TimeThreadLineFunctionMessage
16:44:05.519300C365ftw1Loading (pid: 4196)
16:44:05.521300C48Update::DetectEnv (C:\WINDOWS\SYSTEM32\d3d11.dll) <0X5180000>6|2|1247872178
16:44:05.538300C48Update::DetectEnv (C:\WINDOWS\SYSTEM32\dxgi.dll) <0X8400000>6|2|1247872542
16:44:06.739300C173DXManager::DetectFound in 0
16:44:06.740300C209Initialize::GetLocation@ 0X1FE0|8160
16:44:06.740300C209Initialize::GetLocation@ 0X69650|431696
16:44:06.740300C209Initialize::GetLocation@ 0X20930|133424
16:44:06.740300C209Initialize::GetLocation@ 0X3200|12800
16:44:06.740300C111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0X5180000 <> 0X8400000
16:44:06.740300C209Initialize::GetLocation@ 0XFCEA8860|-51738528
16:44:06.740300C111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0X5180000 <> 0X8400000
16:44:06.740300C209Initialize::GetLocation@ 0XFCEADC30|-51717072
16:44:06.740300C111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0X5180000 <> 0X8400000
16:44:06.740300C209Initialize::GetLocation@ 0XFCEAC5F0|-51722768
16:44:06.740300C111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0X5180000 <> 0X8400000
16:44:06.740300C209Initialize::GetLocation@ 0XFCD8A7F0|-52910096
16:44:07.404300C48Update::DetectEnv (C:\WINDOWS\SYSTEM32\d3d9.dll) <0XD1DB0000>6|2|1247872542
16:44:07.713300C129DXManager::DetectOK
16:44:07.848300C186DXManager::DetectDone
16:44:07.848300C215VTableHolderD3d9::initd3d offsest [sht]: 0x4060 , 0x55a0
16:44:07.849300C209Initialize::GetLocation@ 0X42C70|273520
16:44:07.849300C209Initialize::GetLocation@ 0X39570|234864
16:44:07.849300C209Initialize::GetLocation@ 0X3F550|259408
16:44:07.849300C209Initialize::GetLocation@ 0XB83A0|754592
16:44:07.849300C209Initialize::GetLocation@ 0XB7EF0|753392
16:44:07.849300C209Initialize::GetLocation@ 0X9EF0|40688
16:44:07.849300C209Initialize::GetLocation@ 0XB7F90|753552
16:44:07.849300C209Initialize::GetLocation@ 0X1AD20|109856
16:44:07.849300C209Initialize::GetLocation@ 0X1D770|120688
16:44:07.849300C209Initialize::GetLocation@ 0X25DA0|155040
16:44:07.849300C209Initialize::GetLocation@ 0X114620|1132064
16:44:07.849300C209Initialize::GetLocation@ 0X1140E0|1130720
16:44:07.849300C209Initialize::GetLocation@ 0X1AC10|109584
16:44:07.849300C209Initialize::GetLocation@ 0X1AB20|109344
16:44:07.849300C209Initialize::GetLocation@ 0XC880|51328
16:44:07.849300C209Initialize::GetLocation@ 0X4A100|303360
16:44:07.849300C209Initialize::GetLocation@ 0X9A60|39520
16:44:07.849300C209Initialize::GetLocation@ 0XCF590|849296
16:44:07.849300C209Initialize::GetLocation@ 0XCFC60|851040
16:44:07.849300C209Initialize::GetLocation@ 0X9A60|39520
16:44:07.849300C209Initialize::GetLocation@ 0XD0750|853840
16:44:07.849300C209Initialize::GetLocation@ 0XD0DB0|855472
16:44:09.23300C48Update::DetectEnv (C:\WINDOWS\SYSTEM32\dinput.dll) <0XDAB60000>6|2|1247870977
16:44:09.514300C83VTableHolderDInput::initm_pDIW->CreateDevice - succeded.
16:44:09.514300C209Initialize::GetLocation@ 0X4040|16448
16:44:09.514300C209Initialize::GetLocation@ 0X6410|25616
16:44:09.514300C209Initialize::GetLocation@ 0X65C0|26048
16:44:09.519300C48Update::DetectEnv (C:\WINDOWS\SYSTEM32\dinput8.dll) <0XCFFA0000>6|2|1247870977
16:44:09.904300C93VTableHolderDInput8::initm_pDI8W->CreateDevice - succeded.
