[2025-06-14 01:32:39] [Wa3rdPartyHost::run] pipe: Global\OESIS_V4_PROXY_64_59272
[2025-06-14 01:32:39] WaPowershellUtils: send custom config to libwapshost: {"debug_log_output_path":"C:\\ProgramData\\Norton\\Antivirus\\log\\"}
[2025-06-14 01:32:39] 
[WaCLRHostUtils][instance]: init
[2025-06-14 01:32:39] [WaCLRHostUtils][_initialize]: Check installed CLR version: v4.0.30319
[2025-06-14 01:32:39] [WaCLRHostUtils][_checkInstalledCLRVersion]: Found requested CLR version: v4.0.30319, directory: C:\Windows\Microsoft.NET\Framework64\, retrieved version: v4.0.30319
[2025-06-14 01:32:39] [WaCLRHostUtils][_initialize]: Found installed CLR version: v4.0.30319
[2025-06-14 01:32:39] 
[WaCLRHost][_createV4Host]: Start create
[2025-06-14 01:32:39] 
[WaCLRHost][_createV4Host]: CLRCreate Instance found
[2025-06-14 01:32:39] 
[WaCLRHost][_createV4Host]: Create metahost instance success
[2025-06-14 01:32:39] 
[WaCLRHost][_createV4Host]: Load runtime info success
[2025-06-14 01:32:39] 
[WaCLRHost][_createV4Host]: Runtime loadable confirmed
[2025-06-14 01:32:39] 
[WaCLRHost][_createV4Host]: Load CorRuntimeHost success
[2025-06-14 01:32:39] 
[WaCLRHost][_createV4Host]: Create v4Host success
[2025-06-14 01:32:39] [WaCLRHostUtils][_initialize]: CLR Host is runnable
[2025-06-14 01:32:39] 
[WaCLRHostUtils][instance]: finish init
[2025-06-14 01:32:39] 
[WaCLRHostUtils][invoke]: Start get CLR version
[2025-06-14 01:32:39] 
[WaCLRHostUtils][invoke]: CLRHost not found, find the highest supported version
[2025-06-14 01:32:39] 
[WaCLRHostUtils][invoke]: CLRHost Version: v4.0.30319
[2025-06-14 01:32:39] 
[CLRHost][invoke]: Runtime host started
[2025-06-14 01:32:39] 
[CLRHost][invoke]: Start create AppDomain
[2025-06-14 01:32:39] 
[CLRHost][invoke]: Start get interface of _AppDomain
[2025-06-14 01:32:39] 
[CLRHost][invoke]: Start load embeded assembly
[2025-06-14 01:32:39] 
[CLRHost][invoke]: Start insert to cached domain 
[2025-06-14 01:32:39] 
[CLRHost][invoke]: Start get class libwapshost.WaPSHost
[2025-06-14 01:32:39] 
[CLRHost][invoke]: PSRuntime start invoke function ParseCustomConfig
[2025-06-14 01:32:39] 
[CLRHost][invoke]: Complete invoke function ParseCustomConfig
[2025-06-14 01:32:39] WaPowershellUtils: init runspacepool
[2025-06-14 01:32:39] PowerShell Environment:
ALLUSERSPROFILE=C:\ProgramData
AMDRMPATH=C:\Program Files\AMD\RyzenMaster\
APPDATA=C:\Users\Harmonogram\AppData\Roaming
asl.log=Destination=file
CommonProgramFiles=C:\Program Files\Common Files
CommonProgramFiles(x86)=C:\Program Files (x86)\Common Files
CommonProgramW6432=C:\Program Files\Common Files
COMPUTERNAME=SERWER
ComSpec=C:\WINDOWS\system32\cmd.exe
DriverData=C:\Windows\System32\Drivers\DriverData
HOMEDRIVE=C:
HOMEPATH=\Users\Harmonogram
LOCALAPPDATA=C:\Users\Harmonogram\AppData\Local
LOGONSERVER=\\SERWER
NUMBER_OF_PROCESSORS=12
OneDrive=C:\Users\Harmonogram\OneDrive
OS=Windows_NT
PAI_MODEL_DIR=C:\ProgramData\Topaz Labs LLC\Topaz Photo AI\models
