TimeThreadLineFunctionMessage
20:45:38.8002F5C365ftw1Loading (pid: 22344)
20:45:38.800205C147ProcessHardwareRecorder::CommandThreadstarting recorder thread
20:45:38.8012F5C48Update::DetectEnv (C:\WINDOWS\SYSTEM32\d3d11.dll) <0X9D0B0000>6|2|1247871722
20:45:38.8012F5C48Update::DetectEnv (C:\WINDOWS\SYSTEM32\dxgi.dll) <0X9FCD0000>6|2|1247871722
20:45:38.9272F5C172DXManager::DetectFound in 0
20:45:38.9272F5C209Initialize::GetLocation@ 0X4F80|20352
20:45:38.9272F5C209Initialize::GetLocation@ 0X69700|431872
20:45:38.9272F5C209Initialize::GetLocation@ 0X206F0|132848
20:45:38.9272F5C209Initialize::GetLocation@ 0X1DE0|7648
20:45:38.9272F5C111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0X9D0B0000 <> 0X9FCD0000
20:45:38.9272F5C209Initialize::GetLocation@ 0XFD508860|-45053856
20:45:38.9272F5C111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0X9D0B0000 <> 0X9FCD0000
20:45:38.9272F5C209Initialize::GetLocation@ 0XFD50DC30|-45032400
20:45:38.9272F5C111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0X9D0B0000 <> 0X9FCD0000
20:45:38.9272F5C209Initialize::GetLocation@ 0XFD50C5F0|-45038096
20:45:38.9272F5C111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0X9D0B0000 <> 0X9FCD0000
20:45:38.9272F5C209Initialize::GetLocation@ 0XFD3EA7F0|-46225424
20:45:38.9472F5C48Update::DetectEnv (C:\WINDOWS\SYSTEM32\d3d9.dll) <0X82980000>6|2|1247871638
20:45:39.622F5C129DXManager::DetectOK
20:45:39.982F5C186DXManager::DetectDone
20:45:39.982F5C215VTableHolderD3d9::initd3d offsest [sht]: 0x4060 , 0x53c0
20:45:39.982F5C209Initialize::GetLocation@ 0X41B90|269200
20:45:39.982F5C209Initialize::GetLocation@ 0X33E20|212512
20:45:39.982F5C209Initialize::GetLocation@ 0X3D6C0|251584
20:45:39.982F5C209Initialize::GetLocation@ 0XB8E10|757264
20:45:39.982F5C209Initialize::GetLocation@ 0XB8960|756064
20:45:39.982F5C209Initialize::GetLocation@ 0XACF0|44272
20:45:39.982F5C209Initialize::GetLocation@ 0XB8A00|756224
20:45:39.982F5C209Initialize::GetLocation@ 0X1B6B0|112304
20:45:39.982F5C209Initialize::GetLocation@ 0X1E100|123136
20:45:39.982F5C209Initialize::GetLocation@ 0X26730|157488
20:45:39.982F5C209Initialize::GetLocation@ 0X1146B0|1132208
20:45:39.982F5C209Initialize::GetLocation@ 0X114170|1130864
20:45:39.982F5C209Initialize::GetLocation@ 0X1B5A0|112032
20:45:39.982F5C209Initialize::GetLocation@ 0X1B4B0|111792
20:45:39.982F5C209Initialize::GetLocation@ 0XD680|54912
20:45:39.982F5C209Initialize::GetLocation@ 0X493C0|299968
20:45:39.982F5C209Initialize::GetLocation@ 0XA860|43104
20:45:39.982F5C209Initialize::GetLocation@ 0XD0000|851968
20:45:39.982F5C209Initialize::GetLocation@ 0XD06D0|853712
20:45:39.982F5C209Initialize::GetLocation@ 0XA860|43104
20:45:39.982F5C209Initialize::GetLocation@ 0XD11C0|856512
20:45:39.982F5C209Initialize::GetLocation@ 0XD1820|858144
20:45:39.1122F5C48Update::DetectEnv (C:\WINDOWS\SYSTEM32\dinput.dll) <0X307B0000>6|2|1247870977
20:45:39.1422F5C83VTableHolderDInput::initm_pDIW->CreateDevice - succeded.
