TimeThreadLineFunctionMessage
02:47:07.33742D4365ftw1Loading (pid: 7588)
02:47:07.33842D448Update::DetectEnv (C:\Windows\SYSTEM32\d3d11.dll) <0XD93A0000>6|2|1247872178
02:47:07.33942D448Update::DetectEnv (C:\Windows\SYSTEM32\dxgi.dll) <0XDBF50000>6|2|1247872242
02:47:07.41542D4173DXManager::DetectFound in 0
02:47:07.41542D4209Initialize::GetLocation@ 0X2A40|10816
02:47:07.41542D4209Initialize::GetLocation@ 0X6AA70|436848
02:47:07.41542D4209Initialize::GetLocation@ 0X21390|136080
02:47:07.41542D4209Initialize::GetLocation@ 0X3C60|15456
02:47:07.41542D4111Update::CaughtC:\Windows\SYSTEM32\d3d11.dll|0XD93A0000 <> 0XDBF50000
02:47:07.41542D4209Initialize::GetLocation@ 0XFD578860|-44595104
02:47:07.41542D4111Update::CaughtC:\Windows\SYSTEM32\d3d11.dll|0XD93A0000 <> 0XDBF50000
02:47:07.41542D4209Initialize::GetLocation@ 0XFD57DC30|-44573648
02:47:07.41542D4111Update::CaughtC:\Windows\SYSTEM32\d3d11.dll|0XD93A0000 <> 0XDBF50000
02:47:07.41542D4209Initialize::GetLocation@ 0XFD57C5F0|-44579344
02:47:07.41542D4111Update::CaughtC:\Windows\SYSTEM32\d3d11.dll|0XD93A0000 <> 0XDBF50000
02:47:07.41542D4209Initialize::GetLocation@ 0XFD45A7F0|-45766672
02:47:07.43942D448Update::DetectEnv (C:\Windows\SYSTEM32\d3d9.dll) <0X9B610000>6|2|1247872363
02:47:07.52942D4129DXManager::DetectOK
02:47:07.58542D4186DXManager::DetectDone
02:47:07.58542D4215VTableHolderD3d9::initd3d offsest [sht]: 0x4060 , 0x55a0
02:47:07.58542D4209Initialize::GetLocation@ 0X43770|276336
02:47:07.58542D4209Initialize::GetLocation@ 0X3A070|237680
02:47:07.58542D4209Initialize::GetLocation@ 0X40050|262224
02:47:07.58542D4209Initialize::GetLocation@ 0XB9850|759888
02:47:07.58542D4209Initialize::GetLocation@ 0XB93A0|758688
02:47:07.58542D4209Initialize::GetLocation@ 0XA9F0|43504
02:47:07.58542D4209Initialize::GetLocation@ 0XB9440|758848
02:47:07.58542D4209Initialize::GetLocation@ 0X1B820|112672
02:47:07.58542D4209Initialize::GetLocation@ 0X1E270|123504
02:47:07.58542D4209Initialize::GetLocation@ 0X268A0|157856
02:47:07.58542D4209Initialize::GetLocation@ 0X115100|1134848
02:47:07.58542D4209Initialize::GetLocation@ 0X114BC0|1133504
02:47:07.58542D4209Initialize::GetLocation@ 0X1B710|112400
02:47:07.58542D4209Initialize::GetLocation@ 0X1B620|112160
02:47:07.58542D4209Initialize::GetLocation@ 0XD380|54144
02:47:07.58542D4209Initialize::GetLocation@ 0X4B1C0|307648
02:47:07.58542D4209Initialize::GetLocation@ 0XA560|42336
02:47:07.58542D4209Initialize::GetLocation@ 0XD0A40|854592
02:47:07.58542D4209Initialize::GetLocation@ 0XD1110|856336
02:47:07.58542D4209Initialize::GetLocation@ 0XA560|42336
02:47:07.58542D4209Initialize::GetLocation@ 0XD1C00|859136
02:47:07.58542D4209Initialize::GetLocation@ 0XD2260|860768
02:47:07.60542D448Update::DetectEnv (C:\Windows\SYSTEM32\dinput.dll) <0XBD460000>6|2|1247870977
02:47:07.67942D483VTableHolderDInput::initm_pDIW->CreateDevice - succeded.
