TimeThreadLineFunctionMessage
20:25:09.7014294365ftw1Loading (pid: 1764)
20:25:09.702429448Update::DetectEnv (C:\WINDOWS\SYSTEM32\d3d11.dll) <0X61FF0000>6|2|1247872178
20:25:09.702429448Update::DetectEnv (C:\WINDOWS\SYSTEM32\dxgi.dll) <0X64990000>6|2|1247872242
20:25:09.7544294173DXManager::DetectFound in 0
20:25:09.7554294209Initialize::GetLocation@ 0X2A40|10816
20:25:09.7554294209Initialize::GetLocation@ 0X6AA70|436848
20:25:09.7554294209Initialize::GetLocation@ 0X21390|136080
20:25:09.7554294209Initialize::GetLocation@ 0X3C60|15456
20:25:09.7554294111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0X61FF0000 <> 0X64990000
20:25:09.7554294209Initialize::GetLocation@ 0XFD788860|-42432416
20:25:09.7554294111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0X61FF0000 <> 0X64990000
20:25:09.7554294209Initialize::GetLocation@ 0XFD78DC30|-42410960
20:25:09.7554294111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0X61FF0000 <> 0X64990000
20:25:09.7554294209Initialize::GetLocation@ 0XFD78C5F0|-42416656
20:25:09.7554294111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0X61FF0000 <> 0X64990000
20:25:09.7554294209Initialize::GetLocation@ 0XFD66A7F0|-43603984
20:25:09.763429448Update::DetectEnv (C:\WINDOWS\SYSTEM32\d3d9.dll) <0X59D20000>6|2|1247872363
20:25:09.7994294129DXManager::DetectOK
20:25:09.8204294186DXManager::DetectDone
20:25:09.8214294215VTableHolderD3d9::initd3d offsest [sht]: 0x4060 , 0x55a0
20:25:09.8214294209Initialize::GetLocation@ 0X43770|276336
20:25:09.8214294209Initialize::GetLocation@ 0X3A070|237680
20:25:09.8214294209Initialize::GetLocation@ 0X40050|262224
20:25:09.8214294209Initialize::GetLocation@ 0XB9850|759888
20:25:09.8214294209Initialize::GetLocation@ 0XB93A0|758688
20:25:09.8214294209Initialize::GetLocation@ 0XA9F0|43504
20:25:09.8214294209Initialize::GetLocation@ 0XB9440|758848
20:25:09.8214294209Initialize::GetLocation@ 0X1B820|112672
20:25:09.8214294209Initialize::GetLocation@ 0X1E270|123504
20:25:09.8214294209Initialize::GetLocation@ 0X268A0|157856
20:25:09.8214294209Initialize::GetLocation@ 0X115100|1134848
20:25:09.8214294209Initialize::GetLocation@ 0X114BC0|1133504
20:25:09.8214294209Initialize::GetLocation@ 0X1B710|112400
20:25:09.8214294209Initialize::GetLocation@ 0X1B620|112160
20:25:09.8214294209Initialize::GetLocation@ 0XD380|54144
20:25:09.8214294209Initialize::GetLocation@ 0X4B1C0|307648
20:25:09.8214294209Initialize::GetLocation@ 0XA560|42336
20:25:09.8214294209Initialize::GetLocation@ 0XD0A40|854592
20:25:09.8214294209Initialize::GetLocation@ 0XD1110|856336
20:25:09.8214294209Initialize::GetLocation@ 0XA560|42336
20:25:09.8214294209Initialize::GetLocation@ 0XD1C00|859136
20:25:09.8214294209Initialize::GetLocation@ 0XD2260|860768
20:25:09.829429448Update::DetectEnv (C:\WINDOWS\SYSTEM32\dinput.dll) <0X242A0000>6|2|1247870977
20:25:09.835429483VTableHolderDInput::initm_pDIW->CreateDevice - succeded.
