vminfo Account User=user, WTSConnectState=0 (4)
409:31:03.192259 vminfo Account User=user using TCS/RDP, state=0
509:31:03.192259 vminfo Account User=user is logged in
609:31:03.192259 vminfo Handling user=user, domain=DOMAIN, package=Negotiate, session=1
709:31:03.192259 vminfo Session 1: PID=6784 (fInt=true ): C:\Windows\System32\svchost.exe
809:31:03.192259 vminfo Session 1: PID=264 (fInt=true ): C:\Windows\System32\sihost.exe
909:31:03.192259 vminfo Session 1: PID=3148 (fInt=true ): C:\Windows\System32\svchost.exe
1009:31:03.192259 vminfo Session 1: PID=7176 (fInt=true ): C:\Windows\System32\taskhostw.exe
1109:31:03.192259 vminfo Session 1: PID=7268 (fInt=true ): C:\Windows\System32\ctfmon.exe
1209:31:03.192259 vminfo Session 1: PID=8732 (fInt=true ): C:\Windows\explorer.exe
1309:31:03.192259 vminfo Session 1: PID=9016 (fInt=true ): C:\Program Files (x86)\NoMachine\bin\nxclient.bin
1409:31:03.192259 vminfo Session 1: PID=8260 (fInt=true ): C:\Program Files\McAfee\Agent\x86\UpdaterUI.exe
1509:31:03.192259 vminfo Session 1: PID=8828 (fInt=true ): C:\Program Files\Classic Shell\ClassicStartMenu.exe
1609:31:03.192259 vminfo Session 1: PID=8488 (fInt=true ): C:\Program Files\McAfee\Agent\x86\mctray.exe
1709:31:03.192259 vminfo Session 1: PID=9172 (fInt=true ): C:\Program Files\TortoiseSVN\bin\TSVNCache.exe
1809:31:03.192259 vminfo Session 1: PID=9280 (fInt=true ): C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe
1909:31:03.192259 vminfo Session 1: PID=9652 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
2009:31:03.192259 vminfo Session 1: PID=9728 (fInt=true ): C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe
2109:31:03.192259 vminfo Session 1: PID=9880 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
2209:31:03.192259 vminfo Session 1: PID=9944 (fInt=true ): C:\Windows\System32\dllhost.exe
2309:31:03.192259 vminfo Session 1: PID=8128 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17112.19011.0_x64__8wekyb3d8bbwe\Video.UI.exe
2409:31:03.192259 vminfo Session 1: PID=9528 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
2509:31:03.192259 vminfo Session 1: PID=10292 (fInt=true ): C:\Program Files\Windows Defender\MSASCuiL.exe
2609:31:03.192259 vminfo Session 1: PID=10324 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
2709:31:03.192259 vminfo Session 1: PID=10440 (fInt=true ): C:\Windows\System32\VBoxTray.exe
2809:31:03.192259 vminfo Session 1: PID=10596 (fInt=true ): C:\Users\user\Documents\Visual Studio 2017\Projects\vboxtray_mon\vboxtray_mon\bin\Release\vboxtray_mon.exe
2909:31:03.192259 vminfo Session 1: PID=10612 (fInt=true ): C:\Windows\System32\conhost.exe
3009:31:03.192259 vminfo Session 1: PID=10720 (fInt=true ): C:\Program Files (x86)\FileZilla Server\FileZilla Server Interface.exe
3109:31:03.192259 vminfo Session 1: PID=9808 (fInt=true ): C:\Windows\System32\svchost.exe
3209:31:03.192259 vminfo Session 1: PID=6716 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18011.15918.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
3309:31:03.192259 vminfo Session 1: PID=6688 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
3409:31:03.192259 vminfo Session 1: PID=10200 (fInt=true ): C:\Windows\System32\ApplicationFrameHost.exe
3509:31:03.192259 vminfo Session 1: PID=4868 (fInt=true ): C:\Windows\ImmersiveControlPanel\SystemSettings.exe
3609:31:03.192259 vminfo Session 1: PID=1444 (fInt=true ): C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe
3709:31:03.192259 vminfo Session 1: PID=9504 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
3809:31:03.192259 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/Session/1' = '#12145: cSessionProcs=31 (of 155 procs total)'
3909:31:03.192259 vminfo Adding new user=user (session=1) with 31 processes
4009:31:03.192259 vminfo Handling session 6 (of 17)
4109:31:03.192259 vminfo Session data: Name=user, SessionID=1, LogonID=0,1970599, LogonType=2
4209:31:03.192259 vminfo Session LogonType=2 is supported -- looking up SID + type ...
4309:31:03.192259 vminfo Account User=user, Session=1, LogonID=0,1970599, AuthPkg=Kerberos, Domain=DOMAIN
4409:31:03.192259 vminfo Account User=user, WTSConnectState=0 (4)
4509:31:03.192259 vminfo Account User=user using TCS/RDP, state=0
4609:31:03.192259 vminfo Account User=user is logged in
4709:31:03.192259 vminfo Handling user=user, domain=DOMAIN, package=Kerberos, session=1
4809:31:03.192259 vminfo Session 1: PID=6784 (fInt=true ): C:\Windows\System32\svchost.exe
4909:31:03.192259 vminfo Session 1: PID=264 (fInt=true ): C:\Windows\System32\sihost.exe
5009:31:03.192259 vminfo Session 1: PID=3148 (fInt=true ): C:\Windows\System32\svchost.exe
5109:31:03.192259 vminfo Session 1: PID=7176 (fInt=true ): C:\Windows\System32\taskhostw.exe
5209:31:03.192259 vminfo Session 1: PID=7268 (fInt=true ): C:\Windows\System32\ctfmon.exe
5309:31:03.192259 vminfo Session 1: PID=8732 (fInt=true ): C:\Windows\explorer.exe
5409:31:03.192259 vminfo Session 1: PID=9016 (fInt=true ): C:\Program Files (x86)\NoMachine\bin\nxclient.bin
5509:31:03.192259 vminfo Session 1: PID=8260 (fInt=true ): C:\Program Files\McAfee\Agent\x86\UpdaterUI.exe
5609:31:03.192259 vminfo Session 1: PID=8828 (fInt=true ): C:\Program Files\Classic Shell\ClassicStartMenu.exe
5709:31:03.192259 vminfo Session 1: PID=8488 (fInt=true ): C:\Program Files\McAfee\Agent\x86\mctray.exe
5809:31:03.192259 vminfo Session 1: PID=9172 (fInt=true ): C:\Program Files\TortoiseSVN\bin\TSVNCache.exe
5909:31:03.192259 vminfo Session 1: PID=9280 (fInt=true ): C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe
6009:31:03.192259 vminfo Session 1: PID=9652 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
6109:31:03.192259 vminfo Session 1: PID=9728 (fInt=true ): C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe
6209:31:03.192259 vminfo Session 1: PID=9880 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
6309:31:03.192259 vminfo Session 1: PID=9944 (fInt=true ): C:\Windows\System32\dllhost.exe
6409:31:03.192259 vminfo Session 1: PID=8128 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17112.19011.0_x64__8wekyb3d8bbwe\Video.UI.exe
6509:31:03.192259 vminfo Session 1: PID=9528 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
6609:31:03.192259 vminfo Session 1: PID=10292 (fInt=true ): C:\Program Files\Windows Defender\MSASCuiL.exe
6709:31:03.192259 vminfo Session 1: PID=10324 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
6809:31:03.192259 vminfo Session 1: PID=10440 (fInt=true ): C:\Windows\System32\VBoxTray.exe
6909:31:03.192259 vminfo Session 1: PID=10596 (fInt=true ): C:\Users\user\Documents\Visual Studio 2017\Projects\vboxtray_mon\vboxtray_mon\bin\Release\vboxtray_mon.exe
7009:31:03.207958 vminfo Session 1: PID=10612 (fInt=true ): C:\Windows\System32\conhost.exe
7109:31:03.207958 vminfo Session 1: PID=10720 (fInt=true ): C:\Program Files (x86)\FileZilla Server\FileZilla Server Interface.exe
7209:31:03.207958 vminfo Session 1: PID=9808 (fInt=true ): C:\Windows\System32\svchost.exe
7309:31:03.207958 vminfo Session 1: PID=6716 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18011.15918.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
7409:31:03.207958 vminfo Session 1: PID=6688 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
7509:31:03.207958 vminfo Session 1: PID=10200 (fInt=true ): C:\Windows\System32\ApplicationFrameHost.exe
7609:31:03.207958 vminfo Session 1: PID=4868 (fInt=true ): C:\Windows\ImmersiveControlPanel\SystemSettings.exe
7709:31:03.207958 vminfo Session 1: PID=1444 (fInt=true ): C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe
7809:31:03.207958 vminfo Session 1: PID=9504 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
7909:31:03.207958 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/Session/1' = '#12145: cSessionProcs=31 (of 155 procs total)'
8009:31:03.207958 vminfo Adding new user=user (session=1) with 31 processes
8109:31:03.207958 vminfo Handling session 7 (of 17)
8209:31:03.207958 vminfo Session data: Name=nx, SessionID=0, LogonID=0,685607, LogonType=3
8309:31:03.207958 vminfo Handling session 8 (of 17)
8409:31:03.207958 vminfo Session data: Name=ANONYMOUS LOGON, SessionID=0, LogonID=0,649881, LogonType=3
8509:31:03.207958 vminfo Handling session 9 (of 17)
8609:31:03.207958 vminfo Session data: Name=IUSR, SessionID=0, LogonID=0,995, LogonType=5
8709:31:03.207958 vminfo Handling session 10 (of 17)
8809:31:03.207958 vminfo Session data: Name=DWM-1, SessionID=1, LogonID=0,61006, LogonType=2
8909:31:03.207958 vminfo Session LogonType=2 is supported -- looking up SID + type ...
9009:31:03.207958 vminfo SID owner type=5 not handled, skipping
9109:31:03.207958 vminfo Account User=DWM-1 is not logged in
9209:31:03.207958 vminfo Handling session 11 (of 17)
9309:31:03.207958 vminfo Session data: Name=DWM-1, SessionID=1, LogonID=0,60973, LogonType=2
9409:31:03.207958 vminfo Session LogonType=2 is supported -- looking up SID + type ...
9509:31:03.207958 vminfo SID owner type=5 not handled, skipping
9609:31:03.207958 vminfo Account User=DWM-1 is not logged in
9709:31:03.207958 vminfo Handling session 12 (of 17)
9809:31:03.207958 vminfo Session data: Name=MACHINE$, SessionID=0, LogonID=0,996, LogonType=5
9909:31:03.207958 vminfo Handling session 13 (of 17)
10009:31:03.207958 vminfo Session data: Name=LOCAL SERVICE, SessionID=0, LogonID=0,997, LogonType=5
10109:31:03.207958 vminfo Handling session 14 (of 17)
10209:31:03.207958 vminfo Session data: Name=UMFD-1, SessionID=1, LogonID=0,34521, LogonType=2
10309:31:03.207958 vminfo Session LogonType=2 is supported -- looking up SID + type ...
10409:31:03.207958 vminfo SID owner type=5 not handled, skipping
10509:31:03.207958 vminfo Account User=UMFD-1 is not logged in
10609:31:03.207958 vminfo Handling session 15 (of 17)
10709:31:03.207958 vminfo Session data: Name=UMFD-0, SessionID=0, LogonID=0,34482, LogonType=2
10809:31:03.207958 vminfo Handling session 16 (of 17)
10909:31:03.207958 vminfo Session data: Name=, SessionID=0, LogonID=0,32336, LogonType=0
11009:31:03.207958 vminfo Handling session 17 (of 17)
11109:31:03.207958 vminfo Session data: Name=MACHINE$, SessionID=0, LogonID=0,999, LogonType=0
11209:31:03.207958 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA' = '#12145: cSessions=17, cProcs=155, cUniqueUsers=2'
11309:31:03.207958 vminfo Found 2 unique logged-in user(s)
11409:31:03.207958 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/User/0' = '#12145: szName=user, sessionID=1, cProcs=31'
11509:31:03.207958 vminfo User 'user' has 31 interactive processes (session=1)
11609:31:03.207958 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/User/user@DOMAIN/UsageState' resulted in rc=VINF_NO_CHANGE
11709:31:03.207958 vminfo User 'user' (domain 'DOMAIN') is idle for 60437, fReportToHost=false
11809:31:03.207958 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/User/1' = '#12145: szName=user, sessionID=1, cProcs=31'
11909:31:03.207958 vminfo User 'user' has 31 interactive processes (session=1)
12009:31:03.207958 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/User/user@DOMAIN/UsageState' resulted in rc=VINF_NO_CHANGE
12109:31:03.207958 vminfo User 'user' (domain 'DOMAIN') is idle for 60437, fReportToHost=false
12209:31:03.207958 vminfo cUsersInList=2, pszUserList=user,user, rc=VINF_NO_CHANGE
12309:31:03.207958 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/LoggedInUsersList' resulted in rc=VINF_NO_CHANGE
12409:31:03.207958 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/LoggedInUsers' resulted in rc=VINF_NO_CHANGE
12509:31:03.207958 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/NoLoggedInUsers' resulted in rc=VINF_NO_CHANGE
12609:31:03.207958 vminfo Writing users returned with rc=VINF_NO_CHANGE
12709:31:03.207958 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/IP' resulted in rc=VINF_NO_CHANGE
12809:31:03.207958 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/Broadcast' resulted in rc=VINF_NO_CHANGE
12909:31:03.207958 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/Netmask' resulted in rc=VINF_NO_CHANGE
13009:31:03.207958 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/Status' resulted in rc=VINF_NO_CHANGE
13109:31:03.207958 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/MAC' resulted in rc=VINF_NO_CHANGE
13209:31:03.207958 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/IP' resulted in rc=VINF_NO_CHANGE
13309:31:03.207958 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/Broadcast' resulted in rc=VINF_NO_CHANGE
13409:31:03.207958 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/Netmask' resulted in rc=VINF_NO_CHANGE
13509:31:03.207958 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/Status' resulted in rc=VINF_NO_CHANGE
13609:31:03.207958 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/MAC' resulted in rc=VINF_NO_CHANGE
13709:31:03.207958 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/IP' resulted in rc=VINF_NO_CHANGE
13809:31:03.207958 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/Broadcast' resulted in rc=VINF_NO_CHANGE
13909:31:03.207958 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/Netmask' resulted in rc=VINF_NO_CHANGE
14009:31:03.207958 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/Status' resulted in rc=VINF_NO_CHANGE
14109:31:03.207958 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/MAC' resulted in rc=VINF_NO_CHANGE
14209:31:03.223557 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/IP' resulted in rc=VINF_NO_CHANGE
14309:31:03.223557 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/Broadcast' resulted in rc=VINF_NO_CHANGE
14409:31:03.223557 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/Netmask' resulted in rc=VINF_NO_CHANGE
14509:31:03.223557 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/Status' resulted in rc=VINF_NO_CHANGE
14609:31:03.223557 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/MAC' resulted in rc=VINF_NO_CHANGE
14709:31:03.223557 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/IP' resulted in rc=VINF_NO_CHANGE
14809:31:03.223557 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/Broadcast' resulted in rc=VINF_NO_CHANGE
14909:31:03.223557 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/Netmask' resulted in rc=VINF_NO_CHANGE
15009:31:03.223557 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/Status' resulted in rc=VINF_NO_CHANGE
15109:31:03.223557 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/MAC' resulted in rc=VINF_NO_CHANGE
15209:31:03.223557 vminfo [PropCache 00007ff6b2962520]: Written '/VirtualBox/GuestInfo/Net/Count'='5' (flags: 6), rc=VINF_SUCCESS
15309:31:03.223557 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/Count' resulted in rc=VINF_SUCCESS
15409:31:03.223557 vminfo Guest Property: /VirtualBox/HostInfo/VRDP/ActiveClient not found
15509:31:03.223557 vminfo VRDP: Handling location awareness done
15609:31:06.093564 timesync vgsvcTimeSyncWorker: Host: 2019-02-26T09:31:05.969000000Z (MinAdjust: 200 ms), Guest: 2019-02-26T09:31:06.093564300Z => -124 564 300 ns drift
15709:31:08.225177 vminfo Found 17 sessions
15809:31:08.225177 vminfo Error: Get token class 'user' for process 0 failed, rc=VERR_INVALID_PARAMETER
15909:31:08.225177 vminfo Error: Get token class 'groups' for process 0 failed, rc=VERR_INVALID_PARAMETER
16009:31:08.225177 vminfo Error: Get token class 'statistics' for process 0 failed, rc=VERR_INVALID_PARAMETER
16109:31:08.225177 vminfo Error: Get token class 'user' for process 4 failed, rc=VERR_ACCESS_DENIED
16209:31:08.225177 vminfo Error: Get token class 'groups' for process 4 failed, rc=VERR_ACCESS_DENIED
16309:31:08.225177 vminfo Error: Get token class 'statistics' for process 4 failed, rc=VERR_ACCESS_DENIED
16409:31:08.225177 vminfo Error: Get token class 'user' for process 104 failed, rc=VERR_ACCESS_DENIED
16509:31:08.225177 vminfo Error: Get token class 'groups' for process 104 failed, rc=VERR_ACCESS_DENIED
16609:31:08.225177 vminfo Error: Get token class 'statistics' for process 104 failed, rc=VERR_ACCESS_DENIED
16709:31:08.225177 vminfo Error: Get token class 'user' for process 472 failed, rc=VERR_ACCESS_DENIED
16809:31:08.225177 vminfo Error: Get token class 'groups' for process 472 failed, rc=VERR_ACCESS_DENIED
16909:31:08.225177 vminfo Error: Get token class 'statistics' for process 472 failed, rc=VERR_ACCESS_DENIED
17009:31:08.225177 vminfo Error: Get token class 'user' for process 676 failed, rc=VERR_ACCESS_DENIED
17109:31:08.225177 vminfo Error: Get token class 'groups' for process 676 failed, rc=VERR_ACCESS_DENIED
17209:31:08.225177 vminfo Error: Get token class 'statistics' for process 676 failed, rc=VERR_ACCESS_DENIED
17309:31:08.225177 vminfo Error: Get token class 'user' for process 756 failed, rc=VERR_ACCESS_DENIED
17409:31:08.225177 vminfo Error: Get token class 'groups' for process 756 failed, rc=VERR_ACCESS_DENIED
17509:31:08.225177 vminfo Error: Get token class 'statistics' for process 756 failed, rc=VERR_ACCESS_DENIED
17609:31:08.225177 vminfo Error: Get token class 'user' for process 768 failed, rc=VERR_ACCESS_DENIED
17709:31:08.225177 vminfo Error: Get token class 'groups' for process 768 failed, rc=VERR_ACCESS_DENIED
17809:31:08.225177 vminfo Error: Get token class 'statistics' for process 768 failed, rc=VERR_ACCESS_DENIED
17909:31:08.225177 vminfo Error: Get token class 'user' for process 876 failed, rc=VERR_ACCESS_DENIED
18009:31:08.225177 vminfo Error: Get token class 'groups' for process 876 failed, rc=VERR_ACCESS_DENIED
18109:31:08.225177 vminfo Error: Get token class 'statistics' for process 876 failed, rc=VERR_ACCESS_DENIED
18209:31:08.225177 vminfo Error: Get token class 'user' for process 2532 failed, rc=VERR_ACCESS_DENIED
18309:31:08.225177 vminfo Error: Get token class 'groups' for process 2532 failed, rc=VERR_ACCESS_DENIED
18409:31:08.225177 vminfo Error: Get token class 'statistics' for process 2532 failed, rc=VERR_ACCESS_DENIED
18509:31:08.225177 vminfo Error: Get token class 'user' for process 4136 failed, rc=VERR_ACCESS_DENIED
18609:31:08.225177 vminfo Error: Get token class 'groups' for process 4136 failed, rc=VERR_ACCESS_DENIED
18709:31:08.225177 vminfo Error: Get token class 'statistics' for process 4136 failed, rc=VERR_ACCESS_DENIED
18809:31:08.225177 vminfo Error: Get token class 'user' for process 5212 failed, rc=VERR_ACCESS_DENIED
18909:31:08.225177 vminfo Error: Get token class 'groups' for process 5212 failed, rc=VERR_ACCESS_DENIED
19009:31:08.225177 vminfo Error: Get token class 'statistics' for process 5212 failed, rc=VERR_ACCESS_DENIED
19109:31:08.225177 vminfo Handling session 1 (of 17)
19209:31:08.225177 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2145999, LogonType=3
19309:31:08.225177 vminfo Handling session 2 (of 17)
19409:31:08.225177 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2113823, LogonType=3
19509:31:08.225177 vminfo Handling session 3 (of 17)
19609:31:08.225177 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2041868, LogonType=3
19709:31:08.225177 vminfo Handling session 4 (of 17)
19809:31:08.239755 vminfo Session data: Name=nx, SessionID=0, LogonID=0,1997776, LogonType=3
19909:31:08.239755 vminfo Handling session 5 (of 17)
20009:31:08.239755 vminfo Session data: Name=user, SessionID=1, LogonID=0,1970648, LogonType=2
20109:31:08.239755 vminfo Session LogonType=2 is supported -- looking up SID + type ...
20209:31:08.239755 vminfo Account User=user, Session=1, LogonID=0,1970648, AuthPkg=Negotiate, Domain=DOMAIN
20309:31:08.239755 vminfo Account User=user, WTSConnectState=0 (4)
20409:31:08.239755 vminfo Account User=user using TCS/RDP, state=0
20509:31:08.239755 vminfo Account User=user is logged in
20609:31:08.239755 vminfo Handling user=user, domain=DOMAIN, package=Negotiate, session=1
20709:31:08.239755 vminfo Session 1: PID=6784 (fInt=true ): C:\Windows\System32\svchost.exe
20809:31:08.239755 vminfo Session 1: PID=264 (fInt=true ): C:\Windows\System32\sihost.exe
20909:31:08.239755 vminfo Session 1: PID=3148 (fInt=true ): C:\Windows\System32\svchost.exe
21009:31:08.239755 vminfo Session 1: PID=7176 (fInt=true ): C:\Windows\System32\taskhostw.exe
21109:31:08.239755 vminfo Session 1: PID=7268 (fInt=true ): C:\Windows\System32\ctfmon.exe
21209:31:08.239755 vminfo Session 1: PID=8732 (fInt=true ): C:\Windows\explorer.exe
21309:31:08.239755 vminfo Session 1: PID=9016 (fInt=true ): C:\Program Files (x86)\NoMachine\bin\nxclient.bin
21409:31:08.239755 vminfo Session 1: PID=8260 (fInt=true ): C:\Program Files\McAfee\Agent\x86\UpdaterUI.exe
21509:31:08.239755 vminfo Session 1: PID=8828 (fInt=true ): C:\Program Files\Classic Shell\ClassicStartMenu.exe
21609:31:08.239755 vminfo Session 1: PID=8488 (fInt=true ): C:\Program Files\McAfee\Agent\x86\mctray.exe
21709:31:08.239755 vminfo Session 1: PID=9172 (fInt=true ): C:\Program Files\TortoiseSVN\bin\TSVNCache.exe
21809:31:08.239755 vminfo Session 1: PID=9280 (fInt=true ): C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe
21909:31:08.239755 vminfo Session 1: PID=9652 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
22009:31:08.239755 vminfo Session 1: PID=9728 (fInt=true ): C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe
22109:31:08.239755 vminfo Session 1: PID=9880 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
22209:31:08.239755 vminfo Session 1: PID=9944 (fInt=true ): C:\Windows\System32\dllhost.exe
22309:31:08.239755 vminfo Session 1: PID=8128 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17112.19011.0_x64__8wekyb3d8bbwe\Video.UI.exe
22409:31:08.239755 vminfo Session 1: PID=9528 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
22509:31:08.239755 vminfo Session 1: PID=10292 (fInt=true ): C:\Program Files\Windows Defender\MSASCuiL.exe
22609:31:08.239755 vminfo Session 1: PID=10324 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
22709:31:08.239755 vminfo Session 1: PID=10440 (fInt=true ): C:\Windows\System32\VBoxTray.exe
22809:31:08.239755 vminfo Session 1: PID=10596 (fInt=true ): C:\Users\user\Documents\Visual Studio 2017\Projects\vboxtray_mon\vboxtray_mon\bin\Release\vboxtray_mon.exe
22909:31:08.239755 vminfo Session 1: PID=10612 (fInt=true ): C:\Windows\System32\conhost.exe
23009:31:08.239755 vminfo Session 1: PID=10720 (fInt=true ): C:\Program Files (x86)\FileZilla Server\FileZilla Server Interface.exe
23109:31:08.239755 vminfo Session 1: PID=9808 (fInt=true ): C:\Windows\System32\svchost.exe
23209:31:08.239755 vminfo Session 1: PID=6716 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18011.15918.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
23309:31:08.239755 vminfo Session 1: PID=6688 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
23409:31:08.239755 vminfo Session 1: PID=10200 (fInt=true ): C:\Windows\System32\ApplicationFrameHost.exe
23509:31:08.239755 vminfo Session 1: PID=4868 (fInt=true ): C:\Windows\ImmersiveControlPanel\SystemSettings.exe
23609:31:08.239755 vminfo Session 1: PID=1444 (fInt=true ): C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe
23709:31:08.239755 vminfo Session 1: PID=9504 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
23809:31:08.239755 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/Session/1' = '#12146: cSessionProcs=31 (of 155 procs total)'
23909:31:08.239755 vminfo Adding new user=user (session=1) with 31 processes
24009:31:08.239755 vminfo Handling session 6 (of 17)
24109:31:08.239755 vminfo Session data: Name=user, SessionID=1, LogonID=0,1970599, LogonType=2
24209:31:08.239755 vminfo Session LogonType=2 is supported -- looking up SID + type ...
24309:31:08.239755 vminfo Account User=user, Session=1, LogonID=0,1970599, AuthPkg=Kerberos, Domain=DOMAIN
24409:31:08.239755 vminfo Account User=user, WTSConnectState=0 (4)
24509:31:08.239755 vminfo Account User=user using TCS/RDP, state=0
24609:31:08.239755 vminfo Account User=user is logged in
24709:31:08.239755 vminfo Handling user=user, domain=DOMAIN, package=Kerberos, session=1
24809:31:08.239755 vminfo Session 1: PID=6784 (fInt=true ): C:\Windows\System32\svchost.exe
24909:31:08.239755 vminfo Session 1: PID=264 (fInt=true ): C:\Windows\System32\sihost.exe
25009:31:08.239755 vminfo Session 1: PID=3148 (fInt=true ): C:\Windows\System32\svchost.exe
25109:31:08.239755 vminfo Session 1: PID=7176 (fInt=true ): C:\Windows\System32\taskhostw.exe
25209:31:08.239755 vminfo Session 1: PID=7268 (fInt=true ): C:\Windows\System32\ctfmon.exe
25309:31:08.239755 vminfo Session 1: PID=8732 (fInt=true ): C:\Windows\explorer.exe
25409:31:08.239755 vminfo Session 1: PID=9016 (fInt=true ): C:\Program Files (x86)\NoMachine\bin\nxclient.bin
25509:31:08.239755 vminfo Session 1: PID=8260 (fInt=true ): C:\Program Files\McAfee\Agent\x86\UpdaterUI.exe
25609:31:08.239755 vminfo Session 1: PID=8828 (fInt=true ): C:\Program Files\Classic Shell\ClassicStartMenu.exe
25709:31:08.239755 vminfo Session 1: PID=8488 (fInt=true ): C:\Program Files\McAfee\Agent\x86\mctray.exe
25809:31:08.239755 vminfo Session 1: PID=9172 (fInt=true ): C:\Program Files\TortoiseSVN\bin\TSVNCache.exe
25909:31:08.239755 vminfo Session 1: PID=9280 (fInt=true ): C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe
26009:31:08.239755 vminfo Session 1: PID=9652 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
26109:31:08.239755 vminfo Session 1: PID=9728 (fInt=true ): C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe
26209:31:08.239755 vminfo Session 1: PID=9880 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
26309:31:08.255532 vminfo Session 1: PID=9944 (fInt=true ): C:\Windows\System32\dllhost.exe
26409:31:08.255532 vminfo Session 1: PID=8128 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17112.19011.0_x64__8wekyb3d8bbwe\Video.UI.exe
26509:31:08.255532 vminfo Session 1: PID=9528 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
26609:31:08.255532 vminfo Session 1: PID=10292 (fInt=true ): C:\Program Files\Windows Defender\MSASCuiL.exe
26709:31:08.255532 vminfo Session 1: PID=10324 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
26809:31:08.255532 vminfo Session 1: PID=10440 (fInt=true ): C:\Windows\System32\VBoxTray.exe
26909:31:08.255532 vminfo Session 1: PID=10596 (fInt=true ): C:\Users\user\Documents\Visual Studio 2017\Projects\vboxtray_mon\vboxtray_mon\bin\Release\vboxtray_mon.exe
27009:31:08.255532 vminfo Session 1: PID=10612 (fInt=true ): C:\Windows\System32\conhost.exe
27109:31:08.255532 vminfo Session 1: PID=10720 (fInt=true ): C:\Program Files (x86)\FileZilla Server\FileZilla Server Interface.exe
27209:31:08.255532 vminfo Session 1: PID=9808 (fInt=true ): C:\Windows\System32\svchost.exe
27309:31:08.255532 vminfo Session 1: PID=6716 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18011.15918.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
27409:31:08.255532 vminfo Session 1: PID=6688 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
27509:31:08.255532 vminfo Session 1: PID=10200 (fInt=true ): C:\Windows\System32\ApplicationFrameHost.exe
27609:31:08.255532 vminfo Session 1: PID=4868 (fInt=true ): C:\Windows\ImmersiveControlPanel\SystemSettings.exe
27709:31:08.255532 vminfo Session 1: PID=1444 (fInt=true ): C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe
27809:31:08.255532 vminfo Session 1: PID=9504 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
27909:31:08.255532 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/Session/1' = '#12146: cSessionProcs=31 (of 155 procs total)'
28009:31:08.255532 vminfo Adding new user=user (session=1) with 31 processes
28109:31:08.255532 vminfo Handling session 7 (of 17)
28209:31:08.255532 vminfo Session data: Name=nx, SessionID=0, LogonID=0,685607, LogonType=3
28309:31:08.255532 vminfo Handling session 8 (of 17)
28409:31:08.255532 vminfo Session data: Name=ANONYMOUS LOGON, SessionID=0, LogonID=0,649881, LogonType=3
28509:31:08.255532 vminfo Handling session 9 (of 17)
28609:31:08.255532 vminfo Session data: Name=IUSR, SessionID=0, LogonID=0,995, LogonType=5
28709:31:08.255532 vminfo Handling session 10 (of 17)
28809:31:08.255532 vminfo Session data: Name=DWM-1, SessionID=1, LogonID=0,61006, LogonType=2
28909:31:08.255532 vminfo Session LogonType=2 is supported -- looking up SID + type ...
29009:31:08.255532 vminfo SID owner type=5 not handled, skipping
29109:31:08.255532 vminfo Account User=DWM-1 is not logged in
29209:31:08.255532 vminfo Handling session 11 (of 17)
29309:31:08.255532 vminfo Session data: Name=DWM-1, SessionID=1, LogonID=0,60973, LogonType=2
29409:31:08.255532 vminfo Session LogonType=2 is supported -- looking up SID + type ...
29509:31:08.255532 vminfo SID owner type=5 not handled, skipping
29609:31:08.255532 vminfo Account User=DWM-1 is not logged in
29709:31:08.255532 vminfo Handling session 12 (of 17)
29809:31:08.255532 vminfo Session data: Name=MACHINE$, SessionID=0, LogonID=0,996, LogonType=5
29909:31:08.255532 vminfo Handling session 13 (of 17)
30009:31:08.255532 vminfo Session data: Name=LOCAL SERVICE, SessionID=0, LogonID=0,997, LogonType=5
30109:31:08.255532 vminfo Handling session 14 (of 17)
30209:31:08.255532 vminfo Session data: Name=UMFD-1, SessionID=1, LogonID=0,34521, LogonType=2
30309:31:08.255532 vminfo Session LogonType=2 is supported -- looking up SID + type ...
30409:31:08.255532 vminfo SID owner type=5 not handled, skipping
30509:31:08.255532 vminfo Account User=UMFD-1 is not logged in
30609:31:08.255532 vminfo Handling session 15 (of 17)
30709:31:08.255532 vminfo Session data: Name=UMFD-0, SessionID=0, LogonID=0,34482, LogonType=2
30809:31:08.255532 vminfo Handling session 16 (of 17)
30909:31:08.255532 vminfo Session data: Name=, SessionID=0, LogonID=0,32336, LogonType=0
31009:31:08.255532 vminfo Handling session 17 (of 17)
31109:31:08.255532 vminfo Session data: Name=MACHINE$, SessionID=0, LogonID=0,999, LogonType=0
31209:31:08.255532 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA' = '#12146: cSessions=17, cProcs=155, cUniqueUsers=2'
31309:31:08.255532 vminfo Found 2 unique logged-in user(s)
31409:31:08.255532 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/User/0' = '#12146: szName=user, sessionID=1, cProcs=31'
31509:31:08.255532 vminfo User 'user' has 31 interactive processes (session=1)
31609:31:08.255532 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/User/user@DOMAIN/UsageState' resulted in rc=VINF_NO_CHANGE
31709:31:08.255532 vminfo User 'user' (domain 'DOMAIN') is idle for 60443, fReportToHost=false
31809:31:08.255532 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/User/1' = '#12146: szName=user, sessionID=1, cProcs=31'
31909:31:08.255532 vminfo User 'user' has 31 interactive processes (session=1)
32009:31:08.255532 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/User/user@DOMAIN/UsageState' resulted in rc=VINF_NO_CHANGE
32109:31:08.255532 vminfo User 'user' (domain 'DOMAIN') is idle for 60443, fReportToHost=false
32209:31:08.255532 vminfo cUsersInList=2, pszUserList=user,user, rc=VINF_NO_CHANGE
32309:31:08.255532 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/LoggedInUsersList' resulted in rc=VINF_NO_CHANGE
32409:31:08.255532 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/LoggedInUsers' resulted in rc=VINF_NO_CHANGE
32509:31:08.255532 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/NoLoggedInUsers' resulted in rc=VINF_NO_CHANGE
32609:31:08.255532 vminfo Writing users returned with rc=VINF_NO_CHANGE
32709:31:08.271481 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/IP' resulted in rc=VINF_NO_CHANGE
32809:31:08.271481 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/Broadcast' resulted in rc=VINF_NO_CHANGE
32909:31:08.271481 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/Netmask' resulted in rc=VINF_NO_CHANGE
33009:31:08.271481 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/Status' resulted in rc=VINF_NO_CHANGE
33109:31:08.271481 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/MAC' resulted in rc=VINF_NO_CHANGE
33209:31:08.271481 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/IP' resulted in rc=VINF_NO_CHANGE
33309:31:08.271481 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/Broadcast' resulted in rc=VINF_NO_CHANGE
33409:31:08.271481 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/Netmask' resulted in rc=VINF_NO_CHANGE
33509:31:08.271481 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/Status' resulted in rc=VINF_NO_CHANGE
33609:31:08.271481 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/MAC' resulted in rc=VINF_NO_CHANGE
33709:31:08.271481 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/IP' resulted in rc=VINF_NO_CHANGE
33809:31:08.271481 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/Broadcast' resulted in rc=VINF_NO_CHANGE
33909:31:08.271481 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/Netmask' resulted in rc=VINF_NO_CHANGE
34009:31:08.271481 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/Status' resulted in rc=VINF_NO_CHANGE
34109:31:08.271481 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/MAC' resulted in rc=VINF_NO_CHANGE
34209:31:08.271481 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/IP' resulted in rc=VINF_NO_CHANGE
34309:31:08.271481 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/Broadcast' resulted in rc=VINF_NO_CHANGE
34409:31:08.271481 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/Netmask' resulted in rc=VINF_NO_CHANGE
34509:31:08.271481 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/Status' resulted in rc=VINF_NO_CHANGE
34609:31:08.271481 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/MAC' resulted in rc=VINF_NO_CHANGE
34709:31:08.271481 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/IP' resulted in rc=VINF_NO_CHANGE
34809:31:08.271481 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/Broadcast' resulted in rc=VINF_NO_CHANGE
34909:31:08.271481 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/Netmask' resulted in rc=VINF_NO_CHANGE
35009:31:08.271481 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/Status' resulted in rc=VINF_NO_CHANGE
35109:31:08.271481 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/MAC' resulted in rc=VINF_NO_CHANGE
35209:31:08.271481 vminfo [PropCache 00007ff6b2962520]: Written '/VirtualBox/GuestInfo/Net/Count'='5' (flags: 6), rc=VINF_SUCCESS
35309:31:08.271481 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/Count' resulted in rc=VINF_SUCCESS
35409:31:08.271481 vminfo Guest Property: /VirtualBox/HostInfo/VRDP/ActiveClient not found
35509:31:08.271481 vminfo VRDP: Handling location awareness done
35609:31:13.290059 vminfo Found 17 sessions
35709:31:13.290059 vminfo Error: Get token class 'user' for process 0 failed, rc=VERR_INVALID_PARAMETER
35809:31:13.290059 vminfo Error: Get token class 'groups' for process 0 failed, rc=VERR_INVALID_PARAMETER
35909:31:13.290059 vminfo Error: Get token class 'statistics' for process 0 failed, rc=VERR_INVALID_PARAMETER
36009:31:13.290059 vminfo Error: Get token class 'user' for process 4 failed, rc=VERR_ACCESS_DENIED
36109:31:13.290059 vminfo Error: Get token class 'groups' for process 4 failed, rc=VERR_ACCESS_DENIED
36209:31:13.290059 vminfo Error: Get token class 'statistics' for process 4 failed, rc=VERR_ACCESS_DENIED
36309:31:13.290059 vminfo Error: Get token class 'user' for process 104 failed, rc=VERR_ACCESS_DENIED
36409:31:13.290059 vminfo Error: Get token class 'groups' for process 104 failed, rc=VERR_ACCESS_DENIED
36509:31:13.290059 vminfo Error: Get token class 'statistics' for process 104 failed, rc=VERR_ACCESS_DENIED
36609:31:13.290059 vminfo Error: Get token class 'user' for process 472 failed, rc=VERR_ACCESS_DENIED
36709:31:13.290059 vminfo Error: Get token class 'groups' for process 472 failed, rc=VERR_ACCESS_DENIED
36809:31:13.290059 vminfo Error: Get token class 'statistics' for process 472 failed, rc=VERR_ACCESS_DENIED
36909:31:13.290059 vminfo Error: Get token class 'user' for process 676 failed, rc=VERR_ACCESS_DENIED
37009:31:13.290059 vminfo Error: Get token class 'groups' for process 676 failed, rc=VERR_ACCESS_DENIED
37109:31:13.290059 vminfo Error: Get token class 'statistics' for process 676 failed, rc=VERR_ACCESS_DENIED
37209:31:13.290059 vminfo Error: Get token class 'user' for process 756 failed, rc=VERR_ACCESS_DENIED
37309:31:13.290059 vminfo Error: Get token class 'groups' for process 756 failed, rc=VERR_ACCESS_DENIED
37409:31:13.290059 vminfo Error: Get token class 'statistics' for process 756 failed, rc=VERR_ACCESS_DENIED
37509:31:13.290059 vminfo Error: Get token class 'user' for process 768 failed, rc=VERR_ACCESS_DENIED
37609:31:13.290059 vminfo Error: Get token class 'groups' for process 768 failed, rc=VERR_ACCESS_DENIED
37709:31:13.290059 vminfo Error: Get token class 'statistics' for process 768 failed, rc=VERR_ACCESS_DENIED
37809:31:13.290059 vminfo Error: Get token class 'user' for process 876 failed, rc=VERR_ACCESS_DENIED
37909:31:13.290059 vminfo Error: Get token class 'groups' for process 876 failed, rc=VERR_ACCESS_DENIED
38009:31:13.290059 vminfo Error: Get token class 'statistics' for process 876 failed, rc=VERR_ACCESS_DENIED
38109:31:13.290059 vminfo Error: Get token class 'user' for process 2532 failed, rc=VERR_ACCESS_DENIED
38209:31:13.290059 vminfo Error: Get token class 'groups' for process 2532 failed, rc=VERR_ACCESS_DENIED
38309:31:13.290059 vminfo Error: Get token class 'statistics' for process 2532 failed, rc=VERR_ACCESS_DENIED
38409:31:13.290059 vminfo Error: Get token class 'user' for process 4136 failed, rc=VERR_ACCESS_DENIED
38509:31:13.290059 vminfo Error: Get token class 'groups' for process 4136 failed, rc=VERR_ACCESS_DENIED
38609:31:13.290059 vminfo Error: Get token class 'statistics' for process 4136 failed, rc=VERR_ACCESS_DENIED
38709:31:13.290059 vminfo Error: Get token class 'user' for process 5212 failed, rc=VERR_ACCESS_DENIED
38809:31:13.290059 vminfo Error: Get token class 'groups' for process 5212 failed, rc=VERR_ACCESS_DENIED
38909:31:13.290059 vminfo Error: Get token class 'statistics' for process 5212 failed, rc=VERR_ACCESS_DENIED
39009:31:13.290059 vminfo Handling session 1 (of 17)
39109:31:13.290059 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2145999, LogonType=3
39209:31:13.305334 vminfo Handling session 2 (of 17)
39309:31:13.305334 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2113823, LogonType=3
39409:31:13.305334 vminfo Handling session 3 (of 17)
39509:31:13.305334 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2041868, LogonType=3
39609:31:13.305334 vminfo Handling session 4 (of 17)
39709:31:13.305334 vminfo Session data: Name=nx, SessionID=0, LogonID=0,1997776, LogonType=3
39809:31:13.305334 vminfo Handling session 5 (of 17)
39909:31:13.305334 vminfo Session data: Name=user, SessionID=1, LogonID=0,1970648, LogonType=2
40009:31:13.305334 vminfo Session LogonType=2 is supported -- looking up SID + type ...