02:47:07.67942D4209Initialize::GetLocation@ 0X4040|16448
02:47:07.67942D4209Initialize::GetLocation@ 0X6410|25616
02:47:07.67942D4209Initialize::GetLocation@ 0X65C0|26048
02:47:07.68142D448Update::DetectEnv (C:\Windows\SYSTEM32\dinput8.dll) <0XBC880000>6|2|1247870977
02:47:07.69242D493VTableHolderDInput8::initm_pDI8W->CreateDevice - succeded.
02:47:07.69242D4110VTableHolderDInput8::initm_pDI8A->CreateDevice - succeded.
02:47:07.69242D4209Initialize::GetLocation@ 0XA5D0|42448
02:47:07.69242D4209Initialize::GetLocation@ 0XD4D0|54480
02:47:07.69242D4209Initialize::GetLocation@ 0XD290|53904
02:47:07.74742D4225InterProcessElement::openInterProcess Overwolf_SHARED_MEMORY_2_2_1897588 opened succesfuly
02:47:07.74742D472HookFunctionsTableInitializer::SetHookFunctionsDataD3D9 Sht offsets 0x4060 , 0x55a0
02:47:07.74742D4255InterProcessElement::closeInterProcess Overwolf_SHARED_MEMORY_2_2_1897588 close 2147483647 bytes
02:47:07.74742D4301InjectOWExplorerExplorer file name [C:\Program Files (x86)\Overwolf\0.188.0.22\OWExplorer.dll]
02:47:07.75542D4389ftw1OWExplorer injected
02:47:07.7734E1471Common::ProcessExplorer::ProcessTrackerIPCAgent::OnConnectedconnected to process tracker server
02:47:07.99124EC53`anonymous-namespace'::CreateProviderInitialize provider: NET
02:47:07.99124EC117libprocess::NetworkTracer::Initializeinit res:0x5 [started:0 active:0 enbaled:0]
02:47:07.99124EC56`anonymous-namespace'::CreateProviderFail to initlized provider: NET
02:47:07.99124EC53`anonymous-namespace'::CreateProviderInitialize provider: GPU
02:49:08.7692AE4267ProcessInjector::HandlePendingProccesssprocess detection skipped |104| (w: 0x0):
02:49:08.7692AE4267ProcessInjector::HandlePendingProccesssprocess detection skipped |180| (w: 0x0): Registry
02:49:08.7692AE4267ProcessInjector::HandlePendingProccesssprocess detection skipped |1672| (w: 0x0): C:\Windows\HelpPane.exe
02:49:08.7692AE4267ProcessInjector::HandlePendingProccesssprocess detection skipped |2980| (w: 0x0): C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
02:49:08.7692AE4267ProcessInjector::HandlePendingProccesssprocess detection skipped |3964| (w: 0x0): MemCompression
02:49:08.7692AE4267ProcessInjector::HandlePendingProccesssprocess detection skipped |4316| (w: 0x0): C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
02:49:08.7692AE4267ProcessInjector::HandlePendingProccesssprocess detection skipped |4476| (w: 0x0): C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
02:49:08.7692AE4267ProcessInjector::HandlePendingProccesssprocess detection skipped |5772| (w: 0x0): \Device\HarddiskVolume4\Program Files\LGHUB\lghub_updater.exe
02:49:08.7692AE4267ProcessInjector::HandlePendingProccesssprocess detection skipped |5788| (w: 0x0): \Device\HarddiskVolume4\Program Files\PostgreSQL\13\bin\pg_ctl.exe
02:49:08.7692AE4267ProcessInjector::HandlePendingProccesssprocess detection skipped |5808| (w: 0x0): \Device\HarddiskVolume4\Program Files (x86)\Surfshark\Resources\x64\nssm.exe
02:49:08.7692AE4267ProcessInjector::HandlePendingProccesssprocess detection skipped |5816| (w: 0x0): \Device\HarddiskVolume4\Program Files (x86)\Surfshark\Resources\x64\nssm.exe
02:49:08.7692AE4267ProcessInjector::HandlePendingProccesssprocess detection skipped |5832| (w: 0x0): \Device\HarddiskVolume4\Program Files (x86)\Surfshark\Resources\x64\nssm.exe
02:49:08.7692AE4267ProcessInjector::HandlePendingProccesssprocess detection skipped |5980| (w: 0x0): \Device\HarddiskVolume4\Program Files\MongoDB\Server\4.4\bin\mongod.exe
02:49:08.7692AE4267ProcessInjector::HandlePendingProccesssprocess detection skipped |6012| (w: 0x0): \Device\HarddiskVolume4\Program Files (x86)\Tailscale IPN\tailscale-ipn.exe
02:49:08.7692AE4267ProcessInjector::HandlePendingProccesssprocess detection skipped |6712| (w: 0x0): \Device\HarddiskVolume4\Program Files\PostgreSQL\13\bin\postgres.exe
