Time | Thread | Line | Function | Message |
21:28:30.424 | 3390 | 361 | ftw1 | Loading (pid: 18716) |
21:28:30.424 | 5C84 | 146 | ProcessHardwareRecorder::CommandThread | starting recorder thread |
21:28:30.425 | 3390 | 48 | Update::Detect | Env (C:\Windows\SYSTEM32\d3d11.dll) <0XBC650000>6|2|1247870977 |
21:28:30.425 | 3390 | 48 | Update::Detect | Env (C:\Windows\SYSTEM32\dxgi.dll) <0XC2BE0000>6|2|1247870977 |
21:28:30.473 | 3390 | 172 | DXManager::Detect | Found in 0 |
21:28:30.473 | 3390 | 209 | Initialize::GetLocation | @ 0X4F80|20352 |
21:28:30.473 | 3390 | 209 | Initialize::GetLocation | @ 0X69160|430432 |
21:28:30.473 | 3390 | 209 | Initialize::GetLocation | @ 0X20410|132112 |
21:28:30.473 | 3390 | 209 | Initialize::GetLocation | @ 0X1DE0|7648 |
21:28:30.473 | 3390 | 111 | Update::Caught | C:\Windows\SYSTEM32\d3d11.dll|0XBC650000 <> 0XC2BE0000 |
21:28:30.473 | 3390 | 209 | Initialize::GetLocation | @ 0XF9B98850|-105281456 |
21:28:30.473 | 3390 | 111 | Update::Caught | C:\Windows\SYSTEM32\d3d11.dll|0XBC650000 <> 0XC2BE0000 |
21:28:30.473 | 3390 | 209 | Initialize::GetLocation | @ 0XF9B9DE80|-105259392 |
21:28:30.473 | 3390 | 111 | Update::Caught | C:\Windows\SYSTEM32\d3d11.dll|0XBC650000 <> 0XC2BE0000 |
21:28:30.473 | 3390 | 209 | Initialize::GetLocation | @ 0XF9B9C5E0|-105265696 |
21:28:30.473 | 3390 | 111 | Update::Caught | C:\Windows\SYSTEM32\d3d11.dll|0XBC650000 <> 0XC2BE0000 |
21:28:30.473 | 3390 | 209 | Initialize::GetLocation | @ 0XF9A7A7F0|-106453008 |
21:28:30.479 | 3390 | 48 | Update::Detect | Env (C:\Windows\SYSTEM32\d3d9.dll) <0XB9FF0000>6|2|1247870977 |
21:28:30.510 | 3390 | 129 | DXManager::Detect | OK |
21:28:30.529 | 3390 | 186 | DXManager::Detect | Done |
21:28:30.529 | 3390 | 215 | VTableHolderD3d9::init | d3d offsest [sht]: 0x4060 , 0x53c0 |
21:28:30.529 | 3390 | 209 | Initialize::GetLocation | @ 0X3FC10|261136 |
21:28:30.529 | 3390 | 209 | Initialize::GetLocation | @ 0X33840|211008 |
21:28:30.529 | 3390 | 209 | Initialize::GetLocation | @ 0X3BFA0|245664 |
21:28:30.529 | 3390 | 209 | Initialize::GetLocation | @ 0XB70E0|749792 |
21:28:30.529 | 3390 | 209 | Initialize::GetLocation | @ 0XB6C30|748592 |
21:28:30.529 | 3390 | 209 | Initialize::GetLocation | @ 0XAF40|44864 |
21:28:30.529 | 3390 | 209 | Initialize::GetLocation | @ 0XB6CD0|748752 |
21:28:30.529 | 3390 | 209 | Initialize::GetLocation | @ 0X20C40|134208 |
21:28:30.529 | 3390 | 209 | Initialize::GetLocation | @ 0X16A10|92688 |
21:28:30.529 | 3390 | 209 | Initialize::GetLocation | @ 0X2D530|185648 |
21:28:30.529 | 3390 | 209 | Initialize::GetLocation | @ 0X113350|1127248 |
21:28:30.529 | 3390 | 209 | Initialize::GetLocation | @ 0X112E10|1125904 |
21:28:30.529 | 3390 | 209 | Initialize::GetLocation | @ 0X20B30|133936 |
21:28:30.529 | 3390 | 209 | Initialize::GetLocation | @ 0X20A40|133696 |
21:28:30.529 | 3390 | 209 | Initialize::GetLocation | @ 0XD8D0|55504 |
21:28:30.529 | 3390 | 209 | Initialize::GetLocation | @ 0X466B0|288432 |
21:28:30.529 | 3390 | 209 | Initialize::GetLocation | @ 0XAAB0|43696 |
21:28:30.529 | 3390 | 209 | Initialize::GetLocation | @ 0XCE2D0|844496 |
21:28:30.529 | 3390 | 209 | Initialize::GetLocation | @ 0XCE9A0|846240 |
21:28:30.529 | 3390 | 209 | Initialize::GetLocation | @ 0XAAB0|43696 |
21:28:30.529 | 3390 | 209 | Initialize::GetLocation | @ 0XCF490|849040 |
21:28:30.529 | 3390 | 209 | Initialize::GetLocation | @ 0XCFAF0|850672 |
21:28:30.538 | 3390 | 48 | Update::Detect | Env (C:\Windows\SYSTEM32\dinput.dll) <0X6B100000>6|2|1247870977 |
21:28:30.557 | 3390 | 83 | VTableHolderDInput::init | m_pDIW->CreateDevice - succeded. |
21:28:30.557 | 3390 | 209 | Initialize::GetLocation | @ 0X4040|16448 |
21:28:30.557 | 3390 | 209 | Initialize::GetLocation | @ 0X6410|25616 |
21:28:30.557 | 3390 | 209 | Initialize::GetLocation | @ 0X65C0|26048 |
21:28:30.558 | 3390 | 48 | Update::Detect | Env (C:\Windows\SYSTEM32\dinput8.dll) <0X59A30000>6|2|1247870977 |
21:28:30.572 | 3390 | 93 | VTableHolderDInput8::init | m_pDI8W->CreateDevice - succeded. |
21:28:30.572 | 3390 | 110 | VTableHolderDInput8::init | m_pDI8A->CreateDevice - succeded. |
21:28:30.572 | 3390 | 209 | Initialize::GetLocation | @ 0XA5D0|42448 |
21:28:30.572 | 3390 | 209 | Initialize::GetLocation | @ 0XD4D0|54480 |