20:45:39.1432F5C209Initialize::GetLocation@ 0X4040|16448
20:45:39.1432F5C209Initialize::GetLocation@ 0X6410|25616
20:45:39.1432F5C209Initialize::GetLocation@ 0X65C0|26048
20:45:39.1452F5C48Update::DetectEnv (C:\WINDOWS\SYSTEM32\dinput8.dll) <0X2D4C0000>6|2|1247870977
20:45:39.1572F5C93VTableHolderDInput8::initm_pDI8W->CreateDevice - succeded.
20:45:39.1572F5C110VTableHolderDInput8::initm_pDI8A->CreateDevice - succeded.
20:45:39.1582F5C209Initialize::GetLocation@ 0XA5D0|42448
20:45:39.1582F5C209Initialize::GetLocation@ 0XD4D0|54480
20:45:39.1582F5C209Initialize::GetLocation@ 0XD290|53904
20:45:39.2202F5C225InterProcessElement::openInterProcess Overwolf_SHARED_MEMORY_2_2_84_12_22344 opened succesfuly
20:45:39.2202F5C72HookFunctionsTableInitializer::SetHookFunctionsDataD3D9 Sht offsets 0x4060 , 0x53c0
20:45:39.2202F5C256InterProcessElement::closeInterProcess Overwolf_SHARED_MEMORY_2_2_84_12_22344 close 2147483647 bytes
20:45:39.2202F5C301InjectOWExplorerExplorer file name [C:\Program Files (x86)\Overwolf\0.165.0.28\OWExplorer.dll]
20:45:39.2602F5C389ftw1OWExplorer injected
20:45:39.2611A8070Common::ProcessExplorer::ProcessTrackerIPCAgent::OnConnectedconnected to process tracker server
20:45:39.55174051`anonymous-namespace'::CreateProviderInitialize provider: NET
20:45:39.551740117libprocess::NetworkTracer::Initializeinit res:0x5 [started:0 active:0 enbaled:0]
20:45:39.55174054`anonymous-namespace'::CreateProviderFail to initlized provider: NET
20:45:39.55174051`anonymous-namespace'::CreateProviderInitialize provider: GPU
20:45:39.5582AF4726ProcessInjector::InjectProcessprocess |CTAudSvc.exe| missing h
20:45:39.5592AF4726ProcessInjector::InjectProcessprocess |EvtEng.exe| missing h
20:45:39.5592AF4726ProcessInjector::InjectProcessprocess |RzSDKServer.exe| missing h
20:45:39.5592AF4726ProcessInjector::InjectProcessprocess |DropboxUpdate.exe| missing h
20:45:39.5592AF4726ProcessInjector::InjectProcessprocess |GCloud.exe| missing h
20:45:39.5592AF4726ProcessInjector::InjectProcessprocess |IAStorDataMgrSvc.exe| missing h
20:45:39.5592AF4726ProcessInjector::InjectProcessprocess |LMS.exe| missing h
20:45:39.5592AF4726ProcessInjector::InjectProcessprocess |XSpltVidSvc.exe| missing h
20:45:39.6162AF4726ProcessInjector::InjectProcessprocess |DropboxUpdate.exe| missing h
20:45:39.6162AF4726ProcessInjector::InjectProcessprocess |MicrosoftEdgeUpdate.exe| missing h
20:45:39.7352AF4726ProcessInjector::InjectProcessprocess |MicrosoftEdgeUpdate.exe| missing h
20:45:39.7352AF4726ProcessInjector::InjectProcessprocess |DropboxUpdate.exe| missing h
20:45:39.7362AF4726ProcessInjector::InjectProcessprocess |MpCmdRun.exe| missing h
20:45:39.7362AF4726ProcessInjector::InjectProcessprocess |MpCmdRun.exe| missing h
20:45:57.4012AF4726ProcessInjector::InjectProcessprocess |MicrosoftEdgeUpdate.exe| missing h
20:46:04.4402AF4726ProcessInjector::InjectProcessprocess |DropboxClient_115.4.601.exe| missing h
20:46:19.5592AF4726ProcessInjector::InjectProcessprocess |Dropbox.exe| missing h
20:48:03.3122AF4726ProcessInjector::InjectProcessprocess |VSIXAutoUpdate.exe| missing h
20:48:10.2842AF4481ProcessInjector::HandleElevatedProcessFail injection to process [2416] [t: 0 w_t_id: 0]- NVDisplay.Container.exe (elevated True) 0x0
20:48:10.2842AF4413ProcessInjector::HandlePendingProccesssFail to inject pending process |2416|: NVDisplay.Container.exe