02:49:08.7692AE4267ProcessInjector::HandlePendingProccesssprocess detection skipped |6848| (w: 0x0): \Device\HarddiskVolume4\Program Files\PostgreSQL\13\bin\postgres.exe
02:49:08.7692AE4267ProcessInjector::HandlePendingProccesssprocess detection skipped |7176| (w: 0x0): \Device\HarddiskVolume4\Program Files (x86)\Tailscale IPN\tailscale-ipn.exe
02:49:08.7692AE4267ProcessInjector::HandlePendingProccesssprocess detection skipped |7484| (w: 0x0): \Device\HarddiskVolume4\Program Files\PostgreSQL\13\bin\postgres.exe
02:49:08.7692AE4267ProcessInjector::HandlePendingProccesssprocess detection skipped |7492| (w: 0x0): \Device\HarddiskVolume4\Program Files\PostgreSQL\13\bin\postgres.exe
02:49:08.7692AE4267ProcessInjector::HandlePendingProccesssprocess detection skipped |7500| (w: 0x0): \Device\HarddiskVolume4\Program Files\PostgreSQL\13\bin\postgres.exe
02:49:08.7692AE4267ProcessInjector::HandlePendingProccesssprocess detection skipped |7524| (w: 0x0): \Device\HarddiskVolume4\Program Files\PostgreSQL\13\bin\postgres.exe
02:49:08.7692AE4267ProcessInjector::HandlePendingProccesssprocess detection skipped |7548| (w: 0x0): \Device\HarddiskVolume4\Program Files\PostgreSQL\13\bin\postgres.exe
02:49:08.7692AE4267ProcessInjector::HandlePendingProccesssprocess detection skipped |7556| (w: 0x0): \Device\HarddiskVolume4\Program Files\PostgreSQL\13\bin\postgres.exe
02:49:08.7692AE4267ProcessInjector::HandlePendingProccesssprocess detection skipped |9592| (w: 0x0): C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
02:49:08.7692AE4267ProcessInjector::HandlePendingProccesssprocess detection skipped |10716| (w: 0x0): C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
02:49:08.7692AE4267ProcessInjector::HandlePendingProccesssprocess detection skipped |11844| (w: 0x0): C:\Program Files\WindowsApps\Microsoft.YourPhone_1.21113.36.0_x64__8wekyb3d8bbwe\YourPhoneAppProxy\YourPhoneAppProxy.exe
02:49:08.7692AE4267ProcessInjector::HandlePendingProccesssprocess detection skipped |12700| (w: 0x0): \Device\HarddiskVolume4\Program Files (x86)\Google\Update\1.3.36.112\GoogleCrashHandler64.exe
02:49:08.7692AE4267ProcessInjector::HandlePendingProccesssprocess detection skipped |12800| (w: 0x0): C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
02:49:08.7692AE4267ProcessInjector::HandlePendingProccesssprocess detection skipped |13036| (w: 0x0): C:\Program Files\WindowsApps\Microsoft.YourPhone_1.21113.36.0_x64__8wekyb3d8bbwe\YourPhone.exe
02:49:08.7692AE4267ProcessInjector::HandlePendingProccesssprocess detection skipped |13256| (w: 0x0): \Device\HarddiskVolume4\Program Files (x86)\Google\Update\1.3.36.112\GoogleCrashHandler.exe
02:49:08.7692AE4267ProcessInjector::HandlePendingProccesssprocess detection skipped |13668| (w: 0x0): C:\Program Files\WindowsApps\Microsoft.YourPhone_1.21113.36.0_x64__8wekyb3d8bbwe\YourPhoneServer\YourPhoneServer.exe
02:49:08.7692AE4267ProcessInjector::HandlePendingProccesssprocess detection skipped |14372| (w: 0x0): C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
02:49:08.7692AE4267ProcessInjector::HandlePendingProccesssprocess detection skipped |14560| (w: 0x0): C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
02:49:08.7692AE4267ProcessInjector::HandlePendingProccesssprocess detection skipped |14728| (w: 0x0): C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
02:49:08.7692AE4267ProcessInjector::HandlePendingProccesssprocess detection skipped |15156| (w: 0x0): C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
02:49:08.7692AE4267ProcessInjector::HandlePendingProccesssprocess detection skipped |15164| (w: 0x0): C:\Program Files\Riot Vanguard\vgtray.exe
