09:31:03.177572 vminfo Session LogonType=2 is supported -- looking up SID + type ... 09:31:03.192259 vminfo Account User=user, Session=1, LogonID=0,1970648, AuthPkg=Negotiate, Domain=DOMAIN 09:31:03.192259 vminfo Account User=user, WTSConnectState=0 (4) 09:31:03.192259 vminfo Account User=user using TCS/RDP, state=0 09:31:03.192259 vminfo Account User=user is logged in 09:31:03.192259 vminfo Handling user=user, domain=DOMAIN, package=Negotiate, session=1 09:31:03.192259 vminfo Session 1: PID=6784 (fInt=true ): C:\Windows\System32\svchost.exe 09:31:03.192259 vminfo Session 1: PID=264 (fInt=true ): C:\Windows\System32\sihost.exe 09:31:03.192259 vminfo Session 1: PID=3148 (fInt=true ): C:\Windows\System32\svchost.exe 09:31:03.192259 vminfo Session 1: PID=7176 (fInt=true ): C:\Windows\System32\taskhostw.exe 09:31:03.192259 vminfo Session 1: PID=7268 (fInt=true ): C:\Windows\System32\ctfmon.exe 09:31:03.192259 vminfo Session 1: PID=8732 (fInt=true ): C:\Windows\explorer.exe 09:31:03.192259 vminfo Session 1: PID=9016 (fInt=true ): C:\Program Files (x86)\NoMachine\bin\nxclient.bin 09:31:03.192259 vminfo Session 1: PID=8260 (fInt=true ): C:\Program Files\McAfee\Agent\x86\UpdaterUI.exe 09:31:03.192259 vminfo Session 1: PID=8828 (fInt=true ): C:\Program Files\Classic Shell\ClassicStartMenu.exe 09:31:03.192259 vminfo Session 1: PID=8488 (fInt=true ): C:\Program Files\McAfee\Agent\x86\mctray.exe 09:31:03.192259 vminfo Session 1: PID=9172 (fInt=true ): C:\Program Files\TortoiseSVN\bin\TSVNCache.exe 09:31:03.192259 vminfo Session 1: PID=9280 (fInt=true ): C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe 09:31:03.192259 vminfo Session 1: PID=9652 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:03.192259 vminfo Session 1: PID=9728 (fInt=true ): C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe 09:31:03.192259 vminfo Session 1: PID=9880 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:03.192259 vminfo Session 1: PID=9944 (fInt=true ): C:\Windows\System32\dllhost.exe 09:31:03.192259 vminfo Session 1: PID=8128 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17112.19011.0_x64__8wekyb3d8bbwe\Video.UI.exe 09:31:03.192259 vminfo Session 1: PID=9528 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:03.192259 vminfo Session 1: PID=10292 (fInt=true ): C:\Program Files\Windows Defender\MSASCuiL.exe 09:31:03.192259 vminfo Session 1: PID=10324 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:03.192259 vminfo Session 1: PID=10440 (fInt=true ): C:\Windows\System32\VBoxTray.exe 09:31:03.192259 vminfo Session 1: PID=10596 (fInt=true ): C:\Users\user\Documents\Visual Studio 2017\Projects\vboxtray_mon\vboxtray_mon\bin\Release\vboxtray_mon.exe 09:31:03.192259 vminfo Session 1: PID=10612 (fInt=true ): C:\Windows\System32\conhost.exe 09:31:03.192259 vminfo Session 1: PID=10720 (fInt=true ): C:\Program Files (x86)\FileZilla Server\FileZilla Server Interface.exe 09:31:03.192259 vminfo Session 1: PID=9808 (fInt=true ): C:\Windows\System32\svchost.exe 09:31:03.192259 vminfo Session 1: PID=6716 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18011.15918.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe 09:31:03.192259 vminfo Session 1: PID=6688 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:03.192259 vminfo Session 1: PID=10200 (fInt=true ): C:\Windows\System32\ApplicationFrameHost.exe 09:31:03.192259 vminfo Session 1: PID=4868 (fInt=true ): C:\Windows\ImmersiveControlPanel\SystemSettings.exe 09:31:03.192259 vminfo Session 1: PID=1444 (fInt=true ): C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe 09:31:03.192259 vminfo Session 1: PID=9504 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:03.192259 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/Session/1' = '#12145: cSessionProcs=31 (of 155 procs total)' 09:31:03.192259 vminfo Adding new user=user (session=1) with 31 processes 09:31:03.192259 vminfo Handling session 6 (of 17) 09:31:03.192259 vminfo Session data: Name=user, SessionID=1, LogonID=0,1970599, LogonType=2 09:31:03.192259 vminfo Session LogonType=2 is supported -- looking up SID + type ... 09:31:03.192259 vminfo Account User=user, Session=1, LogonID=0,1970599, AuthPkg=Kerberos, Domain=DOMAIN 09:31:03.192259 vminfo Account User=user, WTSConnectState=0 (4) 09:31:03.192259 vminfo Account User=user using TCS/RDP, state=0 09:31:03.192259 vminfo Account User=user is logged in 09:31:03.192259 vminfo Handling user=user, domain=DOMAIN, package=Kerberos, session=1 09:31:03.192259 vminfo Session 1: PID=6784 (fInt=true ): C:\Windows\System32\svchost.exe 09:31:03.192259 vminfo Session 1: PID=264 (fInt=true ): C:\Windows\System32\sihost.exe 09:31:03.192259 vminfo Session 1: PID=3148 (fInt=true ): C:\Windows\System32\svchost.exe 09:31:03.192259 vminfo Session 1: PID=7176 (fInt=true ): C:\Windows\System32\taskhostw.exe 09:31:03.192259 vminfo Session 1: PID=7268 (fInt=true ): C:\Windows\System32\ctfmon.exe 09:31:03.192259 vminfo Session 1: PID=8732 (fInt=true ): C:\Windows\explorer.exe 09:31:03.192259 vminfo Session 1: PID=9016 (fInt=true ): C:\Program Files (x86)\NoMachine\bin\nxclient.bin 09:31:03.192259 vminfo Session 1: PID=8260 (fInt=true ): C:\Program Files\McAfee\Agent\x86\UpdaterUI.exe 09:31:03.192259 vminfo Session 1: PID=8828 (fInt=true ): C:\Program Files\Classic Shell\ClassicStartMenu.exe 09:31:03.192259 vminfo Session 1: PID=8488 (fInt=true ): C:\Program Files\McAfee\Agent\x86\mctray.exe 09:31:03.192259 vminfo Session 1: PID=9172 (fInt=true ): C:\Program Files\TortoiseSVN\bin\TSVNCache.exe 09:31:03.192259 vminfo Session 1: PID=9280 (fInt=true ): C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe 09:31:03.192259 vminfo Session 1: PID=9652 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:03.192259 vminfo Session 1: PID=9728 (fInt=true ): C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe 09:31:03.192259 vminfo Session 1: PID=9880 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:03.192259 vminfo Session 1: PID=9944 (fInt=true ): C:\Windows\System32\dllhost.exe 09:31:03.192259 vminfo Session 1: PID=8128 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17112.19011.0_x64__8wekyb3d8bbwe\Video.UI.exe 09:31:03.192259 vminfo Session 1: PID=9528 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:03.192259 vminfo Session 1: PID=10292 (fInt=true ): C:\Program Files\Windows Defender\MSASCuiL.exe 09:31:03.192259 vminfo Session 1: PID=10324 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:03.192259 vminfo Session 1: PID=10440 (fInt=true ): C:\Windows\System32\VBoxTray.exe 09:31:03.192259 vminfo Session 1: PID=10596 (fInt=true ): C:\Users\user\Documents\Visual Studio 2017\Projects\vboxtray_mon\vboxtray_mon\bin\Release\vboxtray_mon.exe 09:31:03.207958 vminfo Session 1: PID=10612 (fInt=true ): C:\Windows\System32\conhost.exe 09:31:03.207958 vminfo Session 1: PID=10720 (fInt=true ): C:\Program Files (x86)\FileZilla Server\FileZilla Server Interface.exe 09:31:03.207958 vminfo Session 1: PID=9808 (fInt=true ): C:\Windows\System32\svchost.exe 09:31:03.207958 vminfo Session 1: PID=6716 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18011.15918.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe 09:31:03.207958 vminfo Session 1: PID=6688 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:03.207958 vminfo Session 1: PID=10200 (fInt=true ): C:\Windows\System32\ApplicationFrameHost.exe 09:31:03.207958 vminfo Session 1: PID=4868 (fInt=true ): C:\Windows\ImmersiveControlPanel\SystemSettings.exe 09:31:03.207958 vminfo Session 1: PID=1444 (fInt=true ): C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe 09:31:03.207958 vminfo Session 1: PID=9504 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:03.207958 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/Session/1' = '#12145: cSessionProcs=31 (of 155 procs total)' 09:31:03.207958 vminfo Adding new user=user (session=1) with 31 processes 09:31:03.207958 vminfo Handling session 7 (of 17) 09:31:03.207958 vminfo Session data: Name=nx, SessionID=0, LogonID=0,685607, LogonType=3 09:31:03.207958 vminfo Handling session 8 (of 17) 09:31:03.207958 vminfo Session data: Name=ANONYMOUS LOGON, SessionID=0, LogonID=0,649881, LogonType=3 09:31:03.207958 vminfo Handling session 9 (of 17) 09:31:03.207958 vminfo Session data: Name=IUSR, SessionID=0, LogonID=0,995, LogonType=5 09:31:03.207958 vminfo Handling session 10 (of 17) 09:31:03.207958 vminfo Session data: Name=DWM-1, SessionID=1, LogonID=0,61006, LogonType=2 09:31:03.207958 vminfo Session LogonType=2 is supported -- looking up SID + type ... 09:31:03.207958 vminfo SID owner type=5 not handled, skipping 09:31:03.207958 vminfo Account User=DWM-1 is not logged in 09:31:03.207958 vminfo Handling session 11 (of 17) 09:31:03.207958 vminfo Session data: Name=DWM-1, SessionID=1, LogonID=0,60973, LogonType=2 09:31:03.207958 vminfo Session LogonType=2 is supported -- looking up SID + type ... 09:31:03.207958 vminfo SID owner type=5 not handled, skipping 09:31:03.207958 vminfo Account User=DWM-1 is not logged in 09:31:03.207958 vminfo Handling session 12 (of 17) 09:31:03.207958 vminfo Session data: Name=MACHINE$, SessionID=0, LogonID=0,996, LogonType=5 09:31:03.207958 vminfo Handling session 13 (of 17) 09:31:03.207958 vminfo Session data: Name=LOCAL SERVICE, SessionID=0, LogonID=0,997, LogonType=5 09:31:03.207958 vminfo Handling session 14 (of 17) 09:31:03.207958 vminfo Session data: Name=UMFD-1, SessionID=1, LogonID=0,34521, LogonType=2 09:31:03.207958 vminfo Session LogonType=2 is supported -- looking up SID + type ... 09:31:03.207958 vminfo SID owner type=5 not handled, skipping 09:31:03.207958 vminfo Account User=UMFD-1 is not logged in 09:31:03.207958 vminfo Handling session 15 (of 17) 09:31:03.207958 vminfo Session data: Name=UMFD-0, SessionID=0, LogonID=0,34482, LogonType=2 09:31:03.207958 vminfo Handling session 16 (of 17) 09:31:03.207958 vminfo Session data: Name=, SessionID=0, LogonID=0,32336, LogonType=0 09:31:03.207958 vminfo Handling session 17 (of 17) 09:31:03.207958 vminfo Session data: Name=MACHINE$, SessionID=0, LogonID=0,999, LogonType=0 09:31:03.207958 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA' = '#12145: cSessions=17, cProcs=155, cUniqueUsers=2' 09:31:03.207958 vminfo Found 2 unique logged-in user(s) 09:31:03.207958 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/User/0' = '#12145: szName=user, sessionID=1, cProcs=31' 09:31:03.207958 vminfo User 'user' has 31 interactive processes (session=1) 09:31:03.207958 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/User/user@DOMAIN/UsageState' resulted in rc=VINF_NO_CHANGE 09:31:03.207958 vminfo User 'user' (domain 'DOMAIN') is idle for 60437, fReportToHost=false 09:31:03.207958 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/User/1' = '#12145: szName=user, sessionID=1, cProcs=31' 09:31:03.207958 vminfo User 'user' has 31 interactive processes (session=1) 09:31:03.207958 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/User/user@DOMAIN/UsageState' resulted in rc=VINF_NO_CHANGE 09:31:03.207958 vminfo User 'user' (domain 'DOMAIN') is idle for 60437, fReportToHost=false 09:31:03.207958 vminfo cUsersInList=2, pszUserList=user,user, rc=VINF_NO_CHANGE 09:31:03.207958 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/LoggedInUsersList' resulted in rc=VINF_NO_CHANGE 09:31:03.207958 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/LoggedInUsers' resulted in rc=VINF_NO_CHANGE 09:31:03.207958 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/NoLoggedInUsers' resulted in rc=VINF_NO_CHANGE 09:31:03.207958 vminfo Writing users returned with rc=VINF_NO_CHANGE 09:31:03.207958 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/IP' resulted in rc=VINF_NO_CHANGE 09:31:03.207958 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/Broadcast' resulted in rc=VINF_NO_CHANGE 09:31:03.207958 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/Netmask' resulted in rc=VINF_NO_CHANGE 09:31:03.207958 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/Status' resulted in rc=VINF_NO_CHANGE 09:31:03.207958 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/MAC' resulted in rc=VINF_NO_CHANGE 09:31:03.207958 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/IP' resulted in rc=VINF_NO_CHANGE 09:31:03.207958 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/Broadcast' resulted in rc=VINF_NO_CHANGE 09:31:03.207958 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/Netmask' resulted in rc=VINF_NO_CHANGE 09:31:03.207958 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/Status' resulted in rc=VINF_NO_CHANGE 09:31:03.207958 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/MAC' resulted in rc=VINF_NO_CHANGE 09:31:03.207958 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/IP' resulted in rc=VINF_NO_CHANGE 09:31:03.207958 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/Broadcast' resulted in rc=VINF_NO_CHANGE 09:31:03.207958 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/Netmask' resulted in rc=VINF_NO_CHANGE 09:31:03.207958 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/Status' resulted in rc=VINF_NO_CHANGE 09:31:03.207958 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/MAC' resulted in rc=VINF_NO_CHANGE 09:31:03.223557 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/IP' resulted in rc=VINF_NO_CHANGE 09:31:03.223557 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/Broadcast' resulted in rc=VINF_NO_CHANGE 09:31:03.223557 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/Netmask' resulted in rc=VINF_NO_CHANGE 09:31:03.223557 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/Status' resulted in rc=VINF_NO_CHANGE 09:31:03.223557 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/MAC' resulted in rc=VINF_NO_CHANGE 09:31:03.223557 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/IP' resulted in rc=VINF_NO_CHANGE 09:31:03.223557 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/Broadcast' resulted in rc=VINF_NO_CHANGE 09:31:03.223557 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/Netmask' resulted in rc=VINF_NO_CHANGE 09:31:03.223557 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/Status' resulted in rc=VINF_NO_CHANGE 09:31:03.223557 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/MAC' resulted in rc=VINF_NO_CHANGE 09:31:03.223557 vminfo [PropCache 00007ff6b2962520]: Written '/VirtualBox/GuestInfo/Net/Count'='5' (flags: 6), rc=VINF_SUCCESS 09:31:03.223557 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/Count' resulted in rc=VINF_SUCCESS 09:31:03.223557 vminfo Guest Property: /VirtualBox/HostInfo/VRDP/ActiveClient not found 09:31:03.223557 vminfo VRDP: Handling location awareness done 09:31:06.093564 timesync vgsvcTimeSyncWorker: Host: 2019-02-26T09:31:05.969000000Z (MinAdjust: 200 ms), Guest: 2019-02-26T09:31:06.093564300Z => -124 564 300 ns drift 09:31:08.225177 vminfo Found 17 sessions 09:31:08.225177 vminfo Error: Get token class 'user' for process 0 failed, rc=VERR_INVALID_PARAMETER 09:31:08.225177 vminfo Error: Get token class 'groups' for process 0 failed, rc=VERR_INVALID_PARAMETER 09:31:08.225177 vminfo Error: Get token class 'statistics' for process 0 failed, rc=VERR_INVALID_PARAMETER 09:31:08.225177 vminfo Error: Get token class 'user' for process 4 failed, rc=VERR_ACCESS_DENIED 09:31:08.225177 vminfo Error: Get token class 'groups' for process 4 failed, rc=VERR_ACCESS_DENIED 09:31:08.225177 vminfo Error: Get token class 'statistics' for process 4 failed, rc=VERR_ACCESS_DENIED 09:31:08.225177 vminfo Error: Get token class 'user' for process 104 failed, rc=VERR_ACCESS_DENIED 09:31:08.225177 vminfo Error: Get token class 'groups' for process 104 failed, rc=VERR_ACCESS_DENIED 09:31:08.225177 vminfo Error: Get token class 'statistics' for process 104 failed, rc=VERR_ACCESS_DENIED 09:31:08.225177 vminfo Error: Get token class 'user' for process 472 failed, rc=VERR_ACCESS_DENIED 09:31:08.225177 vminfo Error: Get token class 'groups' for process 472 failed, rc=VERR_ACCESS_DENIED 09:31:08.225177 vminfo Error: Get token class 'statistics' for process 472 failed, rc=VERR_ACCESS_DENIED 09:31:08.225177 vminfo Error: Get token class 'user' for process 676 failed, rc=VERR_ACCESS_DENIED 09:31:08.225177 vminfo Error: Get token class 'groups' for process 676 failed, rc=VERR_ACCESS_DENIED 09:31:08.225177 vminfo Error: Get token class 'statistics' for process 676 failed, rc=VERR_ACCESS_DENIED 09:31:08.225177 vminfo Error: Get token class 'user' for process 756 failed, rc=VERR_ACCESS_DENIED 09:31:08.225177 vminfo Error: Get token class 'groups' for process 756 failed, rc=VERR_ACCESS_DENIED 09:31:08.225177 vminfo Error: Get token class 'statistics' for process 756 failed, rc=VERR_ACCESS_DENIED 09:31:08.225177 vminfo Error: Get token class 'user' for process 768 failed, rc=VERR_ACCESS_DENIED 09:31:08.225177 vminfo Error: Get token class 'groups' for process 768 failed, rc=VERR_ACCESS_DENIED 09:31:08.225177 vminfo Error: Get token class 'statistics' for process 768 failed, rc=VERR_ACCESS_DENIED 09:31:08.225177 vminfo Error: Get token class 'user' for process 876 failed, rc=VERR_ACCESS_DENIED 09:31:08.225177 vminfo Error: Get token class 'groups' for process 876 failed, rc=VERR_ACCESS_DENIED 09:31:08.225177 vminfo Error: Get token class 'statistics' for process 876 failed, rc=VERR_ACCESS_DENIED 09:31:08.225177 vminfo Error: Get token class 'user' for process 2532 failed, rc=VERR_ACCESS_DENIED 09:31:08.225177 vminfo Error: Get token class 'groups' for process 2532 failed, rc=VERR_ACCESS_DENIED 09:31:08.225177 vminfo Error: Get token class 'statistics' for process 2532 failed, rc=VERR_ACCESS_DENIED 09:31:08.225177 vminfo Error: Get token class 'user' for process 4136 failed, rc=VERR_ACCESS_DENIED 09:31:08.225177 vminfo Error: Get token class 'groups' for process 4136 failed, rc=VERR_ACCESS_DENIED 09:31:08.225177 vminfo Error: Get token class 'statistics' for process 4136 failed, rc=VERR_ACCESS_DENIED 09:31:08.225177 vminfo Error: Get token class 'user' for process 5212 failed, rc=VERR_ACCESS_DENIED 09:31:08.225177 vminfo Error: Get token class 'groups' for process 5212 failed, rc=VERR_ACCESS_DENIED 09:31:08.225177 vminfo Error: Get token class 'statistics' for process 5212 failed, rc=VERR_ACCESS_DENIED 09:31:08.225177 vminfo Handling session 1 (of 17) 09:31:08.225177 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2145999, LogonType=3 09:31:08.225177 vminfo Handling session 2 (of 17) 09:31:08.225177 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2113823, LogonType=3 09:31:08.225177 vminfo Handling session 3 (of 17) 09:31:08.225177 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2041868, LogonType=3 09:31:08.225177 vminfo Handling session 4 (of 17) 09:31:08.239755 vminfo Session data: Name=nx, SessionID=0, LogonID=0,1997776, LogonType=3 09:31:08.239755 vminfo Handling session 5 (of 17) 09:31:08.239755 vminfo Session data: Name=user, SessionID=1, LogonID=0,1970648, LogonType=2 09:31:08.239755 vminfo Session LogonType=2 is supported -- looking up SID + type ... 09:31:08.239755 vminfo Account User=user, Session=1, LogonID=0,1970648, AuthPkg=Negotiate, Domain=DOMAIN 09:31:08.239755 vminfo Account User=user, WTSConnectState=0 (4) 09:31:08.239755 vminfo Account User=user using TCS/RDP, state=0 09:31:08.239755 vminfo Account User=user is logged in 09:31:08.239755 vminfo Handling user=user, domain=DOMAIN, package=Negotiate, session=1 09:31:08.239755 vminfo Session 1: PID=6784 (fInt=true ): C:\Windows\System32\svchost.exe 09:31:08.239755 vminfo Session 1: PID=264 (fInt=true ): C:\Windows\System32\sihost.exe 09:31:08.239755 vminfo Session 1: PID=3148 (fInt=true ): C:\Windows\System32\svchost.exe 09:31:08.239755 vminfo Session 1: PID=7176 (fInt=true ): C:\Windows\System32\taskhostw.exe 09:31:08.239755 vminfo Session 1: PID=7268 (fInt=true ): C:\Windows\System32\ctfmon.exe 09:31:08.239755 vminfo Session 1: PID=8732 (fInt=true ): C:\Windows\explorer.exe 09:31:08.239755 vminfo Session 1: PID=9016 (fInt=true ): C:\Program Files (x86)\NoMachine\bin\nxclient.bin 09:31:08.239755 vminfo Session 1: PID=8260 (fInt=true ): C:\Program Files\McAfee\Agent\x86\UpdaterUI.exe 09:31:08.239755 vminfo Session 1: PID=8828 (fInt=true ): C:\Program Files\Classic Shell\ClassicStartMenu.exe 09:31:08.239755 vminfo Session 1: PID=8488 (fInt=true ): C:\Program Files\McAfee\Agent\x86\mctray.exe 09:31:08.239755 vminfo Session 1: PID=9172 (fInt=true ): C:\Program Files\TortoiseSVN\bin\TSVNCache.exe 09:31:08.239755 vminfo Session 1: PID=9280 (fInt=true ): C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe 09:31:08.239755 vminfo Session 1: PID=9652 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:08.239755 vminfo Session 1: PID=9728 (fInt=true ): C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe 09:31:08.239755 vminfo Session 1: PID=9880 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:08.239755 vminfo Session 1: PID=9944 (fInt=true ): C:\Windows\System32\dllhost.exe 09:31:08.239755 vminfo Session 1: PID=8128 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17112.19011.0_x64__8wekyb3d8bbwe\Video.UI.exe 09:31:08.239755 vminfo Session 1: PID=9528 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:08.239755 vminfo Session 1: PID=10292 (fInt=true ): C:\Program Files\Windows Defender\MSASCuiL.exe 09:31:08.239755 vminfo Session 1: PID=10324 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:08.239755 vminfo Session 1: PID=10440 (fInt=true ): C:\Windows\System32\VBoxTray.exe 09:31:08.239755 vminfo Session 1: PID=10596 (fInt=true ): C:\Users\user\Documents\Visual Studio 2017\Projects\vboxtray_mon\vboxtray_mon\bin\Release\vboxtray_mon.exe 09:31:08.239755 vminfo Session 1: PID=10612 (fInt=true ): C:\Windows\System32\conhost.exe 09:31:08.239755 vminfo Session 1: PID=10720 (fInt=true ): C:\Program Files (x86)\FileZilla Server\FileZilla Server Interface.exe 09:31:08.239755 vminfo Session 1: PID=9808 (fInt=true ): C:\Windows\System32\svchost.exe 09:31:08.239755 vminfo Session 1: PID=6716 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18011.15918.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe 09:31:08.239755 vminfo Session 1: PID=6688 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:08.239755 vminfo Session 1: PID=10200 (fInt=true ): C:\Windows\System32\ApplicationFrameHost.exe 09:31:08.239755 vminfo Session 1: PID=4868 (fInt=true ): C:\Windows\ImmersiveControlPanel\SystemSettings.exe 09:31:08.239755 vminfo Session 1: PID=1444 (fInt=true ): C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe 09:31:08.239755 vminfo Session 1: PID=9504 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:08.239755 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/Session/1' = '#12146: cSessionProcs=31 (of 155 procs total)' 09:31:08.239755 vminfo Adding new user=user (session=1) with 31 processes 09:31:08.239755 vminfo Handling session 6 (of 17) 09:31:08.239755 vminfo Session data: Name=user, SessionID=1, LogonID=0,1970599, LogonType=2 09:31:08.239755 vminfo Session LogonType=2 is supported -- looking up SID + type ... 09:31:08.239755 vminfo Account User=user, Session=1, LogonID=0,1970599, AuthPkg=Kerberos, Domain=DOMAIN 09:31:08.239755 vminfo Account User=user, WTSConnectState=0 (4) 09:31:08.239755 vminfo Account User=user using TCS/RDP, state=0 09:31:08.239755 vminfo Account User=user is logged in 09:31:08.239755 vminfo Handling user=user, domain=DOMAIN, package=Kerberos, session=1 09:31:08.239755 vminfo Session 1: PID=6784 (fInt=true ): C:\Windows\System32\svchost.exe 09:31:08.239755 vminfo Session 1: PID=264 (fInt=true ): C:\Windows\System32\sihost.exe 09:31:08.239755 vminfo Session 1: PID=3148 (fInt=true ): C:\Windows\System32\svchost.exe 09:31:08.239755 vminfo Session 1: PID=7176 (fInt=true ): C:\Windows\System32\taskhostw.exe 09:31:08.239755 vminfo Session 1: PID=7268 (fInt=true ): C:\Windows\System32\ctfmon.exe 09:31:08.239755 vminfo Session 1: PID=8732 (fInt=true ): C:\Windows\explorer.exe 09:31:08.239755 vminfo Session 1: PID=9016 (fInt=true ): C:\Program Files (x86)\NoMachine\bin\nxclient.bin 09:31:08.239755 vminfo Session 1: PID=8260 (fInt=true ): C:\Program Files\McAfee\Agent\x86\UpdaterUI.exe 09:31:08.239755 vminfo Session 1: PID=8828 (fInt=true ): C:\Program Files\Classic Shell\ClassicStartMenu.exe 09:31:08.239755 vminfo Session 1: PID=8488 (fInt=true ): C:\Program Files\McAfee\Agent\x86\mctray.exe 09:31:08.239755 vminfo Session 1: PID=9172 (fInt=true ): C:\Program Files\TortoiseSVN\bin\TSVNCache.exe 09:31:08.239755 vminfo Session 1: PID=9280 (fInt=true ): C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe 09:31:08.239755 vminfo Session 1: PID=9652 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:08.239755 vminfo Session 1: PID=9728 (fInt=true ): C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe 09:31:08.239755 vminfo Session 1: PID=9880 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:08.255532 vminfo Session 1: PID=9944 (fInt=true ): C:\Windows\System32\dllhost.exe 09:31:08.255532 vminfo Session 1: PID=8128 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17112.19011.0_x64__8wekyb3d8bbwe\Video.UI.exe 09:31:08.255532 vminfo Session 1: PID=9528 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:08.255532 vminfo Session 1: PID=10292 (fInt=true ): C:\Program Files\Windows Defender\MSASCuiL.exe 09:31:08.255532 vminfo Session 1: PID=10324 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:08.255532 vminfo Session 1: PID=10440 (fInt=true ): C:\Windows\System32\VBoxTray.exe 09:31:08.255532 vminfo Session 1: PID=10596 (fInt=true ): C:\Users\user\Documents\Visual Studio 2017\Projects\vboxtray_mon\vboxtray_mon\bin\Release\vboxtray_mon.exe 09:31:08.255532 vminfo Session 1: PID=10612 (fInt=true ): C:\Windows\System32\conhost.exe 09:31:08.255532 vminfo Session 1: PID=10720 (fInt=true ): C:\Program Files (x86)\FileZilla Server\FileZilla Server Interface.exe 09:31:08.255532 vminfo Session 1: PID=9808 (fInt=true ): C:\Windows\System32\svchost.exe 09:31:08.255532 vminfo Session 1: PID=6716 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18011.15918.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe 09:31:08.255532 vminfo Session 1: PID=6688 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:08.255532 vminfo Session 1: PID=10200 (fInt=true ): C:\Windows\System32\ApplicationFrameHost.exe 09:31:08.255532 vminfo Session 1: PID=4868 (fInt=true ): C:\Windows\ImmersiveControlPanel\SystemSettings.exe 09:31:08.255532 vminfo Session 1: PID=1444 (fInt=true ): C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe 09:31:08.255532 vminfo Session 1: PID=9504 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:08.255532 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/Session/1' = '#12146: cSessionProcs=31 (of 155 procs total)' 09:31:08.255532 vminfo Adding new user=user (session=1) with 31 processes 09:31:08.255532 vminfo Handling session 7 (of 17) 09:31:08.255532 vminfo Session data: Name=nx, SessionID=0, LogonID=0,685607, LogonType=3 09:31:08.255532 vminfo Handling session 8 (of 17) 09:31:08.255532 vminfo Session data: Name=ANONYMOUS LOGON, SessionID=0, LogonID=0,649881, LogonType=3 09:31:08.255532 vminfo Handling session 9 (of 17) 09:31:08.255532 vminfo Session data: Name=IUSR, SessionID=0, LogonID=0,995, LogonType=5 09:31:08.255532 vminfo Handling session 10 (of 17) 09:31:08.255532 vminfo Session data: Name=DWM-1, SessionID=1, LogonID=0,61006, LogonType=2 09:31:08.255532 vminfo Session LogonType=2 is supported -- looking up SID + type ... 09:31:08.255532 vminfo SID owner type=5 not handled, skipping 09:31:08.255532 vminfo Account User=DWM-1 is not logged in 09:31:08.255532 vminfo Handling session 11 (of 17) 09:31:08.255532 vminfo Session data: Name=DWM-1, SessionID=1, LogonID=0,60973, LogonType=2 09:31:08.255532 vminfo Session LogonType=2 is supported -- looking up SID + type ... 09:31:08.255532 vminfo SID owner type=5 not handled, skipping 09:31:08.255532 vminfo Account User=DWM-1 is not logged in 09:31:08.255532 vminfo Handling session 12 (of 17) 09:31:08.255532 vminfo Session data: Name=MACHINE$, SessionID=0, LogonID=0,996, LogonType=5 09:31:08.255532 vminfo Handling session 13 (of 17) 09:31:08.255532 vminfo Session data: Name=LOCAL SERVICE, SessionID=0, LogonID=0,997, LogonType=5 09:31:08.255532 vminfo Handling session 14 (of 17) 09:31:08.255532 vminfo Session data: Name=UMFD-1, SessionID=1, LogonID=0,34521, LogonType=2 09:31:08.255532 vminfo Session LogonType=2 is supported -- looking up SID + type ... 09:31:08.255532 vminfo SID owner type=5 not handled, skipping 09:31:08.255532 vminfo Account User=UMFD-1 is not logged in 09:31:08.255532 vminfo Handling session 15 (of 17) 09:31:08.255532 vminfo Session data: Name=UMFD-0, SessionID=0, LogonID=0,34482, LogonType=2 09:31:08.255532 vminfo Handling session 16 (of 17) 09:31:08.255532 vminfo Session data: Name=, SessionID=0, LogonID=0,32336, LogonType=0 09:31:08.255532 vminfo Handling session 17 (of 17) 09:31:08.255532 vminfo Session data: Name=MACHINE$, SessionID=0, LogonID=0,999, LogonType=0 09:31:08.255532 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA' = '#12146: cSessions=17, cProcs=155, cUniqueUsers=2' 09:31:08.255532 vminfo Found 2 unique logged-in user(s) 09:31:08.255532 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/User/0' = '#12146: szName=user, sessionID=1, cProcs=31' 09:31:08.255532 vminfo User 'user' has 31 interactive processes (session=1) 09:31:08.255532 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/User/user@DOMAIN/UsageState' resulted in rc=VINF_NO_CHANGE 09:31:08.255532 vminfo User 'user' (domain 'DOMAIN') is idle for 60443, fReportToHost=false 09:31:08.255532 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/User/1' = '#12146: szName=user, sessionID=1, cProcs=31' 09:31:08.255532 vminfo User 'user' has 31 interactive processes (session=1) 09:31:08.255532 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/User/user@DOMAIN/UsageState' resulted in rc=VINF_NO_CHANGE 09:31:08.255532 vminfo User 'user' (domain 'DOMAIN') is idle for 60443, fReportToHost=false 09:31:08.255532 vminfo cUsersInList=2, pszUserList=user,user, rc=VINF_NO_CHANGE 09:31:08.255532 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/LoggedInUsersList' resulted in rc=VINF_NO_CHANGE 09:31:08.255532 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/LoggedInUsers' resulted in rc=VINF_NO_CHANGE 09:31:08.255532 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/NoLoggedInUsers' resulted in rc=VINF_NO_CHANGE 09:31:08.255532 vminfo Writing users returned with rc=VINF_NO_CHANGE 09:31:08.271481 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/IP' resulted in rc=VINF_NO_CHANGE 09:31:08.271481 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/Broadcast' resulted in rc=VINF_NO_CHANGE 09:31:08.271481 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/Netmask' resulted in rc=VINF_NO_CHANGE 09:31:08.271481 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/Status' resulted in rc=VINF_NO_CHANGE 09:31:08.271481 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/MAC' resulted in rc=VINF_NO_CHANGE 09:31:08.271481 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/IP' resulted in rc=VINF_NO_CHANGE 09:31:08.271481 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/Broadcast' resulted in rc=VINF_NO_CHANGE 09:31:08.271481 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/Netmask' resulted in rc=VINF_NO_CHANGE 09:31:08.271481 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/Status' resulted in rc=VINF_NO_CHANGE 09:31:08.271481 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/MAC' resulted in rc=VINF_NO_CHANGE 09:31:08.271481 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/IP' resulted in rc=VINF_NO_CHANGE 09:31:08.271481 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/Broadcast' resulted in rc=VINF_NO_CHANGE 09:31:08.271481 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/Netmask' resulted in rc=VINF_NO_CHANGE 09:31:08.271481 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/Status' resulted in rc=VINF_NO_CHANGE 09:31:08.271481 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/MAC' resulted in rc=VINF_NO_CHANGE 09:31:08.271481 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/IP' resulted in rc=VINF_NO_CHANGE 09:31:08.271481 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/Broadcast' resulted in rc=VINF_NO_CHANGE 09:31:08.271481 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/Netmask' resulted in rc=VINF_NO_CHANGE 09:31:08.271481 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/Status' resulted in rc=VINF_NO_CHANGE 09:31:08.271481 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/MAC' resulted in rc=VINF_NO_CHANGE 09:31:08.271481 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/IP' resulted in rc=VINF_NO_CHANGE 09:31:08.271481 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/Broadcast' resulted in rc=VINF_NO_CHANGE 09:31:08.271481 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/Netmask' resulted in rc=VINF_NO_CHANGE 09:31:08.271481 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/Status' resulted in rc=VINF_NO_CHANGE 09:31:08.271481 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/MAC' resulted in rc=VINF_NO_CHANGE 09:31:08.271481 vminfo [PropCache 00007ff6b2962520]: Written '/VirtualBox/GuestInfo/Net/Count'='5' (flags: 6), rc=VINF_SUCCESS 09:31:08.271481 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/Count' resulted in rc=VINF_SUCCESS 09:31:08.271481 vminfo Guest Property: /VirtualBox/HostInfo/VRDP/ActiveClient not found 09:31:08.271481 vminfo VRDP: Handling location awareness done 09:31:13.290059 vminfo Found 17 sessions 09:31:13.290059 vminfo Error: Get token class 'user' for process 0 failed, rc=VERR_INVALID_PARAMETER 09:31:13.290059 vminfo Error: Get token class 'groups' for process 0 failed, rc=VERR_INVALID_PARAMETER 09:31:13.290059 vminfo Error: Get token class 'statistics' for process 0 failed, rc=VERR_INVALID_PARAMETER 09:31:13.290059 vminfo Error: Get token class 'user' for process 4 failed, rc=VERR_ACCESS_DENIED 09:31:13.290059 vminfo Error: Get token class 'groups' for process 4 failed, rc=VERR_ACCESS_DENIED 09:31:13.290059 vminfo Error: Get token class 'statistics' for process 4 failed, rc=VERR_ACCESS_DENIED 09:31:13.290059 vminfo Error: Get token class 'user' for process 104 failed, rc=VERR_ACCESS_DENIED 09:31:13.290059 vminfo Error: Get token class 'groups' for process 104 failed, rc=VERR_ACCESS_DENIED 09:31:13.290059 vminfo Error: Get token class 'statistics' for process 104 failed, rc=VERR_ACCESS_DENIED 09:31:13.290059 vminfo Error: Get token class 'user' for process 472 failed, rc=VERR_ACCESS_DENIED 09:31:13.290059 vminfo Error: Get token class 'groups' for process 472 failed, rc=VERR_ACCESS_DENIED 09:31:13.290059 vminfo Error: Get token class 'statistics' for process 472 failed, rc=VERR_ACCESS_DENIED 09:31:13.290059 vminfo Error: Get token class 'user' for process 676 failed, rc=VERR_ACCESS_DENIED 09:31:13.290059 vminfo Error: Get token class 'groups' for process 676 failed, rc=VERR_ACCESS_DENIED 09:31:13.290059 vminfo Error: Get token class 'statistics' for process 676 failed, rc=VERR_ACCESS_DENIED 09:31:13.290059 vminfo Error: Get token class 'user' for process 756 failed, rc=VERR_ACCESS_DENIED 09:31:13.290059 vminfo Error: Get token class 'groups' for process 756 failed, rc=VERR_ACCESS_DENIED 09:31:13.290059 vminfo Error: Get token class 'statistics' for process 756 failed, rc=VERR_ACCESS_DENIED 09:31:13.290059 vminfo Error: Get token class 'user' for process 768 failed, rc=VERR_ACCESS_DENIED 09:31:13.290059 vminfo Error: Get token class 'groups' for process 768 failed, rc=VERR_ACCESS_DENIED 09:31:13.290059 vminfo Error: Get token class 'statistics' for process 768 failed, rc=VERR_ACCESS_DENIED 09:31:13.290059 vminfo Error: Get token class 'user' for process 876 failed, rc=VERR_ACCESS_DENIED 09:31:13.290059 vminfo Error: Get token class 'groups' for process 876 failed, rc=VERR_ACCESS_DENIED 09:31:13.290059 vminfo Error: Get token class 'statistics' for process 876 failed, rc=VERR_ACCESS_DENIED 09:31:13.290059 vminfo Error: Get token class 'user' for process 2532 failed, rc=VERR_ACCESS_DENIED 09:31:13.290059 vminfo Error: Get token class 'groups' for process 2532 failed, rc=VERR_ACCESS_DENIED 09:31:13.290059 vminfo Error: Get token class 'statistics' for process 2532 failed, rc=VERR_ACCESS_DENIED 09:31:13.290059 vminfo Error: Get token class 'user' for process 4136 failed, rc=VERR_ACCESS_DENIED 09:31:13.290059 vminfo Error: Get token class 'groups' for process 4136 failed, rc=VERR_ACCESS_DENIED 09:31:13.290059 vminfo Error: Get token class 'statistics' for process 4136 failed, rc=VERR_ACCESS_DENIED 09:31:13.290059 vminfo Error: Get token class 'user' for process 5212 failed, rc=VERR_ACCESS_DENIED 09:31:13.290059 vminfo Error: Get token class 'groups' for process 5212 failed, rc=VERR_ACCESS_DENIED 09:31:13.290059 vminfo Error: Get token class 'statistics' for process 5212 failed, rc=VERR_ACCESS_DENIED 09:31:13.290059 vminfo Handling session 1 (of 17) 09:31:13.290059 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2145999, LogonType=3 09:31:13.305334 vminfo Handling session 2 (of 17) 09:31:13.305334 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2113823, LogonType=3 09:31:13.305334 vminfo Handling session 3 (of 17) 09:31:13.305334 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2041868, LogonType=3 09:31:13.305334 vminfo Handling session 4 (of 17) 09:31:13.305334 vminfo Session data: Name=nx, SessionID=0, LogonID=0,1997776, LogonType=3 09:31:13.305334 vminfo Handling session 5 (of 17) 09:31:13.305334 vminfo Session data: Name=user, SessionID=1, LogonID=0,1970648, LogonType=2 09:31:13.305334 vminfo Session LogonType=2 is supported -- looking up SID + type ... 