40109:31:13.305334 vminfo Account User=user, Session=1, LogonID=0,1970648, AuthPkg=Negotiate, Domain=DOMAIN
40209:31:13.305334 vminfo Account User=user, WTSConnectState=0 (4)
40309:31:13.305334 vminfo Account User=user using TCS/RDP, state=0
40409:31:13.305334 vminfo Account User=user is logged in
40509:31:13.305334 vminfo Handling user=user, domain=DOMAIN, package=Negotiate, session=1
40609:31:13.305334 vminfo Session 1: PID=6784 (fInt=true ): C:\Windows\System32\svchost.exe
40709:31:13.305334 vminfo Session 1: PID=264 (fInt=true ): C:\Windows\System32\sihost.exe
40809:31:13.305334 vminfo Session 1: PID=3148 (fInt=true ): C:\Windows\System32\svchost.exe
40909:31:13.305334 vminfo Session 1: PID=7176 (fInt=true ): C:\Windows\System32\taskhostw.exe
41009:31:13.305334 vminfo Session 1: PID=7268 (fInt=true ): C:\Windows\System32\ctfmon.exe
41109:31:13.305334 vminfo Session 1: PID=8732 (fInt=true ): C:\Windows\explorer.exe
41209:31:13.305334 vminfo Session 1: PID=9016 (fInt=true ): C:\Program Files (x86)\NoMachine\bin\nxclient.bin
41309:31:13.305334 vminfo Session 1: PID=8260 (fInt=true ): C:\Program Files\McAfee\Agent\x86\UpdaterUI.exe
41409:31:13.305334 vminfo Session 1: PID=8828 (fInt=true ): C:\Program Files\Classic Shell\ClassicStartMenu.exe
41509:31:13.305334 vminfo Session 1: PID=8488 (fInt=true ): C:\Program Files\McAfee\Agent\x86\mctray.exe
41609:31:13.305334 vminfo Session 1: PID=9172 (fInt=true ): C:\Program Files\TortoiseSVN\bin\TSVNCache.exe
41709:31:13.305334 vminfo Session 1: PID=9280 (fInt=true ): C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe
41809:31:13.305334 vminfo Session 1: PID=9652 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
41909:31:13.305334 vminfo Session 1: PID=9728 (fInt=true ): C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe
42009:31:13.305334 vminfo Session 1: PID=9880 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
42109:31:13.305334 vminfo Session 1: PID=9944 (fInt=true ): C:\Windows\System32\dllhost.exe
42209:31:13.305334 vminfo Session 1: PID=8128 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17112.19011.0_x64__8wekyb3d8bbwe\Video.UI.exe
42309:31:13.305334 vminfo Session 1: PID=9528 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
42409:31:13.305334 vminfo Session 1: PID=10292 (fInt=true ): C:\Program Files\Windows Defender\MSASCuiL.exe
42509:31:13.305334 vminfo Session 1: PID=10324 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
42609:31:13.305334 vminfo Session 1: PID=10440 (fInt=true ): C:\Windows\System32\VBoxTray.exe
42709:31:13.305334 vminfo Session 1: PID=10596 (fInt=true ): C:\Users\user\Documents\Visual Studio 2017\Projects\vboxtray_mon\vboxtray_mon\bin\Release\vboxtray_mon.exe
42809:31:13.305334 vminfo Session 1: PID=10612 (fInt=true ): C:\Windows\System32\conhost.exe
42909:31:13.305334 vminfo Session 1: PID=10720 (fInt=true ): C:\Program Files (x86)\FileZilla Server\FileZilla Server Interface.exe
43009:31:13.305334 vminfo Session 1: PID=9808 (fInt=true ): C:\Windows\System32\svchost.exe
43109:31:13.305334 vminfo Session 1: PID=6716 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18011.15918.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
43209:31:13.305334 vminfo Session 1: PID=6688 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
43309:31:13.305334 vminfo Session 1: PID=10200 (fInt=true ): C:\Windows\System32\ApplicationFrameHost.exe
43409:31:13.305334 vminfo Session 1: PID=4868 (fInt=true ): C:\Windows\ImmersiveControlPanel\SystemSettings.exe
43509:31:13.305334 vminfo Session 1: PID=1444 (fInt=true ): C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe
43609:31:13.305334 vminfo Session 1: PID=9504 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
43709:31:13.305334 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/Session/1' = '#12147: cSessionProcs=31 (of 155 procs total)'
43809:31:13.305334 vminfo Adding new user=user (session=1) with 31 processes
43909:31:13.305334 vminfo Handling session 6 (of 17)
44009:31:13.305334 vminfo Session data: Name=user, SessionID=1, LogonID=0,1970599, LogonType=2
44109:31:13.305334 vminfo Session LogonType=2 is supported -- looking up SID + type ...
44209:31:13.305334 vminfo Account User=user, Session=1, LogonID=0,1970599, AuthPkg=Kerberos, Domain=DOMAIN
44309:31:13.305334 vminfo Account User=user, WTSConnectState=0 (4)
44409:31:13.305334 vminfo Account User=user using TCS/RDP, state=0
44509:31:13.305334 vminfo Account User=user is logged in
44609:31:13.305334 vminfo Handling user=user, domain=DOMAIN, package=Kerberos, session=1
44709:31:13.305334 vminfo Session 1: PID=6784 (fInt=true ): C:\Windows\System32\svchost.exe
44809:31:13.305334 vminfo Session 1: PID=264 (fInt=true ): C:\Windows\System32\sihost.exe
44909:31:13.305334 vminfo Session 1: PID=3148 (fInt=true ): C:\Windows\System32\svchost.exe
45009:31:13.305334 vminfo Session 1: PID=7176 (fInt=true ): C:\Windows\System32\taskhostw.exe
45109:31:13.305334 vminfo Session 1: PID=7268 (fInt=true ): C:\Windows\System32\ctfmon.exe
45209:31:13.305334 vminfo Session 1: PID=8732 (fInt=true ): C:\Windows\explorer.exe
45309:31:13.305334 vminfo Session 1: PID=9016 (fInt=true ): C:\Program Files (x86)\NoMachine\bin\nxclient.bin
45409:31:13.305334 vminfo Session 1: PID=8260 (fInt=true ): C:\Program Files\McAfee\Agent\x86\UpdaterUI.exe
45509:31:13.305334 vminfo Session 1: PID=8828 (fInt=true ): C:\Program Files\Classic Shell\ClassicStartMenu.exe
45609:31:13.305334 vminfo Session 1: PID=8488 (fInt=true ): C:\Program Files\McAfee\Agent\x86\mctray.exe
45709:31:13.305334 vminfo Session 1: PID=9172 (fInt=true ): C:\Program Files\TortoiseSVN\bin\TSVNCache.exe
45809:31:13.305334 vminfo Session 1: PID=9280 (fInt=true ): C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe
45909:31:13.320759 vminfo Session 1: PID=9652 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
46009:31:13.320759 vminfo Session 1: PID=9728 (fInt=true ): C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe
46109:31:13.320759 vminfo Session 1: PID=9880 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
46209:31:13.320759 vminfo Session 1: PID=9944 (fInt=true ): C:\Windows\System32\dllhost.exe
46309:31:13.320759 vminfo Session 1: PID=8128 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17112.19011.0_x64__8wekyb3d8bbwe\Video.UI.exe
46409:31:13.320759 vminfo Session 1: PID=9528 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
46509:31:13.320759 vminfo Session 1: PID=10292 (fInt=true ): C:\Program Files\Windows Defender\MSASCuiL.exe
46609:31:13.320759 vminfo Session 1: PID=10324 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
46709:31:13.320759 vminfo Session 1: PID=10440 (fInt=true ): C:\Windows\System32\VBoxTray.exe
46809:31:13.320759 vminfo Session 1: PID=10596 (fInt=true ): C:\Users\user\Documents\Visual Studio 2017\Projects\vboxtray_mon\vboxtray_mon\bin\Release\vboxtray_mon.exe
46909:31:13.320759 vminfo Session 1: PID=10612 (fInt=true ): C:\Windows\System32\conhost.exe
47009:31:13.320759 vminfo Session 1: PID=10720 (fInt=true ): C:\Program Files (x86)\FileZilla Server\FileZilla Server Interface.exe
47109:31:13.320759 vminfo Session 1: PID=9808 (fInt=true ): C:\Windows\System32\svchost.exe
47209:31:13.320759 vminfo Session 1: PID=6716 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18011.15918.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
47309:31:13.320759 vminfo Session 1: PID=6688 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
47409:31:13.320759 vminfo Session 1: PID=10200 (fInt=true ): C:\Windows\System32\ApplicationFrameHost.exe
47509:31:13.320759 vminfo Session 1: PID=4868 (fInt=true ): C:\Windows\ImmersiveControlPanel\SystemSettings.exe
47609:31:13.320759 vminfo Session 1: PID=1444 (fInt=true ): C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe
47709:31:13.320759 vminfo Session 1: PID=9504 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
47809:31:13.320759 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/Session/1' = '#12147: cSessionProcs=31 (of 155 procs total)'
47909:31:13.320759 vminfo Adding new user=user (session=1) with 31 processes
48009:31:13.320759 vminfo Handling session 7 (of 17)
48109:31:13.320759 vminfo Session data: Name=nx, SessionID=0, LogonID=0,685607, LogonType=3
48209:31:13.320759 vminfo Handling session 8 (of 17)
48309:31:13.320759 vminfo Session data: Name=ANONYMOUS LOGON, SessionID=0, LogonID=0,649881, LogonType=3
48409:31:13.320759 vminfo Handling session 9 (of 17)
48509:31:13.320759 vminfo Session data: Name=IUSR, SessionID=0, LogonID=0,995, LogonType=5
48609:31:13.320759 vminfo Handling session 10 (of 17)
48709:31:13.320759 vminfo Session data: Name=DWM-1, SessionID=1, LogonID=0,61006, LogonType=2
48809:31:13.320759 vminfo Session LogonType=2 is supported -- looking up SID + type ...
48909:31:13.320759 vminfo SID owner type=5 not handled, skipping
49009:31:13.320759 vminfo Account User=DWM-1 is not logged in
49109:31:13.320759 vminfo Handling session 11 (of 17)
49209:31:13.320759 vminfo Session data: Name=DWM-1, SessionID=1, LogonID=0,60973, LogonType=2
49309:31:13.320759 vminfo Session LogonType=2 is supported -- looking up SID + type ...
49409:31:13.320759 vminfo SID owner type=5 not handled, skipping
49509:31:13.320759 vminfo Account User=DWM-1 is not logged in
49609:31:13.320759 vminfo Handling session 12 (of 17)
49709:31:13.320759 vminfo Session data: Name=MACHINE$, SessionID=0, LogonID=0,996, LogonType=5
49809:31:13.320759 vminfo Handling session 13 (of 17)
49909:31:13.320759 vminfo Session data: Name=LOCAL SERVICE, SessionID=0, LogonID=0,997, LogonType=5
50009:31:13.320759 vminfo Handling session 14 (of 17)
50109:31:13.320759 vminfo Session data: Name=UMFD-1, SessionID=1, LogonID=0,34521, LogonType=2
50209:31:13.320759 vminfo Session LogonType=2 is supported -- looking up SID + type ...
50309:31:13.320759 vminfo SID owner type=5 not handled, skipping
50409:31:13.320759 vminfo Account User=UMFD-1 is not logged in
50509:31:13.320759 vminfo Handling session 15 (of 17)
50609:31:13.320759 vminfo Session data: Name=UMFD-0, SessionID=0, LogonID=0,34482, LogonType=2
50709:31:13.320759 vminfo Handling session 16 (of 17)
50809:31:13.320759 vminfo Session data: Name=, SessionID=0, LogonID=0,32336, LogonType=0
50909:31:13.320759 vminfo Handling session 17 (of 17)
51009:31:13.320759 vminfo Session data: Name=MACHINE$, SessionID=0, LogonID=0,999, LogonType=0
51109:31:13.320759 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA' = '#12147: cSessions=17, cProcs=155, cUniqueUsers=2'
51209:31:13.320759 vminfo Found 2 unique logged-in user(s)
51309:31:13.320759 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/User/0' = '#12147: szName=user, sessionID=1, cProcs=31'
51409:31:13.320759 vminfo User 'user' has 31 interactive processes (session=1)
51509:31:13.320759 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/User/user@DOMAIN/UsageState' resulted in rc=VINF_NO_CHANGE
51609:31:13.320759 vminfo User 'user' (domain 'DOMAIN') is idle for 60448, fReportToHost=false
51709:31:13.320759 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/User/1' = '#12147: szName=user, sessionID=1, cProcs=31'
51809:31:13.320759 vminfo User 'user' has 31 interactive processes (session=1)
51909:31:13.320759 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/User/user@DOMAIN/UsageState' resulted in rc=VINF_NO_CHANGE
52009:31:13.320759 vminfo User 'user' (domain 'DOMAIN') is idle for 60448, fReportToHost=false
52109:31:13.320759 vminfo cUsersInList=2, pszUserList=user,user, rc=VINF_NO_CHANGE
52209:31:13.320759 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/LoggedInUsersList' resulted in rc=VINF_NO_CHANGE
52309:31:13.320759 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/LoggedInUsers' resulted in rc=VINF_NO_CHANGE
52409:31:13.320759 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/NoLoggedInUsers' resulted in rc=VINF_NO_CHANGE
52509:31:13.320759 vminfo Writing users returned with rc=VINF_NO_CHANGE
52609:31:13.336405 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/IP' resulted in rc=VINF_NO_CHANGE
52709:31:13.336405 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/Broadcast' resulted in rc=VINF_NO_CHANGE
52809:31:13.336405 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/Netmask' resulted in rc=VINF_NO_CHANGE
52909:31:13.336405 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/Status' resulted in rc=VINF_NO_CHANGE
53009:31:13.336405 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/MAC' resulted in rc=VINF_NO_CHANGE
53109:31:13.336405 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/IP' resulted in rc=VINF_NO_CHANGE
53209:31:13.336405 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/Broadcast' resulted in rc=VINF_NO_CHANGE
53309:31:13.336405 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/Netmask' resulted in rc=VINF_NO_CHANGE
53409:31:13.336405 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/Status' resulted in rc=VINF_NO_CHANGE
53509:31:13.336405 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/MAC' resulted in rc=VINF_NO_CHANGE
53609:31:13.336405 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/IP' resulted in rc=VINF_NO_CHANGE
53709:31:13.336405 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/Broadcast' resulted in rc=VINF_NO_CHANGE
53809:31:13.336405 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/Netmask' resulted in rc=VINF_NO_CHANGE
53909:31:13.336405 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/Status' resulted in rc=VINF_NO_CHANGE
54009:31:13.336405 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/MAC' resulted in rc=VINF_NO_CHANGE
54109:31:13.336405 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/IP' resulted in rc=VINF_NO_CHANGE
54209:31:13.336405 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/Broadcast' resulted in rc=VINF_NO_CHANGE
54309:31:13.336405 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/Netmask' resulted in rc=VINF_NO_CHANGE
54409:31:13.336405 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/Status' resulted in rc=VINF_NO_CHANGE
54509:31:13.336405 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/MAC' resulted in rc=VINF_NO_CHANGE
54609:31:13.336405 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/IP' resulted in rc=VINF_NO_CHANGE
54709:31:13.336405 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/Broadcast' resulted in rc=VINF_NO_CHANGE
54809:31:13.336405 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/Netmask' resulted in rc=VINF_NO_CHANGE
54909:31:13.336405 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/Status' resulted in rc=VINF_NO_CHANGE
55009:31:13.336405 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/MAC' resulted in rc=VINF_NO_CHANGE
55109:31:13.336405 vminfo [PropCache 00007ff6b2962520]: Written '/VirtualBox/GuestInfo/Net/Count'='5' (flags: 6), rc=VINF_SUCCESS
55209:31:13.336405 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/Count' resulted in rc=VINF_SUCCESS
55309:31:13.336405 vminfo Guest Property: /VirtualBox/HostInfo/VRDP/ActiveClient not found
55409:31:13.336405 vminfo VRDP: Handling location awareness done
55509:31:16.101694 timesync vgsvcTimeSyncWorker: Host: 2019-02-26T09:31:15.977000000Z (MinAdjust: 200 ms), Guest: 2019-02-26T09:31:16.101694500Z => -124 694 500 ns drift
55609:31:18.346663 vminfo Found 17 sessions
55709:31:18.346663 vminfo Error: Get token class 'user' for process 0 failed, rc=VERR_INVALID_PARAMETER
55809:31:18.346663 vminfo Error: Get token class 'groups' for process 0 failed, rc=VERR_INVALID_PARAMETER
55909:31:18.346663 vminfo Error: Get token class 'statistics' for process 0 failed, rc=VERR_INVALID_PARAMETER
56009:31:18.346663 vminfo Error: Get token class 'user' for process 4 failed, rc=VERR_ACCESS_DENIED
56109:31:18.346663 vminfo Error: Get token class 'groups' for process 4 failed, rc=VERR_ACCESS_DENIED
56209:31:18.346663 vminfo Error: Get token class 'statistics' for process 4 failed, rc=VERR_ACCESS_DENIED
56309:31:18.346663 vminfo Error: Get token class 'user' for process 104 failed, rc=VERR_ACCESS_DENIED
56409:31:18.346663 vminfo Error: Get token class 'groups' for process 104 failed, rc=VERR_ACCESS_DENIED
56509:31:18.346663 vminfo Error: Get token class 'statistics' for process 104 failed, rc=VERR_ACCESS_DENIED
56609:31:18.346663 vminfo Error: Get token class 'user' for process 472 failed, rc=VERR_ACCESS_DENIED
56709:31:18.346663 vminfo Error: Get token class 'groups' for process 472 failed, rc=VERR_ACCESS_DENIED
56809:31:18.346663 vminfo Error: Get token class 'statistics' for process 472 failed, rc=VERR_ACCESS_DENIED
56909:31:18.346663 vminfo Error: Get token class 'user' for process 676 failed, rc=VERR_ACCESS_DENIED
57009:31:18.346663 vminfo Error: Get token class 'groups' for process 676 failed, rc=VERR_ACCESS_DENIED
57109:31:18.346663 vminfo Error: Get token class 'statistics' for process 676 failed, rc=VERR_ACCESS_DENIED
57209:31:18.346663 vminfo Error: Get token class 'user' for process 756 failed, rc=VERR_ACCESS_DENIED
57309:31:18.346663 vminfo Error: Get token class 'groups' for process 756 failed, rc=VERR_ACCESS_DENIED
57409:31:18.346663 vminfo Error: Get token class 'statistics' for process 756 failed, rc=VERR_ACCESS_DENIED
57509:31:18.346663 vminfo Error: Get token class 'user' for process 768 failed, rc=VERR_ACCESS_DENIED
57609:31:18.346663 vminfo Error: Get token class 'groups' for process 768 failed, rc=VERR_ACCESS_DENIED
57709:31:18.346663 vminfo Error: Get token class 'statistics' for process 768 failed, rc=VERR_ACCESS_DENIED
57809:31:18.346663 vminfo Error: Get token class 'user' for process 876 failed, rc=VERR_ACCESS_DENIED
57909:31:18.346663 vminfo Error: Get token class 'groups' for process 876 failed, rc=VERR_ACCESS_DENIED
58009:31:18.346663 vminfo Error: Get token class 'statistics' for process 876 failed, rc=VERR_ACCESS_DENIED
58109:31:18.346663 vminfo Error: Get token class 'user' for process 2532 failed, rc=VERR_ACCESS_DENIED
58209:31:18.346663 vminfo Error: Get token class 'groups' for process 2532 failed, rc=VERR_ACCESS_DENIED
58309:31:18.346663 vminfo Error: Get token class 'statistics' for process 2532 failed, rc=VERR_ACCESS_DENIED
58409:31:18.346663 vminfo Error: Get token class 'user' for process 4136 failed, rc=VERR_ACCESS_DENIED
58509:31:18.346663 vminfo Error: Get token class 'groups' for process 4136 failed, rc=VERR_ACCESS_DENIED
58609:31:18.346663 vminfo Error: Get token class 'statistics' for process 4136 failed, rc=VERR_ACCESS_DENIED
58709:31:18.346663 vminfo Error: Get token class 'user' for process 5212 failed, rc=VERR_ACCESS_DENIED
58809:31:18.346663 vminfo Error: Get token class 'groups' for process 5212 failed, rc=VERR_ACCESS_DENIED
58909:31:18.346663 vminfo Error: Get token class 'statistics' for process 5212 failed, rc=VERR_ACCESS_DENIED
59009:31:18.346663 vminfo Handling session 1 (of 17)
59109:31:18.346663 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2145999, LogonType=3
59209:31:18.346663 vminfo Handling session 2 (of 17)
59309:31:18.346663 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2113823, LogonType=3
59409:31:18.346663 vminfo Handling session 3 (of 17)
59509:31:18.346663 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2041868, LogonType=3
59609:31:18.346663 vminfo Handling session 4 (of 17)
59709:31:18.346663 vminfo Session data: Name=nx, SessionID=0, LogonID=0,1997776, LogonType=3
59809:31:18.346663 vminfo Handling session 5 (of 17)
59909:31:18.346663 vminfo Session data: Name=user, SessionID=1, LogonID=0,1970648, LogonType=2
60009:31:18.346663 vminfo Session LogonType=2 is supported -- looking up SID + type ...
60109:31:18.361444 vminfo Account User=user, Session=1, LogonID=0,1970648, AuthPkg=Negotiate, Domain=DOMAIN
60209:31:18.361444 vminfo Account User=user, WTSConnectState=0 (4)
60309:31:18.361444 vminfo Account User=user using TCS/RDP, state=0
60409:31:18.361444 vminfo Account User=user is logged in
60509:31:18.361444 vminfo Handling user=user, domain=DOMAIN, package=Negotiate, session=1
60609:31:18.361444 vminfo Session 1: PID=6784 (fInt=true ): C:\Windows\System32\svchost.exe
60709:31:18.361444 vminfo Session 1: PID=264 (fInt=true ): C:\Windows\System32\sihost.exe
60809:31:18.361444 vminfo Session 1: PID=3148 (fInt=true ): C:\Windows\System32\svchost.exe
60909:31:18.361444 vminfo Session 1: PID=7176 (fInt=true ): C:\Windows\System32\taskhostw.exe
61009:31:18.361444 vminfo Session 1: PID=7268 (fInt=true ): C:\Windows\System32\ctfmon.exe
61109:31:18.361444 vminfo Session 1: PID=8732 (fInt=true ): C:\Windows\explorer.exe
61209:31:18.361444 vminfo Session 1: PID=9016 (fInt=true ): C:\Program Files (x86)\NoMachine\bin\nxclient.bin
61309:31:18.361444 vminfo Session 1: PID=8260 (fInt=true ): C:\Program Files\McAfee\Agent\x86\UpdaterUI.exe
61409:31:18.361444 vminfo Session 1: PID=8828 (fInt=true ): C:\Program Files\Classic Shell\ClassicStartMenu.exe
61509:31:18.361444 vminfo Session 1: PID=8488 (fInt=true ): C:\Program Files\McAfee\Agent\x86\mctray.exe
61609:31:18.361444 vminfo Session 1: PID=9172 (fInt=true ): C:\Program Files\TortoiseSVN\bin\TSVNCache.exe
61709:31:18.361444 vminfo Session 1: PID=9280 (fInt=true ): C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe
61809:31:18.361444 vminfo Session 1: PID=9652 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
61909:31:18.361444 vminfo Session 1: PID=9728 (fInt=true ): C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe
62009:31:18.361444 vminfo Session 1: PID=9880 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
62109:31:18.361444 vminfo Session 1: PID=9944 (fInt=true ): C:\Windows\System32\dllhost.exe
62209:31:18.361444 vminfo Session 1: PID=8128 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17112.19011.0_x64__8wekyb3d8bbwe\Video.UI.exe
62309:31:18.361444 vminfo Session 1: PID=9528 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
62409:31:18.361444 vminfo Session 1: PID=10292 (fInt=true ): C:\Program Files\Windows Defender\MSASCuiL.exe
62509:31:18.361444 vminfo Session 1: PID=10324 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
62609:31:18.361444 vminfo Session 1: PID=10440 (fInt=true ): C:\Windows\System32\VBoxTray.exe
62709:31:18.361444 vminfo Session 1: PID=10596 (fInt=true ): C:\Users\user\Documents\Visual Studio 2017\Projects\vboxtray_mon\vboxtray_mon\bin\Release\vboxtray_mon.exe
62809:31:18.361444 vminfo Session 1: PID=10612 (fInt=true ): C:\Windows\System32\conhost.exe
62909:31:18.361444 vminfo Session 1: PID=10720 (fInt=true ): C:\Program Files (x86)\FileZilla Server\FileZilla Server Interface.exe
63009:31:18.361444 vminfo Session 1: PID=9808 (fInt=true ): C:\Windows\System32\svchost.exe
63109:31:18.361444 vminfo Session 1: PID=6716 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18011.15918.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
63209:31:18.361444 vminfo Session 1: PID=6688 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
63309:31:18.361444 vminfo Session 1: PID=10200 (fInt=true ): C:\Windows\System32\ApplicationFrameHost.exe
63409:31:18.361444 vminfo Session 1: PID=4868 (fInt=true ): C:\Windows\ImmersiveControlPanel\SystemSettings.exe
63509:31:18.361444 vminfo Session 1: PID=1444 (fInt=true ): C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe
63609:31:18.361444 vminfo Session 1: PID=9504 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
63709:31:18.361444 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/Session/1' = '#12148: cSessionProcs=31 (of 155 procs total)'
63809:31:18.361444 vminfo Adding new user=user (session=1) with 31 processes
63909:31:18.361444 vminfo Handling session 6 (of 17)
64009:31:18.361444 vminfo Session data: Name=user, SessionID=1, LogonID=0,1970599, LogonType=2
64109:31:18.361444 vminfo Session LogonType=2 is supported -- looking up SID + type ...
64209:31:18.361444 vminfo Account User=user, Session=1, LogonID=0,1970599, AuthPkg=Kerberos, Domain=DOMAIN
64309:31:18.361444 vminfo Account User=user, WTSConnectState=0 (4)
64409:31:18.361444 vminfo Account User=user using TCS/RDP, state=0
64509:31:18.361444 vminfo Account User=user is logged in
64609:31:18.361444 vminfo Handling user=user, domain=DOMAIN, package=Kerberos, session=1
64709:31:18.361444 vminfo Session 1: PID=6784 (fInt=true ): C:\Windows\System32\svchost.exe
64809:31:18.361444 vminfo Session 1: PID=264 (fInt=true ): C:\Windows\System32\sihost.exe
64909:31:18.361444 vminfo Session 1: PID=3148 (fInt=true ): C:\Windows\System32\svchost.exe
65009:31:18.361444 vminfo Session 1: PID=7176 (fInt=true ): C:\Windows\System32\taskhostw.exe
65109:31:18.361444 vminfo Session 1: PID=7268 (fInt=true ): C:\Windows\System32\ctfmon.exe
65209:31:18.361444 vminfo Session 1: PID=8732 (fInt=true ): C:\Windows\explorer.exe
65309:31:18.361444 vminfo Session 1: PID=9016 (fInt=true ): C:\Program Files (x86)\NoMachine\bin\nxclient.bin
65409:31:18.361444 vminfo Session 1: PID=8260 (fInt=true ): C:\Program Files\McAfee\Agent\x86\UpdaterUI.exe
65509:31:18.361444 vminfo Session 1: PID=8828 (fInt=true ): C:\Program Files\Classic Shell\ClassicStartMenu.exe
65609:31:18.361444 vminfo Session 1: PID=8488 (fInt=true ): C:\Program Files\McAfee\Agent\x86\mctray.exe
65709:31:18.361444 vminfo Session 1: PID=9172 (fInt=true ): C:\Program Files\TortoiseSVN\bin\TSVNCache.exe
65809:31:18.361444 vminfo Session 1: PID=9280 (fInt=true ): C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe
65909:31:18.361444 vminfo Session 1: PID=9652 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
66009:31:18.361444 vminfo Session 1: PID=9728 (fInt=true ): C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe
66109:31:18.361444 vminfo Session 1: PID=9880 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
66209:31:18.361444 vminfo Session 1: PID=9944 (fInt=true ): C:\Windows\System32\dllhost.exe
66309:31:18.361444 vminfo Session 1: PID=8128 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17112.19011.0_x64__8wekyb3d8bbwe\Video.UI.exe
66409:31:18.361444 vminfo Session 1: PID=9528 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
66509:31:18.361444 vminfo Session 1: PID=10292 (fInt=true ): C:\Program Files\Windows Defender\MSASCuiL.exe
66609:31:18.361444 vminfo Session 1: PID=10324 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
66709:31:18.361444 vminfo Session 1: PID=10440 (fInt=true ): C:\Windows\System32\VBoxTray.exe
66809:31:18.377038 vminfo Session 1: PID=10596 (fInt=true ): C:\Users\user\Documents\Visual Studio 2017\Projects\vboxtray_mon\vboxtray_mon\bin\Release\vboxtray_mon.exe
66909:31:18.377038 vminfo Session 1: PID=10612 (fInt=true ): C:\Windows\System32\conhost.exe
67009:31:18.377038 vminfo Session 1: PID=10720 (fInt=true ): C:\Program Files (x86)\FileZilla Server\FileZilla Server Interface.exe
67109:31:18.377038 vminfo Session 1: PID=9808 (fInt=true ): C:\Windows\System32\svchost.exe
67209:31:18.377038 vminfo Session 1: PID=6716 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18011.15918.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
67309:31:18.377038 vminfo Session 1: PID=6688 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
67409:31:18.377038 vminfo Session 1: PID=10200 (fInt=true ): C:\Windows\System32\ApplicationFrameHost.exe
67509:31:18.377038 vminfo Session 1: PID=4868 (fInt=true ): C:\Windows\ImmersiveControlPanel\SystemSettings.exe
67609:31:18.377038 vminfo Session 1: PID=1444 (fInt=true ): C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe
67709:31:18.377038 vminfo Session 1: PID=9504 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
67809:31:18.377038 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/Session/1' = '#12148: cSessionProcs=31 (of 155 procs total)'
67909:31:18.377038 vminfo Adding new user=user (session=1) with 31 processes
68009:31:18.377038 vminfo Handling session 7 (of 17)
68109:31:18.377038 vminfo Session data: Name=nx, SessionID=0, LogonID=0,685607, LogonType=3
68209:31:18.377038 vminfo Handling session 8 (of 17)
68309:31:18.377038 vminfo Session data: Name=ANONYMOUS LOGON, SessionID=0, LogonID=0,649881, LogonType=3
68409:31:18.377038 vminfo Handling session 9 (of 17)
68509:31:18.377038 vminfo Session data: Name=IUSR, SessionID=0, LogonID=0,995, LogonType=5
68609:31:18.377038 vminfo Handling session 10 (of 17)
68709:31:18.377038 vminfo Session data: Name=DWM-1, SessionID=1, LogonID=0,61006, LogonType=2
68809:31:18.377038 vminfo Session LogonType=2 is supported -- looking up SID + type ...
68909:31:18.377038 vminfo SID owner type=5 not handled, skipping
69009:31:18.377038 vminfo Account User=DWM-1 is not logged in
69109:31:18.377038 vminfo Handling session 11 (of 17)
69209:31:18.377038 vminfo Session data: Name=DWM-1, SessionID=1, LogonID=0,60973, LogonType=2
69309:31:18.377038 vminfo Session LogonType=2 is supported -- looking up SID + type ...
69409:31:18.377038 vminfo SID owner type=5 not handled, skipping
69509:31:18.377038 vminfo Account User=DWM-1 is not logged in
69609:31:18.377038 vminfo Handling session 12 (of 17)
69709:31:18.377038 vminfo Session data: Name=MACHINE$, SessionID=0, LogonID=0,996, LogonType=5
69809:31:18.377038 vminfo Handling session 13 (of 17)
69909:31:18.377038 vminfo Session data: Name=LOCAL SERVICE, SessionID=0, LogonID=0,997, LogonType=5
70009:31:18.377038 vminfo Handling session 14 (of 17)
70109:31:18.377038 vminfo Session data: Name=UMFD-1, SessionID=1, LogonID=0,34521, LogonType=2
70209:31:18.377038 vminfo Session LogonType=2 is supported -- looking up SID + type ...
70309:31:18.377038 vminfo SID owner type=5 not handled, skipping
70409:31:18.377038 vminfo Account User=UMFD-1 is not logged in
70509:31:18.377038 vminfo Handling session 15 (of 17)
70609:31:18.377038 vminfo Session data: Name=UMFD-0, SessionID=0, LogonID=0,34482, LogonType=2
70709:31:18.377038 vminfo Handling session 16 (of 17)
70809:31:18.377038 vminfo Session data: Name=, SessionID=0, LogonID=0,32336, LogonType=0
70909:31:18.377038 vminfo Handling session 17 (of 17)
71009:31:18.377038 vminfo Session data: Name=MACHINE$, SessionID=0, LogonID=0,999, LogonType=0
71109:31:18.377038 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA' = '#12148: cSessions=17, cProcs=155, cUniqueUsers=2'
71209:31:18.377038 vminfo Found 2 unique logged-in user(s)
71309:31:18.377038 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/User/0' = '#12148: szName=user, sessionID=1, cProcs=31'
71409:31:18.377038 vminfo User 'user' has 31 interactive processes (session=1)
71509:31:18.377038 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/User/user@DOMAIN/UsageState' resulted in rc=VINF_NO_CHANGE
71609:31:18.377038 vminfo User 'user' (domain 'DOMAIN') is idle for 60453, fReportToHost=false
71709:31:18.377038 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/User/1' = '#12148: szName=user, sessionID=1, cProcs=31'
71809:31:18.377038 vminfo User 'user' has 31 interactive processes (session=1)
71909:31:18.377038 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/User/user@DOMAIN/UsageState' resulted in rc=VINF_NO_CHANGE
72009:31:18.377038 vminfo User 'user' (domain 'DOMAIN') is idle for 60453, fReportToHost=false
72109:31:18.377038 vminfo cUsersInList=2, pszUserList=user,user, rc=VINF_NO_CHANGE
72209:31:18.377038 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/LoggedInUsersList' resulted in rc=VINF_NO_CHANGE
72309:31:18.377038 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/LoggedInUsers' resulted in rc=VINF_NO_CHANGE
72409:31:18.377038 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/NoLoggedInUsers' resulted in rc=VINF_NO_CHANGE
72509:31:18.377038 vminfo Writing users returned with rc=VINF_NO_CHANGE
72609:31:18.392766 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/IP' resulted in rc=VINF_NO_CHANGE
72709:31:18.392766 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/Broadcast' resulted in rc=VINF_NO_CHANGE
72809:31:18.392766 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/Netmask' resulted in rc=VINF_NO_CHANGE
72909:31:18.392766 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/Status' resulted in rc=VINF_NO_CHANGE
73009:31:18.392766 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/MAC' resulted in rc=VINF_NO_CHANGE
73109:31:18.392766 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/IP' resulted in rc=VINF_NO_CHANGE
73209:31:18.392766 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/Broadcast' resulted in rc=VINF_NO_CHANGE
73309:31:18.392766 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/Netmask' resulted in rc=VINF_NO_CHANGE
73409:31:18.392766 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/Status' resulted in rc=VINF_NO_CHANGE
73509:31:18.392766 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/MAC' resulted in rc=VINF_NO_CHANGE
73609:31:18.392766 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/IP' resulted in rc=VINF_NO_CHANGE
73709:31:18.392766 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/Broadcast' resulted in rc=VINF_NO_CHANGE
73809:31:18.392766 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/Netmask' resulted in rc=VINF_NO_CHANGE
73909:31:18.392766 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/Status' resulted in rc=VINF_NO_CHANGE
74009:31:18.392766 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/MAC' resulted in rc=VINF_NO_CHANGE
74109:31:18.392766 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/IP' resulted in rc=VINF_NO_CHANGE
74209:31:18.392766 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/Broadcast' resulted in rc=VINF_NO_CHANGE
74309:31:18.392766 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/Netmask' resulted in rc=VINF_NO_CHANGE
74409:31:18.392766 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/Status' resulted in rc=VINF_NO_CHANGE
74509:31:18.392766 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/MAC' resulted in rc=VINF_NO_CHANGE
74609:31:18.392766 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/IP' resulted in rc=VINF_NO_CHANGE
74709:31:18.392766 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/Broadcast' resulted in rc=VINF_NO_CHANGE
74809:31:18.392766 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/Netmask' resulted in rc=VINF_NO_CHANGE
74909:31:18.392766 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/Status' resulted in rc=VINF_NO_CHANGE
75009:31:18.392766 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/MAC' resulted in rc=VINF_NO_CHANGE
75109:31:18.392766 vminfo [PropCache 00007ff6b2962520]: Written '/VirtualBox/GuestInfo/Net/Count'='5' (flags: 6), rc=VINF_SUCCESS
75209:31:18.392766 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/Count' resulted in rc=VINF_SUCCESS
75309:31:18.392766 vminfo Guest Property: /VirtualBox/HostInfo/VRDP/ActiveClient not found
75409:31:18.392766 vminfo VRDP: Handling location awareness done
75509:31:23.395468 vminfo Found 17 sessions
75609:31:23.395468 vminfo Error: Get token class 'user' for process 0 failed, rc=VERR_INVALID_PARAMETER
75709:31:23.395468 vminfo Error: Get token class 'groups' for process 0 failed, rc=VERR_INVALID_PARAMETER
75809:31:23.395468 vminfo Error: Get token class 'statistics' for process 0 failed, rc=VERR_INVALID_PARAMETER
75909:31:23.395468 vminfo Error: Get token class 'user' for process 4 failed, rc=VERR_ACCESS_DENIED
76009:31:23.395468 vminfo Error: Get token class 'groups' for process 4 failed, rc=VERR_ACCESS_DENIED
76109:31:23.395468 vminfo Error: Get token class 'statistics' for process 4 failed, rc=VERR_ACCESS_DENIED
76209:31:23.395468 vminfo Error: Get token class 'user' for process 104 failed, rc=VERR_ACCESS_DENIED
76309:31:23.395468 vminfo Error: Get token class 'groups' for process 104 failed, rc=VERR_ACCESS_DENIED
76409:31:23.395468 vminfo Error: Get token class 'statistics' for process 104 failed, rc=VERR_ACCESS_DENIED
76509:31:23.395468 vminfo Error: Get token class 'user' for process 472 failed, rc=VERR_ACCESS_DENIED
76609:31:23.395468 vminfo Error: Get token class 'groups' for process 472 failed, rc=VERR_ACCESS_DENIED
76709:31:23.395468 vminfo Error: Get token class 'statistics' for process 472 failed, rc=VERR_ACCESS_DENIED
76809:31:23.395468 vminfo Error: Get token class 'user' for process 676 failed, rc=VERR_ACCESS_DENIED
76909:31:23.395468 vminfo Error: Get token class 'groups' for process 676 failed, rc=VERR_ACCESS_DENIED
77009:31:23.395468 vminfo Error: Get token class 'statistics' for process 676 failed, rc=VERR_ACCESS_DENIED
77109:31:23.395468 vminfo Error: Get token class 'user' for process 756 failed, rc=VERR_ACCESS_DENIED
77209:31:23.395468 vminfo Error: Get token class 'groups' for process 756 failed, rc=VERR_ACCESS_DENIED
77309:31:23.395468 vminfo Error: Get token class 'statistics' for process 756 failed, rc=VERR_ACCESS_DENIED
77409:31:23.395468 vminfo Error: Get token class 'user' for process 768 failed, rc=VERR_ACCESS_DENIED
77509:31:23.395468 vminfo Error: Get token class 'groups' for process 768 failed, rc=VERR_ACCESS_DENIED
77609:31:23.395468 vminfo Error: Get token class 'statistics' for process 768 failed, rc=VERR_ACCESS_DENIED
77709:31:23.395468 vminfo Error: Get token class 'user' for process 876 failed, rc=VERR_ACCESS_DENIED
77809:31:23.395468 vminfo Error: Get token class 'groups' for process 876 failed, rc=VERR_ACCESS_DENIED
77909:31:23.395468 vminfo Error: Get token class 'statistics' for process 876 failed, rc=VERR_ACCESS_DENIED
78009:31:23.395468 vminfo Error: Get token class 'user' for process 2532 failed, rc=VERR_ACCESS_DENIED
78109:31:23.395468 vminfo Error: Get token class 'groups' for process 2532 failed, rc=VERR_ACCESS_DENIED
78209:31:23.395468 vminfo Error: Get token class 'statistics' for process 2532 failed, rc=VERR_ACCESS_DENIED
78309:31:23.395468 vminfo Error: Get token class 'user' for process 4136 failed, rc=VERR_ACCESS_DENIED
78409:31:23.395468 vminfo Error: Get token class 'groups' for process 4136 failed, rc=VERR_ACCESS_DENIED
78509:31:23.395468 vminfo Error: Get token class 'statistics' for process 4136 failed, rc=VERR_ACCESS_DENIED
78609:31:23.395468 vminfo Error: Get token class 'user' for process 5212 failed, rc=VERR_ACCESS_DENIED
78709:31:23.395468 vminfo Error: Get token class 'groups' for process 5212 failed, rc=VERR_ACCESS_DENIED
78809:31:23.395468 vminfo Error: Get token class 'statistics' for process 5212 failed, rc=VERR_ACCESS_DENIED
78909:31:23.395468 vminfo Handling session 1 (of 17)
79009:31:23.395468 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2145999, LogonType=3
79109:31:23.395468 vminfo Handling session 2 (of 17)
79209:31:23.395468 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2113823, LogonType=3
79309:31:23.395468 vminfo Handling session 3 (of 17)
79409:31:23.395468 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2041868, LogonType=3
79509:31:23.395468 vminfo Handling session 4 (of 17)
79609:31:23.395468 vminfo Session data: Name=nx, SessionID=0, LogonID=0,1997776, LogonType=3
79709:31:23.410161 vminfo Handling session 5 (of 17)
79809:31:23.410161 vminfo Session data: Name=user, SessionID=1, LogonID=0,1970648, LogonType=2
79909:31:23.410161 vminfo Session LogonType=2 is supported -- looking up SID + type ...