20:25:09.8354294209Initialize::GetLocation@ 0X4040|16448
20:25:09.8354294209Initialize::GetLocation@ 0X6410|25616
20:25:09.8354294209Initialize::GetLocation@ 0X65C0|26048
20:25:09.835429448Update::DetectEnv (C:\WINDOWS\SYSTEM32\dinput8.dll) <0X22050000>6|2|1247870977
20:25:09.839429493VTableHolderDInput8::initm_pDI8W->CreateDevice - succeded.
20:25:09.8394294110VTableHolderDInput8::initm_pDI8A->CreateDevice - succeded.
20:25:09.8394294209Initialize::GetLocation@ 0XA5D0|42448
20:25:09.8394294209Initialize::GetLocation@ 0XD4D0|54480
20:25:09.8394294209Initialize::GetLocation@ 0XD290|53904
20:25:09.8984294225InterProcessElement::openInterProcess Overwolf_SHARED_MEMORY_2_2_1891764 opened succesfuly
20:25:09.898429472HookFunctionsTableInitializer::SetHookFunctionsDataD3D9 Sht offsets 0x4060 , 0x55a0
20:25:09.8984294255InterProcessElement::closeInterProcess Overwolf_SHARED_MEMORY_2_2_1891764 close 2147483647 bytes
20:25:09.8984294301InjectOWExplorerExplorer file name [C:\Program Files (x86)\Overwolf\0.188.0.14\OWExplorer.dll]
20:25:09.9014294389ftw1OWExplorer injected
20:25:09.901251471Common::ProcessExplorer::ProcessTrackerIPCAgent::OnConnectedconnected to process tracker server
20:25:10.4220DC53`anonymous-namespace'::CreateProviderInitialize provider: NET
20:25:10.4220DC117libprocess::NetworkTracer::Initializeinit res:0x5 [started:0 active:0 enbaled:0]
20:25:10.4220DC56`anonymous-namespace'::CreateProviderFail to initlized provider: NET
20:25:10.4220DC53`anonymous-namespace'::CreateProviderInitialize provider: GPU
20:27:11.4532D0267ProcessInjector::HandlePendingProccesssprocess detection skipped |196| (w: 0x0): Registry
20:27:11.4532D0267ProcessInjector::HandlePendingProccesssprocess detection skipped |1324| (w: 0x0): C:\Users\Blue_Dawn\AppData\Local\Programs\Opera GX\opera.exe
20:27:11.4532D0267ProcessInjector::HandlePendingProccesssprocess detection skipped |1364| (w: 0x0): C:\Users\Blue_Dawn\AppData\Local\Programs\Opera GX\opera.exe
20:27:11.4532D0267ProcessInjector::HandlePendingProccesssprocess detection skipped |1624| (w: 0x0): C:\Users\Blue_Dawn\AppData\Local\Programs\Opera GX\opera.exe
20:27:11.4532D0267ProcessInjector::HandlePendingProccesssprocess detection skipped |2064| (w: 0x0): C:\Users\Blue_Dawn\AppData\Local\Programs\Opera GX\opera.exe
20:27:11.4532D0267ProcessInjector::HandlePendingProccesssprocess detection skipped |2088| (w: 0x0): \Device\HarddiskVolume2\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_0bc9105c62ca22fb\Display.NvContainer\NVDisplay.Container.exe
20:27:11.4532D0267ProcessInjector::HandlePendingProccesssprocess detection skipped |2112| (w: 0x0): C:\Users\Blue_Dawn\AppData\Local\Programs\Opera GX\opera.exe
20:27:11.4532D0267ProcessInjector::HandlePendingProccesssprocess detection skipped |2280| (w: 0x0): C:\Program Files (x86)\ASUS\ArmouryDevice\dll\ArmourySocketServer\ArmouryWebBrowserEdge.exe
20:27:11.4532D0267ProcessInjector::HandlePendingProccesssprocess detection skipped |3016| (w: 0x0): \Device\HarddiskVolume2\Program Files (x86)\ASUS\AXSP\4.02.12\atkexComSvc.exe