20:48:10.2842AF4481ProcessInjector::HandleElevatedProcessFail injection to process [3396] [t: 0 w_t_id: 0]- CTAudSvc.exe (elevated True) 0x0
20:48:10.2842AF4413ProcessInjector::HandlePendingProccesssFail to inject pending process |3396|: CTAudSvc.exe
20:48:10.2842AF4481ProcessInjector::HandleElevatedProcessFail injection to process [4124] [t: 0 w_t_id: 0]- nvcontainer.exe (elevated True) 0x0
20:48:10.2842AF4413ProcessInjector::HandlePendingProccesssFail to inject pending process |4124|: nvcontainer.exe
20:48:10.2842AF4481ProcessInjector::HandleElevatedProcessFail injection to process [4156] [t: 0 w_t_id: 0]- EvtEng.exe (elevated True) 0x0
20:48:10.2842AF4413ProcessInjector::HandlePendingProccesssFail to inject pending process |4156|: EvtEng.exe
20:48:10.2842AF4481ProcessInjector::HandleElevatedProcessFail injection to process [4208] [t: 0 w_t_id: 0]- RzSDKServer.exe (elevated True) 0x0
20:48:10.2842AF4413ProcessInjector::HandlePendingProccesssFail to inject pending process |4208|: RzSDKServer.exe
20:48:10.2842AF4481ProcessInjector::HandleElevatedProcessFail injection to process [6136] [t: 0 w_t_id: 0]- DropboxUpdate.exe (elevated True) 0x0
20:48:10.2842AF4413ProcessInjector::HandlePendingProccesssFail to inject pending process |6136|: DropboxUpdate.exe
20:48:10.2842AF4481ProcessInjector::HandleElevatedProcessFail injection to process [9840] [t: 0 w_t_id: 0]- NVIDIA Share.exe (elevated True) 0x0
20:48:10.2842AF4413ProcessInjector::HandlePendingProccesssFail to inject pending process |9840|: NVIDIA Share.exe
20:48:10.2842AF4481ProcessInjector::HandleElevatedProcessFail injection to process [10888] [t: 0 w_t_id: 0]- LMS.exe (elevated True) 0x0
20:48:10.2842AF4413ProcessInjector::HandlePendingProccesssFail to inject pending process |10888|: LMS.exe
20:48:10.2842AF4481ProcessInjector::HandleElevatedProcessFail injection to process [11628] [t: 0 w_t_id: 0]- MicrosoftEdgeUpdate.exe (elevated True) 0x0
20:48:10.2842AF4413ProcessInjector::HandlePendingProccesssFail to inject pending process |11628|: MicrosoftEdgeUpdate.exe
20:48:10.2842AF4481ProcessInjector::HandleElevatedProcessFail injection to process [15632] [t: 0 w_t_id: 0]- Zygor.exe (elevated True) 0x0
20:48:10.2842AF4413ProcessInjector::HandlePendingProccesssFail to inject pending process |15632|: Zygor.exe
20:48:10.2842AF4481ProcessInjector::HandleElevatedProcessFail injection to process [17044] [t: 0 w_t_id: 0]- XSpltVidSvc.exe (elevated True) 0x0
20:48:10.2842AF4413ProcessInjector::HandlePendingProccesssFail to inject pending process |17044|: XSpltVidSvc.exe
20:48:10.2842AF4481ProcessInjector::HandleElevatedProcessFail injection to process [17472] [t: 0 w_t_id: 0]- Zygor.exe (elevated True) 0x0
20:48:10.2842AF4413ProcessInjector::HandlePendingProccesssFail to inject pending process |17472|: Zygor.exe
20:48:10.2842AF4481ProcessInjector::HandleElevatedProcessFail injection to process [19028] [t: 0 w_t_id: 0]- GCloud.exe (elevated True) 0x0
20:48:10.2842AF4413ProcessInjector::HandlePendingProccesssFail to inject pending process |19028|: GCloud.exe
20:48:10.2842AF4481ProcessInjector::HandleElevatedProcessFail injection to process [19652] [t: 0 w_t_id: 0]- MsMpEng.exe (elevated True) 0x0
20:48:10.2842AF4413ProcessInjector::HandlePendingProccesssFail to inject pending process |19652|: MsMpEng.exe
20:48:10.2842AF4481ProcessInjector::HandleElevatedProcessFail injection to process [19936] [t: 0 w_t_id: 0]- IAStorDataMgrSvc.exe (elevated True) 0x0