02:49:08.7692AE4267ProcessInjector::HandlePendingProccesssprocess detection skipped |15228| (w: 0x0): C:\Program Files\SoundSwitch\SoundSwitch.exe
02:49:08.7692AE4267ProcessInjector::HandlePendingProccesssprocess detection skipped |16172| (w: 0x0): C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.14326.20544.0_x64__8wekyb3d8bbwe\HxTsr.exe
02:49:08.7692AE4267ProcessInjector::HandlePendingProccesssprocess detection skipped |16504| (w: 0x0): C:\Program Files (x86)\Glorious Core\Glorious Core\Glorious Core.exe
02:49:08.7692AE4267ProcessInjector::HandlePendingProccesssprocess detection skipped |16532| (w: 0x0): C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
02:49:08.7692AE4267ProcessInjector::HandlePendingProccesssprocess detection skipped |16684| (w: 0x0): C:\Program Files (x86)\Glorious Core\Glorious Core\Glorious Core.exe
02:49:08.7692AE4267ProcessInjector::HandlePendingProccesssprocess detection skipped |16760| (w: 0x0): C:\Program Files (x86)\Glorious Core\Glorious Core\Glorious Core.exe
02:49:08.7692AE4267ProcessInjector::HandlePendingProccesssprocess detection skipped |17240| (w: 0x0): C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
02:49:08.7692AE4267ProcessInjector::HandlePendingProccesssprocess detection skipped |19132| (w: 0x0): C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
02:49:08.7692AE4267ProcessInjector::HandlePendingProccesssprocess detection skipped |20160| (w: 0x0): C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
02:49:08.7692AE4267ProcessInjector::HandlePendingProccesssprocess detection skipped |20336| (w: 0x0): C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
02:49:08.7692AE4267ProcessInjector::HandlePendingProccesssprocess detection skipped |20444| (w: 0x0): C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
02:49:08.7692AE4267ProcessInjector::HandlePendingProccesssprocess detection skipped |20600| (w: 0x0): C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
02:49:08.7692AE4267ProcessInjector::HandlePendingProccesssprocess detection skipped |22180| (w: 0x0): C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
02:49:08.7692AE4267ProcessInjector::HandlePendingProccesssprocess detection skipped |22364| (w: 0x0): C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
03:47:58.7072AE4267ProcessInjector::HandlePendingProccesssprocess detection skipped |11448| (w: 0x0): C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
03:47:58.7072AE4267ProcessInjector::HandlePendingProccesssprocess detection skipped |17288| (w: 0x0): C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
03:48:47.1512AE4267ProcessInjector::HandlePendingProccesssprocess detection skipped |7748| (w: 0x0): C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
03:49:04.2832AE4267ProcessInjector::HandlePendingProccesssprocess detection skipped |15080| (w: 0x0): C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
03:52:35.2232AE4267ProcessInjector::HandlePendingProccesssprocess detection skipped |12932| (w: 0x0): C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
03:53:12.5652AE4267ProcessInjector::HandlePendingProccesssprocess detection skipped |22464| (w: 0x0): C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
03:53:47.8942AE4267ProcessInjector::HandlePendingProccesssprocess detection skipped |4684| (w: 0x0): C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
03:54:56.4342AE4267ProcessInjector::HandlePendingProccesssprocess detection skipped |8136| (w: 0x0): C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
03:58:34.7224E1476Common::ProcessExplorer::ProcessTrackerIPCAgent::OnDisconnecteddisconnected to process tracker server
03:58:34.87942D466ProcessesMonitor::Stopstopping PM...
03:58:34.87924EC126ProcessesMonitor::ProcessEnumerateThreadexit process listener
03:58:40.88842D466ProcessesMonitor::Stopstopping PM...