20191101 11:19:45.913 I dbc SetSalNotificationHandler: Sal Notification Handler is set 20191101 11:19:45.913 I dbc EFRSalCommon::BaseSal::SetSalNotificationHandler: Sal Notification Handler is set 20191101 11:19:45.913 I dbc SetSalDynamicExclusionHandler: Dynamic exclusion handler is set 20191101 11:19:45.913 I dbc EFRSalCommon::BaseSal::SetDynamicExclusionHandler: Dynamic exclusion Handler is set 20191101 11:19:45.913 I dbc EFRSalCommon::BaseSal::Start: Starting, PID=4028 20191101 11:19:45.944 V 1354 EFRSalCommon::BaseSal::DataCollectThread: Thread started 20191101 11:19:46.006 V dbc RegSalMon::DriverResetMonitoredRegKeys: DriverResetMonitoredRegKeys : EPRF_MONITOR_KEY_CLEAN : succeeded 20191101 11:19:46.006 I dbc SetSensorConfig: SetSensorConfig : sensor config is on 20191101 11:19:46.006 V dbc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\software\classes\folder\shell\sandbox ID=0 20191101 11:19:46.006 V dbc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\software\microsoft\hyper-v ID=1 20191101 11:19:46.006 V dbc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\software\microsoft\virtualmachine ID=2 20191101 11:19:46.006 V dbc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\software\microsoft\virtual machine\guest\parameters ID=3 20191101 11:19:46.006 V dbc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\system\controlset001\services\vmicheartbeat ID=4 20191101 11:19:46.006 V dbc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\system\controlset001\services\vmicvss ID=5 20191101 11:19:46.006 V dbc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\system\controlset001\services\vmicshutdown ID=6 20191101 11:19:46.006 V dbc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\system\controlset001\services\vmicexchange ID=7 20191101 11:19:46.006 V dbc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\system\currentcontrolset\enum\pci\ven_1ab8* ID=8 20191101 11:19:46.006 V dbc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\system\currentcontrolset\enum\pci\ven_80ee* ID=9 20191101 11:19:46.006 V dbc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\hardware\acpi\dsdt\vbox__ ID=10 20191101 11:19:46.006 V dbc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\hardware\acpi\fadt\vbox__ ID=11 20191101 11:19:46.006 V dbc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\hardware\acpi\rsdt\vbox__ ID=12 20191101 11:19:46.006 V dbc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\software\oracle\virtualbox guest additions ID=13 20191101 11:19:46.006 V dbc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\system\controlset001\services\vboxguest ID=14 20191101 11:19:46.006 V dbc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\system\controlset001\services\vboxmouse ID=15 20191101 11:19:46.006 V dbc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\system\controlset001\services\vboxservice ID=16 20191101 11:19:46.006 V dbc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\system\controlset001\services\vboxsf ID=17 20191101 11:19:46.006 V dbc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\system\controlset001\services\vboxvideo ID=18 20191101 11:19:46.006 V dbc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\system\currentcontrolset\enum\pci\ven_5333* ID=19 20191101 11:19:46.006 V dbc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\system\controlset001\services\vpcbus ID=20 20191101 11:19:46.006 V dbc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\system\controlset001\services\vpc-s3 ID=21 20191101 11:19:46.006 V dbc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\system\controlset001\services\vpcuhub ID=22 20191101 11:19:46.006 V dbc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\system\controlset001\services\msvmmouf ID=23 20191101 11:19:46.006 V dbc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\system\currentcontrolset\enum\pci\ven_15ad* ID=24 20191101 11:19:46.006 V dbc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_current_user\software\vmware, inc.\vmware tools ID=25 20191101 11:19:46.006 V dbc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\software\vmware, inc.\vmware tools ID=26 20191101 11:19:46.006 V dbc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\system\controlset001\services\vmdebug ID=27 20191101 11:19:46.006 V dbc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\system\controlset001\services\vmmouse ID=28 20191101 11:19:46.006 V dbc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\system\controlset001\services\vmtools ID=29 20191101 11:19:46.006 V dbc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\system\controlset001\services\vmmemctl ID=30 20191101 11:19:46.006 V dbc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\system\controlset001\services\vmware ID=31 20191101 11:19:46.006 V dbc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\system\controlset001\services\vmci ID=32 20191101 11:19:46.006 V dbc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\system\controlset001\services\vmx86 ID=33 20191101 11:19:46.006 V dbc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\system\currentcontrolset\enum\ide\cdromnecvmwar_vmware_ide_cd* ID=34 