16:44:09.904300C110VTableHolderDInput8::initm_pDI8A->CreateDevice - succeded.
16:44:09.907300C209Initialize::GetLocation@ 0XA5D0|42448
16:44:09.907300C209Initialize::GetLocation@ 0XD4D0|54480
16:44:09.907300C209Initialize::GetLocation@ 0XD290|53904
16:44:10.57300C225InterProcessElement::openInterProcess Overwolf_SHARED_MEMORY_2_2_1914196 opened succesfuly
16:44:10.57300C72HookFunctionsTableInitializer::SetHookFunctionsDataD3D9 Sht offsets 0x4060 , 0x55a0
16:44:10.57300C255InterProcessElement::closeInterProcess Overwolf_SHARED_MEMORY_2_2_1914196 close 2147483647 bytes
16:44:10.57300C301InjectOWExplorerExplorer file name [C:\Program Files (x86)\Overwolf\0.191.0.20\OWExplorer.dll]
16:44:10.577300C389ftw1OWExplorer injected
16:44:10.6281F3471Common::ProcessExplorer::ProcessTrackerIPCAgent::OnConnectedconnected to process tracker server
16:44:13.755305C53`anonymous-namespace'::CreateProviderInitialize provider: NET
16:44:13.755305C117libprocess::NetworkTracer::Initializeinit res:0x5 [started:0 active:0 enbaled:0]
16:44:13.755305C56`anonymous-namespace'::CreateProviderFail to initlized provider: NET
16:44:13.755305C53`anonymous-namespace'::CreateProviderInitialize provider: GPU
16:46:14.1162D08267ProcessInjector::HandlePendingProccesssprocess detection skipped |100| (w: 0x0): Registry
16:46:14.1162D08267ProcessInjector::HandlePendingProccesssprocess detection skipped |1328| (w: 0x0): C:\Program Files\Google\Drive File Stream\55.0.3.0\GoogleDriveFS.exe
16:46:14.1162D08267ProcessInjector::HandlePendingProccesssprocess detection skipped |2116| (w: 0x0): MemCompression
16:46:14.1162D08267ProcessInjector::HandlePendingProccesssprocess detection skipped |2620| (w: 0x0): C:\Program Files\DellTPad\ApMsgFwd.exe
16:46:14.1162D08267ProcessInjector::HandlePendingProccesssprocess detection skipped |2672| (w: 0x0): \Device\HarddiskVolume2\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
16:46:14.1162D08267ProcessInjector::HandlePendingProccesssprocess detection skipped |2700| (w: 0x0): C:\Program Files\LGHUB\lghub.exe
16:46:14.1162D08267ProcessInjector::HandlePendingProccesssprocess detection skipped |3824| (w: 0x0): \Device\HarddiskVolume2\Program Files\DellTPad\HidMonitorSvc.exe
16:46:14.1162D08267ProcessInjector::HandlePendingProccesssprocess detection skipped |3984| (w: 0x0): \Device\HarddiskVolume2\Program Files\LGHUB\lghub_updater.exe
16:46:14.1162D08267ProcessInjector::HandlePendingProccesssprocess detection skipped |4696| (w: 0x0): \Device\HarddiskVolume2\Program Files\WindowsApps\Microsoft.GamingServices_3.62.18001.0_x64__8wekyb3d8bbwe\gamingservicesnet.exe
16:46:14.1162D08267ProcessInjector::HandlePendingProccesssprocess detection skipped |4728| (w: 0x0): \Device\HarddiskVolume2\Program Files\WindowsApps\Microsoft.GamingServices_3.62.18001.0_x64__8wekyb3d8bbwe\gamingservices.exe
16:46:14.1162D08267ProcessInjector::HandlePendingProccesssprocess detection skipped |5544| (w: 0x0): C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
16:46:14.1162D08267ProcessInjector::HandlePendingProccesssprocess detection skipped |5776| (w: 0x0): C:\Program Files\WindowsApps\Microsoft.YourPhone_1.22012.167.0_x64__8wekyb3d8bbwe\YourPhoneServer\YourPhoneServer.exe
16:46:14.1162D08267ProcessInjector::HandlePendingProccesssprocess detection skipped |5848| (w: 0x0): C:\Program Files\Google\Drive File Stream\55.0.3.0\GoogleDriveFS.exe
16:46:14.1162D08267ProcessInjector::HandlePendingProccesssprocess detection skipped |6464| (w: 0x0): \Device\HarddiskVolume2\Program Files\Realtek\Audio\HDA\RAVBg64.exe