Path=C:\Program Files (x86)\VMware\VMware Workstation\bin\;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Program Files\Microsoft SQL Server\Client SDK\ODBC\130\Tools\Binn\;C:\Program Files (x86)\Microsoft SQL Server\140\Tools\Binn\;C:\Program Files\Microsoft SQL Server\140\Tools\Binn\;C:\Program Files\Microsoft SQL Server\140\DTS\Binn\;C:\Program Files (x86)\Certbot\bin;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files\NVIDIA Corporation\NVIDIA NvDLISR;C:\Program Files\nodejs\;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Program Files\Git\cmd;C:\Program Files\PowerShell\7\;C:\Users\Harmonogram\AppData\Local\Programs\Python\Python310\Scripts\;C:\Users\Harmonogram\AppData\Local\Programs\Python\Python310\;C:\Users\Harmonogram\AppData\Local\Microsoft\WindowsApps;C:\Users\Harmonogram\AppData\Roaming\npm;C:\Program Files (x86)\Nmap
PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
POWERSHELL_DISTRIBUTION_CHANNEL=MSI:Windows 10 Pro
PROCESSOR_ARCHITECTURE=AMD64
PROCESSOR_IDENTIFIER=AMD64 Family 23 Model 8 Stepping 2, AuthenticAMD
PROCESSOR_LEVEL=23
PROCESSOR_REVISION=0802
ProgramData=C:\ProgramData
ProgramFiles=C:\Program Files
ProgramFiles(x86)=C:\Program Files (x86)
ProgramW6432=C:\Program Files
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules;C:\Program Files (x86)\Microsoft SQL Server\140\Tools\PowerShell\Modules\
PUBLIC=C:\Users\Public
SystemDrive=C:
SystemRoot=C:\WINDOWS
TEMP=C:\Users\HARMON~1\AppData\Local\Temp
TMP=C:\Users\HARMON~1\AppData\Local\Temp
USERDOMAIN=SERWER
USERDOMAIN_ROAMINGPROFILE=SERWER
USERNAME=Harmonogram
USERPROFILE=C:\Users\Harmonogram
VBOX_HWVIRTEX_IGNORE_SVM_IN_USE=1
VBOX_MSI_INSTALL_PATH=C:\Program Files\Oracle\VirtualBox\
windir=C:\WINDOWS
__PSLockDownPolicy=0

[2025-06-14 01:32:39] 
[WaCLRHostUtils][invoke]: Start get CLR version
[2025-06-14 01:32:39] 
[WaCLRHostUtils][invoke]: CLRHost not found, find the highest supported version
[2025-06-14 01:32:39] 
[WaCLRHostUtils][invoke]: CLRHost Version: v4.0.30319
[2025-06-14 01:32:39] 
[CLRHost][invoke]: Runtime host started
[2025-06-14 01:32:39] 
[CLRHost][invoke]: Start get class libwapshost.WaPSHost
[2025-06-14 01:32:39] 
[CLRHost][invoke]: PSRuntime start invoke function InitRunspace
[2025-06-14 01:32:39] 
[CLRHost][invoke]: Complete invoke function InitRunspace
[2025-06-14 01:32:46] [Wa3rdPartyHost::ServerListen] client connected
[2025-06-14 01:32:46] InstanceThread() started
[2025-06-14 01:32:46] InstanceThread() returning
[2025-06-14 01:32:46] [Wa3rdPartyHost::ServerListen] client connected
[2025-06-14 01:32:46] InstanceThread() started
[2025-06-14 01:32:46] InstanceThread() returning
[2025-06-14 01:32:54] [Wa3rdPartyHost::ServerListen] client connected
[2025-06-14 01:32:54] InstanceThread() started
[2025-06-14 01:32:54] InstanceThread() returning
[2025-06-14 01:32:54] [Wa3rdPartyHost::ServerListen] client connected
