TimeThreadLineFunctionMessage
15:22:27.2002A94361ftw1Loading (pid: 11160)
15:22:27.2022A9448Update::DetectEnv (C:\Windows\SYSTEM32\d3d11.dll) <0X2DB60000>6|2|1203372419
15:22:27.2022A9448Update::DetectEnv (C:\Windows\SYSTEM32\dxgi.dll) <0X2F9E0000>6|2|1203372847
15:22:27.2163164146ProcessHardwareRecorder::CommandThreadstarting recorder thread
15:22:27.3882A94172DXManager::DetectFound in 0
15:22:27.3892A94209Initialize::GetLocation@ 0X4670|18032
15:22:27.3892A94209Initialize::GetLocation@ 0X66400|418816
15:22:27.3892A94209Initialize::GetLocation@ 0X19DE0|105952
15:22:27.3892A94209Initialize::GetLocation@ 0X1350|4944
15:22:27.3892A94111Update::CaughtC:\Windows\SYSTEM32\d3d11.dll|0X2DB60000 <> 0X2F9E0000
15:22:27.3892A94209Initialize::GetLocation@ 0XFE2A2E80|-30790016
15:22:27.3892A94111Update::CaughtC:\Windows\SYSTEM32\d3d11.dll|0X2DB60000 <> 0X2F9E0000
15:22:27.3892A94209Initialize::GetLocation@ 0XFE2A7F80|-30769280
15:22:27.3892A94111Update::CaughtC:\Windows\SYSTEM32\d3d11.dll|0X2DB60000 <> 0X2F9E0000
15:22:27.3892A94209Initialize::GetLocation@ 0XFE29E620|-30808544
15:22:27.3892A94111Update::CaughtC:\Windows\SYSTEM32\d3d11.dll|0X2DB60000 <> 0X2F9E0000
15:22:27.3892A94209Initialize::GetLocation@ 0XFE18AD10|-31937264
15:22:27.5752A9448Update::DetectEnv (C:\Windows\SYSTEM32\d3d9.dll) <0X297F0000>6|2|1203372419
15:22:27.7032A94129DXManager::DetectOK
15:22:27.7552A94186DXManager::DetectDone
15:22:27.7552A94215VTableHolderD3d9::initd3d offsest [sht]: 0x4060 , 0x53c0
15:22:27.7562A94209Initialize::GetLocation@ 0X3AC00|240640
15:22:27.7562A94209Initialize::GetLocation@ 0X2C5B0|181680
15:22:27.7562A94209Initialize::GetLocation@ 0X36D00|224512
15:22:27.7562A94209Initialize::GetLocation@ 0XAE020|712736
15:22:27.7562A94209Initialize::GetLocation@ 0XADB70|711536
15:22:27.7562A94209Initialize::GetLocation@ 0X5880|22656
15:22:27.7562A94209Initialize::GetLocation@ 0XADC10|711696
15:22:27.7562A94209Initialize::GetLocation@ 0X20FF0|135152
15:22:27.7562A94209Initialize::GetLocation@ 0X1CA60|117344
15:22:27.7562A94209Initialize::GetLocation@ 0X1C8E0|116960
15:22:27.7562A94209Initialize::GetLocation@ 0X1084E0|1082592
15:22:27.7562A94209Initialize::GetLocation@ 0X107F90|1081232
15:22:27.7562A94209Initialize::GetLocation@ 0X248B0|149680
15:22:27.7562A94209Initialize::GetLocation@ 0X247A0|149408
15:22:27.7562A94209Initialize::GetLocation@ 0X2C440|181312
15:22:27.7562A94209Initialize::GetLocation@ 0X3F210|258576
15:22:27.7562A94209Initialize::GetLocation@ 0XF3E0|62432
15:22:27.7562A94209Initialize::GetLocation@ 0XF4E0|62688
15:22:27.7562A94209Initialize::GetLocation@ 0XF5D0|62928
15:22:27.7562A94209Initialize::GetLocation@ 0XF3E0|62432
15:22:27.7562A94209Initialize::GetLocation@ 0XF280|62080
15:22:27.7562A94209Initialize::GetLocation@ 0XF430|62512
15:22:27.8702A9448Update::DetectEnv (C:\Windows\SYSTEM32\dinput.dll) <0X14930000>6|2|1203372033
15:22:27.8812A9483VTableHolderDInput::initm_pDIW->CreateDevice - succeded.
