TimeThreadLineFunctionMessage
14:22:43.563588C361ftw1Loading (pid: 8152)
14:22:43.5634268146ProcessHardwareRecorder::CommandThreadstarting recorder thread
14:22:43.564588C48Update::DetectEnv (C:\Windows\SYSTEM32\d3d11.dll) <0XCCB70000>6|2|1247870977
14:22:43.565588C48Update::DetectEnv (C:\Windows\SYSTEM32\dxgi.dll) <0XCF740000>6|2|1247870977
14:22:43.602588C172DXManager::DetectFound in 0
14:22:43.603588C209Initialize::GetLocation@ 0X4F80|20352
14:22:43.603588C209Initialize::GetLocation@ 0X69160|430432
14:22:43.603588C209Initialize::GetLocation@ 0X20410|132112
14:22:43.603588C209Initialize::GetLocation@ 0X1DE0|7648
14:22:43.603588C111Update::CaughtC:\Windows\SYSTEM32\d3d11.dll|0XCCB70000 <> 0XCF740000
14:22:43.603588C209Initialize::GetLocation@ 0XFD558850|-44726192
14:22:43.603588C111Update::CaughtC:\Windows\SYSTEM32\d3d11.dll|0XCCB70000 <> 0XCF740000
14:22:43.603588C209Initialize::GetLocation@ 0XFD55DE80|-44704128
14:22:43.603588C111Update::CaughtC:\Windows\SYSTEM32\d3d11.dll|0XCCB70000 <> 0XCF740000
14:22:43.603588C209Initialize::GetLocation@ 0XFD55C5E0|-44710432
14:22:43.603588C111Update::CaughtC:\Windows\SYSTEM32\d3d11.dll|0XCCB70000 <> 0XCF740000
14:22:43.603588C209Initialize::GetLocation@ 0XFD43A7F0|-45897744
14:22:43.608588C48Update::DetectEnv (C:\Windows\SYSTEM32\d3d9.dll) <0XC5E40000>6|2|1247870977
14:22:43.635588C129DXManager::DetectOK
14:22:43.648588C186DXManager::DetectDone
14:22:43.648588C215VTableHolderD3d9::initd3d offsest [sht]: 0x4060 , 0x53c0
14:22:43.648588C209Initialize::GetLocation@ 0X3FC10|261136
14:22:43.648588C209Initialize::GetLocation@ 0X33840|211008
14:22:43.648588C209Initialize::GetLocation@ 0X3BFA0|245664
14:22:43.648588C209Initialize::GetLocation@ 0XB70E0|749792
14:22:43.648588C209Initialize::GetLocation@ 0XB6C30|748592
14:22:43.648588C209Initialize::GetLocation@ 0XAF40|44864
14:22:43.648588C209Initialize::GetLocation@ 0XB6CD0|748752
14:22:43.648588C209Initialize::GetLocation@ 0X20C40|134208
14:22:43.648588C209Initialize::GetLocation@ 0X16A10|92688
14:22:43.648588C209Initialize::GetLocation@ 0X2D530|185648
14:22:43.648588C209Initialize::GetLocation@ 0X113350|1127248
14:22:43.648588C209Initialize::GetLocation@ 0X112E10|1125904
14:22:43.648588C209Initialize::GetLocation@ 0X20B30|133936
14:22:43.648588C209Initialize::GetLocation@ 0X20A40|133696
14:22:43.648588C209Initialize::GetLocation@ 0XD8D0|55504
14:22:43.648588C209Initialize::GetLocation@ 0X466B0|288432
14:22:43.648588C209Initialize::GetLocation@ 0XAAB0|43696
14:22:43.648588C209Initialize::GetLocation@ 0XCE2D0|844496
14:22:43.648588C209Initialize::GetLocation@ 0XCE9A0|846240
14:22:43.648588C209Initialize::GetLocation@ 0XAAB0|43696
14:22:43.648588C209Initialize::GetLocation@ 0XCF490|849040
14:22:43.648588C209Initialize::GetLocation@ 0XCFAF0|850672
14:22:43.657588C48Update::DetectEnv (C:\Windows\SYSTEM32\dinput.dll) <0X71090000>6|2|1247870977
14:22:43.676588C83VTableHolderDInput::initm_pDIW->CreateDevice - succeded.