80009:31:23.410161 vminfo Account User=user, Session=1, LogonID=0,1970648, AuthPkg=Negotiate, Domain=DOMAIN
80109:31:23.410161 vminfo Account User=user, WTSConnectState=0 (4)
80209:31:23.410161 vminfo Account User=user using TCS/RDP, state=0
80309:31:23.410161 vminfo Account User=user is logged in
80409:31:23.410161 vminfo Handling user=user, domain=DOMAIN, package=Negotiate, session=1
80509:31:23.410161 vminfo Session 1: PID=6784 (fInt=true ): C:\Windows\System32\svchost.exe
80609:31:23.410161 vminfo Session 1: PID=264 (fInt=true ): C:\Windows\System32\sihost.exe
80709:31:23.410161 vminfo Session 1: PID=3148 (fInt=true ): C:\Windows\System32\svchost.exe
80809:31:23.410161 vminfo Session 1: PID=7176 (fInt=true ): C:\Windows\System32\taskhostw.exe
80909:31:23.410161 vminfo Session 1: PID=7268 (fInt=true ): C:\Windows\System32\ctfmon.exe
81009:31:23.410161 vminfo Session 1: PID=8732 (fInt=true ): C:\Windows\explorer.exe
81109:31:23.410161 vminfo Session 1: PID=9016 (fInt=true ): C:\Program Files (x86)\NoMachine\bin\nxclient.bin
81209:31:23.410161 vminfo Session 1: PID=8260 (fInt=true ): C:\Program Files\McAfee\Agent\x86\UpdaterUI.exe
81309:31:23.410161 vminfo Session 1: PID=8828 (fInt=true ): C:\Program Files\Classic Shell\ClassicStartMenu.exe
81409:31:23.410161 vminfo Session 1: PID=8488 (fInt=true ): C:\Program Files\McAfee\Agent\x86\mctray.exe
81509:31:23.410161 vminfo Session 1: PID=9172 (fInt=true ): C:\Program Files\TortoiseSVN\bin\TSVNCache.exe
81609:31:23.410161 vminfo Session 1: PID=9280 (fInt=true ): C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe
81709:31:23.410161 vminfo Session 1: PID=9652 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
81809:31:23.410161 vminfo Session 1: PID=9728 (fInt=true ): C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe
81909:31:23.410161 vminfo Session 1: PID=9880 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
82009:31:23.410161 vminfo Session 1: PID=9944 (fInt=true ): C:\Windows\System32\dllhost.exe
82109:31:23.410161 vminfo Session 1: PID=8128 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17112.19011.0_x64__8wekyb3d8bbwe\Video.UI.exe
82209:31:23.410161 vminfo Session 1: PID=9528 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
82309:31:23.410161 vminfo Session 1: PID=10292 (fInt=true ): C:\Program Files\Windows Defender\MSASCuiL.exe
82409:31:23.410161 vminfo Session 1: PID=10324 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
82509:31:23.410161 vminfo Session 1: PID=10440 (fInt=true ): C:\Windows\System32\VBoxTray.exe
82609:31:23.410161 vminfo Session 1: PID=10596 (fInt=true ): C:\Users\user\Documents\Visual Studio 2017\Projects\vboxtray_mon\vboxtray_mon\bin\Release\vboxtray_mon.exe
82709:31:23.410161 vminfo Session 1: PID=10612 (fInt=true ): C:\Windows\System32\conhost.exe
82809:31:23.410161 vminfo Session 1: PID=10720 (fInt=true ): C:\Program Files (x86)\FileZilla Server\FileZilla Server Interface.exe
82909:31:23.410161 vminfo Session 1: PID=9808 (fInt=true ): C:\Windows\System32\svchost.exe
83009:31:23.410161 vminfo Session 1: PID=6716 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18011.15918.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
83109:31:23.410161 vminfo Session 1: PID=6688 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
83209:31:23.410161 vminfo Session 1: PID=10200 (fInt=true ): C:\Windows\System32\ApplicationFrameHost.exe
83309:31:23.410161 vminfo Session 1: PID=4868 (fInt=true ): C:\Windows\ImmersiveControlPanel\SystemSettings.exe
83409:31:23.410161 vminfo Session 1: PID=1444 (fInt=true ): C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe
83509:31:23.410161 vminfo Session 1: PID=9504 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
83609:31:23.410161 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/Session/1' = '#12149: cSessionProcs=31 (of 155 procs total)'
83709:31:23.410161 vminfo Adding new user=user (session=1) with 31 processes
83809:31:23.410161 vminfo Handling session 6 (of 17)
83909:31:23.410161 vminfo Session data: Name=user, SessionID=1, LogonID=0,1970599, LogonType=2
84009:31:23.410161 vminfo Session LogonType=2 is supported -- looking up SID + type ...
84109:31:23.410161 vminfo Account User=user, Session=1, LogonID=0,1970599, AuthPkg=Kerberos, Domain=DOMAIN
84209:31:23.410161 vminfo Account User=user, WTSConnectState=0 (4)
84309:31:23.410161 vminfo Account User=user using TCS/RDP, state=0
84409:31:23.410161 vminfo Account User=user is logged in
84509:31:23.410161 vminfo Handling user=user, domain=DOMAIN, package=Kerberos, session=1
84609:31:23.410161 vminfo Session 1: PID=6784 (fInt=true ): C:\Windows\System32\svchost.exe
84709:31:23.410161 vminfo Session 1: PID=264 (fInt=true ): C:\Windows\System32\sihost.exe
84809:31:23.410161 vminfo Session 1: PID=3148 (fInt=true ): C:\Windows\System32\svchost.exe
84909:31:23.410161 vminfo Session 1: PID=7176 (fInt=true ): C:\Windows\System32\taskhostw.exe
85009:31:23.410161 vminfo Session 1: PID=7268 (fInt=true ): C:\Windows\System32\ctfmon.exe
85109:31:23.410161 vminfo Session 1: PID=8732 (fInt=true ): C:\Windows\explorer.exe
85209:31:23.410161 vminfo Session 1: PID=9016 (fInt=true ): C:\Program Files (x86)\NoMachine\bin\nxclient.bin
85309:31:23.410161 vminfo Session 1: PID=8260 (fInt=true ): C:\Program Files\McAfee\Agent\x86\UpdaterUI.exe
85409:31:23.410161 vminfo Session 1: PID=8828 (fInt=true ): C:\Program Files\Classic Shell\ClassicStartMenu.exe
85509:31:23.410161 vminfo Session 1: PID=8488 (fInt=true ): C:\Program Files\McAfee\Agent\x86\mctray.exe
85609:31:23.410161 vminfo Session 1: PID=9172 (fInt=true ): C:\Program Files\TortoiseSVN\bin\TSVNCache.exe
85709:31:23.410161 vminfo Session 1: PID=9280 (fInt=true ): C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe
85809:31:23.410161 vminfo Session 1: PID=9652 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
85909:31:23.410161 vminfo Session 1: PID=9728 (fInt=true ): C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe
86009:31:23.425919 vminfo Session 1: PID=9880 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
86109:31:23.425919 vminfo Session 1: PID=9944 (fInt=true ): C:\Windows\System32\dllhost.exe
86209:31:23.425919 vminfo Session 1: PID=8128 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17112.19011.0_x64__8wekyb3d8bbwe\Video.UI.exe
86309:31:23.425919 vminfo Session 1: PID=9528 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
86409:31:23.425919 vminfo Session 1: PID=10292 (fInt=true ): C:\Program Files\Windows Defender\MSASCuiL.exe
86509:31:23.425919 vminfo Session 1: PID=10324 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
86609:31:23.425919 vminfo Session 1: PID=10440 (fInt=true ): C:\Windows\System32\VBoxTray.exe
86709:31:23.425919 vminfo Session 1: PID=10596 (fInt=true ): C:\Users\user\Documents\Visual Studio 2017\Projects\vboxtray_mon\vboxtray_mon\bin\Release\vboxtray_mon.exe
86809:31:23.425919 vminfo Session 1: PID=10612 (fInt=true ): C:\Windows\System32\conhost.exe
86909:31:23.425919 vminfo Session 1: PID=10720 (fInt=true ): C:\Program Files (x86)\FileZilla Server\FileZilla Server Interface.exe
87009:31:23.425919 vminfo Session 1: PID=9808 (fInt=true ): C:\Windows\System32\svchost.exe
87109:31:23.425919 vminfo Session 1: PID=6716 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18011.15918.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
87209:31:23.425919 vminfo Session 1: PID=6688 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
87309:31:23.425919 vminfo Session 1: PID=10200 (fInt=true ): C:\Windows\System32\ApplicationFrameHost.exe
87409:31:23.425919 vminfo Session 1: PID=4868 (fInt=true ): C:\Windows\ImmersiveControlPanel\SystemSettings.exe
87509:31:23.425919 vminfo Session 1: PID=1444 (fInt=true ): C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe
87609:31:23.425919 vminfo Session 1: PID=9504 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
87709:31:23.425919 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/Session/1' = '#12149: cSessionProcs=31 (of 155 procs total)'
87809:31:23.425919 vminfo Adding new user=user (session=1) with 31 processes
87909:31:23.425919 vminfo Handling session 7 (of 17)
88009:31:23.425919 vminfo Session data: Name=nx, SessionID=0, LogonID=0,685607, LogonType=3
88109:31:23.425919 vminfo Handling session 8 (of 17)
88209:31:23.425919 vminfo Session data: Name=ANONYMOUS LOGON, SessionID=0, LogonID=0,649881, LogonType=3
88309:31:23.425919 vminfo Handling session 9 (of 17)
88409:31:23.425919 vminfo Session data: Name=IUSR, SessionID=0, LogonID=0,995, LogonType=5
88509:31:23.425919 vminfo Handling session 10 (of 17)
88609:31:23.425919 vminfo Session data: Name=DWM-1, SessionID=1, LogonID=0,61006, LogonType=2
88709:31:23.425919 vminfo Session LogonType=2 is supported -- looking up SID + type ...
88809:31:23.425919 vminfo SID owner type=5 not handled, skipping
88909:31:23.425919 vminfo Account User=DWM-1 is not logged in
89009:31:23.425919 vminfo Handling session 11 (of 17)
89109:31:23.425919 vminfo Session data: Name=DWM-1, SessionID=1, LogonID=0,60973, LogonType=2
89209:31:23.425919 vminfo Session LogonType=2 is supported -- looking up SID + type ...
89309:31:23.425919 vminfo SID owner type=5 not handled, skipping
89409:31:23.425919 vminfo Account User=DWM-1 is not logged in
89509:31:23.425919 vminfo Handling session 12 (of 17)
89609:31:23.425919 vminfo Session data: Name=MACHINE$, SessionID=0, LogonID=0,996, LogonType=5
89709:31:23.425919 vminfo Handling session 13 (of 17)
89809:31:23.425919 vminfo Session data: Name=LOCAL SERVICE, SessionID=0, LogonID=0,997, LogonType=5
89909:31:23.425919 vminfo Handling session 14 (of 17)
90009:31:23.425919 vminfo Session data: Name=UMFD-1, SessionID=1, LogonID=0,34521, LogonType=2
90109:31:23.425919 vminfo Session LogonType=2 is supported -- looking up SID + type ...
90209:31:23.425919 vminfo SID owner type=5 not handled, skipping
90309:31:23.425919 vminfo Account User=UMFD-1 is not logged in
90409:31:23.425919 vminfo Handling session 15 (of 17)
90509:31:23.425919 vminfo Session data: Name=UMFD-0, SessionID=0, LogonID=0,34482, LogonType=2
90609:31:23.425919 vminfo Handling session 16 (of 17)
90709:31:23.425919 vminfo Session data: Name=, SessionID=0, LogonID=0,32336, LogonType=0
90809:31:23.425919 vminfo Handling session 17 (of 17)
90909:31:23.425919 vminfo Session data: Name=MACHINE$, SessionID=0, LogonID=0,999, LogonType=0
91009:31:23.425919 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA' = '#12149: cSessions=17, cProcs=155, cUniqueUsers=2'
91109:31:23.425919 vminfo Found 2 unique logged-in user(s)
91209:31:23.425919 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/User/0' = '#12149: szName=user, sessionID=1, cProcs=31'
91309:31:23.425919 vminfo User 'user' has 31 interactive processes (session=1)
91409:31:23.425919 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/User/user@DOMAIN/UsageState' resulted in rc=VINF_NO_CHANGE
91509:31:23.425919 vminfo User 'user' (domain 'DOMAIN') is idle for 60458, fReportToHost=false
91609:31:23.425919 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/User/1' = '#12149: szName=user, sessionID=1, cProcs=31'
91709:31:23.425919 vminfo User 'user' has 31 interactive processes (session=1)
91809:31:23.425919 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/User/user@DOMAIN/UsageState' resulted in rc=VINF_NO_CHANGE
91909:31:23.425919 vminfo User 'user' (domain 'DOMAIN') is idle for 60458, fReportToHost=false
92009:31:23.425919 vminfo cUsersInList=2, pszUserList=user,user, rc=VINF_NO_CHANGE
92109:31:23.425919 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/LoggedInUsersList' resulted in rc=VINF_NO_CHANGE
92209:31:23.425919 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/LoggedInUsers' resulted in rc=VINF_NO_CHANGE
92309:31:23.425919 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/NoLoggedInUsers' resulted in rc=VINF_NO_CHANGE
92409:31:23.425919 vminfo Writing users returned with rc=VINF_NO_CHANGE
92509:31:23.441568 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/IP' resulted in rc=VINF_NO_CHANGE
92609:31:23.441568 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/Broadcast' resulted in rc=VINF_NO_CHANGE
92709:31:23.441568 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/Netmask' resulted in rc=VINF_NO_CHANGE
92809:31:23.441568 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/Status' resulted in rc=VINF_NO_CHANGE
92909:31:23.441568 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/MAC' resulted in rc=VINF_NO_CHANGE
93009:31:23.441568 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/IP' resulted in rc=VINF_NO_CHANGE
93109:31:23.441568 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/Broadcast' resulted in rc=VINF_NO_CHANGE
93209:31:23.441568 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/Netmask' resulted in rc=VINF_NO_CHANGE
93309:31:23.441568 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/Status' resulted in rc=VINF_NO_CHANGE
93409:31:23.441568 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/MAC' resulted in rc=VINF_NO_CHANGE
93509:31:23.441568 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/IP' resulted in rc=VINF_NO_CHANGE
93609:31:23.441568 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/Broadcast' resulted in rc=VINF_NO_CHANGE
93709:31:23.441568 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/Netmask' resulted in rc=VINF_NO_CHANGE
93809:31:23.441568 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/Status' resulted in rc=VINF_NO_CHANGE
93909:31:23.441568 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/MAC' resulted in rc=VINF_NO_CHANGE
94009:31:23.441568 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/IP' resulted in rc=VINF_NO_CHANGE
94109:31:23.441568 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/Broadcast' resulted in rc=VINF_NO_CHANGE
94209:31:23.441568 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/Netmask' resulted in rc=VINF_NO_CHANGE
94309:31:23.441568 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/Status' resulted in rc=VINF_NO_CHANGE
94409:31:23.441568 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/MAC' resulted in rc=VINF_NO_CHANGE
94509:31:23.441568 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/IP' resulted in rc=VINF_NO_CHANGE
94609:31:23.441568 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/Broadcast' resulted in rc=VINF_NO_CHANGE
94709:31:23.441568 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/Netmask' resulted in rc=VINF_NO_CHANGE
94809:31:23.441568 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/Status' resulted in rc=VINF_NO_CHANGE
94909:31:23.441568 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/MAC' resulted in rc=VINF_NO_CHANGE
95009:31:23.441568 vminfo [PropCache 00007ff6b2962520]: Written '/VirtualBox/GuestInfo/Net/Count'='5' (flags: 6), rc=VINF_SUCCESS
95109:31:23.441568 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/Count' resulted in rc=VINF_SUCCESS
95209:31:23.441568 vminfo Guest Property: /VirtualBox/HostInfo/VRDP/ActiveClient not found
95309:31:23.441568 vminfo VRDP: Handling location awareness done
95409:31:26.128332 timesync vgsvcTimeSyncWorker: Host: 2019-02-26T09:31:26.004000000Z (MinAdjust: 200 ms), Guest: 2019-02-26T09:31:26.128332500Z => -124 332 500 ns drift
95509:31:28.459550 vminfo Found 17 sessions
95609:31:28.474800 vminfo Error: Get token class 'user' for process 0 failed, rc=VERR_INVALID_PARAMETER
95709:31:28.474800 vminfo Error: Get token class 'groups' for process 0 failed, rc=VERR_INVALID_PARAMETER
95809:31:28.474800 vminfo Error: Get token class 'statistics' for process 0 failed, rc=VERR_INVALID_PARAMETER
95909:31:28.474800 vminfo Error: Get token class 'user' for process 4 failed, rc=VERR_ACCESS_DENIED
96009:31:28.474800 vminfo Error: Get token class 'groups' for process 4 failed, rc=VERR_ACCESS_DENIED
96109:31:28.474800 vminfo Error: Get token class 'statistics' for process 4 failed, rc=VERR_ACCESS_DENIED
96209:31:28.474800 vminfo Error: Get token class 'user' for process 104 failed, rc=VERR_ACCESS_DENIED
96309:31:28.474800 vminfo Error: Get token class 'groups' for process 104 failed, rc=VERR_ACCESS_DENIED
96409:31:28.474800 vminfo Error: Get token class 'statistics' for process 104 failed, rc=VERR_ACCESS_DENIED
96509:31:28.474800 vminfo Error: Get token class 'user' for process 472 failed, rc=VERR_ACCESS_DENIED
96609:31:28.474800 vminfo Error: Get token class 'groups' for process 472 failed, rc=VERR_ACCESS_DENIED
96709:31:28.474800 vminfo Error: Get token class 'statistics' for process 472 failed, rc=VERR_ACCESS_DENIED
96809:31:28.474800 vminfo Error: Get token class 'user' for process 676 failed, rc=VERR_ACCESS_DENIED
96909:31:28.474800 vminfo Error: Get token class 'groups' for process 676 failed, rc=VERR_ACCESS_DENIED
97009:31:28.474800 vminfo Error: Get token class 'statistics' for process 676 failed, rc=VERR_ACCESS_DENIED
97109:31:28.474800 vminfo Error: Get token class 'user' for process 756 failed, rc=VERR_ACCESS_DENIED
97209:31:28.474800 vminfo Error: Get token class 'groups' for process 756 failed, rc=VERR_ACCESS_DENIED
97309:31:28.474800 vminfo Error: Get token class 'statistics' for process 756 failed, rc=VERR_ACCESS_DENIED
97409:31:28.474800 vminfo Error: Get token class 'user' for process 768 failed, rc=VERR_ACCESS_DENIED
97509:31:28.474800 vminfo Error: Get token class 'groups' for process 768 failed, rc=VERR_ACCESS_DENIED
97609:31:28.474800 vminfo Error: Get token class 'statistics' for process 768 failed, rc=VERR_ACCESS_DENIED
97709:31:28.474800 vminfo Error: Get token class 'user' for process 876 failed, rc=VERR_ACCESS_DENIED
97809:31:28.474800 vminfo Error: Get token class 'groups' for process 876 failed, rc=VERR_ACCESS_DENIED
97909:31:28.474800 vminfo Error: Get token class 'statistics' for process 876 failed, rc=VERR_ACCESS_DENIED
98009:31:28.474800 vminfo Error: Get token class 'user' for process 2532 failed, rc=VERR_ACCESS_DENIED
98109:31:28.474800 vminfo Error: Get token class 'groups' for process 2532 failed, rc=VERR_ACCESS_DENIED
98209:31:28.474800 vminfo Error: Get token class 'statistics' for process 2532 failed, rc=VERR_ACCESS_DENIED
98309:31:28.474800 vminfo Error: Get token class 'user' for process 4136 failed, rc=VERR_ACCESS_DENIED
98409:31:28.474800 vminfo Error: Get token class 'groups' for process 4136 failed, rc=VERR_ACCESS_DENIED
98509:31:28.474800 vminfo Error: Get token class 'statistics' for process 4136 failed, rc=VERR_ACCESS_DENIED
98609:31:28.474800 vminfo Error: Get token class 'user' for process 5212 failed, rc=VERR_ACCESS_DENIED
98709:31:28.474800 vminfo Error: Get token class 'groups' for process 5212 failed, rc=VERR_ACCESS_DENIED
98809:31:28.474800 vminfo Error: Get token class 'statistics' for process 5212 failed, rc=VERR_ACCESS_DENIED
98909:31:28.474800 vminfo Handling session 1 (of 17)
99009:31:28.492736 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2145999, LogonType=3
99109:31:28.492736 vminfo Handling session 2 (of 17)
99209:31:28.492736 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2113823, LogonType=3
99309:31:28.492736 vminfo Handling session 3 (of 17)
99409:31:28.492736 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2041868, LogonType=3
99509:31:28.492736 vminfo Handling session 4 (of 17)
99609:31:28.492736 vminfo Session data: Name=nx, SessionID=0, LogonID=0,1997776, LogonType=3
99709:31:28.492736 vminfo Handling session 5 (of 17)
99809:31:28.509971 vminfo Session data: Name=user, SessionID=1, LogonID=0,1970648, LogonType=2
99909:31:28.509971 vminfo Session LogonType=2 is supported -- looking up SID + type ...
100009:31:28.509971 vminfo Account User=user, Session=1, LogonID=0,1970648, AuthPkg=Negotiate, Domain=DOMAIN
100109:31:28.509971 vminfo Account User=user, WTSConnectState=0 (4)
100209:31:28.509971 vminfo Account User=user using TCS/RDP, state=0
100309:31:28.509971 vminfo Account User=user is logged in
100409:31:28.509971 vminfo Handling user=user, domain=DOMAIN, package=Negotiate, session=1
100509:31:28.509971 vminfo Session 1: PID=6784 (fInt=true ): C:\Windows\System32\svchost.exe
100609:31:28.509971 vminfo Session 1: PID=264 (fInt=true ): C:\Windows\System32\sihost.exe
100709:31:28.509971 vminfo Session 1: PID=3148 (fInt=true ): C:\Windows\System32\svchost.exe
100809:31:28.509971 vminfo Session 1: PID=7176 (fInt=true ): C:\Windows\System32\taskhostw.exe
100909:31:28.509971 vminfo Session 1: PID=7268 (fInt=true ): C:\Windows\System32\ctfmon.exe
101009:31:28.509971 vminfo Session 1: PID=8732 (fInt=true ): C:\Windows\explorer.exe
101109:31:28.509971 vminfo Session 1: PID=9016 (fInt=true ): C:\Program Files (x86)\NoMachine\bin\nxclient.bin
101209:31:28.509971 vminfo Session 1: PID=8260 (fInt=true ): C:\Program Files\McAfee\Agent\x86\UpdaterUI.exe
101309:31:28.509971 vminfo Session 1: PID=8828 (fInt=true ): C:\Program Files\Classic Shell\ClassicStartMenu.exe
101409:31:28.509971 vminfo Session 1: PID=8488 (fInt=true ): C:\Program Files\McAfee\Agent\x86\mctray.exe
101509:31:28.509971 vminfo Session 1: PID=9172 (fInt=true ): C:\Program Files\TortoiseSVN\bin\TSVNCache.exe
101609:31:28.509971 vminfo Session 1: PID=9280 (fInt=true ): C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe
101709:31:28.509971 vminfo Session 1: PID=9652 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
101809:31:28.509971 vminfo Session 1: PID=9728 (fInt=true ): C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe
101909:31:28.509971 vminfo Session 1: PID=9880 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
102009:31:28.509971 vminfo Session 1: PID=9944 (fInt=true ): C:\Windows\System32\dllhost.exe
102109:31:28.509971 vminfo Session 1: PID=8128 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17112.19011.0_x64__8wekyb3d8bbwe\Video.UI.exe
102209:31:28.509971 vminfo Session 1: PID=9528 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
102309:31:28.509971 vminfo Session 1: PID=10292 (fInt=true ): C:\Program Files\Windows Defender\MSASCuiL.exe
102409:31:28.527837 vminfo Session 1: PID=10324 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
102509:31:28.527837 vminfo Session 1: PID=10440 (fInt=true ): C:\Windows\System32\VBoxTray.exe
102609:31:28.527837 vminfo Session 1: PID=10596 (fInt=true ): C:\Users\user\Documents\Visual Studio 2017\Projects\vboxtray_mon\vboxtray_mon\bin\Release\vboxtray_mon.exe
102709:31:28.527837 vminfo Session 1: PID=10612 (fInt=true ): C:\Windows\System32\conhost.exe
102809:31:28.527837 vminfo Session 1: PID=10720 (fInt=true ): C:\Program Files (x86)\FileZilla Server\FileZilla Server Interface.exe
102909:31:28.527837 vminfo Session 1: PID=9808 (fInt=true ): C:\Windows\System32\svchost.exe
103009:31:28.527837 vminfo Session 1: PID=6716 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18011.15918.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
103109:31:28.527837 vminfo Session 1: PID=6688 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
103209:31:28.527837 vminfo Session 1: PID=10200 (fInt=true ): C:\Windows\System32\ApplicationFrameHost.exe
103309:31:28.527837 vminfo Session 1: PID=4868 (fInt=true ): C:\Windows\ImmersiveControlPanel\SystemSettings.exe
103409:31:28.527837 vminfo Session 1: PID=1444 (fInt=true ): C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe
103509:31:28.527837 vminfo Session 1: PID=9504 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
103609:31:28.527837 vminfo Session 1: PID=5596 (fInt=true ): C:\Windows\System32\backgroundTaskHost.exe
103709:31:28.527837 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/Session/1' = '#12150: cSessionProcs=32 (of 156 procs total)'
103809:31:28.527837 vminfo Adding new user=user (session=1) with 32 processes
103909:31:28.527837 vminfo Handling session 6 (of 17)
104009:31:28.527837 vminfo Session data: Name=user, SessionID=1, LogonID=0,1970599, LogonType=2
104109:31:28.527837 vminfo Session LogonType=2 is supported -- looking up SID + type ...
104209:31:28.527837 vminfo Account User=user, Session=1, LogonID=0,1970599, AuthPkg=Kerberos, Domain=DOMAIN
104309:31:28.527837 vminfo Account User=user, WTSConnectState=0 (4)
104409:31:28.527837 vminfo Account User=user using TCS/RDP, state=0
104509:31:28.527837 vminfo Account User=user is logged in
104609:31:28.527837 vminfo Handling user=user, domain=DOMAIN, package=Kerberos, session=1
104709:31:28.527837 vminfo Session 1: PID=6784 (fInt=true ): C:\Windows\System32\svchost.exe
104809:31:28.527837 vminfo Session 1: PID=264 (fInt=true ): C:\Windows\System32\sihost.exe
104909:31:28.527837 vminfo Session 1: PID=3148 (fInt=true ): C:\Windows\System32\svchost.exe
105009:31:28.527837 vminfo Session 1: PID=7176 (fInt=true ): C:\Windows\System32\taskhostw.exe
105109:31:28.527837 vminfo Session 1: PID=7268 (fInt=true ): C:\Windows\System32\ctfmon.exe
105209:31:28.527837 vminfo Session 1: PID=8732 (fInt=true ): C:\Windows\explorer.exe
105309:31:28.527837 vminfo Session 1: PID=9016 (fInt=true ): C:\Program Files (x86)\NoMachine\bin\nxclient.bin
105409:31:28.527837 vminfo Session 1: PID=8260 (fInt=true ): C:\Program Files\McAfee\Agent\x86\UpdaterUI.exe
105509:31:28.527837 vminfo Session 1: PID=8828 (fInt=true ): C:\Program Files\Classic Shell\ClassicStartMenu.exe
105609:31:28.527837 vminfo Session 1: PID=8488 (fInt=true ): C:\Program Files\McAfee\Agent\x86\mctray.exe
105709:31:28.527837 vminfo Session 1: PID=9172 (fInt=true ): C:\Program Files\TortoiseSVN\bin\TSVNCache.exe
105809:31:28.527837 vminfo Session 1: PID=9280 (fInt=true ): C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe
105909:31:28.527837 vminfo Session 1: PID=9652 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
106009:31:28.527837 vminfo Session 1: PID=9728 (fInt=true ): C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe
106109:31:28.527837 vminfo Session 1: PID=9880 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
106209:31:28.527837 vminfo Session 1: PID=9944 (fInt=true ): C:\Windows\System32\dllhost.exe
106309:31:28.527837 vminfo Session 1: PID=8128 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17112.19011.0_x64__8wekyb3d8bbwe\Video.UI.exe
106409:31:28.527837 vminfo Session 1: PID=9528 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
106509:31:28.527837 vminfo Session 1: PID=10292 (fInt=true ): C:\Program Files\Windows Defender\MSASCuiL.exe
106609:31:28.527837 vminfo Session 1: PID=10324 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
106709:31:28.527837 vminfo Session 1: PID=10440 (fInt=true ): C:\Windows\System32\VBoxTray.exe
106809:31:28.527837 vminfo Session 1: PID=10596 (fInt=true ): C:\Users\user\Documents\Visual Studio 2017\Projects\vboxtray_mon\vboxtray_mon\bin\Release\vboxtray_mon.exe
106909:31:28.527837 vminfo Session 1: PID=10612 (fInt=true ): C:\Windows\System32\conhost.exe
107009:31:28.527837 vminfo Session 1: PID=10720 (fInt=true ): C:\Program Files (x86)\FileZilla Server\FileZilla Server Interface.exe
107109:31:28.527837 vminfo Session 1: PID=9808 (fInt=true ): C:\Windows\System32\svchost.exe
107209:31:28.527837 vminfo Session 1: PID=6716 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18011.15918.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
107309:31:28.527837 vminfo Session 1: PID=6688 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
107409:31:28.527837 vminfo Session 1: PID=10200 (fInt=true ): C:\Windows\System32\ApplicationFrameHost.exe
107509:31:28.527837 vminfo Session 1: PID=4868 (fInt=true ): C:\Windows\ImmersiveControlPanel\SystemSettings.exe
107609:31:28.527837 vminfo Session 1: PID=1444 (fInt=true ): C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe
107709:31:28.527837 vminfo Session 1: PID=9504 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
107809:31:28.527837 vminfo Session 1: PID=5596 (fInt=true ): C:\Windows\System32\backgroundTaskHost.exe
107909:31:28.527837 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/Session/1' = '#12150: cSessionProcs=32 (of 156 procs total)'
108009:31:28.527837 vminfo Adding new user=user (session=1) with 32 processes
108109:31:28.527837 vminfo Handling session 7 (of 17)
108209:31:28.527837 vminfo Session data: Name=nx, SessionID=0, LogonID=0,685607, LogonType=3
108309:31:28.527837 vminfo Handling session 8 (of 17)
108409:31:28.527837 vminfo Session data: Name=ANONYMOUS LOGON, SessionID=0, LogonID=0,649881, LogonType=3
108509:31:28.527837 vminfo Handling session 9 (of 17)
108609:31:28.527837 vminfo Session data: Name=IUSR, SessionID=0, LogonID=0,995, LogonType=5
108709:31:28.527837 vminfo Handling session 10 (of 17)
108809:31:28.527837 vminfo Session data: Name=DWM-1, SessionID=1, LogonID=0,61006, LogonType=2
108909:31:28.527837 vminfo Session LogonType=2 is supported -- looking up SID + type ...
109009:31:28.527837 vminfo SID owner type=5 not handled, skipping
109109:31:28.547514 vminfo Account User=DWM-1 is not logged in
109209:31:28.547514 vminfo Handling session 11 (of 17)
109309:31:28.547514 vminfo Session data: Name=DWM-1, SessionID=1, LogonID=0,60973, LogonType=2
109409:31:28.547514 vminfo Session LogonType=2 is supported -- looking up SID + type ...
109509:31:28.547514 vminfo SID owner type=5 not handled, skipping
109609:31:28.547514 vminfo Account User=DWM-1 is not logged in
109709:31:28.547514 vminfo Handling session 12 (of 17)
109809:31:28.547514 vminfo Session data: Name=MACHINE$, SessionID=0, LogonID=0,996, LogonType=5
109909:31:28.547514 vminfo Handling session 13 (of 17)
110009:31:28.547514 vminfo Session data: Name=LOCAL SERVICE, SessionID=0, LogonID=0,997, LogonType=5
110109:31:28.547514 vminfo Handling session 14 (of 17)
110209:31:28.547514 vminfo Session data: Name=UMFD-1, SessionID=1, LogonID=0,34521, LogonType=2
110309:31:28.547514 vminfo Session LogonType=2 is supported -- looking up SID + type ...
110409:31:28.547514 vminfo SID owner type=5 not handled, skipping
110509:31:28.547514 vminfo Account User=UMFD-1 is not logged in
110609:31:28.547514 vminfo Handling session 15 (of 17)
110709:31:28.547514 vminfo Session data: Name=UMFD-0, SessionID=0, LogonID=0,34482, LogonType=2
110809:31:28.547514 vminfo Handling session 16 (of 17)
110909:31:28.563021 vminfo Session data: Name=, SessionID=0, LogonID=0,32336, LogonType=0
111009:31:28.563021 vminfo Handling session 17 (of 17)
111109:31:28.563021 vminfo Session data: Name=MACHINE$, SessionID=0, LogonID=0,999, LogonType=0
111209:31:28.563021 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA' = '#12150: cSessions=17, cProcs=156, cUniqueUsers=2'
111309:31:28.563021 vminfo Found 2 unique logged-in user(s)
111409:31:28.563021 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/User/0' = '#12150: szName=user, sessionID=1, cProcs=32'
111509:31:28.563021 vminfo User 'user' has 32 interactive processes (session=1)
111609:31:28.563021 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/User/user@DOMAIN/UsageState' resulted in rc=VINF_NO_CHANGE
111709:31:28.563021 vminfo User 'user' (domain 'DOMAIN') is idle for 60463, fReportToHost=false
111809:31:28.563021 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/User/1' = '#12150: szName=user, sessionID=1, cProcs=32'
111909:31:28.563021 vminfo User 'user' has 32 interactive processes (session=1)
112009:31:28.563021 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/User/user@DOMAIN/UsageState' resulted in rc=VINF_NO_CHANGE
112109:31:28.563021 vminfo User 'user' (domain 'DOMAIN') is idle for 60463, fReportToHost=false
112209:31:28.563021 vminfo cUsersInList=2, pszUserList=user,user, rc=VINF_NO_CHANGE
112309:31:28.563021 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/LoggedInUsersList' resulted in rc=VINF_NO_CHANGE
112409:31:28.563021 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/LoggedInUsers' resulted in rc=VINF_NO_CHANGE
112509:31:28.563021 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/NoLoggedInUsers' resulted in rc=VINF_NO_CHANGE
112609:31:28.563021 vminfo Writing users returned with rc=VINF_NO_CHANGE
112709:31:28.580423 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/IP' resulted in rc=VINF_NO_CHANGE
112809:31:28.580423 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/Broadcast' resulted in rc=VINF_NO_CHANGE
112909:31:28.580423 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/Netmask' resulted in rc=VINF_NO_CHANGE
113009:31:28.580423 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/Status' resulted in rc=VINF_NO_CHANGE
113109:31:28.580423 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/MAC' resulted in rc=VINF_NO_CHANGE
113209:31:28.580423 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/IP' resulted in rc=VINF_NO_CHANGE
113309:31:28.580423 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/Broadcast' resulted in rc=VINF_NO_CHANGE
113409:31:28.580423 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/Netmask' resulted in rc=VINF_NO_CHANGE
113509:31:28.580423 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/Status' resulted in rc=VINF_NO_CHANGE
113609:31:28.580423 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/MAC' resulted in rc=VINF_NO_CHANGE
113709:31:28.580423 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/IP' resulted in rc=VINF_NO_CHANGE
113809:31:28.580423 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/Broadcast' resulted in rc=VINF_NO_CHANGE
113909:31:28.580423 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/Netmask' resulted in rc=VINF_NO_CHANGE
114009:31:28.580423 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/Status' resulted in rc=VINF_NO_CHANGE
114109:31:28.580423 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/MAC' resulted in rc=VINF_NO_CHANGE
114209:31:28.580423 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/IP' resulted in rc=VINF_NO_CHANGE
114309:31:28.580423 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/Broadcast' resulted in rc=VINF_NO_CHANGE
114409:31:28.580423 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/Netmask' resulted in rc=VINF_NO_CHANGE
114509:31:28.580423 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/Status' resulted in rc=VINF_NO_CHANGE
114609:31:28.580423 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/MAC' resulted in rc=VINF_NO_CHANGE
114709:31:28.580423 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/IP' resulted in rc=VINF_NO_CHANGE
114809:31:28.580423 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/Broadcast' resulted in rc=VINF_NO_CHANGE
114909:31:28.580423 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/Netmask' resulted in rc=VINF_NO_CHANGE
115009:31:28.580423 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/Status' resulted in rc=VINF_NO_CHANGE
115109:31:28.580423 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/MAC' resulted in rc=VINF_NO_CHANGE
115209:31:28.580423 vminfo [PropCache 00007ff6b2962520]: Written '/VirtualBox/GuestInfo/Net/Count'='5' (flags: 6), rc=VINF_SUCCESS
115309:31:28.580423 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/Count' resulted in rc=VINF_SUCCESS
115409:31:28.580423 vminfo Guest Property: /VirtualBox/HostInfo/VRDP/ActiveClient not found
115509:31:28.580423 vminfo VRDP: Handling location awareness done
115609:31:30.247984 pagesharing vgsvcPageSharingWorkerProcess: enabled=0
115709:31:33.608306 vminfo Found 17 sessions
115809:31:33.608306 vminfo Error: Get token class 'user' for process 0 failed, rc=VERR_INVALID_PARAMETER
115909:31:33.608306 vminfo Error: Get token class 'groups' for process 0 failed, rc=VERR_INVALID_PARAMETER
116009:31:33.608306 vminfo Error: Get token class 'statistics' for process 0 failed, rc=VERR_INVALID_PARAMETER
116109:31:33.608306 vminfo Error: Get token class 'user' for process 4 failed, rc=VERR_ACCESS_DENIED
116209:31:33.608306 vminfo Error: Get token class 'groups' for process 4 failed, rc=VERR_ACCESS_DENIED
116309:31:33.608306 vminfo Error: Get token class 'statistics' for process 4 failed, rc=VERR_ACCESS_DENIED
116409:31:33.608306 vminfo Error: Get token class 'user' for process 104 failed, rc=VERR_ACCESS_DENIED
116509:31:33.608306 vminfo Error: Get token class 'groups' for process 104 failed, rc=VERR_ACCESS_DENIED
116609:31:33.608306 vminfo Error: Get token class 'statistics' for process 104 failed, rc=VERR_ACCESS_DENIED
116709:31:33.608306 vminfo Error: Get token class 'user' for process 472 failed, rc=VERR_ACCESS_DENIED
116809:31:33.608306 vminfo Error: Get token class 'groups' for process 472 failed, rc=VERR_ACCESS_DENIED
116909:31:33.608306 vminfo Error: Get token class 'statistics' for process 472 failed, rc=VERR_ACCESS_DENIED
117009:31:33.608306 vminfo Error: Get token class 'user' for process 676 failed, rc=VERR_ACCESS_DENIED
117109:31:33.608306 vminfo Error: Get token class 'groups' for process 676 failed, rc=VERR_ACCESS_DENIED
117209:31:33.608306 vminfo Error: Get token class 'statistics' for process 676 failed, rc=VERR_ACCESS_DENIED
117309:31:33.608306 vminfo Error: Get token class 'user' for process 756 failed, rc=VERR_ACCESS_DENIED
117409:31:33.608306 vminfo Error: Get token class 'groups' for process 756 failed, rc=VERR_ACCESS_DENIED
117509:31:33.608306 vminfo Error: Get token class 'statistics' for process 756 failed, rc=VERR_ACCESS_DENIED
117609:31:33.608306 vminfo Error: Get token class 'user' for process 768 failed, rc=VERR_ACCESS_DENIED
117709:31:33.608306 vminfo Error: Get token class 'groups' for process 768 failed, rc=VERR_ACCESS_DENIED
117809:31:33.608306 vminfo Error: Get token class 'statistics' for process 768 failed, rc=VERR_ACCESS_DENIED
117909:31:33.608306 vminfo Error: Get token class 'user' for process 876 failed, rc=VERR_ACCESS_DENIED
118009:31:33.608306 vminfo Error: Get token class 'groups' for process 876 failed, rc=VERR_ACCESS_DENIED
118109:31:33.608306 vminfo Error: Get token class 'statistics' for process 876 failed, rc=VERR_ACCESS_DENIED
118209:31:33.608306 vminfo Error: Get token class 'user' for process 2532 failed, rc=VERR_ACCESS_DENIED
118309:31:33.608306 vminfo Error: Get token class 'groups' for process 2532 failed, rc=VERR_ACCESS_DENIED
118409:31:33.608306 vminfo Error: Get token class 'statistics' for process 2532 failed, rc=VERR_ACCESS_DENIED
118509:31:33.608306 vminfo Error: Get token class 'user' for process 4136 failed, rc=VERR_ACCESS_DENIED
118609:31:33.608306 vminfo Error: Get token class 'groups' for process 4136 failed, rc=VERR_ACCESS_DENIED
118709:31:33.608306 vminfo Error: Get token class 'statistics' for process 4136 failed, rc=VERR_ACCESS_DENIED
118809:31:33.608306 vminfo Error: Get token class 'user' for process 5212 failed, rc=VERR_ACCESS_DENIED
118909:31:33.608306 vminfo Error: Get token class 'groups' for process 5212 failed, rc=VERR_ACCESS_DENIED
119009:31:33.608306 vminfo Error: Get token class 'statistics' for process 5212 failed, rc=VERR_ACCESS_DENIED
119109:31:33.608306 vminfo Handling session 1 (of 17)
119209:31:33.608306 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2145999, LogonType=3
119309:31:33.608306 vminfo Handling session 2 (of 17)
119409:31:33.608306 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2113823, LogonType=3
119509:31:33.608306 vminfo Handling session 3 (of 17)
119609:31:33.608306 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2041868, LogonType=3
119709:31:33.608306 vminfo Handling session 4 (of 17)
119809:31:33.608306 vminfo Session data: Name=nx, SessionID=0, LogonID=0,1997776, LogonType=3
119909:31:33.608306 vminfo Handling session 5 (of 17)
120009:31:33.608306 vminfo Session data: Name=user, SessionID=1, LogonID=0,1970648, LogonType=2
120109:31:33.608306 vminfo Session LogonType=2 is supported -- looking up SID + type ...
120209:31:33.608306 vminfo Account User=user, Session=1, LogonID=0,1970648, AuthPkg=Negotiate, Domain=DOMAIN
120309:31:33.623180 vminfo Account User=user, WTSConnectState=0 (4)
120409:31:33.623180 vminfo Account User=user using TCS/RDP, state=0
120509:31:33.623180 vminfo Account User=user is logged in
120609:31:33.623180 vminfo Handling user=user, domain=DOMAIN, package=Negotiate, session=1
120709:31:33.623180 vminfo Session 1: PID=6784 (fInt=true ): C:\Windows\System32\svchost.exe
120809:31:33.623180 vminfo Session 1: PID=264 (fInt=true ): C:\Windows\System32\sihost.exe
120909:31:33.623180 vminfo Session 1: PID=3148 (fInt=true ): C:\Windows\System32\svchost.exe
121009:31:33.623180 vminfo Session 1: PID=7176 (fInt=true ): C:\Windows\System32\taskhostw.exe
121109:31:33.623180 vminfo Session 1: PID=7268 (fInt=true ): C:\Windows\System32\ctfmon.exe
121209:31:33.623180 vminfo Session 1: PID=8732 (fInt=true ): C:\Windows\explorer.exe
121309:31:33.623180 vminfo Session 1: PID=9016 (fInt=true ): C:\Program Files (x86)\NoMachine\bin\nxclient.bin
121409:31:33.623180 vminfo Session 1: PID=8260 (fInt=true ): C:\Program Files\McAfee\Agent\x86\UpdaterUI.exe
121509:31:33.623180 vminfo Session 1: PID=8828 (fInt=true ): C:\Program Files\Classic Shell\ClassicStartMenu.exe
121609:31:33.623180 vminfo Session 1: PID=8488 (fInt=true ): C:\Program Files\McAfee\Agent\x86\mctray.exe
121709:31:33.623180 vminfo Session 1: PID=9172 (fInt=true ): C:\Program Files\TortoiseSVN\bin\TSVNCache.exe
121809:31:33.623180 vminfo Session 1: PID=9280 (fInt=true ): C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe
121909:31:33.623180 vminfo Session 1: PID=9652 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
122009:31:33.623180 vminfo Session 1: PID=9728 (fInt=true ): C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe
122109:31:33.623180 vminfo Session 1: PID=9880 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
122209:31:33.623180 vminfo Session 1: PID=9944 (fInt=true ): C:\Windows\System32\dllhost.exe
122309:31:33.623180 vminfo Session 1: PID=8128 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17112.19011.0_x64__8wekyb3d8bbwe\Video.UI.exe
122409:31:33.623180 vminfo Session 1: PID=9528 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
122509:31:33.623180 vminfo Session 1: PID=10292 (fInt=true ): C:\Program Files\Windows Defender\MSASCuiL.exe
122609:31:33.623180 vminfo Session 1: PID=10324 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
122709:31:33.623180 vminfo Session 1: PID=10440 (fInt=true ): C:\Windows\System32\VBoxTray.exe
122809:31:33.623180 vminfo Session 1: PID=10596 (fInt=true ): C:\Users\user\Documents\Visual Studio 2017\Projects\vboxtray_mon\vboxtray_mon\bin\Release\vboxtray_mon.exe
122909:31:33.623180 vminfo Session 1: PID=10612 (fInt=true ): C:\Windows\System32\conhost.exe
123009:31:33.623180 vminfo Session 1: PID=10720 (fInt=true ): C:\Program Files (x86)\FileZilla Server\FileZilla Server Interface.exe
123109:31:33.623180 vminfo Session 1: PID=9808 (fInt=true ): C:\Windows\System32\svchost.exe
123209:31:33.623180 vminfo Session 1: PID=6716 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18011.15918.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
123309:31:33.623180 vminfo Session 1: PID=6688 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
123409:31:33.623180 vminfo Session 1: PID=10200 (fInt=true ): C:\Windows\System32\ApplicationFrameHost.exe
123509:31:33.623180 vminfo Session 1: PID=4868 (fInt=true ): C:\Windows\ImmersiveControlPanel\SystemSettings.exe
123609:31:33.623180 vminfo Session 1: PID=1444 (fInt=true ): C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe
123709:31:33.623180 vminfo Session 1: PID=9504 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
123809:31:33.623180 vminfo Session 1: PID=5596 (fInt=true ): C:\Windows\System32\backgroundTaskHost.exe
123909:31:33.623180 vminfo Session 1: PID=10840 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
124009:31:33.623180 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/Session/1' = '#12151: cSessionProcs=33 (of 157 procs total)'
124109:31:33.623180 vminfo Adding new user=user (session=1) with 33 processes
124209:31:33.623180 vminfo Handling session 6 (of 17)
124309:31:33.623180 vminfo Session data: Name=user, SessionID=1, LogonID=0,1970599, LogonType=2
124409:31:33.623180 vminfo Session LogonType=2 is supported -- looking up SID + type ...