15:22:27.8812A94209Initialize::GetLocation@ 0X3CC0|15552
15:22:27.8812A94209Initialize::GetLocation@ 0X5FD0|24528
15:22:27.8812A94209Initialize::GetLocation@ 0X6180|24960
15:22:27.8822A9448Update::DetectEnv (C:\Windows\SYSTEM32\dinput8.dll) <0X14800000>6|2|1203372033
15:22:27.8902A9493VTableHolderDInput8::initm_pDI8W->CreateDevice - succeded.
15:22:27.8902A94110VTableHolderDInput8::initm_pDI8A->CreateDevice - succeded.
15:22:27.8902A94209Initialize::GetLocation@ 0X10000|65536
15:22:27.8902A94209Initialize::GetLocation@ 0X12C80|76928
15:22:27.8902A94209Initialize::GetLocation@ 0X12A60|76384
15:22:27.9572A94225InterProcessElement::openInterProcess Overwolf_SHARED_MEMORY_2_2_79_8_11160 opened succesfuly
15:22:27.9572A9472HookFunctionsTableInitializer::SetHookFunctionsDataD3D9 Sht offsets 0x4060 , 0x53c0
15:22:27.9572A94256InterProcessElement::closeInterProcess Overwolf_SHARED_MEMORY_2_2_79_8_11160 close 2147483647 bytes
15:22:27.9572A94297InjectOWExplorerExplorer file name [C:\Program Files (x86)\Overwolf\0.155.0.10\OWExplorer.dll]
15:22:28.332A94385ftw1OWExplorer injected
15:22:28.464354C51`anonymous-namespace'::CreateProviderInitialize provider: NET
15:22:28.464354C117libprocess::NetworkTracer::Initializeinit res:0x5 [started:0 active:0 enbaled:0]
15:22:28.464354C54`anonymous-namespace'::CreateProviderFail to initlized provider: NET
15:22:28.464354C51`anonymous-namespace'::CreateProviderInitialize provider: GPU
15:24:59.2633550394ProcessInjector::HandleElevatedProcessFail injection to process [3600] [t: 0 w_t_id: 0]- nvcontainer.exe (elevated True) 0x0
15:24:59.2643550333ProcessInjector::HandlePendingProccesssFail to inject pending process |3600|: nvcontainer.exe
15:24:59.2643550394ProcessInjector::HandleElevatedProcessFail injection to process [3652] [t: 0 w_t_id: 0]- MsMpEng.exe (elevated True) 0x0
15:24:59.2643550333ProcessInjector::HandlePendingProccesssFail to inject pending process |3652|: MsMpEng.exe
15:24:59.2643550394ProcessInjector::HandleElevatedProcessFail injection to process [11712] [t: 0 w_t_id: 0]- googledrivesync.exe (elevated True) 0x0
15:24:59.2643550333ProcessInjector::HandlePendingProccesssFail to inject pending process |11712|: googledrivesync.exe
15:24:59.2643550394ProcessInjector::HandleElevatedProcessFail injection to process [11836] [t: 0 w_t_id: 0]- NVDisplay.Container.exe (elevated True) 0x0
15:24:59.2643550333ProcessInjector::HandlePendingProccesssFail to inject pending process |11836|: NVDisplay.Container.exe
15:24:59.2643550394ProcessInjector::HandleElevatedProcessFail injection to process [13500] [t: 0 w_t_id: 0]- NVIDIA Share.exe (elevated True) 0x0
15:24:59.2643550333ProcessInjector::HandlePendingProccesssFail to inject pending process |13500|: NVIDIA Share.exe
15:25:06.2623550394ProcessInjector::HandleElevatedProcessFail injection to process [14488] [t: 0 w_t_id: 0]- NVIDIA Share.exe (elevated True) 0x0
15:25:06.2623550333ProcessInjector::HandlePendingProccesssFail to inject pending process |14488|: NVIDIA Share.exe
15:26:54.3043550394ProcessInjector::HandleElevatedProcessFail injection to process [6888] [t: 0 w_t_id: 0]- brave.exe (elevated True) 0x0
15:26:54.3043550333ProcessInjector::HandlePendingProccesssFail to inject pending process |6888|: brave.exe
15:26:56.3033550394ProcessInjector::HandleElevatedProcessFail injection to process [3340] [t: 0 w_t_id: 0]- brave.exe (elevated True) 0x0
15:26:56.3033550333ProcessInjector::HandlePendingProccesssFail to inject pending process |3340|: brave.exe
15:26:56.3033550394ProcessInjector::HandleElevatedProcessFail injection to process [6532] [t: 0 w_t_id: 0]- brave.exe (elevated True) 0x0
15:26:56.3033550333ProcessInjector::HandlePendingProccesssFail to inject pending process |6532|: brave.exe