20191101 11:19:46.006 V dbc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\system\currentcontrolset\enum\ide\cdromnecvmwar_vmware_sata_cd* ID=35 20191101 11:19:46.006 V dbc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\system\currentcontrolset\enum\ide\diskvmware_virtual_ide_hard_drive* ID=36 20191101 11:19:46.006 V dbc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\system\currentcontrolset\enum\ide\diskvmware_virtual_sata_hard_drive* ID=37 20191101 11:19:46.006 V dbc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\hardware\acpi\dsdt\xen ID=38 20191101 11:19:46.006 V dbc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\hardware\acpi\fadt\xen ID=39 20191101 11:19:46.006 V dbc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\hardware\acpi\rsdt\xen ID=40 20191101 11:19:46.006 V dbc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\system\controlset001\services\xenevtchn ID=41 20191101 11:19:46.006 V dbc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\system\controlset001\services\xennet ID=42 20191101 11:19:46.006 V dbc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\system\controlset001\services\xennet6 ID=43 20191101 11:19:46.006 V dbc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\system\controlset001\services\xensvc ID=44 20191101 11:19:46.006 V dbc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\system\controlset001\services\xenvdb ID=45 20191101 11:19:46.006 V dbc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\system\currentcontrolset\services\sbiedrv ID=46 20191101 11:19:46.006 V dbc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\software\microsoft\windows\currentversion\uninstall\sandboxie ID=47 20191101 11:19:46.006 V dbc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_current_user\software\wine ID=48 20191101 11:19:46.006 V dbc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\software\wine ID=49 20191101 11:19:46.725 V dbc EFRSalCommon::BaseSal::ResetProcessExemption: Reset process exemption done 20191101 11:19:46.913 I dbc ApplySalPolicy: ApplySalPolicy : newPolicySalMonitorMode : NA 20191101 11:19:46.913 I dbc ApplySalPolicy: ApplySalPolicy : Staying with current config 20191101 11:20:51.215 I fb8 EFRSalCommon::BaseSal::Stop: Stopping, PID=4028 20191101 11:20:51.215 V 1354 EFRSalCommon::BaseSal::Run: Shutdown event is signaled, exiting. 20191101 11:20:51.215 V 1354 EFRSalCommon::BaseSal::DataCollectThread: Thread exited 20191101 11:21:46.950 I 1bcc SetSalNotificationHandler: Sal Notification Handler is set 20191101 11:21:46.950 I 1bcc EFRSalCommon::BaseSal::SetSalNotificationHandler: Sal Notification Handler is set 20191101 11:21:46.950 I 1bcc SetSalDynamicExclusionHandler: Dynamic exclusion handler is set 20191101 11:21:46.950 I 1bcc EFRSalCommon::BaseSal::SetDynamicExclusionHandler: Dynamic exclusion Handler is set 20191101 11:21:46.950 I 1bcc EFRSalCommon::BaseSal::Start: Starting, PID=6996 20191101 11:21:46.950 V 1848 EFRSalCommon::BaseSal::DataCollectThread: Thread started 20191101 11:21:46.950 E 1848 RegSalMon::PostStartProc: Can't create operations backup file, 80 - Este archivo ya existe. 20191101 11:21:46.965 V 1bcc RegSalMon::DriverResetMonitoredRegKeys: DriverResetMonitoredRegKeys : EPRF_MONITOR_KEY_CLEAN : succeeded 20191101 11:21:46.965 I 1bcc SetSensorConfig: SetSensorConfig : sensor config is on 20191101 11:21:46.965 V 1bcc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\software\classes\folder\shell\sandbox ID=0 20191101 11:21:46.965 V 1bcc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\software\microsoft\hyper-v ID=1 20191101 11:21:46.965 V 1bcc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\software\microsoft\virtualmachine ID=2 20191101 11:21:46.965 V 1bcc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\software\microsoft\virtual machine\guest\parameters ID=3 20191101 11:21:46.965 V 1bcc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\system\controlset001\services\vmicheartbeat ID=4 20191101 11:21:46.965 V 1bcc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\system\controlset001\services\vmicvss ID=5 20191101 11:21:46.965 V 1bcc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\system\controlset001\services\vmicshutdown ID=6 20191101 11:21:46.965 V 1bcc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\system\controlset001\services\vmicexchange ID=7 20191101 11:21:46.965 V 1bcc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\system\currentcontrolset\enum\pci\ven_1ab8* ID=8 20191101 11:21:46.965 V 1bcc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\system\currentcontrolset\enum\pci\ven_80ee* ID=9 20191101 11:21:46.965 V 1bcc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\hardware\acpi\dsdt\vbox__ ID=10 20191101 11:21:46.965 V 1bcc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\hardware\acpi\fadt\vbox__ ID=11 20191101 11:21:46.965 V 1bcc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\hardware\acpi\rsdt\vbox__ ID=12 20191101 11:21:46.965 V 1bcc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\software\oracle\virtualbox guest additions ID=13 20191101 11:21:46.965 V 