16:46:14.1162D08267ProcessInjector::HandlePendingProccesssprocess detection skipped |7472| (w: 0x0): C:\Program Files\DellTPad\Apoint.exe
16:46:14.1162D08267ProcessInjector::HandlePendingProccesssprocess detection skipped |7688| (w: 0x0): C:\Program Files\WindowsApps\Microsoft.YourPhone_1.22012.167.0_x64__8wekyb3d8bbwe\YourPhone.exe
16:46:14.1162D08267ProcessInjector::HandlePendingProccesssprocess detection skipped |8116| (w: 0x0): C:\Program Files\LGHUB\lghub.exe
16:46:14.1162D08267ProcessInjector::HandlePendingProccesssprocess detection skipped |9492| (w: 0x0): C:\Program Files\WindowsApps\microsoft.windows.photos_2021.21090.10008.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
16:46:14.1162D08267ProcessInjector::HandlePendingProccesssprocess detection skipped |9728| (w: 0x0): C:\Program Files\Google\Drive File Stream\55.0.3.0\crashpad_handler.exe
16:46:14.1162D08267ProcessInjector::HandlePendingProccesssprocess detection skipped |11148| (w: 0x0): C:\Program Files\Google\Drive File Stream\55.0.3.0\GoogleDriveFS.exe
16:46:14.1162D08267ProcessInjector::HandlePendingProccesssprocess detection skipped |11184| (w: 0x0): C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
16:46:14.1162D08267ProcessInjector::HandlePendingProccesssprocess detection skipped |11544| (w: 0x0): C:\Program Files\Google\Drive File Stream\55.0.3.0\GoogleDriveFS.exe
16:46:14.1162D08267ProcessInjector::HandlePendingProccesssprocess detection skipped |11724| (w: 0x0): C:\Program Files\DellTPad\ApntEx.exe
16:46:14.1162D08267ProcessInjector::HandlePendingProccesssprocess detection skipped |11768| (w: 0x0): C:\Program Files\Google\Drive File Stream\55.0.3.0\GoogleDriveFS.exe
16:46:14.1162D08267ProcessInjector::HandlePendingProccesssprocess detection skipped |11880| (w: 0x0): C:\Program Files\LGHUB\lghub_agent.exe
16:46:14.1162D08267ProcessInjector::HandlePendingProccesssprocess detection skipped |12144| (w: 0x0): C:\Program Files\Google\Drive File Stream\55.0.3.0\crashpad_handler.exe
16:46:14.1162D08267ProcessInjector::HandlePendingProccesssprocess detection skipped |12816| (w: 0x0): C:\Program Files\Google\Drive File Stream\55.0.3.0\GoogleDriveFS.exe
16:46:14.1162D08267ProcessInjector::HandlePendingProccesssprocess detection skipped |13228| (w: 0x0): C:\Program Files\DellTPad\hidfind.exe
16:46:14.1162D08267ProcessInjector::HandlePendingProccesssprocess detection skipped |13316| (w: 0x0): \Device\HarddiskVolume2\Program Files\Realtek\Audio\HDA\RAVBg64.exe
16:46:14.1172D08267ProcessInjector::HandlePendingProccesssprocess detection skipped |13648| (w: 0x0): C:\Program Files\Google\Drive File Stream\55.0.3.0\GoogleDriveFS.exe
16:46:14.1172D08267ProcessInjector::HandlePendingProccesssprocess detection skipped |13764| (w: 0x0): C:\Program Files\LGHUB\lghub.exe
16:46:14.1172D08267ProcessInjector::HandlePendingProccesssprocess detection skipped |14256| (w: 0x0): C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
16:49:31.1142D08590ProcessInjector::InjectExplorerToProcessInjected to process 2896 [mt 11408] 0x1071e
16:50:57.2602D08267ProcessInjector::HandlePendingProccesssprocess detection skipped |7684| (w: 0x0): C:\Program Files\WindowsApps\microsoft.xboxgamingoverlay_5.721.12013.0_x64__8wekyb3d8bbwe\GameBar.exe
16:50:58.2572D08267ProcessInjector::HandlePendingProccesssprocess detection skipped |10172| (w: 0x0): C:\Program Files\WindowsApps\microsoft.xboxgamingoverlay_5.721.12013.0_x64__8wekyb3d8bbwe\GameBarFTServer.exe