124509:31:33.623180 vminfo Account User=user, Session=1, LogonID=0,1970599, AuthPkg=Kerberos, Domain=DOMAIN
124609:31:33.623180 vminfo Account User=user, WTSConnectState=0 (4)
124709:31:33.623180 vminfo Account User=user using TCS/RDP, state=0
124809:31:33.623180 vminfo Account User=user is logged in
124909:31:33.623180 vminfo Handling user=user, domain=DOMAIN, package=Kerberos, session=1
125009:31:33.623180 vminfo Session 1: PID=6784 (fInt=true ): C:\Windows\System32\svchost.exe
125109:31:33.623180 vminfo Session 1: PID=264 (fInt=true ): C:\Windows\System32\sihost.exe
125209:31:33.623180 vminfo Session 1: PID=3148 (fInt=true ): C:\Windows\System32\svchost.exe
125309:31:33.623180 vminfo Session 1: PID=7176 (fInt=true ): C:\Windows\System32\taskhostw.exe
125409:31:33.623180 vminfo Session 1: PID=7268 (fInt=true ): C:\Windows\System32\ctfmon.exe
125509:31:33.623180 vminfo Session 1: PID=8732 (fInt=true ): C:\Windows\explorer.exe
125609:31:33.623180 vminfo Session 1: PID=9016 (fInt=true ): C:\Program Files (x86)\NoMachine\bin\nxclient.bin
125709:31:33.623180 vminfo Session 1: PID=8260 (fInt=true ): C:\Program Files\McAfee\Agent\x86\UpdaterUI.exe
125809:31:33.623180 vminfo Session 1: PID=8828 (fInt=true ): C:\Program Files\Classic Shell\ClassicStartMenu.exe
125909:31:33.623180 vminfo Session 1: PID=8488 (fInt=true ): C:\Program Files\McAfee\Agent\x86\mctray.exe
126009:31:33.623180 vminfo Session 1: PID=9172 (fInt=true ): C:\Program Files\TortoiseSVN\bin\TSVNCache.exe
126109:31:33.623180 vminfo Session 1: PID=9280 (fInt=true ): C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe
126209:31:33.623180 vminfo Session 1: PID=9652 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
126309:31:33.623180 vminfo Session 1: PID=9728 (fInt=true ): C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe
126409:31:33.623180 vminfo Session 1: PID=9880 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
126509:31:33.623180 vminfo Session 1: PID=9944 (fInt=true ): C:\Windows\System32\dllhost.exe
126609:31:33.623180 vminfo Session 1: PID=8128 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17112.19011.0_x64__8wekyb3d8bbwe\Video.UI.exe
126709:31:33.623180 vminfo Session 1: PID=9528 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
126809:31:33.623180 vminfo Session 1: PID=10292 (fInt=true ): C:\Program Files\Windows Defender\MSASCuiL.exe
126909:31:33.623180 vminfo Session 1: PID=10324 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
127009:31:33.623180 vminfo Session 1: PID=10440 (fInt=true ): C:\Windows\System32\VBoxTray.exe
127109:31:33.623180 vminfo Session 1: PID=10596 (fInt=true ): C:\Users\user\Documents\Visual Studio 2017\Projects\vboxtray_mon\vboxtray_mon\bin\Release\vboxtray_mon.exe
127209:31:33.623180 vminfo Session 1: PID=10612 (fInt=true ): C:\Windows\System32\conhost.exe
127309:31:33.623180 vminfo Session 1: PID=10720 (fInt=true ): C:\Program Files (x86)\FileZilla Server\FileZilla Server Interface.exe
127409:31:33.623180 vminfo Session 1: PID=9808 (fInt=true ): C:\Windows\System32\svchost.exe
127509:31:33.638832 vminfo Session 1: PID=6716 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18011.15918.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
127609:31:33.638832 vminfo Session 1: PID=6688 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
127709:31:33.638832 vminfo Session 1: PID=10200 (fInt=true ): C:\Windows\System32\ApplicationFrameHost.exe
127809:31:33.638832 vminfo Session 1: PID=4868 (fInt=true ): C:\Windows\ImmersiveControlPanel\SystemSettings.exe
127909:31:33.638832 vminfo Session 1: PID=1444 (fInt=true ): C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe
128009:31:33.638832 vminfo Session 1: PID=9504 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
128109:31:33.638832 vminfo Session 1: PID=5596 (fInt=true ): C:\Windows\System32\backgroundTaskHost.exe
128209:31:33.638832 vminfo Session 1: PID=10840 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
128309:31:33.638832 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/Session/1' = '#12151: cSessionProcs=33 (of 157 procs total)'
128409:31:33.638832 vminfo Adding new user=user (session=1) with 33 processes
128509:31:33.638832 vminfo Handling session 7 (of 17)
128609:31:33.638832 vminfo Session data: Name=nx, SessionID=0, LogonID=0,685607, LogonType=3
128709:31:33.638832 vminfo Handling session 8 (of 17)
128809:31:33.638832 vminfo Session data: Name=ANONYMOUS LOGON, SessionID=0, LogonID=0,649881, LogonType=3
128909:31:33.638832 vminfo Handling session 9 (of 17)
129009:31:33.638832 vminfo Session data: Name=IUSR, SessionID=0, LogonID=0,995, LogonType=5
129109:31:33.638832 vminfo Handling session 10 (of 17)
129209:31:33.638832 vminfo Session data: Name=DWM-1, SessionID=1, LogonID=0,61006, LogonType=2
129309:31:33.638832 vminfo Session LogonType=2 is supported -- looking up SID + type ...
129409:31:33.638832 vminfo SID owner type=5 not handled, skipping
129509:31:33.638832 vminfo Account User=DWM-1 is not logged in
129609:31:33.638832 vminfo Handling session 11 (of 17)
129709:31:33.638832 vminfo Session data: Name=DWM-1, SessionID=1, LogonID=0,60973, LogonType=2
129809:31:33.638832 vminfo Session LogonType=2 is supported -- looking up SID + type ...
129909:31:33.638832 vminfo SID owner type=5 not handled, skipping
130009:31:33.638832 vminfo Account User=DWM-1 is not logged in
130109:31:33.638832 vminfo Handling session 12 (of 17)
130209:31:33.638832 vminfo Session data: Name=MACHINE$, SessionID=0, LogonID=0,996, LogonType=5
130309:31:33.638832 vminfo Handling session 13 (of 17)
130409:31:33.638832 vminfo Session data: Name=LOCAL SERVICE, SessionID=0, LogonID=0,997, LogonType=5
130509:31:33.638832 vminfo Handling session 14 (of 17)
130609:31:33.638832 vminfo Session data: Name=UMFD-1, SessionID=1, LogonID=0,34521, LogonType=2
130709:31:33.638832 vminfo Session LogonType=2 is supported -- looking up SID + type ...
130809:31:33.638832 vminfo SID owner type=5 not handled, skipping
130909:31:33.638832 vminfo Account User=UMFD-1 is not logged in
131009:31:33.638832 vminfo Handling session 15 (of 17)
131109:31:33.638832 vminfo Session data: Name=UMFD-0, SessionID=0, LogonID=0,34482, LogonType=2
131209:31:33.638832 vminfo Handling session 16 (of 17)
131309:31:33.638832 vminfo Session data: Name=, SessionID=0, LogonID=0,32336, LogonType=0
131409:31:33.638832 vminfo Handling session 17 (of 17)
131509:31:33.638832 vminfo Session data: Name=MACHINE$, SessionID=0, LogonID=0,999, LogonType=0
131609:31:33.638832 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA' = '#12151: cSessions=17, cProcs=157, cUniqueUsers=2'
131709:31:33.638832 vminfo Found 2 unique logged-in user(s)
131809:31:33.638832 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/User/0' = '#12151: szName=user, sessionID=1, cProcs=33'
131909:31:33.638832 vminfo User 'user' has 33 interactive processes (session=1)
132009:31:33.638832 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/User/user@DOMAIN/UsageState' resulted in rc=VINF_NO_CHANGE
132109:31:33.638832 vminfo User 'user' (domain 'DOMAIN') is idle for 60468, fReportToHost=false
132209:31:33.638832 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/User/1' = '#12151: szName=user, sessionID=1, cProcs=33'
132309:31:33.638832 vminfo User 'user' has 33 interactive processes (session=1)
132409:31:33.638832 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/User/user@DOMAIN/UsageState' resulted in rc=VINF_NO_CHANGE
132509:31:33.638832 vminfo User 'user' (domain 'DOMAIN') is idle for 60468, fReportToHost=false
132609:31:33.638832 vminfo cUsersInList=2, pszUserList=user,user, rc=VINF_NO_CHANGE
132709:31:33.638832 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/LoggedInUsersList' resulted in rc=VINF_NO_CHANGE
132809:31:33.638832 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/LoggedInUsers' resulted in rc=VINF_NO_CHANGE
132909:31:33.638832 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/NoLoggedInUsers' resulted in rc=VINF_NO_CHANGE
133009:31:33.638832 vminfo Writing users returned with rc=VINF_NO_CHANGE
133109:31:33.638832 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/IP' resulted in rc=VINF_NO_CHANGE
133209:31:33.638832 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/Broadcast' resulted in rc=VINF_NO_CHANGE
133309:31:33.638832 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/Netmask' resulted in rc=VINF_NO_CHANGE
133409:31:33.638832 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/Status' resulted in rc=VINF_NO_CHANGE
133509:31:33.638832 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/MAC' resulted in rc=VINF_NO_CHANGE
133609:31:33.638832 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/IP' resulted in rc=VINF_NO_CHANGE
133709:31:33.638832 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/Broadcast' resulted in rc=VINF_NO_CHANGE
133809:31:33.638832 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/Netmask' resulted in rc=VINF_NO_CHANGE
133909:31:33.638832 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/Status' resulted in rc=VINF_NO_CHANGE
134009:31:33.638832 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/MAC' resulted in rc=VINF_NO_CHANGE
134109:31:33.638832 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/IP' resulted in rc=VINF_NO_CHANGE
134209:31:33.654084 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/Broadcast' resulted in rc=VINF_NO_CHANGE
134309:31:33.654084 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/Netmask' resulted in rc=VINF_NO_CHANGE
134409:31:33.654084 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/Status' resulted in rc=VINF_NO_CHANGE
134509:31:33.654084 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/MAC' resulted in rc=VINF_NO_CHANGE
134609:31:33.654084 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/IP' resulted in rc=VINF_NO_CHANGE
134709:31:33.654084 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/Broadcast' resulted in rc=VINF_NO_CHANGE
134809:31:33.654084 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/Netmask' resulted in rc=VINF_NO_CHANGE
134909:31:33.654084 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/Status' resulted in rc=VINF_NO_CHANGE
135009:31:33.654084 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/MAC' resulted in rc=VINF_NO_CHANGE
135109:31:33.654084 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/IP' resulted in rc=VINF_NO_CHANGE
135209:31:33.654084 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/Broadcast' resulted in rc=VINF_NO_CHANGE
135309:31:33.654084 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/Netmask' resulted in rc=VINF_NO_CHANGE
135409:31:33.654084 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/Status' resulted in rc=VINF_NO_CHANGE
135509:31:33.654084 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/MAC' resulted in rc=VINF_NO_CHANGE
135609:31:33.654084 vminfo [PropCache 00007ff6b2962520]: Written '/VirtualBox/GuestInfo/Net/Count'='5' (flags: 6), rc=VINF_SUCCESS
135709:31:33.654084 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/Count' resulted in rc=VINF_SUCCESS
135809:31:33.654084 vminfo Guest Property: /VirtualBox/HostInfo/VRDP/ActiveClient not found
135909:31:33.654084 vminfo VRDP: Handling location awareness done
136009:31:36.129842 timesync vgsvcTimeSyncWorker: Host: 2019-02-26T09:31:36.005000000Z (MinAdjust: 200 ms), Guest: 2019-02-26T09:31:36.129842400Z => -124 842 400 ns drift
136109:31:38.671475 vminfo Found 17 sessions
136209:31:38.671475 vminfo Error: Get token class 'user' for process 0 failed, rc=VERR_INVALID_PARAMETER
136309:31:38.671475 vminfo Error: Get token class 'groups' for process 0 failed, rc=VERR_INVALID_PARAMETER
136409:31:38.671475 vminfo Error: Get token class 'statistics' for process 0 failed, rc=VERR_INVALID_PARAMETER
136509:31:38.671475 vminfo Error: Get token class 'user' for process 4 failed, rc=VERR_ACCESS_DENIED
136609:31:38.671475 vminfo Error: Get token class 'groups' for process 4 failed, rc=VERR_ACCESS_DENIED
136709:31:38.671475 vminfo Error: Get token class 'statistics' for process 4 failed, rc=VERR_ACCESS_DENIED
136809:31:38.671475 vminfo Error: Get token class 'user' for process 104 failed, rc=VERR_ACCESS_DENIED
136909:31:38.671475 vminfo Error: Get token class 'groups' for process 104 failed, rc=VERR_ACCESS_DENIED
137009:31:38.671475 vminfo Error: Get token class 'statistics' for process 104 failed, rc=VERR_ACCESS_DENIED
137109:31:38.671475 vminfo Error: Get token class 'user' for process 472 failed, rc=VERR_ACCESS_DENIED
137209:31:38.671475 vminfo Error: Get token class 'groups' for process 472 failed, rc=VERR_ACCESS_DENIED
137309:31:38.671475 vminfo Error: Get token class 'statistics' for process 472 failed, rc=VERR_ACCESS_DENIED
137409:31:38.671475 vminfo Error: Get token class 'user' for process 676 failed, rc=VERR_ACCESS_DENIED
137509:31:38.671475 vminfo Error: Get token class 'groups' for process 676 failed, rc=VERR_ACCESS_DENIED
137609:31:38.671475 vminfo Error: Get token class 'statistics' for process 676 failed, rc=VERR_ACCESS_DENIED
137709:31:38.671475 vminfo Error: Get token class 'user' for process 756 failed, rc=VERR_ACCESS_DENIED
137809:31:38.671475 vminfo Error: Get token class 'groups' for process 756 failed, rc=VERR_ACCESS_DENIED
137909:31:38.671475 vminfo Error: Get token class 'statistics' for process 756 failed, rc=VERR_ACCESS_DENIED
138009:31:38.671475 vminfo Error: Get token class 'user' for process 768 failed, rc=VERR_ACCESS_DENIED
138109:31:38.671475 vminfo Error: Get token class 'groups' for process 768 failed, rc=VERR_ACCESS_DENIED
138209:31:38.671475 vminfo Error: Get token class 'statistics' for process 768 failed, rc=VERR_ACCESS_DENIED
138309:31:38.671475 vminfo Error: Get token class 'user' for process 876 failed, rc=VERR_ACCESS_DENIED
138409:31:38.671475 vminfo Error: Get token class 'groups' for process 876 failed, rc=VERR_ACCESS_DENIED
138509:31:38.671475 vminfo Error: Get token class 'statistics' for process 876 failed, rc=VERR_ACCESS_DENIED
138609:31:38.671475 vminfo Error: Get token class 'user' for process 2532 failed, rc=VERR_ACCESS_DENIED
138709:31:38.671475 vminfo Error: Get token class 'groups' for process 2532 failed, rc=VERR_ACCESS_DENIED
138809:31:38.671475 vminfo Error: Get token class 'statistics' for process 2532 failed, rc=VERR_ACCESS_DENIED
138909:31:38.671475 vminfo Error: Get token class 'user' for process 4136 failed, rc=VERR_ACCESS_DENIED
139009:31:38.671475 vminfo Error: Get token class 'groups' for process 4136 failed, rc=VERR_ACCESS_DENIED
139109:31:38.671475 vminfo Error: Get token class 'statistics' for process 4136 failed, rc=VERR_ACCESS_DENIED
139209:31:38.671475 vminfo Error: Get token class 'user' for process 5212 failed, rc=VERR_ACCESS_DENIED
139309:31:38.671475 vminfo Error: Get token class 'groups' for process 5212 failed, rc=VERR_ACCESS_DENIED
139409:31:38.671475 vminfo Error: Get token class 'statistics' for process 5212 failed, rc=VERR_ACCESS_DENIED
139509:31:38.671475 vminfo Handling session 1 (of 17)
139609:31:38.671475 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2145999, LogonType=3
139709:31:38.671475 vminfo Handling session 2 (of 17)
139809:31:38.671475 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2113823, LogonType=3
139909:31:38.671475 vminfo Handling session 3 (of 17)
140009:31:38.671475 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2041868, LogonType=3
140109:31:38.671475 vminfo Handling session 4 (of 17)
140209:31:38.671475 vminfo Session data: Name=nx, SessionID=0, LogonID=0,1997776, LogonType=3
140309:31:38.671475 vminfo Handling session 5 (of 17)
140409:31:38.671475 vminfo Session data: Name=user, SessionID=1, LogonID=0,1970648, LogonType=2
140509:31:38.671475 vminfo Session LogonType=2 is supported -- looking up SID + type ...
140609:31:38.687438 vminfo Account User=user, Session=1, LogonID=0,1970648, AuthPkg=Negotiate, Domain=DOMAIN
140709:31:38.687438 vminfo Account User=user, WTSConnectState=0 (4)
140809:31:38.687438 vminfo Account User=user using TCS/RDP, state=0
140909:31:38.687438 vminfo Account User=user is logged in
141009:31:38.687438 vminfo Handling user=user, domain=DOMAIN, package=Negotiate, session=1
141109:31:38.687438 vminfo Session 1: PID=6784 (fInt=true ): C:\Windows\System32\svchost.exe
141209:31:38.687438 vminfo Session 1: PID=264 (fInt=true ): C:\Windows\System32\sihost.exe
141309:31:38.687438 vminfo Session 1: PID=3148 (fInt=true ): C:\Windows\System32\svchost.exe
141409:31:38.687438 vminfo Session 1: PID=7176 (fInt=true ): C:\Windows\System32\taskhostw.exe
141509:31:38.687438 vminfo Session 1: PID=7268 (fInt=true ): C:\Windows\System32\ctfmon.exe
141609:31:38.687438 vminfo Session 1: PID=8732 (fInt=true ): C:\Windows\explorer.exe
141709:31:38.687438 vminfo Session 1: PID=9016 (fInt=true ): C:\Program Files (x86)\NoMachine\bin\nxclient.bin
141809:31:38.687438 vminfo Session 1: PID=8260 (fInt=true ): C:\Program Files\McAfee\Agent\x86\UpdaterUI.exe
141909:31:38.687438 vminfo Session 1: PID=8828 (fInt=true ): C:\Program Files\Classic Shell\ClassicStartMenu.exe
142009:31:38.687438 vminfo Session 1: PID=8488 (fInt=true ): C:\Program Files\McAfee\Agent\x86\mctray.exe
142109:31:38.687438 vminfo Session 1: PID=9172 (fInt=true ): C:\Program Files\TortoiseSVN\bin\TSVNCache.exe
142209:31:38.687438 vminfo Session 1: PID=9280 (fInt=true ): C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe
142309:31:38.687438 vminfo Session 1: PID=9652 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
142409:31:38.687438 vminfo Session 1: PID=9728 (fInt=true ): C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe
142509:31:38.687438 vminfo Session 1: PID=9880 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
142609:31:38.687438 vminfo Session 1: PID=9944 (fInt=true ): C:\Windows\System32\dllhost.exe
142709:31:38.687438 vminfo Session 1: PID=8128 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17112.19011.0_x64__8wekyb3d8bbwe\Video.UI.exe
142809:31:38.687438 vminfo Session 1: PID=9528 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
142909:31:38.687438 vminfo Session 1: PID=10292 (fInt=true ): C:\Program Files\Windows Defender\MSASCuiL.exe
143009:31:38.687438 vminfo Session 1: PID=10324 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
143109:31:38.687438 vminfo Session 1: PID=10440 (fInt=true ): C:\Windows\System32\VBoxTray.exe
143209:31:38.687438 vminfo Session 1: PID=10596 (fInt=true ): C:\Users\user\Documents\Visual Studio 2017\Projects\vboxtray_mon\vboxtray_mon\bin\Release\vboxtray_mon.exe
143309:31:38.687438 vminfo Session 1: PID=10612 (fInt=true ): C:\Windows\System32\conhost.exe
143409:31:38.687438 vminfo Session 1: PID=10720 (fInt=true ): C:\Program Files (x86)\FileZilla Server\FileZilla Server Interface.exe
143509:31:38.687438 vminfo Session 1: PID=9808 (fInt=true ): C:\Windows\System32\svchost.exe
143609:31:38.687438 vminfo Session 1: PID=6716 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18011.15918.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
143709:31:38.687438 vminfo Session 1: PID=6688 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
143809:31:38.687438 vminfo Session 1: PID=10200 (fInt=true ): C:\Windows\System32\ApplicationFrameHost.exe
143909:31:38.687438 vminfo Session 1: PID=4868 (fInt=true ): C:\Windows\ImmersiveControlPanel\SystemSettings.exe
144009:31:38.687438 vminfo Session 1: PID=1444 (fInt=true ): C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe
144109:31:38.687438 vminfo Session 1: PID=9504 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
144209:31:38.687438 vminfo Session 1: PID=5596 (fInt=true ): C:\Windows\System32\backgroundTaskHost.exe
144309:31:38.687438 vminfo Session 1: PID=10840 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
144409:31:38.687438 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/Session/1' = '#12152: cSessionProcs=33 (of 158 procs total)'
144509:31:38.687438 vminfo Adding new user=user (session=1) with 33 processes
144609:31:38.687438 vminfo Handling session 6 (of 17)
144709:31:38.687438 vminfo Session data: Name=user, SessionID=1, LogonID=0,1970599, LogonType=2
144809:31:38.687438 vminfo Session LogonType=2 is supported -- looking up SID + type ...
144909:31:38.687438 vminfo Account User=user, Session=1, LogonID=0,1970599, AuthPkg=Kerberos, Domain=DOMAIN
145009:31:38.687438 vminfo Account User=user, WTSConnectState=0 (4)
145109:31:38.687438 vminfo Account User=user using TCS/RDP, state=0
145209:31:38.687438 vminfo Account User=user is logged in
145309:31:38.687438 vminfo Handling user=user, domain=DOMAIN, package=Kerberos, session=1
145409:31:38.687438 vminfo Session 1: PID=6784 (fInt=true ): C:\Windows\System32\svchost.exe
145509:31:38.687438 vminfo Session 1: PID=264 (fInt=true ): C:\Windows\System32\sihost.exe
145609:31:38.687438 vminfo Session 1: PID=3148 (fInt=true ): C:\Windows\System32\svchost.exe
145709:31:38.687438 vminfo Session 1: PID=7176 (fInt=true ): C:\Windows\System32\taskhostw.exe
145809:31:38.687438 vminfo Session 1: PID=7268 (fInt=true ): C:\Windows\System32\ctfmon.exe
145909:31:38.687438 vminfo Session 1: PID=8732 (fInt=true ): C:\Windows\explorer.exe
146009:31:38.687438 vminfo Session 1: PID=9016 (fInt=true ): C:\Program Files (x86)\NoMachine\bin\nxclient.bin
146109:31:38.687438 vminfo Session 1: PID=8260 (fInt=true ): C:\Program Files\McAfee\Agent\x86\UpdaterUI.exe
146209:31:38.687438 vminfo Session 1: PID=8828 (fInt=true ): C:\Program Files\Classic Shell\ClassicStartMenu.exe
146309:31:38.687438 vminfo Session 1: PID=8488 (fInt=true ): C:\Program Files\McAfee\Agent\x86\mctray.exe
146409:31:38.687438 vminfo Session 1: PID=9172 (fInt=true ): C:\Program Files\TortoiseSVN\bin\TSVNCache.exe
146509:31:38.687438 vminfo Session 1: PID=9280 (fInt=true ): C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe
146609:31:38.687438 vminfo Session 1: PID=9652 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
146709:31:38.687438 vminfo Session 1: PID=9728 (fInt=true ): C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe
146809:31:38.687438 vminfo Session 1: PID=9880 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
146909:31:38.687438 vminfo Session 1: PID=9944 (fInt=true ): C:\Windows\System32\dllhost.exe
147009:31:38.687438 vminfo Session 1: PID=8128 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17112.19011.0_x64__8wekyb3d8bbwe\Video.UI.exe
147109:31:38.687438 vminfo Session 1: PID=9528 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
147209:31:38.687438 vminfo Session 1: PID=10292 (fInt=true ): C:\Program Files\Windows Defender\MSASCuiL.exe
147309:31:38.687438 vminfo Session 1: PID=10324 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
147409:31:38.687438 vminfo Session 1: PID=10440 (fInt=true ): C:\Windows\System32\VBoxTray.exe
147509:31:38.687438 vminfo Session 1: PID=10596 (fInt=true ): C:\Users\user\Documents\Visual Studio 2017\Projects\vboxtray_mon\vboxtray_mon\bin\Release\vboxtray_mon.exe
147609:31:38.704005 vminfo Session 1: PID=10612 (fInt=true ): C:\Windows\System32\conhost.exe
147709:31:38.704005 vminfo Session 1: PID=10720 (fInt=true ): C:\Program Files (x86)\FileZilla Server\FileZilla Server Interface.exe
147809:31:38.704005 vminfo Session 1: PID=9808 (fInt=true ): C:\Windows\System32\svchost.exe
147909:31:38.704005 vminfo Session 1: PID=6716 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18011.15918.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
148009:31:38.704005 vminfo Session 1: PID=6688 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
148109:31:38.704005 vminfo Session 1: PID=10200 (fInt=true ): C:\Windows\System32\ApplicationFrameHost.exe
148209:31:38.704005 vminfo Session 1: PID=4868 (fInt=true ): C:\Windows\ImmersiveControlPanel\SystemSettings.exe
148309:31:38.704005 vminfo Session 1: PID=1444 (fInt=true ): C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe
148409:31:38.704005 vminfo Session 1: PID=9504 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
148509:31:38.704005 vminfo Session 1: PID=5596 (fInt=true ): C:\Windows\System32\backgroundTaskHost.exe
148609:31:38.704005 vminfo Session 1: PID=10840 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
148709:31:38.704005 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/Session/1' = '#12152: cSessionProcs=33 (of 158 procs total)'
148809:31:38.704005 vminfo Adding new user=user (session=1) with 33 processes
148909:31:38.704005 vminfo Handling session 7 (of 17)
149009:31:38.704005 vminfo Session data: Name=nx, SessionID=0, LogonID=0,685607, LogonType=3
149109:31:38.704005 vminfo Handling session 8 (of 17)
149209:31:38.704005 vminfo Session data: Name=ANONYMOUS LOGON, SessionID=0, LogonID=0,649881, LogonType=3
149309:31:38.704005 vminfo Handling session 9 (of 17)
149409:31:38.704005 vminfo Session data: Name=IUSR, SessionID=0, LogonID=0,995, LogonType=5
149509:31:38.704005 vminfo Handling session 10 (of 17)
149609:31:38.704005 vminfo Session data: Name=DWM-1, SessionID=1, LogonID=0,61006, LogonType=2
149709:31:38.704005 vminfo Session LogonType=2 is supported -- looking up SID + type ...
149809:31:38.704005 vminfo SID owner type=5 not handled, skipping
149909:31:38.704005 vminfo Account User=DWM-1 is not logged in
150009:31:38.704005 vminfo Handling session 11 (of 17)
150109:31:38.704005 vminfo Session data: Name=DWM-1, SessionID=1, LogonID=0,60973, LogonType=2
150209:31:38.704005 vminfo Session LogonType=2 is supported -- looking up SID + type ...
150309:31:38.704005 vminfo SID owner type=5 not handled, skipping
150409:31:38.704005 vminfo Account User=DWM-1 is not logged in
150509:31:38.704005 vminfo Handling session 12 (of 17)
150609:31:38.704005 vminfo Session data: Name=MACHINE$, SessionID=0, LogonID=0,996, LogonType=5
150709:31:38.704005 vminfo Handling session 13 (of 17)
150809:31:38.704005 vminfo Session data: Name=LOCAL SERVICE, SessionID=0, LogonID=0,997, LogonType=5
150909:31:38.704005 vminfo Handling session 14 (of 17)
151009:31:38.704005 vminfo Session data: Name=UMFD-1, SessionID=1, LogonID=0,34521, LogonType=2
151109:31:38.704005 vminfo Session LogonType=2 is supported -- looking up SID + type ...
151209:31:38.704005 vminfo SID owner type=5 not handled, skipping
151309:31:38.704005 vminfo Account User=UMFD-1 is not logged in
151409:31:38.704005 vminfo Handling session 15 (of 17)
151509:31:38.704005 vminfo Session data: Name=UMFD-0, SessionID=0, LogonID=0,34482, LogonType=2
151609:31:38.704005 vminfo Handling session 16 (of 17)
151709:31:38.704005 vminfo Session data: Name=, SessionID=0, LogonID=0,32336, LogonType=0
151809:31:38.704005 vminfo Handling session 17 (of 17)
151909:31:38.704005 vminfo Session data: Name=MACHINE$, SessionID=0, LogonID=0,999, LogonType=0
152009:31:38.704005 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA' = '#12152: cSessions=17, cProcs=158, cUniqueUsers=2'
152109:31:38.704005 vminfo Found 2 unique logged-in user(s)
152209:31:38.704005 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/User/0' = '#12152: szName=user, sessionID=1, cProcs=33'
152309:31:38.704005 vminfo User 'user' has 33 interactive processes (session=1)
152409:31:38.846246 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/User/user@DOMAIN/UsageState' resulted in rc=VINF_NO_CHANGE
152509:31:38.846246 vminfo User 'user' (domain 'DOMAIN') is idle for 60473, fReportToHost=false
152609:31:38.846246 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/User/1' = '#12152: szName=user, sessionID=1, cProcs=33'
152709:31:38.846246 vminfo User 'user' has 33 interactive processes (session=1)
152809:31:38.846246 vminfo Error: Error querying last input for user 'user', rc=VERR_PIPE_BUSY
152909:31:38.846246 vminfo cUsersInList=0, pszUserList=<NULL>, rc=VERR_PIPE_BUSY
153009:31:38.846246 vminfo [PropCache 00007ff6b2962520]: Deleted '/VirtualBox/GuestInfo/OS/LoggedInUsersList'='user,user' (flags: a), rc=VINF_SUCCESS
153109:31:38.846246 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/LoggedInUsersList' resulted in rc=VINF_SUCCESS
153209:31:38.846246 vminfo [PropCache 00007ff6b2962520]: Written '/VirtualBox/GuestInfo/OS/LoggedInUsers'='0' (flags: a), rc=VINF_SUCCESS
153309:31:38.846246 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/LoggedInUsers' resulted in rc=VINF_SUCCESS
153409:31:38.846246 vminfo [PropCache 00007ff6b2962520]: Written '/VirtualBox/GuestInfo/OS/NoLoggedInUsers'='true' (flags: a), rc=VINF_SUCCESS
153509:31:38.846246 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/NoLoggedInUsers' resulted in rc=VINF_SUCCESS
153609:31:38.846246 vminfo Writing users returned with rc=VINF_SUCCESS
153709:31:38.861760 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/IP' resulted in rc=VINF_NO_CHANGE
153809:31:38.861760 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/Broadcast' resulted in rc=VINF_NO_CHANGE
153909:31:38.861760 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/Netmask' resulted in rc=VINF_NO_CHANGE
154009:31:38.861760 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/Status' resulted in rc=VINF_NO_CHANGE
154109:31:38.861760 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/MAC' resulted in rc=VINF_NO_CHANGE
154209:31:38.861760 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/IP' resulted in rc=VINF_NO_CHANGE
154309:31:38.861760 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/Broadcast' resulted in rc=VINF_NO_CHANGE
154409:31:38.861760 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/Netmask' resulted in rc=VINF_NO_CHANGE
154509:31:38.861760 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/Status' resulted in rc=VINF_NO_CHANGE
154609:31:38.861760 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/MAC' resulted in rc=VINF_NO_CHANGE
154709:31:38.861760 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/IP' resulted in rc=VINF_NO_CHANGE
154809:31:38.861760 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/Broadcast' resulted in rc=VINF_NO_CHANGE
154909:31:38.861760 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/Netmask' resulted in rc=VINF_NO_CHANGE
155009:31:38.861760 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/Status' resulted in rc=VINF_NO_CHANGE
155109:31:38.861760 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/MAC' resulted in rc=VINF_NO_CHANGE
155209:31:38.861760 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/IP' resulted in rc=VINF_NO_CHANGE
155309:31:38.861760 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/Broadcast' resulted in rc=VINF_NO_CHANGE
155409:31:38.861760 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/Netmask' resulted in rc=VINF_NO_CHANGE
155509:31:38.861760 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/Status' resulted in rc=VINF_NO_CHANGE
155609:31:38.861760 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/MAC' resulted in rc=VINF_NO_CHANGE
155709:31:38.861760 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/IP' resulted in rc=VINF_NO_CHANGE
155809:31:38.861760 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/Broadcast' resulted in rc=VINF_NO_CHANGE
155909:31:38.861760 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/Netmask' resulted in rc=VINF_NO_CHANGE
156009:31:38.861760 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/Status' resulted in rc=VINF_NO_CHANGE
156109:31:38.861760 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/MAC' resulted in rc=VINF_NO_CHANGE
156209:31:38.861760 vminfo [PropCache 00007ff6b2962520]: Written '/VirtualBox/GuestInfo/Net/Count'='5' (flags: 6), rc=VINF_SUCCESS
156309:31:38.861760 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/Count' resulted in rc=VINF_SUCCESS
156409:31:38.861760 vminfo Guest Property: /VirtualBox/HostInfo/VRDP/ActiveClient not found
156509:31:38.861760 vminfo VRDP: Handling location awareness done
156609:31:43.866213 vminfo Found 17 sessions
156709:31:43.866213 vminfo Error: Get token class 'user' for process 0 failed, rc=VERR_INVALID_PARAMETER
156809:31:43.866213 vminfo Error: Get token class 'groups' for process 0 failed, rc=VERR_INVALID_PARAMETER
156909:31:43.866213 vminfo Error: Get token class 'statistics' for process 0 failed, rc=VERR_INVALID_PARAMETER
157009:31:43.866213 vminfo Error: Get token class 'user' for process 4 failed, rc=VERR_ACCESS_DENIED
157109:31:43.866213 vminfo Error: Get token class 'groups' for process 4 failed, rc=VERR_ACCESS_DENIED
157209:31:43.866213 vminfo Error: Get token class 'statistics' for process 4 failed, rc=VERR_ACCESS_DENIED
157309:31:43.866213 vminfo Error: Get token class 'user' for process 104 failed, rc=VERR_ACCESS_DENIED
157409:31:43.866213 vminfo Error: Get token class 'groups' for process 104 failed, rc=VERR_ACCESS_DENIED
157509:31:43.866213 vminfo Error: Get token class 'statistics' for process 104 failed, rc=VERR_ACCESS_DENIED
157609:31:43.866213 vminfo Error: Get token class 'user' for process 472 failed, rc=VERR_ACCESS_DENIED
157709:31:43.866213 vminfo Error: Get token class 'groups' for process 472 failed, rc=VERR_ACCESS_DENIED
157809:31:43.866213 vminfo Error: Get token class 'statistics' for process 472 failed, rc=VERR_ACCESS_DENIED
157909:31:43.866213 vminfo Error: Get token class 'user' for process 676 failed, rc=VERR_ACCESS_DENIED
158009:31:43.866213 vminfo Error: Get token class 'groups' for process 676 failed, rc=VERR_ACCESS_DENIED
158109:31:43.866213 vminfo Error: Get token class 'statistics' for process 676 failed, rc=VERR_ACCESS_DENIED
158209:31:43.866213 vminfo Error: Get token class 'user' for process 756 failed, rc=VERR_ACCESS_DENIED
158309:31:43.866213 vminfo Error: Get token class 'groups' for process 756 failed, rc=VERR_ACCESS_DENIED
158409:31:43.866213 vminfo Error: Get token class 'statistics' for process 756 failed, rc=VERR_ACCESS_DENIED
158509:31:43.866213 vminfo Error: Get token class 'user' for process 768 failed, rc=VERR_ACCESS_DENIED
158609:31:43.866213 vminfo Error: Get token class 'groups' for process 768 failed, rc=VERR_ACCESS_DENIED
158709:31:43.866213 vminfo Error: Get token class 'statistics' for process 768 failed, rc=VERR_ACCESS_DENIED
158809:31:43.866213 vminfo Error: Get token class 'user' for process 876 failed, rc=VERR_ACCESS_DENIED
158909:31:43.866213 vminfo Error: Get token class 'groups' for process 876 failed, rc=VERR_ACCESS_DENIED
159009:31:43.866213 vminfo Error: Get token class 'statistics' for process 876 failed, rc=VERR_ACCESS_DENIED
159109:31:43.866213 vminfo Error: Get token class 'user' for process 2532 failed, rc=VERR_ACCESS_DENIED
159209:31:43.866213 vminfo Error: Get token class 'groups' for process 2532 failed, rc=VERR_ACCESS_DENIED
159309:31:43.866213 vminfo Error: Get token class 'statistics' for process 2532 failed, rc=VERR_ACCESS_DENIED
159409:31:43.866213 vminfo Error: Get token class 'user' for process 4136 failed, rc=VERR_ACCESS_DENIED
159509:31:43.866213 vminfo Error: Get token class 'groups' for process 4136 failed, rc=VERR_ACCESS_DENIED
159609:31:43.866213 vminfo Error: Get token class 'statistics' for process 4136 failed, rc=VERR_ACCESS_DENIED
159709:31:43.866213 vminfo Error: Get token class 'user' for process 5212 failed, rc=VERR_ACCESS_DENIED
159809:31:43.866213 vminfo Error: Get token class 'groups' for process 5212 failed, rc=VERR_ACCESS_DENIED
159909:31:43.866213 vminfo Error: Get token class 'statistics' for process 5212 failed, rc=VERR_ACCESS_DENIED
160009:31:43.866213 vminfo Handling session 1 (of 17)
160109:31:43.866213 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2145999, LogonType=3
160209:31:43.866213 vminfo Handling session 2 (of 17)
160309:31:43.866213 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2113823, LogonType=3
160409:31:43.866213 vminfo Handling session 3 (of 17)
160509:31:43.866213 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2041868, LogonType=3
160609:31:43.882888 vminfo Handling session 4 (of 17)
160709:31:43.882888 vminfo Session data: Name=nx, SessionID=0, LogonID=0,1997776, LogonType=3
160809:31:43.882888 vminfo Handling session 5 (of 17)
160909:31:43.882888 vminfo Session data: Name=user, SessionID=1, LogonID=0,1970648, LogonType=2
161009:31:43.882888 vminfo Session LogonType=2 is supported -- looking up SID + type ...
161109:31:43.882888 vminfo Account User=user, Session=1, LogonID=0,1970648, AuthPkg=Negotiate, Domain=DOMAIN
161209:31:43.882888 vminfo Account User=user, WTSConnectState=0 (4)
161309:31:43.882888 vminfo Account User=user using TCS/RDP, state=0
161409:31:43.882888 vminfo Account User=user is logged in
161509:31:43.882888 vminfo Handling user=user, domain=DOMAIN, package=Negotiate, session=1
161609:31:43.882888 vminfo Session 1: PID=6784 (fInt=true ): C:\Windows\System32\svchost.exe
161709:31:43.882888 vminfo Session 1: PID=264 (fInt=true ): C:\Windows\System32\sihost.exe
161809:31:43.882888 vminfo Session 1: PID=3148 (fInt=true ): C:\Windows\System32\svchost.exe
161909:31:43.882888 vminfo Session 1: PID=7176 (fInt=true ): C:\Windows\System32\taskhostw.exe
162009:31:43.882888 vminfo Session 1: PID=7268 (fInt=true ): C:\Windows\System32\ctfmon.exe
162109:31:43.882888 vminfo Session 1: PID=8732 (fInt=true ): C:\Windows\explorer.exe
162209:31:43.882888 vminfo Session 1: PID=9016 (fInt=true ): C:\Program Files (x86)\NoMachine\bin\nxclient.bin
162309:31:43.882888 vminfo Session 1: PID=8260 (fInt=true ): C:\Program Files\McAfee\Agent\x86\UpdaterUI.exe
162409:31:43.882888 vminfo Session 1: PID=8828 (fInt=true ): C:\Program Files\Classic Shell\ClassicStartMenu.exe
162509:31:43.882888 vminfo Session 1: PID=8488 (fInt=true ): C:\Program Files\McAfee\Agent\x86\mctray.exe
162609:31:43.882888 vminfo Session 1: PID=9172 (fInt=true ): C:\Program Files\TortoiseSVN\bin\TSVNCache.exe
162709:31:43.882888 vminfo Session 1: PID=9280 (fInt=true ): C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe
162809:31:43.882888 vminfo Session 1: PID=9652 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
162909:31:43.882888 vminfo Session 1: PID=9728 (fInt=true ): C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe
163009:31:43.882888 vminfo Session 1: PID=9880 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
163109:31:43.882888 vminfo Session 1: PID=9944 (fInt=true ): C:\Windows\System32\dllhost.exe
163209:31:43.882888 vminfo Session 1: PID=8128 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17112.19011.0_x64__8wekyb3d8bbwe\Video.UI.exe
163309:31:43.882888 vminfo Session 1: PID=9528 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
163409:31:43.882888 vminfo Session 1: PID=10292 (fInt=true ): C:\Program Files\Windows Defender\MSASCuiL.exe
163509:31:43.882888 vminfo Session 1: PID=10324 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
163609:31:43.882888 vminfo Session 1: PID=10440 (fInt=true ): C:\Windows\System32\VBoxTray.exe
163709:31:43.882888 vminfo Session 1: PID=10596 (fInt=true ): C:\Users\user\Documents\Visual Studio 2017\Projects\vboxtray_mon\vboxtray_mon\bin\Release\vboxtray_mon.exe
163809:31:43.882888 vminfo Session 1: PID=10612 (fInt=true ): C:\Windows\System32\conhost.exe
163909:31:43.882888 vminfo Session 1: PID=10720 (fInt=true ): C:\Program Files (x86)\FileZilla Server\FileZilla Server Interface.exe
164009:31:43.882888 vminfo Session 1: PID=9808 (fInt=true ): C:\Windows\System32\svchost.exe
164109:31:43.882888 vminfo Session 1: PID=6716 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18011.15918.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
164209:31:43.882888 vminfo Session 1: PID=6688 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
164309:31:43.882888 vminfo Session 1: PID=10200 (fInt=true ): C:\Windows\System32\ApplicationFrameHost.exe
164409:31:43.882888 vminfo Session 1: PID=4868 (fInt=true ): C:\Windows\ImmersiveControlPanel\SystemSettings.exe
164509:31:43.882888 vminfo Session 1: PID=1444 (fInt=true ): C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe
164609:31:43.882888 vminfo Session 1: PID=9504 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
164709:31:43.882888 vminfo Session 1: PID=10840 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
164809:31:43.882888 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/Session/1' = '#12153: cSessionProcs=32 (of 156 procs total)'
164909:31:43.882888 vminfo Adding new user=user (session=1) with 32 processes
165009:31:43.882888 vminfo Handling session 6 (of 17)
165109:31:43.882888 vminfo Session data: Name=user, SessionID=1, LogonID=0,1970599, LogonType=2
165209:31:43.882888 vminfo Session LogonType=2 is supported -- looking up SID + type ...