09:31:13.305334 vminfo Account User=user, Session=1, LogonID=0,1970648, AuthPkg=Negotiate, Domain=DOMAIN 09:31:13.305334 vminfo Account User=user, WTSConnectState=0 (4) 09:31:13.305334 vminfo Account User=user using TCS/RDP, state=0 09:31:13.305334 vminfo Account User=user is logged in 09:31:13.305334 vminfo Handling user=user, domain=DOMAIN, package=Negotiate, session=1 09:31:13.305334 vminfo Session 1: PID=6784 (fInt=true ): C:\Windows\System32\svchost.exe 09:31:13.305334 vminfo Session 1: PID=264 (fInt=true ): C:\Windows\System32\sihost.exe 09:31:13.305334 vminfo Session 1: PID=3148 (fInt=true ): C:\Windows\System32\svchost.exe 09:31:13.305334 vminfo Session 1: PID=7176 (fInt=true ): C:\Windows\System32\taskhostw.exe 09:31:13.305334 vminfo Session 1: PID=7268 (fInt=true ): C:\Windows\System32\ctfmon.exe 09:31:13.305334 vminfo Session 1: PID=8732 (fInt=true ): C:\Windows\explorer.exe 09:31:13.305334 vminfo Session 1: PID=9016 (fInt=true ): C:\Program Files (x86)\NoMachine\bin\nxclient.bin 09:31:13.305334 vminfo Session 1: PID=8260 (fInt=true ): C:\Program Files\McAfee\Agent\x86\UpdaterUI.exe 09:31:13.305334 vminfo Session 1: PID=8828 (fInt=true ): C:\Program Files\Classic Shell\ClassicStartMenu.exe 09:31:13.305334 vminfo Session 1: PID=8488 (fInt=true ): C:\Program Files\McAfee\Agent\x86\mctray.exe 09:31:13.305334 vminfo Session 1: PID=9172 (fInt=true ): C:\Program Files\TortoiseSVN\bin\TSVNCache.exe 09:31:13.305334 vminfo Session 1: PID=9280 (fInt=true ): C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe 09:31:13.305334 vminfo Session 1: PID=9652 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:13.305334 vminfo Session 1: PID=9728 (fInt=true ): C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe 09:31:13.305334 vminfo Session 1: PID=9880 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:13.305334 vminfo Session 1: PID=9944 (fInt=true ): C:\Windows\System32\dllhost.exe 09:31:13.305334 vminfo Session 1: PID=8128 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17112.19011.0_x64__8wekyb3d8bbwe\Video.UI.exe 09:31:13.305334 vminfo Session 1: PID=9528 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:13.305334 vminfo Session 1: PID=10292 (fInt=true ): C:\Program Files\Windows Defender\MSASCuiL.exe 09:31:13.305334 vminfo Session 1: PID=10324 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:13.305334 vminfo Session 1: PID=10440 (fInt=true ): C:\Windows\System32\VBoxTray.exe 09:31:13.305334 vminfo Session 1: PID=10596 (fInt=true ): C:\Users\user\Documents\Visual Studio 2017\Projects\vboxtray_mon\vboxtray_mon\bin\Release\vboxtray_mon.exe 09:31:13.305334 vminfo Session 1: PID=10612 (fInt=true ): C:\Windows\System32\conhost.exe 09:31:13.305334 vminfo Session 1: PID=10720 (fInt=true ): C:\Program Files (x86)\FileZilla Server\FileZilla Server Interface.exe 09:31:13.305334 vminfo Session 1: PID=9808 (fInt=true ): C:\Windows\System32\svchost.exe 09:31:13.305334 vminfo Session 1: PID=6716 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18011.15918.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe 09:31:13.305334 vminfo Session 1: PID=6688 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:13.305334 vminfo Session 1: PID=10200 (fInt=true ): C:\Windows\System32\ApplicationFrameHost.exe 09:31:13.305334 vminfo Session 1: PID=4868 (fInt=true ): C:\Windows\ImmersiveControlPanel\SystemSettings.exe 09:31:13.305334 vminfo Session 1: PID=1444 (fInt=true ): C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe 09:31:13.305334 vminfo Session 1: PID=9504 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:13.305334 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/Session/1' = '#12147: cSessionProcs=31 (of 155 procs total)' 09:31:13.305334 vminfo Adding new user=user (session=1) with 31 processes 09:31:13.305334 vminfo Handling session 6 (of 17) 09:31:13.305334 vminfo Session data: Name=user, SessionID=1, LogonID=0,1970599, LogonType=2 09:31:13.305334 vminfo Session LogonType=2 is supported -- looking up SID + type ... 09:31:13.305334 vminfo Account User=user, Session=1, LogonID=0,1970599, AuthPkg=Kerberos, Domain=DOMAIN 09:31:13.305334 vminfo Account User=user, WTSConnectState=0 (4) 09:31:13.305334 vminfo Account User=user using TCS/RDP, state=0 09:31:13.305334 vminfo Account User=user is logged in 09:31:13.305334 vminfo Handling user=user, domain=DOMAIN, package=Kerberos, session=1 09:31:13.305334 vminfo Session 1: PID=6784 (fInt=true ): C:\Windows\System32\svchost.exe 09:31:13.305334 vminfo Session 1: PID=264 (fInt=true ): C:\Windows\System32\sihost.exe 09:31:13.305334 vminfo Session 1: PID=3148 (fInt=true ): C:\Windows\System32\svchost.exe 09:31:13.305334 vminfo Session 1: PID=7176 (fInt=true ): C:\Windows\System32\taskhostw.exe 09:31:13.305334 vminfo Session 1: PID=7268 (fInt=true ): C:\Windows\System32\ctfmon.exe 09:31:13.305334 vminfo Session 1: PID=8732 (fInt=true ): C:\Windows\explorer.exe 09:31:13.305334 vminfo Session 1: PID=9016 (fInt=true ): C:\Program Files (x86)\NoMachine\bin\nxclient.bin 09:31:13.305334 vminfo Session 1: PID=8260 (fInt=true ): C:\Program Files\McAfee\Agent\x86\UpdaterUI.exe 09:31:13.305334 vminfo Session 1: PID=8828 (fInt=true ): C:\Program Files\Classic Shell\ClassicStartMenu.exe 09:31:13.305334 vminfo Session 1: PID=8488 (fInt=true ): C:\Program Files\McAfee\Agent\x86\mctray.exe 09:31:13.305334 vminfo Session 1: PID=9172 (fInt=true ): C:\Program Files\TortoiseSVN\bin\TSVNCache.exe 09:31:13.305334 vminfo Session 1: PID=9280 (fInt=true ): C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe 09:31:13.320759 vminfo Session 1: PID=9652 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:13.320759 vminfo Session 1: PID=9728 (fInt=true ): C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe 09:31:13.320759 vminfo Session 1: PID=9880 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:13.320759 vminfo Session 1: PID=9944 (fInt=true ): C:\Windows\System32\dllhost.exe 09:31:13.320759 vminfo Session 1: PID=8128 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17112.19011.0_x64__8wekyb3d8bbwe\Video.UI.exe 09:31:13.320759 vminfo Session 1: PID=9528 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:13.320759 vminfo Session 1: PID=10292 (fInt=true ): C:\Program Files\Windows Defender\MSASCuiL.exe 09:31:13.320759 vminfo Session 1: PID=10324 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:13.320759 vminfo Session 1: PID=10440 (fInt=true ): C:\Windows\System32\VBoxTray.exe 09:31:13.320759 vminfo Session 1: PID=10596 (fInt=true ): C:\Users\user\Documents\Visual Studio 2017\Projects\vboxtray_mon\vboxtray_mon\bin\Release\vboxtray_mon.exe 09:31:13.320759 vminfo Session 1: PID=10612 (fInt=true ): C:\Windows\System32\conhost.exe 09:31:13.320759 vminfo Session 1: PID=10720 (fInt=true ): C:\Program Files (x86)\FileZilla Server\FileZilla Server Interface.exe 09:31:13.320759 vminfo Session 1: PID=9808 (fInt=true ): C:\Windows\System32\svchost.exe 09:31:13.320759 vminfo Session 1: PID=6716 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18011.15918.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe 09:31:13.320759 vminfo Session 1: PID=6688 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:13.320759 vminfo Session 1: PID=10200 (fInt=true ): C:\Windows\System32\ApplicationFrameHost.exe 09:31:13.320759 vminfo Session 1: PID=4868 (fInt=true ): C:\Windows\ImmersiveControlPanel\SystemSettings.exe 09:31:13.320759 vminfo Session 1: PID=1444 (fInt=true ): C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe 09:31:13.320759 vminfo Session 1: PID=9504 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:13.320759 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/Session/1' = '#12147: cSessionProcs=31 (of 155 procs total)' 09:31:13.320759 vminfo Adding new user=user (session=1) with 31 processes 09:31:13.320759 vminfo Handling session 7 (of 17) 09:31:13.320759 vminfo Session data: Name=nx, SessionID=0, LogonID=0,685607, LogonType=3 09:31:13.320759 vminfo Handling session 8 (of 17) 09:31:13.320759 vminfo Session data: Name=ANONYMOUS LOGON, SessionID=0, LogonID=0,649881, LogonType=3 09:31:13.320759 vminfo Handling session 9 (of 17) 09:31:13.320759 vminfo Session data: Name=IUSR, SessionID=0, LogonID=0,995, LogonType=5 09:31:13.320759 vminfo Handling session 10 (of 17) 09:31:13.320759 vminfo Session data: Name=DWM-1, SessionID=1, LogonID=0,61006, LogonType=2 09:31:13.320759 vminfo Session LogonType=2 is supported -- looking up SID + type ... 09:31:13.320759 vminfo SID owner type=5 not handled, skipping 09:31:13.320759 vminfo Account User=DWM-1 is not logged in 09:31:13.320759 vminfo Handling session 11 (of 17) 09:31:13.320759 vminfo Session data: Name=DWM-1, SessionID=1, LogonID=0,60973, LogonType=2 09:31:13.320759 vminfo Session LogonType=2 is supported -- looking up SID + type ... 09:31:13.320759 vminfo SID owner type=5 not handled, skipping 09:31:13.320759 vminfo Account User=DWM-1 is not logged in 09:31:13.320759 vminfo Handling session 12 (of 17) 09:31:13.320759 vminfo Session data: Name=MACHINE$, SessionID=0, LogonID=0,996, LogonType=5 09:31:13.320759 vminfo Handling session 13 (of 17) 09:31:13.320759 vminfo Session data: Name=LOCAL SERVICE, SessionID=0, LogonID=0,997, LogonType=5 09:31:13.320759 vminfo Handling session 14 (of 17) 09:31:13.320759 vminfo Session data: Name=UMFD-1, SessionID=1, LogonID=0,34521, LogonType=2 09:31:13.320759 vminfo Session LogonType=2 is supported -- looking up SID + type ... 09:31:13.320759 vminfo SID owner type=5 not handled, skipping 09:31:13.320759 vminfo Account User=UMFD-1 is not logged in 09:31:13.320759 vminfo Handling session 15 (of 17) 09:31:13.320759 vminfo Session data: Name=UMFD-0, SessionID=0, LogonID=0,34482, LogonType=2 09:31:13.320759 vminfo Handling session 16 (of 17) 09:31:13.320759 vminfo Session data: Name=, SessionID=0, LogonID=0,32336, LogonType=0 09:31:13.320759 vminfo Handling session 17 (of 17) 09:31:13.320759 vminfo Session data: Name=MACHINE$, SessionID=0, LogonID=0,999, LogonType=0 09:31:13.320759 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA' = '#12147: cSessions=17, cProcs=155, cUniqueUsers=2' 09:31:13.320759 vminfo Found 2 unique logged-in user(s) 09:31:13.320759 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/User/0' = '#12147: szName=user, sessionID=1, cProcs=31' 09:31:13.320759 vminfo User 'user' has 31 interactive processes (session=1) 09:31:13.320759 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/User/user@DOMAIN/UsageState' resulted in rc=VINF_NO_CHANGE 09:31:13.320759 vminfo User 'user' (domain 'DOMAIN') is idle for 60448, fReportToHost=false 09:31:13.320759 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/User/1' = '#12147: szName=user, sessionID=1, cProcs=31' 09:31:13.320759 vminfo User 'user' has 31 interactive processes (session=1) 09:31:13.320759 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/User/user@DOMAIN/UsageState' resulted in rc=VINF_NO_CHANGE 09:31:13.320759 vminfo User 'user' (domain 'DOMAIN') is idle for 60448, fReportToHost=false 09:31:13.320759 vminfo cUsersInList=2, pszUserList=user,user, rc=VINF_NO_CHANGE 09:31:13.320759 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/LoggedInUsersList' resulted in rc=VINF_NO_CHANGE 09:31:13.320759 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/LoggedInUsers' resulted in rc=VINF_NO_CHANGE 09:31:13.320759 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/NoLoggedInUsers' resulted in rc=VINF_NO_CHANGE 09:31:13.320759 vminfo Writing users returned with rc=VINF_NO_CHANGE 09:31:13.336405 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/IP' resulted in rc=VINF_NO_CHANGE 09:31:13.336405 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/Broadcast' resulted in rc=VINF_NO_CHANGE 09:31:13.336405 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/Netmask' resulted in rc=VINF_NO_CHANGE 09:31:13.336405 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/Status' resulted in rc=VINF_NO_CHANGE 09:31:13.336405 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/MAC' resulted in rc=VINF_NO_CHANGE 09:31:13.336405 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/IP' resulted in rc=VINF_NO_CHANGE 09:31:13.336405 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/Broadcast' resulted in rc=VINF_NO_CHANGE 09:31:13.336405 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/Netmask' resulted in rc=VINF_NO_CHANGE 09:31:13.336405 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/Status' resulted in rc=VINF_NO_CHANGE 09:31:13.336405 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/MAC' resulted in rc=VINF_NO_CHANGE 09:31:13.336405 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/IP' resulted in rc=VINF_NO_CHANGE 09:31:13.336405 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/Broadcast' resulted in rc=VINF_NO_CHANGE 09:31:13.336405 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/Netmask' resulted in rc=VINF_NO_CHANGE 09:31:13.336405 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/Status' resulted in rc=VINF_NO_CHANGE 09:31:13.336405 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/MAC' resulted in rc=VINF_NO_CHANGE 09:31:13.336405 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/IP' resulted in rc=VINF_NO_CHANGE 09:31:13.336405 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/Broadcast' resulted in rc=VINF_NO_CHANGE 09:31:13.336405 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/Netmask' resulted in rc=VINF_NO_CHANGE 09:31:13.336405 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/Status' resulted in rc=VINF_NO_CHANGE 09:31:13.336405 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/MAC' resulted in rc=VINF_NO_CHANGE 09:31:13.336405 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/IP' resulted in rc=VINF_NO_CHANGE 09:31:13.336405 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/Broadcast' resulted in rc=VINF_NO_CHANGE 09:31:13.336405 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/Netmask' resulted in rc=VINF_NO_CHANGE 09:31:13.336405 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/Status' resulted in rc=VINF_NO_CHANGE 09:31:13.336405 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/MAC' resulted in rc=VINF_NO_CHANGE 09:31:13.336405 vminfo [PropCache 00007ff6b2962520]: Written '/VirtualBox/GuestInfo/Net/Count'='5' (flags: 6), rc=VINF_SUCCESS 09:31:13.336405 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/Count' resulted in rc=VINF_SUCCESS 09:31:13.336405 vminfo Guest Property: /VirtualBox/HostInfo/VRDP/ActiveClient not found 09:31:13.336405 vminfo VRDP: Handling location awareness done 09:31:16.101694 timesync vgsvcTimeSyncWorker: Host: 2019-02-26T09:31:15.977000000Z (MinAdjust: 200 ms), Guest: 2019-02-26T09:31:16.101694500Z => -124 694 500 ns drift 09:31:18.346663 vminfo Found 17 sessions 09:31:18.346663 vminfo Error: Get token class 'user' for process 0 failed, rc=VERR_INVALID_PARAMETER 09:31:18.346663 vminfo Error: Get token class 'groups' for process 0 failed, rc=VERR_INVALID_PARAMETER 09:31:18.346663 vminfo Error: Get token class 'statistics' for process 0 failed, rc=VERR_INVALID_PARAMETER 09:31:18.346663 vminfo Error: Get token class 'user' for process 4 failed, rc=VERR_ACCESS_DENIED 09:31:18.346663 vminfo Error: Get token class 'groups' for process 4 failed, rc=VERR_ACCESS_DENIED 09:31:18.346663 vminfo Error: Get token class 'statistics' for process 4 failed, rc=VERR_ACCESS_DENIED 09:31:18.346663 vminfo Error: Get token class 'user' for process 104 failed, rc=VERR_ACCESS_DENIED 09:31:18.346663 vminfo Error: Get token class 'groups' for process 104 failed, rc=VERR_ACCESS_DENIED 09:31:18.346663 vminfo Error: Get token class 'statistics' for process 104 failed, rc=VERR_ACCESS_DENIED 09:31:18.346663 vminfo Error: Get token class 'user' for process 472 failed, rc=VERR_ACCESS_DENIED 09:31:18.346663 vminfo Error: Get token class 'groups' for process 472 failed, rc=VERR_ACCESS_DENIED 09:31:18.346663 vminfo Error: Get token class 'statistics' for process 472 failed, rc=VERR_ACCESS_DENIED 09:31:18.346663 vminfo Error: Get token class 'user' for process 676 failed, rc=VERR_ACCESS_DENIED 09:31:18.346663 vminfo Error: Get token class 'groups' for process 676 failed, rc=VERR_ACCESS_DENIED 09:31:18.346663 vminfo Error: Get token class 'statistics' for process 676 failed, rc=VERR_ACCESS_DENIED 09:31:18.346663 vminfo Error: Get token class 'user' for process 756 failed, rc=VERR_ACCESS_DENIED 09:31:18.346663 vminfo Error: Get token class 'groups' for process 756 failed, rc=VERR_ACCESS_DENIED 09:31:18.346663 vminfo Error: Get token class 'statistics' for process 756 failed, rc=VERR_ACCESS_DENIED 09:31:18.346663 vminfo Error: Get token class 'user' for process 768 failed, rc=VERR_ACCESS_DENIED 09:31:18.346663 vminfo Error: Get token class 'groups' for process 768 failed, rc=VERR_ACCESS_DENIED 09:31:18.346663 vminfo Error: Get token class 'statistics' for process 768 failed, rc=VERR_ACCESS_DENIED 09:31:18.346663 vminfo Error: Get token class 'user' for process 876 failed, rc=VERR_ACCESS_DENIED 09:31:18.346663 vminfo Error: Get token class 'groups' for process 876 failed, rc=VERR_ACCESS_DENIED 09:31:18.346663 vminfo Error: Get token class 'statistics' for process 876 failed, rc=VERR_ACCESS_DENIED 09:31:18.346663 vminfo Error: Get token class 'user' for process 2532 failed, rc=VERR_ACCESS_DENIED 09:31:18.346663 vminfo Error: Get token class 'groups' for process 2532 failed, rc=VERR_ACCESS_DENIED 09:31:18.346663 vminfo Error: Get token class 'statistics' for process 2532 failed, rc=VERR_ACCESS_DENIED 09:31:18.346663 vminfo Error: Get token class 'user' for process 4136 failed, rc=VERR_ACCESS_DENIED 09:31:18.346663 vminfo Error: Get token class 'groups' for process 4136 failed, rc=VERR_ACCESS_DENIED 09:31:18.346663 vminfo Error: Get token class 'statistics' for process 4136 failed, rc=VERR_ACCESS_DENIED 09:31:18.346663 vminfo Error: Get token class 'user' for process 5212 failed, rc=VERR_ACCESS_DENIED 09:31:18.346663 vminfo Error: Get token class 'groups' for process 5212 failed, rc=VERR_ACCESS_DENIED 09:31:18.346663 vminfo Error: Get token class 'statistics' for process 5212 failed, rc=VERR_ACCESS_DENIED 09:31:18.346663 vminfo Handling session 1 (of 17) 09:31:18.346663 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2145999, LogonType=3 09:31:18.346663 vminfo Handling session 2 (of 17) 09:31:18.346663 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2113823, LogonType=3 09:31:18.346663 vminfo Handling session 3 (of 17) 09:31:18.346663 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2041868, LogonType=3 09:31:18.346663 vminfo Handling session 4 (of 17) 09:31:18.346663 vminfo Session data: Name=nx, SessionID=0, LogonID=0,1997776, LogonType=3 09:31:18.346663 vminfo Handling session 5 (of 17) 09:31:18.346663 vminfo Session data: Name=user, SessionID=1, LogonID=0,1970648, LogonType=2 09:31:18.346663 vminfo Session LogonType=2 is supported -- looking up SID + type ... 09:31:18.361444 vminfo Account User=user, Session=1, LogonID=0,1970648, AuthPkg=Negotiate, Domain=DOMAIN 09:31:18.361444 vminfo Account User=user, WTSConnectState=0 (4) 09:31:18.361444 vminfo Account User=user using TCS/RDP, state=0 09:31:18.361444 vminfo Account User=user is logged in 09:31:18.361444 vminfo Handling user=user, domain=DOMAIN, package=Negotiate, session=1 09:31:18.361444 vminfo Session 1: PID=6784 (fInt=true ): C:\Windows\System32\svchost.exe 09:31:18.361444 vminfo Session 1: PID=264 (fInt=true ): C:\Windows\System32\sihost.exe 09:31:18.361444 vminfo Session 1: PID=3148 (fInt=true ): C:\Windows\System32\svchost.exe 09:31:18.361444 vminfo Session 1: PID=7176 (fInt=true ): C:\Windows\System32\taskhostw.exe 09:31:18.361444 vminfo Session 1: PID=7268 (fInt=true ): C:\Windows\System32\ctfmon.exe 09:31:18.361444 vminfo Session 1: PID=8732 (fInt=true ): C:\Windows\explorer.exe 09:31:18.361444 vminfo Session 1: PID=9016 (fInt=true ): C:\Program Files (x86)\NoMachine\bin\nxclient.bin 09:31:18.361444 vminfo Session 1: PID=8260 (fInt=true ): C:\Program Files\McAfee\Agent\x86\UpdaterUI.exe 09:31:18.361444 vminfo Session 1: PID=8828 (fInt=true ): C:\Program Files\Classic Shell\ClassicStartMenu.exe 09:31:18.361444 vminfo Session 1: PID=8488 (fInt=true ): C:\Program Files\McAfee\Agent\x86\mctray.exe 09:31:18.361444 vminfo Session 1: PID=9172 (fInt=true ): C:\Program Files\TortoiseSVN\bin\TSVNCache.exe 09:31:18.361444 vminfo Session 1: PID=9280 (fInt=true ): C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe 09:31:18.361444 vminfo Session 1: PID=9652 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:18.361444 vminfo Session 1: PID=9728 (fInt=true ): C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe 09:31:18.361444 vminfo Session 1: PID=9880 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:18.361444 vminfo Session 1: PID=9944 (fInt=true ): C:\Windows\System32\dllhost.exe 09:31:18.361444 vminfo Session 1: PID=8128 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17112.19011.0_x64__8wekyb3d8bbwe\Video.UI.exe 09:31:18.361444 vminfo Session 1: PID=9528 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:18.361444 vminfo Session 1: PID=10292 (fInt=true ): C:\Program Files\Windows Defender\MSASCuiL.exe 09:31:18.361444 vminfo Session 1: PID=10324 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:18.361444 vminfo Session 1: PID=10440 (fInt=true ): C:\Windows\System32\VBoxTray.exe 09:31:18.361444 vminfo Session 1: PID=10596 (fInt=true ): C:\Users\user\Documents\Visual Studio 2017\Projects\vboxtray_mon\vboxtray_mon\bin\Release\vboxtray_mon.exe 09:31:18.361444 vminfo Session 1: PID=10612 (fInt=true ): C:\Windows\System32\conhost.exe 09:31:18.361444 vminfo Session 1: PID=10720 (fInt=true ): C:\Program Files (x86)\FileZilla Server\FileZilla Server Interface.exe 09:31:18.361444 vminfo Session 1: PID=9808 (fInt=true ): C:\Windows\System32\svchost.exe 09:31:18.361444 vminfo Session 1: PID=6716 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18011.15918.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe 09:31:18.361444 vminfo Session 1: PID=6688 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:18.361444 vminfo Session 1: PID=10200 (fInt=true ): C:\Windows\System32\ApplicationFrameHost.exe 09:31:18.361444 vminfo Session 1: PID=4868 (fInt=true ): C:\Windows\ImmersiveControlPanel\SystemSettings.exe 09:31:18.361444 vminfo Session 1: PID=1444 (fInt=true ): C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe 09:31:18.361444 vminfo Session 1: PID=9504 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:18.361444 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/Session/1' = '#12148: cSessionProcs=31 (of 155 procs total)' 09:31:18.361444 vminfo Adding new user=user (session=1) with 31 processes 09:31:18.361444 vminfo Handling session 6 (of 17) 09:31:18.361444 vminfo Session data: Name=user, SessionID=1, LogonID=0,1970599, LogonType=2 09:31:18.361444 vminfo Session LogonType=2 is supported -- looking up SID + type ... 09:31:18.361444 vminfo Account User=user, Session=1, LogonID=0,1970599, AuthPkg=Kerberos, Domain=DOMAIN 09:31:18.361444 vminfo Account User=user, WTSConnectState=0 (4) 09:31:18.361444 vminfo Account User=user using TCS/RDP, state=0 09:31:18.361444 vminfo Account User=user is logged in 09:31:18.361444 vminfo Handling user=user, domain=DOMAIN, package=Kerberos, session=1 09:31:18.361444 vminfo Session 1: PID=6784 (fInt=true ): C:\Windows\System32\svchost.exe 09:31:18.361444 vminfo Session 1: PID=264 (fInt=true ): C:\Windows\System32\sihost.exe 09:31:18.361444 vminfo Session 1: PID=3148 (fInt=true ): C:\Windows\System32\svchost.exe 09:31:18.361444 vminfo Session 1: PID=7176 (fInt=true ): C:\Windows\System32\taskhostw.exe 09:31:18.361444 vminfo Session 1: PID=7268 (fInt=true ): C:\Windows\System32\ctfmon.exe 09:31:18.361444 vminfo Session 1: PID=8732 (fInt=true ): C:\Windows\explorer.exe 09:31:18.361444 vminfo Session 1: PID=9016 (fInt=true ): C:\Program Files (x86)\NoMachine\bin\nxclient.bin 09:31:18.361444 vminfo Session 1: PID=8260 (fInt=true ): C:\Program Files\McAfee\Agent\x86\UpdaterUI.exe 09:31:18.361444 vminfo Session 1: PID=8828 (fInt=true ): C:\Program Files\Classic Shell\ClassicStartMenu.exe 09:31:18.361444 vminfo Session 1: PID=8488 (fInt=true ): C:\Program Files\McAfee\Agent\x86\mctray.exe 09:31:18.361444 vminfo Session 1: PID=9172 (fInt=true ): C:\Program Files\TortoiseSVN\bin\TSVNCache.exe 09:31:18.361444 vminfo Session 1: PID=9280 (fInt=true ): C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe 09:31:18.361444 vminfo Session 1: PID=9652 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:18.361444 vminfo Session 1: PID=9728 (fInt=true ): C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe 09:31:18.361444 vminfo Session 1: PID=9880 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:18.361444 vminfo Session 1: PID=9944 (fInt=true ): C:\Windows\System32\dllhost.exe 09:31:18.361444 vminfo Session 1: PID=8128 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17112.19011.0_x64__8wekyb3d8bbwe\Video.UI.exe 09:31:18.361444 vminfo Session 1: PID=9528 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:18.361444 vminfo Session 1: PID=10292 (fInt=true ): C:\Program Files\Windows Defender\MSASCuiL.exe 09:31:18.361444 vminfo Session 1: PID=10324 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:18.361444 vminfo Session 1: PID=10440 (fInt=true ): C:\Windows\System32\VBoxTray.exe 09:31:18.377038 vminfo Session 1: PID=10596 (fInt=true ): C:\Users\user\Documents\Visual Studio 2017\Projects\vboxtray_mon\vboxtray_mon\bin\Release\vboxtray_mon.exe 09:31:18.377038 vminfo Session 1: PID=10612 (fInt=true ): C:\Windows\System32\conhost.exe 09:31:18.377038 vminfo Session 1: PID=10720 (fInt=true ): C:\Program Files (x86)\FileZilla Server\FileZilla Server Interface.exe 09:31:18.377038 vminfo Session 1: PID=9808 (fInt=true ): C:\Windows\System32\svchost.exe 09:31:18.377038 vminfo Session 1: PID=6716 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18011.15918.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe 09:31:18.377038 vminfo Session 1: PID=6688 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:18.377038 vminfo Session 1: PID=10200 (fInt=true ): C:\Windows\System32\ApplicationFrameHost.exe 09:31:18.377038 vminfo Session 1: PID=4868 (fInt=true ): C:\Windows\ImmersiveControlPanel\SystemSettings.exe 09:31:18.377038 vminfo Session 1: PID=1444 (fInt=true ): C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe 09:31:18.377038 vminfo Session 1: PID=9504 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:18.377038 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/Session/1' = '#12148: cSessionProcs=31 (of 155 procs total)' 09:31:18.377038 vminfo Adding new user=user (session=1) with 31 processes 09:31:18.377038 vminfo Handling session 7 (of 17) 09:31:18.377038 vminfo Session data: Name=nx, SessionID=0, LogonID=0,685607, LogonType=3 09:31:18.377038 vminfo Handling session 8 (of 17) 09:31:18.377038 vminfo Session data: Name=ANONYMOUS LOGON, SessionID=0, LogonID=0,649881, LogonType=3 09:31:18.377038 vminfo Handling session 9 (of 17) 09:31:18.377038 vminfo Session data: Name=IUSR, SessionID=0, LogonID=0,995, LogonType=5 09:31:18.377038 vminfo Handling session 10 (of 17) 09:31:18.377038 vminfo Session data: Name=DWM-1, SessionID=1, LogonID=0,61006, LogonType=2 09:31:18.377038 vminfo Session LogonType=2 is supported -- looking up SID + type ... 09:31:18.377038 vminfo SID owner type=5 not handled, skipping 09:31:18.377038 vminfo Account User=DWM-1 is not logged in 09:31:18.377038 vminfo Handling session 11 (of 17) 09:31:18.377038 vminfo Session data: Name=DWM-1, SessionID=1, LogonID=0,60973, LogonType=2 09:31:18.377038 vminfo Session LogonType=2 is supported -- looking up SID + type ... 09:31:18.377038 vminfo SID owner type=5 not handled, skipping 09:31:18.377038 vminfo Account User=DWM-1 is not logged in 09:31:18.377038 vminfo Handling session 12 (of 17) 09:31:18.377038 vminfo Session data: Name=MACHINE$, SessionID=0, LogonID=0,996, LogonType=5 09:31:18.377038 vminfo Handling session 13 (of 17) 09:31:18.377038 vminfo Session data: Name=LOCAL SERVICE, SessionID=0, LogonID=0,997, LogonType=5 09:31:18.377038 vminfo Handling session 14 (of 17) 09:31:18.377038 vminfo Session data: Name=UMFD-1, SessionID=1, LogonID=0,34521, LogonType=2 09:31:18.377038 vminfo Session LogonType=2 is supported -- looking up SID + type ... 09:31:18.377038 vminfo SID owner type=5 not handled, skipping 09:31:18.377038 vminfo Account User=UMFD-1 is not logged in 09:31:18.377038 vminfo Handling session 15 (of 17) 09:31:18.377038 vminfo Session data: Name=UMFD-0, SessionID=0, LogonID=0,34482, LogonType=2 09:31:18.377038 vminfo Handling session 16 (of 17) 09:31:18.377038 vminfo Session data: Name=, SessionID=0, LogonID=0,32336, LogonType=0 09:31:18.377038 vminfo Handling session 17 (of 17) 09:31:18.377038 vminfo Session data: Name=MACHINE$, SessionID=0, LogonID=0,999, LogonType=0 09:31:18.377038 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA' = '#12148: cSessions=17, cProcs=155, cUniqueUsers=2' 09:31:18.377038 vminfo Found 2 unique logged-in user(s) 09:31:18.377038 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/User/0' = '#12148: szName=user, sessionID=1, cProcs=31' 09:31:18.377038 vminfo User 'user' has 31 interactive processes (session=1) 09:31:18.377038 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/User/user@DOMAIN/UsageState' resulted in rc=VINF_NO_CHANGE 09:31:18.377038 vminfo User 'user' (domain 'DOMAIN') is idle for 60453, fReportToHost=false 09:31:18.377038 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/User/1' = '#12148: szName=user, sessionID=1, cProcs=31' 09:31:18.377038 vminfo User 'user' has 31 interactive processes (session=1) 09:31:18.377038 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/User/user@DOMAIN/UsageState' resulted in rc=VINF_NO_CHANGE 09:31:18.377038 vminfo User 'user' (domain 'DOMAIN') is idle for 60453, fReportToHost=false 09:31:18.377038 vminfo cUsersInList=2, pszUserList=user,user, rc=VINF_NO_CHANGE 09:31:18.377038 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/LoggedInUsersList' resulted in rc=VINF_NO_CHANGE 09:31:18.377038 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/LoggedInUsers' resulted in rc=VINF_NO_CHANGE 09:31:18.377038 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/NoLoggedInUsers' resulted in rc=VINF_NO_CHANGE 09:31:18.377038 vminfo Writing users returned with rc=VINF_NO_CHANGE 09:31:18.392766 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/IP' resulted in rc=VINF_NO_CHANGE 09:31:18.392766 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/Broadcast' resulted in rc=VINF_NO_CHANGE 09:31:18.392766 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/Netmask' resulted in rc=VINF_NO_CHANGE 09:31:18.392766 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/Status' resulted in rc=VINF_NO_CHANGE 09:31:18.392766 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/MAC' resulted in rc=VINF_NO_CHANGE 09:31:18.392766 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/IP' resulted in rc=VINF_NO_CHANGE 09:31:18.392766 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/Broadcast' resulted in rc=VINF_NO_CHANGE 09:31:18.392766 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/Netmask' resulted in rc=VINF_NO_CHANGE 09:31:18.392766 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/Status' resulted in rc=VINF_NO_CHANGE 09:31:18.392766 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/MAC' resulted in rc=VINF_NO_CHANGE 09:31:18.392766 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/IP' resulted in rc=VINF_NO_CHANGE 09:31:18.392766 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/Broadcast' resulted in rc=VINF_NO_CHANGE 09:31:18.392766 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/Netmask' resulted in rc=VINF_NO_CHANGE 09:31:18.392766 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/Status' resulted in rc=VINF_NO_CHANGE 09:31:18.392766 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/MAC' resulted in rc=VINF_NO_CHANGE 09:31:18.392766 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/IP' resulted in rc=VINF_NO_CHANGE 09:31:18.392766 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/Broadcast' resulted in rc=VINF_NO_CHANGE 09:31:18.392766 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/Netmask' resulted in rc=VINF_NO_CHANGE 09:31:18.392766 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/Status' resulted in rc=VINF_NO_CHANGE 09:31:18.392766 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/MAC' resulted in rc=VINF_NO_CHANGE 09:31:18.392766 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/IP' resulted in rc=VINF_NO_CHANGE 09:31:18.392766 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/Broadcast' resulted in rc=VINF_NO_CHANGE 09:31:18.392766 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/Netmask' resulted in rc=VINF_NO_CHANGE 09:31:18.392766 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/Status' resulted in rc=VINF_NO_CHANGE 09:31:18.392766 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/MAC' resulted in rc=VINF_NO_CHANGE 09:31:18.392766 vminfo [PropCache 00007ff6b2962520]: Written '/VirtualBox/GuestInfo/Net/Count'='5' (flags: 6), rc=VINF_SUCCESS 09:31:18.392766 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/Count' resulted in rc=VINF_SUCCESS 09:31:18.392766 vminfo Guest Property: /VirtualBox/HostInfo/VRDP/ActiveClient not found 09:31:18.392766 vminfo VRDP: Handling location awareness done 09:31:23.395468 vminfo Found 17 sessions 09:31:23.395468 vminfo Error: Get token class 'user' for process 0 failed, rc=VERR_INVALID_PARAMETER 09:31:23.395468 vminfo Error: Get token class 'groups' for process 0 failed, rc=VERR_INVALID_PARAMETER 09:31:23.395468 vminfo Error: Get token class 'statistics' for process 0 failed, rc=VERR_INVALID_PARAMETER 09:31:23.395468 vminfo Error: Get token class 'user' for process 4 failed, rc=VERR_ACCESS_DENIED 09:31:23.395468 vminfo Error: Get token class 'groups' for process 4 failed, rc=VERR_ACCESS_DENIED 09:31:23.395468 vminfo Error: Get token class 'statistics' for process 4 failed, rc=VERR_ACCESS_DENIED 09:31:23.395468 vminfo Error: Get token class 'user' for process 104 failed, rc=VERR_ACCESS_DENIED 09:31:23.395468 vminfo Error: Get token class 'groups' for process 104 failed, rc=VERR_ACCESS_DENIED 09:31:23.395468 vminfo Error: Get token class 'statistics' for process 104 failed, rc=VERR_ACCESS_DENIED 09:31:23.395468 vminfo Error: Get token class 'user' for process 472 failed, rc=VERR_ACCESS_DENIED 09:31:23.395468 vminfo Error: Get token class 'groups' for process 472 failed, rc=VERR_ACCESS_DENIED 09:31:23.395468 vminfo Error: Get token class 'statistics' for process 472 failed, rc=VERR_ACCESS_DENIED 09:31:23.395468 vminfo Error: Get token class 'user' for process 676 failed, rc=VERR_ACCESS_DENIED 09:31:23.395468 vminfo Error: Get token class 'groups' for process 676 failed, rc=VERR_ACCESS_DENIED 09:31:23.395468 vminfo Error: Get token class 'statistics' for process 676 failed, rc=VERR_ACCESS_DENIED 09:31:23.395468 vminfo Error: Get token class 'user' for process 756 failed, rc=VERR_ACCESS_DENIED 09:31:23.395468 vminfo Error: Get token class 'groups' for process 756 failed, rc=VERR_ACCESS_DENIED 09:31:23.395468 vminfo Error: Get token class 'statistics' for process 756 failed, rc=VERR_ACCESS_DENIED 09:31:23.395468 vminfo Error: Get token class 'user' for process 768 failed, rc=VERR_ACCESS_DENIED 09:31:23.395468 vminfo Error: Get token class 'groups' for process 768 failed, rc=VERR_ACCESS_DENIED 09:31:23.395468 vminfo Error: Get token class 'statistics' for process 768 failed, rc=VERR_ACCESS_DENIED 09:31:23.395468 vminfo Error: Get token class 'user' for process 876 failed, rc=VERR_ACCESS_DENIED 09:31:23.395468 vminfo Error: Get token class 'groups' for process 876 failed, rc=VERR_ACCESS_DENIED 09:31:23.395468 vminfo Error: Get token class 'statistics' for process 876 failed, rc=VERR_ACCESS_DENIED 09:31:23.395468 vminfo Error: Get token class 'user' for process 2532 failed, rc=VERR_ACCESS_DENIED 09:31:23.395468 vminfo Error: Get token class 'groups' for process 2532 failed, rc=VERR_ACCESS_DENIED 09:31:23.395468 vminfo Error: Get token class 'statistics' for process 2532 failed, rc=VERR_ACCESS_DENIED 09:31:23.395468 vminfo Error: Get token class 'user' for process 4136 failed, rc=VERR_ACCESS_DENIED 09:31:23.395468 vminfo Error: Get token class 'groups' for process 4136 failed, rc=VERR_ACCESS_DENIED 09:31:23.395468 vminfo Error: Get token class 'statistics' for process 4136 failed, rc=VERR_ACCESS_DENIED 09:31:23.395468 vminfo Error: Get token class 'user' for process 5212 failed, rc=VERR_ACCESS_DENIED 09:31:23.395468 vminfo Error: Get token class 'groups' for process 5212 failed, rc=VERR_ACCESS_DENIED 09:31:23.395468 vminfo Error: Get token class 'statistics' for process 5212 failed, rc=VERR_ACCESS_DENIED 09:31:23.395468 vminfo Handling session 1 (of 17) 09:31:23.395468 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2145999, LogonType=3 09:31:23.395468 vminfo Handling session 2 (of 17) 09:31:23.395468 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2113823, LogonType=3 09:31:23.395468 vminfo Handling session 3 (of 17) 09:31:23.395468 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2041868, LogonType=3 09:31:23.395468 vminfo Handling session 4 (of 17) 09:31:23.395468 vminfo Session data: Name=nx, SessionID=0, LogonID=0,1997776, LogonType=3 09:31:23.410161 vminfo Handling session 5 (of 17) 09:31:23.410161 vminfo Session data: Name=user, SessionID=1, LogonID=0,1970648, LogonType=2 09:31:23.410161 vminfo Session LogonType=2 is supported -- looking up SID + type ... 09:31:23.410161 vminfo Account User=user, Session=1, LogonID=0,1970648, AuthPkg=Negotiate, Domain=DOMAIN 09:31:23.410161 vminfo Account User=user, WTSConnectState=0 (4) 09:31:23.410161 vminfo Account User=user using TCS/RDP, state=0 09:31:23.410161 vminfo Account User=user is logged in 09:31:23.410161 vminfo Handling user=user, domain=DOMAIN, package=Negotiate, session=1 09:31:23.410161 vminfo Session 1: PID=6784 (fInt=true ): C:\Windows\System32\svchost.exe 09:31:23.410161 vminfo Session 1: PID=264 (fInt=true ): C:\Windows\System32\sihost.exe 09:31:23.410161 vminfo Session 1: PID=3148 (fInt=true ): C:\Windows\System32\svchost.exe 09:31:23.410161 vminfo Session 1: PID=7176 (fInt=true ): C:\Windows\System32\taskhostw.exe 09:31:23.410161 vminfo Session 1: PID=7268 (fInt=true ): C:\Windows\System32\ctfmon.exe 09:31:23.410161 vminfo Session 1: PID=8732 (fInt=true ): C:\Windows\explorer.exe 09:31:23.410161 vminfo Session 1: PID=9016 (fInt=true ): C:\Program Files (x86)\NoMachine\bin\nxclient.bin 09:31:23.410161 vminfo Session 1: PID=8260 (fInt=true ): C:\Program Files\McAfee\Agent\x86\UpdaterUI.exe 09:31:23.410161 vminfo Session 1: PID=8828 (fInt=true ): C:\Program Files\Classic Shell\ClassicStartMenu.exe 09:31:23.410161 vminfo Session 1: PID=8488 (fInt=true ): C:\Program Files\McAfee\Agent\x86\mctray.exe 09:31:23.410161 vminfo Session 1: PID=9172 (fInt=true ): C:\Program Files\TortoiseSVN\bin\TSVNCache.exe 09:31:23.410161 vminfo Session 1: PID=9280 (fInt=true ): C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe 09:31:23.410161 vminfo Session 1: PID=9652 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:23.410161 vminfo Session 1: PID=9728 (fInt=true ): C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe 09:31:23.410161 vminfo Session 1: PID=9880 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:23.410161 vminfo Session 1: PID=9944 (fInt=true ): C:\Windows\System32\dllhost.exe 09:31:23.410161 vminfo Session 1: PID=8128 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17112.19011.0_x64__8wekyb3d8bbwe\Video.UI.exe 09:31:23.410161 vminfo Session 1: PID=9528 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:23.410161 vminfo Session 1: PID=10292 (fInt=true ): C:\Program Files\Windows Defender\MSASCuiL.exe 09:31:23.410161 vminfo Session 1: PID=10324 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:23.410161 vminfo Session 1: PID=10440 (fInt=true ): C:\Windows\System32\VBoxTray.exe 09:31:23.410161 vminfo Session 1: PID=10596 (fInt=true ): C:\Users\user\Documents\Visual Studio 2017\Projects\vboxtray_mon\vboxtray_mon\bin\Release\vboxtray_mon.exe 09:31:23.410161 vminfo Session 1: PID=10612 (fInt=true ): C:\Windows\System32\conhost.exe 09:31:23.410161 vminfo Session 1: PID=10720 (fInt=true ): C:\Program Files (x86)\FileZilla Server\FileZilla Server Interface.exe 09:31:23.410161 vminfo Session 1: PID=9808 (fInt=true ): C:\Windows\System32\svchost.exe 09:31:23.410161 vminfo Session 1: PID=6716 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18011.15918.