1bcc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\system\controlset001\services\vboxguest ID=14 20191101 11:21:46.965 V 1bcc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\system\controlset001\services\vboxmouse ID=15 20191101 11:21:46.965 V 1bcc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\system\controlset001\services\vboxservice ID=16 20191101 11:21:46.965 V 1bcc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\system\controlset001\services\vboxsf ID=17 20191101 11:21:46.965 V 1bcc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\system\controlset001\services\vboxvideo ID=18 20191101 11:21:46.965 V 1bcc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\system\currentcontrolset\enum\pci\ven_5333* ID=19 20191101 11:21:46.965 V 1bcc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\system\controlset001\services\vpcbus ID=20 20191101 11:21:46.965 V 1bcc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\system\controlset001\services\vpc-s3 ID=21 20191101 11:21:46.965 V 1bcc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\system\controlset001\services\vpcuhub ID=22 20191101 11:21:46.965 V 1bcc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\system\controlset001\services\msvmmouf ID=23 20191101 11:21:46.965 V 1bcc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\system\currentcontrolset\enum\pci\ven_15ad* ID=24 20191101 11:21:46.965 V 1bcc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_current_user\software\vmware, inc.\vmware tools ID=25 20191101 11:21:46.965 V 1bcc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\software\vmware, inc.\vmware tools ID=26 20191101 11:21:46.965 V 1bcc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\system\controlset001\services\vmdebug ID=27 20191101 11:21:46.965 V 1bcc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\system\controlset001\services\vmmouse ID=28 20191101 11:21:46.965 V 1bcc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\system\controlset001\services\vmtools ID=29 20191101 11:21:46.965 V 1bcc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\system\controlset001\services\vmmemctl ID=30 20191101 11:21:46.965 V 1bcc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\system\controlset001\services\vmware ID=31 20191101 11:21:46.965 V 1bcc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\system\controlset001\services\vmci ID=32 20191101 11:21:46.965 V 1bcc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\system\controlset001\services\vmx86 ID=33 20191101 11:21:46.965 V 1bcc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\system\currentcontrolset\enum\ide\cdromnecvmwar_vmware_ide_cd* ID=34 20191101 11:21:46.965 V 1bcc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\system\currentcontrolset\enum\ide\cdromnecvmwar_vmware_sata_cd* ID=35 20191101 11:21:46.965 V 1bcc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\system\currentcontrolset\enum\ide\diskvmware_virtual_ide_hard_drive* ID=36 20191101 11:21:46.965 V 1bcc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\system\currentcontrolset\enum\ide\diskvmware_virtual_sata_hard_drive* ID=37 20191101 11:21:46.965 V 1bcc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\hardware\acpi\dsdt\xen ID=38 20191101 11:21:46.965 V 1bcc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\hardware\acpi\fadt\xen ID=39 20191101 11:21:46.965 V 1bcc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\hardware\acpi\rsdt\xen ID=40 20191101 11:21:46.965 V 1bcc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\system\controlset001\services\xenevtchn ID=41 20191101 11:21:46.965 V 1bcc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\system\controlset001\services\xennet ID=42 20191101 11:21:46.965 V 1bcc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\system\controlset001\services\xennet6 ID=43 20191101 11:21:46.965 V 1bcc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\system\controlset001\services\xensvc ID=44 20191101 11:21:46.965 V 1bcc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\system\controlset001\services\xenvdb ID=45 20191101 11:21:46.965 V 1bcc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\system\currentcontrolset\services\sbiedrv ID=46 20191101 11:21:46.965 V 1bcc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\software\microsoft\windows\currentversion\uninstall\sandboxie ID=47 20191101 11:21:46.965 V 1bcc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_current_user\software\wine ID=48 20191101 11:21:46.965 V 1bcc RegSalMon::DriverSetRegistryKeysToMonitor: DriverSetRegistryKeysToMonitor : Policy: Monitor = hkey_local_machine\software\wine ID=49 20191101 11:21:47.106 V 1bcc EFRSalCommon::BaseSal::ResetProcessExemption: Reset process exemption done 20191101 11:21:47.106 I 1bcc ApplySalPolicy: ApplySalPolicy : newPolicySalMonitorMode : NA 20191101 11:21:47.106 I 1bcc ApplySalPolicy: ApplySalPolicy : Staying with current config 20191101 11:36:37.187 I 1b24 EFRSalCommon::BaseSal::Stop: Stopping, PID=6996 20191101 11:36:37.187 V 1848 EFRSalCommon::BaseSal::Run: Shutdown event is signaled, exiting. 20191101 11:36:37.187 V 1848 EFRSalCommon::BaseSal::DataCollectThread: Thread exited