165309:31:43.882888 vminfo Account User=user, Session=1, LogonID=0,1970599, AuthPkg=Kerberos, Domain=DOMAIN
165409:31:43.882888 vminfo Account User=user, WTSConnectState=0 (4)
165509:31:43.882888 vminfo Account User=user using TCS/RDP, state=0
165609:31:43.882888 vminfo Account User=user is logged in
165709:31:43.882888 vminfo Handling user=user, domain=DOMAIN, package=Kerberos, session=1
165809:31:43.882888 vminfo Session 1: PID=6784 (fInt=true ): C:\Windows\System32\svchost.exe
165909:31:43.882888 vminfo Session 1: PID=264 (fInt=true ): C:\Windows\System32\sihost.exe
166009:31:43.882888 vminfo Session 1: PID=3148 (fInt=true ): C:\Windows\System32\svchost.exe
166109:31:43.882888 vminfo Session 1: PID=7176 (fInt=true ): C:\Windows\System32\taskhostw.exe
166209:31:43.899098 vminfo Session 1: PID=7268 (fInt=true ): C:\Windows\System32\ctfmon.exe
166309:31:43.899098 vminfo Session 1: PID=8732 (fInt=true ): C:\Windows\explorer.exe
166409:31:43.899098 vminfo Session 1: PID=9016 (fInt=true ): C:\Program Files (x86)\NoMachine\bin\nxclient.bin
166509:31:43.899098 vminfo Session 1: PID=8260 (fInt=true ): C:\Program Files\McAfee\Agent\x86\UpdaterUI.exe
166609:31:43.899098 vminfo Session 1: PID=8828 (fInt=true ): C:\Program Files\Classic Shell\ClassicStartMenu.exe
166709:31:43.899098 vminfo Session 1: PID=8488 (fInt=true ): C:\Program Files\McAfee\Agent\x86\mctray.exe
166809:31:43.899098 vminfo Session 1: PID=9172 (fInt=true ): C:\Program Files\TortoiseSVN\bin\TSVNCache.exe
166909:31:43.899098 vminfo Session 1: PID=9280 (fInt=true ): C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe
167009:31:43.899098 vminfo Session 1: PID=9652 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
167109:31:43.899098 vminfo Session 1: PID=9728 (fInt=true ): C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe
167209:31:43.899098 vminfo Session 1: PID=9880 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
167309:31:43.899098 vminfo Session 1: PID=9944 (fInt=true ): C:\Windows\System32\dllhost.exe
167409:31:43.899098 vminfo Session 1: PID=8128 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17112.19011.0_x64__8wekyb3d8bbwe\Video.UI.exe
167509:31:43.899098 vminfo Session 1: PID=9528 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
167609:31:43.899098 vminfo Session 1: PID=10292 (fInt=true ): C:\Program Files\Windows Defender\MSASCuiL.exe
167709:31:43.899098 vminfo Session 1: PID=10324 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
167809:31:43.899098 vminfo Session 1: PID=10440 (fInt=true ): C:\Windows\System32\VBoxTray.exe
167909:31:43.899098 vminfo Session 1: PID=10596 (fInt=true ): C:\Users\user\Documents\Visual Studio 2017\Projects\vboxtray_mon\vboxtray_mon\bin\Release\vboxtray_mon.exe
168009:31:43.899098 vminfo Session 1: PID=10612 (fInt=true ): C:\Windows\System32\conhost.exe
168109:31:43.899098 vminfo Session 1: PID=10720 (fInt=true ): C:\Program Files (x86)\FileZilla Server\FileZilla Server Interface.exe
168209:31:43.899098 vminfo Session 1: PID=9808 (fInt=true ): C:\Windows\System32\svchost.exe
168309:31:43.899098 vminfo Session 1: PID=6716 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18011.15918.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
168409:31:43.899098 vminfo Session 1: PID=6688 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
168509:31:43.899098 vminfo Session 1: PID=10200 (fInt=true ): C:\Windows\System32\ApplicationFrameHost.exe
168609:31:43.899098 vminfo Session 1: PID=4868 (fInt=true ): C:\Windows\ImmersiveControlPanel\SystemSettings.exe
168709:31:43.899098 vminfo Session 1: PID=1444 (fInt=true ): C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe
168809:31:43.899098 vminfo Session 1: PID=9504 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
168909:31:43.899098 vminfo Session 1: PID=10840 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
169009:31:43.899098 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/Session/1' = '#12153: cSessionProcs=32 (of 156 procs total)'
169109:31:43.899098 vminfo Adding new user=user (session=1) with 32 processes
169209:31:43.899098 vminfo Handling session 7 (of 17)
169309:31:43.899098 vminfo Session data: Name=nx, SessionID=0, LogonID=0,685607, LogonType=3
169409:31:43.899098 vminfo Handling session 8 (of 17)
169509:31:43.899098 vminfo Session data: Name=ANONYMOUS LOGON, SessionID=0, LogonID=0,649881, LogonType=3
169609:31:43.899098 vminfo Handling session 9 (of 17)
169709:31:43.899098 vminfo Session data: Name=IUSR, SessionID=0, LogonID=0,995, LogonType=5
169809:31:43.899098 vminfo Handling session 10 (of 17)
169909:31:43.899098 vminfo Session data: Name=DWM-1, SessionID=1, LogonID=0,61006, LogonType=2
170009:31:43.899098 vminfo Session LogonType=2 is supported -- looking up SID + type ...
170109:31:43.899098 vminfo SID owner type=5 not handled, skipping
170209:31:43.899098 vminfo Account User=DWM-1 is not logged in
170309:31:43.899098 vminfo Handling session 11 (of 17)
170409:31:43.899098 vminfo Session data: Name=DWM-1, SessionID=1, LogonID=0,60973, LogonType=2
170509:31:43.899098 vminfo Session LogonType=2 is supported -- looking up SID + type ...
170609:31:43.899098 vminfo SID owner type=5 not handled, skipping
170709:31:43.899098 vminfo Account User=DWM-1 is not logged in
170809:31:43.899098 vminfo Handling session 12 (of 17)
170909:31:43.899098 vminfo Session data: Name=MACHINE$, SessionID=0, LogonID=0,996, LogonType=5
171009:31:43.899098 vminfo Handling session 13 (of 17)
171109:31:43.899098 vminfo Session data: Name=LOCAL SERVICE, SessionID=0, LogonID=0,997, LogonType=5
171209:31:43.899098 vminfo Handling session 14 (of 17)
171309:31:43.899098 vminfo Session data: Name=UMFD-1, SessionID=1, LogonID=0,34521, LogonType=2
171409:31:43.899098 vminfo Session LogonType=2 is supported -- looking up SID + type ...
171509:31:43.899098 vminfo SID owner type=5 not handled, skipping
171609:31:43.899098 vminfo Account User=UMFD-1 is not logged in
171709:31:43.899098 vminfo Handling session 15 (of 17)
171809:31:43.899098 vminfo Session data: Name=UMFD-0, SessionID=0, LogonID=0,34482, LogonType=2
171909:31:43.899098 vminfo Handling session 16 (of 17)
172009:31:43.899098 vminfo Session data: Name=, SessionID=0, LogonID=0,32336, LogonType=0
172109:31:43.899098 vminfo Handling session 17 (of 17)
172209:31:43.899098 vminfo Session data: Name=MACHINE$, SessionID=0, LogonID=0,999, LogonType=0
172309:31:43.899098 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA' = '#12153: cSessions=17, cProcs=156, cUniqueUsers=2'
172409:31:43.899098 vminfo Found 2 unique logged-in user(s)
172509:31:43.899098 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/User/0' = '#12153: szName=user, sessionID=1, cProcs=32'
172609:31:43.899098 vminfo User 'user' has 32 interactive processes (session=1)
172709:31:43.899098 vminfo Error: Error querying last input for user 'user', rc=VERR_PIPE_BUSY
172809:31:43.899098 vminfo cUsersInList=0, pszUserList=<NULL>, rc=VERR_PIPE_BUSY
172909:31:43.899098 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/LoggedInUsersList' resulted in rc=VINF_NO_CHANGE
173009:31:43.899098 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/LoggedInUsers' resulted in rc=VINF_NO_CHANGE
173109:31:43.899098 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/NoLoggedInUsers' resulted in rc=VINF_NO_CHANGE
173209:31:43.899098 vminfo Writing users returned with rc=VINF_NO_CHANGE
173309:31:43.917236 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/IP' resulted in rc=VINF_NO_CHANGE
173409:31:43.917236 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/Broadcast' resulted in rc=VINF_NO_CHANGE
173509:31:43.917236 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/Netmask' resulted in rc=VINF_NO_CHANGE
173609:31:43.917236 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/Status' resulted in rc=VINF_NO_CHANGE
173709:31:43.917236 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/MAC' resulted in rc=VINF_NO_CHANGE
173809:31:43.917236 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/IP' resulted in rc=VINF_NO_CHANGE
173909:31:43.917236 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/Broadcast' resulted in rc=VINF_NO_CHANGE
174009:31:43.917236 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/Netmask' resulted in rc=VINF_NO_CHANGE
174109:31:43.917236 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/Status' resulted in rc=VINF_NO_CHANGE
174209:31:43.917236 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/MAC' resulted in rc=VINF_NO_CHANGE
174309:31:43.917236 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/IP' resulted in rc=VINF_NO_CHANGE
174409:31:43.917236 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/Broadcast' resulted in rc=VINF_NO_CHANGE
174509:31:43.917236 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/Netmask' resulted in rc=VINF_NO_CHANGE
174609:31:43.917236 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/Status' resulted in rc=VINF_NO_CHANGE
174709:31:43.917236 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/MAC' resulted in rc=VINF_NO_CHANGE
174809:31:43.917236 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/IP' resulted in rc=VINF_NO_CHANGE
174909:31:43.917236 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/Broadcast' resulted in rc=VINF_NO_CHANGE
175009:31:43.917236 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/Netmask' resulted in rc=VINF_NO_CHANGE
175109:31:43.917236 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/Status' resulted in rc=VINF_NO_CHANGE
175209:31:43.917236 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/MAC' resulted in rc=VINF_NO_CHANGE
175309:31:43.917236 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/IP' resulted in rc=VINF_NO_CHANGE
175409:31:43.917236 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/Broadcast' resulted in rc=VINF_NO_CHANGE
175509:31:43.917236 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/Netmask' resulted in rc=VINF_NO_CHANGE
175609:31:43.917236 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/Status' resulted in rc=VINF_NO_CHANGE
175709:31:43.917236 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/MAC' resulted in rc=VINF_NO_CHANGE
175809:31:43.917236 vminfo [PropCache 00007ff6b2962520]: Written '/VirtualBox/GuestInfo/Net/Count'='5' (flags: 6), rc=VINF_SUCCESS
175909:31:43.917236 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/Count' resulted in rc=VINF_SUCCESS
176009:31:43.917236 vminfo Guest Property: /VirtualBox/HostInfo/VRDP/ActiveClient not found
176109:31:43.917236 vminfo VRDP: Handling location awareness done
176209:31:46.131394 timesync vgsvcTimeSyncWorker: Host: 2019-02-26T09:31:46.006000000Z (MinAdjust: 200 ms), Guest: 2019-02-26T09:31:46.131394000Z => -125 394 000 ns drift
176309:31:48.918341 vminfo Found 17 sessions
176409:31:48.918341 vminfo Error: Get token class 'user' for process 0 failed, rc=VERR_INVALID_PARAMETER
176509:31:48.918341 vminfo Error: Get token class 'groups' for process 0 failed, rc=VERR_INVALID_PARAMETER
176609:31:48.918341 vminfo Error: Get token class 'statistics' for process 0 failed, rc=VERR_INVALID_PARAMETER
176709:31:48.918341 vminfo Error: Get token class 'user' for process 4 failed, rc=VERR_ACCESS_DENIED
176809:31:48.918341 vminfo Error: Get token class 'groups' for process 4 failed, rc=VERR_ACCESS_DENIED
176909:31:48.918341 vminfo Error: Get token class 'statistics' for process 4 failed, rc=VERR_ACCESS_DENIED
177009:31:48.918341 vminfo Error: Get token class 'user' for process 104 failed, rc=VERR_ACCESS_DENIED
177109:31:48.918341 vminfo Error: Get token class 'groups' for process 104 failed, rc=VERR_ACCESS_DENIED
177209:31:48.918341 vminfo Error: Get token class 'statistics' for process 104 failed, rc=VERR_ACCESS_DENIED
177309:31:48.918341 vminfo Error: Get token class 'user' for process 472 failed, rc=VERR_ACCESS_DENIED
177409:31:48.918341 vminfo Error: Get token class 'groups' for process 472 failed, rc=VERR_ACCESS_DENIED
177509:31:48.918341 vminfo Error: Get token class 'statistics' for process 472 failed, rc=VERR_ACCESS_DENIED
177609:31:48.918341 vminfo Error: Get token class 'user' for process 676 failed, rc=VERR_ACCESS_DENIED
177709:31:48.918341 vminfo Error: Get token class 'groups' for process 676 failed, rc=VERR_ACCESS_DENIED
177809:31:48.918341 vminfo Error: Get token class 'statistics' for process 676 failed, rc=VERR_ACCESS_DENIED
177909:31:48.918341 vminfo Error: Get token class 'user' for process 756 failed, rc=VERR_ACCESS_DENIED
178009:31:48.918341 vminfo Error: Get token class 'groups' for process 756 failed, rc=VERR_ACCESS_DENIED
178109:31:48.918341 vminfo Error: Get token class 'statistics' for process 756 failed, rc=VERR_ACCESS_DENIED
178209:31:48.918341 vminfo Error: Get token class 'user' for process 768 failed, rc=VERR_ACCESS_DENIED
178309:31:48.918341 vminfo Error: Get token class 'groups' for process 768 failed, rc=VERR_ACCESS_DENIED
178409:31:48.918341 vminfo Error: Get token class 'statistics' for process 768 failed, rc=VERR_ACCESS_DENIED
178509:31:48.918341 vminfo Error: Get token class 'user' for process 876 failed, rc=VERR_ACCESS_DENIED
178609:31:48.918341 vminfo Error: Get token class 'groups' for process 876 failed, rc=VERR_ACCESS_DENIED
178709:31:48.918341 vminfo Error: Get token class 'statistics' for process 876 failed, rc=VERR_ACCESS_DENIED
178809:31:48.918341 vminfo Error: Get token class 'user' for process 2532 failed, rc=VERR_ACCESS_DENIED
178909:31:48.918341 vminfo Error: Get token class 'groups' for process 2532 failed, rc=VERR_ACCESS_DENIED
179009:31:48.918341 vminfo Error: Get token class 'statistics' for process 2532 failed, rc=VERR_ACCESS_DENIED
179109:31:48.918341 vminfo Error: Get token class 'user' for process 4136 failed, rc=VERR_ACCESS_DENIED
179209:31:48.918341 vminfo Error: Get token class 'groups' for process 4136 failed, rc=VERR_ACCESS_DENIED
179309:31:48.918341 vminfo Error: Get token class 'statistics' for process 4136 failed, rc=VERR_ACCESS_DENIED
179409:31:48.918341 vminfo Error: Get token class 'user' for process 5212 failed, rc=VERR_ACCESS_DENIED
179509:31:48.918341 vminfo Error: Get token class 'groups' for process 5212 failed, rc=VERR_ACCESS_DENIED
179609:31:48.918341 vminfo Error: Get token class 'statistics' for process 5212 failed, rc=VERR_ACCESS_DENIED
179709:31:48.918341 vminfo Handling session 1 (of 17)
179809:31:48.918341 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2145999, LogonType=3
179909:31:48.918341 vminfo Handling session 2 (of 17)
180009:31:48.918341 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2113823, LogonType=3
180109:31:48.918341 vminfo Handling session 3 (of 17)
180209:31:48.918341 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2041868, LogonType=3
180309:31:48.918341 vminfo Handling session 4 (of 17)
180409:31:48.918341 vminfo Session data: Name=nx, SessionID=0, LogonID=0,1997776, LogonType=3
180509:31:48.918341 vminfo Handling session 5 (of 17)
180609:31:48.918341 vminfo Session data: Name=user, SessionID=1, LogonID=0,1970648, LogonType=2
180709:31:48.918341 vminfo Session LogonType=2 is supported -- looking up SID + type ...
180809:31:48.918341 vminfo Account User=user, Session=1, LogonID=0,1970648, AuthPkg=Negotiate, Domain=DOMAIN
180909:31:48.934006 vminfo Account User=user, WTSConnectState=0 (4)
181009:31:48.934006 vminfo Account User=user using TCS/RDP, state=0
181109:31:48.934006 vminfo Account User=user is logged in
181209:31:48.934006 vminfo Handling user=user, domain=DOMAIN, package=Negotiate, session=1
181309:31:48.934006 vminfo Session 1: PID=6784 (fInt=true ): C:\Windows\System32\svchost.exe
181409:31:48.934006 vminfo Session 1: PID=264 (fInt=true ): C:\Windows\System32\sihost.exe
181509:31:48.934006 vminfo Session 1: PID=3148 (fInt=true ): C:\Windows\System32\svchost.exe
181609:31:48.934006 vminfo Session 1: PID=7176 (fInt=true ): C:\Windows\System32\taskhostw.exe
181709:31:48.934006 vminfo Session 1: PID=7268 (fInt=true ): C:\Windows\System32\ctfmon.exe
181809:31:48.934006 vminfo Session 1: PID=8732 (fInt=true ): C:\Windows\explorer.exe
181909:31:48.934006 vminfo Session 1: PID=9016 (fInt=true ): C:\Program Files (x86)\NoMachine\bin\nxclient.bin
182009:31:48.934006 vminfo Session 1: PID=8260 (fInt=true ): C:\Program Files\McAfee\Agent\x86\UpdaterUI.exe
182109:31:48.934006 vminfo Session 1: PID=8828 (fInt=true ): C:\Program Files\Classic Shell\ClassicStartMenu.exe
182209:31:48.934006 vminfo Session 1: PID=8488 (fInt=true ): C:\Program Files\McAfee\Agent\x86\mctray.exe
182309:31:48.934006 vminfo Session 1: PID=9172 (fInt=true ): C:\Program Files\TortoiseSVN\bin\TSVNCache.exe
182409:31:48.934006 vminfo Session 1: PID=9280 (fInt=true ): C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe
182509:31:48.934006 vminfo Session 1: PID=9652 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
182609:31:48.934006 vminfo Session 1: PID=9728 (fInt=true ): C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe
182709:31:48.934006 vminfo Session 1: PID=9880 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
182809:31:48.934006 vminfo Session 1: PID=9944 (fInt=true ): C:\Windows\System32\dllhost.exe
182909:31:48.934006 vminfo Session 1: PID=8128 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17112.19011.0_x64__8wekyb3d8bbwe\Video.UI.exe
183009:31:48.934006 vminfo Session 1: PID=9528 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
183109:31:48.934006 vminfo Session 1: PID=10292 (fInt=true ): C:\Program Files\Windows Defender\MSASCuiL.exe
183209:31:48.934006 vminfo Session 1: PID=10324 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
183309:31:48.934006 vminfo Session 1: PID=10440 (fInt=true ): C:\Windows\System32\VBoxTray.exe
183409:31:48.934006 vminfo Session 1: PID=10596 (fInt=true ): C:\Users\user\Documents\Visual Studio 2017\Projects\vboxtray_mon\vboxtray_mon\bin\Release\vboxtray_mon.exe
183509:31:48.934006 vminfo Session 1: PID=10612 (fInt=true ): C:\Windows\System32\conhost.exe
183609:31:48.934006 vminfo Session 1: PID=10720 (fInt=true ): C:\Program Files (x86)\FileZilla Server\FileZilla Server Interface.exe
183709:31:48.934006 vminfo Session 1: PID=9808 (fInt=true ): C:\Windows\System32\svchost.exe
183809:31:48.934006 vminfo Session 1: PID=6716 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18011.15918.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
183909:31:48.934006 vminfo Session 1: PID=6688 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
184009:31:48.934006 vminfo Session 1: PID=10200 (fInt=true ): C:\Windows\System32\ApplicationFrameHost.exe
184109:31:48.934006 vminfo Session 1: PID=4868 (fInt=true ): C:\Windows\ImmersiveControlPanel\SystemSettings.exe
184209:31:48.934006 vminfo Session 1: PID=1444 (fInt=true ): C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe
184309:31:48.934006 vminfo Session 1: PID=9504 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
184409:31:48.934006 vminfo Session 1: PID=10840 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
184509:31:48.934006 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/Session/1' = '#12154: cSessionProcs=32 (of 156 procs total)'
184609:31:48.934006 vminfo Adding new user=user (session=1) with 32 processes
184709:31:48.934006 vminfo Handling session 6 (of 17)
184809:31:48.934006 vminfo Session data: Name=user, SessionID=1, LogonID=0,1970599, LogonType=2
184909:31:48.934006 vminfo Session LogonType=2 is supported -- looking up SID + type ...
185009:31:48.934006 vminfo Account User=user, Session=1, LogonID=0,1970599, AuthPkg=Kerberos, Domain=DOMAIN
185109:31:48.934006 vminfo Account User=user, WTSConnectState=0 (4)
185209:31:48.934006 vminfo Account User=user using TCS/RDP, state=0
185309:31:48.934006 vminfo Account User=user is logged in
185409:31:48.934006 vminfo Handling user=user, domain=DOMAIN, package=Kerberos, session=1
185509:31:48.934006 vminfo Session 1: PID=6784 (fInt=true ): C:\Windows\System32\svchost.exe
185609:31:48.934006 vminfo Session 1: PID=264 (fInt=true ): C:\Windows\System32\sihost.exe
185709:31:48.934006 vminfo Session 1: PID=3148 (fInt=true ): C:\Windows\System32\svchost.exe
185809:31:48.934006 vminfo Session 1: PID=7176 (fInt=true ): C:\Windows\System32\taskhostw.exe
185909:31:48.934006 vminfo Session 1: PID=7268 (fInt=true ): C:\Windows\System32\ctfmon.exe
186009:31:48.934006 vminfo Session 1: PID=8732 (fInt=true ): C:\Windows\explorer.exe
186109:31:48.934006 vminfo Session 1: PID=9016 (fInt=true ): C:\Program Files (x86)\NoMachine\bin\nxclient.bin
186209:31:48.934006 vminfo Session 1: PID=8260 (fInt=true ): C:\Program Files\McAfee\Agent\x86\UpdaterUI.exe
186309:31:48.934006 vminfo Session 1: PID=8828 (fInt=true ): C:\Program Files\Classic Shell\ClassicStartMenu.exe
186409:31:48.934006 vminfo Session 1: PID=8488 (fInt=true ): C:\Program Files\McAfee\Agent\x86\mctray.exe
186509:31:48.934006 vminfo Session 1: PID=9172 (fInt=true ): C:\Program Files\TortoiseSVN\bin\TSVNCache.exe
186609:31:48.934006 vminfo Session 1: PID=9280 (fInt=true ): C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe
186709:31:48.934006 vminfo Session 1: PID=9652 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
186809:31:48.934006 vminfo Session 1: PID=9728 (fInt=true ): C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe
186909:31:48.934006 vminfo Session 1: PID=9880 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
187009:31:48.934006 vminfo Session 1: PID=9944 (fInt=true ): C:\Windows\System32\dllhost.exe
187109:31:48.934006 vminfo Session 1: PID=8128 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17112.19011.0_x64__8wekyb3d8bbwe\Video.UI.exe
187209:31:48.934006 vminfo Session 1: PID=9528 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
187309:31:48.934006 vminfo Session 1: PID=10292 (fInt=true ): C:\Program Files\Windows Defender\MSASCuiL.exe
187409:31:48.934006 vminfo Session 1: PID=10324 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
187509:31:48.934006 vminfo Session 1: PID=10440 (fInt=true ): C:\Windows\System32\VBoxTray.exe
187609:31:48.934006 vminfo Session 1: PID=10596 (fInt=true ): C:\Users\user\Documents\Visual Studio 2017\Projects\vboxtray_mon\vboxtray_mon\bin\Release\vboxtray_mon.exe
187709:31:48.934006 vminfo Session 1: PID=10612 (fInt=true ): C:\Windows\System32\conhost.exe
187809:31:48.934006 vminfo Session 1: PID=10720 (fInt=true ): C:\Program Files (x86)\FileZilla Server\FileZilla Server Interface.exe
187909:31:48.934006 vminfo Session 1: PID=9808 (fInt=true ): C:\Windows\System32\svchost.exe
188009:31:48.934006 vminfo Session 1: PID=6716 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18011.15918.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
188109:31:48.934006 vminfo Session 1: PID=6688 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
188209:31:48.951141 vminfo Session 1: PID=10200 (fInt=true ): C:\Windows\System32\ApplicationFrameHost.exe
188309:31:48.951141 vminfo Session 1: PID=4868 (fInt=true ): C:\Windows\ImmersiveControlPanel\SystemSettings.exe
188409:31:48.951141 vminfo Session 1: PID=1444 (fInt=true ): C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe
188509:31:48.951141 vminfo Session 1: PID=9504 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
188609:31:48.951141 vminfo Session 1: PID=10840 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
188709:31:48.951141 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/Session/1' = '#12154: cSessionProcs=32 (of 156 procs total)'
188809:31:48.951141 vminfo Adding new user=user (session=1) with 32 processes
188909:31:48.951141 vminfo Handling session 7 (of 17)
189009:31:48.951141 vminfo Session data: Name=nx, SessionID=0, LogonID=0,685607, LogonType=3
189109:31:48.951141 vminfo Handling session 8 (of 17)
189209:31:48.951141 vminfo Session data: Name=ANONYMOUS LOGON, SessionID=0, LogonID=0,649881, LogonType=3
189309:31:48.951141 vminfo Handling session 9 (of 17)
189409:31:48.951141 vminfo Session data: Name=IUSR, SessionID=0, LogonID=0,995, LogonType=5
189509:31:48.951141 vminfo Handling session 10 (of 17)
189609:31:48.951141 vminfo Session data: Name=DWM-1, SessionID=1, LogonID=0,61006, LogonType=2
189709:31:48.951141 vminfo Session LogonType=2 is supported -- looking up SID + type ...
189809:31:48.951141 vminfo SID owner type=5 not handled, skipping
189909:31:48.951141 vminfo Account User=DWM-1 is not logged in
190009:31:48.951141 vminfo Handling session 11 (of 17)
190109:31:48.951141 vminfo Session data: Name=DWM-1, SessionID=1, LogonID=0,60973, LogonType=2
190209:31:48.951141 vminfo Session LogonType=2 is supported -- looking up SID + type ...
190309:31:48.951141 vminfo SID owner type=5 not handled, skipping
190409:31:48.951141 vminfo Account User=DWM-1 is not logged in
190509:31:48.951141 vminfo Handling session 12 (of 17)
190609:31:48.951141 vminfo Session data: Name=MACHINE$, SessionID=0, LogonID=0,996, LogonType=5
190709:31:48.951141 vminfo Handling session 13 (of 17)
190809:31:48.951141 vminfo Session data: Name=LOCAL SERVICE, SessionID=0, LogonID=0,997, LogonType=5
190909:31:48.951141 vminfo Handling session 14 (of 17)
191009:31:48.951141 vminfo Session data: Name=UMFD-1, SessionID=1, LogonID=0,34521, LogonType=2
191109:31:48.951141 vminfo Session LogonType=2 is supported -- looking up SID + type ...
191209:31:48.951141 vminfo SID owner type=5 not handled, skipping
191309:31:48.951141 vminfo Account User=UMFD-1 is not logged in
191409:31:48.951141 vminfo Handling session 15 (of 17)
191509:31:48.951141 vminfo Session data: Name=UMFD-0, SessionID=0, LogonID=0,34482, LogonType=2
191609:31:48.951141 vminfo Handling session 16 (of 17)
191709:31:48.951141 vminfo Session data: Name=, SessionID=0, LogonID=0,32336, LogonType=0
191809:31:48.951141 vminfo Handling session 17 (of 17)
191909:31:48.951141 vminfo Session data: Name=MACHINE$, SessionID=0, LogonID=0,999, LogonType=0
192009:31:48.951141 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA' = '#12154: cSessions=17, cProcs=156, cUniqueUsers=2'
192109:31:48.951141 vminfo Found 2 unique logged-in user(s)
192209:31:48.951141 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/User/0' = '#12154: szName=user, sessionID=1, cProcs=32'
192309:31:48.951141 vminfo User 'user' has 32 interactive processes (session=1)
192409:31:48.951141 vminfo Error: Error querying last input for user 'user', rc=VERR_PIPE_BUSY
192509:31:48.951141 vminfo cUsersInList=0, pszUserList=<NULL>, rc=VERR_PIPE_BUSY
192609:31:48.951141 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/LoggedInUsersList' resulted in rc=VINF_NO_CHANGE
192709:31:48.951141 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/LoggedInUsers' resulted in rc=VINF_NO_CHANGE
192809:31:48.951141 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/NoLoggedInUsers' resulted in rc=VINF_NO_CHANGE
192909:31:48.951141 vminfo Writing users returned with rc=VINF_NO_CHANGE
193009:31:48.951141 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/IP' resulted in rc=VINF_NO_CHANGE
193109:31:48.951141 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/Broadcast' resulted in rc=VINF_NO_CHANGE
193209:31:48.951141 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/Netmask' resulted in rc=VINF_NO_CHANGE
193309:31:48.951141 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/Status' resulted in rc=VINF_NO_CHANGE
193409:31:48.951141 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/MAC' resulted in rc=VINF_NO_CHANGE
193509:31:48.951141 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/IP' resulted in rc=VINF_NO_CHANGE
193609:31:48.951141 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/Broadcast' resulted in rc=VINF_NO_CHANGE
193709:31:48.951141 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/Netmask' resulted in rc=VINF_NO_CHANGE
193809:31:48.951141 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/Status' resulted in rc=VINF_NO_CHANGE
193909:31:48.951141 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/MAC' resulted in rc=VINF_NO_CHANGE
194009:31:48.951141 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/IP' resulted in rc=VINF_NO_CHANGE
194109:31:48.951141 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/Broadcast' resulted in rc=VINF_NO_CHANGE
194209:31:48.951141 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/Netmask' resulted in rc=VINF_NO_CHANGE
194309:31:48.951141 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/Status' resulted in rc=VINF_NO_CHANGE
194409:31:48.951141 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/MAC' resulted in rc=VINF_NO_CHANGE
194509:31:48.951141 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/IP' resulted in rc=VINF_NO_CHANGE
194609:31:48.951141 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/Broadcast' resulted in rc=VINF_NO_CHANGE
194709:31:48.951141 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/Netmask' resulted in rc=VINF_NO_CHANGE
194809:31:48.951141 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/Status' resulted in rc=VINF_NO_CHANGE
194909:31:48.951141 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/MAC' resulted in rc=VINF_NO_CHANGE
195009:31:48.951141 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/IP' resulted in rc=VINF_NO_CHANGE
195109:31:48.951141 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/Broadcast' resulted in rc=VINF_NO_CHANGE
195209:31:48.951141 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/Netmask' resulted in rc=VINF_NO_CHANGE
195309:31:48.951141 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/Status' resulted in rc=VINF_NO_CHANGE
195409:31:48.951141 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/MAC' resulted in rc=VINF_NO_CHANGE
195509:31:48.951141 vminfo [PropCache 00007ff6b2962520]: Written '/VirtualBox/GuestInfo/Net/Count'='5' (flags: 6), rc=VINF_SUCCESS
195609:31:48.951141 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/Count' resulted in rc=VINF_SUCCESS
195709:31:48.951141 vminfo Guest Property: /VirtualBox/HostInfo/VRDP/ActiveClient not found
195809:31:48.951141 vminfo VRDP: Handling location awareness done
195909:31:53.963231 vminfo Found 17 sessions
196009:31:53.963231 vminfo Error: Get token class 'user' for process 0 failed, rc=VERR_INVALID_PARAMETER
196109:31:53.963231 vminfo Error: Get token class 'groups' for process 0 failed, rc=VERR_INVALID_PARAMETER
196209:31:53.963231 vminfo Error: Get token class 'statistics' for process 0 failed, rc=VERR_INVALID_PARAMETER
196309:31:53.963231 vminfo Error: Get token class 'user' for process 4 failed, rc=VERR_ACCESS_DENIED
196409:31:53.963231 vminfo Error: Get token class 'groups' for process 4 failed, rc=VERR_ACCESS_DENIED
196509:31:53.963231 vminfo Error: Get token class 'statistics' for process 4 failed, rc=VERR_ACCESS_DENIED
196609:31:53.963231 vminfo Error: Get token class 'user' for process 104 failed, rc=VERR_ACCESS_DENIED
196709:31:53.963231 vminfo Error: Get token class 'groups' for process 104 failed, rc=VERR_ACCESS_DENIED
196809:31:53.963231 vminfo Error: Get token class 'statistics' for process 104 failed, rc=VERR_ACCESS_DENIED
196909:31:53.963231 vminfo Error: Get token class 'user' for process 472 failed, rc=VERR_ACCESS_DENIED
197009:31:53.963231 vminfo Error: Get token class 'groups' for process 472 failed, rc=VERR_ACCESS_DENIED
197109:31:53.963231 vminfo Error: Get token class 'statistics' for process 472 failed, rc=VERR_ACCESS_DENIED
197209:31:53.963231 vminfo Error: Get token class 'user' for process 676 failed, rc=VERR_ACCESS_DENIED
197309:31:53.963231 vminfo Error: Get token class 'groups' for process 676 failed, rc=VERR_ACCESS_DENIED
197409:31:53.963231 vminfo Error: Get token class 'statistics' for process 676 failed, rc=VERR_ACCESS_DENIED
197509:31:53.963231 vminfo Error: Get token class 'user' for process 756 failed, rc=VERR_ACCESS_DENIED
197609:31:53.963231 vminfo Error: Get token class 'groups' for process 756 failed, rc=VERR_ACCESS_DENIED
197709:31:53.963231 vminfo Error: Get token class 'statistics' for process 756 failed, rc=VERR_ACCESS_DENIED
197809:31:53.963231 vminfo Error: Get token class 'user' for process 768 failed, rc=VERR_ACCESS_DENIED
197909:31:53.963231 vminfo Error: Get token class 'groups' for process 768 failed, rc=VERR_ACCESS_DENIED
198009:31:53.963231 vminfo Error: Get token class 'statistics' for process 768 failed, rc=VERR_ACCESS_DENIED
198109:31:53.963231 vminfo Error: Get token class 'user' for process 876 failed, rc=VERR_ACCESS_DENIED
198209:31:53.963231 vminfo Error: Get token class 'groups' for process 876 failed, rc=VERR_ACCESS_DENIED
198309:31:53.963231 vminfo Error: Get token class 'statistics' for process 876 failed, rc=VERR_ACCESS_DENIED
198409:31:53.963231 vminfo Error: Get token class 'user' for process 2532 failed, rc=VERR_ACCESS_DENIED
198509:31:53.963231 vminfo Error: Get token class 'groups' for process 2532 failed, rc=VERR_ACCESS_DENIED
198609:31:53.963231 vminfo Error: Get token class 'statistics' for process 2532 failed, rc=VERR_ACCESS_DENIED
198709:31:53.963231 vminfo Error: Get token class 'user' for process 4136 failed, rc=VERR_ACCESS_DENIED
198809:31:53.963231 vminfo Error: Get token class 'groups' for process 4136 failed, rc=VERR_ACCESS_DENIED
198909:31:53.963231 vminfo Error: Get token class 'statistics' for process 4136 failed, rc=VERR_ACCESS_DENIED
199009:31:53.963231 vminfo Error: Get token class 'user' for process 5212 failed, rc=VERR_ACCESS_DENIED
199109:31:53.963231 vminfo Error: Get token class 'groups' for process 5212 failed, rc=VERR_ACCESS_DENIED
199209:31:53.963231 vminfo Error: Get token class 'statistics' for process 5212 failed, rc=VERR_ACCESS_DENIED
199309:31:53.963231 vminfo Handling session 1 (of 17)
199409:31:53.963231 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2145999, LogonType=3
199509:31:53.963231 vminfo Handling session 2 (of 17)
199609:31:53.963231 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2113823, LogonType=3
199709:31:53.963231 vminfo Handling session 3 (of 17)
199809:31:53.963231 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2041868, LogonType=3
199909:31:53.963231 vminfo Handling session 4 (of 17)
200009:31:53.963231 vminfo Session data: Name=nx, SessionID=0, LogonID=0,1997776, LogonType=3
200109:31:53.963231 vminfo Handling session 5 (of 17)
200209:31:53.963231 vminfo Session data: Name=user, SessionID=1, LogonID=0,1970648, LogonType=2
200309:31:53.963231 vminfo Session LogonType=2 is supported -- looking up SID + type ...
200409:31:53.979359 vminfo Account User=user, Session=1, LogonID=0,1970648, AuthPkg=Negotiate, Domain=DOMAIN
200509:31:53.979359 vminfo Account User=user, WTSConnectState=0 (4)
200609:31:53.979359 vminfo Account User=user using TCS/RDP, state=0
200709:31:53.979359 vminfo Account User=user is logged in
200809:31:53.979359 vminfo Handling user=user, domain=DOMAIN, package=Negotiate, session=1
200909:31:53.979359 vminfo Session 1: PID=6784 (fInt=true ): C:\Windows\System32\svchost.exe
201009:31:53.979359 vminfo Session 1: PID=264 (fInt=true ): C:\Windows\System32\sihost.exe
201109:31:53.979359 vminfo Session 1: PID=3148 (fInt=true ): C:\Windows\System32\svchost.exe
201209:31:53.979359 vminfo Session 1: PID=7176 (fInt=true ): C:\Windows\System32\taskhostw.exe
201309:31:53.979359 vminfo Session 1: PID=7268 (fInt=true ): C:\Windows\System32\ctfmon.exe
201409:31:53.979359 vminfo Session 1: PID=8732 (fInt=true ): C:\Windows\explorer.exe
201509:31:53.979359 vminfo Session 1: PID=9016 (fInt=true ): C:\Program Files (x86)\NoMachine\bin\nxclient.bin
201609:31:53.979359 vminfo Session 1: PID=8260 (fInt=true ): C:\Program Files\McAfee\Agent\x86\UpdaterUI.exe
201709:31:53.979359 vminfo Session 1: PID=8828 (fInt=true ): C:\Program Files\Classic Shell\ClassicStartMenu.exe
201809:31:53.979359 vminfo Session 1: PID=8488 (fInt=true ): C:\Program Files\McAfee\Agent\x86\mctray.exe
201909:31:53.979359 vminfo Session 1: PID=9172 (fInt=true ): C:\Program Files\TortoiseSVN\bin\TSVNCache.exe
202009:31:53.979359 vminfo Session 1: PID=9280 (fInt=true ): C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe
202109:31:53.979359 vminfo Session 1: PID=9652 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
202209:31:53.979359 vminfo Session 1: PID=9728 (fInt=true ): C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe
202309:31:53.979359 vminfo Session 1: PID=9880 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
202409:31:53.979359 vminfo Session 1: PID=9944 (fInt=true ): C:\Windows\System32\dllhost.exe
202509:31:53.979359 vminfo Session 1: PID=8128 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17112.19011.0_x64__8wekyb3d8bbwe\Video.UI.exe
202609:31:53.979359 vminfo Session 1: PID=9528 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
202709:31:53.979359 vminfo Session 1: PID=10292 (fInt=true ): C:\Program Files\Windows Defender\MSASCuiL.exe
202809:31:53.979359 vminfo Session 1: PID=10324 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
202909:31:53.979359 vminfo Session 1: PID=10440 (fInt=true ): C:\Windows\System32\VBoxTray.exe
203009:31:53.979359 vminfo Session 1: PID=10596 (fInt=true ): C:\Users\user\Documents\Visual Studio 2017\Projects\vboxtray_mon\vboxtray_mon\bin\Release\vboxtray_mon.exe
203109:31:53.979359 vminfo Session 1: PID=10612 (fInt=true ): C:\Windows\System32\conhost.exe
203209:31:53.979359 vminfo Session 1: PID=10720 (fInt=true ): C:\Program Files (x86)\FileZilla Server\FileZilla Server Interface.exe
203309:31:53.979359 vminfo Session 1: PID=9808 (fInt=true ): C:\Windows\System32\svchost.exe
203409:31:53.979359 vminfo Session 1: PID=6716 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18011.15918.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
203509:31:53.979359 vminfo Session 1: PID=6688 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
203609:31:53.979359 vminfo Session 1: PID=10200 (fInt=true ): C:\Windows\System32\ApplicationFrameHost.exe
203709:31:53.979359 vminfo Session 1: PID=4868 (fInt=true ): C:\Windows\ImmersiveControlPanel\SystemSettings.exe
203809:31:53.979359 vminfo Session 1: PID=1444 (fInt=true ): C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe
203909:31:53.979359 vminfo Session 1: PID=9504 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
204009:31:53.979359 vminfo Session 1: PID=10840 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
204109:31:53.979359 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/Session/1' = '#12155: cSessionProcs=32 (of 156 procs total)'
204209:31:53.979359 vminfo Adding new user=user (session=1) with 32 processes
204309:31:53.979359 vminfo Handling session 6 (of 17)
204409:31:53.979359 vminfo Session data: Name=user, SessionID=1, LogonID=0,1970599, LogonType=2
204509:31:53.979359 vminfo Session LogonType=2 is supported -- looking up SID + type ...