15:26:56.3033550394ProcessInjector::HandleElevatedProcessFail injection to process [7644] [t: 0 w_t_id: 0]- brave.exe (elevated True) 0x0
15:26:56.3033550333ProcessInjector::HandlePendingProccesssFail to inject pending process |7644|: brave.exe
15:26:56.3033550394ProcessInjector::HandleElevatedProcessFail injection to process [7804] [t: 0 w_t_id: 0]- brave.exe (elevated True) 0x0
15:26:56.3033550333ProcessInjector::HandlePendingProccesssFail to inject pending process |7804|: brave.exe
15:26:56.3033550394ProcessInjector::HandleElevatedProcessFail injection to process [9128] [t: 0 w_t_id: 0]- brave.exe (elevated True) 0x0
15:26:56.3033550333ProcessInjector::HandlePendingProccesssFail to inject pending process |9128|: brave.exe
15:26:56.3033550394ProcessInjector::HandleElevatedProcessFail injection to process [13920] [t: 0 w_t_id: 0]- brave.exe (elevated True) 0x0
15:26:56.3033550333ProcessInjector::HandlePendingProccesssFail to inject pending process |13920|: brave.exe
15:26:56.3033550394ProcessInjector::HandleElevatedProcessFail injection to process [14072] [t: 0 w_t_id: 0]- brave.exe (elevated True) 0x0
15:26:56.3033550333ProcessInjector::HandlePendingProccesssFail to inject pending process |14072|: brave.exe
15:26:56.3033550394ProcessInjector::HandleElevatedProcessFail injection to process [14208] [t: 0 w_t_id: 0]- brave.exe (elevated True) 0x0
15:26:56.3033550333ProcessInjector::HandlePendingProccesssFail to inject pending process |14208|: brave.exe
15:26:56.3033550394ProcessInjector::HandleElevatedProcessFail injection to process [14328] [t: 0 w_t_id: 0]- brave.exe (elevated True) 0x0
15:26:56.3033550333ProcessInjector::HandlePendingProccesssFail to inject pending process |14328|: brave.exe
15:26:56.3033550394ProcessInjector::HandleElevatedProcessFail injection to process [15172] [t: 0 w_t_id: 0]- brave.exe (elevated True) 0x0
15:26:56.3033550333ProcessInjector::HandlePendingProccesssFail to inject pending process |15172|: brave.exe
15:27:01.3043550394ProcessInjector::HandleElevatedProcessFail injection to process [9924] [t: 0 w_t_id: 0]- brave.exe (elevated True) 0x0
15:27:01.3053550333ProcessInjector::HandlePendingProccesssFail to inject pending process |9924|: brave.exe
15:27:04.3053550394ProcessInjector::HandleElevatedProcessFail injection to process [10820] [t: 0 w_t_id: 0]- brave.exe (elevated True) 0x0
15:27:04.3053550333ProcessInjector::HandlePendingProccesssFail to inject pending process |10820|: brave.exe
15:28:11.3153550394ProcessInjector::HandleElevatedProcessFail injection to process [2988] [t: 0 w_t_id: 0]- brave.exe (elevated True) 0x0
15:28:11.3153550333ProcessInjector::HandlePendingProccesssFail to inject pending process |2988|: brave.exe
15:28:24.3343550394ProcessInjector::HandleElevatedProcessFail injection to process [6488] [t: 0 w_t_id: 0]- brave.exe (elevated True) 0x0
15:28:24.3343550333ProcessInjector::HandlePendingProccesssFail to inject pending process |6488|: brave.exe
15:28:29.3123550394ProcessInjector::HandleElevatedProcessFail injection to process [8900] [t: 0 w_t_id: 0]- brave.exe (elevated True) 0x0
15:28:29.3123550333ProcessInjector::HandlePendingProccesssFail to inject pending process |8900|: brave.exe
15:28:34.3163550394ProcessInjector::HandleElevatedProcessFail injection to process [9640] [t: 0 w_t_id: 0]- brave.exe (elevated True) 0x0
15:28:34.3163550333ProcessInjector::HandlePendingProccesssFail to inject pending process |9640|: brave.exe
15:30:56.4013550394ProcessInjector::HandleElevatedProcessFail injection to process [7136] [t: 0 w_t_id: 0]- brave.exe (elevated True) 0x0
15:30:56.4013550333ProcessInjector::HandlePendingProccesssFail to inject pending process |7136|: brave.exe
15:31:26.4193550394ProcessInjector::HandleElevatedProcessFail injection to process [9004] [t: 0 w_t_id: 0]- brave.exe (elevated True) 0x0