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe 09:31:23.410161 vminfo Session 1: PID=6688 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:23.410161 vminfo Session 1: PID=10200 (fInt=true ): C:\Windows\System32\ApplicationFrameHost.exe 09:31:23.410161 vminfo Session 1: PID=4868 (fInt=true ): C:\Windows\ImmersiveControlPanel\SystemSettings.exe 09:31:23.410161 vminfo Session 1: PID=1444 (fInt=true ): C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe 09:31:23.410161 vminfo Session 1: PID=9504 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:23.410161 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/Session/1' = '#12149: cSessionProcs=31 (of 155 procs total)' 09:31:23.410161 vminfo Adding new user=user (session=1) with 31 processes 09:31:23.410161 vminfo Handling session 6 (of 17) 09:31:23.410161 vminfo Session data: Name=user, SessionID=1, LogonID=0,1970599, LogonType=2 09:31:23.410161 vminfo Session LogonType=2 is supported -- looking up SID + type ... 09:31:23.410161 vminfo Account User=user, Session=1, LogonID=0,1970599, AuthPkg=Kerberos, Domain=DOMAIN 09:31:23.410161 vminfo Account User=user, WTSConnectState=0 (4) 09:31:23.410161 vminfo Account User=user using TCS/RDP, state=0 09:31:23.410161 vminfo Account User=user is logged in 09:31:23.410161 vminfo Handling user=user, domain=DOMAIN, package=Kerberos, session=1 09:31:23.410161 vminfo Session 1: PID=6784 (fInt=true ): C:\Windows\System32\svchost.exe 09:31:23.410161 vminfo Session 1: PID=264 (fInt=true ): C:\Windows\System32\sihost.exe 09:31:23.410161 vminfo Session 1: PID=3148 (fInt=true ): C:\Windows\System32\svchost.exe 09:31:23.410161 vminfo Session 1: PID=7176 (fInt=true ): C:\Windows\System32\taskhostw.exe 09:31:23.410161 vminfo Session 1: PID=7268 (fInt=true ): C:\Windows\System32\ctfmon.exe 09:31:23.410161 vminfo Session 1: PID=8732 (fInt=true ): C:\Windows\explorer.exe 09:31:23.410161 vminfo Session 1: PID=9016 (fInt=true ): C:\Program Files (x86)\NoMachine\bin\nxclient.bin 09:31:23.410161 vminfo Session 1: PID=8260 (fInt=true ): C:\Program Files\McAfee\Agent\x86\UpdaterUI.exe 09:31:23.410161 vminfo Session 1: PID=8828 (fInt=true ): C:\Program Files\Classic Shell\ClassicStartMenu.exe 09:31:23.410161 vminfo Session 1: PID=8488 (fInt=true ): C:\Program Files\McAfee\Agent\x86\mctray.exe 09:31:23.410161 vminfo Session 1: PID=9172 (fInt=true ): C:\Program Files\TortoiseSVN\bin\TSVNCache.exe 09:31:23.410161 vminfo Session 1: PID=9280 (fInt=true ): C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe 09:31:23.410161 vminfo Session 1: PID=9652 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:23.410161 vminfo Session 1: PID=9728 (fInt=true ): C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe 09:31:23.425919 vminfo Session 1: PID=9880 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:23.425919 vminfo Session 1: PID=9944 (fInt=true ): C:\Windows\System32\dllhost.exe 09:31:23.425919 vminfo Session 1: PID=8128 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17112.19011.0_x64__8wekyb3d8bbwe\Video.UI.exe 09:31:23.425919 vminfo Session 1: PID=9528 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:23.425919 vminfo Session 1: PID=10292 (fInt=true ): C:\Program Files\Windows Defender\MSASCuiL.exe 09:31:23.425919 vminfo Session 1: PID=10324 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:23.425919 vminfo Session 1: PID=10440 (fInt=true ): C:\Windows\System32\VBoxTray.exe 09:31:23.425919 vminfo Session 1: PID=10596 (fInt=true ): C:\Users\user\Documents\Visual Studio 2017\Projects\vboxtray_mon\vboxtray_mon\bin\Release\vboxtray_mon.exe 09:31:23.425919 vminfo Session 1: PID=10612 (fInt=true ): C:\Windows\System32\conhost.exe 09:31:23.425919 vminfo Session 1: PID=10720 (fInt=true ): C:\Program Files (x86)\FileZilla Server\FileZilla Server Interface.exe 09:31:23.425919 vminfo Session 1: PID=9808 (fInt=true ): C:\Windows\System32\svchost.exe 09:31:23.425919 vminfo Session 1: PID=6716 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18011.15918.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe 09:31:23.425919 vminfo Session 1: PID=6688 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:23.425919 vminfo Session 1: PID=10200 (fInt=true ): C:\Windows\System32\ApplicationFrameHost.exe 09:31:23.425919 vminfo Session 1: PID=4868 (fInt=true ): C:\Windows\ImmersiveControlPanel\SystemSettings.exe 09:31:23.425919 vminfo Session 1: PID=1444 (fInt=true ): C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe 09:31:23.425919 vminfo Session 1: PID=9504 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:23.425919 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/Session/1' = '#12149: cSessionProcs=31 (of 155 procs total)' 09:31:23.425919 vminfo Adding new user=user (session=1) with 31 processes 09:31:23.425919 vminfo Handling session 7 (of 17) 09:31:23.425919 vminfo Session data: Name=nx, SessionID=0, LogonID=0,685607, LogonType=3 09:31:23.425919 vminfo Handling session 8 (of 17) 09:31:23.425919 vminfo Session data: Name=ANONYMOUS LOGON, SessionID=0, LogonID=0,649881, LogonType=3 09:31:23.425919 vminfo Handling session 9 (of 17) 09:31:23.425919 vminfo Session data: Name=IUSR, SessionID=0, LogonID=0,995, LogonType=5 09:31:23.425919 vminfo Handling session 10 (of 17) 09:31:23.425919 vminfo Session data: Name=DWM-1, SessionID=1, LogonID=0,61006, LogonType=2 09:31:23.425919 vminfo Session LogonType=2 is supported -- looking up SID + type ... 09:31:23.425919 vminfo SID owner type=5 not handled, skipping 09:31:23.425919 vminfo Account User=DWM-1 is not logged in 09:31:23.425919 vminfo Handling session 11 (of 17) 09:31:23.425919 vminfo Session data: Name=DWM-1, SessionID=1, LogonID=0,60973, LogonType=2 09:31:23.425919 vminfo Session LogonType=2 is supported -- looking up SID + type ... 09:31:23.425919 vminfo SID owner type=5 not handled, skipping 09:31:23.425919 vminfo Account User=DWM-1 is not logged in 09:31:23.425919 vminfo Handling session 12 (of 17) 09:31:23.425919 vminfo Session data: Name=MACHINE$, SessionID=0, LogonID=0,996, LogonType=5 09:31:23.425919 vminfo Handling session 13 (of 17) 09:31:23.425919 vminfo Session data: Name=LOCAL SERVICE, SessionID=0, LogonID=0,997, LogonType=5 09:31:23.425919 vminfo Handling session 14 (of 17) 09:31:23.425919 vminfo Session data: Name=UMFD-1, SessionID=1, LogonID=0,34521, LogonType=2 09:31:23.425919 vminfo Session LogonType=2 is supported -- looking up SID + type ... 09:31:23.425919 vminfo SID owner type=5 not handled, skipping 09:31:23.425919 vminfo Account User=UMFD-1 is not logged in 09:31:23.425919 vminfo Handling session 15 (of 17) 09:31:23.425919 vminfo Session data: Name=UMFD-0, SessionID=0, LogonID=0,34482, LogonType=2 09:31:23.425919 vminfo Handling session 16 (of 17) 09:31:23.425919 vminfo Session data: Name=, SessionID=0, LogonID=0,32336, LogonType=0 09:31:23.425919 vminfo Handling session 17 (of 17) 09:31:23.425919 vminfo Session data: Name=MACHINE$, SessionID=0, LogonID=0,999, LogonType=0 09:31:23.425919 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA' = '#12149: cSessions=17, cProcs=155, cUniqueUsers=2' 09:31:23.425919 vminfo Found 2 unique logged-in user(s) 09:31:23.425919 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/User/0' = '#12149: szName=user, sessionID=1, cProcs=31' 09:31:23.425919 vminfo User 'user' has 31 interactive processes (session=1) 09:31:23.425919 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/User/user@DOMAIN/UsageState' resulted in rc=VINF_NO_CHANGE 09:31:23.425919 vminfo User 'user' (domain 'DOMAIN') is idle for 60458, fReportToHost=false 09:31:23.425919 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/User/1' = '#12149: szName=user, sessionID=1, cProcs=31' 09:31:23.425919 vminfo User 'user' has 31 interactive processes (session=1) 09:31:23.425919 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/User/user@DOMAIN/UsageState' resulted in rc=VINF_NO_CHANGE 09:31:23.425919 vminfo User 'user' (domain 'DOMAIN') is idle for 60458, fReportToHost=false 09:31:23.425919 vminfo cUsersInList=2, pszUserList=user,user, rc=VINF_NO_CHANGE 09:31:23.425919 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/LoggedInUsersList' resulted in rc=VINF_NO_CHANGE 09:31:23.425919 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/LoggedInUsers' resulted in rc=VINF_NO_CHANGE 09:31:23.425919 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/NoLoggedInUsers' resulted in rc=VINF_NO_CHANGE 09:31:23.425919 vminfo Writing users returned with rc=VINF_NO_CHANGE 09:31:23.441568 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/IP' resulted in rc=VINF_NO_CHANGE 09:31:23.441568 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/Broadcast' resulted in rc=VINF_NO_CHANGE 09:31:23.441568 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/Netmask' resulted in rc=VINF_NO_CHANGE 09:31:23.441568 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/Status' resulted in rc=VINF_NO_CHANGE 09:31:23.441568 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/MAC' resulted in rc=VINF_NO_CHANGE 09:31:23.441568 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/IP' resulted in rc=VINF_NO_CHANGE 09:31:23.441568 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/Broadcast' resulted in rc=VINF_NO_CHANGE 09:31:23.441568 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/Netmask' resulted in rc=VINF_NO_CHANGE 09:31:23.441568 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/Status' resulted in rc=VINF_NO_CHANGE 09:31:23.441568 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/MAC' resulted in rc=VINF_NO_CHANGE 09:31:23.441568 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/IP' resulted in rc=VINF_NO_CHANGE 09:31:23.441568 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/Broadcast' resulted in rc=VINF_NO_CHANGE 09:31:23.441568 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/Netmask' resulted in rc=VINF_NO_CHANGE 09:31:23.441568 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/Status' resulted in rc=VINF_NO_CHANGE 09:31:23.441568 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/MAC' resulted in rc=VINF_NO_CHANGE 09:31:23.441568 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/IP' resulted in rc=VINF_NO_CHANGE 09:31:23.441568 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/Broadcast' resulted in rc=VINF_NO_CHANGE 09:31:23.441568 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/Netmask' resulted in rc=VINF_NO_CHANGE 09:31:23.441568 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/Status' resulted in rc=VINF_NO_CHANGE 09:31:23.441568 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/MAC' resulted in rc=VINF_NO_CHANGE 09:31:23.441568 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/IP' resulted in rc=VINF_NO_CHANGE 09:31:23.441568 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/Broadcast' resulted in rc=VINF_NO_CHANGE 09:31:23.441568 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/Netmask' resulted in rc=VINF_NO_CHANGE 09:31:23.441568 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/Status' resulted in rc=VINF_NO_CHANGE 09:31:23.441568 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/MAC' resulted in rc=VINF_NO_CHANGE 09:31:23.441568 vminfo [PropCache 00007ff6b2962520]: Written '/VirtualBox/GuestInfo/Net/Count'='5' (flags: 6), rc=VINF_SUCCESS 09:31:23.441568 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/Count' resulted in rc=VINF_SUCCESS 09:31:23.441568 vminfo Guest Property: /VirtualBox/HostInfo/VRDP/ActiveClient not found 09:31:23.441568 vminfo VRDP: Handling location awareness done 09:31:26.128332 timesync vgsvcTimeSyncWorker: Host: 2019-02-26T09:31:26.004000000Z (MinAdjust: 200 ms), Guest: 2019-02-26T09:31:26.128332500Z => -124 332 500 ns drift 09:31:28.459550 vminfo Found 17 sessions 09:31:28.474800 vminfo Error: Get token class 'user' for process 0 failed, rc=VERR_INVALID_PARAMETER 09:31:28.474800 vminfo Error: Get token class 'groups' for process 0 failed, rc=VERR_INVALID_PARAMETER 09:31:28.474800 vminfo Error: Get token class 'statistics' for process 0 failed, rc=VERR_INVALID_PARAMETER 09:31:28.474800 vminfo Error: Get token class 'user' for process 4 failed, rc=VERR_ACCESS_DENIED 09:31:28.474800 vminfo Error: Get token class 'groups' for process 4 failed, rc=VERR_ACCESS_DENIED 09:31:28.474800 vminfo Error: Get token class 'statistics' for process 4 failed, rc=VERR_ACCESS_DENIED 09:31:28.474800 vminfo Error: Get token class 'user' for process 104 failed, rc=VERR_ACCESS_DENIED 09:31:28.474800 vminfo Error: Get token class 'groups' for process 104 failed, rc=VERR_ACCESS_DENIED 09:31:28.474800 vminfo Error: Get token class 'statistics' for process 104 failed, rc=VERR_ACCESS_DENIED 09:31:28.474800 vminfo Error: Get token class 'user' for process 472 failed, rc=VERR_ACCESS_DENIED 09:31:28.474800 vminfo Error: Get token class 'groups' for process 472 failed, rc=VERR_ACCESS_DENIED 09:31:28.474800 vminfo Error: Get token class 'statistics' for process 472 failed, rc=VERR_ACCESS_DENIED 09:31:28.474800 vminfo Error: Get token class 'user' for process 676 failed, rc=VERR_ACCESS_DENIED 09:31:28.474800 vminfo Error: Get token class 'groups' for process 676 failed, rc=VERR_ACCESS_DENIED 09:31:28.474800 vminfo Error: Get token class 'statistics' for process 676 failed, rc=VERR_ACCESS_DENIED 09:31:28.474800 vminfo Error: Get token class 'user' for process 756 failed, rc=VERR_ACCESS_DENIED 09:31:28.474800 vminfo Error: Get token class 'groups' for process 756 failed, rc=VERR_ACCESS_DENIED 09:31:28.474800 vminfo Error: Get token class 'statistics' for process 756 failed, rc=VERR_ACCESS_DENIED 09:31:28.474800 vminfo Error: Get token class 'user' for process 768 failed, rc=VERR_ACCESS_DENIED 09:31:28.474800 vminfo Error: Get token class 'groups' for process 768 failed, rc=VERR_ACCESS_DENIED 09:31:28.474800 vminfo Error: Get token class 'statistics' for process 768 failed, rc=VERR_ACCESS_DENIED 09:31:28.474800 vminfo Error: Get token class 'user' for process 876 failed, rc=VERR_ACCESS_DENIED 09:31:28.474800 vminfo Error: Get token class 'groups' for process 876 failed, rc=VERR_ACCESS_DENIED 09:31:28.474800 vminfo Error: Get token class 'statistics' for process 876 failed, rc=VERR_ACCESS_DENIED 09:31:28.474800 vminfo Error: Get token class 'user' for process 2532 failed, rc=VERR_ACCESS_DENIED 09:31:28.474800 vminfo Error: Get token class 'groups' for process 2532 failed, rc=VERR_ACCESS_DENIED 09:31:28.474800 vminfo Error: Get token class 'statistics' for process 2532 failed, rc=VERR_ACCESS_DENIED 09:31:28.474800 vminfo Error: Get token class 'user' for process 4136 failed, rc=VERR_ACCESS_DENIED 09:31:28.474800 vminfo Error: Get token class 'groups' for process 4136 failed, rc=VERR_ACCESS_DENIED 09:31:28.474800 vminfo Error: Get token class 'statistics' for process 4136 failed, rc=VERR_ACCESS_DENIED 09:31:28.474800 vminfo Error: Get token class 'user' for process 5212 failed, rc=VERR_ACCESS_DENIED 09:31:28.474800 vminfo Error: Get token class 'groups' for process 5212 failed, rc=VERR_ACCESS_DENIED 09:31:28.474800 vminfo Error: Get token class 'statistics' for process 5212 failed, rc=VERR_ACCESS_DENIED 09:31:28.474800 vminfo Handling session 1 (of 17) 09:31:28.492736 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2145999, LogonType=3 09:31:28.492736 vminfo Handling session 2 (of 17) 09:31:28.492736 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2113823, LogonType=3 09:31:28.492736 vminfo Handling session 3 (of 17) 09:31:28.492736 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2041868, LogonType=3 09:31:28.492736 vminfo Handling session 4 (of 17) 09:31:28.492736 vminfo Session data: Name=nx, SessionID=0, LogonID=0,1997776, LogonType=3 09:31:28.492736 vminfo Handling session 5 (of 17) 09:31:28.509971 vminfo Session data: Name=user, SessionID=1, LogonID=0,1970648, LogonType=2 09:31:28.509971 vminfo Session LogonType=2 is supported -- looking up SID + type ... 09:31:28.509971 vminfo Account User=user, Session=1, LogonID=0,1970648, AuthPkg=Negotiate, Domain=DOMAIN 09:31:28.509971 vminfo Account User=user, WTSConnectState=0 (4) 09:31:28.509971 vminfo Account User=user using TCS/RDP, state=0 09:31:28.509971 vminfo Account User=user is logged in 09:31:28.509971 vminfo Handling user=user, domain=DOMAIN, package=Negotiate, session=1 09:31:28.509971 vminfo Session 1: PID=6784 (fInt=true ): C:\Windows\System32\svchost.exe 09:31:28.509971 vminfo Session 1: PID=264 (fInt=true ): C:\Windows\System32\sihost.exe 09:31:28.509971 vminfo Session 1: PID=3148 (fInt=true ): C:\Windows\System32\svchost.exe 09:31:28.509971 vminfo Session 1: PID=7176 (fInt=true ): C:\Windows\System32\taskhostw.exe 09:31:28.509971 vminfo Session 1: PID=7268 (fInt=true ): C:\Windows\System32\ctfmon.exe 09:31:28.509971 vminfo Session 1: PID=8732 (fInt=true ): C:\Windows\explorer.exe 09:31:28.509971 vminfo Session 1: PID=9016 (fInt=true ): C:\Program Files (x86)\NoMachine\bin\nxclient.bin 09:31:28.509971 vminfo Session 1: PID=8260 (fInt=true ): C:\Program Files\McAfee\Agent\x86\UpdaterUI.exe 09:31:28.509971 vminfo Session 1: PID=8828 (fInt=true ): C:\Program Files\Classic Shell\ClassicStartMenu.exe 09:31:28.509971 vminfo Session 1: PID=8488 (fInt=true ): C:\Program Files\McAfee\Agent\x86\mctray.exe 09:31:28.509971 vminfo Session 1: PID=9172 (fInt=true ): C:\Program Files\TortoiseSVN\bin\TSVNCache.exe 09:31:28.509971 vminfo Session 1: PID=9280 (fInt=true ): C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe 09:31:28.509971 vminfo Session 1: PID=9652 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:28.509971 vminfo Session 1: PID=9728 (fInt=true ): C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe 09:31:28.509971 vminfo Session 1: PID=9880 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:28.509971 vminfo Session 1: PID=9944 (fInt=true ): C:\Windows\System32\dllhost.exe 09:31:28.509971 vminfo Session 1: PID=8128 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17112.19011.0_x64__8wekyb3d8bbwe\Video.UI.exe 09:31:28.509971 vminfo Session 1: PID=9528 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:28.509971 vminfo Session 1: PID=10292 (fInt=true ): C:\Program Files\Windows Defender\MSASCuiL.exe 09:31:28.527837 vminfo Session 1: PID=10324 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:28.527837 vminfo Session 1: PID=10440 (fInt=true ): C:\Windows\System32\VBoxTray.exe 09:31:28.527837 vminfo Session 1: PID=10596 (fInt=true ): C:\Users\user\Documents\Visual Studio 2017\Projects\vboxtray_mon\vboxtray_mon\bin\Release\vboxtray_mon.exe 09:31:28.527837 vminfo Session 1: PID=10612 (fInt=true ): C:\Windows\System32\conhost.exe 09:31:28.527837 vminfo Session 1: PID=10720 (fInt=true ): C:\Program Files (x86)\FileZilla Server\FileZilla Server Interface.exe 09:31:28.527837 vminfo Session 1: PID=9808 (fInt=true ): C:\Windows\System32\svchost.exe 09:31:28.527837 vminfo Session 1: PID=6716 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18011.15918.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe 09:31:28.527837 vminfo Session 1: PID=6688 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:28.527837 vminfo Session 1: PID=10200 (fInt=true ): C:\Windows\System32\ApplicationFrameHost.exe 09:31:28.527837 vminfo Session 1: PID=4868 (fInt=true ): C:\Windows\ImmersiveControlPanel\SystemSettings.exe 09:31:28.527837 vminfo Session 1: PID=1444 (fInt=true ): C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe 09:31:28.527837 vminfo Session 1: PID=9504 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:28.527837 vminfo Session 1: PID=5596 (fInt=true ): C:\Windows\System32\backgroundTaskHost.exe 09:31:28.527837 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/Session/1' = '#12150: cSessionProcs=32 (of 156 procs total)' 09:31:28.527837 vminfo Adding new user=user (session=1) with 32 processes 09:31:28.527837 vminfo Handling session 6 (of 17) 09:31:28.527837 vminfo Session data: Name=user, SessionID=1, LogonID=0,1970599, LogonType=2 09:31:28.527837 vminfo Session LogonType=2 is supported -- looking up SID + type ... 09:31:28.527837 vminfo Account User=user, Session=1, LogonID=0,1970599, AuthPkg=Kerberos, Domain=DOMAIN 09:31:28.527837 vminfo Account User=user, WTSConnectState=0 (4) 09:31:28.527837 vminfo Account User=user using TCS/RDP, state=0 09:31:28.527837 vminfo Account User=user is logged in 09:31:28.527837 vminfo Handling user=user, domain=DOMAIN, package=Kerberos, session=1 09:31:28.527837 vminfo Session 1: PID=6784 (fInt=true ): C:\Windows\System32\svchost.exe 09:31:28.527837 vminfo Session 1: PID=264 (fInt=true ): C:\Windows\System32\sihost.exe 09:31:28.527837 vminfo Session 1: PID=3148 (fInt=true ): C:\Windows\System32\svchost.exe 09:31:28.527837 vminfo Session 1: PID=7176 (fInt=true ): C:\Windows\System32\taskhostw.exe 09:31:28.527837 vminfo Session 1: PID=7268 (fInt=true ): C:\Windows\System32\ctfmon.exe 09:31:28.527837 vminfo Session 1: PID=8732 (fInt=true ): C:\Windows\explorer.exe 09:31:28.527837 vminfo Session 1: PID=9016 (fInt=true ): C:\Program Files (x86)\NoMachine\bin\nxclient.bin 09:31:28.527837 vminfo Session 1: PID=8260 (fInt=true ): C:\Program Files\McAfee\Agent\x86\UpdaterUI.exe 09:31:28.527837 vminfo Session 1: PID=8828 (fInt=true ): C:\Program Files\Classic Shell\ClassicStartMenu.exe 09:31:28.527837 vminfo Session 1: PID=8488 (fInt=true ): C:\Program Files\McAfee\Agent\x86\mctray.exe 09:31:28.527837 vminfo Session 1: PID=9172 (fInt=true ): C:\Program Files\TortoiseSVN\bin\TSVNCache.exe 09:31:28.527837 vminfo Session 1: PID=9280 (fInt=true ): C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe 09:31:28.527837 vminfo Session 1: PID=9652 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:28.527837 vminfo Session 1: PID=9728 (fInt=true ): C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe 09:31:28.527837 vminfo Session 1: PID=9880 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:28.527837 vminfo Session 1: PID=9944 (fInt=true ): C:\Windows\System32\dllhost.exe 09:31:28.527837 vminfo Session 1: PID=8128 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17112.19011.0_x64__8wekyb3d8bbwe\Video.UI.exe 09:31:28.527837 vminfo Session 1: PID=9528 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:28.527837 vminfo Session 1: PID=10292 (fInt=true ): C:\Program Files\Windows Defender\MSASCuiL.exe 09:31:28.527837 vminfo Session 1: PID=10324 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:28.527837 vminfo Session 1: PID=10440 (fInt=true ): C:\Windows\System32\VBoxTray.exe 09:31:28.527837 vminfo Session 1: PID=10596 (fInt=true ): C:\Users\user\Documents\Visual Studio 2017\Projects\vboxtray_mon\vboxtray_mon\bin\Release\vboxtray_mon.exe 09:31:28.527837 vminfo Session 1: PID=10612 (fInt=true ): C:\Windows\System32\conhost.exe 09:31:28.527837 vminfo Session 1: PID=10720 (fInt=true ): C:\Program Files (x86)\FileZilla Server\FileZilla Server Interface.exe 09:31:28.527837 vminfo Session 1: PID=9808 (fInt=true ): C:\Windows\System32\svchost.exe 09:31:28.527837 vminfo Session 1: PID=6716 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18011.15918.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe 09:31:28.527837 vminfo Session 1: PID=6688 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:28.527837 vminfo Session 1: PID=10200 (fInt=true ): C:\Windows\System32\ApplicationFrameHost.exe 09:31:28.527837 vminfo Session 1: PID=4868 (fInt=true ): C:\Windows\ImmersiveControlPanel\SystemSettings.exe 09:31:28.527837 vminfo Session 1: PID=1444 (fInt=true ): C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe 09:31:28.527837 vminfo Session 1: PID=9504 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:28.527837 vminfo Session 1: PID=5596 (fInt=true ): C:\Windows\System32\backgroundTaskHost.exe 09:31:28.527837 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/Session/1' = '#12150: cSessionProcs=32 (of 156 procs total)' 09:31:28.527837 vminfo Adding new user=user (session=1) with 32 processes 09:31:28.527837 vminfo Handling session 7 (of 17) 09:31:28.527837 vminfo Session data: Name=nx, SessionID=0, LogonID=0,685607, LogonType=3 09:31:28.527837 vminfo Handling session 8 (of 17) 09:31:28.527837 vminfo Session data: Name=ANONYMOUS LOGON, SessionID=0, LogonID=0,649881, LogonType=3 09:31:28.527837 vminfo Handling session 9 (of 17) 09:31:28.527837 vminfo Session data: Name=IUSR, SessionID=0, LogonID=0,995, LogonType=5 09:31:28.527837 vminfo Handling session 10 (of 17) 09:31:28.527837 vminfo Session data: Name=DWM-1, SessionID=1, LogonID=0,61006, LogonType=2 09:31:28.527837 vminfo Session LogonType=2 is supported -- looking up SID + type ... 09:31:28.527837 vminfo SID owner type=5 not handled, skipping 09:31:28.547514 vminfo Account User=DWM-1 is not logged in 09:31:28.547514 vminfo Handling session 11 (of 17) 09:31:28.547514 vminfo Session data: Name=DWM-1, SessionID=1, LogonID=0,60973, LogonType=2 09:31:28.547514 vminfo Session LogonType=2 is supported -- looking up SID + type ... 09:31:28.547514 vminfo SID owner type=5 not handled, skipping 09:31:28.547514 vminfo Account User=DWM-1 is not logged in 09:31:28.547514 vminfo Handling session 12 (of 17) 09:31:28.547514 vminfo Session data: Name=MACHINE$, SessionID=0, LogonID=0,996, LogonType=5 09:31:28.547514 vminfo Handling session 13 (of 17) 09:31:28.547514 vminfo Session data: Name=LOCAL SERVICE, SessionID=0, LogonID=0,997, LogonType=5 09:31:28.547514 vminfo Handling session 14 (of 17) 09:31:28.547514 vminfo Session data: Name=UMFD-1, SessionID=1, LogonID=0,34521, LogonType=2 09:31:28.547514 vminfo Session LogonType=2 is supported -- looking up SID + type ... 09:31:28.547514 vminfo SID owner type=5 not handled, skipping 09:31:28.547514 vminfo Account User=UMFD-1 is not logged in 09:31:28.547514 vminfo Handling session 15 (of 17) 09:31:28.547514 vminfo Session data: Name=UMFD-0, SessionID=0, LogonID=0,34482, LogonType=2 09:31:28.547514 vminfo Handling session 16 (of 17) 09:31:28.563021 vminfo Session data: Name=, SessionID=0, LogonID=0,32336, LogonType=0 09:31:28.563021 vminfo Handling session 17 (of 17) 09:31:28.563021 vminfo Session data: Name=MACHINE$, SessionID=0, LogonID=0,999, LogonType=0 09:31:28.563021 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA' = '#12150: cSessions=17, cProcs=156, cUniqueUsers=2' 09:31:28.563021 vminfo Found 2 unique logged-in user(s) 09:31:28.563021 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/User/0' = '#12150: szName=user, sessionID=1, cProcs=32' 09:31:28.563021 vminfo User 'user' has 32 interactive processes (session=1) 09:31:28.563021 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/User/user@DOMAIN/UsageState' resulted in rc=VINF_NO_CHANGE 09:31:28.563021 vminfo User 'user' (domain 'DOMAIN') is idle for 60463, fReportToHost=false 09:31:28.563021 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/User/1' = '#12150: szName=user, sessionID=1, cProcs=32' 09:31:28.563021 vminfo User 'user' has 32 interactive processes (session=1) 09:31:28.563021 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/User/user@DOMAIN/UsageState' resulted in rc=VINF_NO_CHANGE 09:31:28.563021 vminfo User 'user' (domain 'DOMAIN') is idle for 60463, fReportToHost=false 09:31:28.563021 vminfo cUsersInList=2, pszUserList=user,user, rc=VINF_NO_CHANGE 09:31:28.563021 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/LoggedInUsersList' resulted in rc=VINF_NO_CHANGE 09:31:28.563021 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/LoggedInUsers' resulted in rc=VINF_NO_CHANGE 09:31:28.563021 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/NoLoggedInUsers' resulted in rc=VINF_NO_CHANGE 09:31:28.563021 vminfo Writing users returned with rc=VINF_NO_CHANGE 09:31:28.580423 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/IP' resulted in rc=VINF_NO_CHANGE 09:31:28.580423 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/Broadcast' resulted in rc=VINF_NO_CHANGE 09:31:28.580423 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/Netmask' resulted in rc=VINF_NO_CHANGE 09:31:28.580423 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/Status' resulted in rc=VINF_NO_CHANGE 09:31:28.580423 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/MAC' resulted in rc=VINF_NO_CHANGE 09:31:28.580423 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/IP' resulted in rc=VINF_NO_CHANGE 09:31:28.580423 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/Broadcast' resulted in rc=VINF_NO_CHANGE 09:31:28.580423 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/Netmask' resulted in rc=VINF_NO_CHANGE 09:31:28.580423 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/Status' resulted in rc=VINF_NO_CHANGE 09:31:28.580423 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/MAC' resulted in rc=VINF_NO_CHANGE 09:31:28.580423 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/IP' resulted in rc=VINF_NO_CHANGE 09:31:28.580423 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/Broadcast' resulted in rc=VINF_NO_CHANGE 09:31:28.580423 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/Netmask' resulted in rc=VINF_NO_CHANGE 09:31:28.580423 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/Status' resulted in rc=VINF_NO_CHANGE 09:31:28.580423 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/MAC' resulted in rc=VINF_NO_CHANGE 09:31:28.580423 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/IP' resulted in rc=VINF_NO_CHANGE 09:31:28.580423 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/Broadcast' resulted in rc=VINF_NO_CHANGE 09:31:28.580423 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/Netmask' resulted in rc=VINF_NO_CHANGE 09:31:28.580423 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/Status' resulted in rc=VINF_NO_CHANGE 09:31:28.580423 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/MAC' resulted in rc=VINF_NO_CHANGE 09:31:28.580423 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/IP' resulted in rc=VINF_NO_CHANGE 09:31:28.580423 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/Broadcast' resulted in rc=VINF_NO_CHANGE 09:31:28.580423 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/Netmask' resulted in rc=VINF_NO_CHANGE 09:31:28.580423 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/Status' resulted in rc=VINF_NO_CHANGE 09:31:28.580423 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/MAC' resulted in rc=VINF_NO_CHANGE 09:31:28.580423 vminfo [PropCache 00007ff6b2962520]: Written '/VirtualBox/GuestInfo/Net/Count'='5' (flags: 6), rc=VINF_SUCCESS 09:31:28.580423 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/Count' resulted in rc=VINF_SUCCESS 09:31:28.580423 vminfo Guest Property: /VirtualBox/HostInfo/VRDP/ActiveClient not found 09:31:28.580423 vminfo VRDP: Handling location awareness done 09:31:30.247984 pagesharing vgsvcPageSharingWorkerProcess: enabled=0 09:31:33.608306 vminfo Found 17 sessions 09:31:33.608306 vminfo Error: Get token class 'user' for process 0 failed, rc=VERR_INVALID_PARAMETER 09:31:33.608306 vminfo Error: Get token class 'groups' for process 0 failed, rc=VERR_INVALID_PARAMETER 09:31:33.608306 vminfo Error: Get token class 'statistics' for process 0 failed, rc=VERR_INVALID_PARAMETER 09:31:33.608306 vminfo Error: Get token class 'user' for process 4 failed, rc=VERR_ACCESS_DENIED 09:31:33.608306 vminfo Error: Get token class 'groups' for process 4 failed, rc=VERR_ACCESS_DENIED 09:31:33.608306 vminfo Error: Get token class 'statistics' for process 4 failed, rc=VERR_ACCESS_DENIED 09:31:33.608306 vminfo Error: Get token class 'user' for process 104 failed, rc=VERR_ACCESS_DENIED 09:31:33.608306 vminfo Error: Get token class 'groups' for process 104 failed, rc=VERR_ACCESS_DENIED 09:31:33.608306 vminfo Error: Get token class 'statistics' for process 104 failed, rc=VERR_ACCESS_DENIED 09:31:33.608306 vminfo Error: Get token class 'user' for process 472 failed, rc=VERR_ACCESS_DENIED 09:31:33.608306 vminfo Error: Get token class 'groups' for process 472 failed, rc=VERR_ACCESS_DENIED 09:31:33.608306 vminfo Error: Get token class 'statistics' for process 472 failed, rc=VERR_ACCESS_DENIED 09:31:33.608306 vminfo Error: Get token class 'user' for process 676 failed, rc=VERR_ACCESS_DENIED 09:31:33.608306 vminfo Error: Get token class 'groups' for process 676 failed, rc=VERR_ACCESS_DENIED 09:31:33.608306 vminfo Error: Get token class 'statistics' for process 676 failed, rc=VERR_ACCESS_DENIED 09:31:33.608306 vminfo Error: Get token class 'user' for process 756 failed, rc=VERR_ACCESS_DENIED 09:31:33.608306 vminfo Error: Get token class 'groups' for process 756 failed, rc=VERR_ACCESS_DENIED 09:31:33.608306 vminfo Error: Get token class 'statistics' for process 756 failed, rc=VERR_ACCESS_DENIED 09:31:33.608306 vminfo Error: Get token class 'user' for process 768 failed, rc=VERR_ACCESS_DENIED 09:31:33.608306 vminfo Error: Get token class 'groups' for process 768 failed, rc=VERR_ACCESS_DENIED 09:31:33.608306 vminfo Error: Get token class 'statistics' for process 768 failed, rc=VERR_ACCESS_DENIED 09:31:33.608306 vminfo Error: Get token class 'user' for process 876 failed, rc=VERR_ACCESS_DENIED 09:31:33.608306 vminfo Error: Get token class 'groups' for process 876 failed, rc=VERR_ACCESS_DENIED 09:31:33.608306 vminfo Error: Get token class 'statistics' for process 876 failed, rc=VERR_ACCESS_DENIED 09:31:33.608306 vminfo Error: Get token class 'user' for process 2532 failed, rc=VERR_ACCESS_DENIED 09:31:33.608306 vminfo Error: Get token class 'groups' for process 2532 failed, rc=VERR_ACCESS_DENIED 09:31:33.608306 vminfo Error: Get token class 'statistics' for process 2532 failed, rc=VERR_ACCESS_DENIED 09:31:33.608306 vminfo Error: Get token class 'user' for process 4136 failed, rc=VERR_ACCESS_DENIED 09:31:33.608306 vminfo Error: Get token class 'groups' for process 4136 failed, rc=VERR_ACCESS_DENIED 09:31:33.608306 vminfo Error: Get token class 'statistics' for process 4136 failed, rc=VERR_ACCESS_DENIED 09:31:33.608306 vminfo Error: Get token class 'user' for process 5212 failed, rc=VERR_ACCESS_DENIED 09:31:33.608306 vminfo Error: Get token class 'groups' for process 5212 failed, rc=VERR_ACCESS_DENIED 09:31:33.608306 vminfo Error: Get token class 'statistics' for process 5212 failed, rc=VERR_ACCESS_DENIED 09:31:33.608306 vminfo Handling session 1 (of 17) 09:31:33.608306 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2145999, LogonType=3 09:31:33.608306 vminfo Handling session 2 (of 17) 09:31:33.608306 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2113823, LogonType=3 09:31:33.608306 vminfo Handling session 3 (of 17) 09:31:33.608306 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2041868, LogonType=3 09:31:33.608306 vminfo Handling session 4 (of 17) 09:31:33.608306 vminfo Session data: Name=nx, SessionID=0, LogonID=0,1997776, LogonType=3 09:31:33.608306 vminfo Handling session 5 (of 17) 09:31:33.608306 vminfo Session data: Name=user, SessionID=1, LogonID=0,1970648, LogonType=2 09:31:33.608306 vminfo Session LogonType=2 is supported -- looking up SID + type ... 09:31:33.608306 vminfo Account User=user, Session=1, LogonID=0,1970648, AuthPkg=Negotiate, Domain=DOMAIN 09:31:33.623180 vminfo Account User=user, WTSConnectState=0 (4) 09:31:33.623180 vminfo Account User=user using TCS/RDP, state=0 09:31:33.623180 vminfo Account User=user is logged in 09:31:33.623180 vminfo Handling user=user, domain=DOMAIN, package=Negotiate, session=1 09:31:33.623180 vminfo Session 1: PID=6784 (fInt=true ): C:\Windows\System32\svchost.exe 09:31:33.623180 vminfo Session 1: PID=264 (fInt=true ): C:\Windows\System32\sihost.exe 09:31:33.623180 vminfo Session 1: PID=3148 (fInt=true ): C:\Windows\System32\svchost.exe 09:31:33.623180 vminfo Session 1: PID=7176 (fInt=true ): C:\Windows\System32\taskhostw.exe 09:31:33.623180 vminfo Session 1: PID=7268 (fInt=true ): C:\Windows\System32\ctfmon.exe 09:31:33.623180 vminfo Session 1: PID=8732 (fInt=true ): C:\Windows\explorer.exe 09:31:33.623180 vminfo Session 1: PID=9016 (fInt=true ): C:\Program Files (x86)\NoMachine\bin\nxclient.bin 09:31:33.623180 vminfo Session 1: PID=8260 (fInt=true ): C:\Program Files\McAfee\Agent\x86\UpdaterUI.exe 09:31:33.623180 vminfo Session 1: PID=8828 (fInt=true ): C:\Program Files\Classic Shell\ClassicStartMenu.exe 09:31:33.623180 vminfo Session 1: PID=8488 (fInt=true ): C:\Program Files\McAfee\Agent\x86\mctray.exe 09:31:33.623180 vminfo Session 1: PID=9172 (fInt=true ): C:\Program Files\TortoiseSVN\bin\TSVNCache.exe 09:31:33.623180 vminfo Session 1: PID=9280 (fInt=true ): C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe 09:31:33.623180 vminfo Session 1: PID=9652 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:33.623180 vminfo Session 1: PID=9728 (fInt=true ): C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe 09:31:33.623180 vminfo Session 1: PID=9880 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:33.623180 vminfo Session 1: PID=9944 (fInt=true ): C:\Windows\System32\dllhost.exe 09:31:33.623180 vminfo Session 1: PID=8128 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17112.19011.0_x64__8wekyb3d8bbwe\Video.UI.exe 09:31:33.623180 vminfo Session 1: PID=9528 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:33.623180 vminfo Session 1: PID=10292 (fInt=true ): C:\Program Files\Windows Defender\MSASCuiL.exe 09:31:33.623180 vminfo Session 1: PID=10324 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:33.623180 vminfo Session 1: PID=10440 (fInt=true ): C:\Windows\System32\VBoxTray.exe 09:31:33.623180 vminfo Session 1: PID=10596 (fInt=true ): C:\Users\user\Documents\Visual Studio 2017\Projects\vboxtray_mon\vboxtray_mon\bin\Release\vboxtray_mon.exe 09:31:33.623180 vminfo Session 1: PID=10612 (fInt=true ): C:\Windows\System32\conhost.exe 09:31:33.623180 vminfo Session 1: PID=10720 (fInt=true ): C:\Program Files (x86)\FileZilla Server\FileZilla Server Interface.exe 09:31:33.623180 vminfo Session 1: PID=9808 (fInt=true ): C:\Windows\System32\svchost.exe 09:31:33.623180 vminfo Session 1: PID=6716 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18011.15918.