20:27:11.4532D0267ProcessInjector::HandlePendingProccesssprocess detection skipped |3172| (w: 0x0): C:\Users\Blue_Dawn\AppData\Local\Programs\Opera GX\81.0.4196.61\opera_crashreporter.exe
20:27:11.4532D0267ProcessInjector::HandlePendingProccesssprocess detection skipped |3460| (w: 0x0): C:\Program Files\ASUS\ARMOURY CRATE Lite Service\ArmouryCrate.UserSessionHelper.exe
20:27:11.4532D0267ProcessInjector::HandlePendingProccesssprocess detection skipped |3696| (w: 0x0): C:\Users\Blue_Dawn\AppData\Local\Programs\Opera GX\opera.exe
20:27:11.4532D0267ProcessInjector::HandlePendingProccesssprocess detection skipped |3824| (w: 0x0): \Device\HarddiskVolume2\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_0bc9105c62ca22fb\Display.NvContainer\NVDisplay.Container.exe
20:27:11.4532D0267ProcessInjector::HandlePendingProccesssprocess detection skipped |3884| (w: 0x0): C:\Users\Blue_Dawn\AppData\Local\Programs\Opera GX\opera.exe
20:27:11.4532D0267ProcessInjector::HandlePendingProccesssprocess detection skipped |4504| (w: 0x0): \Device\HarddiskVolume2\Users\BLUE_D~1\AppData\Local\Temp\TeamViewer\TeamViewer_Desktop.exe
20:27:11.4532D0267ProcessInjector::HandlePendingProccesssprocess detection skipped |4540| (w: 0x0): \Device\HarddiskVolume2\Program Files\Prio\prio_svc.exe
20:27:11.4532D0267ProcessInjector::HandlePendingProccesssprocess detection skipped |4824| (w: 0x0): C:\Users\Blue_Dawn\AppData\Local\Programs\Opera GX\opera.exe
20:27:11.4532D0267ProcessInjector::HandlePendingProccesssprocess detection skipped |4880| (w: 0x0): C:\Program Files (x86)\ASUS\ArmouryDevice\dll\ArmourySocketServer\ArmourySocketServer.exe
20:27:11.4532D0267ProcessInjector::HandlePendingProccesssprocess detection skipped |7180| (w: 0x0): \Device\HarddiskVolume2\Program Files\ASUS\ASUS_Aac_DRAM\Aac3572DramHal_x86.exe
20:27:11.4532D0267ProcessInjector::HandlePendingProccesssprocess detection skipped |8352| (w: 0x0): \Device\HarddiskVolume2\Program Files\ASUS\KINGSTON_Aac_DRAM\AacKingstonDramHal_x64.exe
20:27:11.4532D0267ProcessInjector::HandlePendingProccesssprocess detection skipped |8376| (w: 0x0): C:\Users\Blue_Dawn\AppData\Local\Programs\Opera GX\opera.exe
20:27:11.4532D0267ProcessInjector::HandlePendingProccesssprocess detection skipped |8396| (w: 0x0): C:\Program Files (x86)\ASUS\ArmouryDevice\dll\AIOFanSDK\ArmouryAIOFanServer.exe
20:27:11.4532D0267ProcessInjector::HandlePendingProccesssprocess detection skipped |8504| (w: 0x0): C:\Users\Blue_Dawn\AppData\Local\Programs\Opera GX\opera.exe
20:27:11.4532D0267ProcessInjector::HandlePendingProccesssprocess detection skipped |8564| (w: 0x0): C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\SetThreadAffinityMaskX64.exe
20:27:11.4532D0267ProcessInjector::HandlePendingProccesssprocess detection skipped |9208| (w: 0x0): C:\Program Files (x86)\Microsoft\EdgeWebView\Application\96.0.1054.62\msedgewebview2.exe
20:27:11.4532D0267ProcessInjector::HandlePendingProccesssprocess detection skipped |9240| (w: 0x0): C:\Users\Blue_Dawn\AppData\Local\Programs\Opera GX\opera.exe
20:27:11.4532D0267ProcessInjector::HandlePendingProccesssprocess detection skipped |9584| (w: 0x0): C:\Program Files (x86)\Microsoft\EdgeWebView\Application\96.0.1054.62\msedgewebview2.exe