20:48:10.2842AF4413ProcessInjector::HandlePendingProccesssFail to inject pending process |19936|: IAStorDataMgrSvc.exe
20:48:10.2842AF4481ProcessInjector::HandleElevatedProcessFail injection to process [22572] [t: 0 w_t_id: 0]- NVIDIA Share.exe (elevated True) 0x0
20:48:10.2842AF4413ProcessInjector::HandlePendingProccesssFail to inject pending process |22572|: NVIDIA Share.exe
20:48:10.2842AF4481ProcessInjector::HandleElevatedProcessFail injection to process [25032] [t: 0 w_t_id: 0]- Zygor.exe (elevated True) 0x0
20:48:10.2842AF4413ProcessInjector::HandlePendingProccesssFail to inject pending process |25032|: Zygor.exe
20:48:44.5962AF4726ProcessInjector::InjectProcessprocess |dotnet.exe| missing h
20:49:28.8912AF4726ProcessInjector::InjectProcessprocess |dotnet.exe| missing h
20:50:10.1692AF4481ProcessInjector::HandleElevatedProcessFail injection to process [23596] [t: 0 w_t_id: 0]- curseforge.exe (elevated True) 0x0
20:50:10.1692AF4413ProcessInjector::HandlePendingProccesssFail to inject pending process |23596|: curseforge.exe
20:50:18.2292AF4481ProcessInjector::HandleElevatedProcessFail injection to process [2844] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0
20:50:18.2292AF4413ProcessInjector::HandlePendingProccesssFail to inject pending process |2844|: firefox.exe
20:50:18.2292AF4481ProcessInjector::HandleElevatedProcessFail injection to process [8096] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0
20:50:18.2292AF4413ProcessInjector::HandlePendingProccesssFail to inject pending process |8096|: firefox.exe
20:50:18.2292AF4481ProcessInjector::HandleElevatedProcessFail injection to process [23076] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0
20:50:18.2292AF4413ProcessInjector::HandlePendingProccesssFail to inject pending process |23076|: firefox.exe
20:50:18.2292AF4481ProcessInjector::HandleElevatedProcessFail injection to process [24896] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0
20:50:18.2292AF4413ProcessInjector::HandlePendingProccesssFail to inject pending process |24896|: firefox.exe
20:50:18.2292AF4481ProcessInjector::HandleElevatedProcessFail injection to process [26364] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0
20:50:18.2292AF4413ProcessInjector::HandlePendingProccesssFail to inject pending process |26364|: firefox.exe
20:50:20.2352AF4481ProcessInjector::HandleElevatedProcessFail injection to process [1120] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0
20:50:20.2352AF4413ProcessInjector::HandlePendingProccesssFail to inject pending process |1120|: firefox.exe
20:50:20.2352AF4481ProcessInjector::HandleElevatedProcessFail injection to process [11724] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0
20:50:20.2352AF4413ProcessInjector::HandlePendingProccesssFail to inject pending process |11724|: firefox.exe
20:50:20.2352AF4481ProcessInjector::HandleElevatedProcessFail injection to process [14064] [t: 0 w_t_id: 0]- net.downloadhelper.coapp-win-64.exe (elevated True) 0x0
20:50:20.2352AF4413ProcessInjector::HandlePendingProccesssFail to inject pending process |14064|: net.downloadhelper.coapp-win-64.exe
20:50:20.2352AF4481ProcessInjector::HandleElevatedProcessFail injection to process [20220] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0
20:50:20.2352AF4413ProcessInjector::HandlePendingProccesssFail to inject pending process |20220|: firefox.exe