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe 09:31:33.623180 vminfo Session 1: PID=6688 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:33.623180 vminfo Session 1: PID=10200 (fInt=true ): C:\Windows\System32\ApplicationFrameHost.exe 09:31:33.623180 vminfo Session 1: PID=4868 (fInt=true ): C:\Windows\ImmersiveControlPanel\SystemSettings.exe 09:31:33.623180 vminfo Session 1: PID=1444 (fInt=true ): C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe 09:31:33.623180 vminfo Session 1: PID=9504 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:33.623180 vminfo Session 1: PID=5596 (fInt=true ): C:\Windows\System32\backgroundTaskHost.exe 09:31:33.623180 vminfo Session 1: PID=10840 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:33.623180 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/Session/1' = '#12151: cSessionProcs=33 (of 157 procs total)' 09:31:33.623180 vminfo Adding new user=user (session=1) with 33 processes 09:31:33.623180 vminfo Handling session 6 (of 17) 09:31:33.623180 vminfo Session data: Name=user, SessionID=1, LogonID=0,1970599, LogonType=2 09:31:33.623180 vminfo Session LogonType=2 is supported -- looking up SID + type ... 09:31:33.623180 vminfo Account User=user, Session=1, LogonID=0,1970599, AuthPkg=Kerberos, Domain=DOMAIN 09:31:33.623180 vminfo Account User=user, WTSConnectState=0 (4) 09:31:33.623180 vminfo Account User=user using TCS/RDP, state=0 09:31:33.623180 vminfo Account User=user is logged in 09:31:33.623180 vminfo Handling user=user, domain=DOMAIN, package=Kerberos, session=1 09:31:33.623180 vminfo Session 1: PID=6784 (fInt=true ): C:\Windows\System32\svchost.exe 09:31:33.623180 vminfo Session 1: PID=264 (fInt=true ): C:\Windows\System32\sihost.exe 09:31:33.623180 vminfo Session 1: PID=3148 (fInt=true ): C:\Windows\System32\svchost.exe 09:31:33.623180 vminfo Session 1: PID=7176 (fInt=true ): C:\Windows\System32\taskhostw.exe 09:31:33.623180 vminfo Session 1: PID=7268 (fInt=true ): C:\Windows\System32\ctfmon.exe 09:31:33.623180 vminfo Session 1: PID=8732 (fInt=true ): C:\Windows\explorer.exe 09:31:33.623180 vminfo Session 1: PID=9016 (fInt=true ): C:\Program Files (x86)\NoMachine\bin\nxclient.bin 09:31:33.623180 vminfo Session 1: PID=8260 (fInt=true ): C:\Program Files\McAfee\Agent\x86\UpdaterUI.exe 09:31:33.623180 vminfo Session 1: PID=8828 (fInt=true ): C:\Program Files\Classic Shell\ClassicStartMenu.exe 09:31:33.623180 vminfo Session 1: PID=8488 (fInt=true ): C:\Program Files\McAfee\Agent\x86\mctray.exe 09:31:33.623180 vminfo Session 1: PID=9172 (fInt=true ): C:\Program Files\TortoiseSVN\bin\TSVNCache.exe 09:31:33.623180 vminfo Session 1: PID=9280 (fInt=true ): C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe 09:31:33.623180 vminfo Session 1: PID=9652 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:33.623180 vminfo Session 1: PID=9728 (fInt=true ): C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe 09:31:33.623180 vminfo Session 1: PID=9880 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:33.623180 vminfo Session 1: PID=9944 (fInt=true ): C:\Windows\System32\dllhost.exe 09:31:33.623180 vminfo Session 1: PID=8128 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17112.19011.0_x64__8wekyb3d8bbwe\Video.UI.exe 09:31:33.623180 vminfo Session 1: PID=9528 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:33.623180 vminfo Session 1: PID=10292 (fInt=true ): C:\Program Files\Windows Defender\MSASCuiL.exe 09:31:33.623180 vminfo Session 1: PID=10324 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:33.623180 vminfo Session 1: PID=10440 (fInt=true ): C:\Windows\System32\VBoxTray.exe 09:31:33.623180 vminfo Session 1: PID=10596 (fInt=true ): C:\Users\user\Documents\Visual Studio 2017\Projects\vboxtray_mon\vboxtray_mon\bin\Release\vboxtray_mon.exe 09:31:33.623180 vminfo Session 1: PID=10612 (fInt=true ): C:\Windows\System32\conhost.exe 09:31:33.623180 vminfo Session 1: PID=10720 (fInt=true ): C:\Program Files (x86)\FileZilla Server\FileZilla Server Interface.exe 09:31:33.623180 vminfo Session 1: PID=9808 (fInt=true ): C:\Windows\System32\svchost.exe 09:31:33.638832 vminfo Session 1: PID=6716 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18011.15918.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe 09:31:33.638832 vminfo Session 1: PID=6688 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:33.638832 vminfo Session 1: PID=10200 (fInt=true ): C:\Windows\System32\ApplicationFrameHost.exe 09:31:33.638832 vminfo Session 1: PID=4868 (fInt=true ): C:\Windows\ImmersiveControlPanel\SystemSettings.exe 09:31:33.638832 vminfo Session 1: PID=1444 (fInt=true ): C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe 09:31:33.638832 vminfo Session 1: PID=9504 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:33.638832 vminfo Session 1: PID=5596 (fInt=true ): C:\Windows\System32\backgroundTaskHost.exe 09:31:33.638832 vminfo Session 1: PID=10840 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:33.638832 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/Session/1' = '#12151: cSessionProcs=33 (of 157 procs total)' 09:31:33.638832 vminfo Adding new user=user (session=1) with 33 processes 09:31:33.638832 vminfo Handling session 7 (of 17) 09:31:33.638832 vminfo Session data: Name=nx, SessionID=0, LogonID=0,685607, LogonType=3 09:31:33.638832 vminfo Handling session 8 (of 17) 09:31:33.638832 vminfo Session data: Name=ANONYMOUS LOGON, SessionID=0, LogonID=0,649881, LogonType=3 09:31:33.638832 vminfo Handling session 9 (of 17) 09:31:33.638832 vminfo Session data: Name=IUSR, SessionID=0, LogonID=0,995, LogonType=5 09:31:33.638832 vminfo Handling session 10 (of 17) 09:31:33.638832 vminfo Session data: Name=DWM-1, SessionID=1, LogonID=0,61006, LogonType=2 09:31:33.638832 vminfo Session LogonType=2 is supported -- looking up SID + type ... 09:31:33.638832 vminfo SID owner type=5 not handled, skipping 09:31:33.638832 vminfo Account User=DWM-1 is not logged in 09:31:33.638832 vminfo Handling session 11 (of 17) 09:31:33.638832 vminfo Session data: Name=DWM-1, SessionID=1, LogonID=0,60973, LogonType=2 09:31:33.638832 vminfo Session LogonType=2 is supported -- looking up SID + type ... 09:31:33.638832 vminfo SID owner type=5 not handled, skipping 09:31:33.638832 vminfo Account User=DWM-1 is not logged in 09:31:33.638832 vminfo Handling session 12 (of 17) 09:31:33.638832 vminfo Session data: Name=MACHINE$, SessionID=0, LogonID=0,996, LogonType=5 09:31:33.638832 vminfo Handling session 13 (of 17) 09:31:33.638832 vminfo Session data: Name=LOCAL SERVICE, SessionID=0, LogonID=0,997, LogonType=5 09:31:33.638832 vminfo Handling session 14 (of 17) 09:31:33.638832 vminfo Session data: Name=UMFD-1, SessionID=1, LogonID=0,34521, LogonType=2 09:31:33.638832 vminfo Session LogonType=2 is supported -- looking up SID + type ... 09:31:33.638832 vminfo SID owner type=5 not handled, skipping 09:31:33.638832 vminfo Account User=UMFD-1 is not logged in 09:31:33.638832 vminfo Handling session 15 (of 17) 09:31:33.638832 vminfo Session data: Name=UMFD-0, SessionID=0, LogonID=0,34482, LogonType=2 09:31:33.638832 vminfo Handling session 16 (of 17) 09:31:33.638832 vminfo Session data: Name=, SessionID=0, LogonID=0,32336, LogonType=0 09:31:33.638832 vminfo Handling session 17 (of 17) 09:31:33.638832 vminfo Session data: Name=MACHINE$, SessionID=0, LogonID=0,999, LogonType=0 09:31:33.638832 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA' = '#12151: cSessions=17, cProcs=157, cUniqueUsers=2' 09:31:33.638832 vminfo Found 2 unique logged-in user(s) 09:31:33.638832 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/User/0' = '#12151: szName=user, sessionID=1, cProcs=33' 09:31:33.638832 vminfo User 'user' has 33 interactive processes (session=1) 09:31:33.638832 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/User/user@DOMAIN/UsageState' resulted in rc=VINF_NO_CHANGE 09:31:33.638832 vminfo User 'user' (domain 'DOMAIN') is idle for 60468, fReportToHost=false 09:31:33.638832 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/User/1' = '#12151: szName=user, sessionID=1, cProcs=33' 09:31:33.638832 vminfo User 'user' has 33 interactive processes (session=1) 09:31:33.638832 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/User/user@DOMAIN/UsageState' resulted in rc=VINF_NO_CHANGE 09:31:33.638832 vminfo User 'user' (domain 'DOMAIN') is idle for 60468, fReportToHost=false 09:31:33.638832 vminfo cUsersInList=2, pszUserList=user,user, rc=VINF_NO_CHANGE 09:31:33.638832 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/LoggedInUsersList' resulted in rc=VINF_NO_CHANGE 09:31:33.638832 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/LoggedInUsers' resulted in rc=VINF_NO_CHANGE 09:31:33.638832 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/NoLoggedInUsers' resulted in rc=VINF_NO_CHANGE 09:31:33.638832 vminfo Writing users returned with rc=VINF_NO_CHANGE 09:31:33.638832 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/IP' resulted in rc=VINF_NO_CHANGE 09:31:33.638832 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/Broadcast' resulted in rc=VINF_NO_CHANGE 09:31:33.638832 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/Netmask' resulted in rc=VINF_NO_CHANGE 09:31:33.638832 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/Status' resulted in rc=VINF_NO_CHANGE 09:31:33.638832 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/MAC' resulted in rc=VINF_NO_CHANGE 09:31:33.638832 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/IP' resulted in rc=VINF_NO_CHANGE 09:31:33.638832 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/Broadcast' resulted in rc=VINF_NO_CHANGE 09:31:33.638832 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/Netmask' resulted in rc=VINF_NO_CHANGE 09:31:33.638832 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/Status' resulted in rc=VINF_NO_CHANGE 09:31:33.638832 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/MAC' resulted in rc=VINF_NO_CHANGE 09:31:33.638832 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/IP' resulted in rc=VINF_NO_CHANGE 09:31:33.654084 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/Broadcast' resulted in rc=VINF_NO_CHANGE 09:31:33.654084 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/Netmask' resulted in rc=VINF_NO_CHANGE 09:31:33.654084 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/Status' resulted in rc=VINF_NO_CHANGE 09:31:33.654084 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/MAC' resulted in rc=VINF_NO_CHANGE 09:31:33.654084 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/IP' resulted in rc=VINF_NO_CHANGE 09:31:33.654084 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/Broadcast' resulted in rc=VINF_NO_CHANGE 09:31:33.654084 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/Netmask' resulted in rc=VINF_NO_CHANGE 09:31:33.654084 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/Status' resulted in rc=VINF_NO_CHANGE 09:31:33.654084 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/MAC' resulted in rc=VINF_NO_CHANGE 09:31:33.654084 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/IP' resulted in rc=VINF_NO_CHANGE 09:31:33.654084 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/Broadcast' resulted in rc=VINF_NO_CHANGE 09:31:33.654084 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/Netmask' resulted in rc=VINF_NO_CHANGE 09:31:33.654084 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/Status' resulted in rc=VINF_NO_CHANGE 09:31:33.654084 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/MAC' resulted in rc=VINF_NO_CHANGE 09:31:33.654084 vminfo [PropCache 00007ff6b2962520]: Written '/VirtualBox/GuestInfo/Net/Count'='5' (flags: 6), rc=VINF_SUCCESS 09:31:33.654084 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/Count' resulted in rc=VINF_SUCCESS 09:31:33.654084 vminfo Guest Property: /VirtualBox/HostInfo/VRDP/ActiveClient not found 09:31:33.654084 vminfo VRDP: Handling location awareness done 09:31:36.129842 timesync vgsvcTimeSyncWorker: Host: 2019-02-26T09:31:36.005000000Z (MinAdjust: 200 ms), Guest: 2019-02-26T09:31:36.129842400Z => -124 842 400 ns drift 09:31:38.671475 vminfo Found 17 sessions 09:31:38.671475 vminfo Error: Get token class 'user' for process 0 failed, rc=VERR_INVALID_PARAMETER 09:31:38.671475 vminfo Error: Get token class 'groups' for process 0 failed, rc=VERR_INVALID_PARAMETER 09:31:38.671475 vminfo Error: Get token class 'statistics' for process 0 failed, rc=VERR_INVALID_PARAMETER 09:31:38.671475 vminfo Error: Get token class 'user' for process 4 failed, rc=VERR_ACCESS_DENIED 09:31:38.671475 vminfo Error: Get token class 'groups' for process 4 failed, rc=VERR_ACCESS_DENIED 09:31:38.671475 vminfo Error: Get token class 'statistics' for process 4 failed, rc=VERR_ACCESS_DENIED 09:31:38.671475 vminfo Error: Get token class 'user' for process 104 failed, rc=VERR_ACCESS_DENIED 09:31:38.671475 vminfo Error: Get token class 'groups' for process 104 failed, rc=VERR_ACCESS_DENIED 09:31:38.671475 vminfo Error: Get token class 'statistics' for process 104 failed, rc=VERR_ACCESS_DENIED 09:31:38.671475 vminfo Error: Get token class 'user' for process 472 failed, rc=VERR_ACCESS_DENIED 09:31:38.671475 vminfo Error: Get token class 'groups' for process 472 failed, rc=VERR_ACCESS_DENIED 09:31:38.671475 vminfo Error: Get token class 'statistics' for process 472 failed, rc=VERR_ACCESS_DENIED 09:31:38.671475 vminfo Error: Get token class 'user' for process 676 failed, rc=VERR_ACCESS_DENIED 09:31:38.671475 vminfo Error: Get token class 'groups' for process 676 failed, rc=VERR_ACCESS_DENIED 09:31:38.671475 vminfo Error: Get token class 'statistics' for process 676 failed, rc=VERR_ACCESS_DENIED 09:31:38.671475 vminfo Error: Get token class 'user' for process 756 failed, rc=VERR_ACCESS_DENIED 09:31:38.671475 vminfo Error: Get token class 'groups' for process 756 failed, rc=VERR_ACCESS_DENIED 09:31:38.671475 vminfo Error: Get token class 'statistics' for process 756 failed, rc=VERR_ACCESS_DENIED 09:31:38.671475 vminfo Error: Get token class 'user' for process 768 failed, rc=VERR_ACCESS_DENIED 09:31:38.671475 vminfo Error: Get token class 'groups' for process 768 failed, rc=VERR_ACCESS_DENIED 09:31:38.671475 vminfo Error: Get token class 'statistics' for process 768 failed, rc=VERR_ACCESS_DENIED 09:31:38.671475 vminfo Error: Get token class 'user' for process 876 failed, rc=VERR_ACCESS_DENIED 09:31:38.671475 vminfo Error: Get token class 'groups' for process 876 failed, rc=VERR_ACCESS_DENIED 09:31:38.671475 vminfo Error: Get token class 'statistics' for process 876 failed, rc=VERR_ACCESS_DENIED 09:31:38.671475 vminfo Error: Get token class 'user' for process 2532 failed, rc=VERR_ACCESS_DENIED 09:31:38.671475 vminfo Error: Get token class 'groups' for process 2532 failed, rc=VERR_ACCESS_DENIED 09:31:38.671475 vminfo Error: Get token class 'statistics' for process 2532 failed, rc=VERR_ACCESS_DENIED 09:31:38.671475 vminfo Error: Get token class 'user' for process 4136 failed, rc=VERR_ACCESS_DENIED 09:31:38.671475 vminfo Error: Get token class 'groups' for process 4136 failed, rc=VERR_ACCESS_DENIED 09:31:38.671475 vminfo Error: Get token class 'statistics' for process 4136 failed, rc=VERR_ACCESS_DENIED 09:31:38.671475 vminfo Error: Get token class 'user' for process 5212 failed, rc=VERR_ACCESS_DENIED 09:31:38.671475 vminfo Error: Get token class 'groups' for process 5212 failed, rc=VERR_ACCESS_DENIED 09:31:38.671475 vminfo Error: Get token class 'statistics' for process 5212 failed, rc=VERR_ACCESS_DENIED 09:31:38.671475 vminfo Handling session 1 (of 17) 09:31:38.671475 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2145999, LogonType=3 09:31:38.671475 vminfo Handling session 2 (of 17) 09:31:38.671475 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2113823, LogonType=3 09:31:38.671475 vminfo Handling session 3 (of 17) 09:31:38.671475 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2041868, LogonType=3 09:31:38.671475 vminfo Handling session 4 (of 17) 09:31:38.671475 vminfo Session data: Name=nx, SessionID=0, LogonID=0,1997776, LogonType=3 09:31:38.671475 vminfo Handling session 5 (of 17) 09:31:38.671475 vminfo Session data: Name=user, SessionID=1, LogonID=0,1970648, LogonType=2 09:31:38.671475 vminfo Session LogonType=2 is supported -- looking up SID + type ... 09:31:38.687438 vminfo Account User=user, Session=1, LogonID=0,1970648, AuthPkg=Negotiate, Domain=DOMAIN 09:31:38.687438 vminfo Account User=user, WTSConnectState=0 (4) 09:31:38.687438 vminfo Account User=user using TCS/RDP, state=0 09:31:38.687438 vminfo Account User=user is logged in 09:31:38.687438 vminfo Handling user=user, domain=DOMAIN, package=Negotiate, session=1 09:31:38.687438 vminfo Session 1: PID=6784 (fInt=true ): C:\Windows\System32\svchost.exe 09:31:38.687438 vminfo Session 1: PID=264 (fInt=true ): C:\Windows\System32\sihost.exe 09:31:38.687438 vminfo Session 1: PID=3148 (fInt=true ): C:\Windows\System32\svchost.exe 09:31:38.687438 vminfo Session 1: PID=7176 (fInt=true ): C:\Windows\System32\taskhostw.exe 09:31:38.687438 vminfo Session 1: PID=7268 (fInt=true ): C:\Windows\System32\ctfmon.exe 09:31:38.687438 vminfo Session 1: PID=8732 (fInt=true ): C:\Windows\explorer.exe 09:31:38.687438 vminfo Session 1: PID=9016 (fInt=true ): C:\Program Files (x86)\NoMachine\bin\nxclient.bin 09:31:38.687438 vminfo Session 1: PID=8260 (fInt=true ): C:\Program Files\McAfee\Agent\x86\UpdaterUI.exe 09:31:38.687438 vminfo Session 1: PID=8828 (fInt=true ): C:\Program Files\Classic Shell\ClassicStartMenu.exe 09:31:38.687438 vminfo Session 1: PID=8488 (fInt=true ): C:\Program Files\McAfee\Agent\x86\mctray.exe 09:31:38.687438 vminfo Session 1: PID=9172 (fInt=true ): C:\Program Files\TortoiseSVN\bin\TSVNCache.exe 09:31:38.687438 vminfo Session 1: PID=9280 (fInt=true ): C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe 09:31:38.687438 vminfo Session 1: PID=9652 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:38.687438 vminfo Session 1: PID=9728 (fInt=true ): C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe 09:31:38.687438 vminfo Session 1: PID=9880 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:38.687438 vminfo Session 1: PID=9944 (fInt=true ): C:\Windows\System32\dllhost.exe 09:31:38.687438 vminfo Session 1: PID=8128 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17112.19011.0_x64__8wekyb3d8bbwe\Video.UI.exe 09:31:38.687438 vminfo Session 1: PID=9528 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:38.687438 vminfo Session 1: PID=10292 (fInt=true ): C:\Program Files\Windows Defender\MSASCuiL.exe 09:31:38.687438 vminfo Session 1: PID=10324 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:38.687438 vminfo Session 1: PID=10440 (fInt=true ): C:\Windows\System32\VBoxTray.exe 09:31:38.687438 vminfo Session 1: PID=10596 (fInt=true ): C:\Users\user\Documents\Visual Studio 2017\Projects\vboxtray_mon\vboxtray_mon\bin\Release\vboxtray_mon.exe 09:31:38.687438 vminfo Session 1: PID=10612 (fInt=true ): C:\Windows\System32\conhost.exe 09:31:38.687438 vminfo Session 1: PID=10720 (fInt=true ): C:\Program Files (x86)\FileZilla Server\FileZilla Server Interface.exe 09:31:38.687438 vminfo Session 1: PID=9808 (fInt=true ): C:\Windows\System32\svchost.exe 09:31:38.687438 vminfo Session 1: PID=6716 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18011.15918.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe 09:31:38.687438 vminfo Session 1: PID=6688 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:38.687438 vminfo Session 1: PID=10200 (fInt=true ): C:\Windows\System32\ApplicationFrameHost.exe 09:31:38.687438 vminfo Session 1: PID=4868 (fInt=true ): C:\Windows\ImmersiveControlPanel\SystemSettings.exe 09:31:38.687438 vminfo Session 1: PID=1444 (fInt=true ): C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe 09:31:38.687438 vminfo Session 1: PID=9504 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:38.687438 vminfo Session 1: PID=5596 (fInt=true ): C:\Windows\System32\backgroundTaskHost.exe 09:31:38.687438 vminfo Session 1: PID=10840 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:38.687438 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/Session/1' = '#12152: cSessionProcs=33 (of 158 procs total)' 09:31:38.687438 vminfo Adding new user=user (session=1) with 33 processes 09:31:38.687438 vminfo Handling session 6 (of 17) 09:31:38.687438 vminfo Session data: Name=user, SessionID=1, LogonID=0,1970599, LogonType=2 09:31:38.687438 vminfo Session LogonType=2 is supported -- looking up SID + type ... 09:31:38.687438 vminfo Account User=user, Session=1, LogonID=0,1970599, AuthPkg=Kerberos, Domain=DOMAIN 09:31:38.687438 vminfo Account User=user, WTSConnectState=0 (4) 09:31:38.687438 vminfo Account User=user using TCS/RDP, state=0 09:31:38.687438 vminfo Account User=user is logged in 09:31:38.687438 vminfo Handling user=user, domain=DOMAIN, package=Kerberos, session=1 09:31:38.687438 vminfo Session 1: PID=6784 (fInt=true ): C:\Windows\System32\svchost.exe 09:31:38.687438 vminfo Session 1: PID=264 (fInt=true ): C:\Windows\System32\sihost.exe 09:31:38.687438 vminfo Session 1: PID=3148 (fInt=true ): C:\Windows\System32\svchost.exe 09:31:38.687438 vminfo Session 1: PID=7176 (fInt=true ): C:\Windows\System32\taskhostw.exe 09:31:38.687438 vminfo Session 1: PID=7268 (fInt=true ): C:\Windows\System32\ctfmon.exe 09:31:38.687438 vminfo Session 1: PID=8732 (fInt=true ): C:\Windows\explorer.exe 09:31:38.687438 vminfo Session 1: PID=9016 (fInt=true ): C:\Program Files (x86)\NoMachine\bin\nxclient.bin 09:31:38.687438 vminfo Session 1: PID=8260 (fInt=true ): C:\Program Files\McAfee\Agent\x86\UpdaterUI.exe 09:31:38.687438 vminfo Session 1: PID=8828 (fInt=true ): C:\Program Files\Classic Shell\ClassicStartMenu.exe 09:31:38.687438 vminfo Session 1: PID=8488 (fInt=true ): C:\Program Files\McAfee\Agent\x86\mctray.exe 09:31:38.687438 vminfo Session 1: PID=9172 (fInt=true ): C:\Program Files\TortoiseSVN\bin\TSVNCache.exe 09:31:38.687438 vminfo Session 1: PID=9280 (fInt=true ): C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe 09:31:38.687438 vminfo Session 1: PID=9652 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:38.687438 vminfo Session 1: PID=9728 (fInt=true ): C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe 09:31:38.687438 vminfo Session 1: PID=9880 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:38.687438 vminfo Session 1: PID=9944 (fInt=true ): C:\Windows\System32\dllhost.exe 09:31:38.687438 vminfo Session 1: PID=8128 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17112.19011.0_x64__8wekyb3d8bbwe\Video.UI.exe 09:31:38.687438 vminfo Session 1: PID=9528 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:38.687438 vminfo Session 1: PID=10292 (fInt=true ): C:\Program Files\Windows Defender\MSASCuiL.exe 09:31:38.687438 vminfo Session 1: PID=10324 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:38.687438 vminfo Session 1: PID=10440 (fInt=true ): C:\Windows\System32\VBoxTray.exe 09:31:38.687438 vminfo Session 1: PID=10596 (fInt=true ): C:\Users\user\Documents\Visual Studio 2017\Projects\vboxtray_mon\vboxtray_mon\bin\Release\vboxtray_mon.exe 09:31:38.704005 vminfo Session 1: PID=10612 (fInt=true ): C:\Windows\System32\conhost.exe 09:31:38.704005 vminfo Session 1: PID=10720 (fInt=true ): C:\Program Files (x86)\FileZilla Server\FileZilla Server Interface.exe 09:31:38.704005 vminfo Session 1: PID=9808 (fInt=true ): C:\Windows\System32\svchost.exe 09:31:38.704005 vminfo Session 1: PID=6716 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18011.15918.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe 09:31:38.704005 vminfo Session 1: PID=6688 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:38.704005 vminfo Session 1: PID=10200 (fInt=true ): C:\Windows\System32\ApplicationFrameHost.exe 09:31:38.704005 vminfo Session 1: PID=4868 (fInt=true ): C:\Windows\ImmersiveControlPanel\SystemSettings.exe 09:31:38.704005 vminfo Session 1: PID=1444 (fInt=true ): C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe 09:31:38.704005 vminfo Session 1: PID=9504 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:38.704005 vminfo Session 1: PID=5596 (fInt=true ): C:\Windows\System32\backgroundTaskHost.exe 09:31:38.704005 vminfo Session 1: PID=10840 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:38.704005 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/Session/1' = '#12152: cSessionProcs=33 (of 158 procs total)' 09:31:38.704005 vminfo Adding new user=user (session=1) with 33 processes 09:31:38.704005 vminfo Handling session 7 (of 17) 09:31:38.704005 vminfo Session data: Name=nx, SessionID=0, LogonID=0,685607, LogonType=3 09:31:38.704005 vminfo Handling session 8 (of 17) 09:31:38.704005 vminfo Session data: Name=ANONYMOUS LOGON, SessionID=0, LogonID=0,649881, LogonType=3 09:31:38.704005 vminfo Handling session 9 (of 17) 09:31:38.704005 vminfo Session data: Name=IUSR, SessionID=0, LogonID=0,995, LogonType=5 09:31:38.704005 vminfo Handling session 10 (of 17) 09:31:38.704005 vminfo Session data: Name=DWM-1, SessionID=1, LogonID=0,61006, LogonType=2 09:31:38.704005 vminfo Session LogonType=2 is supported -- looking up SID + type ... 09:31:38.704005 vminfo SID owner type=5 not handled, skipping 09:31:38.704005 vminfo Account User=DWM-1 is not logged in 09:31:38.704005 vminfo Handling session 11 (of 17) 09:31:38.704005 vminfo Session data: Name=DWM-1, SessionID=1, LogonID=0,60973, LogonType=2 09:31:38.704005 vminfo Session LogonType=2 is supported -- looking up SID + type ... 09:31:38.704005 vminfo SID owner type=5 not handled, skipping 09:31:38.704005 vminfo Account User=DWM-1 is not logged in 09:31:38.704005 vminfo Handling session 12 (of 17) 09:31:38.704005 vminfo Session data: Name=MACHINE$, SessionID=0, LogonID=0,996, LogonType=5 09:31:38.704005 vminfo Handling session 13 (of 17) 09:31:38.704005 vminfo Session data: Name=LOCAL SERVICE, SessionID=0, LogonID=0,997, LogonType=5 09:31:38.704005 vminfo Handling session 14 (of 17) 09:31:38.704005 vminfo Session data: Name=UMFD-1, SessionID=1, LogonID=0,34521, LogonType=2 09:31:38.704005 vminfo Session LogonType=2 is supported -- looking up SID + type ... 09:31:38.704005 vminfo SID owner type=5 not handled, skipping 09:31:38.704005 vminfo Account User=UMFD-1 is not logged in 09:31:38.704005 vminfo Handling session 15 (of 17) 09:31:38.704005 vminfo Session data: Name=UMFD-0, SessionID=0, LogonID=0,34482, LogonType=2 09:31:38.704005 vminfo Handling session 16 (of 17) 09:31:38.704005 vminfo Session data: Name=, SessionID=0, LogonID=0,32336, LogonType=0 09:31:38.704005 vminfo Handling session 17 (of 17) 09:31:38.704005 vminfo Session data: Name=MACHINE$, SessionID=0, LogonID=0,999, LogonType=0 09:31:38.704005 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA' = '#12152: cSessions=17, cProcs=158, cUniqueUsers=2' 09:31:38.704005 vminfo Found 2 unique logged-in user(s) 09:31:38.704005 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/User/0' = '#12152: szName=user, sessionID=1, cProcs=33' 09:31:38.704005 vminfo User 'user' has 33 interactive processes (session=1) 09:31:38.846246 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/User/user@DOMAIN/UsageState' resulted in rc=VINF_NO_CHANGE 09:31:38.846246 vminfo User 'user' (domain 'DOMAIN') is idle for 60473, fReportToHost=false 09:31:38.846246 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/User/1' = '#12152: szName=user, sessionID=1, cProcs=33' 09:31:38.846246 vminfo User 'user' has 33 interactive processes (session=1) 09:31:38.846246 vminfo Error: Error querying last input for user 'user', rc=VERR_PIPE_BUSY 09:31:38.846246 vminfo cUsersInList=0, pszUserList=, rc=VERR_PIPE_BUSY 09:31:38.846246 vminfo [PropCache 00007ff6b2962520]: Deleted '/VirtualBox/GuestInfo/OS/LoggedInUsersList'='user,user' (flags: a), rc=VINF_SUCCESS 09:31:38.846246 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/LoggedInUsersList' resulted in rc=VINF_SUCCESS 09:31:38.846246 vminfo [PropCache 00007ff6b2962520]: Written '/VirtualBox/GuestInfo/OS/LoggedInUsers'='0' (flags: a), rc=VINF_SUCCESS 09:31:38.846246 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/LoggedInUsers' resulted in rc=VINF_SUCCESS 09:31:38.846246 vminfo [PropCache 00007ff6b2962520]: Written '/VirtualBox/GuestInfo/OS/NoLoggedInUsers'='true' (flags: a), rc=VINF_SUCCESS 09:31:38.846246 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/NoLoggedInUsers' resulted in rc=VINF_SUCCESS 09:31:38.846246 vminfo Writing users returned with rc=VINF_SUCCESS 09:31:38.861760 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/IP' resulted in rc=VINF_NO_CHANGE 09:31:38.861760 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/Broadcast' resulted in rc=VINF_NO_CHANGE 09:31:38.861760 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/Netmask' resulted in rc=VINF_NO_CHANGE 09:31:38.861760 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/Status' resulted in rc=VINF_NO_CHANGE 09:31:38.861760 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/MAC' resulted in rc=VINF_NO_CHANGE 09:31:38.861760 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/IP' resulted in rc=VINF_NO_CHANGE 09:31:38.861760 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/Broadcast' resulted in rc=VINF_NO_CHANGE 09:31:38.861760 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/Netmask' resulted in rc=VINF_NO_CHANGE 09:31:38.861760 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/Status' resulted in rc=VINF_NO_CHANGE 09:31:38.861760 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/MAC' resulted in rc=VINF_NO_CHANGE 09:31:38.861760 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/IP' resulted in rc=VINF_NO_CHANGE 09:31:38.861760 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/Broadcast' resulted in rc=VINF_NO_CHANGE 09:31:38.861760 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/Netmask' resulted in rc=VINF_NO_CHANGE 09:31:38.861760 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/Status' resulted in rc=VINF_NO_CHANGE 09:31:38.861760 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/MAC' resulted in rc=VINF_NO_CHANGE 09:31:38.861760 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/IP' resulted in rc=VINF_NO_CHANGE 09:31:38.861760 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/Broadcast' resulted in rc=VINF_NO_CHANGE 09:31:38.861760 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/Netmask' resulted in rc=VINF_NO_CHANGE 09:31:38.861760 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/Status' resulted in rc=VINF_NO_CHANGE 09:31:38.861760 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/MAC' resulted in rc=VINF_NO_CHANGE 09:31:38.861760 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/IP' resulted in rc=VINF_NO_CHANGE 09:31:38.861760 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/Broadcast' resulted in rc=VINF_NO_CHANGE 09:31:38.861760 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/Netmask' resulted in rc=VINF_NO_CHANGE 09:31:38.861760 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/Status' resulted in rc=VINF_NO_CHANGE 09:31:38.861760 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/MAC' resulted in rc=VINF_NO_CHANGE 09:31:38.861760 vminfo [PropCache 00007ff6b2962520]: Written '/VirtualBox/GuestInfo/Net/Count'='5' (flags: 6), rc=VINF_SUCCESS 09:31:38.861760 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/Count' resulted in rc=VINF_SUCCESS 09:31:38.861760 vminfo Guest Property: /VirtualBox/HostInfo/VRDP/ActiveClient not found 09:31:38.861760 vminfo VRDP: Handling location awareness done 09:31:43.866213 vminfo Found 17 sessions 09:31:43.866213 vminfo Error: Get token class 'user' for process 0 failed, rc=VERR_INVALID_PARAMETER 09:31:43.866213 vminfo Error: Get token class 'groups' for process 0 failed, rc=VERR_INVALID_PARAMETER 09:31:43.866213 vminfo Error: Get token class 'statistics' for process 0 failed, rc=VERR_INVALID_PARAMETER 09:31:43.866213 vminfo Error: Get token class 'user' for process 4 failed, rc=VERR_ACCESS_DENIED 09:31:43.866213 vminfo Error: Get token class 'groups' for process 4 failed, rc=VERR_ACCESS_DENIED 09:31:43.866213 vminfo Error: Get token class 'statistics' for process 4 failed, rc=VERR_ACCESS_DENIED 09:31:43.866213 vminfo Error: Get token class 'user' for process 104 failed, rc=VERR_ACCESS_DENIED 09:31:43.866213 vminfo Error: Get token class 'groups' for process 104 failed, rc=VERR_ACCESS_DENIED 09:31:43.866213 vminfo Error: Get token class 'statistics' for process 104 failed, rc=VERR_ACCESS_DENIED 09:31:43.866213 vminfo Error: Get token class 'user' for process 472 failed, rc=VERR_ACCESS_DENIED 09:31:43.866213 vminfo Error: Get token class 'groups' for process 472 failed, rc=VERR_ACCESS_DENIED 09:31:43.866213 vminfo Error: Get token class 'statistics' for process 472 failed, rc=VERR_ACCESS_DENIED 09:31:43.866213 vminfo Error: Get token class 'user' for process 676 failed, rc=VERR_ACCESS_DENIED 09:31:43.866213 vminfo Error: Get token class 'groups' for process 676 failed, rc=VERR_ACCESS_DENIED 09:31:43.866213 vminfo Error: Get token class 'statistics' for process 676 failed, rc=VERR_ACCESS_DENIED 09:31:43.866213 vminfo Error: Get token class 'user' for process 756 failed, rc=VERR_ACCESS_DENIED 09:31:43.866213 vminfo Error: Get token class 'groups' for process 756 failed, rc=VERR_ACCESS_DENIED 09:31:43.866213 vminfo Error: Get token class 'statistics' for process 756 failed, rc=VERR_ACCESS_DENIED 09:31:43.866213 vminfo Error: Get token class 'user' for process 768 failed, rc=VERR_ACCESS_DENIED 09:31:43.866213 vminfo Error: Get token class 'groups' for process 768 failed, rc=VERR_ACCESS_DENIED 09:31:43.866213 vminfo Error: Get token class 'statistics' for process 768 failed, rc=VERR_ACCESS_DENIED 09:31:43.866213 vminfo Error: Get token class 'user' for process 876 failed, rc=VERR_ACCESS_DENIED 09:31:43.866213 vminfo Error: Get token class 'groups' for process 876 failed, rc=VERR_ACCESS_DENIED 09:31:43.866213 vminfo Error: Get token class 'statistics' for process 876 failed, rc=VERR_ACCESS_DENIED 09:31:43.866213 vminfo Error: Get token class 'user' for process 2532 failed, rc=VERR_ACCESS_DENIED 09:31:43.866213 vminfo Error: Get token class 'groups' for process 2532 failed, rc=VERR_ACCESS_DENIED 09:31:43.866213 vminfo Error: Get token class 'statistics' for process 2532 failed, rc=VERR_ACCESS_DENIED 09:31:43.866213 vminfo Error: Get token class 'user' for process 4136 failed, rc=VERR_ACCESS_DENIED 09:31:43.866213 vminfo Error: Get token class 'groups' for process 4136 failed, rc=VERR_ACCESS_DENIED 09:31:43.866213 vminfo Error: Get token class 'statistics' for process 4136 failed, rc=VERR_ACCESS_DENIED 09:31:43.866213 vminfo Error: Get token class 'user' for process 5212 failed, rc=VERR_ACCESS_DENIED 09:31:43.866213 vminfo Error: Get token class 'groups' for process 5212 failed, rc=VERR_ACCESS_DENIED 09:31:43.866213 vminfo Error: Get token class 'statistics' for process 5212 failed, rc=VERR_ACCESS_DENIED 09:31:43.866213 vminfo Handling session 1 (of 17) 09:31:43.866213 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2145999, LogonType=3 09:31:43.866213 vminfo Handling session 2 (of 17) 09:31:43.866213 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2113823, LogonType=3 09:31:43.866213 vminfo Handling session 3 (of 17) 09:31:43.866213 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2041868, LogonType=3 09:31:43.882888 vminfo Handling session 4 (of 17) 09:31:43.882888 vminfo Session data: Name=nx, SessionID=0, LogonID=0,1997776, LogonType=3 09:31:43.882888 vminfo Handling session 5 (of 17) 09:31:43.882888 vminfo Session data: Name=user, SessionID=1, LogonID=0,1970648, LogonType=2 09:31:43.882888 vminfo Session LogonType=2 is supported -- looking up SID + type ... 09:31:43.882888 vminfo Account User=user, Session=1, LogonID=0,1970648, AuthPkg=Negotiate, Domain=DOMAIN 09:31:43.882888 vminfo Account User=user, WTSConnectState=0 (4) 09:31:43.882888 vminfo Account User=user using TCS/RDP, state=0 09:31:43.882888 vminfo Account User=user is logged in 09:31:43.882888 vminfo Handling user=user, domain=DOMAIN, package=Negotiate, session=1 09:31:43.882888 vminfo Session 1: PID=6784 (fInt=true ): C:\Windows\System32\svchost.exe 09:31:43.882888 vminfo Session 1: PID=264 (fInt=true ): C:\Windows\System32\sihost.exe 09:31:43.882888 vminfo Session 1: PID=3148 (fInt=true ): C:\Windows\System32\svchost.exe 09:31:43.882888 vminfo Session 1: PID=7176 (fInt=true ): C:\Windows\System32\taskhostw.exe 09:31:43.882888 vminfo Session 1: PID=7268 (fInt=true ): C:\Windows\System32\ctfmon.exe 09:31:43.882888 vminfo Session 1: PID=8732 (fInt=true ): C:\Windows\explorer.exe 09:31:43.882888 vminfo Session 1: PID=9016 (fInt=true ): C:\Program Files (x86)\NoMachine\bin\nxclient.bin 09:31:43.882888 vminfo Session 1: PID=8260 (fInt=true ): C:\Program Files\McAfee\Agent\x86\UpdaterUI.exe 09:31:43.882888 vminfo Session 1: PID=8828 (fInt=true ): C:\Program Files\Classic Shell\ClassicStartMenu.exe 09:31:43.882888 vminfo Session 1: PID=8488 (fInt=true ): C:\Program Files\McAfee\Agent\x86\mctray.exe 09:31:43.882888 vminfo Session 1: PID=9172 (fInt=true ): C:\Program Files\TortoiseSVN\bin\TSVNCache.exe 09:31:43.882888 vminfo Session 1: PID=9280 (fInt=true ): C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe 09:31:43.882888 vminfo Session 1: PID=9652 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:43.882888 vminfo Session 1: PID=9728 (fInt=true ): C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe 09:31:43.882888 vminfo Session 1: PID=9880 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:43.882888 vminfo Session 1: PID=9944 (fInt=true ): C:\Windows\System32\dllhost.exe 09:31:43.882888 vminfo Session 1: PID=8128 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17112.19011.0_x64__8wekyb3d8bbwe\Video.UI.exe 09:31:43.882888 vminfo Session 1: PID=9528 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:43.882888 vminfo Session 1: PID=10292 (fInt=true ): C:\Program Files\Windows Defender\MSASCuiL.exe 09:31:43.882888 vminfo Session 1: PID=10324 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:43.882888 vminfo Session 1: PID=10440 (fInt=true ): C:\Windows\System32\VBoxTray.exe 09:31:43.882888 vminfo Session 1: PID=10596 (fInt=true ): C:\Users\user\Documents\Visual Studio 2017\Projects\vboxtray_mon\vboxtray_mon\bin\Release\vboxtray_mon.exe 09:31:43.882888 vminfo Session 1: PID=10612 (fInt=true ): C:\Windows\System32\conhost.exe 09:31:43.882888 vminfo Session 1: PID=10720 (fInt=true ): C:\Program Files (x86)\FileZilla Server\FileZilla Server Interface.exe 09:31:43.882888 vminfo Session 1: PID=9808 (fInt=true ): C:\Windows\System32\svchost.exe 09:31:43.882888 vminfo Session 1: PID=6716 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18011.15918.