14:22:43.676588C209Initialize::GetLocation@ 0X4040|16448
14:22:43.676588C209Initialize::GetLocation@ 0X6410|25616
14:22:43.676588C209Initialize::GetLocation@ 0X65C0|26048
14:22:43.677588C48Update::DetectEnv (C:\Windows\SYSTEM32\dinput8.dll) <0X5FDF0000>6|2|1247870977
14:22:43.691588C93VTableHolderDInput8::initm_pDI8W->CreateDevice - succeded.
14:22:43.692588C110VTableHolderDInput8::initm_pDI8A->CreateDevice - succeded.
14:22:43.693588C209Initialize::GetLocation@ 0XA5D0|42448
14:22:43.693588C209Initialize::GetLocation@ 0XD4D0|54480
14:22:43.693588C209Initialize::GetLocation@ 0XD290|53904
14:22:43.745588C225InterProcessElement::openInterProcess Overwolf_SHARED_MEMORY_2_2_79_8_8152 opened succesfuly
14:22:43.745588C72HookFunctionsTableInitializer::SetHookFunctionsDataD3D9 Sht offsets 0x4060 , 0x53c0
14:22:43.745588C256InterProcessElement::closeInterProcess Overwolf_SHARED_MEMORY_2_2_79_8_8152 close 2147483647 bytes
14:22:43.745588C297InjectOWExplorerExplorer file name [C:\Program Files (x86)\Overwolf\0.153.0.13\OWExplorer.dll]
14:22:43.793588C385ftw1OWExplorer injected
14:22:44.181386C51`anonymous-namespace'::CreateProviderInitialize provider: NET
14:22:44.181386C117libprocess::NetworkTracer::Initializeinit res:0x5 [started:0 active:0 enbaled:0]
14:22:44.181386C54`anonymous-namespace'::CreateProviderFail to initlized provider: NET
14:22:44.181386C51`anonymous-namespace'::CreateProviderInitialize provider: GPU
14:25:15.13954A4394ProcessInjector::HandleElevatedProcessFail injection to process [1580] [t: 0 w_t_id: 0]- fzsftp.exe (elevated True) 0x0
14:25:15.13954A4333ProcessInjector::HandlePendingProccesssFail to inject pending process |1580|: fzsftp.exe
14:25:15.13954A4394ProcessInjector::HandleElevatedProcessFail injection to process [2596] [t: 0 w_t_id: 0]- NVDisplay.Container.exe (elevated True) 0x0
14:25:15.13954A4333ProcessInjector::HandlePendingProccesssFail to inject pending process |2596|: NVDisplay.Container.exe
14:25:15.13954A4394ProcessInjector::HandleElevatedProcessFail injection to process [4332] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0
14:25:15.13954A4333ProcessInjector::HandlePendingProccesssFail to inject pending process |4332|: firefox.exe
14:25:15.13954A4394ProcessInjector::HandleElevatedProcessFail injection to process [5184] [t: 0 w_t_id: 0]- nvcontainer.exe (elevated True) 0x0
14:25:15.13954A4333ProcessInjector::HandlePendingProccesssFail to inject pending process |5184|: nvcontainer.exe
14:25:15.13954A4394ProcessInjector::HandleElevatedProcessFail injection to process [5440] [t: 0 w_t_id: 0]- MsMpEng.exe (elevated True) 0x0
14:25:15.13954A4333ProcessInjector::HandlePendingProccesssFail to inject pending process |5440|: MsMpEng.exe
14:25:15.13954A4394ProcessInjector::HandleElevatedProcessFail injection to process [8176] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0
14:25:15.13954A4333ProcessInjector::HandlePendingProccesssFail to inject pending process |8176|: firefox.exe
14:25:15.13954A4394ProcessInjector::HandleElevatedProcessFail injection to process [8408] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0
14:25:15.13954A4333ProcessInjector::HandlePendingProccesssFail to inject pending process |8408|: firefox.exe
14:25:15.13954A4394ProcessInjector::HandleElevatedProcessFail injection to process [8648] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0
14:25:15.13954A4333ProcessInjector::HandlePendingProccesssFail to inject pending process |8648|: firefox.exe
14:25:15.13954A4394ProcessInjector::HandleElevatedProcessFail injection to process [9688] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0
14:25:15.13954A4333ProcessInjector::HandlePendingProccesssFail to inject pending process |9688|: firefox.exe
14:25:15.13954A4394ProcessInjector::HandleElevatedProcessFail injection to process [11708] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0