20:27:11.4532D0267ProcessInjector::HandlePendingProccesssprocess detection skipped |10444| (w: 0x0): C:\Program Files (x86)\Microsoft\EdgeWebView\Application\96.0.1054.62\msedgewebview2.exe
20:27:11.4532D0267ProcessInjector::HandlePendingProccesssprocess detection skipped |10584| (w: 0x0): C:\Users\Blue_Dawn\AppData\Local\Programs\Opera GX\opera.exe
20:27:11.4532D0267ProcessInjector::HandlePendingProccesssprocess detection skipped |10888| (w: 0x0): C:\Users\Blue_Dawn\AppData\Local\Programs\Opera GX\opera.exe
20:27:11.4532D0267ProcessInjector::HandlePendingProccesssprocess detection skipped |12236| (w: 0x0): C:\Users\Blue_Dawn\AppData\Local\Programs\Opera GX\opera.exe
20:27:11.4532D0267ProcessInjector::HandlePendingProccesssprocess detection skipped |12492| (w: 0x0): \Device\HarddiskVolume2\Program Files\ASUS\AacExtCard\extensionCardHal_x86.exe
20:27:11.4532D0267ProcessInjector::HandlePendingProccesssprocess detection skipped |12600| (w: 0x0): C:\Users\Blue_Dawn\AppData\Local\Programs\Opera GX\opera.exe
20:27:11.4532D0267ProcessInjector::HandlePendingProccesssprocess detection skipped |12636| (w: 0x0): \Device\HarddiskVolume2\Program Files\ASUS\KINGSTON_Aac_DRAM\AacKingstonDramHal_x86.exe
20:27:11.4532D0267ProcessInjector::HandlePendingProccesssprocess detection skipped |12700| (w: 0x0): \Device\HarddiskVolume2\Program Files\ASUS\AacMB\Aac3572MbHal_x86.exe
20:27:11.4532D0267ProcessInjector::HandlePendingProccesssprocess detection skipped |12892| (w: 0x0): C:\Program Files (x86)\Microsoft\EdgeWebView\Application\96.0.1054.62\msedgewebview2.exe
20:27:11.4532D0267ProcessInjector::HandlePendingProccesssprocess detection skipped |13032| (w: 0x0): C:\Users\Blue_Dawn\AppData\Local\Programs\Opera GX\opera.exe
20:27:11.4532D0267ProcessInjector::HandlePendingProccesssprocess detection skipped |13296| (w: 0x0): \Device\HarddiskVolume2\Users\BLUE_D~1\AppData\Local\Temp\TeamViewer\tv_x64.exe
20:27:11.4532D0267ProcessInjector::HandlePendingProccesssprocess detection skipped |13512| (w: 0x0): C:\Users\Blue_Dawn\AppData\Local\Programs\Opera GX\opera.exe
20:27:11.4532D0267ProcessInjector::HandlePendingProccesssprocess detection skipped |13828| (w: 0x0): C:\Program Files (x86)\Microsoft\EdgeWebView\Application\96.0.1054.62\msedgewebview2.exe
20:27:11.4532D0267ProcessInjector::HandlePendingProccesssprocess detection skipped |15688| (w: 0x0): C:\Users\Blue_Dawn\AppData\Local\Programs\Opera GX\opera.exe
20:27:11.4532D0267ProcessInjector::HandlePendingProccesssprocess detection skipped |15984| (w: 0x0): C:\Program Files (x86)\Microsoft\EdgeWebView\Application\96.0.1054.62\msedgewebview2.exe
20:27:11.4532D0267ProcessInjector::HandlePendingProccesssprocess detection skipped |16104| (w: 0x0): C:\Users\Blue_Dawn\AppData\Local\Programs\Opera GX\opera.exe
20:27:11.4532D0267ProcessInjector::HandlePendingProccesssprocess detection skipped |16892| (w: 0x0): \Device\HarddiskVolume2\Users\BLUE_D~1\AppData\Local\Temp\TeamViewer\tv_w32.exe
20:27:11.4532D0267ProcessInjector::HandlePendingProccesssprocess detection skipped |17200| (w: 0x0): C:\Users\Blue_Dawn\AppData\Local\Programs\Opera GX\opera.exe