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe 09:31:43.882888 vminfo Session 1: PID=6688 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:43.882888 vminfo Session 1: PID=10200 (fInt=true ): C:\Windows\System32\ApplicationFrameHost.exe 09:31:43.882888 vminfo Session 1: PID=4868 (fInt=true ): C:\Windows\ImmersiveControlPanel\SystemSettings.exe 09:31:43.882888 vminfo Session 1: PID=1444 (fInt=true ): C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe 09:31:43.882888 vminfo Session 1: PID=9504 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:43.882888 vminfo Session 1: PID=10840 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:43.882888 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/Session/1' = '#12153: cSessionProcs=32 (of 156 procs total)' 09:31:43.882888 vminfo Adding new user=user (session=1) with 32 processes 09:31:43.882888 vminfo Handling session 6 (of 17) 09:31:43.882888 vminfo Session data: Name=user, SessionID=1, LogonID=0,1970599, LogonType=2 09:31:43.882888 vminfo Session LogonType=2 is supported -- looking up SID + type ... 09:31:43.882888 vminfo Account User=user, Session=1, LogonID=0,1970599, AuthPkg=Kerberos, Domain=DOMAIN 09:31:43.882888 vminfo Account User=user, WTSConnectState=0 (4) 09:31:43.882888 vminfo Account User=user using TCS/RDP, state=0 09:31:43.882888 vminfo Account User=user is logged in 09:31:43.882888 vminfo Handling user=user, domain=DOMAIN, package=Kerberos, session=1 09:31:43.882888 vminfo Session 1: PID=6784 (fInt=true ): C:\Windows\System32\svchost.exe 09:31:43.882888 vminfo Session 1: PID=264 (fInt=true ): C:\Windows\System32\sihost.exe 09:31:43.882888 vminfo Session 1: PID=3148 (fInt=true ): C:\Windows\System32\svchost.exe 09:31:43.882888 vminfo Session 1: PID=7176 (fInt=true ): C:\Windows\System32\taskhostw.exe 09:31:43.899098 vminfo Session 1: PID=7268 (fInt=true ): C:\Windows\System32\ctfmon.exe 09:31:43.899098 vminfo Session 1: PID=8732 (fInt=true ): C:\Windows\explorer.exe 09:31:43.899098 vminfo Session 1: PID=9016 (fInt=true ): C:\Program Files (x86)\NoMachine\bin\nxclient.bin 09:31:43.899098 vminfo Session 1: PID=8260 (fInt=true ): C:\Program Files\McAfee\Agent\x86\UpdaterUI.exe 09:31:43.899098 vminfo Session 1: PID=8828 (fInt=true ): C:\Program Files\Classic Shell\ClassicStartMenu.exe 09:31:43.899098 vminfo Session 1: PID=8488 (fInt=true ): C:\Program Files\McAfee\Agent\x86\mctray.exe 09:31:43.899098 vminfo Session 1: PID=9172 (fInt=true ): C:\Program Files\TortoiseSVN\bin\TSVNCache.exe 09:31:43.899098 vminfo Session 1: PID=9280 (fInt=true ): C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe 09:31:43.899098 vminfo Session 1: PID=9652 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:43.899098 vminfo Session 1: PID=9728 (fInt=true ): C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe 09:31:43.899098 vminfo Session 1: PID=9880 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:43.899098 vminfo Session 1: PID=9944 (fInt=true ): C:\Windows\System32\dllhost.exe 09:31:43.899098 vminfo Session 1: PID=8128 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17112.19011.0_x64__8wekyb3d8bbwe\Video.UI.exe 09:31:43.899098 vminfo Session 1: PID=9528 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:43.899098 vminfo Session 1: PID=10292 (fInt=true ): C:\Program Files\Windows Defender\MSASCuiL.exe 09:31:43.899098 vminfo Session 1: PID=10324 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:43.899098 vminfo Session 1: PID=10440 (fInt=true ): C:\Windows\System32\VBoxTray.exe 09:31:43.899098 vminfo Session 1: PID=10596 (fInt=true ): C:\Users\user\Documents\Visual Studio 2017\Projects\vboxtray_mon\vboxtray_mon\bin\Release\vboxtray_mon.exe 09:31:43.899098 vminfo Session 1: PID=10612 (fInt=true ): C:\Windows\System32\conhost.exe 09:31:43.899098 vminfo Session 1: PID=10720 (fInt=true ): C:\Program Files (x86)\FileZilla Server\FileZilla Server Interface.exe 09:31:43.899098 vminfo Session 1: PID=9808 (fInt=true ): C:\Windows\System32\svchost.exe 09:31:43.899098 vminfo Session 1: PID=6716 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18011.15918.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe 09:31:43.899098 vminfo Session 1: PID=6688 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:43.899098 vminfo Session 1: PID=10200 (fInt=true ): C:\Windows\System32\ApplicationFrameHost.exe 09:31:43.899098 vminfo Session 1: PID=4868 (fInt=true ): C:\Windows\ImmersiveControlPanel\SystemSettings.exe 09:31:43.899098 vminfo Session 1: PID=1444 (fInt=true ): C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe 09:31:43.899098 vminfo Session 1: PID=9504 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:43.899098 vminfo Session 1: PID=10840 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:43.899098 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/Session/1' = '#12153: cSessionProcs=32 (of 156 procs total)' 09:31:43.899098 vminfo Adding new user=user (session=1) with 32 processes 09:31:43.899098 vminfo Handling session 7 (of 17) 09:31:43.899098 vminfo Session data: Name=nx, SessionID=0, LogonID=0,685607, LogonType=3 09:31:43.899098 vminfo Handling session 8 (of 17) 09:31:43.899098 vminfo Session data: Name=ANONYMOUS LOGON, SessionID=0, LogonID=0,649881, LogonType=3 09:31:43.899098 vminfo Handling session 9 (of 17) 09:31:43.899098 vminfo Session data: Name=IUSR, SessionID=0, LogonID=0,995, LogonType=5 09:31:43.899098 vminfo Handling session 10 (of 17) 09:31:43.899098 vminfo Session data: Name=DWM-1, SessionID=1, LogonID=0,61006, LogonType=2 09:31:43.899098 vminfo Session LogonType=2 is supported -- looking up SID + type ... 09:31:43.899098 vminfo SID owner type=5 not handled, skipping 09:31:43.899098 vminfo Account User=DWM-1 is not logged in 09:31:43.899098 vminfo Handling session 11 (of 17) 09:31:43.899098 vminfo Session data: Name=DWM-1, SessionID=1, LogonID=0,60973, LogonType=2 09:31:43.899098 vminfo Session LogonType=2 is supported -- looking up SID + type ... 09:31:43.899098 vminfo SID owner type=5 not handled, skipping 09:31:43.899098 vminfo Account User=DWM-1 is not logged in 09:31:43.899098 vminfo Handling session 12 (of 17) 09:31:43.899098 vminfo Session data: Name=MACHINE$, SessionID=0, LogonID=0,996, LogonType=5 09:31:43.899098 vminfo Handling session 13 (of 17) 09:31:43.899098 vminfo Session data: Name=LOCAL SERVICE, SessionID=0, LogonID=0,997, LogonType=5 09:31:43.899098 vminfo Handling session 14 (of 17) 09:31:43.899098 vminfo Session data: Name=UMFD-1, SessionID=1, LogonID=0,34521, LogonType=2 09:31:43.899098 vminfo Session LogonType=2 is supported -- looking up SID + type ... 09:31:43.899098 vminfo SID owner type=5 not handled, skipping 09:31:43.899098 vminfo Account User=UMFD-1 is not logged in 09:31:43.899098 vminfo Handling session 15 (of 17) 09:31:43.899098 vminfo Session data: Name=UMFD-0, SessionID=0, LogonID=0,34482, LogonType=2 09:31:43.899098 vminfo Handling session 16 (of 17) 09:31:43.899098 vminfo Session data: Name=, SessionID=0, LogonID=0,32336, LogonType=0 09:31:43.899098 vminfo Handling session 17 (of 17) 09:31:43.899098 vminfo Session data: Name=MACHINE$, SessionID=0, LogonID=0,999, LogonType=0 09:31:43.899098 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA' = '#12153: cSessions=17, cProcs=156, cUniqueUsers=2' 09:31:43.899098 vminfo Found 2 unique logged-in user(s) 09:31:43.899098 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/User/0' = '#12153: szName=user, sessionID=1, cProcs=32' 09:31:43.899098 vminfo User 'user' has 32 interactive processes (session=1) 09:31:43.899098 vminfo Error: Error querying last input for user 'user', rc=VERR_PIPE_BUSY 09:31:43.899098 vminfo cUsersInList=0, pszUserList=, rc=VERR_PIPE_BUSY 09:31:43.899098 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/LoggedInUsersList' resulted in rc=VINF_NO_CHANGE 09:31:43.899098 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/LoggedInUsers' resulted in rc=VINF_NO_CHANGE 09:31:43.899098 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/NoLoggedInUsers' resulted in rc=VINF_NO_CHANGE 09:31:43.899098 vminfo Writing users returned with rc=VINF_NO_CHANGE 09:31:43.917236 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/IP' resulted in rc=VINF_NO_CHANGE 09:31:43.917236 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/Broadcast' resulted in rc=VINF_NO_CHANGE 09:31:43.917236 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/Netmask' resulted in rc=VINF_NO_CHANGE 09:31:43.917236 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/Status' resulted in rc=VINF_NO_CHANGE 09:31:43.917236 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/MAC' resulted in rc=VINF_NO_CHANGE 09:31:43.917236 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/IP' resulted in rc=VINF_NO_CHANGE 09:31:43.917236 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/Broadcast' resulted in rc=VINF_NO_CHANGE 09:31:43.917236 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/Netmask' resulted in rc=VINF_NO_CHANGE 09:31:43.917236 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/Status' resulted in rc=VINF_NO_CHANGE 09:31:43.917236 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/MAC' resulted in rc=VINF_NO_CHANGE 09:31:43.917236 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/IP' resulted in rc=VINF_NO_CHANGE 09:31:43.917236 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/Broadcast' resulted in rc=VINF_NO_CHANGE 09:31:43.917236 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/Netmask' resulted in rc=VINF_NO_CHANGE 09:31:43.917236 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/Status' resulted in rc=VINF_NO_CHANGE 09:31:43.917236 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/MAC' resulted in rc=VINF_NO_CHANGE 09:31:43.917236 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/IP' resulted in rc=VINF_NO_CHANGE 09:31:43.917236 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/Broadcast' resulted in rc=VINF_NO_CHANGE 09:31:43.917236 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/Netmask' resulted in rc=VINF_NO_CHANGE 09:31:43.917236 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/Status' resulted in rc=VINF_NO_CHANGE 09:31:43.917236 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/MAC' resulted in rc=VINF_NO_CHANGE 09:31:43.917236 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/IP' resulted in rc=VINF_NO_CHANGE 09:31:43.917236 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/Broadcast' resulted in rc=VINF_NO_CHANGE 09:31:43.917236 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/Netmask' resulted in rc=VINF_NO_CHANGE 09:31:43.917236 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/Status' resulted in rc=VINF_NO_CHANGE 09:31:43.917236 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/MAC' resulted in rc=VINF_NO_CHANGE 09:31:43.917236 vminfo [PropCache 00007ff6b2962520]: Written '/VirtualBox/GuestInfo/Net/Count'='5' (flags: 6), rc=VINF_SUCCESS 09:31:43.917236 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/Count' resulted in rc=VINF_SUCCESS 09:31:43.917236 vminfo Guest Property: /VirtualBox/HostInfo/VRDP/ActiveClient not found 09:31:43.917236 vminfo VRDP: Handling location awareness done 09:31:46.131394 timesync vgsvcTimeSyncWorker: Host: 2019-02-26T09:31:46.006000000Z (MinAdjust: 200 ms), Guest: 2019-02-26T09:31:46.131394000Z => -125 394 000 ns drift 09:31:48.918341 vminfo Found 17 sessions 09:31:48.918341 vminfo Error: Get token class 'user' for process 0 failed, rc=VERR_INVALID_PARAMETER 09:31:48.918341 vminfo Error: Get token class 'groups' for process 0 failed, rc=VERR_INVALID_PARAMETER 09:31:48.918341 vminfo Error: Get token class 'statistics' for process 0 failed, rc=VERR_INVALID_PARAMETER 09:31:48.918341 vminfo Error: Get token class 'user' for process 4 failed, rc=VERR_ACCESS_DENIED 09:31:48.918341 vminfo Error: Get token class 'groups' for process 4 failed, rc=VERR_ACCESS_DENIED 09:31:48.918341 vminfo Error: Get token class 'statistics' for process 4 failed, rc=VERR_ACCESS_DENIED 09:31:48.918341 vminfo Error: Get token class 'user' for process 104 failed, rc=VERR_ACCESS_DENIED 09:31:48.918341 vminfo Error: Get token class 'groups' for process 104 failed, rc=VERR_ACCESS_DENIED 09:31:48.918341 vminfo Error: Get token class 'statistics' for process 104 failed, rc=VERR_ACCESS_DENIED 09:31:48.918341 vminfo Error: Get token class 'user' for process 472 failed, rc=VERR_ACCESS_DENIED 09:31:48.918341 vminfo Error: Get token class 'groups' for process 472 failed, rc=VERR_ACCESS_DENIED 09:31:48.918341 vminfo Error: Get token class 'statistics' for process 472 failed, rc=VERR_ACCESS_DENIED 09:31:48.918341 vminfo Error: Get token class 'user' for process 676 failed, rc=VERR_ACCESS_DENIED 09:31:48.918341 vminfo Error: Get token class 'groups' for process 676 failed, rc=VERR_ACCESS_DENIED 09:31:48.918341 vminfo Error: Get token class 'statistics' for process 676 failed, rc=VERR_ACCESS_DENIED 09:31:48.918341 vminfo Error: Get token class 'user' for process 756 failed, rc=VERR_ACCESS_DENIED 09:31:48.918341 vminfo Error: Get token class 'groups' for process 756 failed, rc=VERR_ACCESS_DENIED 09:31:48.918341 vminfo Error: Get token class 'statistics' for process 756 failed, rc=VERR_ACCESS_DENIED 09:31:48.918341 vminfo Error: Get token class 'user' for process 768 failed, rc=VERR_ACCESS_DENIED 09:31:48.918341 vminfo Error: Get token class 'groups' for process 768 failed, rc=VERR_ACCESS_DENIED 09:31:48.918341 vminfo Error: Get token class 'statistics' for process 768 failed, rc=VERR_ACCESS_DENIED 09:31:48.918341 vminfo Error: Get token class 'user' for process 876 failed, rc=VERR_ACCESS_DENIED 09:31:48.918341 vminfo Error: Get token class 'groups' for process 876 failed, rc=VERR_ACCESS_DENIED 09:31:48.918341 vminfo Error: Get token class 'statistics' for process 876 failed, rc=VERR_ACCESS_DENIED 09:31:48.918341 vminfo Error: Get token class 'user' for process 2532 failed, rc=VERR_ACCESS_DENIED 09:31:48.918341 vminfo Error: Get token class 'groups' for process 2532 failed, rc=VERR_ACCESS_DENIED 09:31:48.918341 vminfo Error: Get token class 'statistics' for process 2532 failed, rc=VERR_ACCESS_DENIED 09:31:48.918341 vminfo Error: Get token class 'user' for process 4136 failed, rc=VERR_ACCESS_DENIED 09:31:48.918341 vminfo Error: Get token class 'groups' for process 4136 failed, rc=VERR_ACCESS_DENIED 09:31:48.918341 vminfo Error: Get token class 'statistics' for process 4136 failed, rc=VERR_ACCESS_DENIED 09:31:48.918341 vminfo Error: Get token class 'user' for process 5212 failed, rc=VERR_ACCESS_DENIED 09:31:48.918341 vminfo Error: Get token class 'groups' for process 5212 failed, rc=VERR_ACCESS_DENIED 09:31:48.918341 vminfo Error: Get token class 'statistics' for process 5212 failed, rc=VERR_ACCESS_DENIED 09:31:48.918341 vminfo Handling session 1 (of 17) 09:31:48.918341 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2145999, LogonType=3 09:31:48.918341 vminfo Handling session 2 (of 17) 09:31:48.918341 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2113823, LogonType=3 09:31:48.918341 vminfo Handling session 3 (of 17) 09:31:48.918341 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2041868, LogonType=3 09:31:48.918341 vminfo Handling session 4 (of 17) 09:31:48.918341 vminfo Session data: Name=nx, SessionID=0, LogonID=0,1997776, LogonType=3 09:31:48.918341 vminfo Handling session 5 (of 17) 09:31:48.918341 vminfo Session data: Name=user, SessionID=1, LogonID=0,1970648, LogonType=2 09:31:48.918341 vminfo Session LogonType=2 is supported -- looking up SID + type ... 09:31:48.918341 vminfo Account User=user, Session=1, LogonID=0,1970648, AuthPkg=Negotiate, Domain=DOMAIN 09:31:48.934006 vminfo Account User=user, WTSConnectState=0 (4) 09:31:48.934006 vminfo Account User=user using TCS/RDP, state=0 09:31:48.934006 vminfo Account User=user is logged in 09:31:48.934006 vminfo Handling user=user, domain=DOMAIN, package=Negotiate, session=1 09:31:48.934006 vminfo Session 1: PID=6784 (fInt=true ): C:\Windows\System32\svchost.exe 09:31:48.934006 vminfo Session 1: PID=264 (fInt=true ): C:\Windows\System32\sihost.exe 09:31:48.934006 vminfo Session 1: PID=3148 (fInt=true ): C:\Windows\System32\svchost.exe 09:31:48.934006 vminfo Session 1: PID=7176 (fInt=true ): C:\Windows\System32\taskhostw.exe 09:31:48.934006 vminfo Session 1: PID=7268 (fInt=true ): C:\Windows\System32\ctfmon.exe 09:31:48.934006 vminfo Session 1: PID=8732 (fInt=true ): C:\Windows\explorer.exe 09:31:48.934006 vminfo Session 1: PID=9016 (fInt=true ): C:\Program Files (x86)\NoMachine\bin\nxclient.bin 09:31:48.934006 vminfo Session 1: PID=8260 (fInt=true ): C:\Program Files\McAfee\Agent\x86\UpdaterUI.exe 09:31:48.934006 vminfo Session 1: PID=8828 (fInt=true ): C:\Program Files\Classic Shell\ClassicStartMenu.exe 09:31:48.934006 vminfo Session 1: PID=8488 (fInt=true ): C:\Program Files\McAfee\Agent\x86\mctray.exe 09:31:48.934006 vminfo Session 1: PID=9172 (fInt=true ): C:\Program Files\TortoiseSVN\bin\TSVNCache.exe 09:31:48.934006 vminfo Session 1: PID=9280 (fInt=true ): C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe 09:31:48.934006 vminfo Session 1: PID=9652 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:48.934006 vminfo Session 1: PID=9728 (fInt=true ): C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe 09:31:48.934006 vminfo Session 1: PID=9880 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:48.934006 vminfo Session 1: PID=9944 (fInt=true ): C:\Windows\System32\dllhost.exe 09:31:48.934006 vminfo Session 1: PID=8128 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17112.19011.0_x64__8wekyb3d8bbwe\Video.UI.exe 09:31:48.934006 vminfo Session 1: PID=9528 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:48.934006 vminfo Session 1: PID=10292 (fInt=true ): C:\Program Files\Windows Defender\MSASCuiL.exe 09:31:48.934006 vminfo Session 1: PID=10324 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:48.934006 vminfo Session 1: PID=10440 (fInt=true ): C:\Windows\System32\VBoxTray.exe 09:31:48.934006 vminfo Session 1: PID=10596 (fInt=true ): C:\Users\user\Documents\Visual Studio 2017\Projects\vboxtray_mon\vboxtray_mon\bin\Release\vboxtray_mon.exe 09:31:48.934006 vminfo Session 1: PID=10612 (fInt=true ): C:\Windows\System32\conhost.exe 09:31:48.934006 vminfo Session 1: PID=10720 (fInt=true ): C:\Program Files (x86)\FileZilla Server\FileZilla Server Interface.exe 09:31:48.934006 vminfo Session 1: PID=9808 (fInt=true ): C:\Windows\System32\svchost.exe 09:31:48.934006 vminfo Session 1: PID=6716 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18011.15918.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe 09:31:48.934006 vminfo Session 1: PID=6688 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:48.934006 vminfo Session 1: PID=10200 (fInt=true ): C:\Windows\System32\ApplicationFrameHost.exe 09:31:48.934006 vminfo Session 1: PID=4868 (fInt=true ): C:\Windows\ImmersiveControlPanel\SystemSettings.exe 09:31:48.934006 vminfo Session 1: PID=1444 (fInt=true ): C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe 09:31:48.934006 vminfo Session 1: PID=9504 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:48.934006 vminfo Session 1: PID=10840 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:48.934006 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/Session/1' = '#12154: cSessionProcs=32 (of 156 procs total)' 09:31:48.934006 vminfo Adding new user=user (session=1) with 32 processes 09:31:48.934006 vminfo Handling session 6 (of 17) 09:31:48.934006 vminfo Session data: Name=user, SessionID=1, LogonID=0,1970599, LogonType=2 09:31:48.934006 vminfo Session LogonType=2 is supported -- looking up SID + type ... 09:31:48.934006 vminfo Account User=user, Session=1, LogonID=0,1970599, AuthPkg=Kerberos, Domain=DOMAIN 09:31:48.934006 vminfo Account User=user, WTSConnectState=0 (4) 09:31:48.934006 vminfo Account User=user using TCS/RDP, state=0 09:31:48.934006 vminfo Account User=user is logged in 09:31:48.934006 vminfo Handling user=user, domain=DOMAIN, package=Kerberos, session=1 09:31:48.934006 vminfo Session 1: PID=6784 (fInt=true ): C:\Windows\System32\svchost.exe 09:31:48.934006 vminfo Session 1: PID=264 (fInt=true ): C:\Windows\System32\sihost.exe 09:31:48.934006 vminfo Session 1: PID=3148 (fInt=true ): C:\Windows\System32\svchost.exe 09:31:48.934006 vminfo Session 1: PID=7176 (fInt=true ): C:\Windows\System32\taskhostw.exe 09:31:48.934006 vminfo Session 1: PID=7268 (fInt=true ): C:\Windows\System32\ctfmon.exe 09:31:48.934006 vminfo Session 1: PID=8732 (fInt=true ): C:\Windows\explorer.exe 09:31:48.934006 vminfo Session 1: PID=9016 (fInt=true ): C:\Program Files (x86)\NoMachine\bin\nxclient.bin 09:31:48.934006 vminfo Session 1: PID=8260 (fInt=true ): C:\Program Files\McAfee\Agent\x86\UpdaterUI.exe 09:31:48.934006 vminfo Session 1: PID=8828 (fInt=true ): C:\Program Files\Classic Shell\ClassicStartMenu.exe 09:31:48.934006 vminfo Session 1: PID=8488 (fInt=true ): C:\Program Files\McAfee\Agent\x86\mctray.exe 09:31:48.934006 vminfo Session 1: PID=9172 (fInt=true ): C:\Program Files\TortoiseSVN\bin\TSVNCache.exe 09:31:48.934006 vminfo Session 1: PID=9280 (fInt=true ): C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe 09:31:48.934006 vminfo Session 1: PID=9652 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:48.934006 vminfo Session 1: PID=9728 (fInt=true ): C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe 09:31:48.934006 vminfo Session 1: PID=9880 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:48.934006 vminfo Session 1: PID=9944 (fInt=true ): C:\Windows\System32\dllhost.exe 09:31:48.934006 vminfo Session 1: PID=8128 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17112.19011.0_x64__8wekyb3d8bbwe\Video.UI.exe 09:31:48.934006 vminfo Session 1: PID=9528 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:48.934006 vminfo Session 1: PID=10292 (fInt=true ): C:\Program Files\Windows Defender\MSASCuiL.exe 09:31:48.934006 vminfo Session 1: PID=10324 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:48.934006 vminfo Session 1: PID=10440 (fInt=true ): C:\Windows\System32\VBoxTray.exe 09:31:48.934006 vminfo Session 1: PID=10596 (fInt=true ): C:\Users\user\Documents\Visual Studio 2017\Projects\vboxtray_mon\vboxtray_mon\bin\Release\vboxtray_mon.exe 09:31:48.934006 vminfo Session 1: PID=10612 (fInt=true ): C:\Windows\System32\conhost.exe 09:31:48.934006 vminfo Session 1: PID=10720 (fInt=true ): C:\Program Files (x86)\FileZilla Server\FileZilla Server Interface.exe 09:31:48.934006 vminfo Session 1: PID=9808 (fInt=true ): C:\Windows\System32\svchost.exe 09:31:48.934006 vminfo Session 1: PID=6716 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18011.15918.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe 09:31:48.934006 vminfo Session 1: PID=6688 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:48.951141 vminfo Session 1: PID=10200 (fInt=true ): C:\Windows\System32\ApplicationFrameHost.exe 09:31:48.951141 vminfo Session 1: PID=4868 (fInt=true ): C:\Windows\ImmersiveControlPanel\SystemSettings.exe 09:31:48.951141 vminfo Session 1: PID=1444 (fInt=true ): C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe 09:31:48.951141 vminfo Session 1: PID=9504 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:48.951141 vminfo Session 1: PID=10840 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:48.951141 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/Session/1' = '#12154: cSessionProcs=32 (of 156 procs total)' 09:31:48.951141 vminfo Adding new user=user (session=1) with 32 processes 09:31:48.951141 vminfo Handling session 7 (of 17) 09:31:48.951141 vminfo Session data: Name=nx, SessionID=0, LogonID=0,685607, LogonType=3 09:31:48.951141 vminfo Handling session 8 (of 17) 09:31:48.951141 vminfo Session data: Name=ANONYMOUS LOGON, SessionID=0, LogonID=0,649881, LogonType=3 09:31:48.951141 vminfo Handling session 9 (of 17) 09:31:48.951141 vminfo Session data: Name=IUSR, SessionID=0, LogonID=0,995, LogonType=5 09:31:48.951141 vminfo Handling session 10 (of 17) 09:31:48.951141 vminfo Session data: Name=DWM-1, SessionID=1, LogonID=0,61006, LogonType=2 09:31:48.951141 vminfo Session LogonType=2 is supported -- looking up SID + type ... 09:31:48.951141 vminfo SID owner type=5 not handled, skipping 09:31:48.951141 vminfo Account User=DWM-1 is not logged in 09:31:48.951141 vminfo Handling session 11 (of 17) 09:31:48.951141 vminfo Session data: Name=DWM-1, SessionID=1, LogonID=0,60973, LogonType=2 09:31:48.951141 vminfo Session LogonType=2 is supported -- looking up SID + type ... 09:31:48.951141 vminfo SID owner type=5 not handled, skipping 09:31:48.951141 vminfo Account User=DWM-1 is not logged in 09:31:48.951141 vminfo Handling session 12 (of 17) 09:31:48.951141 vminfo Session data: Name=MACHINE$, SessionID=0, LogonID=0,996, LogonType=5 09:31:48.951141 vminfo Handling session 13 (of 17) 09:31:48.951141 vminfo Session data: Name=LOCAL SERVICE, SessionID=0, LogonID=0,997, LogonType=5 09:31:48.951141 vminfo Handling session 14 (of 17) 09:31:48.951141 vminfo Session data: Name=UMFD-1, SessionID=1, LogonID=0,34521, LogonType=2 09:31:48.951141 vminfo Session LogonType=2 is supported -- looking up SID + type ... 09:31:48.951141 vminfo SID owner type=5 not handled, skipping 09:31:48.951141 vminfo Account User=UMFD-1 is not logged in 09:31:48.951141 vminfo Handling session 15 (of 17) 09:31:48.951141 vminfo Session data: Name=UMFD-0, SessionID=0, LogonID=0,34482, LogonType=2 09:31:48.951141 vminfo Handling session 16 (of 17) 09:31:48.951141 vminfo Session data: Name=, SessionID=0, LogonID=0,32336, LogonType=0 09:31:48.951141 vminfo Handling session 17 (of 17) 09:31:48.951141 vminfo Session data: Name=MACHINE$, SessionID=0, LogonID=0,999, LogonType=0 09:31:48.951141 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA' = '#12154: cSessions=17, cProcs=156, cUniqueUsers=2' 09:31:48.951141 vminfo Found 2 unique logged-in user(s) 09:31:48.951141 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/User/0' = '#12154: szName=user, sessionID=1, cProcs=32' 09:31:48.951141 vminfo User 'user' has 32 interactive processes (session=1) 09:31:48.951141 vminfo Error: Error querying last input for user 'user', rc=VERR_PIPE_BUSY 09:31:48.951141 vminfo cUsersInList=0, pszUserList=, rc=VERR_PIPE_BUSY 09:31:48.951141 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/LoggedInUsersList' resulted in rc=VINF_NO_CHANGE 09:31:48.951141 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/LoggedInUsers' resulted in rc=VINF_NO_CHANGE 09:31:48.951141 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/NoLoggedInUsers' resulted in rc=VINF_NO_CHANGE 09:31:48.951141 vminfo Writing users returned with rc=VINF_NO_CHANGE 09:31:48.951141 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/IP' resulted in rc=VINF_NO_CHANGE 09:31:48.951141 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/Broadcast' resulted in rc=VINF_NO_CHANGE 09:31:48.951141 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/Netmask' resulted in rc=VINF_NO_CHANGE 09:31:48.951141 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/Status' resulted in rc=VINF_NO_CHANGE 09:31:48.951141 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/MAC' resulted in rc=VINF_NO_CHANGE 09:31:48.951141 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/IP' resulted in rc=VINF_NO_CHANGE 09:31:48.951141 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/Broadcast' resulted in rc=VINF_NO_CHANGE 09:31:48.951141 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/Netmask' resulted in rc=VINF_NO_CHANGE 09:31:48.951141 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/Status' resulted in rc=VINF_NO_CHANGE 09:31:48.951141 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/MAC' resulted in rc=VINF_NO_CHANGE 09:31:48.951141 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/IP' resulted in rc=VINF_NO_CHANGE 09:31:48.951141 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/Broadcast' resulted in rc=VINF_NO_CHANGE 09:31:48.951141 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/Netmask' resulted in rc=VINF_NO_CHANGE 09:31:48.951141 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/Status' resulted in rc=VINF_NO_CHANGE 09:31:48.951141 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/MAC' resulted in rc=VINF_NO_CHANGE 09:31:48.951141 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/IP' resulted in rc=VINF_NO_CHANGE 09:31:48.951141 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/Broadcast' resulted in rc=VINF_NO_CHANGE 09:31:48.951141 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/Netmask' resulted in rc=VINF_NO_CHANGE 09:31:48.951141 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/Status' resulted in rc=VINF_NO_CHANGE 09:31:48.951141 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/MAC' resulted in rc=VINF_NO_CHANGE 09:31:48.951141 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/IP' resulted in rc=VINF_NO_CHANGE 09:31:48.951141 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/Broadcast' resulted in rc=VINF_NO_CHANGE 09:31:48.951141 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/Netmask' resulted in rc=VINF_NO_CHANGE 09:31:48.951141 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/Status' resulted in rc=VINF_NO_CHANGE 09:31:48.951141 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/MAC' resulted in rc=VINF_NO_CHANGE 09:31:48.951141 vminfo [PropCache 00007ff6b2962520]: Written '/VirtualBox/GuestInfo/Net/Count'='5' (flags: 6), rc=VINF_SUCCESS 09:31:48.951141 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/Count' resulted in rc=VINF_SUCCESS 09:31:48.951141 vminfo Guest Property: /VirtualBox/HostInfo/VRDP/ActiveClient not found 09:31:48.951141 vminfo VRDP: Handling location awareness done 09:31:53.963231 vminfo Found 17 sessions 09:31:53.963231 vminfo Error: Get token class 'user' for process 0 failed, rc=VERR_INVALID_PARAMETER 09:31:53.963231 vminfo Error: Get token class 'groups' for process 0 failed, rc=VERR_INVALID_PARAMETER 09:31:53.963231 vminfo Error: Get token class 'statistics' for process 0 failed, rc=VERR_INVALID_PARAMETER 09:31:53.963231 vminfo Error: Get token class 'user' for process 4 failed, rc=VERR_ACCESS_DENIED 09:31:53.963231 vminfo Error: Get token class 'groups' for process 4 failed, rc=VERR_ACCESS_DENIED 09:31:53.963231 vminfo Error: Get token class 'statistics' for process 4 failed, rc=VERR_ACCESS_DENIED 09:31:53.963231 vminfo Error: Get token class 'user' for process 104 failed, rc=VERR_ACCESS_DENIED 09:31:53.963231 vminfo Error: Get token class 'groups' for process 104 failed, rc=VERR_ACCESS_DENIED 09:31:53.963231 vminfo Error: Get token class 'statistics' for process 104 failed, rc=VERR_ACCESS_DENIED 09:31:53.963231 vminfo Error: Get token class 'user' for process 472 failed, rc=VERR_ACCESS_DENIED 09:31:53.963231 vminfo Error: Get token class 'groups' for process 472 failed, rc=VERR_ACCESS_DENIED 09:31:53.963231 vminfo Error: Get token class 'statistics' for process 472 failed, rc=VERR_ACCESS_DENIED 09:31:53.963231 vminfo Error: Get token class 'user' for process 676 failed, rc=VERR_ACCESS_DENIED 09:31:53.963231 vminfo Error: Get token class 'groups' for process 676 failed, rc=VERR_ACCESS_DENIED 09:31:53.963231 vminfo Error: Get token class 'statistics' for process 676 failed, rc=VERR_ACCESS_DENIED 09:31:53.963231 vminfo Error: Get token class 'user' for process 756 failed, rc=VERR_ACCESS_DENIED 09:31:53.963231 vminfo Error: Get token class 'groups' for process 756 failed, rc=VERR_ACCESS_DENIED 09:31:53.963231 vminfo Error: Get token class 'statistics' for process 756 failed, rc=VERR_ACCESS_DENIED 09:31:53.963231 vminfo Error: Get token class 'user' for process 768 failed, rc=VERR_ACCESS_DENIED 09:31:53.963231 vminfo Error: Get token class 'groups' for process 768 failed, rc=VERR_ACCESS_DENIED 09:31:53.963231 vminfo Error: Get token class 'statistics' for process 768 failed, rc=VERR_ACCESS_DENIED 09:31:53.963231 vminfo Error: Get token class 'user' for process 876 failed, rc=VERR_ACCESS_DENIED 09:31:53.963231 vminfo Error: Get token class 'groups' for process 876 failed, rc=VERR_ACCESS_DENIED 09:31:53.963231 vminfo Error: Get token class 'statistics' for process 876 failed, rc=VERR_ACCESS_DENIED 09:31:53.963231 vminfo Error: Get token class 'user' for process 2532 failed, rc=VERR_ACCESS_DENIED 09:31:53.963231 vminfo Error: Get token class 'groups' for process 2532 failed, rc=VERR_ACCESS_DENIED 09:31:53.963231 vminfo Error: Get token class 'statistics' for process 2532 failed, rc=VERR_ACCESS_DENIED 09:31:53.963231 vminfo Error: Get token class 'user' for process 4136 failed, rc=VERR_ACCESS_DENIED 09:31:53.963231 vminfo Error: Get token class 'groups' for process 4136 failed, rc=VERR_ACCESS_DENIED 09:31:53.963231 vminfo Error: Get token class 'statistics' for process 4136 failed, rc=VERR_ACCESS_DENIED 09:31:53.963231 vminfo Error: Get token class 'user' for process 5212 failed, rc=VERR_ACCESS_DENIED 09:31:53.963231 vminfo Error: Get token class 'groups' for process 5212 failed, rc=VERR_ACCESS_DENIED 09:31:53.963231 vminfo Error: Get token class 'statistics' for process 5212 failed, rc=VERR_ACCESS_DENIED 09:31:53.963231 vminfo Handling session 1 (of 17) 09:31:53.963231 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2145999, LogonType=3 09:31:53.963231 vminfo Handling session 2 (of 17) 09:31:53.963231 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2113823, LogonType=3 09:31:53.963231 vminfo Handling session 3 (of 17) 09:31:53.963231 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2041868, LogonType=3 09:31:53.963231 vminfo Handling session 4 (of 17) 09:31:53.963231 vminfo Session data: Name=nx, SessionID=0, LogonID=0,1997776, LogonType=3 09:31:53.963231 vminfo Handling session 5 (of 17) 09:31:53.963231 vminfo Session data: Name=user, SessionID=1, LogonID=0,1970648, LogonType=2 09:31:53.963231 vminfo Session LogonType=2 is supported -- looking up SID + type ... 09:31:53.979359 vminfo Account User=user, Session=1, LogonID=0,1970648, AuthPkg=Negotiate, Domain=DOMAIN 09:31:53.979359 vminfo Account User=user, WTSConnectState=0 (4) 09:31:53.979359 vminfo Account User=user using TCS/RDP, state=0 09:31:53.979359 vminfo Account User=user is logged in 09:31:53.979359 vminfo Handling user=user, domain=DOMAIN, package=Negotiate, session=1 09:31:53.979359 vminfo Session 1: PID=6784 (fInt=true ): C:\Windows\System32\svchost.exe 09:31:53.979359 vminfo Session 1: PID=264 (fInt=true ): C:\Windows\System32\sihost.exe 09:31:53.979359 vminfo Session 1: PID=3148 (fInt=true ): C:\Windows\System32\svchost.exe 09:31:53.979359 vminfo Session 1: PID=7176 (fInt=true ): C:\Windows\System32\taskhostw.exe 09:31:53.979359 vminfo Session 1: PID=7268 (fInt=true ): C:\Windows\System32\ctfmon.exe 09:31:53.979359 vminfo Session 1: PID=8732 (fInt=true ): C:\Windows\explorer.exe 09:31:53.979359 vminfo Session 1: PID=9016 (fInt=true ): C:\Program Files (x86)\NoMachine\bin\nxclient.bin 09:31:53.979359 vminfo Session 1: PID=8260 (fInt=true ): C:\Program Files\McAfee\Agent\x86\UpdaterUI.exe 09:31:53.979359 vminfo Session 1: PID=8828 (fInt=true ): C:\Program Files\Classic Shell\ClassicStartMenu.exe 09:31:53.979359 vminfo Session 1: PID=8488 (fInt=true ): C:\Program Files\McAfee\Agent\x86\mctray.exe 09:31:53.979359 vminfo Session 1: PID=9172 (fInt=true ): C:\Program Files\TortoiseSVN\bin\TSVNCache.exe 09:31:53.979359 vminfo Session 1: PID=9280 (fInt=true ): C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe 09:31:53.979359 vminfo Session 1: PID=9652 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:53.979359 vminfo Session 1: PID=9728 (fInt=true ): C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe 09:31:53.979359 vminfo Session 1: PID=9880 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:53.979359 vminfo Session 1: PID=9944 (fInt=true ): C:\Windows\System32\dllhost.exe 09:31:53.979359 vminfo Session 1: PID=8128 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17112.19011.0_x64__8wekyb3d8bbwe\Video.UI.exe 09:31:53.979359 vminfo Session 1: PID=9528 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:53.979359 vminfo Session 1: PID=10292 (fInt=true ): C:\Program Files\Windows Defender\MSASCuiL.exe 09:31:53.979359 vminfo Session 1: PID=10324 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:53.979359 vminfo Session 1: PID=10440 (fInt=true ): C:\Windows\System32\VBoxTray.exe 09:31:53.979359 vminfo Session 1: PID=10596 (fInt=true ): C:\Users\user\Documents\Visual Studio 2017\Projects\vboxtray_mon\vboxtray_mon\bin\Release\vboxtray_mon.exe 09:31:53.979359 vminfo Session 1: PID=10612 (fInt=true ): C:\Windows\System32\conhost.exe 09:31:53.979359 vminfo Session 1: PID=10720 (fInt=true ): C:\Program Files (x86)\FileZilla Server\FileZilla Server Interface.exe 09:31:53.979359 vminfo Session 1: PID=9808 (fInt=true ): C:\Windows\System32\svchost.exe 09:31:53.979359 vminfo Session 1: PID=6716 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18011.15918.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe 09:31:53.979359 vminfo Session 1: PID=6688 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:53.979359 vminfo Session 1: PID=10200 (fInt=true ): C:\Windows\System32\ApplicationFrameHost.exe 09:31:53.979359 vminfo Session 1: PID=4868 (fInt=true ): C:\Windows\ImmersiveControlPanel\SystemSettings.exe 09:31:53.979359 vminfo Session 1: PID=1444 (fInt=true ): C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe 09:31:53.979359 vminfo Session 1: PID=9504 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:53.979359 vminfo Session 1: PID=10840 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:53.979359 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/Session/1' = '#12155: cSessionProcs=32 (of 156 procs total)' 09:31:53.979359 vminfo Adding new user=user (session=1) with 32 processes 09:31:53.979359 vminfo Handling session 6 (of 17) 09:31:53.979359 vminfo Session data: Name=user, SessionID=1, LogonID=0,1970599, LogonType=2 09:31:53.979359 vminfo Session LogonType=2 is supported -- looking up SID + type ... 