15:31:26.4193550333ProcessInjector::HandlePendingProccesssFail to inject pending process |9004|: brave.exe
15:31:26.4193550394ProcessInjector::HandleElevatedProcessFail injection to process [13036] [t: 0 w_t_id: 0]- brave.exe (elevated True) 0x0
15:31:26.4193550333ProcessInjector::HandlePendingProccesssFail to inject pending process |13036|: brave.exe
15:42:29.6363550394ProcessInjector::HandleElevatedProcessFail injection to process [1860] [t: 0 w_t_id: 0]- brave.exe (elevated True) 0x0
15:42:29.6363550333ProcessInjector::HandlePendingProccesssFail to inject pending process |1860|: brave.exe
15:42:29.6363550394ProcessInjector::HandleElevatedProcessFail injection to process [4404] [t: 0 w_t_id: 0]- brave.exe (elevated True) 0x0
15:42:29.6363550333ProcessInjector::HandlePendingProccesssFail to inject pending process |4404|: brave.exe
15:42:29.6363550394ProcessInjector::HandleElevatedProcessFail injection to process [4820] [t: 0 w_t_id: 0]- brave.exe (elevated True) 0x0
15:42:29.6363550333ProcessInjector::HandlePendingProccesssFail to inject pending process |4820|: brave.exe
15:42:29.6363550394ProcessInjector::HandleElevatedProcessFail injection to process [5108] [t: 0 w_t_id: 0]- brave.exe (elevated True) 0x0
15:42:29.6363550333ProcessInjector::HandlePendingProccesssFail to inject pending process |5108|: brave.exe
15:42:29.6363550394ProcessInjector::HandleElevatedProcessFail injection to process [6500] [t: 0 w_t_id: 0]- brave.exe (elevated True) 0x0
15:42:29.6363550333ProcessInjector::HandlePendingProccesssFail to inject pending process |6500|: brave.exe
15:42:29.6363550394ProcessInjector::HandleElevatedProcessFail injection to process [7884] [t: 0 w_t_id: 0]- brave.exe (elevated True) 0x0
15:42:29.6363550333ProcessInjector::HandlePendingProccesssFail to inject pending process |7884|: brave.exe
15:42:29.6363550394ProcessInjector::HandleElevatedProcessFail injection to process [8412] [t: 0 w_t_id: 0]- brave.exe (elevated True) 0x0
15:42:29.6363550333ProcessInjector::HandlePendingProccesssFail to inject pending process |8412|: brave.exe
15:42:29.6363550394ProcessInjector::HandleElevatedProcessFail injection to process [8992] [t: 0 w_t_id: 0]- brave.exe (elevated True) 0x0
15:42:29.6363550333ProcessInjector::HandlePendingProccesssFail to inject pending process |8992|: brave.exe
15:42:29.6363550394ProcessInjector::HandleElevatedProcessFail injection to process [12500] [t: 0 w_t_id: 0]- brave.exe (elevated True) 0x0
15:42:29.6363550333ProcessInjector::HandlePendingProccesssFail to inject pending process |12500|: brave.exe
15:42:29.6363550394ProcessInjector::HandleElevatedProcessFail injection to process [12684] [t: 0 w_t_id: 0]- brave.exe (elevated True) 0x0
15:42:29.6363550333ProcessInjector::HandlePendingProccesssFail to inject pending process |12684|: brave.exe
15:42:29.6363550394ProcessInjector::HandleElevatedProcessFail injection to process [13904] [t: 0 w_t_id: 0]- brave.exe (elevated True) 0x0
15:42:29.6363550333ProcessInjector::HandlePendingProccesssFail to inject pending process |13904|: brave.exe
15:42:29.6363550394ProcessInjector::HandleElevatedProcessFail injection to process [15280] [t: 0 w_t_id: 0]- brave.exe (elevated True) 0x0
15:42:29.6363550333ProcessInjector::HandlePendingProccesssFail to inject pending process |15280|: brave.exe
15:46:29.7823550394ProcessInjector::HandleElevatedProcessFail injection to process [1684] [t: 0 w_t_id: 0]- brave.exe (elevated True) 0x0
15:46:29.7823550333ProcessInjector::HandlePendingProccesssFail to inject pending process |1684|: brave.exe
15:58:10.6922A9466ProcessesMonitor::Stopstopping PM...
15:58:10.692354C119ProcessesMonitor::ProcessEnumerateThreadexit process listener