20:50:22.2652AF4481ProcessInjector::HandleElevatedProcessFail injection to process [7504] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0
20:50:22.2652AF4413ProcessInjector::HandlePendingProccesssFail to inject pending process |7504|: firefox.exe
20:50:23.2792AF4481ProcessInjector::HandleElevatedProcessFail injection to process [5796] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0
20:50:23.2802AF4413ProcessInjector::HandlePendingProccesssFail to inject pending process |5796|: firefox.exe
20:50:33.3892AF4726ProcessInjector::InjectProcessprocess |OverwolfUpdater.exe| missing h
20:55:03.3592AF4726ProcessInjector::InjectProcessprocess |MpCmdRun.exe| missing h
20:55:24.4692AF4726ProcessInjector::InjectProcessprocess |OverwolfUpdater.exe| missing h
20:58:02.6562AF4726ProcessInjector::InjectProcessprocess |DropboxUpdate.exe| missing h
20:59:06.792AF4481ProcessInjector::HandleElevatedProcessFail injection to process [10780] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0
20:59:06.792AF4413ProcessInjector::HandlePendingProccesssFail to inject pending process |10780|: firefox.exe
21:00:48.7792AF4481ProcessInjector::HandleElevatedProcessFail injection to process [9008] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0
21:00:48.7792AF4413ProcessInjector::HandlePendingProccesssFail to inject pending process |9008|: firefox.exe
21:02:31.4692AF4481ProcessInjector::HandleElevatedProcessFail injection to process [5080] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0
21:02:31.4702AF4413ProcessInjector::HandlePendingProccesssFail to inject pending process |5080|: firefox.exe
21:18:45.4962AF4481ProcessInjector::HandleElevatedProcessFail injection to process [16860] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0
21:18:45.4962AF4413ProcessInjector::HandlePendingProccesssFail to inject pending process |16860|: firefox.exe
21:24:22.9872AF4726ProcessInjector::InjectProcessprocess |steamcmd.exe| missing h
21:24:28.492AF4726ProcessInjector::InjectProcessprocess |steamcmd.exe| missing h
21:57:46.6722AF4481ProcessInjector::HandleElevatedProcessFail injection to process [3096] [t: 0 w_t_id: 0]- ErrorReportLauncher.exe (elevated True) 0x0
21:57:46.6722AF4413ProcessInjector::HandlePendingProccesssFail to inject pending process |3096|: ErrorReportLauncher.exe
21:58:02.8362AF4726ProcessInjector::InjectProcessprocess |DropboxUpdate.exe| missing h
22:38:18.2062AF4726ProcessInjector::InjectProcessprocess |MpCmdRun.exe| missing h
22:48:03.3052AF4726ProcessInjector::InjectProcessprocess |MicrosoftEdgeUpdate.exe| missing h
22:58:02.4072AF4726ProcessInjector::InjectProcessprocess |DropboxUpdate.exe| missing h
23:00:34.4812AF4726ProcessInjector::InjectProcessprocess |MpCmdRun.exe| missing h
23:00:34.4812AF4726ProcessInjector::InjectProcessprocess |MpCmdRun.exe| missing h
23:10:34.7042AF4726ProcessInjector::InjectProcessprocess |MpCmdRun.exe| missing h
23:10:34.7042AF4726ProcessInjector::InjectProcessprocess |MpCmdRun.exe| missing h
23:31:22.2842AF4726ProcessInjector::InjectProcessprocess |DropboxUpdate.exe| missing h
23:52:55.231A8075Common::ProcessExplorer::ProcessTrackerIPCAgent::OnDisconnecteddisconnected to process tracker server
23:52:55.432F5C66ProcessesMonitor::Stopstopping PM...
23:52:55.43740119ProcessesMonitor::ProcessEnumerateThreadexit process listener
23:53:01.542F5C66ProcessesMonitor::Stopstopping PM...