204609:31:53.979359 vminfo Account User=user, Session=1, LogonID=0,1970599, AuthPkg=Kerberos, Domain=DOMAIN
204709:31:53.979359 vminfo Account User=user, WTSConnectState=0 (4)
204809:31:53.979359 vminfo Account User=user using TCS/RDP, state=0
204909:31:53.979359 vminfo Account User=user is logged in
205009:31:53.979359 vminfo Handling user=user, domain=DOMAIN, package=Kerberos, session=1
205109:31:53.979359 vminfo Session 1: PID=6784 (fInt=true ): C:\Windows\System32\svchost.exe
205209:31:53.979359 vminfo Session 1: PID=264 (fInt=true ): C:\Windows\System32\sihost.exe
205309:31:53.979359 vminfo Session 1: PID=3148 (fInt=true ): C:\Windows\System32\svchost.exe
205409:31:53.979359 vminfo Session 1: PID=7176 (fInt=true ): C:\Windows\System32\taskhostw.exe
205509:31:53.979359 vminfo Session 1: PID=7268 (fInt=true ): C:\Windows\System32\ctfmon.exe
205609:31:53.979359 vminfo Session 1: PID=8732 (fInt=true ): C:\Windows\explorer.exe
205709:31:53.979359 vminfo Session 1: PID=9016 (fInt=true ): C:\Program Files (x86)\NoMachine\bin\nxclient.bin
205809:31:53.979359 vminfo Session 1: PID=8260 (fInt=true ): C:\Program Files\McAfee\Agent\x86\UpdaterUI.exe
205909:31:53.979359 vminfo Session 1: PID=8828 (fInt=true ): C:\Program Files\Classic Shell\ClassicStartMenu.exe
206009:31:53.979359 vminfo Session 1: PID=8488 (fInt=true ): C:\Program Files\McAfee\Agent\x86\mctray.exe
206109:31:53.979359 vminfo Session 1: PID=9172 (fInt=true ): C:\Program Files\TortoiseSVN\bin\TSVNCache.exe
206209:31:53.979359 vminfo Session 1: PID=9280 (fInt=true ): C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe
206309:31:53.979359 vminfo Session 1: PID=9652 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
206409:31:53.979359 vminfo Session 1: PID=9728 (fInt=true ): C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe
206509:31:53.979359 vminfo Session 1: PID=9880 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
206609:31:53.979359 vminfo Session 1: PID=9944 (fInt=true ): C:\Windows\System32\dllhost.exe
206709:31:53.979359 vminfo Session 1: PID=8128 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17112.19011.0_x64__8wekyb3d8bbwe\Video.UI.exe
206809:31:53.979359 vminfo Session 1: PID=9528 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
206909:31:53.979359 vminfo Session 1: PID=10292 (fInt=true ): C:\Program Files\Windows Defender\MSASCuiL.exe
207009:31:53.979359 vminfo Session 1: PID=10324 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
207109:31:53.979359 vminfo Session 1: PID=10440 (fInt=true ): C:\Windows\System32\VBoxTray.exe
207209:31:53.979359 vminfo Session 1: PID=10596 (fInt=true ): C:\Users\user\Documents\Visual Studio 2017\Projects\vboxtray_mon\vboxtray_mon\bin\Release\vboxtray_mon.exe
207309:31:53.979359 vminfo Session 1: PID=10612 (fInt=true ): C:\Windows\System32\conhost.exe
207409:31:53.979359 vminfo Session 1: PID=10720 (fInt=true ): C:\Program Files (x86)\FileZilla Server\FileZilla Server Interface.exe
207509:31:53.979359 vminfo Session 1: PID=9808 (fInt=true ): C:\Windows\System32\svchost.exe
207609:31:53.995971 vminfo Session 1: PID=6716 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18011.15918.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
207709:31:53.995971 vminfo Session 1: PID=6688 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
207809:31:53.995971 vminfo Session 1: PID=10200 (fInt=true ): C:\Windows\System32\ApplicationFrameHost.exe
207909:31:53.995971 vminfo Session 1: PID=4868 (fInt=true ): C:\Windows\ImmersiveControlPanel\SystemSettings.exe
208009:31:53.995971 vminfo Session 1: PID=1444 (fInt=true ): C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe
208109:31:53.995971 vminfo Session 1: PID=9504 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
208209:31:53.995971 vminfo Session 1: PID=10840 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
208309:31:53.995971 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/Session/1' = '#12155: cSessionProcs=32 (of 156 procs total)'
208409:31:53.995971 vminfo Adding new user=user (session=1) with 32 processes
208509:31:53.995971 vminfo Handling session 7 (of 17)
208609:31:53.995971 vminfo Session data: Name=nx, SessionID=0, LogonID=0,685607, LogonType=3
208709:31:53.995971 vminfo Handling session 8 (of 17)
208809:31:53.995971 vminfo Session data: Name=ANONYMOUS LOGON, SessionID=0, LogonID=0,649881, LogonType=3
208909:31:53.995971 vminfo Handling session 9 (of 17)
209009:31:53.995971 vminfo Session data: Name=IUSR, SessionID=0, LogonID=0,995, LogonType=5
209109:31:53.995971 vminfo Handling session 10 (of 17)
209209:31:53.995971 vminfo Session data: Name=DWM-1, SessionID=1, LogonID=0,61006, LogonType=2
209309:31:53.995971 vminfo Session LogonType=2 is supported -- looking up SID + type ...
209409:31:53.995971 vminfo SID owner type=5 not handled, skipping
209509:31:53.995971 vminfo Account User=DWM-1 is not logged in
209609:31:53.995971 vminfo Handling session 11 (of 17)
209709:31:53.995971 vminfo Session data: Name=DWM-1, SessionID=1, LogonID=0,60973, LogonType=2
209809:31:53.995971 vminfo Session LogonType=2 is supported -- looking up SID + type ...
209909:31:53.995971 vminfo SID owner type=5 not handled, skipping
210009:31:53.995971 vminfo Account User=DWM-1 is not logged in
210109:31:53.995971 vminfo Handling session 12 (of 17)
210209:31:53.995971 vminfo Session data: Name=MACHINE$, SessionID=0, LogonID=0,996, LogonType=5
210309:31:53.995971 vminfo Handling session 13 (of 17)
210409:31:53.995971 vminfo Session data: Name=LOCAL SERVICE, SessionID=0, LogonID=0,997, LogonType=5
210509:31:53.995971 vminfo Handling session 14 (of 17)
210609:31:53.995971 vminfo Session data: Name=UMFD-1, SessionID=1, LogonID=0,34521, LogonType=2
210709:31:53.995971 vminfo Session LogonType=2 is supported -- looking up SID + type ...
210809:31:53.995971 vminfo SID owner type=5 not handled, skipping
210909:31:53.995971 vminfo Account User=UMFD-1 is not logged in
211009:31:53.995971 vminfo Handling session 15 (of 17)
211109:31:53.995971 vminfo Session data: Name=UMFD-0, SessionID=0, LogonID=0,34482, LogonType=2
211209:31:53.995971 vminfo Handling session 16 (of 17)
211309:31:53.995971 vminfo Session data: Name=, SessionID=0, LogonID=0,32336, LogonType=0
211409:31:53.995971 vminfo Handling session 17 (of 17)
211509:31:53.995971 vminfo Session data: Name=MACHINE$, SessionID=0, LogonID=0,999, LogonType=0
211609:31:53.995971 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA' = '#12155: cSessions=17, cProcs=156, cUniqueUsers=2'
211709:31:53.995971 vminfo Found 2 unique logged-in user(s)
211809:31:53.995971 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/User/0' = '#12155: szName=user, sessionID=1, cProcs=32'
211909:31:53.995971 vminfo User 'user' has 32 interactive processes (session=1)
212009:31:53.995971 vminfo Error: Error querying last input for user 'user', rc=VERR_PIPE_BUSY
212109:31:53.995971 vminfo cUsersInList=0, pszUserList=<NULL>, rc=VERR_PIPE_BUSY
212209:31:53.995971 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/LoggedInUsersList' resulted in rc=VINF_NO_CHANGE
212309:31:53.995971 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/LoggedInUsers' resulted in rc=VINF_NO_CHANGE
212409:31:53.995971 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/NoLoggedInUsers' resulted in rc=VINF_NO_CHANGE
212509:31:53.995971 vminfo Writing users returned with rc=VINF_NO_CHANGE
212609:31:53.995971 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/IP' resulted in rc=VINF_NO_CHANGE
212709:31:53.995971 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/Broadcast' resulted in rc=VINF_NO_CHANGE
212809:31:53.995971 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/Netmask' resulted in rc=VINF_NO_CHANGE
212909:31:53.995971 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/Status' resulted in rc=VINF_NO_CHANGE
213009:31:53.995971 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/MAC' resulted in rc=VINF_NO_CHANGE
213109:31:53.995971 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/IP' resulted in rc=VINF_NO_CHANGE
213209:31:53.995971 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/Broadcast' resulted in rc=VINF_NO_CHANGE
213309:31:53.995971 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/Netmask' resulted in rc=VINF_NO_CHANGE
213409:31:53.995971 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/Status' resulted in rc=VINF_NO_CHANGE
213509:31:53.995971 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/MAC' resulted in rc=VINF_NO_CHANGE
213609:31:53.995971 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/IP' resulted in rc=VINF_NO_CHANGE
213709:31:53.995971 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/Broadcast' resulted in rc=VINF_NO_CHANGE
213809:31:53.995971 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/Netmask' resulted in rc=VINF_NO_CHANGE
213909:31:53.995971 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/Status' resulted in rc=VINF_NO_CHANGE
214009:31:53.995971 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/MAC' resulted in rc=VINF_NO_CHANGE
214109:31:53.995971 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/IP' resulted in rc=VINF_NO_CHANGE
214209:31:53.995971 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/Broadcast' resulted in rc=VINF_NO_CHANGE
214309:31:53.995971 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/Netmask' resulted in rc=VINF_NO_CHANGE
214409:31:53.995971 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/Status' resulted in rc=VINF_NO_CHANGE
214509:31:53.995971 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/MAC' resulted in rc=VINF_NO_CHANGE
214609:31:53.995971 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/IP' resulted in rc=VINF_NO_CHANGE
214709:31:53.995971 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/Broadcast' resulted in rc=VINF_NO_CHANGE
214809:31:53.995971 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/Netmask' resulted in rc=VINF_NO_CHANGE
214909:31:53.995971 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/Status' resulted in rc=VINF_NO_CHANGE
215009:31:53.995971 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/MAC' resulted in rc=VINF_NO_CHANGE
215109:31:53.995971 vminfo [PropCache 00007ff6b2962520]: Written '/VirtualBox/GuestInfo/Net/Count'='5' (flags: 6), rc=VINF_SUCCESS
215209:31:53.995971 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/Count' resulted in rc=VINF_SUCCESS
215309:31:53.995971 vminfo Guest Property: /VirtualBox/HostInfo/VRDP/ActiveClient not found
215409:31:53.995971 vminfo VRDP: Handling location awareness done
215509:31:56.146938 timesync vgsvcTimeSyncWorker: Host: 2019-02-26T09:31:56.022000000Z (MinAdjust: 200 ms), Guest: 2019-02-26T09:31:56.146938200Z => -124 938 200 ns drift
215609:31:59.004842 vminfo Found 17 sessions
215709:31:59.004842 vminfo Error: Get token class 'user' for process 0 failed, rc=VERR_INVALID_PARAMETER
215809:31:59.004842 vminfo Error: Get token class 'groups' for process 0 failed, rc=VERR_INVALID_PARAMETER
215909:31:59.004842 vminfo Error: Get token class 'statistics' for process 0 failed, rc=VERR_INVALID_PARAMETER
216009:31:59.004842 vminfo Error: Get token class 'user' for process 4 failed, rc=VERR_ACCESS_DENIED
216109:31:59.004842 vminfo Error: Get token class 'groups' for process 4 failed, rc=VERR_ACCESS_DENIED
216209:31:59.004842 vminfo Error: Get token class 'statistics' for process 4 failed, rc=VERR_ACCESS_DENIED
216309:31:59.004842 vminfo Error: Get token class 'user' for process 104 failed, rc=VERR_ACCESS_DENIED
216409:31:59.004842 vminfo Error: Get token class 'groups' for process 104 failed, rc=VERR_ACCESS_DENIED
216509:31:59.004842 vminfo Error: Get token class 'statistics' for process 104 failed, rc=VERR_ACCESS_DENIED
216609:31:59.004842 vminfo Error: Get token class 'user' for process 472 failed, rc=VERR_ACCESS_DENIED
216709:31:59.004842 vminfo Error: Get token class 'groups' for process 472 failed, rc=VERR_ACCESS_DENIED
216809:31:59.004842 vminfo Error: Get token class 'statistics' for process 472 failed, rc=VERR_ACCESS_DENIED
216909:31:59.004842 vminfo Error: Get token class 'user' for process 676 failed, rc=VERR_ACCESS_DENIED
217009:31:59.004842 vminfo Error: Get token class 'groups' for process 676 failed, rc=VERR_ACCESS_DENIED
217109:31:59.004842 vminfo Error: Get token class 'statistics' for process 676 failed, rc=VERR_ACCESS_DENIED
217209:31:59.004842 vminfo Error: Get token class 'user' for process 756 failed, rc=VERR_ACCESS_DENIED
217309:31:59.004842 vminfo Error: Get token class 'groups' for process 756 failed, rc=VERR_ACCESS_DENIED
217409:31:59.004842 vminfo Error: Get token class 'statistics' for process 756 failed, rc=VERR_ACCESS_DENIED
217509:31:59.004842 vminfo Error: Get token class 'user' for process 768 failed, rc=VERR_ACCESS_DENIED
217609:31:59.004842 vminfo Error: Get token class 'groups' for process 768 failed, rc=VERR_ACCESS_DENIED
217709:31:59.004842 vminfo Error: Get token class 'statistics' for process 768 failed, rc=VERR_ACCESS_DENIED
217809:31:59.004842 vminfo Error: Get token class 'user' for process 876 failed, rc=VERR_ACCESS_DENIED
217909:31:59.004842 vminfo Error: Get token class 'groups' for process 876 failed, rc=VERR_ACCESS_DENIED
218009:31:59.004842 vminfo Error: Get token class 'statistics' for process 876 failed, rc=VERR_ACCESS_DENIED
218109:31:59.004842 vminfo Error: Get token class 'user' for process 2532 failed, rc=VERR_ACCESS_DENIED
218209:31:59.004842 vminfo Error: Get token class 'groups' for process 2532 failed, rc=VERR_ACCESS_DENIED
218309:31:59.004842 vminfo Error: Get token class 'statistics' for process 2532 failed, rc=VERR_ACCESS_DENIED
218409:31:59.004842 vminfo Error: Get token class 'user' for process 4136 failed, rc=VERR_ACCESS_DENIED
218509:31:59.004842 vminfo Error: Get token class 'groups' for process 4136 failed, rc=VERR_ACCESS_DENIED
218609:31:59.004842 vminfo Error: Get token class 'statistics' for process 4136 failed, rc=VERR_ACCESS_DENIED
218709:31:59.004842 vminfo Error: Get token class 'user' for process 5212 failed, rc=VERR_ACCESS_DENIED
218809:31:59.004842 vminfo Error: Get token class 'groups' for process 5212 failed, rc=VERR_ACCESS_DENIED
218909:31:59.004842 vminfo Error: Get token class 'statistics' for process 5212 failed, rc=VERR_ACCESS_DENIED
219009:31:59.004842 vminfo Handling session 1 (of 17)
219109:31:59.004842 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2145999, LogonType=3
219209:31:59.004842 vminfo Handling session 2 (of 17)
219309:31:59.004842 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2113823, LogonType=3
219409:31:59.004842 vminfo Handling session 3 (of 17)
219509:31:59.004842 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2041868, LogonType=3
219609:31:59.004842 vminfo Handling session 4 (of 17)
219709:31:59.004842 vminfo Session data: Name=nx, SessionID=0, LogonID=0,1997776, LogonType=3
219809:31:59.004842 vminfo Handling session 5 (of 17)
219909:31:59.004842 vminfo Session data: Name=user, SessionID=1, LogonID=0,1970648, LogonType=2
220009:31:59.004842 vminfo Session LogonType=2 is supported -- looking up SID + type ...
220109:31:59.004842 vminfo Account User=user, Session=1, LogonID=0,1970648, AuthPkg=Negotiate, Domain=DOMAIN
220209:31:59.004842 vminfo Account User=user, WTSConnectState=0 (4)
220309:31:59.021573 vminfo Account User=user using TCS/RDP, state=0
220409:31:59.021573 vminfo Account User=user is logged in
220509:31:59.021573 vminfo Handling user=user, domain=DOMAIN, package=Negotiate, session=1
220609:31:59.021573 vminfo Session 1: PID=6784 (fInt=true ): C:\Windows\System32\svchost.exe
220709:31:59.021573 vminfo Session 1: PID=264 (fInt=true ): C:\Windows\System32\sihost.exe
220809:31:59.021573 vminfo Session 1: PID=3148 (fInt=true ): C:\Windows\System32\svchost.exe
220909:31:59.021573 vminfo Session 1: PID=7176 (fInt=true ): C:\Windows\System32\taskhostw.exe
221009:31:59.021573 vminfo Session 1: PID=7268 (fInt=true ): C:\Windows\System32\ctfmon.exe
221109:31:59.021573 vminfo Session 1: PID=8732 (fInt=true ): C:\Windows\explorer.exe
221209:31:59.021573 vminfo Session 1: PID=9016 (fInt=true ): C:\Program Files (x86)\NoMachine\bin\nxclient.bin
221309:31:59.021573 vminfo Session 1: PID=8260 (fInt=true ): C:\Program Files\McAfee\Agent\x86\UpdaterUI.exe
221409:31:59.021573 vminfo Session 1: PID=8828 (fInt=true ): C:\Program Files\Classic Shell\ClassicStartMenu.exe
221509:31:59.021573 vminfo Session 1: PID=8488 (fInt=true ): C:\Program Files\McAfee\Agent\x86\mctray.exe
221609:31:59.021573 vminfo Session 1: PID=9172 (fInt=true ): C:\Program Files\TortoiseSVN\bin\TSVNCache.exe
221709:31:59.021573 vminfo Session 1: PID=9280 (fInt=true ): C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe
221809:31:59.021573 vminfo Session 1: PID=9652 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
221909:31:59.021573 vminfo Session 1: PID=9728 (fInt=true ): C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe
222009:31:59.021573 vminfo Session 1: PID=9880 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
222109:31:59.021573 vminfo Session 1: PID=9944 (fInt=true ): C:\Windows\System32\dllhost.exe
222209:31:59.021573 vminfo Session 1: PID=8128 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17112.19011.0_x64__8wekyb3d8bbwe\Video.UI.exe
222309:31:59.021573 vminfo Session 1: PID=9528 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
222409:31:59.021573 vminfo Session 1: PID=10292 (fInt=true ): C:\Program Files\Windows Defender\MSASCuiL.exe
222509:31:59.021573 vminfo Session 1: PID=10324 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
222609:31:59.021573 vminfo Session 1: PID=10440 (fInt=true ): C:\Windows\System32\VBoxTray.exe
222709:31:59.021573 vminfo Session 1: PID=10596 (fInt=true ): C:\Users\user\Documents\Visual Studio 2017\Projects\vboxtray_mon\vboxtray_mon\bin\Release\vboxtray_mon.exe
222809:31:59.021573 vminfo Session 1: PID=10612 (fInt=true ): C:\Windows\System32\conhost.exe
222909:31:59.021573 vminfo Session 1: PID=10720 (fInt=true ): C:\Program Files (x86)\FileZilla Server\FileZilla Server Interface.exe
223009:31:59.021573 vminfo Session 1: PID=9808 (fInt=true ): C:\Windows\System32\svchost.exe
223109:31:59.021573 vminfo Session 1: PID=6716 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18011.15918.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
223209:31:59.021573 vminfo Session 1: PID=6688 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
223309:31:59.021573 vminfo Session 1: PID=10200 (fInt=true ): C:\Windows\System32\ApplicationFrameHost.exe
223409:31:59.021573 vminfo Session 1: PID=4868 (fInt=true ): C:\Windows\ImmersiveControlPanel\SystemSettings.exe
223509:31:59.021573 vminfo Session 1: PID=1444 (fInt=true ): C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe
223609:31:59.021573 vminfo Session 1: PID=9504 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
223709:31:59.021573 vminfo Session 1: PID=10840 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
223809:31:59.021573 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/Session/1' = '#12156: cSessionProcs=32 (of 156 procs total)'
223909:31:59.021573 vminfo Adding new user=user (session=1) with 32 processes
224009:31:59.021573 vminfo Handling session 6 (of 17)
224109:31:59.021573 vminfo Session data: Name=user, SessionID=1, LogonID=0,1970599, LogonType=2
224209:31:59.021573 vminfo Session LogonType=2 is supported -- looking up SID + type ...
224309:31:59.021573 vminfo Account User=user, Session=1, LogonID=0,1970599, AuthPkg=Kerberos, Domain=DOMAIN
224409:31:59.021573 vminfo Account User=user, WTSConnectState=0 (4)
224509:31:59.021573 vminfo Account User=user using TCS/RDP, state=0
224609:31:59.021573 vminfo Account User=user is logged in
224709:31:59.021573 vminfo Handling user=user, domain=DOMAIN, package=Kerberos, session=1
224809:31:59.021573 vminfo Session 1: PID=6784 (fInt=true ): C:\Windows\System32\svchost.exe
224909:31:59.021573 vminfo Session 1: PID=264 (fInt=true ): C:\Windows\System32\sihost.exe
225009:31:59.021573 vminfo Session 1: PID=3148 (fInt=true ): C:\Windows\System32\svchost.exe
225109:31:59.021573 vminfo Session 1: PID=7176 (fInt=true ): C:\Windows\System32\taskhostw.exe
225209:31:59.021573 vminfo Session 1: PID=7268 (fInt=true ): C:\Windows\System32\ctfmon.exe
225309:31:59.021573 vminfo Session 1: PID=8732 (fInt=true ): C:\Windows\explorer.exe
225409:31:59.021573 vminfo Session 1: PID=9016 (fInt=true ): C:\Program Files (x86)\NoMachine\bin\nxclient.bin
225509:31:59.021573 vminfo Session 1: PID=8260 (fInt=true ): C:\Program Files\McAfee\Agent\x86\UpdaterUI.exe
225609:31:59.021573 vminfo Session 1: PID=8828 (fInt=true ): C:\Program Files\Classic Shell\ClassicStartMenu.exe
225709:31:59.021573 vminfo Session 1: PID=8488 (fInt=true ): C:\Program Files\McAfee\Agent\x86\mctray.exe
225809:31:59.021573 vminfo Session 1: PID=9172 (fInt=true ): C:\Program Files\TortoiseSVN\bin\TSVNCache.exe
225909:31:59.021573 vminfo Session 1: PID=9280 (fInt=true ): C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe
226009:31:59.021573 vminfo Session 1: PID=9652 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
226109:31:59.021573 vminfo Session 1: PID=9728 (fInt=true ): C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe
226209:31:59.021573 vminfo Session 1: PID=9880 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
226309:31:59.021573 vminfo Session 1: PID=9944 (fInt=true ): C:\Windows\System32\dllhost.exe
226409:31:59.021573 vminfo Session 1: PID=8128 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17112.19011.0_x64__8wekyb3d8bbwe\Video.UI.exe
226509:31:59.021573 vminfo Session 1: PID=9528 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
226609:31:59.021573 vminfo Session 1: PID=10292 (fInt=true ): C:\Program Files\Windows Defender\MSASCuiL.exe
226709:31:59.021573 vminfo Session 1: PID=10324 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
226809:31:59.021573 vminfo Session 1: PID=10440 (fInt=true ): C:\Windows\System32\VBoxTray.exe
226909:31:59.021573 vminfo Session 1: PID=10596 (fInt=true ): C:\Users\user\Documents\Visual Studio 2017\Projects\vboxtray_mon\vboxtray_mon\bin\Release\vboxtray_mon.exe
227009:31:59.021573 vminfo Session 1: PID=10612 (fInt=true ): C:\Windows\System32\conhost.exe
227109:31:59.021573 vminfo Session 1: PID=10720 (fInt=true ): C:\Program Files (x86)\FileZilla Server\FileZilla Server Interface.exe
227209:31:59.021573 vminfo Session 1: PID=9808 (fInt=true ): C:\Windows\System32\svchost.exe
227309:31:59.038655 vminfo Session 1: PID=6716 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18011.15918.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
227409:31:59.038655 vminfo Session 1: PID=6688 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
227509:31:59.038655 vminfo Session 1: PID=10200 (fInt=true ): C:\Windows\System32\ApplicationFrameHost.exe
227609:31:59.038655 vminfo Session 1: PID=4868 (fInt=true ): C:\Windows\ImmersiveControlPanel\SystemSettings.exe
227709:31:59.038655 vminfo Session 1: PID=1444 (fInt=true ): C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe
227809:31:59.038655 vminfo Session 1: PID=9504 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
227909:31:59.038655 vminfo Session 1: PID=10840 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
228009:31:59.038655 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/Session/1' = '#12156: cSessionProcs=32 (of 156 procs total)'
228109:31:59.038655 vminfo Adding new user=user (session=1) with 32 processes
228209:31:59.038655 vminfo Handling session 7 (of 17)
228309:31:59.038655 vminfo Session data: Name=nx, SessionID=0, LogonID=0,685607, LogonType=3
228409:31:59.038655 vminfo Handling session 8 (of 17)
228509:31:59.038655 vminfo Session data: Name=ANONYMOUS LOGON, SessionID=0, LogonID=0,649881, LogonType=3
228609:31:59.038655 vminfo Handling session 9 (of 17)
228709:31:59.038655 vminfo Session data: Name=IUSR, SessionID=0, LogonID=0,995, LogonType=5
228809:31:59.038655 vminfo Handling session 10 (of 17)
228909:31:59.038655 vminfo Session data: Name=DWM-1, SessionID=1, LogonID=0,61006, LogonType=2
229009:31:59.038655 vminfo Session LogonType=2 is supported -- looking up SID + type ...
229109:31:59.038655 vminfo SID owner type=5 not handled, skipping
229209:31:59.038655 vminfo Account User=DWM-1 is not logged in
229309:31:59.038655 vminfo Handling session 11 (of 17)
229409:31:59.038655 vminfo Session data: Name=DWM-1, SessionID=1, LogonID=0,60973, LogonType=2
229509:31:59.038655 vminfo Session LogonType=2 is supported -- looking up SID + type ...
229609:31:59.038655 vminfo SID owner type=5 not handled, skipping
229709:31:59.038655 vminfo Account User=DWM-1 is not logged in
229809:31:59.038655 vminfo Handling session 12 (of 17)
229909:31:59.038655 vminfo Session data: Name=MACHINE$, SessionID=0, LogonID=0,996, LogonType=5
230009:31:59.038655 vminfo Handling session 13 (of 17)
230109:31:59.038655 vminfo Session data: Name=LOCAL SERVICE, SessionID=0, LogonID=0,997, LogonType=5
230209:31:59.038655 vminfo Handling session 14 (of 17)
230309:31:59.038655 vminfo Session data: Name=UMFD-1, SessionID=1, LogonID=0,34521, LogonType=2
230409:31:59.038655 vminfo Session LogonType=2 is supported -- looking up SID + type ...
230509:31:59.038655 vminfo SID owner type=5 not handled, skipping
230609:31:59.038655 vminfo Account User=UMFD-1 is not logged in
230709:31:59.038655 vminfo Handling session 15 (of 17)
230809:31:59.038655 vminfo Session data: Name=UMFD-0, SessionID=0, LogonID=0,34482, LogonType=2
230909:31:59.038655 vminfo Handling session 16 (of 17)
231009:31:59.038655 vminfo Session data: Name=, SessionID=0, LogonID=0,32336, LogonType=0
231109:31:59.038655 vminfo Handling session 17 (of 17)
231209:31:59.038655 vminfo Session data: Name=MACHINE$, SessionID=0, LogonID=0,999, LogonType=0
231309:31:59.038655 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA' = '#12156: cSessions=17, cProcs=156, cUniqueUsers=2'
231409:31:59.038655 vminfo Found 2 unique logged-in user(s)
231509:31:59.038655 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/User/0' = '#12156: szName=user, sessionID=1, cProcs=32'
231609:31:59.038655 vminfo User 'user' has 32 interactive processes (session=1)
231709:31:59.038655 vminfo Error: Error querying last input for user 'user', rc=VERR_PIPE_BUSY
231809:31:59.038655 vminfo cUsersInList=0, pszUserList=<NULL>, rc=VERR_PIPE_BUSY
231909:31:59.038655 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/LoggedInUsersList' resulted in rc=VINF_NO_CHANGE
232009:31:59.038655 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/LoggedInUsers' resulted in rc=VINF_NO_CHANGE
232109:31:59.038655 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/NoLoggedInUsers' resulted in rc=VINF_NO_CHANGE
232209:31:59.038655 vminfo Writing users returned with rc=VINF_NO_CHANGE
232309:31:59.038655 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/IP' resulted in rc=VINF_NO_CHANGE
232409:31:59.038655 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/Broadcast' resulted in rc=VINF_NO_CHANGE
232509:31:59.038655 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/Netmask' resulted in rc=VINF_NO_CHANGE
232609:31:59.038655 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/Status' resulted in rc=VINF_NO_CHANGE
232709:31:59.038655 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/MAC' resulted in rc=VINF_NO_CHANGE
232809:31:59.038655 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/IP' resulted in rc=VINF_NO_CHANGE
232909:31:59.038655 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/Broadcast' resulted in rc=VINF_NO_CHANGE
233009:31:59.038655 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/Netmask' resulted in rc=VINF_NO_CHANGE
233109:31:59.038655 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/Status' resulted in rc=VINF_NO_CHANGE
233209:31:59.038655 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/MAC' resulted in rc=VINF_NO_CHANGE
233309:31:59.038655 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/IP' resulted in rc=VINF_NO_CHANGE
233409:31:59.038655 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/Broadcast' resulted in rc=VINF_NO_CHANGE
233509:31:59.038655 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/Netmask' resulted in rc=VINF_NO_CHANGE
233609:31:59.038655 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/Status' resulted in rc=VINF_NO_CHANGE
233709:31:59.038655 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/MAC' resulted in rc=VINF_NO_CHANGE
233809:31:59.038655 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/IP' resulted in rc=VINF_NO_CHANGE
233909:31:59.038655 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/Broadcast' resulted in rc=VINF_NO_CHANGE
234009:31:59.038655 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/Netmask' resulted in rc=VINF_NO_CHANGE
234109:31:59.038655 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/Status' resulted in rc=VINF_NO_CHANGE
234209:31:59.038655 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/MAC' resulted in rc=VINF_NO_CHANGE
234309:31:59.038655 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/IP' resulted in rc=VINF_NO_CHANGE
234409:31:59.038655 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/Broadcast' resulted in rc=VINF_NO_CHANGE
234509:31:59.038655 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/Netmask' resulted in rc=VINF_NO_CHANGE
234609:31:59.038655 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/Status' resulted in rc=VINF_NO_CHANGE
234709:31:59.038655 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/MAC' resulted in rc=VINF_NO_CHANGE
234809:31:59.038655 vminfo [PropCache 00007ff6b2962520]: Written '/VirtualBox/GuestInfo/Net/Count'='5' (flags: 6), rc=VINF_SUCCESS
234909:31:59.038655 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/Count' resulted in rc=VINF_SUCCESS
235009:31:59.038655 vminfo Guest Property: /VirtualBox/HostInfo/VRDP/ActiveClient not found
235109:31:59.038655 vminfo VRDP: Handling location awareness done
235209:32:04.047390 vminfo Found 17 sessions
235309:32:04.047390 vminfo Error: Get token class 'user' for process 0 failed, rc=VERR_INVALID_PARAMETER
235409:32:04.047390 vminfo Error: Get token class 'groups' for process 0 failed, rc=VERR_INVALID_PARAMETER
235509:32:04.047390 vminfo Error: Get token class 'statistics' for process 0 failed, rc=VERR_INVALID_PARAMETER
235609:32:04.047390 vminfo Error: Get token class 'user' for process 4 failed, rc=VERR_ACCESS_DENIED
235709:32:04.047390 vminfo Error: Get token class 'groups' for process 4 failed, rc=VERR_ACCESS_DENIED
235809:32:04.047390 vminfo Error: Get token class 'statistics' for process 4 failed, rc=VERR_ACCESS_DENIED
235909:32:04.047390 vminfo Error: Get token class 'user' for process 104 failed, rc=VERR_ACCESS_DENIED
236009:32:04.047390 vminfo Error: Get token class 'groups' for process 104 failed, rc=VERR_ACCESS_DENIED
236109:32:04.047390 vminfo Error: Get token class 'statistics' for process 104 failed, rc=VERR_ACCESS_DENIED
236209:32:04.047390 vminfo Error: Get token class 'user' for process 472 failed, rc=VERR_ACCESS_DENIED
236309:32:04.047390 vminfo Error: Get token class 'groups' for process 472 failed, rc=VERR_ACCESS_DENIED
236409:32:04.047390 vminfo Error: Get token class 'statistics' for process 472 failed, rc=VERR_ACCESS_DENIED
236509:32:04.047390 vminfo Error: Get token class 'user' for process 676 failed, rc=VERR_ACCESS_DENIED
236609:32:04.047390 vminfo Error: Get token class 'groups' for process 676 failed, rc=VERR_ACCESS_DENIED
236709:32:04.047390 vminfo Error: Get token class 'statistics' for process 676 failed, rc=VERR_ACCESS_DENIED
236809:32:04.047390 vminfo Error: Get token class 'user' for process 756 failed, rc=VERR_ACCESS_DENIED
236909:32:04.047390 vminfo Error: Get token class 'groups' for process 756 failed, rc=VERR_ACCESS_DENIED
237009:32:04.047390 vminfo Error: Get token class 'statistics' for process 756 failed, rc=VERR_ACCESS_DENIED
237109:32:04.047390 vminfo Error: Get token class 'user' for process 768 failed, rc=VERR_ACCESS_DENIED
237209:32:04.047390 vminfo Error: Get token class 'groups' for process 768 failed, rc=VERR_ACCESS_DENIED
237309:32:04.047390 vminfo Error: Get token class 'statistics' for process 768 failed, rc=VERR_ACCESS_DENIED
237409:32:04.047390 vminfo Error: Get token class 'user' for process 876 failed, rc=VERR_ACCESS_DENIED
237509:32:04.047390 vminfo Error: Get token class 'groups' for process 876 failed, rc=VERR_ACCESS_DENIED
237609:32:04.047390 vminfo Error: Get token class 'statistics' for process 876 failed, rc=VERR_ACCESS_DENIED
237709:32:04.047390 vminfo Error: Get token class 'user' for process 2532 failed, rc=VERR_ACCESS_DENIED
237809:32:04.047390 vminfo Error: Get token class 'groups' for process 2532 failed, rc=VERR_ACCESS_DENIED
237909:32:04.047390 vminfo Error: Get token class 'statistics' for process 2532 failed, rc=VERR_ACCESS_DENIED
238009:32:04.047390 vminfo Error: Get token class 'user' for process 4136 failed, rc=VERR_ACCESS_DENIED
238109:32:04.047390 vminfo Error: Get token class 'groups' for process 4136 failed, rc=VERR_ACCESS_DENIED
238209:32:04.047390 vminfo Error: Get token class 'statistics' for process 4136 failed, rc=VERR_ACCESS_DENIED
238309:32:04.047390 vminfo Error: Get token class 'user' for process 5212 failed, rc=VERR_ACCESS_DENIED
238409:32:04.047390 vminfo Error: Get token class 'groups' for process 5212 failed, rc=VERR_ACCESS_DENIED
238509:32:04.047390 vminfo Error: Get token class 'statistics' for process 5212 failed, rc=VERR_ACCESS_DENIED
238609:32:04.059343 vminfo Handling session 1 (of 17)
238709:32:04.059343 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2145999, LogonType=3
238809:32:04.059343 vminfo Handling session 2 (of 17)
238909:32:04.059343 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2113823, LogonType=3
239009:32:04.059343 vminfo Handling session 3 (of 17)
239109:32:04.059343 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2041868, LogonType=3
239209:32:04.059343 vminfo Handling session 4 (of 17)
239309:32:04.059343 vminfo Session data: Name=nx, SessionID=0, LogonID=0,1997776, LogonType=3
239409:32:04.059343 vminfo Handling session 5 (of 17)
239509:32:04.059343 vminfo Session data: Name=user, SessionID=1, LogonID=0,1970648, LogonType=2
239609:32:04.059343 vminfo Session LogonType=2 is supported -- looking up SID + type ...
239709:32:04.059343 vminfo Account User=user, Session=1, LogonID=0,1970648, AuthPkg=Negotiate, Domain=DOMAIN
239809:32:04.059343 vminfo Account User=user, WTSConnectState=0 (4)
239909:32:04.059343 vminfo Account User=user using TCS/RDP, state=0
240009:32:04.059343 vminfo Account User=user is logged in
240109:32:04.059343 vminfo Handling user=user, domain=DOMAIN, package=Negotiate, session=1
240209:32:04.059343 vminfo Session 1: PID=6784 (fInt=true ): C:\Windows\System32\svchost.exe
240309:32:04.059343 vminfo Session 1: PID=264 (fInt=true ): C:\Windows\System32\sihost.exe
240409:32:04.059343 vminfo Session 1: PID=3148 (fInt=true ): C:\Windows\System32\svchost.exe
240509:32:04.059343 vminfo Session 1: PID=7176 (fInt=true ): C:\Windows\System32\taskhostw.exe
240609:32:04.059343 vminfo Session 1: PID=7268 (fInt=true ): C:\Windows\System32\ctfmon.exe
240709:32:04.059343 vminfo Session 1: PID=8732 (fInt=true ): C:\Windows\explorer.exe
240809:32:04.059343 vminfo Session 1: PID=9016 (fInt=true ): C:\Program Files (x86)\NoMachine\bin\nxclient.bin
240909:32:04.059343 vminfo Session 1: PID=8260 (fInt=true ): C:\Program Files\McAfee\Agent\x86\UpdaterUI.exe
241009:32:04.059343 vminfo Session 1: PID=8828 (fInt=true ): C:\Program Files\Classic Shell\ClassicStartMenu.exe
241109:32:04.059343 vminfo Session 1: PID=8488 (fInt=true ): C:\Program Files\McAfee\Agent\x86\mctray.exe
241209:32:04.059343 vminfo Session 1: PID=9172 (fInt=true ): C:\Program Files\TortoiseSVN\bin\TSVNCache.exe
241309:32:04.059343 vminfo Session 1: PID=9280 (fInt=true ): C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe
241409:32:04.059343 vminfo Session 1: PID=9652 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
241509:32:04.059343 vminfo Session 1: PID=9728 (fInt=true ): C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe
241609:32:04.059343 vminfo Session 1: PID=9880 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
241709:32:04.059343 vminfo Session 1: PID=9944 (fInt=true ): C:\Windows\System32\dllhost.exe
241809:32:04.059343 vminfo Session 1: PID=8128 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17112.19011.0_x64__8wekyb3d8bbwe\Video.UI.exe
241909:32:04.059343 vminfo Session 1: PID=9528 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
242009:32:04.059343 vminfo Session 1: PID=10292 (fInt=true ): C:\Program Files\Windows Defender\MSASCuiL.exe
242109:32:04.059343 vminfo Session 1: PID=10324 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
242209:32:04.059343 vminfo Session 1: PID=10596 (fInt=true ): C:\Users\user\Documents\Visual Studio 2017\Projects\vboxtray_mon\vboxtray_mon\bin\Release\vboxtray_mon.exe
242309:32:04.059343 vminfo Session 1: PID=10612 (fInt=true ): C:\Windows\System32\conhost.exe
242409:32:04.059343 vminfo Session 1: PID=10720 (fInt=true ): C:\Program Files (x86)\FileZilla Server\FileZilla Server Interface.exe
242509:32:04.059343 vminfo Session 1: PID=9808 (fInt=true ): C:\Windows\System32\svchost.exe
242609:32:04.059343 vminfo Session 1: PID=6716 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18011.15918.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
242709:32:04.059343 vminfo Session 1: PID=6688 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
242809:32:04.059343 vminfo Session 1: PID=10200 (fInt=true ): C:\Windows\System32\ApplicationFrameHost.exe
242909:32:04.059343 vminfo Session 1: PID=4868 (fInt=true ): C:\Windows\ImmersiveControlPanel\SystemSettings.exe
243009:32:04.059343 vminfo Session 1: PID=1444 (fInt=true ): C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe
243109:32:04.059343 vminfo Session 1: PID=9504 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
243209:32:04.059343 vminfo Session 1: PID=10840 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
243309:32:04.059343 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/Session/1' = '#12157: cSessionProcs=31 (of 155 procs total)'
243409:32:04.059343 vminfo Adding new user=user (session=1) with 31 processes
243509:32:04.059343 vminfo Handling session 6 (of 17)
243609:32:04.059343 vminfo Session data: Name=user, SessionID=1, LogonID=0,1970599, LogonType=2
243709:32:04.059343 vminfo Session LogonType=2 is supported -- looking up SID + type ...