09:31:53.979359 vminfo Account User=user, Session=1, LogonID=0,1970599, AuthPkg=Kerberos, Domain=DOMAIN 09:31:53.979359 vminfo Account User=user, WTSConnectState=0 (4) 09:31:53.979359 vminfo Account User=user using TCS/RDP, state=0 09:31:53.979359 vminfo Account User=user is logged in 09:31:53.979359 vminfo Handling user=user, domain=DOMAIN, package=Kerberos, session=1 09:31:53.979359 vminfo Session 1: PID=6784 (fInt=true ): C:\Windows\System32\svchost.exe 09:31:53.979359 vminfo Session 1: PID=264 (fInt=true ): C:\Windows\System32\sihost.exe 09:31:53.979359 vminfo Session 1: PID=3148 (fInt=true ): C:\Windows\System32\svchost.exe 09:31:53.979359 vminfo Session 1: PID=7176 (fInt=true ): C:\Windows\System32\taskhostw.exe 09:31:53.979359 vminfo Session 1: PID=7268 (fInt=true ): C:\Windows\System32\ctfmon.exe 09:31:53.979359 vminfo Session 1: PID=8732 (fInt=true ): C:\Windows\explorer.exe 09:31:53.979359 vminfo Session 1: PID=9016 (fInt=true ): C:\Program Files (x86)\NoMachine\bin\nxclient.bin 09:31:53.979359 vminfo Session 1: PID=8260 (fInt=true ): C:\Program Files\McAfee\Agent\x86\UpdaterUI.exe 09:31:53.979359 vminfo Session 1: PID=8828 (fInt=true ): C:\Program Files\Classic Shell\ClassicStartMenu.exe 09:31:53.979359 vminfo Session 1: PID=8488 (fInt=true ): C:\Program Files\McAfee\Agent\x86\mctray.exe 09:31:53.979359 vminfo Session 1: PID=9172 (fInt=true ): C:\Program Files\TortoiseSVN\bin\TSVNCache.exe 09:31:53.979359 vminfo Session 1: PID=9280 (fInt=true ): C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe 09:31:53.979359 vminfo Session 1: PID=9652 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:53.979359 vminfo Session 1: PID=9728 (fInt=true ): C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe 09:31:53.979359 vminfo Session 1: PID=9880 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:53.979359 vminfo Session 1: PID=9944 (fInt=true ): C:\Windows\System32\dllhost.exe 09:31:53.979359 vminfo Session 1: PID=8128 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17112.19011.0_x64__8wekyb3d8bbwe\Video.UI.exe 09:31:53.979359 vminfo Session 1: PID=9528 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:53.979359 vminfo Session 1: PID=10292 (fInt=true ): C:\Program Files\Windows Defender\MSASCuiL.exe 09:31:53.979359 vminfo Session 1: PID=10324 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:53.979359 vminfo Session 1: PID=10440 (fInt=true ): C:\Windows\System32\VBoxTray.exe 09:31:53.979359 vminfo Session 1: PID=10596 (fInt=true ): C:\Users\user\Documents\Visual Studio 2017\Projects\vboxtray_mon\vboxtray_mon\bin\Release\vboxtray_mon.exe 09:31:53.979359 vminfo Session 1: PID=10612 (fInt=true ): C:\Windows\System32\conhost.exe 09:31:53.979359 vminfo Session 1: PID=10720 (fInt=true ): C:\Program Files (x86)\FileZilla Server\FileZilla Server Interface.exe 09:31:53.979359 vminfo Session 1: PID=9808 (fInt=true ): C:\Windows\System32\svchost.exe 09:31:53.995971 vminfo Session 1: PID=6716 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18011.15918.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe 09:31:53.995971 vminfo Session 1: PID=6688 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:53.995971 vminfo Session 1: PID=10200 (fInt=true ): C:\Windows\System32\ApplicationFrameHost.exe 09:31:53.995971 vminfo Session 1: PID=4868 (fInt=true ): C:\Windows\ImmersiveControlPanel\SystemSettings.exe 09:31:53.995971 vminfo Session 1: PID=1444 (fInt=true ): C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe 09:31:53.995971 vminfo Session 1: PID=9504 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:53.995971 vminfo Session 1: PID=10840 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:53.995971 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/Session/1' = '#12155: cSessionProcs=32 (of 156 procs total)' 09:31:53.995971 vminfo Adding new user=user (session=1) with 32 processes 09:31:53.995971 vminfo Handling session 7 (of 17) 09:31:53.995971 vminfo Session data: Name=nx, SessionID=0, LogonID=0,685607, LogonType=3 09:31:53.995971 vminfo Handling session 8 (of 17) 09:31:53.995971 vminfo Session data: Name=ANONYMOUS LOGON, SessionID=0, LogonID=0,649881, LogonType=3 09:31:53.995971 vminfo Handling session 9 (of 17) 09:31:53.995971 vminfo Session data: Name=IUSR, SessionID=0, LogonID=0,995, LogonType=5 09:31:53.995971 vminfo Handling session 10 (of 17) 09:31:53.995971 vminfo Session data: Name=DWM-1, SessionID=1, LogonID=0,61006, LogonType=2 09:31:53.995971 vminfo Session LogonType=2 is supported -- looking up SID + type ... 09:31:53.995971 vminfo SID owner type=5 not handled, skipping 09:31:53.995971 vminfo Account User=DWM-1 is not logged in 09:31:53.995971 vminfo Handling session 11 (of 17) 09:31:53.995971 vminfo Session data: Name=DWM-1, SessionID=1, LogonID=0,60973, LogonType=2 09:31:53.995971 vminfo Session LogonType=2 is supported -- looking up SID + type ... 09:31:53.995971 vminfo SID owner type=5 not handled, skipping 09:31:53.995971 vminfo Account User=DWM-1 is not logged in 09:31:53.995971 vminfo Handling session 12 (of 17) 09:31:53.995971 vminfo Session data: Name=MACHINE$, SessionID=0, LogonID=0,996, LogonType=5 09:31:53.995971 vminfo Handling session 13 (of 17) 09:31:53.995971 vminfo Session data: Name=LOCAL SERVICE, SessionID=0, LogonID=0,997, LogonType=5 09:31:53.995971 vminfo Handling session 14 (of 17) 09:31:53.995971 vminfo Session data: Name=UMFD-1, SessionID=1, LogonID=0,34521, LogonType=2 09:31:53.995971 vminfo Session LogonType=2 is supported -- looking up SID + type ... 09:31:53.995971 vminfo SID owner type=5 not handled, skipping 09:31:53.995971 vminfo Account User=UMFD-1 is not logged in 09:31:53.995971 vminfo Handling session 15 (of 17) 09:31:53.995971 vminfo Session data: Name=UMFD-0, SessionID=0, LogonID=0,34482, LogonType=2 09:31:53.995971 vminfo Handling session 16 (of 17) 09:31:53.995971 vminfo Session data: Name=, SessionID=0, LogonID=0,32336, LogonType=0 09:31:53.995971 vminfo Handling session 17 (of 17) 09:31:53.995971 vminfo Session data: Name=MACHINE$, SessionID=0, LogonID=0,999, LogonType=0 09:31:53.995971 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA' = '#12155: cSessions=17, cProcs=156, cUniqueUsers=2' 09:31:53.995971 vminfo Found 2 unique logged-in user(s) 09:31:53.995971 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/User/0' = '#12155: szName=user, sessionID=1, cProcs=32' 09:31:53.995971 vminfo User 'user' has 32 interactive processes (session=1) 09:31:53.995971 vminfo Error: Error querying last input for user 'user', rc=VERR_PIPE_BUSY 09:31:53.995971 vminfo cUsersInList=0, pszUserList=, rc=VERR_PIPE_BUSY 09:31:53.995971 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/LoggedInUsersList' resulted in rc=VINF_NO_CHANGE 09:31:53.995971 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/LoggedInUsers' resulted in rc=VINF_NO_CHANGE 09:31:53.995971 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/NoLoggedInUsers' resulted in rc=VINF_NO_CHANGE 09:31:53.995971 vminfo Writing users returned with rc=VINF_NO_CHANGE 09:31:53.995971 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/IP' resulted in rc=VINF_NO_CHANGE 09:31:53.995971 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/Broadcast' resulted in rc=VINF_NO_CHANGE 09:31:53.995971 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/Netmask' resulted in rc=VINF_NO_CHANGE 09:31:53.995971 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/Status' resulted in rc=VINF_NO_CHANGE 09:31:53.995971 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/MAC' resulted in rc=VINF_NO_CHANGE 09:31:53.995971 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/IP' resulted in rc=VINF_NO_CHANGE 09:31:53.995971 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/Broadcast' resulted in rc=VINF_NO_CHANGE 09:31:53.995971 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/Netmask' resulted in rc=VINF_NO_CHANGE 09:31:53.995971 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/Status' resulted in rc=VINF_NO_CHANGE 09:31:53.995971 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/MAC' resulted in rc=VINF_NO_CHANGE 09:31:53.995971 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/IP' resulted in rc=VINF_NO_CHANGE 09:31:53.995971 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/Broadcast' resulted in rc=VINF_NO_CHANGE 09:31:53.995971 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/Netmask' resulted in rc=VINF_NO_CHANGE 09:31:53.995971 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/Status' resulted in rc=VINF_NO_CHANGE 09:31:53.995971 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/MAC' resulted in rc=VINF_NO_CHANGE 09:31:53.995971 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/IP' resulted in rc=VINF_NO_CHANGE 09:31:53.995971 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/Broadcast' resulted in rc=VINF_NO_CHANGE 09:31:53.995971 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/Netmask' resulted in rc=VINF_NO_CHANGE 09:31:53.995971 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/Status' resulted in rc=VINF_NO_CHANGE 09:31:53.995971 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/MAC' resulted in rc=VINF_NO_CHANGE 09:31:53.995971 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/IP' resulted in rc=VINF_NO_CHANGE 09:31:53.995971 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/Broadcast' resulted in rc=VINF_NO_CHANGE 09:31:53.995971 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/Netmask' resulted in rc=VINF_NO_CHANGE 09:31:53.995971 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/Status' resulted in rc=VINF_NO_CHANGE 09:31:53.995971 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/MAC' resulted in rc=VINF_NO_CHANGE 09:31:53.995971 vminfo [PropCache 00007ff6b2962520]: Written '/VirtualBox/GuestInfo/Net/Count'='5' (flags: 6), rc=VINF_SUCCESS 09:31:53.995971 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/Count' resulted in rc=VINF_SUCCESS 09:31:53.995971 vminfo Guest Property: /VirtualBox/HostInfo/VRDP/ActiveClient not found 09:31:53.995971 vminfo VRDP: Handling location awareness done 09:31:56.146938 timesync vgsvcTimeSyncWorker: Host: 2019-02-26T09:31:56.022000000Z (MinAdjust: 200 ms), Guest: 2019-02-26T09:31:56.146938200Z => -124 938 200 ns drift 09:31:59.004842 vminfo Found 17 sessions 09:31:59.004842 vminfo Error: Get token class 'user' for process 0 failed, rc=VERR_INVALID_PARAMETER 09:31:59.004842 vminfo Error: Get token class 'groups' for process 0 failed, rc=VERR_INVALID_PARAMETER 09:31:59.004842 vminfo Error: Get token class 'statistics' for process 0 failed, rc=VERR_INVALID_PARAMETER 09:31:59.004842 vminfo Error: Get token class 'user' for process 4 failed, rc=VERR_ACCESS_DENIED 09:31:59.004842 vminfo Error: Get token class 'groups' for process 4 failed, rc=VERR_ACCESS_DENIED 09:31:59.004842 vminfo Error: Get token class 'statistics' for process 4 failed, rc=VERR_ACCESS_DENIED 09:31:59.004842 vminfo Error: Get token class 'user' for process 104 failed, rc=VERR_ACCESS_DENIED 09:31:59.004842 vminfo Error: Get token class 'groups' for process 104 failed, rc=VERR_ACCESS_DENIED 09:31:59.004842 vminfo Error: Get token class 'statistics' for process 104 failed, rc=VERR_ACCESS_DENIED 09:31:59.004842 vminfo Error: Get token class 'user' for process 472 failed, rc=VERR_ACCESS_DENIED 09:31:59.004842 vminfo Error: Get token class 'groups' for process 472 failed, rc=VERR_ACCESS_DENIED 09:31:59.004842 vminfo Error: Get token class 'statistics' for process 472 failed, rc=VERR_ACCESS_DENIED 09:31:59.004842 vminfo Error: Get token class 'user' for process 676 failed, rc=VERR_ACCESS_DENIED 09:31:59.004842 vminfo Error: Get token class 'groups' for process 676 failed, rc=VERR_ACCESS_DENIED 09:31:59.004842 vminfo Error: Get token class 'statistics' for process 676 failed, rc=VERR_ACCESS_DENIED 09:31:59.004842 vminfo Error: Get token class 'user' for process 756 failed, rc=VERR_ACCESS_DENIED 09:31:59.004842 vminfo Error: Get token class 'groups' for process 756 failed, rc=VERR_ACCESS_DENIED 09:31:59.004842 vminfo Error: Get token class 'statistics' for process 756 failed, rc=VERR_ACCESS_DENIED 09:31:59.004842 vminfo Error: Get token class 'user' for process 768 failed, rc=VERR_ACCESS_DENIED 09:31:59.004842 vminfo Error: Get token class 'groups' for process 768 failed, rc=VERR_ACCESS_DENIED 09:31:59.004842 vminfo Error: Get token class 'statistics' for process 768 failed, rc=VERR_ACCESS_DENIED 09:31:59.004842 vminfo Error: Get token class 'user' for process 876 failed, rc=VERR_ACCESS_DENIED 09:31:59.004842 vminfo Error: Get token class 'groups' for process 876 failed, rc=VERR_ACCESS_DENIED 09:31:59.004842 vminfo Error: Get token class 'statistics' for process 876 failed, rc=VERR_ACCESS_DENIED 09:31:59.004842 vminfo Error: Get token class 'user' for process 2532 failed, rc=VERR_ACCESS_DENIED 09:31:59.004842 vminfo Error: Get token class 'groups' for process 2532 failed, rc=VERR_ACCESS_DENIED 09:31:59.004842 vminfo Error: Get token class 'statistics' for process 2532 failed, rc=VERR_ACCESS_DENIED 09:31:59.004842 vminfo Error: Get token class 'user' for process 4136 failed, rc=VERR_ACCESS_DENIED 09:31:59.004842 vminfo Error: Get token class 'groups' for process 4136 failed, rc=VERR_ACCESS_DENIED 09:31:59.004842 vminfo Error: Get token class 'statistics' for process 4136 failed, rc=VERR_ACCESS_DENIED 09:31:59.004842 vminfo Error: Get token class 'user' for process 5212 failed, rc=VERR_ACCESS_DENIED 09:31:59.004842 vminfo Error: Get token class 'groups' for process 5212 failed, rc=VERR_ACCESS_DENIED 09:31:59.004842 vminfo Error: Get token class 'statistics' for process 5212 failed, rc=VERR_ACCESS_DENIED 09:31:59.004842 vminfo Handling session 1 (of 17) 09:31:59.004842 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2145999, LogonType=3 09:31:59.004842 vminfo Handling session 2 (of 17) 09:31:59.004842 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2113823, LogonType=3 09:31:59.004842 vminfo Handling session 3 (of 17) 09:31:59.004842 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2041868, LogonType=3 09:31:59.004842 vminfo Handling session 4 (of 17) 09:31:59.004842 vminfo Session data: Name=nx, SessionID=0, LogonID=0,1997776, LogonType=3 09:31:59.004842 vminfo Handling session 5 (of 17) 09:31:59.004842 vminfo Session data: Name=user, SessionID=1, LogonID=0,1970648, LogonType=2 09:31:59.004842 vminfo Session LogonType=2 is supported -- looking up SID + type ... 09:31:59.004842 vminfo Account User=user, Session=1, LogonID=0,1970648, AuthPkg=Negotiate, Domain=DOMAIN 09:31:59.004842 vminfo Account User=user, WTSConnectState=0 (4) 09:31:59.021573 vminfo Account User=user using TCS/RDP, state=0 09:31:59.021573 vminfo Account User=user is logged in 09:31:59.021573 vminfo Handling user=user, domain=DOMAIN, package=Negotiate, session=1 09:31:59.021573 vminfo Session 1: PID=6784 (fInt=true ): C:\Windows\System32\svchost.exe 09:31:59.021573 vminfo Session 1: PID=264 (fInt=true ): C:\Windows\System32\sihost.exe 09:31:59.021573 vminfo Session 1: PID=3148 (fInt=true ): C:\Windows\System32\svchost.exe 09:31:59.021573 vminfo Session 1: PID=7176 (fInt=true ): C:\Windows\System32\taskhostw.exe 09:31:59.021573 vminfo Session 1: PID=7268 (fInt=true ): C:\Windows\System32\ctfmon.exe 09:31:59.021573 vminfo Session 1: PID=8732 (fInt=true ): C:\Windows\explorer.exe 09:31:59.021573 vminfo Session 1: PID=9016 (fInt=true ): C:\Program Files (x86)\NoMachine\bin\nxclient.bin 09:31:59.021573 vminfo Session 1: PID=8260 (fInt=true ): C:\Program Files\McAfee\Agent\x86\UpdaterUI.exe 09:31:59.021573 vminfo Session 1: PID=8828 (fInt=true ): C:\Program Files\Classic Shell\ClassicStartMenu.exe 09:31:59.021573 vminfo Session 1: PID=8488 (fInt=true ): C:\Program Files\McAfee\Agent\x86\mctray.exe 09:31:59.021573 vminfo Session 1: PID=9172 (fInt=true ): C:\Program Files\TortoiseSVN\bin\TSVNCache.exe 09:31:59.021573 vminfo Session 1: PID=9280 (fInt=true ): C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe 09:31:59.021573 vminfo Session 1: PID=9652 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:59.021573 vminfo Session 1: PID=9728 (fInt=true ): C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe 09:31:59.021573 vminfo Session 1: PID=9880 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:59.021573 vminfo Session 1: PID=9944 (fInt=true ): C:\Windows\System32\dllhost.exe 09:31:59.021573 vminfo Session 1: PID=8128 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17112.19011.0_x64__8wekyb3d8bbwe\Video.UI.exe 09:31:59.021573 vminfo Session 1: PID=9528 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:59.021573 vminfo Session 1: PID=10292 (fInt=true ): C:\Program Files\Windows Defender\MSASCuiL.exe 09:31:59.021573 vminfo Session 1: PID=10324 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:59.021573 vminfo Session 1: PID=10440 (fInt=true ): C:\Windows\System32\VBoxTray.exe 09:31:59.021573 vminfo Session 1: PID=10596 (fInt=true ): C:\Users\user\Documents\Visual Studio 2017\Projects\vboxtray_mon\vboxtray_mon\bin\Release\vboxtray_mon.exe 09:31:59.021573 vminfo Session 1: PID=10612 (fInt=true ): C:\Windows\System32\conhost.exe 09:31:59.021573 vminfo Session 1: PID=10720 (fInt=true ): C:\Program Files (x86)\FileZilla Server\FileZilla Server Interface.exe 09:31:59.021573 vminfo Session 1: PID=9808 (fInt=true ): C:\Windows\System32\svchost.exe 09:31:59.021573 vminfo Session 1: PID=6716 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18011.15918.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe 09:31:59.021573 vminfo Session 1: PID=6688 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:59.021573 vminfo Session 1: PID=10200 (fInt=true ): C:\Windows\System32\ApplicationFrameHost.exe 09:31:59.021573 vminfo Session 1: PID=4868 (fInt=true ): C:\Windows\ImmersiveControlPanel\SystemSettings.exe 09:31:59.021573 vminfo Session 1: PID=1444 (fInt=true ): C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe 09:31:59.021573 vminfo Session 1: PID=9504 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:59.021573 vminfo Session 1: PID=10840 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:59.021573 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/Session/1' = '#12156: cSessionProcs=32 (of 156 procs total)' 09:31:59.021573 vminfo Adding new user=user (session=1) with 32 processes 09:31:59.021573 vminfo Handling session 6 (of 17) 09:31:59.021573 vminfo Session data: Name=user, SessionID=1, LogonID=0,1970599, LogonType=2 09:31:59.021573 vminfo Session LogonType=2 is supported -- looking up SID + type ... 09:31:59.021573 vminfo Account User=user, Session=1, LogonID=0,1970599, AuthPkg=Kerberos, Domain=DOMAIN 09:31:59.021573 vminfo Account User=user, WTSConnectState=0 (4) 09:31:59.021573 vminfo Account User=user using TCS/RDP, state=0 09:31:59.021573 vminfo Account User=user is logged in 09:31:59.021573 vminfo Handling user=user, domain=DOMAIN, package=Kerberos, session=1 09:31:59.021573 vminfo Session 1: PID=6784 (fInt=true ): C:\Windows\System32\svchost.exe 09:31:59.021573 vminfo Session 1: PID=264 (fInt=true ): C:\Windows\System32\sihost.exe 09:31:59.021573 vminfo Session 1: PID=3148 (fInt=true ): C:\Windows\System32\svchost.exe 09:31:59.021573 vminfo Session 1: PID=7176 (fInt=true ): C:\Windows\System32\taskhostw.exe 09:31:59.021573 vminfo Session 1: PID=7268 (fInt=true ): C:\Windows\System32\ctfmon.exe 09:31:59.021573 vminfo Session 1: PID=8732 (fInt=true ): C:\Windows\explorer.exe 09:31:59.021573 vminfo Session 1: PID=9016 (fInt=true ): C:\Program Files (x86)\NoMachine\bin\nxclient.bin 09:31:59.021573 vminfo Session 1: PID=8260 (fInt=true ): C:\Program Files\McAfee\Agent\x86\UpdaterUI.exe 09:31:59.021573 vminfo Session 1: PID=8828 (fInt=true ): C:\Program Files\Classic Shell\ClassicStartMenu.exe 09:31:59.021573 vminfo Session 1: PID=8488 (fInt=true ): C:\Program Files\McAfee\Agent\x86\mctray.exe 09:31:59.021573 vminfo Session 1: PID=9172 (fInt=true ): C:\Program Files\TortoiseSVN\bin\TSVNCache.exe 09:31:59.021573 vminfo Session 1: PID=9280 (fInt=true ): C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe 09:31:59.021573 vminfo Session 1: PID=9652 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:59.021573 vminfo Session 1: PID=9728 (fInt=true ): C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe 09:31:59.021573 vminfo Session 1: PID=9880 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:59.021573 vminfo Session 1: PID=9944 (fInt=true ): C:\Windows\System32\dllhost.exe 09:31:59.021573 vminfo Session 1: PID=8128 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17112.19011.0_x64__8wekyb3d8bbwe\Video.UI.exe 09:31:59.021573 vminfo Session 1: PID=9528 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:59.021573 vminfo Session 1: PID=10292 (fInt=true ): C:\Program Files\Windows Defender\MSASCuiL.exe 09:31:59.021573 vminfo Session 1: PID=10324 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:59.021573 vminfo Session 1: PID=10440 (fInt=true ): C:\Windows\System32\VBoxTray.exe 09:31:59.021573 vminfo Session 1: PID=10596 (fInt=true ): C:\Users\user\Documents\Visual Studio 2017\Projects\vboxtray_mon\vboxtray_mon\bin\Release\vboxtray_mon.exe 09:31:59.021573 vminfo Session 1: PID=10612 (fInt=true ): C:\Windows\System32\conhost.exe 09:31:59.021573 vminfo Session 1: PID=10720 (fInt=true ): C:\Program Files (x86)\FileZilla Server\FileZilla Server Interface.exe 09:31:59.021573 vminfo Session 1: PID=9808 (fInt=true ): C:\Windows\System32\svchost.exe 09:31:59.038655 vminfo Session 1: PID=6716 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18011.15918.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe 09:31:59.038655 vminfo Session 1: PID=6688 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:59.038655 vminfo Session 1: PID=10200 (fInt=true ): C:\Windows\System32\ApplicationFrameHost.exe 09:31:59.038655 vminfo Session 1: PID=4868 (fInt=true ): C:\Windows\ImmersiveControlPanel\SystemSettings.exe 09:31:59.038655 vminfo Session 1: PID=1444 (fInt=true ): C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe 09:31:59.038655 vminfo Session 1: PID=9504 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:59.038655 vminfo Session 1: PID=10840 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:31:59.038655 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/Session/1' = '#12156: cSessionProcs=32 (of 156 procs total)' 09:31:59.038655 vminfo Adding new user=user (session=1) with 32 processes 09:31:59.038655 vminfo Handling session 7 (of 17) 09:31:59.038655 vminfo Session data: Name=nx, SessionID=0, LogonID=0,685607, LogonType=3 09:31:59.038655 vminfo Handling session 8 (of 17) 09:31:59.038655 vminfo Session data: Name=ANONYMOUS LOGON, SessionID=0, LogonID=0,649881, LogonType=3 09:31:59.038655 vminfo Handling session 9 (of 17) 09:31:59.038655 vminfo Session data: Name=IUSR, SessionID=0, LogonID=0,995, LogonType=5 09:31:59.038655 vminfo Handling session 10 (of 17) 09:31:59.038655 vminfo Session data: Name=DWM-1, SessionID=1, LogonID=0,61006, LogonType=2 09:31:59.038655 vminfo Session LogonType=2 is supported -- looking up SID + type ... 09:31:59.038655 vminfo SID owner type=5 not handled, skipping 09:31:59.038655 vminfo Account User=DWM-1 is not logged in 09:31:59.038655 vminfo Handling session 11 (of 17) 09:31:59.038655 vminfo Session data: Name=DWM-1, SessionID=1, LogonID=0,60973, LogonType=2 09:31:59.038655 vminfo Session LogonType=2 is supported -- looking up SID + type ... 09:31:59.038655 vminfo SID owner type=5 not handled, skipping 09:31:59.038655 vminfo Account User=DWM-1 is not logged in 09:31:59.038655 vminfo Handling session 12 (of 17) 09:31:59.038655 vminfo Session data: Name=MACHINE$, SessionID=0, LogonID=0,996, LogonType=5 09:31:59.038655 vminfo Handling session 13 (of 17) 09:31:59.038655 vminfo Session data: Name=LOCAL SERVICE, SessionID=0, LogonID=0,997, LogonType=5 09:31:59.038655 vminfo Handling session 14 (of 17) 09:31:59.038655 vminfo Session data: Name=UMFD-1, SessionID=1, LogonID=0,34521, LogonType=2 09:31:59.038655 vminfo Session LogonType=2 is supported -- looking up SID + type ... 09:31:59.038655 vminfo SID owner type=5 not handled, skipping 09:31:59.038655 vminfo Account User=UMFD-1 is not logged in 09:31:59.038655 vminfo Handling session 15 (of 17) 09:31:59.038655 vminfo Session data: Name=UMFD-0, SessionID=0, LogonID=0,34482, LogonType=2 09:31:59.038655 vminfo Handling session 16 (of 17) 09:31:59.038655 vminfo Session data: Name=, SessionID=0, LogonID=0,32336, LogonType=0 09:31:59.038655 vminfo Handling session 17 (of 17) 09:31:59.038655 vminfo Session data: Name=MACHINE$, SessionID=0, LogonID=0,999, LogonType=0 09:31:59.038655 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA' = '#12156: cSessions=17, cProcs=156, cUniqueUsers=2' 09:31:59.038655 vminfo Found 2 unique logged-in user(s) 09:31:59.038655 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/User/0' = '#12156: szName=user, sessionID=1, cProcs=32' 09:31:59.038655 vminfo User 'user' has 32 interactive processes (session=1) 09:31:59.038655 vminfo Error: Error querying last input for user 'user', rc=VERR_PIPE_BUSY 09:31:59.038655 vminfo cUsersInList=0, pszUserList=, rc=VERR_PIPE_BUSY 09:31:59.038655 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/LoggedInUsersList' resulted in rc=VINF_NO_CHANGE 09:31:59.038655 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/LoggedInUsers' resulted in rc=VINF_NO_CHANGE 09:31:59.038655 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/NoLoggedInUsers' resulted in rc=VINF_NO_CHANGE 09:31:59.038655 vminfo Writing users returned with rc=VINF_NO_CHANGE 09:31:59.038655 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/IP' resulted in rc=VINF_NO_CHANGE 09:31:59.038655 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/Broadcast' resulted in rc=VINF_NO_CHANGE 09:31:59.038655 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/Netmask' resulted in rc=VINF_NO_CHANGE 09:31:59.038655 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/Status' resulted in rc=VINF_NO_CHANGE 09:31:59.038655 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/MAC' resulted in rc=VINF_NO_CHANGE 09:31:59.038655 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/IP' resulted in rc=VINF_NO_CHANGE 09:31:59.038655 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/Broadcast' resulted in rc=VINF_NO_CHANGE 09:31:59.038655 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/Netmask' resulted in rc=VINF_NO_CHANGE 09:31:59.038655 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/Status' resulted in rc=VINF_NO_CHANGE 09:31:59.038655 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/MAC' resulted in rc=VINF_NO_CHANGE 09:31:59.038655 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/IP' resulted in rc=VINF_NO_CHANGE 09:31:59.038655 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/Broadcast' resulted in rc=VINF_NO_CHANGE 09:31:59.038655 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/Netmask' resulted in rc=VINF_NO_CHANGE 09:31:59.038655 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/Status' resulted in rc=VINF_NO_CHANGE 09:31:59.038655 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/MAC' resulted in rc=VINF_NO_CHANGE 09:31:59.038655 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/IP' resulted in rc=VINF_NO_CHANGE 09:31:59.038655 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/Broadcast' resulted in rc=VINF_NO_CHANGE 09:31:59.038655 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/Netmask' resulted in rc=VINF_NO_CHANGE 09:31:59.038655 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/Status' resulted in rc=VINF_NO_CHANGE 09:31:59.038655 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/MAC' resulted in rc=VINF_NO_CHANGE 09:31:59.038655 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/IP' resulted in rc=VINF_NO_CHANGE 09:31:59.038655 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/Broadcast' resulted in rc=VINF_NO_CHANGE 09:31:59.038655 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/Netmask' resulted in rc=VINF_NO_CHANGE 09:31:59.038655 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/Status' resulted in rc=VINF_NO_CHANGE 09:31:59.038655 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/MAC' resulted in rc=VINF_NO_CHANGE 09:31:59.038655 vminfo [PropCache 00007ff6b2962520]: Written '/VirtualBox/GuestInfo/Net/Count'='5' (flags: 6), rc=VINF_SUCCESS 09:31:59.038655 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/Count' resulted in rc=VINF_SUCCESS 09:31:59.038655 vminfo Guest Property: /VirtualBox/HostInfo/VRDP/ActiveClient not found 09:31:59.038655 vminfo VRDP: Handling location awareness done 09:32:04.047390 vminfo Found 17 sessions 09:32:04.047390 vminfo Error: Get token class 'user' for process 0 failed, rc=VERR_INVALID_PARAMETER 09:32:04.047390 vminfo Error: Get token class 'groups' for process 0 failed, rc=VERR_INVALID_PARAMETER 09:32:04.047390 vminfo Error: Get token class 'statistics' for process 0 failed, rc=VERR_INVALID_PARAMETER 09:32:04.047390 vminfo Error: Get token class 'user' for process 4 failed, rc=VERR_ACCESS_DENIED 09:32:04.047390 vminfo Error: Get token class 'groups' for process 4 failed, rc=VERR_ACCESS_DENIED 09:32:04.047390 vminfo Error: Get token class 'statistics' for process 4 failed, rc=VERR_ACCESS_DENIED 09:32:04.047390 vminfo Error: Get token class 'user' for process 104 failed, rc=VERR_ACCESS_DENIED 09:32:04.047390 vminfo Error: Get token class 'groups' for process 104 failed, rc=VERR_ACCESS_DENIED 09:32:04.047390 vminfo Error: Get token class 'statistics' for process 104 failed, rc=VERR_ACCESS_DENIED 09:32:04.047390 vminfo Error: Get token class 'user' for process 472 failed, rc=VERR_ACCESS_DENIED 09:32:04.047390 vminfo Error: Get token class 'groups' for process 472 failed, rc=VERR_ACCESS_DENIED 09:32:04.047390 vminfo Error: Get token class 'statistics' for process 472 failed, rc=VERR_ACCESS_DENIED 09:32:04.047390 vminfo Error: Get token class 'user' for process 676 failed, rc=VERR_ACCESS_DENIED 09:32:04.047390 vminfo Error: Get token class 'groups' for process 676 failed, rc=VERR_ACCESS_DENIED 09:32:04.047390 vminfo Error: Get token class 'statistics' for process 676 failed, rc=VERR_ACCESS_DENIED 09:32:04.047390 vminfo Error: Get token class 'user' for process 756 failed, rc=VERR_ACCESS_DENIED 09:32:04.047390 vminfo Error: Get token class 'groups' for process 756 failed, rc=VERR_ACCESS_DENIED 09:32:04.047390 vminfo Error: Get token class 'statistics' for process 756 failed, rc=VERR_ACCESS_DENIED 09:32:04.047390 vminfo Error: Get token class 'user' for process 768 failed, rc=VERR_ACCESS_DENIED 09:32:04.047390 vminfo Error: Get token class 'groups' for process 768 failed, rc=VERR_ACCESS_DENIED 09:32:04.047390 vminfo Error: Get token class 'statistics' for process 768 failed, rc=VERR_ACCESS_DENIED 09:32:04.047390 vminfo Error: Get token class 'user' for process 876 failed, rc=VERR_ACCESS_DENIED 09:32:04.047390 vminfo Error: Get token class 'groups' for process 876 failed, rc=VERR_ACCESS_DENIED 09:32:04.047390 vminfo Error: Get token class 'statistics' for process 876 failed, rc=VERR_ACCESS_DENIED 09:32:04.047390 vminfo Error: Get token class 'user' for process 2532 failed, rc=VERR_ACCESS_DENIED 09:32:04.047390 vminfo Error: Get token class 'groups' for process 2532 failed, rc=VERR_ACCESS_DENIED 09:32:04.047390 vminfo Error: Get token class 'statistics' for process 2532 failed, rc=VERR_ACCESS_DENIED 09:32:04.047390 vminfo Error: Get token class 'user' for process 4136 failed, rc=VERR_ACCESS_DENIED 09:32:04.047390 vminfo Error: Get token class 'groups' for process 4136 failed, rc=VERR_ACCESS_DENIED 09:32:04.047390 vminfo Error: Get token class 'statistics' for process 4136 failed, rc=VERR_ACCESS_DENIED 09:32:04.047390 vminfo Error: Get token class 'user' for process 5212 failed, rc=VERR_ACCESS_DENIED 09:32:04.047390 vminfo Error: Get token class 'groups' for process 5212 failed, rc=VERR_ACCESS_DENIED 09:32:04.047390 vminfo Error: Get token class 'statistics' for process 5212 failed, rc=VERR_ACCESS_DENIED 09:32:04.059343 vminfo Handling session 1 (of 17) 09:32:04.059343 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2145999, LogonType=3 09:32:04.059343 vminfo Handling session 2 (of 17) 09:32:04.059343 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2113823, LogonType=3 09:32:04.059343 vminfo Handling session 3 (of 17) 09:32:04.059343 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2041868, LogonType=3 09:32:04.059343 vminfo Handling session 4 (of 17) 09:32:04.059343 vminfo Session data: Name=nx, SessionID=0, LogonID=0,1997776, LogonType=3 09:32:04.059343 vminfo Handling session 5 (of 17) 09:32:04.059343 vminfo Session data: Name=user, SessionID=1, LogonID=0,1970648, LogonType=2 09:32:04.059343 vminfo Session LogonType=2 is supported -- looking up SID + type ... 09:32:04.059343 vminfo Account User=user, Session=1, LogonID=0,1970648, AuthPkg=Negotiate, Domain=DOMAIN 09:32:04.059343 vminfo Account User=user, WTSConnectState=0 (4) 09:32:04.059343 vminfo Account User=user using TCS/RDP, state=0 09:32:04.059343 vminfo Account User=user is logged in 09:32:04.059343 vminfo Handling user=user, domain=DOMAIN, package=Negotiate, session=1 09:32:04.059343 vminfo Session 1: PID=6784 (fInt=true ): C:\Windows\System32\svchost.exe 09:32:04.059343 vminfo Session 1: PID=264 (fInt=true ): C:\Windows\System32\sihost.exe 09:32:04.059343 vminfo Session 1: PID=3148 (fInt=true ): C:\Windows\System32\svchost.exe 09:32:04.059343 vminfo Session 1: PID=7176 (fInt=true ): C:\Windows\System32\taskhostw.exe 09:32:04.059343 vminfo Session 1: PID=7268 (fInt=true ): C:\Windows\System32\ctfmon.exe 09:32:04.059343 vminfo Session 1: PID=8732 (fInt=true ): C:\Windows\explorer.exe 09:32:04.059343 vminfo Session 1: PID=9016 (fInt=true ): C:\Program Files (x86)\NoMachine\bin\nxclient.bin 09:32:04.059343 vminfo Session 1: PID=8260 (fInt=true ): C:\Program Files\McAfee\Agent\x86\UpdaterUI.exe 09:32:04.059343 vminfo Session 1: PID=8828 (fInt=true ): C:\Program Files\Classic Shell\ClassicStartMenu.exe 09:32:04.059343 vminfo Session 1: PID=8488 (fInt=true ): C:\Program Files\McAfee\Agent\x86\mctray.exe 09:32:04.059343 vminfo Session 1: PID=9172 (fInt=true ): C:\Program Files\TortoiseSVN\bin\TSVNCache.exe 09:32:04.059343 vminfo Session 1: PID=9280 (fInt=true ): C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe 09:32:04.059343 vminfo Session 1: PID=9652 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:32:04.059343 vminfo Session 1: PID=9728 (fInt=true ): C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe 09:32:04.059343 vminfo Session 1: PID=9880 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:32:04.059343 vminfo Session 1: PID=9944 (fInt=true ): C:\Windows\System32\dllhost.exe 09:32:04.059343 vminfo Session 1: PID=8128 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17112.19011.0_x64__8wekyb3d8bbwe\Video.UI.exe 09:32:04.059343 vminfo Session 1: PID=9528 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:32:04.059343 vminfo Session 1: PID=10292 (fInt=true ): C:\Program Files\Windows Defender\MSASCuiL.exe 09:32:04.059343 vminfo Session 1: PID=10324 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:32:04.059343 vminfo Session 1: PID=10596 (fInt=true ): C:\Users\user\Documents\Visual Studio 2017\Projects\vboxtray_mon\vboxtray_mon\bin\Release\vboxtray_mon.exe 09:32:04.059343 vminfo Session 1: PID=10612 (fInt=true ): C:\Windows\System32\conhost.exe 09:32:04.059343 vminfo Session 1: PID=10720 (fInt=true ): C:\Program Files (x86)\FileZilla Server\FileZilla Server Interface.exe 09:32:04.059343 vminfo Session 1: PID=9808 (fInt=true ): C:\Windows\System32\svchost.exe 09:32:04.059343 vminfo Session 1: PID=6716 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18011.15918.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe 09:32:04.059343 vminfo Session 1: PID=6688 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:32:04.059343 vminfo Session 1: PID=10200 (fInt=true ): C:\Windows\System32\ApplicationFrameHost.exe 09:32:04.059343 vminfo Session 1: PID=4868 (fInt=true ): C:\Windows\ImmersiveControlPanel\SystemSettings.exe 09:32:04.059343 vminfo Session 1: PID=1444 (fInt=true ): C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe 09:32:04.059343 vminfo Session 1: PID=9504 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:32:04.059343 vminfo Session 1: PID=10840 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:32:04.059343 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/Session/1' = '#12157: cSessionProcs=31 (of 155 procs total)' 09:32:04.059343 vminfo Adding new user=user (session=1) with 31 processes 09:32:04.059343 vminfo Handling session 6 (of 17) 09:32:04.059343 vminfo Session data: Name=user, SessionID=1, LogonID=0,1970599, LogonType=2 09:32:04.059343 vminfo Session LogonType=2 is supported -- looking up SID + type ... 09:32:04.059343 vminfo Account User=user, Session=1, LogonID=0,1970599, AuthPkg=Kerberos, Domain=DOMAIN 09:32:04.059343 vminfo Account User=user, WTSConnectState=0 (4) 09:32:04.059343 vminfo Account User=user using TCS/RDP, state=0 09:32:04.059343 vminfo Account User=user is logged in 09:32:04.059343 vminfo Handling user=user, domain=DOMAIN, package=Kerberos, session=1 09:32:04.059343 vminfo Session 1: PID=6784 (fInt=true ): C:\Windows\System32\svchost.exe 09:32:04.059343 vminfo Session 1: PID=264 (fInt=true ): C:\Windows\System32\sihost.exe 09:32:04.059343 vminfo Session 1: PID=3148 (fInt=true ): C:\Windows\System32\svchost.exe 09:32:04.059343 vminfo Session 1: PID=7176 (fInt=true ): C:\Windows\System32\taskhostw.exe 09:32:04.059343 vminfo Session 1: PID=7268 (fInt=true ): C:\Windows\System32\ctfmon.exe 09:32:04.059343 vminfo Session 1: PID=8732 (fInt=true ): C:\Windows\explorer.exe 09:32:04.059343 vminfo Session 1: PID=9016 (fInt=true ): C:\Program Files (x86)\NoMachine\bin\nxclient.bin 09:32:04.074955 vminfo Session 1: PID=8260 (fInt=true ): C:\Program Files\McAfee\Agent\x86\UpdaterUI.exe 09:32:04.074955 vminfo Session 1: PID=8828 (fInt=true ): C:\Program Files\Classic Shell\ClassicStartMenu.exe 09:32:04.074955 vminfo Session 1: PID=8488 (fInt=true ): C:\Program Files\McAfee\Agent\x86\mctray.exe 09:32:04.074955 vminfo Session 1: PID=9172 (fInt=true ): C:\Program Files\TortoiseSVN\bin\TSVNCache.exe 09:32:04.074955 vminfo Session 1: PID=9280 (fInt=true ): C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe 09:32:04.074955 vminfo Session 1: PID=9652 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:32:04.074955 vminfo Session 1: PID=9728 (fInt=true ): C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe 09:32:04.074955 vminfo Session 1: PID=9880 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:32:04.074955 vminfo Session 1: PID=9944 (fInt=true ): C:\Windows\System32\dllhost.exe 09:32:04.074955 vminfo Session 1: PID=8128 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17112.19011.0_x64__8wekyb3d8bbwe\Video.UI.exe 09:32:04.074955 vminfo Session 1: PID=9528 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:32:04.074955 vminfo Session 1: PID=10292 (fInt=true ): C:\Program Files\Windows Defender\MSASCuiL.exe 09:32:04.074955 vminfo Session 1: PID=10324 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:32:04.074955 vminfo Session 1: PID=10596 (fInt=true ): C:\Users\user\Documents\Visual Studio 2017\Projects\vboxtray_mon\vboxtray_mon\bin\Release\vboxtray_mon.exe 09:32:04.074955 vminfo Session 1: PID=10612 (fInt=true ): C:\Windows\System32\conhost.exe 09:32:04.074955 vminfo Session 1: PID=10720 (fInt=true ): C:\Program Files (x86)\FileZilla Server\FileZilla Server Interface.exe 09:32:04.074955 vminfo Session 1: PID=9808 (fInt=true ): C:\Windows\System32\svchost.exe 09:32:04.074955 vminfo Session 1: PID=6716 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18011.15918.