[2025-06-14 01:32:54] InstanceThread() started
[2025-06-14 01:32:54] InstanceThread() returning
[2025-06-14 01:37:59] [Wa3rdPartyHost::ServerListen] client connected
[2025-06-14 01:37:59] InstanceThread() started
[2025-06-14 01:37:59] InstanceThread() returning
[2025-06-14 01:37:59] [Wa3rdPartyHost::ServerListen] client connected
[2025-06-14 01:37:59] InstanceThread() started
[2025-06-14 01:37:59] InstanceThread() returning
[2025-06-14 01:37:59] [Wa3rdPartyHost::ServerListen] cancelHandle signaled
[2025-06-14 01:37:59] [Wa3rdPartyHost::run] pipe: Global\OESIS_V4_PROXY_64_59272 finished
[2025-06-14 01:37:59] Wa3rdPartyHost pipe Global\OESIS_V4_PROXY_64_59272 finished run
[2025-06-14 01:37:59] WaPowershellUtils: deInit runspacepool
[2025-06-14 01:37:59] 
[WaCLRHostUtils][invoke]: Start get CLR version
[2025-06-14 01:37:59] 
[WaCLRHostUtils][invoke]: CLRHost not found, find the highest supported version
[2025-06-14 01:37:59] 
[WaCLRHostUtils][invoke]: CLRHost Version: v4.0.30319
[2025-06-14 01:37:59] 
[CLRHost][invoke]: Runtime host started
[2025-06-14 01:37:59] 
[CLRHost][invoke]: Start get class libwapshost.WaPSHost
[2025-06-14 01:37:59] 
[CLRHost][invoke]: PSRuntime start invoke function DeinitRunspace
[2025-06-14 01:37:59] Successfully destroyed WaPowershellUtils instance
[2025-06-14 01:37:59] Successfully destroyed 3rdPartyHost instance
[2025-06-14 01:37:59] Wa3rdPartyHost pipe Global\OESIS_V4_PROXY_64_59272 finished main
[2025-06-19 01:33:19] [Wa3rdPartyHost::run] pipe: Global\OESIS_V4_PROXY_64_24728
[2025-06-19 01:33:19] WaPowershellUtils: send custom config to libwapshost: {"debug_log_output_path":"C:\\ProgramData\\Norton\\Antivirus\\log\\"}
[2025-06-19 01:33:19] 
[WaCLRHostUtils][instance]: init
[2025-06-19 01:33:19] [WaCLRHostUtils][_initialize]: Check installed CLR version: v4.0.30319
[2025-06-19 01:33:19] [WaCLRHostUtils][_checkInstalledCLRVersion]: Found requested CLR version: v4.0.30319, directory: C:\Windows\Microsoft.NET\Framework64\, retrieved version: v4.0.30319
[2025-06-19 01:33:19] [WaCLRHostUtils][_initialize]: Found installed CLR version: v4.0.30319
[2025-06-19 01:33:19] 
[WaCLRHost][_createV4Host]: Start create
[2025-06-19 01:33:19] 
[WaCLRHost][_createV4Host]: CLRCreate Instance found
[2025-06-19 01:33:19] 
[WaCLRHost][_createV4Host]: Create metahost instance success
[2025-06-19 01:33:19] 
[WaCLRHost][_createV4Host]: Load runtime info success
[2025-06-19 01:33:19] 
[WaCLRHost][_createV4Host]: Runtime loadable confirmed
[2025-06-19 01:33:19] 
[WaCLRHost][_createV4Host]: Load CorRuntimeHost success
[2025-06-19 01:33:19] 
[WaCLRHost][_createV4Host]: Create v4Host success
[2025-06-19 01:33:19] [WaCLRHostUtils][_initialize]: CLR Host is runnable
[2025-06-19 01:33:19] 
[WaCLRHostUtils][instance]: finish init
[2025-06-19 01:33:19] 
[WaCLRHostUtils][invoke]: Start get CLR version
[2025-06-19 01:33:19] 
[WaCLRHostUtils][invoke]: CLRHost not found, find the highest supported version