20:27:11.4532D0267ProcessInjector::HandlePendingProccesssprocess detection skipped |17312| (w: 0x0): C:\Users\Blue_Dawn\AppData\Local\Programs\Opera GX\opera.exe
20:27:11.4532D0267ProcessInjector::HandlePendingProccesssprocess detection skipped |17404| (w: 0x0): C:\Users\Blue_Dawn\AppData\Local\Programs\Opera GX\opera.exe
20:27:11.4532D0267ProcessInjector::HandlePendingProccesssprocess detection skipped |17812| (w: 0x0): C:\Program Files (x86)\ASUS\ArmouryDevice\dll\ArmourySocketServer\ArmouryWebBrowserEdge.exe
20:27:11.4532D0267ProcessInjector::HandlePendingProccesssprocess detection skipped |17944| (w: 0x0): C:\Users\Blue_Dawn\AppData\Local\Programs\Opera GX\opera.exe
20:27:11.4532D0267ProcessInjector::HandlePendingProccesssprocess detection skipped |18500| (w: 0x0): C:\Users\Blue_Dawn\AppData\Local\Programs\Opera GX\opera.exe
20:27:11.4532D0267ProcessInjector::HandlePendingProccesssprocess detection skipped |18612| (w: 0x0): C:\Users\Blue_Dawn\AppData\Local\Programs\Opera GX\opera.exe
20:27:11.4532D0267ProcessInjector::HandlePendingProccesssprocess detection skipped |18720| (w: 0x0): C:\Users\Blue_Dawn\AppData\Local\Programs\Opera GX\opera.exe
20:27:11.4532D0267ProcessInjector::HandlePendingProccesssprocess detection skipped |19276| (w: 0x0): C:\Users\Blue_Dawn\AppData\Local\Programs\Opera GX\opera.exe
20:27:11.4532D0267ProcessInjector::HandlePendingProccesssprocess detection skipped |19460| (w: 0x0): C:\Users\Blue_Dawn\AppData\Local\Programs\Opera GX\opera.exe
20:27:11.4532D0267ProcessInjector::HandlePendingProccesssprocess detection skipped |19564| (w: 0x0): C:\Program Files\Logitech Gaming Software\LAClient\laclient.exe
20:27:11.4532D0267ProcessInjector::HandlePendingProccesssprocess detection skipped |19604| (w: 0x0): C:\Users\Blue_Dawn\AppData\Local\Programs\Opera GX\opera.exe
20:27:11.4532D0267ProcessInjector::HandlePendingProccesssprocess detection skipped |19792| (w: 0x0): C:\Users\Blue_Dawn\AppData\Local\Programs\Opera GX\opera.exe
20:27:11.4532D0267ProcessInjector::HandlePendingProccesssprocess detection skipped |20060| (w: 0x0): C:\Program Files (x86)\Microsoft\EdgeWebView\Application\96.0.1054.62\msedgewebview2.exe
20:27:11.4532D0267ProcessInjector::HandlePendingProccesssprocess detection skipped |20268| (w: 0x0): C:\Users\Blue_Dawn\AppData\Local\Programs\Opera GX\opera.exe
20:27:11.4532D0267ProcessInjector::HandlePendingProccesssprocess detection skipped |20456| (w: 0x0): C:\Users\Blue_Dawn\AppData\Local\Programs\Opera GX\opera.exe
20:27:43.15032D0590ProcessInjector::InjectExplorerToProcessInjected to process 1688 [mt 3956] 0x17d0994
20:37:06.58932D0267ProcessInjector::HandlePendingProccesssprocess detection skipped |18708| (w: 0x0): C:\Users\Blue_Dawn\AppData\Local\Programs\Opera GX\opera.exe
20:37:31.742251476Common::ProcessExplorer::ProcessTrackerIPCAgent::OnDisconnecteddisconnected to process tracker server
20:37:33.92429466ProcessesMonitor::Stopstopping PM...
20:37:33.9220DC126ProcessesMonitor::ProcessEnumerateThreadexit process listener
20:37:33.934294402ProcessInjector::Unhookunhook running process
20:37:39.99429466ProcessesMonitor::Stopstopping PM...