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe 09:32:04.074955 vminfo Session 1: PID=6688 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:32:04.074955 vminfo Session 1: PID=10200 (fInt=true ): C:\Windows\System32\ApplicationFrameHost.exe 09:32:04.074955 vminfo Session 1: PID=4868 (fInt=true ): C:\Windows\ImmersiveControlPanel\SystemSettings.exe 09:32:04.074955 vminfo Session 1: PID=1444 (fInt=true ): C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe 09:32:04.074955 vminfo Session 1: PID=9504 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:32:04.074955 vminfo Session 1: PID=10840 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:32:04.074955 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/Session/1' = '#12157: cSessionProcs=31 (of 155 procs total)' 09:32:04.074955 vminfo Adding new user=user (session=1) with 31 processes 09:32:04.074955 vminfo Handling session 7 (of 17) 09:32:04.074955 vminfo Session data: Name=nx, SessionID=0, LogonID=0,685607, LogonType=3 09:32:04.074955 vminfo Handling session 8 (of 17) 09:32:04.074955 vminfo Session data: Name=ANONYMOUS LOGON, SessionID=0, LogonID=0,649881, LogonType=3 09:32:04.074955 vminfo Handling session 9 (of 17) 09:32:04.074955 vminfo Session data: Name=IUSR, SessionID=0, LogonID=0,995, LogonType=5 09:32:04.074955 vminfo Handling session 10 (of 17) 09:32:04.074955 vminfo Session data: Name=DWM-1, SessionID=1, LogonID=0,61006, LogonType=2 09:32:04.074955 vminfo Session LogonType=2 is supported -- looking up SID + type ... 09:32:04.074955 vminfo SID owner type=5 not handled, skipping 09:32:04.074955 vminfo Account User=DWM-1 is not logged in 09:32:04.074955 vminfo Handling session 11 (of 17) 09:32:04.074955 vminfo Session data: Name=DWM-1, SessionID=1, LogonID=0,60973, LogonType=2 09:32:04.074955 vminfo Session LogonType=2 is supported -- looking up SID + type ... 09:32:04.074955 vminfo SID owner type=5 not handled, skipping 09:32:04.074955 vminfo Account User=DWM-1 is not logged in 09:32:04.074955 vminfo Handling session 12 (of 17) 09:32:04.074955 vminfo Session data: Name=MACHINE$, SessionID=0, LogonID=0,996, LogonType=5 09:32:04.074955 vminfo Handling session 13 (of 17) 09:32:04.074955 vminfo Session data: Name=LOCAL SERVICE, SessionID=0, LogonID=0,997, LogonType=5 09:32:04.074955 vminfo Handling session 14 (of 17) 09:32:04.074955 vminfo Session data: Name=UMFD-1, SessionID=1, LogonID=0,34521, LogonType=2 09:32:04.074955 vminfo Session LogonType=2 is supported -- looking up SID + type ... 09:32:04.074955 vminfo SID owner type=5 not handled, skipping 09:32:04.074955 vminfo Account User=UMFD-1 is not logged in 09:32:04.074955 vminfo Handling session 15 (of 17) 09:32:04.074955 vminfo Session data: Name=UMFD-0, SessionID=0, LogonID=0,34482, LogonType=2 09:32:04.074955 vminfo Handling session 16 (of 17) 09:32:04.074955 vminfo Session data: Name=, SessionID=0, LogonID=0,32336, LogonType=0 09:32:04.074955 vminfo Handling session 17 (of 17) 09:32:04.074955 vminfo Session data: Name=MACHINE$, SessionID=0, LogonID=0,999, LogonType=0 09:32:04.074955 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA' = '#12157: cSessions=17, cProcs=155, cUniqueUsers=2' 09:32:04.074955 vminfo Found 2 unique logged-in user(s) 09:32:04.074955 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/User/0' = '#12157: szName=user, sessionID=1, cProcs=31' 09:32:04.074955 vminfo User 'user' has 31 interactive processes (session=1) 09:32:04.074955 vminfo VBoxTray for user 'user' not running (anymore), no last input available 09:32:04.074955 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/User/user@DOMAIN/UsageState' resulted in rc=VINF_NO_CHANGE 09:32:04.074955 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/User/1' = '#12157: szName=user, sessionID=1, cProcs=31' 09:32:04.074955 vminfo User 'user' has 31 interactive processes (session=1) 09:32:04.074955 vminfo VBoxTray for user 'user' not running (anymore), no last input available 09:32:04.074955 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/User/user@DOMAIN/UsageState' resulted in rc=VINF_NO_CHANGE 09:32:04.074955 vminfo cUsersInList=2, pszUserList=user,user, rc=VINF_NO_CHANGE 09:32:04.074955 vminfo [PropCache 00007ff6b2962520]: Written '/VirtualBox/GuestInfo/OS/LoggedInUsersList'='user,user' (flags: a), rc=VINF_SUCCESS 09:32:04.074955 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/LoggedInUsersList' resulted in rc=VINF_SUCCESS 09:32:04.074955 vminfo [PropCache 00007ff6b2962520]: Written '/VirtualBox/GuestInfo/OS/LoggedInUsers'='2' (flags: a), rc=VINF_SUCCESS 09:32:04.074955 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/LoggedInUsers' resulted in rc=VINF_SUCCESS 09:32:04.074955 vminfo [PropCache 00007ff6b2962520]: Written '/VirtualBox/GuestInfo/OS/NoLoggedInUsers'='false' (flags: a), rc=VINF_SUCCESS 09:32:04.074955 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/NoLoggedInUsers' resulted in rc=VINF_SUCCESS 09:32:04.074955 vminfo Writing users returned with rc=VINF_SUCCESS 09:32:04.090284 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/IP' resulted in rc=VINF_NO_CHANGE 09:32:04.090284 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/Broadcast' resulted in rc=VINF_NO_CHANGE 09:32:04.090284 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/Netmask' resulted in rc=VINF_NO_CHANGE 09:32:04.090284 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/Status' resulted in rc=VINF_NO_CHANGE 09:32:04.090284 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/MAC' resulted in rc=VINF_NO_CHANGE 09:32:04.090284 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/IP' resulted in rc=VINF_NO_CHANGE 09:32:04.090284 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/Broadcast' resulted in rc=VINF_NO_CHANGE 09:32:04.090284 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/Netmask' resulted in rc=VINF_NO_CHANGE 09:32:04.090284 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/Status' resulted in rc=VINF_NO_CHANGE 09:32:04.090284 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/MAC' resulted in rc=VINF_NO_CHANGE 09:32:04.090284 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/IP' resulted in rc=VINF_NO_CHANGE 09:32:04.090284 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/Broadcast' resulted in rc=VINF_NO_CHANGE 09:32:04.090284 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/Netmask' resulted in rc=VINF_NO_CHANGE 09:32:04.090284 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/Status' resulted in rc=VINF_NO_CHANGE 09:32:04.090284 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/MAC' resulted in rc=VINF_NO_CHANGE 09:32:04.090284 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/IP' resulted in rc=VINF_NO_CHANGE 09:32:04.090284 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/Broadcast' resulted in rc=VINF_NO_CHANGE 09:32:04.090284 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/Netmask' resulted in rc=VINF_NO_CHANGE 09:32:04.090284 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/Status' resulted in rc=VINF_NO_CHANGE 09:32:04.090284 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/MAC' resulted in rc=VINF_NO_CHANGE 09:32:04.090284 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/IP' resulted in rc=VINF_NO_CHANGE 09:32:04.090284 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/Broadcast' resulted in rc=VINF_NO_CHANGE 09:32:04.090284 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/Netmask' resulted in rc=VINF_NO_CHANGE 09:32:04.090284 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/Status' resulted in rc=VINF_NO_CHANGE 09:32:04.090284 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/MAC' resulted in rc=VINF_NO_CHANGE 09:32:04.090284 vminfo [PropCache 00007ff6b2962520]: Written '/VirtualBox/GuestInfo/Net/Count'='5' (flags: 6), rc=VINF_SUCCESS 09:32:04.090284 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/Count' resulted in rc=VINF_SUCCESS 09:32:04.090284 vminfo Guest Property: /VirtualBox/HostInfo/VRDP/ActiveClient not found 09:32:04.090284 vminfo VRDP: Handling location awareness done 09:32:06.160588 timesync vgsvcTimeSyncWorker: Host: 2019-02-26T09:32:06.035000000Z (MinAdjust: 200 ms), Guest: 2019-02-26T09:32:06.160588700Z => -125 588 700 ns drift 09:32:09.090571 vminfo Found 17 sessions 09:32:09.090571 vminfo Error: Get token class 'user' for process 0 failed, rc=VERR_INVALID_PARAMETER 09:32:09.090571 vminfo Error: Get token class 'groups' for process 0 failed, rc=VERR_INVALID_PARAMETER 09:32:09.090571 vminfo Error: Get token class 'statistics' for process 0 failed, rc=VERR_INVALID_PARAMETER 09:32:09.090571 vminfo Error: Get token class 'user' for process 4 failed, rc=VERR_ACCESS_DENIED 09:32:09.090571 vminfo Error: Get token class 'groups' for process 4 failed, rc=VERR_ACCESS_DENIED 09:32:09.090571 vminfo Error: Get token class 'statistics' for process 4 failed, rc=VERR_ACCESS_DENIED 09:32:09.090571 vminfo Error: Get token class 'user' for process 104 failed, rc=VERR_ACCESS_DENIED 09:32:09.090571 vminfo Error: Get token class 'groups' for process 104 failed, rc=VERR_ACCESS_DENIED 09:32:09.090571 vminfo Error: Get token class 'statistics' for process 104 failed, rc=VERR_ACCESS_DENIED 09:32:09.090571 vminfo Error: Get token class 'user' for process 472 failed, rc=VERR_ACCESS_DENIED 09:32:09.090571 vminfo Error: Get token class 'groups' for process 472 failed, rc=VERR_ACCESS_DENIED 09:32:09.090571 vminfo Error: Get token class 'statistics' for process 472 failed, rc=VERR_ACCESS_DENIED 09:32:09.090571 vminfo Error: Get token class 'user' for process 676 failed, rc=VERR_ACCESS_DENIED 09:32:09.090571 vminfo Error: Get token class 'groups' for process 676 failed, rc=VERR_ACCESS_DENIED 09:32:09.090571 vminfo Error: Get token class 'statistics' for process 676 failed, rc=VERR_ACCESS_DENIED 09:32:09.090571 vminfo Error: Get token class 'user' for process 756 failed, rc=VERR_ACCESS_DENIED 09:32:09.090571 vminfo Error: Get token class 'groups' for process 756 failed, rc=VERR_ACCESS_DENIED 09:32:09.090571 vminfo Error: Get token class 'statistics' for process 756 failed, rc=VERR_ACCESS_DENIED 09:32:09.090571 vminfo Error: Get token class 'user' for process 768 failed, rc=VERR_ACCESS_DENIED 09:32:09.090571 vminfo Error: Get token class 'groups' for process 768 failed, rc=VERR_ACCESS_DENIED 09:32:09.090571 vminfo Error: Get token class 'statistics' for process 768 failed, rc=VERR_ACCESS_DENIED 09:32:09.090571 vminfo Error: Get token class 'user' for process 876 failed, rc=VERR_ACCESS_DENIED 09:32:09.090571 vminfo Error: Get token class 'groups' for process 876 failed, rc=VERR_ACCESS_DENIED 09:32:09.090571 vminfo Error: Get token class 'statistics' for process 876 failed, rc=VERR_ACCESS_DENIED 09:32:09.090571 vminfo Error: Get token class 'user' for process 2532 failed, rc=VERR_ACCESS_DENIED 09:32:09.090571 vminfo Error: Get token class 'groups' for process 2532 failed, rc=VERR_ACCESS_DENIED 09:32:09.090571 vminfo Error: Get token class 'statistics' for process 2532 failed, rc=VERR_ACCESS_DENIED 09:32:09.090571 vminfo Error: Get token class 'user' for process 4136 failed, rc=VERR_ACCESS_DENIED 09:32:09.090571 vminfo Error: Get token class 'groups' for process 4136 failed, rc=VERR_ACCESS_DENIED 09:32:09.090571 vminfo Error: Get token class 'statistics' for process 4136 failed, rc=VERR_ACCESS_DENIED 09:32:09.090571 vminfo Error: Get token class 'user' for process 5212 failed, rc=VERR_ACCESS_DENIED 09:32:09.090571 vminfo Error: Get token class 'groups' for process 5212 failed, rc=VERR_ACCESS_DENIED 09:32:09.090571 vminfo Error: Get token class 'statistics' for process 5212 failed, rc=VERR_ACCESS_DENIED 09:32:09.090571 vminfo Handling session 1 (of 17) 09:32:09.090571 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2145999, LogonType=3 09:32:09.090571 vminfo Handling session 2 (of 17) 09:32:09.090571 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2113823, LogonType=3 09:32:09.090571 vminfo Handling session 3 (of 17) 09:32:09.090571 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2041868, LogonType=3 09:32:09.090571 vminfo Handling session 4 (of 17) 09:32:09.090571 vminfo Session data: Name=nx, SessionID=0, LogonID=0,1997776, LogonType=3 09:32:09.090571 vminfo Handling session 5 (of 17) 09:32:09.090571 vminfo Session data: Name=user, SessionID=1, LogonID=0,1970648, LogonType=2 09:32:09.090571 vminfo Session LogonType=2 is supported -- looking up SID + type ... 09:32:09.090571 vminfo Account User=user, Session=1, LogonID=0,1970648, AuthPkg=Negotiate, Domain=DOMAIN 09:32:09.105329 vminfo Account User=user, WTSConnectState=0 (4) 09:32:09.105329 vminfo Account User=user using TCS/RDP, state=0 09:32:09.105329 vminfo Account User=user is logged in 09:32:09.105329 vminfo Handling user=user, domain=DOMAIN, package=Negotiate, session=1 09:32:09.105329 vminfo Session 1: PID=6784 (fInt=true ): C:\Windows\System32\svchost.exe 09:32:09.105329 vminfo Session 1: PID=264 (fInt=true ): C:\Windows\System32\sihost.exe 09:32:09.105329 vminfo Session 1: PID=3148 (fInt=true ): C:\Windows\System32\svchost.exe 09:32:09.105329 vminfo Session 1: PID=7176 (fInt=true ): C:\Windows\System32\taskhostw.exe 09:32:09.105329 vminfo Session 1: PID=7268 (fInt=true ): C:\Windows\System32\ctfmon.exe 09:32:09.105329 vminfo Session 1: PID=8732 (fInt=true ): C:\Windows\explorer.exe 09:32:09.105329 vminfo Session 1: PID=9016 (fInt=true ): C:\Program Files (x86)\NoMachine\bin\nxclient.bin 09:32:09.105329 vminfo Session 1: PID=8260 (fInt=true ): C:\Program Files\McAfee\Agent\x86\UpdaterUI.exe 09:32:09.105329 vminfo Session 1: PID=8828 (fInt=true ): C:\Program Files\Classic Shell\ClassicStartMenu.exe 09:32:09.105329 vminfo Session 1: PID=8488 (fInt=true ): C:\Program Files\McAfee\Agent\x86\mctray.exe 09:32:09.105329 vminfo Session 1: PID=9172 (fInt=true ): C:\Program Files\TortoiseSVN\bin\TSVNCache.exe 09:32:09.105329 vminfo Session 1: PID=9280 (fInt=true ): C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe 09:32:09.105329 vminfo Session 1: PID=9652 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:32:09.105329 vminfo Session 1: PID=9728 (fInt=true ): C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe 09:32:09.105329 vminfo Session 1: PID=9880 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:32:09.105329 vminfo Session 1: PID=9944 (fInt=true ): C:\Windows\System32\dllhost.exe 09:32:09.105329 vminfo Session 1: PID=8128 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17112.19011.0_x64__8wekyb3d8bbwe\Video.UI.exe 09:32:09.105329 vminfo Session 1: PID=9528 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:32:09.105329 vminfo Session 1: PID=10292 (fInt=true ): C:\Program Files\Windows Defender\MSASCuiL.exe 09:32:09.105329 vminfo Session 1: PID=10324 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:32:09.105329 vminfo Session 1: PID=10596 (fInt=true ): C:\Users\user\Documents\Visual Studio 2017\Projects\vboxtray_mon\vboxtray_mon\bin\Release\vboxtray_mon.exe 09:32:09.105329 vminfo Session 1: PID=10612 (fInt=true ): C:\Windows\System32\conhost.exe 09:32:09.105329 vminfo Session 1: PID=10720 (fInt=true ): C:\Program Files (x86)\FileZilla Server\FileZilla Server Interface.exe 09:32:09.105329 vminfo Session 1: PID=9808 (fInt=true ): C:\Windows\System32\svchost.exe 09:32:09.105329 vminfo Session 1: PID=6716 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18011.15918.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe 09:32:09.105329 vminfo Session 1: PID=6688 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:32:09.105329 vminfo Session 1: PID=10200 (fInt=true ): C:\Windows\System32\ApplicationFrameHost.exe 09:32:09.105329 vminfo Session 1: PID=4868 (fInt=true ): C:\Windows\ImmersiveControlPanel\SystemSettings.exe 09:32:09.105329 vminfo Session 1: PID=1444 (fInt=true ): C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe 09:32:09.105329 vminfo Session 1: PID=9504 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:32:09.105329 vminfo Session 1: PID=10840 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:32:09.105329 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/Session/1' = '#12158: cSessionProcs=31 (of 155 procs total)' 09:32:09.105329 vminfo Adding new user=user (session=1) with 31 processes 09:32:09.105329 vminfo Handling session 6 (of 17) 09:32:09.105329 vminfo Session data: Name=user, SessionID=1, LogonID=0,1970599, LogonType=2 09:32:09.105329 vminfo Session LogonType=2 is supported -- looking up SID + type ... 09:32:09.105329 vminfo Account User=user, Session=1, LogonID=0,1970599, AuthPkg=Kerberos, Domain=DOMAIN 09:32:09.105329 vminfo Account User=user, WTSConnectState=0 (4) 09:32:09.105329 vminfo Account User=user using TCS/RDP, state=0 09:32:09.105329 vminfo Account User=user is logged in 09:32:09.105329 vminfo Handling user=user, domain=DOMAIN, package=Kerberos, session=1 09:32:09.105329 vminfo Session 1: PID=6784 (fInt=true ): C:\Windows\System32\svchost.exe 09:32:09.105329 vminfo Session 1: PID=264 (fInt=true ): C:\Windows\System32\sihost.exe 09:32:09.105329 vminfo Session 1: PID=3148 (fInt=true ): C:\Windows\System32\svchost.exe 09:32:09.105329 vminfo Session 1: PID=7176 (fInt=true ): C:\Windows\System32\taskhostw.exe 09:32:09.105329 vminfo Session 1: PID=7268 (fInt=true ): C:\Windows\System32\ctfmon.exe 09:32:09.105329 vminfo Session 1: PID=8732 (fInt=true ): C:\Windows\explorer.exe 09:32:09.105329 vminfo Session 1: PID=9016 (fInt=true ): C:\Program Files (x86)\NoMachine\bin\nxclient.bin 09:32:09.105329 vminfo Session 1: PID=8260 (fInt=true ): C:\Program Files\McAfee\Agent\x86\UpdaterUI.exe 09:32:09.105329 vminfo Session 1: PID=8828 (fInt=true ): C:\Program Files\Classic Shell\ClassicStartMenu.exe 09:32:09.105329 vminfo Session 1: PID=8488 (fInt=true ): C:\Program Files\McAfee\Agent\x86\mctray.exe 09:32:09.105329 vminfo Session 1: PID=9172 (fInt=true ): C:\Program Files\TortoiseSVN\bin\TSVNCache.exe 09:32:09.105329 vminfo Session 1: PID=9280 (fInt=true ): C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe 09:32:09.105329 vminfo Session 1: PID=9652 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:32:09.105329 vminfo Session 1: PID=9728 (fInt=true ): C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe 09:32:09.105329 vminfo Session 1: PID=9880 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:32:09.105329 vminfo Session 1: PID=9944 (fInt=true ): C:\Windows\System32\dllhost.exe 09:32:09.105329 vminfo Session 1: PID=8128 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17112.19011.0_x64__8wekyb3d8bbwe\Video.UI.exe 09:32:09.105329 vminfo Session 1: PID=9528 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:32:09.105329 vminfo Session 1: PID=10292 (fInt=true ): C:\Program Files\Windows Defender\MSASCuiL.exe 09:32:09.105329 vminfo Session 1: PID=10324 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:32:09.105329 vminfo Session 1: PID=10596 (fInt=true ): C:\Users\user\Documents\Visual Studio 2017\Projects\vboxtray_mon\vboxtray_mon\bin\Release\vboxtray_mon.exe 09:32:09.105329 vminfo Session 1: PID=10612 (fInt=true ): C:\Windows\System32\conhost.exe 09:32:09.105329 vminfo Session 1: PID=10720 (fInt=true ): C:\Program Files (x86)\FileZilla Server\FileZilla Server Interface.exe 09:32:09.105329 vminfo Session 1: PID=9808 (fInt=true ): C:\Windows\System32\svchost.exe 09:32:09.105329 vminfo Session 1: PID=6716 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18011.15918.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe 09:32:09.120610 vminfo Session 1: PID=6688 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:32:09.120610 vminfo Session 1: PID=10200 (fInt=true ): C:\Windows\System32\ApplicationFrameHost.exe 09:32:09.120610 vminfo Session 1: PID=4868 (fInt=true ): C:\Windows\ImmersiveControlPanel\SystemSettings.exe 09:32:09.120610 vminfo Session 1: PID=1444 (fInt=true ): C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe 09:32:09.120610 vminfo Session 1: PID=9504 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:32:09.120610 vminfo Session 1: PID=10840 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:32:09.120610 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/Session/1' = '#12158: cSessionProcs=31 (of 155 procs total)' 09:32:09.120610 vminfo Adding new user=user (session=1) with 31 processes 09:32:09.120610 vminfo Handling session 7 (of 17) 09:32:09.120610 vminfo Session data: Name=nx, SessionID=0, LogonID=0,685607, LogonType=3 09:32:09.120610 vminfo Handling session 8 (of 17) 09:32:09.120610 vminfo Session data: Name=ANONYMOUS LOGON, SessionID=0, LogonID=0,649881, LogonType=3 09:32:09.120610 vminfo Handling session 9 (of 17) 09:32:09.120610 vminfo Session data: Name=IUSR, SessionID=0, LogonID=0,995, LogonType=5 09:32:09.120610 vminfo Handling session 10 (of 17) 09:32:09.120610 vminfo Session data: Name=DWM-1, SessionID=1, LogonID=0,61006, LogonType=2 09:32:09.120610 vminfo Session LogonType=2 is supported -- looking up SID + type ... 09:32:09.120610 vminfo SID owner type=5 not handled, skipping 09:32:09.120610 vminfo Account User=DWM-1 is not logged in 09:32:09.120610 vminfo Handling session 11 (of 17) 09:32:09.120610 vminfo Session data: Name=DWM-1, SessionID=1, LogonID=0,60973, LogonType=2 09:32:09.120610 vminfo Session LogonType=2 is supported -- looking up SID + type ... 09:32:09.120610 vminfo SID owner type=5 not handled, skipping 09:32:09.120610 vminfo Account User=DWM-1 is not logged in 09:32:09.120610 vminfo Handling session 12 (of 17) 09:32:09.120610 vminfo Session data: Name=MACHINE$, SessionID=0, LogonID=0,996, LogonType=5 09:32:09.120610 vminfo Handling session 13 (of 17) 09:32:09.120610 vminfo Session data: Name=LOCAL SERVICE, SessionID=0, LogonID=0,997, LogonType=5 09:32:09.120610 vminfo Handling session 14 (of 17) 09:32:09.120610 vminfo Session data: Name=UMFD-1, SessionID=1, LogonID=0,34521, LogonType=2 09:32:09.120610 vminfo Session LogonType=2 is supported -- looking up SID + type ... 09:32:09.120610 vminfo SID owner type=5 not handled, skipping 09:32:09.120610 vminfo Account User=UMFD-1 is not logged in 09:32:09.120610 vminfo Handling session 15 (of 17) 09:32:09.120610 vminfo Session data: Name=UMFD-0, SessionID=0, LogonID=0,34482, LogonType=2 09:32:09.120610 vminfo Handling session 16 (of 17) 09:32:09.120610 vminfo Session data: Name=, SessionID=0, LogonID=0,32336, LogonType=0 09:32:09.120610 vminfo Handling session 17 (of 17) 09:32:09.120610 vminfo Session data: Name=MACHINE$, SessionID=0, LogonID=0,999, LogonType=0 09:32:09.120610 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA' = '#12158: cSessions=17, cProcs=155, cUniqueUsers=2' 09:32:09.120610 vminfo Found 2 unique logged-in user(s) 09:32:09.120610 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/User/0' = '#12158: szName=user, sessionID=1, cProcs=31' 09:32:09.120610 vminfo User 'user' has 31 interactive processes (session=1) 09:32:09.120610 vminfo VBoxTray for user 'user' not running (anymore), no last input available 09:32:09.120610 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/User/user@DOMAIN/UsageState' resulted in rc=VINF_NO_CHANGE 09:32:09.120610 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/User/1' = '#12158: szName=user, sessionID=1, cProcs=31' 09:32:09.120610 vminfo User 'user' has 31 interactive processes (session=1) 09:32:09.120610 vminfo VBoxTray for user 'user' not running (anymore), no last input available 09:32:09.120610 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/User/user@DOMAIN/UsageState' resulted in rc=VINF_NO_CHANGE 09:32:09.120610 vminfo cUsersInList=2, pszUserList=user,user, rc=VINF_NO_CHANGE 09:32:09.120610 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/LoggedInUsersList' resulted in rc=VINF_NO_CHANGE 09:32:09.120610 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/LoggedInUsers' resulted in rc=VINF_NO_CHANGE 09:32:09.120610 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/NoLoggedInUsers' resulted in rc=VINF_NO_CHANGE 09:32:09.120610 vminfo Writing users returned with rc=VINF_NO_CHANGE 09:32:09.120610 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/IP' resulted in rc=VINF_NO_CHANGE 09:32:09.120610 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/Broadcast' resulted in rc=VINF_NO_CHANGE 09:32:09.120610 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/Netmask' resulted in rc=VINF_NO_CHANGE 09:32:09.120610 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/Status' resulted in rc=VINF_NO_CHANGE 09:32:09.120610 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/MAC' resulted in rc=VINF_NO_CHANGE 09:32:09.120610 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/IP' resulted in rc=VINF_NO_CHANGE 09:32:09.120610 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/Broadcast' resulted in rc=VINF_NO_CHANGE 09:32:09.120610 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/Netmask' resulted in rc=VINF_NO_CHANGE 09:32:09.120610 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/Status' resulted in rc=VINF_NO_CHANGE 09:32:09.120610 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/MAC' resulted in rc=VINF_NO_CHANGE 09:32:09.120610 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/IP' resulted in rc=VINF_NO_CHANGE 09:32:09.120610 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/Broadcast' resulted in rc=VINF_NO_CHANGE 09:32:09.120610 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/Netmask' resulted in rc=VINF_NO_CHANGE 09:32:09.120610 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/Status' resulted in rc=VINF_NO_CHANGE 09:32:09.120610 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/MAC' resulted in rc=VINF_NO_CHANGE 09:32:09.120610 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/IP' resulted in rc=VINF_NO_CHANGE 09:32:09.120610 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/Broadcast' resulted in rc=VINF_NO_CHANGE 09:32:09.120610 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/Netmask' resulted in rc=VINF_NO_CHANGE 09:32:09.120610 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/Status' resulted in rc=VINF_NO_CHANGE 09:32:09.120610 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/MAC' resulted in rc=VINF_NO_CHANGE 09:32:09.120610 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/IP' resulted in rc=VINF_NO_CHANGE 09:32:09.120610 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/Broadcast' resulted in rc=VINF_NO_CHANGE 09:32:09.120610 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/Netmask' resulted in rc=VINF_NO_CHANGE 09:32:09.120610 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/Status' resulted in rc=VINF_NO_CHANGE 09:32:09.120610 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/MAC' resulted in rc=VINF_NO_CHANGE 09:32:09.120610 vminfo [PropCache 00007ff6b2962520]: Written '/VirtualBox/GuestInfo/Net/Count'='5' (flags: 6), rc=VINF_SUCCESS 09:32:09.120610 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/Count' resulted in rc=VINF_SUCCESS 09:32:09.120610 vminfo Guest Property: /VirtualBox/HostInfo/VRDP/ActiveClient not found 09:32:09.120610 vminfo VRDP: Handling location awareness done 09:32:14.133456 vminfo Found 17 sessions 09:32:14.133456 vminfo Error: Get token class 'user' for process 0 failed, rc=VERR_INVALID_PARAMETER 09:32:14.133456 vminfo Error: Get token class 'groups' for process 0 failed, rc=VERR_INVALID_PARAMETER 09:32:14.133456 vminfo Error: Get token class 'statistics' for process 0 failed, rc=VERR_INVALID_PARAMETER 09:32:14.133456 vminfo Error: Get token class 'user' for process 4 failed, rc=VERR_ACCESS_DENIED 09:32:14.133456 vminfo Error: Get token class 'groups' for process 4 failed, rc=VERR_ACCESS_DENIED 09:32:14.133456 vminfo Error: Get token class 'statistics' for process 4 failed, rc=VERR_ACCESS_DENIED 09:32:14.133456 vminfo Error: Get token class 'user' for process 104 failed, rc=VERR_ACCESS_DENIED 09:32:14.133456 vminfo Error: Get token class 'groups' for process 104 failed, rc=VERR_ACCESS_DENIED 09:32:14.133456 vminfo Error: Get token class 'statistics' for process 104 failed, rc=VERR_ACCESS_DENIED 09:32:14.133456 vminfo Error: Get token class 'user' for process 472 failed, rc=VERR_ACCESS_DENIED 09:32:14.133456 vminfo Error: Get token class 'groups' for process 472 failed, rc=VERR_ACCESS_DENIED 09:32:14.133456 vminfo Error: Get token class 'statistics' for process 472 failed, rc=VERR_ACCESS_DENIED 09:32:14.133456 vminfo Error: Get token class 'user' for process 676 failed, rc=VERR_ACCESS_DENIED 09:32:14.133456 vminfo Error: Get token class 'groups' for process 676 failed, rc=VERR_ACCESS_DENIED 09:32:14.133456 vminfo Error: Get token class 'statistics' for process 676 failed, rc=VERR_ACCESS_DENIED 09:32:14.133456 vminfo Error: Get token class 'user' for process 756 failed, rc=VERR_ACCESS_DENIED 09:32:14.133456 vminfo Error: Get token class 'groups' for process 756 failed, rc=VERR_ACCESS_DENIED 09:32:14.133456 vminfo Error: Get token class 'statistics' for process 756 failed, rc=VERR_ACCESS_DENIED 09:32:14.133456 vminfo Error: Get token class 'user' for process 768 failed, rc=VERR_ACCESS_DENIED 09:32:14.133456 vminfo Error: Get token class 'groups' for process 768 failed, rc=VERR_ACCESS_DENIED 09:32:14.133456 vminfo Error: Get token class 'statistics' for process 768 failed, rc=VERR_ACCESS_DENIED 09:32:14.133456 vminfo Error: Get token class 'user' for process 876 failed, rc=VERR_ACCESS_DENIED 09:32:14.133456 vminfo Error: Get token class 'groups' for process 876 failed, rc=VERR_ACCESS_DENIED 09:32:14.133456 vminfo Error: Get token class 'statistics' for process 876 failed, rc=VERR_ACCESS_DENIED 09:32:14.133456 vminfo Error: Get token class 'user' for process 2532 failed, rc=VERR_ACCESS_DENIED 09:32:14.133456 vminfo Error: Get token class 'groups' for process 2532 failed, rc=VERR_ACCESS_DENIED 09:32:14.133456 vminfo Error: Get token class 'statistics' for process 2532 failed, rc=VERR_ACCESS_DENIED 09:32:14.133456 vminfo Error: Get token class 'user' for process 4136 failed, rc=VERR_ACCESS_DENIED 09:32:14.133456 vminfo Error: Get token class 'groups' for process 4136 failed, rc=VERR_ACCESS_DENIED 09:32:14.133456 vminfo Error: Get token class 'statistics' for process 4136 failed, rc=VERR_ACCESS_DENIED 09:32:14.133456 vminfo Error: Get token class 'user' for process 5212 failed, rc=VERR_ACCESS_DENIED 09:32:14.133456 vminfo Error: Get token class 'groups' for process 5212 failed, rc=VERR_ACCESS_DENIED 09:32:14.133456 vminfo Error: Get token class 'statistics' for process 5212 failed, rc=VERR_ACCESS_DENIED 09:32:14.133456 vminfo Handling session 1 (of 17) 09:32:14.133456 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2145999, LogonType=3 09:32:14.133456 vminfo Handling session 2 (of 17) 09:32:14.133456 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2113823, LogonType=3 09:32:14.133456 vminfo Handling session 3 (of 17) 09:32:14.133456 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2041868, LogonType=3 09:32:14.146903 vminfo Handling session 4 (of 17) 09:32:14.146903 vminfo Session data: Name=nx, SessionID=0, LogonID=0,1997776, LogonType=3 09:32:14.146903 vminfo Handling session 5 (of 17) 09:32:14.146903 vminfo Session data: Name=user, SessionID=1, LogonID=0,1970648, LogonType=2 09:32:14.146903 vminfo Session LogonType=2 is supported -- looking up SID + type ... 09:32:14.146903 vminfo Account User=user, Session=1, LogonID=0,1970648, AuthPkg=Negotiate, Domain=DOMAIN 09:32:14.146903 vminfo Account User=user, WTSConnectState=0 (4) 09:32:14.146903 vminfo Account User=user using TCS/RDP, state=0 09:32:14.146903 vminfo Account User=user is logged in 09:32:14.146903 vminfo Handling user=user, domain=DOMAIN, package=Negotiate, session=1 09:32:14.146903 vminfo Session 1: PID=6784 (fInt=true ): C:\Windows\System32\svchost.exe 09:32:14.146903 vminfo Session 1: PID=264 (fInt=true ): C:\Windows\System32\sihost.exe 09:32:14.146903 vminfo Session 1: PID=3148 (fInt=true ): C:\Windows\System32\svchost.exe 09:32:14.146903 vminfo Session 1: PID=7176 (fInt=true ): C:\Windows\System32\taskhostw.exe 09:32:14.146903 vminfo Session 1: PID=7268 (fInt=true ): C:\Windows\System32\ctfmon.exe 09:32:14.146903 vminfo Session 1: PID=8732 (fInt=true ): C:\Windows\explorer.exe 09:32:14.146903 vminfo Session 1: PID=9016 (fInt=true ): C:\Program Files (x86)\NoMachine\bin\nxclient.bin 09:32:14.146903 vminfo Session 1: PID=8260 (fInt=true ): C:\Program Files\McAfee\Agent\x86\UpdaterUI.exe 09:32:14.146903 vminfo Session 1: PID=8828 (fInt=true ): C:\Program Files\Classic Shell\ClassicStartMenu.exe 09:32:14.146903 vminfo Session 1: PID=8488 (fInt=true ): C:\Program Files\McAfee\Agent\x86\mctray.exe 09:32:14.146903 vminfo Session 1: PID=9172 (fInt=true ): C:\Program Files\TortoiseSVN\bin\TSVNCache.exe 09:32:14.146903 vminfo Session 1: PID=9280 (fInt=true ): C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe 09:32:14.146903 vminfo Session 1: PID=9652 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:32:14.146903 vminfo Session 1: PID=9728 (fInt=true ): C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe 09:32:14.146903 vminfo Session 1: PID=9880 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:32:14.146903 vminfo Session 1: PID=9944 (fInt=true ): C:\Windows\System32\dllhost.exe 09:32:14.146903 vminfo Session 1: PID=8128 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17112.19011.0_x64__8wekyb3d8bbwe\Video.UI.exe 09:32:14.146903 vminfo Session 1: PID=9528 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:32:14.146903 vminfo Session 1: PID=10292 (fInt=true ): C:\Program Files\Windows Defender\MSASCuiL.exe 09:32:14.146903 vminfo Session 1: PID=10324 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:32:14.146903 vminfo Session 1: PID=10596 (fInt=true ): C:\Users\user\Documents\Visual Studio 2017\Projects\vboxtray_mon\vboxtray_mon\bin\Release\vboxtray_mon.exe 09:32:14.146903 vminfo Session 1: PID=10612 (fInt=true ): C:\Windows\System32\conhost.exe 09:32:14.146903 vminfo Session 1: PID=10720 (fInt=true ): C:\Program Files (x86)\FileZilla Server\FileZilla Server Interface.exe 09:32:14.146903 vminfo Session 1: PID=9808 (fInt=true ): C:\Windows\System32\svchost.exe 09:32:14.146903 vminfo Session 1: PID=6716 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18011.15918.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe 09:32:14.146903 vminfo Session 1: PID=6688 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:32:14.146903 vminfo Session 1: PID=10200 (fInt=true ): C:\Windows\System32\ApplicationFrameHost.exe 09:32:14.146903 vminfo Session 1: PID=4868 (fInt=true ): C:\Windows\ImmersiveControlPanel\SystemSettings.exe 09:32:14.146903 vminfo Session 1: PID=1444 (fInt=true ): C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe 09:32:14.146903 vminfo Session 1: PID=9504 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:32:14.146903 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/Session/1' = '#12159: cSessionProcs=30 (of 154 procs total)' 09:32:14.146903 vminfo Adding new user=user (session=1) with 30 processes 09:32:14.146903 vminfo Handling session 6 (of 17) 09:32:14.146903 vminfo Session data: Name=user, SessionID=1, LogonID=0,1970599, LogonType=2 09:32:14.146903 vminfo Session LogonType=2 is supported -- looking up SID + type ... 09:32:14.146903 vminfo Account User=user, Session=1, LogonID=0,1970599, AuthPkg=Kerberos, Domain=DOMAIN 09:32:14.146903 vminfo Account User=user, WTSConnectState=0 (4) 09:32:14.146903 vminfo Account User=user using TCS/RDP, state=0 09:32:14.146903 vminfo Account User=user is logged in 09:32:14.146903 vminfo Handling user=user, domain=DOMAIN, package=Kerberos, session=1 09:32:14.146903 vminfo Session 1: PID=6784 (fInt=true ): C:\Windows\System32\svchost.exe 09:32:14.146903 vminfo Session 1: PID=264 (fInt=true ): C:\Windows\System32\sihost.exe 09:32:14.146903 vminfo Session 1: PID=3148 (fInt=true ): C:\Windows\System32\svchost.exe 09:32:14.146903 vminfo Session 1: PID=7176 (fInt=true ): C:\Windows\System32\taskhostw.exe 09:32:14.146903 vminfo Session 1: PID=7268 (fInt=true ): C:\Windows\System32\ctfmon.exe 09:32:14.146903 vminfo Session 1: PID=8732 (fInt=true ): C:\Windows\explorer.exe 09:32:14.146903 vminfo Session 1: PID=9016 (fInt=true ): C:\Program Files (x86)\NoMachine\bin\nxclient.bin 09:32:14.146903 vminfo Session 1: PID=8260 (fInt=true ): C:\Program Files\McAfee\Agent\x86\UpdaterUI.exe 09:32:14.146903 vminfo Session 1: PID=8828 (fInt=true ): C:\Program Files\Classic Shell\ClassicStartMenu.exe 09:32:14.146903 vminfo Session 1: PID=8488 (fInt=true ): C:\Program Files\McAfee\Agent\x86\mctray.exe 09:32:14.146903 vminfo Session 1: PID=9172 (fInt=true ): C:\Program Files\TortoiseSVN\bin\TSVNCache.exe 09:32:14.146903 vminfo Session 1: PID=9280 (fInt=true ): C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe 09:32:14.146903 vminfo Session 1: PID=9652 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:32:14.146903 vminfo Session 1: PID=9728 (fInt=true ): C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe 09:32:14.146903 vminfo Session 1: PID=9880 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:32:14.146903 vminfo Session 1: PID=9944 (fInt=true ): C:\Windows\System32\dllhost.exe 09:32:14.146903 vminfo Session 1: PID=8128 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17112.19011.0_x64__8wekyb3d8bbwe\Video.UI.exe 09:32:14.146903 vminfo Session 1: PID=9528 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:32:14.146903 vminfo Session 1: PID=10292 (fInt=true ): C:\Program Files\Windows Defender\MSASCuiL.exe 09:32:14.146903 vminfo Session 1: PID=10324 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:32:14.146903 vminfo Session 1: PID=10596 (fInt=true ): C:\Users\user\Documents\Visual Studio 2017\Projects\vboxtray_mon\vboxtray_mon\bin\Release\vboxtray_mon.exe 09:32:14.146903 vminfo Session 1: PID=10612 (fInt=true ): C:\Windows\System32\conhost.exe 09:32:14.146903 vminfo Session 1: PID=10720 (fInt=true ): C:\Program Files (x86)\FileZilla Server\FileZilla Server Interface.exe 09:32:14.162876 vminfo Session 1: PID=9808 (fInt=true ): C:\Windows\System32\svchost.exe 09:32:14.162876 vminfo Session 1: PID=6716 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18011.15918.