[2025-06-19 01:33:19] 
[WaCLRHostUtils][invoke]: CLRHost Version: v4.0.30319
[2025-06-19 01:33:19] 
[CLRHost][invoke]: Runtime host started
[2025-06-19 01:33:19] 
[CLRHost][invoke]: Start create AppDomain
[2025-06-19 01:33:19] 
[CLRHost][invoke]: Start get interface of _AppDomain
[2025-06-19 01:33:19] 
[CLRHost][invoke]: Start load embeded assembly
[2025-06-19 01:33:19] 
[CLRHost][invoke]: Start insert to cached domain 
[2025-06-19 01:33:19] 
[CLRHost][invoke]: Start get class libwapshost.WaPSHost
[2025-06-19 01:33:19] 
[CLRHost][invoke]: PSRuntime start invoke function ParseCustomConfig
[2025-06-19 01:33:19] 
[CLRHost][invoke]: Complete invoke function ParseCustomConfig
[2025-06-19 01:33:19] WaPowershellUtils: init runspacepool
[2025-06-19 01:33:19] PowerShell Environment:
ALLUSERSPROFILE=C:\ProgramData
AMDRMPATH=C:\Program Files\AMD\RyzenMaster\
APPDATA=C:\Users\Harmonogram\AppData\Roaming
asl.log=Destination=file
CommonProgramFiles=C:\Program Files\Common Files
CommonProgramFiles(x86)=C:\Program Files (x86)\Common Files
CommonProgramW6432=C:\Program Files\Common Files
COMPUTERNAME=SERWER
ComSpec=C:\WINDOWS\system32\cmd.exe
DriverData=C:\Windows\System32\Drivers\DriverData
HOMEDRIVE=C:
HOMEPATH=\Users\Harmonogram
LOCALAPPDATA=C:\Users\Harmonogram\AppData\Local
LOGONSERVER=\\SERWER
NUMBER_OF_PROCESSORS=12
OneDrive=C:\Users\Harmonogram\OneDrive
OS=Windows_NT
PAI_MODEL_DIR=C:\ProgramData\Topaz Labs LLC\Topaz Photo AI\models
Path=C:\Program Files (x86)\VMware\VMware Workstation\bin\;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Program Files\Microsoft SQL Server\Client SDK\ODBC\130\Tools\Binn\;C:\Program Files (x86)\Microsoft SQL Server\140\Tools\Binn\;C:\Program Files\Microsoft SQL Server\140\Tools\Binn\;C:\Program Files\Microsoft SQL Server\140\DTS\Binn\;C:\Program Files (x86)\Certbot\bin;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files\NVIDIA Corporation\NVIDIA NvDLISR;C:\Program Files\nodejs\;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Program Files\Git\cmd;C:\Program Files\PowerShell\7\;C:\Users\Harmonogram\AppData\Local\Programs\Python\Python310\Scripts\;C:\Users\Harmonogram\AppData\Local\Programs\Python\Python310\;C:\Users\Harmonogram\AppData\Local\Microsoft\WindowsApps;C:\Users\Harmonogram\AppData\Roaming\npm;C:\Program Files (x86)\Nmap
PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
POWERSHELL_DISTRIBUTION_CHANNEL=MSI:Windows 10 Pro
PROCESSOR_ARCHITECTURE=AMD64
PROCESSOR_IDENTIFIER=AMD64 Family 23 Model 8 Stepping 2, AuthenticAMD
PROCESSOR_LEVEL=23
PROCESSOR_REVISION=0802
ProgramData=C:\ProgramData
ProgramFiles=C:\Program Files
ProgramFiles(x86)=C:\Program Files (x86)
ProgramW6432=C:\Program Files
PSModulePath=%ProgramFiles%\WindowsPowerShell\Modules;C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules;C:\Program Files (x86)\Microsoft SQL Server\140\Tools\PowerShell\Modules\
PUBLIC=C:\Users\Public
SystemDrive=C:
SystemRoot=C:\WINDOWS
TEMP=C:\Users\HARMON~1\AppData\Local\Temp
TMP=C:\Users\HARMON~1\AppData\Local\Temp
USERDOMAIN=SERWER
USERDOMAIN_ROAMINGPROFILE=SERWER
USERNAME=Harmonogram
USERPROFILE=C:\Users\Harmonogram
VBOX_HWVIRTEX_IGNORE_SVM_IN_USE=1
VBOX_MSI_INSTALL_PATH=C:\Program Files\Oracle\VirtualBox\
windir=C:\WINDOWS
__PSLockDownPolicy=0

[2025-06-19 01:33:19] 
[WaCLRHostUtils][invoke]: Start get CLR version
[2025-06-19 01:33:19] 
[WaCLRHostUtils][invoke]: CLRHost not found, find the highest supported version
[2025-06-19 01:33:19] 
[WaCLRHostUtils][invoke]: CLRHost Version: v4.0.30319
[2025-06-19 01:33:19] 
[CLRHost][invoke]: Runtime host started
[2025-06-19 01:33:19] 
[CLRHost][invoke]: Start get class libwapshost.WaPSHost
[2025-06-19 01:33:19] 
[CLRHost][invoke]: PSRuntime start invoke function InitRunspace
[2025-06-19 01:33:19] 
[CLRHost][invoke]: Complete invoke function InitRunspace
[2025-06-19 01:33:28] [Wa3rdPartyHost::ServerListen] client connected
[2025-06-19 01:33:28] InstanceThread() started
[2025-06-19 01:33:28] InstanceThread() returning
[2025-06-19 01:33:28] [Wa3rdPartyHost::ServerListen] client connected
[2025-06-19 01:33:28] InstanceThread() started
[2025-06-19 01:33:28] InstanceThread() returning
[2025-06-19 01:33:32] [Wa3rdPartyHost::ServerListen] client connected
[2025-06-19 01:33:32] InstanceThread() started
[2025-06-19 01:33:32] InstanceThread() returning
[2025-06-19 01:33:32] [Wa3rdPartyHost::ServerListen] client connected
[2025-06-19 01:33:32] InstanceThread() started
[2025-06-19 01:33:32] InstanceThread() returning
[2025-06-19 01:38:36] [Wa3rdPartyHost::ServerListen] client connected
[2025-06-19 01:38:36] InstanceThread() started
[2025-06-19 01:38:36] InstanceThread() returning
[2025-06-19 01:38:36] [Wa3rdPartyHost::ServerListen] client connected
[2025-06-19 01:38:36] InstanceThread() started
[2025-06-19 01:38:36] InstanceThread() returning
[2025-06-19 01:38:36] [Wa3rdPartyHost::ServerListen] cancelHandle signaled
[2025-06-19 01:38:36] [Wa3rdPartyHost::run] pipe: Global\OESIS_V4_PROXY_64_24728 finished
[2025-06-19 01:38:36] Wa3rdPartyHost pipe Global\OESIS_V4_PROXY_64_24728 finished run
[2025-06-19 01:38:36] WaPowershellUtils: deInit runspacepool
[2025-06-19 01:38:36] 
[WaCLRHostUtils][invoke]: Start get CLR version
[2025-06-19 01:38:36] 
[WaCLRHostUtils][invoke]: CLRHost not found, find the highest supported version
[2025-06-19 01:38:36] 
[WaCLRHostUtils][invoke]: CLRHost Version: v4.0.30319
[2025-06-19 01:38:36] 
[CLRHost][invoke]: Runtime host started
[2025-06-19 01:38:36] 
[CLRHost][invoke]: Start get class libwapshost.WaPSHost
[2025-06-19 01:38:36] 
[CLRHost][invoke]: PSRuntime start invoke function DeinitRunspace
[2025-06-19 01:38:36] Successfully destroyed WaPowershellUtils instance
[2025-06-19 01:38:36] Successfully destroyed 3rdPartyHost instance
[2025-06-19 01:38:36] Wa3rdPartyHost pipe Global\OESIS_V4_PROXY_64_24728 finished main