243809:32:04.059343 vminfo Account User=user, Session=1, LogonID=0,1970599, AuthPkg=Kerberos, Domain=DOMAIN
243909:32:04.059343 vminfo Account User=user, WTSConnectState=0 (4)
244009:32:04.059343 vminfo Account User=user using TCS/RDP, state=0
244109:32:04.059343 vminfo Account User=user is logged in
244209:32:04.059343 vminfo Handling user=user, domain=DOMAIN, package=Kerberos, session=1
244309:32:04.059343 vminfo Session 1: PID=6784 (fInt=true ): C:\Windows\System32\svchost.exe
244409:32:04.059343 vminfo Session 1: PID=264 (fInt=true ): C:\Windows\System32\sihost.exe
244509:32:04.059343 vminfo Session 1: PID=3148 (fInt=true ): C:\Windows\System32\svchost.exe
244609:32:04.059343 vminfo Session 1: PID=7176 (fInt=true ): C:\Windows\System32\taskhostw.exe
244709:32:04.059343 vminfo Session 1: PID=7268 (fInt=true ): C:\Windows\System32\ctfmon.exe
244809:32:04.059343 vminfo Session 1: PID=8732 (fInt=true ): C:\Windows\explorer.exe
244909:32:04.059343 vminfo Session 1: PID=9016 (fInt=true ): C:\Program Files (x86)\NoMachine\bin\nxclient.bin
245009:32:04.074955 vminfo Session 1: PID=8260 (fInt=true ): C:\Program Files\McAfee\Agent\x86\UpdaterUI.exe
245109:32:04.074955 vminfo Session 1: PID=8828 (fInt=true ): C:\Program Files\Classic Shell\ClassicStartMenu.exe
245209:32:04.074955 vminfo Session 1: PID=8488 (fInt=true ): C:\Program Files\McAfee\Agent\x86\mctray.exe
245309:32:04.074955 vminfo Session 1: PID=9172 (fInt=true ): C:\Program Files\TortoiseSVN\bin\TSVNCache.exe
245409:32:04.074955 vminfo Session 1: PID=9280 (fInt=true ): C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe
245509:32:04.074955 vminfo Session 1: PID=9652 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
245609:32:04.074955 vminfo Session 1: PID=9728 (fInt=true ): C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe
245709:32:04.074955 vminfo Session 1: PID=9880 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
245809:32:04.074955 vminfo Session 1: PID=9944 (fInt=true ): C:\Windows\System32\dllhost.exe
245909:32:04.074955 vminfo Session 1: PID=8128 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17112.19011.0_x64__8wekyb3d8bbwe\Video.UI.exe
246009:32:04.074955 vminfo Session 1: PID=9528 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
246109:32:04.074955 vminfo Session 1: PID=10292 (fInt=true ): C:\Program Files\Windows Defender\MSASCuiL.exe
246209:32:04.074955 vminfo Session 1: PID=10324 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
246309:32:04.074955 vminfo Session 1: PID=10596 (fInt=true ): C:\Users\user\Documents\Visual Studio 2017\Projects\vboxtray_mon\vboxtray_mon\bin\Release\vboxtray_mon.exe
246409:32:04.074955 vminfo Session 1: PID=10612 (fInt=true ): C:\Windows\System32\conhost.exe
246509:32:04.074955 vminfo Session 1: PID=10720 (fInt=true ): C:\Program Files (x86)\FileZilla Server\FileZilla Server Interface.exe
246609:32:04.074955 vminfo Session 1: PID=9808 (fInt=true ): C:\Windows\System32\svchost.exe
246709:32:04.074955 vminfo Session 1: PID=6716 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18011.15918.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
246809:32:04.074955 vminfo Session 1: PID=6688 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
246909:32:04.074955 vminfo Session 1: PID=10200 (fInt=true ): C:\Windows\System32\ApplicationFrameHost.exe
247009:32:04.074955 vminfo Session 1: PID=4868 (fInt=true ): C:\Windows\ImmersiveControlPanel\SystemSettings.exe
247109:32:04.074955 vminfo Session 1: PID=1444 (fInt=true ): C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe
247209:32:04.074955 vminfo Session 1: PID=9504 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
247309:32:04.074955 vminfo Session 1: PID=10840 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
247409:32:04.074955 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/Session/1' = '#12157: cSessionProcs=31 (of 155 procs total)'
247509:32:04.074955 vminfo Adding new user=user (session=1) with 31 processes
247609:32:04.074955 vminfo Handling session 7 (of 17)
247709:32:04.074955 vminfo Session data: Name=nx, SessionID=0, LogonID=0,685607, LogonType=3
247809:32:04.074955 vminfo Handling session 8 (of 17)
247909:32:04.074955 vminfo Session data: Name=ANONYMOUS LOGON, SessionID=0, LogonID=0,649881, LogonType=3
248009:32:04.074955 vminfo Handling session 9 (of 17)
248109:32:04.074955 vminfo Session data: Name=IUSR, SessionID=0, LogonID=0,995, LogonType=5
248209:32:04.074955 vminfo Handling session 10 (of 17)
248309:32:04.074955 vminfo Session data: Name=DWM-1, SessionID=1, LogonID=0,61006, LogonType=2
248409:32:04.074955 vminfo Session LogonType=2 is supported -- looking up SID + type ...
248509:32:04.074955 vminfo SID owner type=5 not handled, skipping
248609:32:04.074955 vminfo Account User=DWM-1 is not logged in
248709:32:04.074955 vminfo Handling session 11 (of 17)
248809:32:04.074955 vminfo Session data: Name=DWM-1, SessionID=1, LogonID=0,60973, LogonType=2
248909:32:04.074955 vminfo Session LogonType=2 is supported -- looking up SID + type ...
249009:32:04.074955 vminfo SID owner type=5 not handled, skipping
249109:32:04.074955 vminfo Account User=DWM-1 is not logged in
249209:32:04.074955 vminfo Handling session 12 (of 17)
249309:32:04.074955 vminfo Session data: Name=MACHINE$, SessionID=0, LogonID=0,996, LogonType=5
249409:32:04.074955 vminfo Handling session 13 (of 17)
249509:32:04.074955 vminfo Session data: Name=LOCAL SERVICE, SessionID=0, LogonID=0,997, LogonType=5
249609:32:04.074955 vminfo Handling session 14 (of 17)
249709:32:04.074955 vminfo Session data: Name=UMFD-1, SessionID=1, LogonID=0,34521, LogonType=2
249809:32:04.074955 vminfo Session LogonType=2 is supported -- looking up SID + type ...
249909:32:04.074955 vminfo SID owner type=5 not handled, skipping
250009:32:04.074955 vminfo Account User=UMFD-1 is not logged in
250109:32:04.074955 vminfo Handling session 15 (of 17)
250209:32:04.074955 vminfo Session data: Name=UMFD-0, SessionID=0, LogonID=0,34482, LogonType=2
250309:32:04.074955 vminfo Handling session 16 (of 17)
250409:32:04.074955 vminfo Session data: Name=, SessionID=0, LogonID=0,32336, LogonType=0
250509:32:04.074955 vminfo Handling session 17 (of 17)
250609:32:04.074955 vminfo Session data: Name=MACHINE$, SessionID=0, LogonID=0,999, LogonType=0
250709:32:04.074955 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA' = '#12157: cSessions=17, cProcs=155, cUniqueUsers=2'
250809:32:04.074955 vminfo Found 2 unique logged-in user(s)
250909:32:04.074955 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/User/0' = '#12157: szName=user, sessionID=1, cProcs=31'
251009:32:04.074955 vminfo User 'user' has 31 interactive processes (session=1)
251109:32:04.074955 vminfo VBoxTray for user 'user' not running (anymore), no last input available
251209:32:04.074955 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/User/user@DOMAIN/UsageState' resulted in rc=VINF_NO_CHANGE
251309:32:04.074955 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/User/1' = '#12157: szName=user, sessionID=1, cProcs=31'
251409:32:04.074955 vminfo User 'user' has 31 interactive processes (session=1)
251509:32:04.074955 vminfo VBoxTray for user 'user' not running (anymore), no last input available
251609:32:04.074955 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/User/user@DOMAIN/UsageState' resulted in rc=VINF_NO_CHANGE
251709:32:04.074955 vminfo cUsersInList=2, pszUserList=user,user, rc=VINF_NO_CHANGE
251809:32:04.074955 vminfo [PropCache 00007ff6b2962520]: Written '/VirtualBox/GuestInfo/OS/LoggedInUsersList'='user,user' (flags: a), rc=VINF_SUCCESS
251909:32:04.074955 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/LoggedInUsersList' resulted in rc=VINF_SUCCESS
252009:32:04.074955 vminfo [PropCache 00007ff6b2962520]: Written '/VirtualBox/GuestInfo/OS/LoggedInUsers'='2' (flags: a), rc=VINF_SUCCESS
252109:32:04.074955 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/LoggedInUsers' resulted in rc=VINF_SUCCESS
252209:32:04.074955 vminfo [PropCache 00007ff6b2962520]: Written '/VirtualBox/GuestInfo/OS/NoLoggedInUsers'='false' (flags: a), rc=VINF_SUCCESS
252309:32:04.074955 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/NoLoggedInUsers' resulted in rc=VINF_SUCCESS
252409:32:04.074955 vminfo Writing users returned with rc=VINF_SUCCESS
252509:32:04.090284 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/IP' resulted in rc=VINF_NO_CHANGE
252609:32:04.090284 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/Broadcast' resulted in rc=VINF_NO_CHANGE
252709:32:04.090284 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/Netmask' resulted in rc=VINF_NO_CHANGE
252809:32:04.090284 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/Status' resulted in rc=VINF_NO_CHANGE
252909:32:04.090284 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/MAC' resulted in rc=VINF_NO_CHANGE
253009:32:04.090284 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/IP' resulted in rc=VINF_NO_CHANGE
253109:32:04.090284 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/Broadcast' resulted in rc=VINF_NO_CHANGE
253209:32:04.090284 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/Netmask' resulted in rc=VINF_NO_CHANGE
253309:32:04.090284 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/Status' resulted in rc=VINF_NO_CHANGE
253409:32:04.090284 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/MAC' resulted in rc=VINF_NO_CHANGE
253509:32:04.090284 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/IP' resulted in rc=VINF_NO_CHANGE
253609:32:04.090284 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/Broadcast' resulted in rc=VINF_NO_CHANGE
253709:32:04.090284 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/Netmask' resulted in rc=VINF_NO_CHANGE
253809:32:04.090284 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/Status' resulted in rc=VINF_NO_CHANGE
253909:32:04.090284 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/MAC' resulted in rc=VINF_NO_CHANGE
254009:32:04.090284 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/IP' resulted in rc=VINF_NO_CHANGE
254109:32:04.090284 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/Broadcast' resulted in rc=VINF_NO_CHANGE
254209:32:04.090284 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/Netmask' resulted in rc=VINF_NO_CHANGE
254309:32:04.090284 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/Status' resulted in rc=VINF_NO_CHANGE
254409:32:04.090284 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/MAC' resulted in rc=VINF_NO_CHANGE
254509:32:04.090284 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/IP' resulted in rc=VINF_NO_CHANGE
254609:32:04.090284 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/Broadcast' resulted in rc=VINF_NO_CHANGE
254709:32:04.090284 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/Netmask' resulted in rc=VINF_NO_CHANGE
254809:32:04.090284 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/Status' resulted in rc=VINF_NO_CHANGE
254909:32:04.090284 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/MAC' resulted in rc=VINF_NO_CHANGE
255009:32:04.090284 vminfo [PropCache 00007ff6b2962520]: Written '/VirtualBox/GuestInfo/Net/Count'='5' (flags: 6), rc=VINF_SUCCESS
255109:32:04.090284 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/Count' resulted in rc=VINF_SUCCESS
255209:32:04.090284 vminfo Guest Property: /VirtualBox/HostInfo/VRDP/ActiveClient not found
255309:32:04.090284 vminfo VRDP: Handling location awareness done
255409:32:06.160588 timesync vgsvcTimeSyncWorker: Host: 2019-02-26T09:32:06.035000000Z (MinAdjust: 200 ms), Guest: 2019-02-26T09:32:06.160588700Z => -125 588 700 ns drift
255509:32:09.090571 vminfo Found 17 sessions
255609:32:09.090571 vminfo Error: Get token class 'user' for process 0 failed, rc=VERR_INVALID_PARAMETER
255709:32:09.090571 vminfo Error: Get token class 'groups' for process 0 failed, rc=VERR_INVALID_PARAMETER
255809:32:09.090571 vminfo Error: Get token class 'statistics' for process 0 failed, rc=VERR_INVALID_PARAMETER
255909:32:09.090571 vminfo Error: Get token class 'user' for process 4 failed, rc=VERR_ACCESS_DENIED
256009:32:09.090571 vminfo Error: Get token class 'groups' for process 4 failed, rc=VERR_ACCESS_DENIED
256109:32:09.090571 vminfo Error: Get token class 'statistics' for process 4 failed, rc=VERR_ACCESS_DENIED
256209:32:09.090571 vminfo Error: Get token class 'user' for process 104 failed, rc=VERR_ACCESS_DENIED
256309:32:09.090571 vminfo Error: Get token class 'groups' for process 104 failed, rc=VERR_ACCESS_DENIED
256409:32:09.090571 vminfo Error: Get token class 'statistics' for process 104 failed, rc=VERR_ACCESS_DENIED
256509:32:09.090571 vminfo Error: Get token class 'user' for process 472 failed, rc=VERR_ACCESS_DENIED
256609:32:09.090571 vminfo Error: Get token class 'groups' for process 472 failed, rc=VERR_ACCESS_DENIED
256709:32:09.090571 vminfo Error: Get token class 'statistics' for process 472 failed, rc=VERR_ACCESS_DENIED
256809:32:09.090571 vminfo Error: Get token class 'user' for process 676 failed, rc=VERR_ACCESS_DENIED
256909:32:09.090571 vminfo Error: Get token class 'groups' for process 676 failed, rc=VERR_ACCESS_DENIED
257009:32:09.090571 vminfo Error: Get token class 'statistics' for process 676 failed, rc=VERR_ACCESS_DENIED
257109:32:09.090571 vminfo Error: Get token class 'user' for process 756 failed, rc=VERR_ACCESS_DENIED
257209:32:09.090571 vminfo Error: Get token class 'groups' for process 756 failed, rc=VERR_ACCESS_DENIED
257309:32:09.090571 vminfo Error: Get token class 'statistics' for process 756 failed, rc=VERR_ACCESS_DENIED
257409:32:09.090571 vminfo Error: Get token class 'user' for process 768 failed, rc=VERR_ACCESS_DENIED
257509:32:09.090571 vminfo Error: Get token class 'groups' for process 768 failed, rc=VERR_ACCESS_DENIED
257609:32:09.090571 vminfo Error: Get token class 'statistics' for process 768 failed, rc=VERR_ACCESS_DENIED
257709:32:09.090571 vminfo Error: Get token class 'user' for process 876 failed, rc=VERR_ACCESS_DENIED
257809:32:09.090571 vminfo Error: Get token class 'groups' for process 876 failed, rc=VERR_ACCESS_DENIED
257909:32:09.090571 vminfo Error: Get token class 'statistics' for process 876 failed, rc=VERR_ACCESS_DENIED
258009:32:09.090571 vminfo Error: Get token class 'user' for process 2532 failed, rc=VERR_ACCESS_DENIED
258109:32:09.090571 vminfo Error: Get token class 'groups' for process 2532 failed, rc=VERR_ACCESS_DENIED
258209:32:09.090571 vminfo Error: Get token class 'statistics' for process 2532 failed, rc=VERR_ACCESS_DENIED
258309:32:09.090571 vminfo Error: Get token class 'user' for process 4136 failed, rc=VERR_ACCESS_DENIED
258409:32:09.090571 vminfo Error: Get token class 'groups' for process 4136 failed, rc=VERR_ACCESS_DENIED
258509:32:09.090571 vminfo Error: Get token class 'statistics' for process 4136 failed, rc=VERR_ACCESS_DENIED
258609:32:09.090571 vminfo Error: Get token class 'user' for process 5212 failed, rc=VERR_ACCESS_DENIED
258709:32:09.090571 vminfo Error: Get token class 'groups' for process 5212 failed, rc=VERR_ACCESS_DENIED
258809:32:09.090571 vminfo Error: Get token class 'statistics' for process 5212 failed, rc=VERR_ACCESS_DENIED
258909:32:09.090571 vminfo Handling session 1 (of 17)
259009:32:09.090571 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2145999, LogonType=3
259109:32:09.090571 vminfo Handling session 2 (of 17)
259209:32:09.090571 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2113823, LogonType=3
259309:32:09.090571 vminfo Handling session 3 (of 17)
259409:32:09.090571 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2041868, LogonType=3
259509:32:09.090571 vminfo Handling session 4 (of 17)
259609:32:09.090571 vminfo Session data: Name=nx, SessionID=0, LogonID=0,1997776, LogonType=3
259709:32:09.090571 vminfo Handling session 5 (of 17)
259809:32:09.090571 vminfo Session data: Name=user, SessionID=1, LogonID=0,1970648, LogonType=2
259909:32:09.090571 vminfo Session LogonType=2 is supported -- looking up SID + type ...
260009:32:09.090571 vminfo Account User=user, Session=1, LogonID=0,1970648, AuthPkg=Negotiate, Domain=DOMAIN
260109:32:09.105329 vminfo Account User=user, WTSConnectState=0 (4)
260209:32:09.105329 vminfo Account User=user using TCS/RDP, state=0
260309:32:09.105329 vminfo Account User=user is logged in
260409:32:09.105329 vminfo Handling user=user, domain=DOMAIN, package=Negotiate, session=1
260509:32:09.105329 vminfo Session 1: PID=6784 (fInt=true ): C:\Windows\System32\svchost.exe
260609:32:09.105329 vminfo Session 1: PID=264 (fInt=true ): C:\Windows\System32\sihost.exe
260709:32:09.105329 vminfo Session 1: PID=3148 (fInt=true ): C:\Windows\System32\svchost.exe
260809:32:09.105329 vminfo Session 1: PID=7176 (fInt=true ): C:\Windows\System32\taskhostw.exe
260909:32:09.105329 vminfo Session 1: PID=7268 (fInt=true ): C:\Windows\System32\ctfmon.exe
261009:32:09.105329 vminfo Session 1: PID=8732 (fInt=true ): C:\Windows\explorer.exe
261109:32:09.105329 vminfo Session 1: PID=9016 (fInt=true ): C:\Program Files (x86)\NoMachine\bin\nxclient.bin
261209:32:09.105329 vminfo Session 1: PID=8260 (fInt=true ): C:\Program Files\McAfee\Agent\x86\UpdaterUI.exe
261309:32:09.105329 vminfo Session 1: PID=8828 (fInt=true ): C:\Program Files\Classic Shell\ClassicStartMenu.exe
261409:32:09.105329 vminfo Session 1: PID=8488 (fInt=true ): C:\Program Files\McAfee\Agent\x86\mctray.exe
261509:32:09.105329 vminfo Session 1: PID=9172 (fInt=true ): C:\Program Files\TortoiseSVN\bin\TSVNCache.exe
261609:32:09.105329 vminfo Session 1: PID=9280 (fInt=true ): C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe
261709:32:09.105329 vminfo Session 1: PID=9652 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
261809:32:09.105329 vminfo Session 1: PID=9728 (fInt=true ): C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe
261909:32:09.105329 vminfo Session 1: PID=9880 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
262009:32:09.105329 vminfo Session 1: PID=9944 (fInt=true ): C:\Windows\System32\dllhost.exe
262109:32:09.105329 vminfo Session 1: PID=8128 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17112.19011.0_x64__8wekyb3d8bbwe\Video.UI.exe
262209:32:09.105329 vminfo Session 1: PID=9528 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
262309:32:09.105329 vminfo Session 1: PID=10292 (fInt=true ): C:\Program Files\Windows Defender\MSASCuiL.exe
262409:32:09.105329 vminfo Session 1: PID=10324 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
262509:32:09.105329 vminfo Session 1: PID=10596 (fInt=true ): C:\Users\user\Documents\Visual Studio 2017\Projects\vboxtray_mon\vboxtray_mon\bin\Release\vboxtray_mon.exe
262609:32:09.105329 vminfo Session 1: PID=10612 (fInt=true ): C:\Windows\System32\conhost.exe
262709:32:09.105329 vminfo Session 1: PID=10720 (fInt=true ): C:\Program Files (x86)\FileZilla Server\FileZilla Server Interface.exe
262809:32:09.105329 vminfo Session 1: PID=9808 (fInt=true ): C:\Windows\System32\svchost.exe
262909:32:09.105329 vminfo Session 1: PID=6716 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18011.15918.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
263009:32:09.105329 vminfo Session 1: PID=6688 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
263109:32:09.105329 vminfo Session 1: PID=10200 (fInt=true ): C:\Windows\System32\ApplicationFrameHost.exe
263209:32:09.105329 vminfo Session 1: PID=4868 (fInt=true ): C:\Windows\ImmersiveControlPanel\SystemSettings.exe
263309:32:09.105329 vminfo Session 1: PID=1444 (fInt=true ): C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe
263409:32:09.105329 vminfo Session 1: PID=9504 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
263509:32:09.105329 vminfo Session 1: PID=10840 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
263609:32:09.105329 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/Session/1' = '#12158: cSessionProcs=31 (of 155 procs total)'
263709:32:09.105329 vminfo Adding new user=user (session=1) with 31 processes
263809:32:09.105329 vminfo Handling session 6 (of 17)
263909:32:09.105329 vminfo Session data: Name=user, SessionID=1, LogonID=0,1970599, LogonType=2
264009:32:09.105329 vminfo Session LogonType=2 is supported -- looking up SID + type ...
264109:32:09.105329 vminfo Account User=user, Session=1, LogonID=0,1970599, AuthPkg=Kerberos, Domain=DOMAIN
264209:32:09.105329 vminfo Account User=user, WTSConnectState=0 (4)
264309:32:09.105329 vminfo Account User=user using TCS/RDP, state=0
264409:32:09.105329 vminfo Account User=user is logged in
264509:32:09.105329 vminfo Handling user=user, domain=DOMAIN, package=Kerberos, session=1
264609:32:09.105329 vminfo Session 1: PID=6784 (fInt=true ): C:\Windows\System32\svchost.exe
264709:32:09.105329 vminfo Session 1: PID=264 (fInt=true ): C:\Windows\System32\sihost.exe
264809:32:09.105329 vminfo Session 1: PID=3148 (fInt=true ): C:\Windows\System32\svchost.exe
264909:32:09.105329 vminfo Session 1: PID=7176 (fInt=true ): C:\Windows\System32\taskhostw.exe
265009:32:09.105329 vminfo Session 1: PID=7268 (fInt=true ): C:\Windows\System32\ctfmon.exe
265109:32:09.105329 vminfo Session 1: PID=8732 (fInt=true ): C:\Windows\explorer.exe
265209:32:09.105329 vminfo Session 1: PID=9016 (fInt=true ): C:\Program Files (x86)\NoMachine\bin\nxclient.bin
265309:32:09.105329 vminfo Session 1: PID=8260 (fInt=true ): C:\Program Files\McAfee\Agent\x86\UpdaterUI.exe
265409:32:09.105329 vminfo Session 1: PID=8828 (fInt=true ): C:\Program Files\Classic Shell\ClassicStartMenu.exe
265509:32:09.105329 vminfo Session 1: PID=8488 (fInt=true ): C:\Program Files\McAfee\Agent\x86\mctray.exe
265609:32:09.105329 vminfo Session 1: PID=9172 (fInt=true ): C:\Program Files\TortoiseSVN\bin\TSVNCache.exe
265709:32:09.105329 vminfo Session 1: PID=9280 (fInt=true ): C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe
265809:32:09.105329 vminfo Session 1: PID=9652 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
265909:32:09.105329 vminfo Session 1: PID=9728 (fInt=true ): C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe
266009:32:09.105329 vminfo Session 1: PID=9880 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
266109:32:09.105329 vminfo Session 1: PID=9944 (fInt=true ): C:\Windows\System32\dllhost.exe
266209:32:09.105329 vminfo Session 1: PID=8128 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17112.19011.0_x64__8wekyb3d8bbwe\Video.UI.exe
266309:32:09.105329 vminfo Session 1: PID=9528 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
266409:32:09.105329 vminfo Session 1: PID=10292 (fInt=true ): C:\Program Files\Windows Defender\MSASCuiL.exe
266509:32:09.105329 vminfo Session 1: PID=10324 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
266609:32:09.105329 vminfo Session 1: PID=10596 (fInt=true ): C:\Users\user\Documents\Visual Studio 2017\Projects\vboxtray_mon\vboxtray_mon\bin\Release\vboxtray_mon.exe
266709:32:09.105329 vminfo Session 1: PID=10612 (fInt=true ): C:\Windows\System32\conhost.exe
266809:32:09.105329 vminfo Session 1: PID=10720 (fInt=true ): C:\Program Files (x86)\FileZilla Server\FileZilla Server Interface.exe
266909:32:09.105329 vminfo Session 1: PID=9808 (fInt=true ): C:\Windows\System32\svchost.exe
267009:32:09.105329 vminfo Session 1: PID=6716 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18011.15918.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
267109:32:09.120610 vminfo Session 1: PID=6688 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
267209:32:09.120610 vminfo Session 1: PID=10200 (fInt=true ): C:\Windows\System32\ApplicationFrameHost.exe
267309:32:09.120610 vminfo Session 1: PID=4868 (fInt=true ): C:\Windows\ImmersiveControlPanel\SystemSettings.exe
267409:32:09.120610 vminfo Session 1: PID=1444 (fInt=true ): C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe
267509:32:09.120610 vminfo Session 1: PID=9504 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
267609:32:09.120610 vminfo Session 1: PID=10840 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
267709:32:09.120610 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/Session/1' = '#12158: cSessionProcs=31 (of 155 procs total)'
267809:32:09.120610 vminfo Adding new user=user (session=1) with 31 processes
267909:32:09.120610 vminfo Handling session 7 (of 17)
268009:32:09.120610 vminfo Session data: Name=nx, SessionID=0, LogonID=0,685607, LogonType=3
268109:32:09.120610 vminfo Handling session 8 (of 17)
268209:32:09.120610 vminfo Session data: Name=ANONYMOUS LOGON, SessionID=0, LogonID=0,649881, LogonType=3
268309:32:09.120610 vminfo Handling session 9 (of 17)
268409:32:09.120610 vminfo Session data: Name=IUSR, SessionID=0, LogonID=0,995, LogonType=5
268509:32:09.120610 vminfo Handling session 10 (of 17)
268609:32:09.120610 vminfo Session data: Name=DWM-1, SessionID=1, LogonID=0,61006, LogonType=2
268709:32:09.120610 vminfo Session LogonType=2 is supported -- looking up SID + type ...
268809:32:09.120610 vminfo SID owner type=5 not handled, skipping
268909:32:09.120610 vminfo Account User=DWM-1 is not logged in
269009:32:09.120610 vminfo Handling session 11 (of 17)
269109:32:09.120610 vminfo Session data: Name=DWM-1, SessionID=1, LogonID=0,60973, LogonType=2
269209:32:09.120610 vminfo Session LogonType=2 is supported -- looking up SID + type ...
269309:32:09.120610 vminfo SID owner type=5 not handled, skipping
269409:32:09.120610 vminfo Account User=DWM-1 is not logged in
269509:32:09.120610 vminfo Handling session 12 (of 17)
269609:32:09.120610 vminfo Session data: Name=MACHINE$, SessionID=0, LogonID=0,996, LogonType=5
269709:32:09.120610 vminfo Handling session 13 (of 17)
269809:32:09.120610 vminfo Session data: Name=LOCAL SERVICE, SessionID=0, LogonID=0,997, LogonType=5
269909:32:09.120610 vminfo Handling session 14 (of 17)
270009:32:09.120610 vminfo Session data: Name=UMFD-1, SessionID=1, LogonID=0,34521, LogonType=2
270109:32:09.120610 vminfo Session LogonType=2 is supported -- looking up SID + type ...
270209:32:09.120610 vminfo SID owner type=5 not handled, skipping
270309:32:09.120610 vminfo Account User=UMFD-1 is not logged in
270409:32:09.120610 vminfo Handling session 15 (of 17)
270509:32:09.120610 vminfo Session data: Name=UMFD-0, SessionID=0, LogonID=0,34482, LogonType=2
270609:32:09.120610 vminfo Handling session 16 (of 17)
270709:32:09.120610 vminfo Session data: Name=, SessionID=0, LogonID=0,32336, LogonType=0
270809:32:09.120610 vminfo Handling session 17 (of 17)
270909:32:09.120610 vminfo Session data: Name=MACHINE$, SessionID=0, LogonID=0,999, LogonType=0
271009:32:09.120610 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA' = '#12158: cSessions=17, cProcs=155, cUniqueUsers=2'
271109:32:09.120610 vminfo Found 2 unique logged-in user(s)
271209:32:09.120610 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/User/0' = '#12158: szName=user, sessionID=1, cProcs=31'
271309:32:09.120610 vminfo User 'user' has 31 interactive processes (session=1)
271409:32:09.120610 vminfo VBoxTray for user 'user' not running (anymore), no last input available
271509:32:09.120610 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/User/user@DOMAIN/UsageState' resulted in rc=VINF_NO_CHANGE
271609:32:09.120610 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/User/1' = '#12158: szName=user, sessionID=1, cProcs=31'
271709:32:09.120610 vminfo User 'user' has 31 interactive processes (session=1)
271809:32:09.120610 vminfo VBoxTray for user 'user' not running (anymore), no last input available
271909:32:09.120610 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/User/user@DOMAIN/UsageState' resulted in rc=VINF_NO_CHANGE
272009:32:09.120610 vminfo cUsersInList=2, pszUserList=user,user, rc=VINF_NO_CHANGE
272109:32:09.120610 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/LoggedInUsersList' resulted in rc=VINF_NO_CHANGE
272209:32:09.120610 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/LoggedInUsers' resulted in rc=VINF_NO_CHANGE
272309:32:09.120610 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/NoLoggedInUsers' resulted in rc=VINF_NO_CHANGE
272409:32:09.120610 vminfo Writing users returned with rc=VINF_NO_CHANGE
272509:32:09.120610 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/IP' resulted in rc=VINF_NO_CHANGE
272609:32:09.120610 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/Broadcast' resulted in rc=VINF_NO_CHANGE
272709:32:09.120610 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/Netmask' resulted in rc=VINF_NO_CHANGE
272809:32:09.120610 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/Status' resulted in rc=VINF_NO_CHANGE
272909:32:09.120610 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/MAC' resulted in rc=VINF_NO_CHANGE
273009:32:09.120610 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/IP' resulted in rc=VINF_NO_CHANGE
273109:32:09.120610 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/Broadcast' resulted in rc=VINF_NO_CHANGE
273209:32:09.120610 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/Netmask' resulted in rc=VINF_NO_CHANGE
273309:32:09.120610 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/Status' resulted in rc=VINF_NO_CHANGE
273409:32:09.120610 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/MAC' resulted in rc=VINF_NO_CHANGE
273509:32:09.120610 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/IP' resulted in rc=VINF_NO_CHANGE
273609:32:09.120610 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/Broadcast' resulted in rc=VINF_NO_CHANGE
273709:32:09.120610 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/Netmask' resulted in rc=VINF_NO_CHANGE
273809:32:09.120610 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/Status' resulted in rc=VINF_NO_CHANGE
273909:32:09.120610 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/MAC' resulted in rc=VINF_NO_CHANGE
274009:32:09.120610 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/IP' resulted in rc=VINF_NO_CHANGE
274109:32:09.120610 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/Broadcast' resulted in rc=VINF_NO_CHANGE
274209:32:09.120610 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/Netmask' resulted in rc=VINF_NO_CHANGE
274309:32:09.120610 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/Status' resulted in rc=VINF_NO_CHANGE
274409:32:09.120610 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/MAC' resulted in rc=VINF_NO_CHANGE
274509:32:09.120610 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/IP' resulted in rc=VINF_NO_CHANGE
274609:32:09.120610 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/Broadcast' resulted in rc=VINF_NO_CHANGE
274709:32:09.120610 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/Netmask' resulted in rc=VINF_NO_CHANGE
274809:32:09.120610 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/Status' resulted in rc=VINF_NO_CHANGE
274909:32:09.120610 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/MAC' resulted in rc=VINF_NO_CHANGE
275009:32:09.120610 vminfo [PropCache 00007ff6b2962520]: Written '/VirtualBox/GuestInfo/Net/Count'='5' (flags: 6), rc=VINF_SUCCESS
275109:32:09.120610 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/Count' resulted in rc=VINF_SUCCESS
275209:32:09.120610 vminfo Guest Property: /VirtualBox/HostInfo/VRDP/ActiveClient not found
275309:32:09.120610 vminfo VRDP: Handling location awareness done
275409:32:14.133456 vminfo Found 17 sessions
275509:32:14.133456 vminfo Error: Get token class 'user' for process 0 failed, rc=VERR_INVALID_PARAMETER
275609:32:14.133456 vminfo Error: Get token class 'groups' for process 0 failed, rc=VERR_INVALID_PARAMETER
275709:32:14.133456 vminfo Error: Get token class 'statistics' for process 0 failed, rc=VERR_INVALID_PARAMETER
275809:32:14.133456 vminfo Error: Get token class 'user' for process 4 failed, rc=VERR_ACCESS_DENIED
275909:32:14.133456 vminfo Error: Get token class 'groups' for process 4 failed, rc=VERR_ACCESS_DENIED
276009:32:14.133456 vminfo Error: Get token class 'statistics' for process 4 failed, rc=VERR_ACCESS_DENIED
276109:32:14.133456 vminfo Error: Get token class 'user' for process 104 failed, rc=VERR_ACCESS_DENIED
276209:32:14.133456 vminfo Error: Get token class 'groups' for process 104 failed, rc=VERR_ACCESS_DENIED
276309:32:14.133456 vminfo Error: Get token class 'statistics' for process 104 failed, rc=VERR_ACCESS_DENIED
276409:32:14.133456 vminfo Error: Get token class 'user' for process 472 failed, rc=VERR_ACCESS_DENIED
276509:32:14.133456 vminfo Error: Get token class 'groups' for process 472 failed, rc=VERR_ACCESS_DENIED
276609:32:14.133456 vminfo Error: Get token class 'statistics' for process 472 failed, rc=VERR_ACCESS_DENIED
276709:32:14.133456 vminfo Error: Get token class 'user' for process 676 failed, rc=VERR_ACCESS_DENIED
276809:32:14.133456 vminfo Error: Get token class 'groups' for process 676 failed, rc=VERR_ACCESS_DENIED
276909:32:14.133456 vminfo Error: Get token class 'statistics' for process 676 failed, rc=VERR_ACCESS_DENIED
277009:32:14.133456 vminfo Error: Get token class 'user' for process 756 failed, rc=VERR_ACCESS_DENIED
277109:32:14.133456 vminfo Error: Get token class 'groups' for process 756 failed, rc=VERR_ACCESS_DENIED
277209:32:14.133456 vminfo Error: Get token class 'statistics' for process 756 failed, rc=VERR_ACCESS_DENIED
277309:32:14.133456 vminfo Error: Get token class 'user' for process 768 failed, rc=VERR_ACCESS_DENIED
277409:32:14.133456 vminfo Error: Get token class 'groups' for process 768 failed, rc=VERR_ACCESS_DENIED
277509:32:14.133456 vminfo Error: Get token class 'statistics' for process 768 failed, rc=VERR_ACCESS_DENIED
277609:32:14.133456 vminfo Error: Get token class 'user' for process 876 failed, rc=VERR_ACCESS_DENIED
277709:32:14.133456 vminfo Error: Get token class 'groups' for process 876 failed, rc=VERR_ACCESS_DENIED
277809:32:14.133456 vminfo Error: Get token class 'statistics' for process 876 failed, rc=VERR_ACCESS_DENIED
277909:32:14.133456 vminfo Error: Get token class 'user' for process 2532 failed, rc=VERR_ACCESS_DENIED
278009:32:14.133456 vminfo Error: Get token class 'groups' for process 2532 failed, rc=VERR_ACCESS_DENIED
278109:32:14.133456 vminfo Error: Get token class 'statistics' for process 2532 failed, rc=VERR_ACCESS_DENIED
278209:32:14.133456 vminfo Error: Get token class 'user' for process 4136 failed, rc=VERR_ACCESS_DENIED
278309:32:14.133456 vminfo Error: Get token class 'groups' for process 4136 failed, rc=VERR_ACCESS_DENIED
278409:32:14.133456 vminfo Error: Get token class 'statistics' for process 4136 failed, rc=VERR_ACCESS_DENIED
278509:32:14.133456 vminfo Error: Get token class 'user' for process 5212 failed, rc=VERR_ACCESS_DENIED
278609:32:14.133456 vminfo Error: Get token class 'groups' for process 5212 failed, rc=VERR_ACCESS_DENIED
278709:32:14.133456 vminfo Error: Get token class 'statistics' for process 5212 failed, rc=VERR_ACCESS_DENIED
278809:32:14.133456 vminfo Handling session 1 (of 17)
278909:32:14.133456 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2145999, LogonType=3
279009:32:14.133456 vminfo Handling session 2 (of 17)
279109:32:14.133456 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2113823, LogonType=3
279209:32:14.133456 vminfo Handling session 3 (of 17)
279309:32:14.133456 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2041868, LogonType=3
279409:32:14.146903 vminfo Handling session 4 (of 17)
279509:32:14.146903 vminfo Session data: Name=nx, SessionID=0, LogonID=0,1997776, LogonType=3
279609:32:14.146903 vminfo Handling session 5 (of 17)
279709:32:14.146903 vminfo Session data: Name=user, SessionID=1, LogonID=0,1970648, LogonType=2
279809:32:14.146903 vminfo Session LogonType=2 is supported -- looking up SID + type ...
279909:32:14.146903 vminfo Account User=user, Session=1, LogonID=0,1970648, AuthPkg=Negotiate, Domain=DOMAIN
280009:32:14.146903 vminfo Account User=user, WTSConnectState=0 (4)
280109:32:14.146903 vminfo Account User=user using TCS/RDP, state=0
280209:32:14.146903 vminfo Account User=user is logged in
280309:32:14.146903 vminfo Handling user=user, domain=DOMAIN, package=Negotiate, session=1
280409:32:14.146903 vminfo Session 1: PID=6784 (fInt=true ): C:\Windows\System32\svchost.exe
280509:32:14.146903 vminfo Session 1: PID=264 (fInt=true ): C:\Windows\System32\sihost.exe
280609:32:14.146903 vminfo Session 1: PID=3148 (fInt=true ): C:\Windows\System32\svchost.exe
280709:32:14.146903 vminfo Session 1: PID=7176 (fInt=true ): C:\Windows\System32\taskhostw.exe
280809:32:14.146903 vminfo Session 1: PID=7268 (fInt=true ): C:\Windows\System32\ctfmon.exe
280909:32:14.146903 vminfo Session 1: PID=8732 (fInt=true ): C:\Windows\explorer.exe
281009:32:14.146903 vminfo Session 1: PID=9016 (fInt=true ): C:\Program Files (x86)\NoMachine\bin\nxclient.bin
281109:32:14.146903 vminfo Session 1: PID=8260 (fInt=true ): C:\Program Files\McAfee\Agent\x86\UpdaterUI.exe
281209:32:14.146903 vminfo Session 1: PID=8828 (fInt=true ): C:\Program Files\Classic Shell\ClassicStartMenu.exe
281309:32:14.146903 vminfo Session 1: PID=8488 (fInt=true ): C:\Program Files\McAfee\Agent\x86\mctray.exe
281409:32:14.146903 vminfo Session 1: PID=9172 (fInt=true ): C:\Program Files\TortoiseSVN\bin\TSVNCache.exe
281509:32:14.146903 vminfo Session 1: PID=9280 (fInt=true ): C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe
281609:32:14.146903 vminfo Session 1: PID=9652 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
281709:32:14.146903 vminfo Session 1: PID=9728 (fInt=true ): C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe
281809:32:14.146903 vminfo Session 1: PID=9880 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
281909:32:14.146903 vminfo Session 1: PID=9944 (fInt=true ): C:\Windows\System32\dllhost.exe
282009:32:14.146903 vminfo Session 1: PID=8128 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17112.19011.0_x64__8wekyb3d8bbwe\Video.UI.exe
282109:32:14.146903 vminfo Session 1: PID=9528 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
282209:32:14.146903 vminfo Session 1: PID=10292 (fInt=true ): C:\Program Files\Windows Defender\MSASCuiL.exe
282309:32:14.146903 vminfo Session 1: PID=10324 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
282409:32:14.146903 vminfo Session 1: PID=10596 (fInt=true ): C:\Users\user\Documents\Visual Studio 2017\Projects\vboxtray_mon\vboxtray_mon\bin\Release\vboxtray_mon.exe
282509:32:14.146903 vminfo Session 1: PID=10612 (fInt=true ): C:\Windows\System32\conhost.exe
282609:32:14.146903 vminfo Session 1: PID=10720 (fInt=true ): C:\Program Files (x86)\FileZilla Server\FileZilla Server Interface.exe
282709:32:14.146903 vminfo Session 1: PID=9808 (fInt=true ): C:\Windows\System32\svchost.exe
282809:32:14.146903 vminfo Session 1: PID=6716 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18011.15918.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
282909:32:14.146903 vminfo Session 1: PID=6688 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
283009:32:14.146903 vminfo Session 1: PID=10200 (fInt=true ): C:\Windows\System32\ApplicationFrameHost.exe
283109:32:14.146903 vminfo Session 1: PID=4868 (fInt=true ): C:\Windows\ImmersiveControlPanel\SystemSettings.exe
283209:32:14.146903 vminfo Session 1: PID=1444 (fInt=true ): C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe
283309:32:14.146903 vminfo Session 1: PID=9504 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
283409:32:14.146903 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/Session/1' = '#12159: cSessionProcs=30 (of 154 procs total)'
283509:32:14.146903 vminfo Adding new user=user (session=1) with 30 processes
283609:32:14.146903 vminfo Handling session 6 (of 17)
283709:32:14.146903 vminfo Session data: Name=user, SessionID=1, LogonID=0,1970599, LogonType=2
283809:32:14.146903 vminfo Session LogonType=2 is supported -- looking up SID + type ...
283909:32:14.146903 vminfo Account User=user, Session=1, LogonID=0,1970599, AuthPkg=Kerberos, Domain=DOMAIN
284009:32:14.146903 vminfo Account User=user, WTSConnectState=0 (4)
284109:32:14.146903 vminfo Account User=user using TCS/RDP, state=0
284209:32:14.146903 vminfo Account User=user is logged in
284309:32:14.146903 vminfo Handling user=user, domain=DOMAIN, package=Kerberos, session=1
284409:32:14.146903 vminfo Session 1: PID=6784 (fInt=true ): C:\Windows\System32\svchost.exe
284509:32:14.146903 vminfo Session 1: PID=264 (fInt=true ): C:\Windows\System32\sihost.exe
284609:32:14.146903 vminfo Session 1: PID=3148 (fInt=true ): C:\Windows\System32\svchost.exe
284709:32:14.146903 vminfo Session 1: PID=7176 (fInt=true ): C:\Windows\System32\taskhostw.exe
284809:32:14.146903 vminfo Session 1: PID=7268 (fInt=true ): C:\Windows\System32\ctfmon.exe
284909:32:14.146903 vminfo Session 1: PID=8732 (fInt=true ): C:\Windows\explorer.exe
285009:32:14.146903 vminfo Session 1: PID=9016 (fInt=true ): C:\Program Files (x86)\NoMachine\bin\nxclient.bin
285109:32:14.146903 vminfo Session 1: PID=8260 (fInt=true ): C:\Program Files\McAfee\Agent\x86\UpdaterUI.exe
285209:32:14.146903 vminfo Session 1: PID=8828 (fInt=true ): C:\Program Files\Classic Shell\ClassicStartMenu.exe
285309:32:14.146903 vminfo Session 1: PID=8488 (fInt=true ): C:\Program Files\McAfee\Agent\x86\mctray.exe
285409:32:14.146903 vminfo Session 1: PID=9172 (fInt=true ): C:\Program Files\TortoiseSVN\bin\TSVNCache.exe
285509:32:14.146903 vminfo Session 1: PID=9280 (fInt=true ): C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe
285609:32:14.146903 vminfo Session 1: PID=9652 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
285709:32:14.146903 vminfo Session 1: PID=9728 (fInt=true ): C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe
285809:32:14.146903 vminfo Session 1: PID=9880 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
285909:32:14.146903 vminfo Session 1: PID=9944 (fInt=true ): C:\Windows\System32\dllhost.exe
286009:32:14.146903 vminfo Session 1: PID=8128 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17112.19011.0_x64__8wekyb3d8bbwe\Video.UI.exe
286109:32:14.146903 vminfo Session 1: PID=9528 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
286209:32:14.146903 vminfo Session 1: PID=10292 (fInt=true ): C:\Program Files\Windows Defender\MSASCuiL.exe
286309:32:14.146903 vminfo Session 1: PID=10324 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
286409:32:14.146903 vminfo Session 1: PID=10596 (fInt=true ): C:\Users\user\Documents\Visual Studio 2017\Projects\vboxtray_mon\vboxtray_mon\bin\Release\vboxtray_mon.exe
286509:32:14.146903 vminfo Session 1: PID=10612 (fInt=true ): C:\Windows\System32\conhost.exe
286609:32:14.146903 vminfo Session 1: PID=10720 (fInt=true ): C:\Program Files (x86)\FileZilla Server\FileZilla Server Interface.exe
286709:32:14.162876 vminfo Session 1: PID=9808 (fInt=true ): C:\Windows\System32\svchost.exe
286809:32:14.162876 vminfo Session 1: PID=6716 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18011.15918.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
286909:32:14.162876 vminfo Session 1: PID=6688 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
287009:32:14.162876 vminfo Session 1: PID=10200 (fInt=true ): C:\Windows\System32\ApplicationFrameHost.exe
287109:32:14.162876 vminfo Session 1: PID=4868 (fInt=true ): C:\Windows\ImmersiveControlPanel\SystemSettings.exe
287209:32:14.162876 vminfo Session 1: PID=1444 (fInt=true ): C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe
287309:32:14.162876 vminfo Session 1: PID=9504 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
287409:32:14.162876 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/Session/1' = '#12159: cSessionProcs=30 (of 154 procs total)'
287509:32:14.162876 vminfo Adding new user=user (session=1) with 30 processes
287609:32:14.162876 vminfo Handling session 7 (of 17)
287709:32:14.162876 vminfo Session data: Name=nx, SessionID=0, LogonID=0,685607, LogonType=3
287809:32:14.162876 vminfo Handling session 8 (of 17)
287909:32:14.162876 vminfo Session data: Name=ANONYMOUS LOGON, SessionID=0, LogonID=0,649881, LogonType=3
288009:32:14.162876 vminfo Handling session 9 (of 17)
288109:32:14.162876 vminfo Session data: Name=IUSR, SessionID=0, LogonID=0,995, LogonType=5
288209:32:14.162876 vminfo Handling session 10 (of 17)
288309:32:14.162876 vminfo Session data: Name=DWM-1, SessionID=1, LogonID=0,61006, LogonType=2
288409:32:14.162876 vminfo Session LogonType=2 is supported -- looking up SID + type ...