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe 09:32:14.162876 vminfo Session 1: PID=6688 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:32:14.162876 vminfo Session 1: PID=10200 (fInt=true ): C:\Windows\System32\ApplicationFrameHost.exe 09:32:14.162876 vminfo Session 1: PID=4868 (fInt=true ): C:\Windows\ImmersiveControlPanel\SystemSettings.exe 09:32:14.162876 vminfo Session 1: PID=1444 (fInt=true ): C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe 09:32:14.162876 vminfo Session 1: PID=9504 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:32:14.162876 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/Session/1' = '#12159: cSessionProcs=30 (of 154 procs total)' 09:32:14.162876 vminfo Adding new user=user (session=1) with 30 processes 09:32:14.162876 vminfo Handling session 7 (of 17) 09:32:14.162876 vminfo Session data: Name=nx, SessionID=0, LogonID=0,685607, LogonType=3 09:32:14.162876 vminfo Handling session 8 (of 17) 09:32:14.162876 vminfo Session data: Name=ANONYMOUS LOGON, SessionID=0, LogonID=0,649881, LogonType=3 09:32:14.162876 vminfo Handling session 9 (of 17) 09:32:14.162876 vminfo Session data: Name=IUSR, SessionID=0, LogonID=0,995, LogonType=5 09:32:14.162876 vminfo Handling session 10 (of 17) 09:32:14.162876 vminfo Session data: Name=DWM-1, SessionID=1, LogonID=0,61006, LogonType=2 09:32:14.162876 vminfo Session LogonType=2 is supported -- looking up SID + type ... 09:32:14.162876 vminfo SID owner type=5 not handled, skipping 09:32:14.162876 vminfo Account User=DWM-1 is not logged in 09:32:14.162876 vminfo Handling session 11 (of 17) 09:32:14.162876 vminfo Session data: Name=DWM-1, SessionID=1, LogonID=0,60973, LogonType=2 09:32:14.162876 vminfo Session LogonType=2 is supported -- looking up SID + type ... 09:32:14.162876 vminfo SID owner type=5 not handled, skipping 09:32:14.162876 vminfo Account User=DWM-1 is not logged in 09:32:14.162876 vminfo Handling session 12 (of 17) 09:32:14.162876 vminfo Session data: Name=MACHINE$, SessionID=0, LogonID=0,996, LogonType=5 09:32:14.162876 vminfo Handling session 13 (of 17) 09:32:14.162876 vminfo Session data: Name=LOCAL SERVICE, SessionID=0, LogonID=0,997, LogonType=5 09:32:14.162876 vminfo Handling session 14 (of 17) 09:32:14.162876 vminfo Session data: Name=UMFD-1, SessionID=1, LogonID=0,34521, LogonType=2 09:32:14.162876 vminfo Session LogonType=2 is supported -- looking up SID + type ... 09:32:14.162876 vminfo SID owner type=5 not handled, skipping 09:32:14.162876 vminfo Account User=UMFD-1 is not logged in 09:32:14.162876 vminfo Handling session 15 (of 17) 09:32:14.162876 vminfo Session data: Name=UMFD-0, SessionID=0, LogonID=0,34482, LogonType=2 09:32:14.162876 vminfo Handling session 16 (of 17) 09:32:14.162876 vminfo Session data: Name=, SessionID=0, LogonID=0,32336, LogonType=0 09:32:14.162876 vminfo Handling session 17 (of 17) 09:32:14.162876 vminfo Session data: Name=MACHINE$, SessionID=0, LogonID=0,999, LogonType=0 09:32:14.162876 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA' = '#12159: cSessions=17, cProcs=154, cUniqueUsers=2' 09:32:14.162876 vminfo Found 2 unique logged-in user(s) 09:32:14.162876 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/User/0' = '#12159: szName=user, sessionID=1, cProcs=30' 09:32:14.162876 vminfo User 'user' has 30 interactive processes (session=1) 09:32:14.162876 vminfo VBoxTray for user 'user' not running (anymore), no last input available 09:32:14.162876 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/User/user@DOMAIN/UsageState' resulted in rc=VINF_NO_CHANGE 09:32:14.162876 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/User/1' = '#12159: szName=user, sessionID=1, cProcs=30' 09:32:14.162876 vminfo User 'user' has 30 interactive processes (session=1) 09:32:14.162876 vminfo VBoxTray for user 'user' not running (anymore), no last input available 09:32:14.162876 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/User/user@DOMAIN/UsageState' resulted in rc=VINF_NO_CHANGE 09:32:14.162876 vminfo cUsersInList=2, pszUserList=user,user, rc=VINF_NO_CHANGE 09:32:14.162876 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/LoggedInUsersList' resulted in rc=VINF_NO_CHANGE 09:32:14.162876 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/LoggedInUsers' resulted in rc=VINF_NO_CHANGE 09:32:14.162876 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/NoLoggedInUsers' resulted in rc=VINF_NO_CHANGE 09:32:14.162876 vminfo Writing users returned with rc=VINF_NO_CHANGE 09:32:14.162876 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/IP' resulted in rc=VINF_NO_CHANGE 09:32:14.162876 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/Broadcast' resulted in rc=VINF_NO_CHANGE 09:32:14.162876 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/Netmask' resulted in rc=VINF_NO_CHANGE 09:32:14.162876 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/Status' resulted in rc=VINF_NO_CHANGE 09:32:14.162876 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/MAC' resulted in rc=VINF_NO_CHANGE 09:32:14.162876 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/IP' resulted in rc=VINF_NO_CHANGE 09:32:14.162876 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/Broadcast' resulted in rc=VINF_NO_CHANGE 09:32:14.162876 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/Netmask' resulted in rc=VINF_NO_CHANGE 09:32:14.162876 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/Status' resulted in rc=VINF_NO_CHANGE 09:32:14.162876 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/MAC' resulted in rc=VINF_NO_CHANGE 09:32:14.162876 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/IP' resulted in rc=VINF_NO_CHANGE 09:32:14.162876 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/Broadcast' resulted in rc=VINF_NO_CHANGE 09:32:14.162876 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/Netmask' resulted in rc=VINF_NO_CHANGE 09:32:14.162876 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/Status' resulted in rc=VINF_NO_CHANGE 09:32:14.162876 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/MAC' resulted in rc=VINF_NO_CHANGE 09:32:14.162876 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/IP' resulted in rc=VINF_NO_CHANGE 09:32:14.162876 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/Broadcast' resulted in rc=VINF_NO_CHANGE 09:32:14.162876 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/Netmask' resulted in rc=VINF_NO_CHANGE 09:32:14.162876 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/Status' resulted in rc=VINF_NO_CHANGE 09:32:14.162876 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/MAC' resulted in rc=VINF_NO_CHANGE 09:32:14.162876 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/IP' resulted in rc=VINF_NO_CHANGE 09:32:14.162876 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/Broadcast' resulted in rc=VINF_NO_CHANGE 09:32:14.162876 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/Netmask' resulted in rc=VINF_NO_CHANGE 09:32:14.162876 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/Status' resulted in rc=VINF_NO_CHANGE 09:32:14.162876 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/MAC' resulted in rc=VINF_NO_CHANGE 09:32:14.162876 vminfo [PropCache 00007ff6b2962520]: Written '/VirtualBox/GuestInfo/Net/Count'='5' (flags: 6), rc=VINF_SUCCESS 09:32:14.162876 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/Count' resulted in rc=VINF_SUCCESS 09:32:14.162876 vminfo Guest Property: /VirtualBox/HostInfo/VRDP/ActiveClient not found 09:32:14.162876 vminfo VRDP: Handling location awareness done 09:32:16.167304 timesync vgsvcTimeSyncWorker: Host: 2019-02-26T09:32:16.041000000Z (MinAdjust: 200 ms), Guest: 2019-02-26T09:32:16.167304600Z => -126 304 600 ns drift 09:32:19.174632 vminfo Found 17 sessions 09:32:19.174632 vminfo Error: Get token class 'user' for process 0 failed, rc=VERR_INVALID_PARAMETER 09:32:19.174632 vminfo Error: Get token class 'groups' for process 0 failed, rc=VERR_INVALID_PARAMETER 09:32:19.174632 vminfo Error: Get token class 'statistics' for process 0 failed, rc=VERR_INVALID_PARAMETER 09:32:19.174632 vminfo Error: Get token class 'user' for process 4 failed, rc=VERR_ACCESS_DENIED 09:32:19.174632 vminfo Error: Get token class 'groups' for process 4 failed, rc=VERR_ACCESS_DENIED 09:32:19.174632 vminfo Error: Get token class 'statistics' for process 4 failed, rc=VERR_ACCESS_DENIED 09:32:19.174632 vminfo Error: Get token class 'user' for process 104 failed, rc=VERR_ACCESS_DENIED 09:32:19.174632 vminfo Error: Get token class 'groups' for process 104 failed, rc=VERR_ACCESS_DENIED 09:32:19.174632 vminfo Error: Get token class 'statistics' for process 104 failed, rc=VERR_ACCESS_DENIED 09:32:19.174632 vminfo Error: Get token class 'user' for process 472 failed, rc=VERR_ACCESS_DENIED 09:32:19.174632 vminfo Error: Get token class 'groups' for process 472 failed, rc=VERR_ACCESS_DENIED 09:32:19.174632 vminfo Error: Get token class 'statistics' for process 472 failed, rc=VERR_ACCESS_DENIED 09:32:19.174632 vminfo Error: Get token class 'user' for process 676 failed, rc=VERR_ACCESS_DENIED 09:32:19.174632 vminfo Error: Get token class 'groups' for process 676 failed, rc=VERR_ACCESS_DENIED 09:32:19.174632 vminfo Error: Get token class 'statistics' for process 676 failed, rc=VERR_ACCESS_DENIED 09:32:19.174632 vminfo Error: Get token class 'user' for process 756 failed, rc=VERR_ACCESS_DENIED 09:32:19.174632 vminfo Error: Get token class 'groups' for process 756 failed, rc=VERR_ACCESS_DENIED 09:32:19.174632 vminfo Error: Get token class 'statistics' for process 756 failed, rc=VERR_ACCESS_DENIED 09:32:19.174632 vminfo Error: Get token class 'user' for process 768 failed, rc=VERR_ACCESS_DENIED 09:32:19.174632 vminfo Error: Get token class 'groups' for process 768 failed, rc=VERR_ACCESS_DENIED 09:32:19.174632 vminfo Error: Get token class 'statistics' for process 768 failed, rc=VERR_ACCESS_DENIED 09:32:19.174632 vminfo Error: Get token class 'user' for process 876 failed, rc=VERR_ACCESS_DENIED 09:32:19.174632 vminfo Error: Get token class 'groups' for process 876 failed, rc=VERR_ACCESS_DENIED 09:32:19.174632 vminfo Error: Get token class 'statistics' for process 876 failed, rc=VERR_ACCESS_DENIED 09:32:19.174632 vminfo Error: Get token class 'user' for process 2532 failed, rc=VERR_ACCESS_DENIED 09:32:19.174632 vminfo Error: Get token class 'groups' for process 2532 failed, rc=VERR_ACCESS_DENIED 09:32:19.174632 vminfo Error: Get token class 'statistics' for process 2532 failed, rc=VERR_ACCESS_DENIED 09:32:19.174632 vminfo Error: Get token class 'user' for process 4136 failed, rc=VERR_ACCESS_DENIED 09:32:19.174632 vminfo Error: Get token class 'groups' for process 4136 failed, rc=VERR_ACCESS_DENIED 09:32:19.174632 vminfo Error: Get token class 'statistics' for process 4136 failed, rc=VERR_ACCESS_DENIED 09:32:19.174632 vminfo Error: Get token class 'user' for process 5212 failed, rc=VERR_ACCESS_DENIED 09:32:19.174632 vminfo Error: Get token class 'groups' for process 5212 failed, rc=VERR_ACCESS_DENIED 09:32:19.174632 vminfo Error: Get token class 'statistics' for process 5212 failed, rc=VERR_ACCESS_DENIED 09:32:19.174632 vminfo Handling session 1 (of 17) 09:32:19.174632 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2145999, LogonType=3 09:32:19.174632 vminfo Handling session 2 (of 17) 09:32:19.174632 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2113823, LogonType=3 09:32:19.174632 vminfo Handling session 3 (of 17) 09:32:19.174632 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2041868, LogonType=3 09:32:19.174632 vminfo Handling session 4 (of 17) 09:32:19.187871 vminfo Session data: Name=nx, SessionID=0, LogonID=0,1997776, LogonType=3 09:32:19.187871 vminfo Handling session 5 (of 17) 09:32:19.187871 vminfo Session data: Name=user, SessionID=1, LogonID=0,1970648, LogonType=2 09:32:19.187871 vminfo Session LogonType=2 is supported -- looking up SID + type ... 09:32:19.187871 vminfo Account User=user, Session=1, LogonID=0,1970648, AuthPkg=Negotiate, Domain=DOMAIN 09:32:19.187871 vminfo Account User=user, WTSConnectState=0 (4) 09:32:19.187871 vminfo Account User=user using TCS/RDP, state=0 09:32:19.187871 vminfo Account User=user is logged in 09:32:19.187871 vminfo Handling user=user, domain=DOMAIN, package=Negotiate, session=1 09:32:19.187871 vminfo Session 1: PID=6784 (fInt=true ): C:\Windows\System32\svchost.exe 09:32:19.187871 vminfo Session 1: PID=264 (fInt=true ): C:\Windows\System32\sihost.exe 09:32:19.187871 vminfo Session 1: PID=3148 (fInt=true ): C:\Windows\System32\svchost.exe 09:32:19.187871 vminfo Session 1: PID=7176 (fInt=true ): C:\Windows\System32\taskhostw.exe 09:32:19.187871 vminfo Session 1: PID=7268 (fInt=true ): C:\Windows\System32\ctfmon.exe 09:32:19.187871 vminfo Session 1: PID=8732 (fInt=true ): C:\Windows\explorer.exe 09:32:19.187871 vminfo Session 1: PID=9016 (fInt=true ): C:\Program Files (x86)\NoMachine\bin\nxclient.bin 09:32:19.187871 vminfo Session 1: PID=8260 (fInt=true ): C:\Program Files\McAfee\Agent\x86\UpdaterUI.exe 09:32:19.187871 vminfo Session 1: PID=8828 (fInt=true ): C:\Program Files\Classic Shell\ClassicStartMenu.exe 09:32:19.187871 vminfo Session 1: PID=8488 (fInt=true ): C:\Program Files\McAfee\Agent\x86\mctray.exe 09:32:19.187871 vminfo Session 1: PID=9172 (fInt=true ): C:\Program Files\TortoiseSVN\bin\TSVNCache.exe 09:32:19.187871 vminfo Session 1: PID=9280 (fInt=true ): C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe 09:32:19.187871 vminfo Session 1: PID=9652 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:32:19.187871 vminfo Session 1: PID=9728 (fInt=true ): C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe 09:32:19.187871 vminfo Session 1: PID=9880 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:32:19.187871 vminfo Session 1: PID=9944 (fInt=true ): C:\Windows\System32\dllhost.exe 09:32:19.187871 vminfo Session 1: PID=8128 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17112.19011.0_x64__8wekyb3d8bbwe\Video.UI.exe 09:32:19.187871 vminfo Session 1: PID=9528 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:32:19.187871 vminfo Session 1: PID=10292 (fInt=true ): C:\Program Files\Windows Defender\MSASCuiL.exe 09:32:19.187871 vminfo Session 1: PID=10324 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:32:19.187871 vminfo Session 1: PID=10596 (fInt=true ): C:\Users\user\Documents\Visual Studio 2017\Projects\vboxtray_mon\vboxtray_mon\bin\Release\vboxtray_mon.exe 09:32:19.187871 vminfo Session 1: PID=10612 (fInt=true ): C:\Windows\System32\conhost.exe 09:32:19.187871 vminfo Session 1: PID=10720 (fInt=true ): C:\Program Files (x86)\FileZilla Server\FileZilla Server Interface.exe 09:32:19.187871 vminfo Session 1: PID=9808 (fInt=true ): C:\Windows\System32\svchost.exe 09:32:19.187871 vminfo Session 1: PID=6716 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18011.15918.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe 09:32:19.187871 vminfo Session 1: PID=6688 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:32:19.187871 vminfo Session 1: PID=10200 (fInt=true ): C:\Windows\System32\ApplicationFrameHost.exe 09:32:19.187871 vminfo Session 1: PID=4868 (fInt=true ): C:\Windows\ImmersiveControlPanel\SystemSettings.exe 09:32:19.187871 vminfo Session 1: PID=1444 (fInt=true ): C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe 09:32:19.187871 vminfo Session 1: PID=9504 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:32:19.187871 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/Session/1' = '#12160: cSessionProcs=30 (of 154 procs total)' 09:32:19.187871 vminfo Adding new user=user (session=1) with 30 processes 09:32:19.187871 vminfo Handling session 6 (of 17) 09:32:19.187871 vminfo Session data: Name=user, SessionID=1, LogonID=0,1970599, LogonType=2 09:32:19.187871 vminfo Session LogonType=2 is supported -- looking up SID + type ... 09:32:19.187871 vminfo Account User=user, Session=1, LogonID=0,1970599, AuthPkg=Kerberos, Domain=DOMAIN 09:32:19.187871 vminfo Account User=user, WTSConnectState=0 (4) 09:32:19.187871 vminfo Account User=user using TCS/RDP, state=0 09:32:19.187871 vminfo Account User=user is logged in 09:32:19.187871 vminfo Handling user=user, domain=DOMAIN, package=Kerberos, session=1 09:32:19.187871 vminfo Session 1: PID=6784 (fInt=true ): C:\Windows\System32\svchost.exe 09:32:19.187871 vminfo Session 1: PID=264 (fInt=true ): C:\Windows\System32\sihost.exe 09:32:19.187871 vminfo Session 1: PID=3148 (fInt=true ): C:\Windows\System32\svchost.exe 09:32:19.187871 vminfo Session 1: PID=7176 (fInt=true ): C:\Windows\System32\taskhostw.exe 09:32:19.187871 vminfo Session 1: PID=7268 (fInt=true ): C:\Windows\System32\ctfmon.exe 09:32:19.187871 vminfo Session 1: PID=8732 (fInt=true ): C:\Windows\explorer.exe 09:32:19.187871 vminfo Session 1: PID=9016 (fInt=true ): C:\Program Files (x86)\NoMachine\bin\nxclient.bin 09:32:19.187871 vminfo Session 1: PID=8260 (fInt=true ): C:\Program Files\McAfee\Agent\x86\UpdaterUI.exe 09:32:19.187871 vminfo Session 1: PID=8828 (fInt=true ): C:\Program Files\Classic Shell\ClassicStartMenu.exe 09:32:19.187871 vminfo Session 1: PID=8488 (fInt=true ): C:\Program Files\McAfee\Agent\x86\mctray.exe 09:32:19.187871 vminfo Session 1: PID=9172 (fInt=true ): C:\Program Files\TortoiseSVN\bin\TSVNCache.exe 09:32:19.187871 vminfo Session 1: PID=9280 (fInt=true ): C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe 09:32:19.187871 vminfo Session 1: PID=9652 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:32:19.187871 vminfo Session 1: PID=9728 (fInt=true ): C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe 09:32:19.187871 vminfo Session 1: PID=9880 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:32:19.187871 vminfo Session 1: PID=9944 (fInt=true ): C:\Windows\System32\dllhost.exe 09:32:19.187871 vminfo Session 1: PID=8128 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17112.19011.0_x64__8wekyb3d8bbwe\Video.UI.exe 09:32:19.187871 vminfo Session 1: PID=9528 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:32:19.187871 vminfo Session 1: PID=10292 (fInt=true ): C:\Program Files\Windows Defender\MSASCuiL.exe 09:32:19.187871 vminfo Session 1: PID=10324 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:32:19.187871 vminfo Session 1: PID=10596 (fInt=true ): C:\Users\user\Documents\Visual Studio 2017\Projects\vboxtray_mon\vboxtray_mon\bin\Release\vboxtray_mon.exe 09:32:19.203174 vminfo Session 1: PID=10612 (fInt=true ): C:\Windows\System32\conhost.exe 09:32:19.203174 vminfo Session 1: PID=10720 (fInt=true ): C:\Program Files (x86)\FileZilla Server\FileZilla Server Interface.exe 09:32:19.203174 vminfo Session 1: PID=9808 (fInt=true ): C:\Windows\System32\svchost.exe 09:32:19.203174 vminfo Session 1: PID=6716 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18011.15918.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe 09:32:19.203174 vminfo Session 1: PID=6688 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:32:19.203174 vminfo Session 1: PID=10200 (fInt=true ): C:\Windows\System32\ApplicationFrameHost.exe 09:32:19.203174 vminfo Session 1: PID=4868 (fInt=true ): C:\Windows\ImmersiveControlPanel\SystemSettings.exe 09:32:19.203174 vminfo Session 1: PID=1444 (fInt=true ): C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe 09:32:19.203174 vminfo Session 1: PID=9504 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:32:19.203174 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/Session/1' = '#12160: cSessionProcs=30 (of 154 procs total)' 09:32:19.203174 vminfo Adding new user=user (session=1) with 30 processes 09:32:19.203174 vminfo Handling session 7 (of 17) 09:32:19.203174 vminfo Session data: Name=nx, SessionID=0, LogonID=0,685607, LogonType=3 09:32:19.203174 vminfo Handling session 8 (of 17) 09:32:19.203174 vminfo Session data: Name=ANONYMOUS LOGON, SessionID=0, LogonID=0,649881, LogonType=3 09:32:19.203174 vminfo Handling session 9 (of 17) 09:32:19.203174 vminfo Session data: Name=IUSR, SessionID=0, LogonID=0,995, LogonType=5 09:32:19.203174 vminfo Handling session 10 (of 17) 09:32:19.203174 vminfo Session data: Name=DWM-1, SessionID=1, LogonID=0,61006, LogonType=2 09:32:19.203174 vminfo Session LogonType=2 is supported -- looking up SID + type ... 09:32:19.203174 vminfo SID owner type=5 not handled, skipping 09:32:19.203174 vminfo Account User=DWM-1 is not logged in 09:32:19.203174 vminfo Handling session 11 (of 17) 09:32:19.203174 vminfo Session data: Name=DWM-1, SessionID=1, LogonID=0,60973, LogonType=2 09:32:19.203174 vminfo Session LogonType=2 is supported -- looking up SID + type ... 09:32:19.203174 vminfo SID owner type=5 not handled, skipping 09:32:19.203174 vminfo Account User=DWM-1 is not logged in 09:32:19.203174 vminfo Handling session 12 (of 17) 09:32:19.203174 vminfo Session data: Name=MACHINE$, SessionID=0, LogonID=0,996, LogonType=5 09:32:19.203174 vminfo Handling session 13 (of 17) 09:32:19.203174 vminfo Session data: Name=LOCAL SERVICE, SessionID=0, LogonID=0,997, LogonType=5 09:32:19.203174 vminfo Handling session 14 (of 17) 09:32:19.203174 vminfo Session data: Name=UMFD-1, SessionID=1, LogonID=0,34521, LogonType=2 09:32:19.203174 vminfo Session LogonType=2 is supported -- looking up SID + type ... 09:32:19.203174 vminfo SID owner type=5 not handled, skipping 09:32:19.203174 vminfo Account User=UMFD-1 is not logged in 09:32:19.203174 vminfo Handling session 15 (of 17) 09:32:19.203174 vminfo Session data: Name=UMFD-0, SessionID=0, LogonID=0,34482, LogonType=2 09:32:19.203174 vminfo Handling session 16 (of 17) 09:32:19.203174 vminfo Session data: Name=, SessionID=0, LogonID=0,32336, LogonType=0 09:32:19.203174 vminfo Handling session 17 (of 17) 09:32:19.203174 vminfo Session data: Name=MACHINE$, SessionID=0, LogonID=0,999, LogonType=0 09:32:19.203174 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA' = '#12160: cSessions=17, cProcs=154, cUniqueUsers=2' 09:32:19.203174 vminfo Found 2 unique logged-in user(s) 09:32:19.203174 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/User/0' = '#12160: szName=user, sessionID=1, cProcs=30' 09:32:19.203174 vminfo User 'user' has 30 interactive processes (session=1) 09:32:19.203174 vminfo VBoxTray for user 'user' not running (anymore), no last input available 09:32:19.203174 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/User/user@DOMAIN/UsageState' resulted in rc=VINF_NO_CHANGE 09:32:19.203174 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/User/1' = '#12160: szName=user, sessionID=1, cProcs=30' 09:32:19.203174 vminfo User 'user' has 30 interactive processes (session=1) 09:32:19.203174 vminfo VBoxTray for user 'user' not running (anymore), no last input available 09:32:19.203174 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/User/user@DOMAIN/UsageState' resulted in rc=VINF_NO_CHANGE 09:32:19.203174 vminfo cUsersInList=2, pszUserList=user,user, rc=VINF_NO_CHANGE 09:32:19.203174 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/LoggedInUsersList' resulted in rc=VINF_NO_CHANGE 09:32:19.203174 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/LoggedInUsers' resulted in rc=VINF_NO_CHANGE 09:32:19.203174 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/OS/NoLoggedInUsers' resulted in rc=VINF_NO_CHANGE 09:32:19.203174 vminfo Writing users returned with rc=VINF_NO_CHANGE 09:32:19.203174 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/IP' resulted in rc=VINF_NO_CHANGE 09:32:19.203174 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/Broadcast' resulted in rc=VINF_NO_CHANGE 09:32:19.203174 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/V4/Netmask' resulted in rc=VINF_NO_CHANGE 09:32:19.203174 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/Status' resulted in rc=VINF_NO_CHANGE 09:32:19.203174 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/0/MAC' resulted in rc=VINF_NO_CHANGE 09:32:19.203174 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/IP' resulted in rc=VINF_NO_CHANGE 09:32:19.203174 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/Broadcast' resulted in rc=VINF_NO_CHANGE 09:32:19.203174 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/V4/Netmask' resulted in rc=VINF_NO_CHANGE 09:32:19.203174 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/Status' resulted in rc=VINF_NO_CHANGE 09:32:19.203174 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/1/MAC' resulted in rc=VINF_NO_CHANGE 09:32:19.203174 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/IP' resulted in rc=VINF_NO_CHANGE 09:32:19.203174 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/Broadcast' resulted in rc=VINF_NO_CHANGE 09:32:19.203174 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/V4/Netmask' resulted in rc=VINF_NO_CHANGE 09:32:19.203174 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/Status' resulted in rc=VINF_NO_CHANGE 09:32:19.203174 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/2/MAC' resulted in rc=VINF_NO_CHANGE 09:32:19.203174 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/IP' resulted in rc=VINF_NO_CHANGE 09:32:19.203174 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/Broadcast' resulted in rc=VINF_NO_CHANGE 09:32:19.203174 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/V4/Netmask' resulted in rc=VINF_NO_CHANGE 09:32:19.203174 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/Status' resulted in rc=VINF_NO_CHANGE 09:32:19.203174 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/3/MAC' resulted in rc=VINF_NO_CHANGE 09:32:19.203174 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/IP' resulted in rc=VINF_NO_CHANGE 09:32:19.203174 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/Broadcast' resulted in rc=VINF_NO_CHANGE 09:32:19.203174 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/V4/Netmask' resulted in rc=VINF_NO_CHANGE 09:32:19.203174 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/Status' resulted in rc=VINF_NO_CHANGE 09:32:19.203174 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/4/MAC' resulted in rc=VINF_NO_CHANGE 09:32:19.203174 vminfo [PropCache 00007ff6b2962520]: Written '/VirtualBox/GuestInfo/Net/Count'='5' (flags: 6), rc=VINF_SUCCESS 09:32:19.203174 vminfo [PropCache 00007ff6b2962520]: Updating '/VirtualBox/GuestInfo/Net/Count' resulted in rc=VINF_SUCCESS 09:32:19.203174 vminfo Guest Property: /VirtualBox/HostInfo/VRDP/ActiveClient not found 09:32:19.203174 vminfo VRDP: Handling location awareness done 09:32:24.219177 vminfo Found 17 sessions 09:32:24.219177 vminfo Error: Get token class 'user' for process 0 failed, rc=VERR_INVALID_PARAMETER 09:32:24.219177 vminfo Error: Get token class 'groups' for process 0 failed, rc=VERR_INVALID_PARAMETER 09:32:24.219177 vminfo Error: Get token class 'statistics' for process 0 failed, rc=VERR_INVALID_PARAMETER 09:32:24.219177 vminfo Error: Get token class 'user' for process 4 failed, rc=VERR_ACCESS_DENIED 09:32:24.219177 vminfo Error: Get token class 'groups' for process 4 failed, rc=VERR_ACCESS_DENIED 09:32:24.219177 vminfo Error: Get token class 'statistics' for process 4 failed, rc=VERR_ACCESS_DENIED 09:32:24.219177 vminfo Error: Get token class 'user' for process 104 failed, rc=VERR_ACCESS_DENIED 09:32:24.219177 vminfo Error: Get token class 'groups' for process 104 failed, rc=VERR_ACCESS_DENIED 09:32:24.219177 vminfo Error: Get token class 'statistics' for process 104 failed, rc=VERR_ACCESS_DENIED 09:32:24.219177 vminfo Error: Get token class 'user' for process 472 failed, rc=VERR_ACCESS_DENIED 09:32:24.219177 vminfo Error: Get token class 'groups' for process 472 failed, rc=VERR_ACCESS_DENIED 09:32:24.219177 vminfo Error: Get token class 'statistics' for process 472 failed, rc=VERR_ACCESS_DENIED 09:32:24.219177 vminfo Error: Get token class 'user' for process 676 failed, rc=VERR_ACCESS_DENIED 09:32:24.219177 vminfo Error: Get token class 'groups' for process 676 failed, rc=VERR_ACCESS_DENIED 09:32:24.219177 vminfo Error: Get token class 'statistics' for process 676 failed, rc=VERR_ACCESS_DENIED 09:32:24.219177 vminfo Error: Get token class 'user' for process 756 failed, rc=VERR_ACCESS_DENIED 09:32:24.219177 vminfo Error: Get token class 'groups' for process 756 failed, rc=VERR_ACCESS_DENIED 09:32:24.219177 vminfo Error: Get token class 'statistics' for process 756 failed, rc=VERR_ACCESS_DENIED 09:32:24.219177 vminfo Error: Get token class 'user' for process 768 failed, rc=VERR_ACCESS_DENIED 09:32:24.219177 vminfo Error: Get token class 'groups' for process 768 failed, rc=VERR_ACCESS_DENIED 09:32:24.219177 vminfo Error: Get token class 'statistics' for process 768 failed, rc=VERR_ACCESS_DENIED 09:32:24.219177 vminfo Error: Get token class 'user' for process 876 failed, rc=VERR_ACCESS_DENIED 09:32:24.219177 vminfo Error: Get token class 'groups' for process 876 failed, rc=VERR_ACCESS_DENIED 09:32:24.219177 vminfo Error: Get token class 'statistics' for process 876 failed, rc=VERR_ACCESS_DENIED 09:32:24.219177 vminfo Error: Get token class 'user' for process 2532 failed, rc=VERR_ACCESS_DENIED 09:32:24.219177 vminfo Error: Get token class 'groups' for process 2532 failed, rc=VERR_ACCESS_DENIED 09:32:24.219177 vminfo Error: Get token class 'statistics' for process 2532 failed, rc=VERR_ACCESS_DENIED 09:32:24.219177 vminfo Error: Get token class 'user' for process 4136 failed, rc=VERR_ACCESS_DENIED 09:32:24.219177 vminfo Error: Get token class 'groups' for process 4136 failed, rc=VERR_ACCESS_DENIED 09:32:24.219177 vminfo Error: Get token class 'statistics' for process 4136 failed, rc=VERR_ACCESS_DENIED 09:32:24.219177 vminfo Error: Get token class 'user' for process 5212 failed, rc=VERR_ACCESS_DENIED 09:32:24.219177 vminfo Error: Get token class 'groups' for process 5212 failed, rc=VERR_ACCESS_DENIED 09:32:24.219177 vminfo Error: Get token class 'statistics' for process 5212 failed, rc=VERR_ACCESS_DENIED 09:32:24.219177 vminfo Handling session 1 (of 17) 09:32:24.219177 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2145999, LogonType=3 09:32:24.219177 vminfo Handling session 2 (of 17) 09:32:24.219177 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2113823, LogonType=3 09:32:24.219177 vminfo Handling session 3 (of 17) 09:32:24.219177 vminfo Session data: Name=nx, SessionID=0, LogonID=0,2041868, LogonType=3 09:32:24.219177 vminfo Handling session 4 (of 17) 09:32:24.219177 vminfo Session data: Name=nx, SessionID=0, LogonID=0,1997776, LogonType=3 09:32:24.219177 vminfo Handling session 5 (of 17) 09:32:24.219177 vminfo Session data: Name=user, SessionID=1, LogonID=0,1970648, LogonType=2 09:32:24.219177 vminfo Session LogonType=2 is supported -- looking up SID + type ... 09:32:24.233268 vminfo Account User=user, Session=1, LogonID=0,1970648, AuthPkg=Negotiate, Domain=DOMAIN 09:32:24.233268 vminfo Account User=user, WTSConnectState=0 (4) 09:32:24.233268 vminfo Account User=user using TCS/RDP, state=0 09:32:24.233268 vminfo Account User=user is logged in 09:32:24.233268 vminfo Handling user=user, domain=DOMAIN, package=Negotiate, session=1 09:32:24.233268 vminfo Session 1: PID=6784 (fInt=true ): C:\Windows\System32\svchost.exe 09:32:24.233268 vminfo Session 1: PID=264 (fInt=true ): C:\Windows\System32\sihost.exe 09:32:24.233268 vminfo Session 1: PID=3148 (fInt=true ): C:\Windows\System32\svchost.exe 09:32:24.233268 vminfo Session 1: PID=7176 (fInt=true ): C:\Windows\System32\taskhostw.exe 09:32:24.233268 vminfo Session 1: PID=7268 (fInt=true ): C:\Windows\System32\ctfmon.exe 09:32:24.233268 vminfo Session 1: PID=8732 (fInt=true ): C:\Windows\explorer.exe 09:32:24.233268 vminfo Session 1: PID=9016 (fInt=true ): C:\Program Files (x86)\NoMachine\bin\nxclient.bin 09:32:24.233268 vminfo Session 1: PID=8260 (fInt=true ): C:\Program Files\McAfee\Agent\x86\UpdaterUI.exe 09:32:24.233268 vminfo Session 1: PID=8828 (fInt=true ): C:\Program Files\Classic Shell\ClassicStartMenu.exe 09:32:24.233268 vminfo Session 1: PID=8488 (fInt=true ): C:\Program Files\McAfee\Agent\x86\mctray.exe 09:32:24.233268 vminfo Session 1: PID=9172 (fInt=true ): C:\Program Files\TortoiseSVN\bin\TSVNCache.exe 09:32:24.233268 vminfo Session 1: PID=9280 (fInt=true ): C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe 09:32:24.233268 vminfo Session 1: PID=9652 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:32:24.233268 vminfo Session 1: PID=9728 (fInt=true ): C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe 09:32:24.233268 vminfo Session 1: PID=9880 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:32:24.233268 vminfo Session 1: PID=9944 (fInt=true ): C:\Windows\System32\dllhost.exe 09:32:24.233268 vminfo Session 1: PID=8128 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17112.19011.0_x64__8wekyb3d8bbwe\Video.UI.exe 09:32:24.233268 vminfo Session 1: PID=9528 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:32:24.233268 vminfo Session 1: PID=10292 (fInt=true ): C:\Program Files\Windows Defender\MSASCuiL.exe 09:32:24.233268 vminfo Session 1: PID=10324 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:32:24.233268 vminfo Session 1: PID=10596 (fInt=true ): C:\Users\user\Documents\Visual Studio 2017\Projects\vboxtray_mon\vboxtray_mon\bin\Release\vboxtray_mon.exe 09:32:24.233268 vminfo Session 1: PID=10612 (fInt=true ): C:\Windows\System32\conhost.exe 09:32:24.233268 vminfo Session 1: PID=10720 (fInt=true ): C:\Program Files (x86)\FileZilla Server\FileZilla Server Interface.exe 09:32:24.233268 vminfo Session 1: PID=9808 (fInt=true ): C:\Windows\System32\svchost.exe 09:32:24.233268 vminfo Session 1: PID=6716 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18011.15918.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe 09:32:24.233268 vminfo Session 1: PID=6688 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:32:24.233268 vminfo Session 1: PID=10200 (fInt=true ): C:\Windows\System32\ApplicationFrameHost.exe 09:32:24.233268 vminfo Session 1: PID=4868 (fInt=true ): C:\Windows\ImmersiveControlPanel\SystemSettings.exe 09:32:24.233268 vminfo Session 1: PID=1444 (fInt=true ): C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe 09:32:24.233268 vminfo Session 1: PID=9504 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:32:24.233268 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/Session/1' = '#12161: cSessionProcs=30 (of 154 procs total)' 09:32:24.233268 vminfo Adding new user=user (session=1) with 30 processes 09:32:24.233268 vminfo Handling session 6 (of 17) 09:32:24.233268 vminfo Session data: Name=user, SessionID=1, LogonID=0,1970599, LogonType=2 09:32:24.233268 vminfo Session LogonType=2 is supported -- looking up SID + type ... 09:32:24.233268 vminfo Account User=user, Session=1, LogonID=0,1970599, AuthPkg=Kerberos, Domain=DOMAIN 09:32:24.233268 vminfo Account User=user, WTSConnectState=0 (4) 09:32:24.233268 vminfo Account User=user using TCS/RDP, state=0 09:32:24.233268 vminfo Account User=user is logged in 09:32:24.233268 vminfo Handling user=user, domain=DOMAIN, package=Kerberos, session=1 09:32:24.233268 vminfo Session 1: PID=6784 (fInt=true ): C:\Windows\System32\svchost.exe 09:32:24.233268 vminfo Session 1: PID=264 (fInt=true ): C:\Windows\System32\sihost.exe 09:32:24.233268 vminfo Session 1: PID=3148 (fInt=true ): C:\Windows\System32\svchost.exe 09:32:24.233268 vminfo Session 1: PID=7176 (fInt=true ): C:\Windows\System32\taskhostw.exe 09:32:24.233268 vminfo Session 1: PID=7268 (fInt=true ): C:\Windows\System32\ctfmon.exe 09:32:24.233268 vminfo Session 1: PID=8732 (fInt=true ): C:\Windows\explorer.exe 09:32:24.233268 vminfo Session 1: PID=9016 (fInt=true ): C:\Program Files (x86)\NoMachine\bin\nxclient.bin 09:32:24.233268 vminfo Session 1: PID=8260 (fInt=true ): C:\Program Files\McAfee\Agent\x86\UpdaterUI.exe 09:32:24.233268 vminfo Session 1: PID=8828 (fInt=true ): C:\Program Files\Classic Shell\ClassicStartMenu.exe 09:32:24.233268 vminfo Session 1: PID=8488 (fInt=true ): C:\Program Files\McAfee\Agent\x86\mctray.exe 09:32:24.233268 vminfo Session 1: PID=9172 (fInt=true ): C:\Program Files\TortoiseSVN\bin\TSVNCache.exe 09:32:24.233268 vminfo Session 1: PID=9280 (fInt=true ): C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe 09:32:24.233268 vminfo Session 1: PID=9652 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:32:24.233268 vminfo Session 1: PID=9728 (fInt=true ): C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe 09:32:24.233268 vminfo Session 1: PID=9880 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:32:24.233268 vminfo Session 1: PID=9944 (fInt=true ): C:\Windows\System32\dllhost.exe 09:32:24.233268 vminfo Session 1: PID=8128 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17112.19011.0_x64__8wekyb3d8bbwe\Video.UI.exe 09:32:24.233268 vminfo Session 1: PID=9528 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:32:24.233268 vminfo Session 1: PID=10292 (fInt=true ): C:\Program Files\Windows Defender\MSASCuiL.exe 09:32:24.233268 vminfo Session 1: PID=10324 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:32:24.248449 vminfo Session 1: PID=10596 (fInt=true ): C:\Users\user\Documents\Visual Studio 2017\Projects\vboxtray_mon\vboxtray_mon\bin\Release\vboxtray_mon.exe 09:32:24.248449 vminfo Session 1: PID=10612 (fInt=true ): C:\Windows\System32\conhost.exe 09:32:24.248449 vminfo Session 1: PID=10720 (fInt=true ): C:\Program Files (x86)\FileZilla Server\FileZilla Server Interface.exe 09:32:24.248449 vminfo Session 1: PID=9808 (fInt=true ): C:\Windows\System32\svchost.exe 09:32:24.248449 vminfo Session 1: PID=6716 (fInt=true ): C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18011.15918.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe 09:32:24.248449 vminfo Session 1: PID=6688 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:32:24.248449 vminfo Session 1: PID=10200 (fInt=true ): C:\Windows\System32\ApplicationFrameHost.exe 09:32:24.248449 vminfo Session 1: PID=4868 (fInt=true ): C:\Windows\ImmersiveControlPanel\SystemSettings.exe 09:32:24.248449 vminfo Session 1: PID=1444 (fInt=true ): C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe 09:32:24.248449 vminfo Session 1: PID=9504 (fInt=true ): C:\Windows\System32\RuntimeBroker.exe 09:32:24.248449 vminfo Writing guest property '/VirtualBox/GuestInfo/Debug/LSA/Session/1' = '#12161: cSessionProcs=30 (of 154 procs total)'