14:25:15.13954A4333ProcessInjector::HandlePendingProccesssFail to inject pending process |11708|: firefox.exe
14:25:15.13954A4394ProcessInjector::HandleElevatedProcessFail injection to process [12480] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0
14:25:15.13954A4333ProcessInjector::HandlePendingProccesssFail to inject pending process |12480|: firefox.exe
14:25:15.13954A4394ProcessInjector::HandleElevatedProcessFail injection to process [13444] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0
14:25:15.13954A4333ProcessInjector::HandlePendingProccesssFail to inject pending process |13444|: firefox.exe
14:25:15.13954A4394ProcessInjector::HandleElevatedProcessFail injection to process [14252] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0
14:25:15.13954A4333ProcessInjector::HandlePendingProccesssFail to inject pending process |14252|: firefox.exe
14:25:15.13954A4394ProcessInjector::HandleElevatedProcessFail injection to process [16952] [t: 0 w_t_id: 0]- node.exe (elevated True) 0x0
14:25:15.13954A4333ProcessInjector::HandlePendingProccesssFail to inject pending process |16952|: node.exe
14:25:15.13954A4394ProcessInjector::HandleElevatedProcessFail injection to process [23268] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0
14:25:15.13954A4333ProcessInjector::HandlePendingProccesssFail to inject pending process |23268|: firefox.exe
14:25:16.15354A4394ProcessInjector::HandleElevatedProcessFail injection to process [19488] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0
14:25:16.15354A4333ProcessInjector::HandlePendingProccesssFail to inject pending process |19488|: firefox.exe
14:33:55.95254A4394ProcessInjector::HandleElevatedProcessFail injection to process [19992] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0
14:33:55.95254A4333ProcessInjector::HandlePendingProccesssFail to inject pending process |19992|: firefox.exe
14:37:50.8854A4394ProcessInjector::HandleElevatedProcessFail injection to process [22700] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0
14:37:50.8854A4333ProcessInjector::HandlePendingProccesssFail to inject pending process |22700|: firefox.exe
14:44:50.95954A4394ProcessInjector::HandleElevatedProcessFail injection to process [13880] [t: 0 w_t_id: 0]- git.exe (elevated True) 0x0
14:44:50.95954A4333ProcessInjector::HandlePendingProccesssFail to inject pending process |13880|: git.exe
14:44:50.95954A4394ProcessInjector::HandleElevatedProcessFail injection to process [17336] [t: 0 w_t_id: 0]- git.exe (elevated True) 0x0
14:44:50.95954A4333ProcessInjector::HandlePendingProccesssFail to inject pending process |17336|: git.exe
14:45:00.3554A4394ProcessInjector::HandleElevatedProcessFail injection to process [8296] [t: 0 w_t_id: 0]- git.exe (elevated True) 0x0
14:45:00.3554A4333ProcessInjector::HandlePendingProccesssFail to inject pending process |8296|: git.exe
14:45:00.3554A4394ProcessInjector::HandleElevatedProcessFail injection to process [22024] [t: 0 w_t_id: 0]- git.exe (elevated True) 0x0
14:45:00.3554A4333ProcessInjector::HandlePendingProccesssFail to inject pending process |22024|: git.exe
14:46:32.95754A4394ProcessInjector::HandleElevatedProcessFail injection to process [11748] [t: 0 w_t_id: 0]- splwow64.exe (elevated True) 0x0
14:46:32.95754A4333ProcessInjector::HandlePendingProccesssFail to inject pending process |11748|: splwow64.exe
18:14:14.18354A4394ProcessInjector::HandleElevatedProcessFail injection to process [21964] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0
18:14:14.18354A4333ProcessInjector::HandlePendingProccesssFail to inject pending process |21964|: firefox.exe
18:49:06.360588C66ProcessesMonitor::Stopstopping PM...
18:49:06.360386C119ProcessesMonitor::ProcessEnumerateThreadexit process listener
18:49:06.362588C479ProcessInjector::Unhookunhook running process
18:49:12.378588C66ProcessesMonitor::Stopstopping PM...