288509:32:14.162876 vminfo SID owner type=5 not handled, skipping
288609:32:14.162876 vminfo Account User=DWM-1 is not logged in
288709:32:14.162876 vminfo Handling session 11 (of 17)
288809:32:14.162876 vminfo Session data: Name=DWM-1, SessionID=1, LogonID=0,60973, LogonType=2
288909:32:14.162876 vminfo Session LogonType=2 is supported -- looking up SID + type ...
289009:32:14.162876 vminfo SID owner type=5 not handled, skipping
289109:32:14.162876 vminfo Account User=DWM-1 is not logged in
289209:32:14.162876 vminfo Handling session 12 (of 17)
289309:32:14.162876 vminfo Session data: Name=MACHINE$, SessionID=0, LogonID=0,996, LogonType=5
289409:32:14.162876 vminfo Handling session 13 (of 17)
289509:32:14.162876 vminfo Session data: Name=LOCAL SERVICE, SessionID=0, LogonID=0,997, LogonType=5
289609:32:14.162876 vminfo Handling session 14 (of 17)
289709:32:14.162876 vminfo Session data: Name=UMFD-1, SessionID=1, LogonID=0,34521, LogonType=2
289809:32:14.162876 vminfo Session LogonType=2 is supported -- looking up SID + type ...
289909:32:14.162876 vminfo SID owner type=5 not handled, skipping
290009:32:14.162876 vminfo Account User=UMFD-1 is not logged in
290109:32:14.162876 vminfo Handling session 15 (of 17)
290209:32:14.162876 vminfo Session data: Name=UMFD-0, SessionID=0, LogonID=0,34482, LogonType=2
290309:32:14.162876 vminfo Handling session 16 (of 17)
290409:32:14.162876 vminfo Session data: Name=, SessionID=0, LogonID=0,32336, LogonType=0
290509:32:14.162876 vminfo Handling session 17 (of 17)
290609:32:14.162876 vminfo Session data: Name=MACHINE$, SessionID=0, LogonID=0,999, LogonType=0
290709:32:14.162876 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA' = '#12159: cSessions=17, cProcs=154, cUniqueUsers=2'
290809:32:14.162876 vminfo Found 2 unique logged-in user(s)
290909:32:14.162876 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/User/0' = '#12159: szName=user, sessionID=1, cProcs=30'
291009:32:14.162876 vminfo User 'user' has 30 interactive processes (session=1)
291109:32:14.162876 vminfo VBoxTray for user 'user' not running (anymore), no last input available
291209:32:14.162876 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/User/user@DOMAIN/UsageState' resulted in rc=VINF_NO_CHANGE
291309:32:14.162876 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/User/1' = '#12159: szName=user, sessionID=1, cProcs=30'
291409:32:14.162876 vminfo User 'user' has 30 interactive processes (session=1)
291509:32:14.162876 vminfo VBoxTray for user 'user' not running (anymore), no last input available
291609:32:14.162876 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/User/user@DOMAIN/UsageState' resulted in rc=VINF_NO_CHANGE
291709:32:14.162876 vminfo cUsersInList=2, pszUserList=user,user, rc=VINF_NO_CHANGE
291809:32:14.162876 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/LoggedInUsersList' resulted in rc=VINF_NO_CHANGE
291909:32:14.162876 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/LoggedInUsers' resulted in rc=VINF_NO_CHANGE
292009:32:14.162876 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/NoLoggedInUsers' resulted in rc=VINF_NO_CHANGE
292109:32:14.162876 vminfo Writing users returned with rc=VINF_NO_CHANGE
292209:32:14.162876 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/IP' resulted in rc=VINF_NO_CHANGE
292309:32:14.162876 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/Broadcast' resulted in rc=VINF_NO_CHANGE
292409:32:14.162876 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/Netmask' resulted in rc=VINF_NO_CHANGE
292509:32:14.162876 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/Status' resulted in rc=VINF_NO_CHANGE
292609:32:14.162876 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/MAC' resulted in rc=VINF_NO_CHANGE
292709:32:14.162876 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/IP' resulted in rc=VINF_NO_CHANGE
292809:32:14.162876 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/Broadcast' resulted in rc=VINF_NO_CHANGE
292909:32:14.162876 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/Netmask' resulted in rc=VINF_NO_CHANGE
293009:32:14.162876 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/Status' resulted in rc=VINF_NO_CHANGE
293109:32:14.162876 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/MAC' resulted in rc=VINF_NO_CHANGE
293209:32:14.162876 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/IP' resulted in rc=VINF_NO_CHANGE
293309:32:14.162876 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/Broadcast' resulted in rc=VINF_NO_CHANGE
293409:32:14.162876 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/Netmask' resulted in rc=VINF_NO_CHANGE
293509:32:14.162876 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/Status' resulted in rc=VINF_NO_CHANGE
293609:32:14.162876 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/MAC' resulted in rc=VINF_NO_CHANGE
293709:32:14.162876 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/IP' resulted in rc=VINF_NO_CHANGE
293809:32:14.162876 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/Broadcast' resulted in rc=VINF_NO_CHANGE
293909:32:14.162876 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/Netmask' resulted in rc=VINF_NO_CHANGE
294009:32:14.162876 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/Status' resulted in rc=VINF_NO_CHANGE
294109:32:14.162876 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/MAC' resulted in rc=VINF_NO_CHANGE
294209:32:14.162876 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/IP' resulted in rc=VINF_NO_CHANGE
294309:32:14.162876 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/Broadcast' resulted in rc=VINF_NO_CHANGE
294409:32:14.162876 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/Netmask' resulted in rc=VINF_NO_CHANGE
294509:32:14.162876 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/Status' resulted in rc=VINF_NO_CHANGE
294609:32:14.162876 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/MAC' resulted in rc=VINF_NO_CHANGE
294709:32:14.162876 vminfo [PropCache 00007ff6b2962520]: Written '/VirtualBox/GuestInfo/Net/Count'='5' (flags: 6), rc=VINF_SUCCESS
294809:32:14.162876 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/Count' resulted in rc=VINF_SUCCESS
294909:32:14.162876 vminfo Guest Property: /VirtualBox/HostInfo/VRDP/ActiveClient not found
295009:32:14.162876 vminfo VRDP: Handling location awareness done
295109:32:16.167304 timesync vgsvcTimeSyncWorker: Host: 2019-02-26T09:32:16.041000000Z (MinAdjust: 200 ms), Guest: 2019-02-26T09:32:16.167304600Z => -126 304 600 ns drift
295209:32:19.174632 vminfo Found 17 sessions
295309:32:19.174632 vminfo Error: Get token class 'user' for process 0 failed, rc=VERR_INVALID_PARAMETER
295409:32:19.174632 vminfo Error: Get token class 'groups' for process 0 failed, rc=VERR_INVALID_PARAMETER
295509:32:19.174632 vminfo Error: Get token class 'statistics' for process 0 failed, rc=VERR_INVALID_PARAMETER
295609:32:19.174632 vminfo Error: Get token class 'user' for process 4 failed, rc=VERR_ACCESS_DENIED
295709:32:19.174632 vminfo Error: Get token class 'groups' for process 4 failed, rc=VERR_ACCESS_DENIED
295809:32:19.174632 vminfo Error: Get token class 'statistics' for process 4 failed, rc=VERR_ACCESS_DENIED
295909:32:19.174632 vminfo Error: Get token class 'user' for process 104 failed, rc=VERR_ACCESS_DENIED
296009:32:19.174632 vminfo Error: Get token class 'groups' for process 104 failed, rc=VERR_ACCESS_DENIED
296109:32:19.174632 vminfo Error: Get token class 'statistics' for process 104 failed, rc=VERR_ACCESS_DENIED
296209:32:19.174632 vminfo Error: Get token class 'user' for process 472 failed, rc=VERR_ACCESS_DENIED
296309:32:19.174632 vminfo Error: Get token class 'groups' for process 472 failed, rc=VERR_ACCESS_DENIED
296409:32:19.174632 vminfo Error: Get token class 'statistics' for process 472 failed, rc=VERR_ACCESS_DENIED
296509:32:19.174632 vminfo Error: Get token class 'user' for process 676 failed, rc=VERR_ACCESS_DENIED
296609:32:19.174632 vminfo Error: Get token class 'groups' for process 676 failed, rc=VERR_ACCESS_DENIED
296709:32:19.174632 vminfo Error: Get token class 'statistics' for process 676 failed, rc=VERR_ACCESS_DENIED
296809:32:19.174632 vminfo Error: Get token class 'user' for process 756 failed, rc=VERR_ACCESS_DENIED
296909:32:19.174632 vminfo Error: Get token class 'groups' for process 756 failed, rc=VERR_ACCESS_DENIED
297009:32:19.174632 vminfo Error: Get token class 'statistics' for process 756 failed, rc=VERR_ACCESS_DENIED
297109:32:19.174632 vminfo Error: Get token class 'user' for process 768 failed, rc=VERR_ACCESS_DENIED
297209:32:19.174632 vminfo Error: Get token class 'groups' for process 768 failed, rc=VERR_ACCESS_DENIED
297309:32:19.174632 vminfo Error: Get token class 'statistics' for process 768 failed, rc=VERR_ACCESS_DENIED
297409:32:19.174632 vminfo Error: Get token class 'user' for process 876 failed, rc=VERR_ACCESS_DENIED
297509:32:19.174632 vminfo Error: Get token class 'groups' for process 876 failed, rc=VERR_ACCESS_DENIED
297609:32:19.174632 vminfo Error: Get token class 'statistics' for process 876 failed, rc=VERR_ACCESS_DENIED
297709:32:19.174632 vminfo Error: Get token class 'user' for process 2532 failed, rc=VERR_ACCESS_DENIED
297809:32:19.174632 vminfo Error: Get token class 'groups' for process 2532 failed, rc=VERR_ACCESS_DENIED
297909:32:19.174632 vminfo Error: Get token class 'statistics' for process 2532 failed, rc=VERR_ACCESS_DENIED
298009:32:19.174632 vminfo Error: Get token class 'user' for process 4136 failed, rc=VERR_ACCESS_DENIED
298109:32:19.174632 vminfo Error: Get token class 'groups' for process 4136 failed, rc=VERR_ACCESS_DENIED
298209:32:19.174632 vminfo Error: Get token class 'statistics' for process 4136 failed, rc=VERR_ACCESS_DENIED
298309:32:19.174632 vminfo Error: Get token class 'user' for process 5212 failed, rc=VERR_ACCESS_DENIED
298409:32:19.174632 vminfo Error: Get token class 'groups' for process 5212 failed, rc=VERR_ACCESS_DENIED
298509:32:19.174632 vminfo Error: Get token class 'statistics' for process 5212 failed, rc=VERR_ACCESS_DENIED
298609:32:19.174632 vminfo Handling session 1 (of 17)
298709:32:19.174632 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2145999, LogonType=3
298809:32:19.174632 vminfo Handling session 2 (of 17)
298909:32:19.174632 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2113823, LogonType=3
299009:32:19.174632 vminfo Handling session 3 (of 17)
299109:32:19.174632 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2041868, LogonType=3
299209:32:19.174632 vminfo Handling session 4 (of 17)
299309:32:19.187871 vminfo Session data: Name=nx, SessionID=0, LogonID=0,1997776, LogonType=3
299409:32:19.187871 vminfo Handling session 5 (of 17)
299509:32:19.187871 vminfo Session data: Name=user, SessionID=1, LogonID=0,1970648, LogonType=2
299609:32:19.187871 vminfo Session LogonType=2 is supported -- looking up SID + type ...
299709:32:19.187871 vminfo Account User=user, Session=1, LogonID=0,1970648, AuthPkg=Negotiate, Domain=DOMAIN
299809:32:19.187871 vminfo Account User=user, WTSConnectState=0 (4)
299909:32:19.187871 vminfo Account User=user using TCS/RDP, state=0
300009:32:19.187871 vminfo Account User=user is logged in
300109:32:19.187871 vminfo Handling user=user, domain=DOMAIN, package=Negotiate, session=1
300209:32:19.187871 vminfo Session 1: PID=6784 (fInt=true ): C:\Windows\System32\svchost.exe
300309:32:19.187871 vminfo Session 1: PID=264 (fInt=true ): C:\Windows\System32\sihost.exe
300409:32:19.187871 vminfo Session 1: PID=3148 (fInt=true ): C:\Windows\System32\svchost.exe
300509:32:19.187871 vminfo Session 1: PID=7176 (fInt=true ): C:\Windows\System32\taskhostw.exe
300609:32:19.187871 vminfo Session 1: PID=7268 (fInt=true ): C:\Windows\System32\ctfmon.exe
300709:32:19.187871 vminfo Session 1: PID=8732 (fInt=true ): C:\Windows\explorer.exe
300809:32:19.187871 vminfo Session 1: PID=9016 (fInt=true ): C:\Program Files (x86)\NoMachine\bin\nxclient.bin
300909:32:19.187871 vminfo Session 1: PID=8260 (fInt=true ): C:\Program Files\McAfee\Agent\x86\UpdaterUI.exe
301009:32:19.187871 vminfo Session 1: PID=8828 (fInt=true ): C:\Program Files\Classic Shell\ClassicStartMenu.exe
301109:32:19.187871 vminfo Session 1: PID=8488 (fInt=true ): C:\Program Files\McAfee\Agent\x86\mctray.exe
301209:32:19.187871 vminfo Session 1: PID=9172 (fInt=true ): C:\Program Files\TortoiseSVN\bin\TSVNCache.exe
301309:32:19.187871 vminfo Session 1: PID=9280 (fInt=true ): C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe
301409:32:19.187871 vminfo Session 1: PID=9652 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
301509:32:19.187871 vminfo Session 1: PID=9728 (fInt=true ): C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe
301609:32:19.187871 vminfo Session 1: PID=9880 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
301709:32:19.187871 vminfo Session 1: PID=9944 (fInt=true ): C:\Windows\System32\dllhost.exe
301809:32:19.187871 vminfo Session 1: PID=8128 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17112.19011.0_x64__8wekyb3d8bbwe\Video.UI.exe
301909:32:19.187871 vminfo Session 1: PID=9528 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
302009:32:19.187871 vminfo Session 1: PID=10292 (fInt=true ): C:\Program Files\Windows Defender\MSASCuiL.exe
302109:32:19.187871 vminfo Session 1: PID=10324 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
302209:32:19.187871 vminfo Session 1: PID=10596 (fInt=true ): C:\Users\user\Documents\Visual Studio 2017\Projects\vboxtray_mon\vboxtray_mon\bin\Release\vboxtray_mon.exe
302309:32:19.187871 vminfo Session 1: PID=10612 (fInt=true ): C:\Windows\System32\conhost.exe
302409:32:19.187871 vminfo Session 1: PID=10720 (fInt=true ): C:\Program Files (x86)\FileZilla Server\FileZilla Server Interface.exe
302509:32:19.187871 vminfo Session 1: PID=9808 (fInt=true ): C:\Windows\System32\svchost.exe
302609:32:19.187871 vminfo Session 1: PID=6716 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18011.15918.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
302709:32:19.187871 vminfo Session 1: PID=6688 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
302809:32:19.187871 vminfo Session 1: PID=10200 (fInt=true ): C:\Windows\System32\ApplicationFrameHost.exe
302909:32:19.187871 vminfo Session 1: PID=4868 (fInt=true ): C:\Windows\ImmersiveControlPanel\SystemSettings.exe
303009:32:19.187871 vminfo Session 1: PID=1444 (fInt=true ): C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe
303109:32:19.187871 vminfo Session 1: PID=9504 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
303209:32:19.187871 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/Session/1' = '#12160: cSessionProcs=30 (of 154 procs total)'
303309:32:19.187871 vminfo Adding new user=user (session=1) with 30 processes
303409:32:19.187871 vminfo Handling session 6 (of 17)
303509:32:19.187871 vminfo Session data: Name=user, SessionID=1, LogonID=0,1970599, LogonType=2
303609:32:19.187871 vminfo Session LogonType=2 is supported -- looking up SID + type ...
303709:32:19.187871 vminfo Account User=user, Session=1, LogonID=0,1970599, AuthPkg=Kerberos, Domain=DOMAIN
303809:32:19.187871 vminfo Account User=user, WTSConnectState=0 (4)
303909:32:19.187871 vminfo Account User=user using TCS/RDP, state=0
304009:32:19.187871 vminfo Account User=user is logged in
304109:32:19.187871 vminfo Handling user=user, domain=DOMAIN, package=Kerberos, session=1
304209:32:19.187871 vminfo Session 1: PID=6784 (fInt=true ): C:\Windows\System32\svchost.exe
304309:32:19.187871 vminfo Session 1: PID=264 (fInt=true ): C:\Windows\System32\sihost.exe
304409:32:19.187871 vminfo Session 1: PID=3148 (fInt=true ): C:\Windows\System32\svchost.exe
304509:32:19.187871 vminfo Session 1: PID=7176 (fInt=true ): C:\Windows\System32\taskhostw.exe
304609:32:19.187871 vminfo Session 1: PID=7268 (fInt=true ): C:\Windows\System32\ctfmon.exe
304709:32:19.187871 vminfo Session 1: PID=8732 (fInt=true ): C:\Windows\explorer.exe
304809:32:19.187871 vminfo Session 1: PID=9016 (fInt=true ): C:\Program Files (x86)\NoMachine\bin\nxclient.bin
304909:32:19.187871 vminfo Session 1: PID=8260 (fInt=true ): C:\Program Files\McAfee\Agent\x86\UpdaterUI.exe
305009:32:19.187871 vminfo Session 1: PID=8828 (fInt=true ): C:\Program Files\Classic Shell\ClassicStartMenu.exe
305109:32:19.187871 vminfo Session 1: PID=8488 (fInt=true ): C:\Program Files\McAfee\Agent\x86\mctray.exe
305209:32:19.187871 vminfo Session 1: PID=9172 (fInt=true ): C:\Program Files\TortoiseSVN\bin\TSVNCache.exe
305309:32:19.187871 vminfo Session 1: PID=9280 (fInt=true ): C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe
305409:32:19.187871 vminfo Session 1: PID=9652 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
305509:32:19.187871 vminfo Session 1: PID=9728 (fInt=true ): C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe
305609:32:19.187871 vminfo Session 1: PID=9880 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
305709:32:19.187871 vminfo Session 1: PID=9944 (fInt=true ): C:\Windows\System32\dllhost.exe
305809:32:19.187871 vminfo Session 1: PID=8128 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17112.19011.0_x64__8wekyb3d8bbwe\Video.UI.exe
305909:32:19.187871 vminfo Session 1: PID=9528 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
306009:32:19.187871 vminfo Session 1: PID=10292 (fInt=true ): C:\Program Files\Windows Defender\MSASCuiL.exe
306109:32:19.187871 vminfo Session 1: PID=10324 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
306209:32:19.187871 vminfo Session 1: PID=10596 (fInt=true ): C:\Users\user\Documents\Visual Studio 2017\Projects\vboxtray_mon\vboxtray_mon\bin\Release\vboxtray_mon.exe
306309:32:19.203174 vminfo Session 1: PID=10612 (fInt=true ): C:\Windows\System32\conhost.exe
306409:32:19.203174 vminfo Session 1: PID=10720 (fInt=true ): C:\Program Files (x86)\FileZilla Server\FileZilla Server Interface.exe
306509:32:19.203174 vminfo Session 1: PID=9808 (fInt=true ): C:\Windows\System32\svchost.exe
306609:32:19.203174 vminfo Session 1: PID=6716 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18011.15918.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
306709:32:19.203174 vminfo Session 1: PID=6688 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
306809:32:19.203174 vminfo Session 1: PID=10200 (fInt=true ): C:\Windows\System32\ApplicationFrameHost.exe
306909:32:19.203174 vminfo Session 1: PID=4868 (fInt=true ): C:\Windows\ImmersiveControlPanel\SystemSettings.exe
307009:32:19.203174 vminfo Session 1: PID=1444 (fInt=true ): C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe
307109:32:19.203174 vminfo Session 1: PID=9504 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
307209:32:19.203174 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/Session/1' = '#12160: cSessionProcs=30 (of 154 procs total)'
307309:32:19.203174 vminfo Adding new user=user (session=1) with 30 processes
307409:32:19.203174 vminfo Handling session 7 (of 17)
307509:32:19.203174 vminfo Session data: Name=nx, SessionID=0, LogonID=0,685607, LogonType=3
307609:32:19.203174 vminfo Handling session 8 (of 17)
307709:32:19.203174 vminfo Session data: Name=ANONYMOUS LOGON, SessionID=0, LogonID=0,649881, LogonType=3
307809:32:19.203174 vminfo Handling session 9 (of 17)
307909:32:19.203174 vminfo Session data: Name=IUSR, SessionID=0, LogonID=0,995, LogonType=5
308009:32:19.203174 vminfo Handling session 10 (of 17)
308109:32:19.203174 vminfo Session data: Name=DWM-1, SessionID=1, LogonID=0,61006, LogonType=2
308209:32:19.203174 vminfo Session LogonType=2 is supported -- looking up SID + type ...
308309:32:19.203174 vminfo SID owner type=5 not handled, skipping
308409:32:19.203174 vminfo Account User=DWM-1 is not logged in
308509:32:19.203174 vminfo Handling session 11 (of 17)
308609:32:19.203174 vminfo Session data: Name=DWM-1, SessionID=1, LogonID=0,60973, LogonType=2
308709:32:19.203174 vminfo Session LogonType=2 is supported -- looking up SID + type ...
308809:32:19.203174 vminfo SID owner type=5 not handled, skipping
308909:32:19.203174 vminfo Account User=DWM-1 is not logged in
309009:32:19.203174 vminfo Handling session 12 (of 17)
309109:32:19.203174 vminfo Session data: Name=MACHINE$, SessionID=0, LogonID=0,996, LogonType=5
309209:32:19.203174 vminfo Handling session 13 (of 17)
309309:32:19.203174 vminfo Session data: Name=LOCAL SERVICE, SessionID=0, LogonID=0,997, LogonType=5
309409:32:19.203174 vminfo Handling session 14 (of 17)
309509:32:19.203174 vminfo Session data: Name=UMFD-1, SessionID=1, LogonID=0,34521, LogonType=2
309609:32:19.203174 vminfo Session LogonType=2 is supported -- looking up SID + type ...
309709:32:19.203174 vminfo SID owner type=5 not handled, skipping
309809:32:19.203174 vminfo Account User=UMFD-1 is not logged in
309909:32:19.203174 vminfo Handling session 15 (of 17)
310009:32:19.203174 vminfo Session data: Name=UMFD-0, SessionID=0, LogonID=0,34482, LogonType=2
310109:32:19.203174 vminfo Handling session 16 (of 17)
310209:32:19.203174 vminfo Session data: Name=, SessionID=0, LogonID=0,32336, LogonType=0
310309:32:19.203174 vminfo Handling session 17 (of 17)
310409:32:19.203174 vminfo Session data: Name=MACHINE$, SessionID=0, LogonID=0,999, LogonType=0
310509:32:19.203174 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA' = '#12160: cSessions=17, cProcs=154, cUniqueUsers=2'
310609:32:19.203174 vminfo Found 2 unique logged-in user(s)
310709:32:19.203174 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/User/0' = '#12160: szName=user, sessionID=1, cProcs=30'
310809:32:19.203174 vminfo User 'user' has 30 interactive processes (session=1)
310909:32:19.203174 vminfo VBoxTray for user 'user' not running (anymore), no last input available
311009:32:19.203174 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/User/user@DOMAIN/UsageState' resulted in rc=VINF_NO_CHANGE
311109:32:19.203174 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/User/1' = '#12160: szName=user, sessionID=1, cProcs=30'
311209:32:19.203174 vminfo User 'user' has 30 interactive processes (session=1)
311309:32:19.203174 vminfo VBoxTray for user 'user' not running (anymore), no last input available
311409:32:19.203174 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/User/user@DOMAIN/UsageState' resulted in rc=VINF_NO_CHANGE
311509:32:19.203174 vminfo cUsersInList=2, pszUserList=user,user, rc=VINF_NO_CHANGE
311609:32:19.203174 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/LoggedInUsersList' resulted in rc=VINF_NO_CHANGE
311709:32:19.203174 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/LoggedInUsers' resulted in rc=VINF_NO_CHANGE
311809:32:19.203174 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/NoLoggedInUsers' resulted in rc=VINF_NO_CHANGE
311909:32:19.203174 vminfo Writing users returned with rc=VINF_NO_CHANGE
312009:32:19.203174 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/IP' resulted in rc=VINF_NO_CHANGE
312109:32:19.203174 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/Broadcast' resulted in rc=VINF_NO_CHANGE
312209:32:19.203174 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/Netmask' resulted in rc=VINF_NO_CHANGE
312309:32:19.203174 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/Status' resulted in rc=VINF_NO_CHANGE
312409:32:19.203174 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/MAC' resulted in rc=VINF_NO_CHANGE
312509:32:19.203174 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/IP' resulted in rc=VINF_NO_CHANGE
312609:32:19.203174 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/Broadcast' resulted in rc=VINF_NO_CHANGE
312709:32:19.203174 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/Netmask' resulted in rc=VINF_NO_CHANGE
312809:32:19.203174 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/Status' resulted in rc=VINF_NO_CHANGE
312909:32:19.203174 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/MAC' resulted in rc=VINF_NO_CHANGE
313009:32:19.203174 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/IP' resulted in rc=VINF_NO_CHANGE
313109:32:19.203174 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/Broadcast' resulted in rc=VINF_NO_CHANGE
313209:32:19.203174 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/Netmask' resulted in rc=VINF_NO_CHANGE
313309:32:19.203174 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/Status' resulted in rc=VINF_NO_CHANGE
313409:32:19.203174 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/MAC' resulted in rc=VINF_NO_CHANGE
313509:32:19.203174 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/IP' resulted in rc=VINF_NO_CHANGE
313609:32:19.203174 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/Broadcast' resulted in rc=VINF_NO_CHANGE
313709:32:19.203174 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/Netmask' resulted in rc=VINF_NO_CHANGE
313809:32:19.203174 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/Status' resulted in rc=VINF_NO_CHANGE
313909:32:19.203174 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/MAC' resulted in rc=VINF_NO_CHANGE
314009:32:19.203174 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/IP' resulted in rc=VINF_NO_CHANGE
314109:32:19.203174 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/Broadcast' resulted in rc=VINF_NO_CHANGE
314209:32:19.203174 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/Netmask' resulted in rc=VINF_NO_CHANGE
314309:32:19.203174 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/Status' resulted in rc=VINF_NO_CHANGE
314409:32:19.203174 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/MAC' resulted in rc=VINF_NO_CHANGE
314509:32:19.203174 vminfo [PropCache 00007ff6b2962520]: Written '/VirtualBox/GuestInfo/Net/Count'='5' (flags: 6), rc=VINF_SUCCESS
314609:32:19.203174 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/Count' resulted in rc=VINF_SUCCESS
314709:32:19.203174 vminfo Guest Property: /VirtualBox/HostInfo/VRDP/ActiveClient not found
314809:32:19.203174 vminfo VRDP: Handling location awareness done
314909:32:24.219177 vminfo Found 17 sessions
315009:32:24.219177 vminfo Error: Get token class 'user' for process 0 failed, rc=VERR_INVALID_PARAMETER
315109:32:24.219177 vminfo Error: Get token class 'groups' for process 0 failed, rc=VERR_INVALID_PARAMETER
315209:32:24.219177 vminfo Error: Get token class 'statistics' for process 0 failed, rc=VERR_INVALID_PARAMETER
315309:32:24.219177 vminfo Error: Get token class 'user' for process 4 failed, rc=VERR_ACCESS_DENIED
315409:32:24.219177 vminfo Error: Get token class 'groups' for process 4 failed, rc=VERR_ACCESS_DENIED
315509:32:24.219177 vminfo Error: Get token class 'statistics' for process 4 failed, rc=VERR_ACCESS_DENIED
315609:32:24.219177 vminfo Error: Get token class 'user' for process 104 failed, rc=VERR_ACCESS_DENIED
315709:32:24.219177 vminfo Error: Get token class 'groups' for process 104 failed, rc=VERR_ACCESS_DENIED
315809:32:24.219177 vminfo Error: Get token class 'statistics' for process 104 failed, rc=VERR_ACCESS_DENIED
315909:32:24.219177 vminfo Error: Get token class 'user' for process 472 failed, rc=VERR_ACCESS_DENIED
316009:32:24.219177 vminfo Error: Get token class 'groups' for process 472 failed, rc=VERR_ACCESS_DENIED
316109:32:24.219177 vminfo Error: Get token class 'statistics' for process 472 failed, rc=VERR_ACCESS_DENIED
316209:32:24.219177 vminfo Error: Get token class 'user' for process 676 failed, rc=VERR_ACCESS_DENIED
316309:32:24.219177 vminfo Error: Get token class 'groups' for process 676 failed, rc=VERR_ACCESS_DENIED
316409:32:24.219177 vminfo Error: Get token class 'statistics' for process 676 failed, rc=VERR_ACCESS_DENIED
316509:32:24.219177 vminfo Error: Get token class 'user' for process 756 failed, rc=VERR_ACCESS_DENIED
316609:32:24.219177 vminfo Error: Get token class 'groups' for process 756 failed, rc=VERR_ACCESS_DENIED
316709:32:24.219177 vminfo Error: Get token class 'statistics' for process 756 failed, rc=VERR_ACCESS_DENIED
316809:32:24.219177 vminfo Error: Get token class 'user' for process 768 failed, rc=VERR_ACCESS_DENIED
316909:32:24.219177 vminfo Error: Get token class 'groups' for process 768 failed, rc=VERR_ACCESS_DENIED
317009:32:24.219177 vminfo Error: Get token class 'statistics' for process 768 failed, rc=VERR_ACCESS_DENIED
317109:32:24.219177 vminfo Error: Get token class 'user' for process 876 failed, rc=VERR_ACCESS_DENIED
317209:32:24.219177 vminfo Error: Get token class 'groups' for process 876 failed, rc=VERR_ACCESS_DENIED
317309:32:24.219177 vminfo Error: Get token class 'statistics' for process 876 failed, rc=VERR_ACCESS_DENIED
317409:32:24.219177 vminfo Error: Get token class 'user' for process 2532 failed, rc=VERR_ACCESS_DENIED
317509:32:24.219177 vminfo Error: Get token class 'groups' for process 2532 failed, rc=VERR_ACCESS_DENIED
317609:32:24.219177 vminfo Error: Get token class 'statistics' for process 2532 failed, rc=VERR_ACCESS_DENIED
317709:32:24.219177 vminfo Error: Get token class 'user' for process 4136 failed, rc=VERR_ACCESS_DENIED
317809:32:24.219177 vminfo Error: Get token class 'groups' for process 4136 failed, rc=VERR_ACCESS_DENIED
317909:32:24.219177 vminfo Error: Get token class 'statistics' for process 4136 failed, rc=VERR_ACCESS_DENIED
318009:32:24.219177 vminfo Error: Get token class 'user' for process 5212 failed, rc=VERR_ACCESS_DENIED
318109:32:24.219177 vminfo Error: Get token class 'groups' for process 5212 failed, rc=VERR_ACCESS_DENIED
318209:32:24.219177 vminfo Error: Get token class 'statistics' for process 5212 failed, rc=VERR_ACCESS_DENIED
318309:32:24.219177 vminfo Handling session 1 (of 17)
318409:32:24.219177 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2145999, LogonType=3
318509:32:24.219177 vminfo Handling session 2 (of 17)
318609:32:24.219177 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2113823, LogonType=3
318709:32:24.219177 vminfo Handling session 3 (of 17)
318809:32:24.219177 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2041868, LogonType=3
318909:32:24.219177 vminfo Handling session 4 (of 17)
319009:32:24.219177 vminfo Session data: Name=nx, SessionID=0, LogonID=0,1997776, LogonType=3
319109:32:24.219177 vminfo Handling session 5 (of 17)
319209:32:24.219177 vminfo Session data: Name=user, SessionID=1, LogonID=0,1970648, LogonType=2
319309:32:24.219177 vminfo Session LogonType=2 is supported -- looking up SID + type ...
319409:32:24.233268 vminfo Account User=user, Session=1, LogonID=0,1970648, AuthPkg=Negotiate, Domain=DOMAIN
319509:32:24.233268 vminfo Account User=user, WTSConnectState=0 (4)
319609:32:24.233268 vminfo Account User=user using TCS/RDP, state=0
319709:32:24.233268 vminfo Account User=user is logged in
319809:32:24.233268 vminfo Handling user=user, domain=DOMAIN, package=Negotiate, session=1
319909:32:24.233268 vminfo Session 1: PID=6784 (fInt=true ): C:\Windows\System32\svchost.exe
320009:32:24.233268 vminfo Session 1: PID=264 (fInt=true ): C:\Windows\System32\sihost.exe
320109:32:24.233268 vminfo Session 1: PID=3148 (fInt=true ): C:\Windows\System32\svchost.exe
320209:32:24.233268 vminfo Session 1: PID=7176 (fInt=true ): C:\Windows\System32\taskhostw.exe
320309:32:24.233268 vminfo Session 1: PID=7268 (fInt=true ): C:\Windows\System32\ctfmon.exe
320409:32:24.233268 vminfo Session 1: PID=8732 (fInt=true ): C:\Windows\explorer.exe
320509:32:24.233268 vminfo Session 1: PID=9016 (fInt=true ): C:\Program Files (x86)\NoMachine\bin\nxclient.bin
320609:32:24.233268 vminfo Session 1: PID=8260 (fInt=true ): C:\Program Files\McAfee\Agent\x86\UpdaterUI.exe
320709:32:24.233268 vminfo Session 1: PID=8828 (fInt=true ): C:\Program Files\Classic Shell\ClassicStartMenu.exe
320809:32:24.233268 vminfo Session 1: PID=8488 (fInt=true ): C:\Program Files\McAfee\Agent\x86\mctray.exe
320909:32:24.233268 vminfo Session 1: PID=9172 (fInt=true ): C:\Program Files\TortoiseSVN\bin\TSVNCache.exe
321009:32:24.233268 vminfo Session 1: PID=9280 (fInt=true ): C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe
321109:32:24.233268 vminfo Session 1: PID=9652 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
321209:32:24.233268 vminfo Session 1: PID=9728 (fInt=true ): C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe
321309:32:24.233268 vminfo Session 1: PID=9880 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
321409:32:24.233268 vminfo Session 1: PID=9944 (fInt=true ): C:\Windows\System32\dllhost.exe
321509:32:24.233268 vminfo Session 1: PID=8128 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17112.19011.0_x64__8wekyb3d8bbwe\Video.UI.exe
321609:32:24.233268 vminfo Session 1: PID=9528 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
321709:32:24.233268 vminfo Session 1: PID=10292 (fInt=true ): C:\Program Files\Windows Defender\MSASCuiL.exe
321809:32:24.233268 vminfo Session 1: PID=10324 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
321909:32:24.233268 vminfo Session 1: PID=10596 (fInt=true ): C:\Users\user\Documents\Visual Studio 2017\Projects\vboxtray_mon\vboxtray_mon\bin\Release\vboxtray_mon.exe
322009:32:24.233268 vminfo Session 1: PID=10612 (fInt=true ): C:\Windows\System32\conhost.exe
322109:32:24.233268 vminfo Session 1: PID=10720 (fInt=true ): C:\Program Files (x86)\FileZilla Server\FileZilla Server Interface.exe
322209:32:24.233268 vminfo Session 1: PID=9808 (fInt=true ): C:\Windows\System32\svchost.exe
322309:32:24.233268 vminfo Session 1: PID=6716 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18011.15918.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
322409:32:24.233268 vminfo Session 1: PID=6688 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
322509:32:24.233268 vminfo Session 1: PID=10200 (fInt=true ): C:\Windows\System32\ApplicationFrameHost.exe
322609:32:24.233268 vminfo Session 1: PID=4868 (fInt=true ): C:\Windows\ImmersiveControlPanel\SystemSettings.exe
322709:32:24.233268 vminfo Session 1: PID=1444 (fInt=true ): C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe
322809:32:24.233268 vminfo Session 1: PID=9504 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
322909:32:24.233268 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/Session/1' = '#12161: cSessionProcs=30 (of 154 procs total)'
323009:32:24.233268 vminfo Adding new user=user (session=1) with 30 processes
323109:32:24.233268 vminfo Handling session 6 (of 17)
323209:32:24.233268 vminfo Session data: Name=user, SessionID=1, LogonID=0,1970599, LogonType=2
323309:32:24.233268 vminfo Session LogonType=2 is supported -- looking up SID + type ...
323409:32:24.233268 vminfo Account User=user, Session=1, LogonID=0,1970599, AuthPkg=Kerberos, Domain=DOMAIN
323509:32:24.233268 vminfo Account User=user, WTSConnectState=0 (4)
323609:32:24.233268 vminfo Account User=user using TCS/RDP, state=0
323709:32:24.233268 vminfo Account User=user is logged in
323809:32:24.233268 vminfo Handling user=user, domain=DOMAIN, package=Kerberos, session=1
323909:32:24.233268 vminfo Session 1: PID=6784 (fInt=true ): C:\Windows\System32\svchost.exe
324009:32:24.233268 vminfo Session 1: PID=264 (fInt=true ): C:\Windows\System32\sihost.exe
324109:32:24.233268 vminfo Session 1: PID=3148 (fInt=true ): C:\Windows\System32\svchost.exe
324209:32:24.233268 vminfo Session 1: PID=7176 (fInt=true ): C:\Windows\System32\taskhostw.exe
324309:32:24.233268 vminfo Session 1: PID=7268 (fInt=true ): C:\Windows\System32\ctfmon.exe
324409:32:24.233268 vminfo Session 1: PID=8732 (fInt=true ): C:\Windows\explorer.exe
324509:32:24.233268 vminfo Session 1: PID=9016 (fInt=true ): C:\Program Files (x86)\NoMachine\bin\nxclient.bin
324609:32:24.233268 vminfo Session 1: PID=8260 (fInt=true ): C:\Program Files\McAfee\Agent\x86\UpdaterUI.exe
324709:32:24.233268 vminfo Session 1: PID=8828 (fInt=true ): C:\Program Files\Classic Shell\ClassicStartMenu.exe
324809:32:24.233268 vminfo Session 1: PID=8488 (fInt=true ): C:\Program Files\McAfee\Agent\x86\mctray.exe
324909:32:24.233268 vminfo Session 1: PID=9172 (fInt=true ): C:\Program Files\TortoiseSVN\bin\TSVNCache.exe
325009:32:24.233268 vminfo Session 1: PID=9280 (fInt=true ): C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe
325109:32:24.233268 vminfo Session 1: PID=9652 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
325209:32:24.233268 vminfo Session 1: PID=9728 (fInt=true ): C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe
325309:32:24.233268 vminfo Session 1: PID=9880 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
325409:32:24.233268 vminfo Session 1: PID=9944 (fInt=true ): C:\Windows\System32\dllhost.exe
325509:32:24.233268 vminfo Session 1: PID=8128 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17112.19011.0_x64__8wekyb3d8bbwe\Video.UI.exe
325609:32:24.233268 vminfo Session 1: PID=9528 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
325709:32:24.233268 vminfo Session 1: PID=10292 (fInt=true ): C:\Program Files\Windows Defender\MSASCuiL.exe
325809:32:24.233268 vminfo Session 1: PID=10324 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
325909:32:24.248449 vminfo Session 1: PID=10596 (fInt=true ): C:\Users\user\Documents\Visual Studio 2017\Projects\vboxtray_mon\vboxtray_mon\bin\Release\vboxtray_mon.exe
326009:32:24.248449 vminfo Session 1: PID=10612 (fInt=true ): C:\Windows\System32\conhost.exe
326109:32:24.248449 vminfo Session 1: PID=10720 (fInt=true ): C:\Program Files (x86)\FileZilla Server\FileZilla Server Interface.exe
326209:32:24.248449 vminfo Session 1: PID=9808 (fInt=true ): C:\Windows\System32\svchost.exe
326309:32:24.248449 vminfo Session 1: PID=6716 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18011.15918.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
326409:32:24.248449 vminfo Session 1: PID=6688 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
326509:32:24.248449 vminfo Session 1: PID=10200 (fInt=true ): C:\Windows\System32\ApplicationFrameHost.exe
326609:32:24.248449 vminfo Session 1: PID=4868 (fInt=true ): C:\Windows\ImmersiveControlPanel\SystemSettings.exe
326709:32:24.248449 vminfo Session 1: PID=1444 (fInt=true ): C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe
326809:32:24.248449 vminfo Session 1: PID=9504 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe
326909:32:24.248449 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/Session/1' = '#12161: cSessionProcs=30 (of 154 procs total)'

© 2024 Oracle Support Privacy / Do Not Sell My Info Terms of Use Trademark Policy Automated Access Etiquette