21:28:30.572 | 3390 | 209 | Initialize::GetLocation | @ 0XD290|53904 |
21:28:30.633 | 3390 | 225 | InterProcessElement::open | InterProcess Overwolf_SHARED_MEMORY_2_2_78_14_18716 opened succesfuly |
21:28:30.633 | 3390 | 72 | HookFunctionsTableInitializer::SetHookFunctionsData | D3D9 Sht offsets 0x4060 , 0x53c0 |
21:28:30.633 | 3390 | 256 | InterProcessElement::close | InterProcess Overwolf_SHARED_MEMORY_2_2_78_14_18716 close 2147483647 bytes |
21:28:30.633 | 3390 | 297 | InjectOWExplorer | Explorer file name [C:\Program Files (x86)\Overwolf\0.149.2.30\OWExplorer.dll] |
21:28:30.641 | 3390 | 385 | ftw1 | OWExplorer injected |
21:28:31.52 | 5A68 | 51 | `anonymous-namespace'::CreateProvider | Initialize provider: NET |
21:28:31.52 | 5A68 | 117 | libprocess::NetworkTracer::Initialize | init res:0x5 [started:0 active:0 enbaled:0] |
21:28:31.52 | 5A68 | 54 | `anonymous-namespace'::CreateProvider | Fail to initlized provider: NET |
21:28:31.52 | 5A68 | 51 | `anonymous-namespace'::CreateProvider | Initialize provider: GPU |
21:31:01.726 | 1F1C | 352 | ProcessInjector::HandleElevatedProcess | Fail injection to process [2692] [t: 0 w_t_id: 0]- NVDisplay.Container.exe (elevated True) 0x0 |
21:31:01.726 | 1F1C | 291 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |2692|: NVDisplay.Container.exe |
21:31:01.726 | 1F1C | 352 | ProcessInjector::HandleElevatedProcess | Fail injection to process [5112] [t: 0 w_t_id: 0]- nvcontainer.exe (elevated True) 0x0 |
21:31:01.726 | 1F1C | 291 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |5112|: nvcontainer.exe |
21:31:01.726 | 1F1C | 352 | ProcessInjector::HandleElevatedProcess | Fail injection to process [5484] [t: 0 w_t_id: 0]- MsMpEng.exe (elevated True) 0x0 |
21:31:01.726 | 1F1C | 291 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |5484|: MsMpEng.exe |
21:31:01.726 | 1F1C | 352 | ProcessInjector::HandleElevatedProcess | Fail injection to process [9932] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0 |
21:31:01.726 | 1F1C | 291 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |9932|: firefox.exe |
21:31:01.726 | 1F1C | 352 | ProcessInjector::HandleElevatedProcess | Fail injection to process [14236] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0 |
21:31:01.726 | 1F1C | 291 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |14236|: firefox.exe |
21:31:01.726 | 1F1C | 352 | ProcessInjector::HandleElevatedProcess | Fail injection to process [19032] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0 |
21:31:01.726 | 1F1C | 291 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |19032|: firefox.exe |
21:31:01.726 | 1F1C | 352 | ProcessInjector::HandleElevatedProcess | Fail injection to process [19880] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0 |
21:31:01.726 | 1F1C | 291 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |19880|: firefox.exe |
21:31:01.726 | 1F1C | 352 | ProcessInjector::HandleElevatedProcess | Fail injection to process [20124] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0 |
21:31:01.726 | 1F1C | 291 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |20124|: firefox.exe |
21:31:01.726 | 1F1C | 352 | ProcessInjector::HandleElevatedProcess | Fail injection to process [20492] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0 |
21:31:01.726 | 1F1C | 291 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |20492|: firefox.exe |
21:31:01.726 | 1F1C | 352 | ProcessInjector::HandleElevatedProcess | Fail injection to process [22276] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0 |
21:31:01.726 | 1F1C | 291 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |22276|: firefox.exe |
21:31:01.726 | 1F1C | 352 | ProcessInjector::HandleElevatedProcess | Fail injection to process [24896] [t: 0 w_t_id: 0]- node.exe (elevated True) 0x0 |
21:31:01.726 | 1F1C | 291 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |24896|: node.exe |
21:31:01.726 | 1F1C | 352 | ProcessInjector::HandleElevatedProcess | Fail injection to process [26104] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0 |
21:31:01.726 | 1F1C | 291 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |26104|: firefox.exe |
21:31:02.741 | 1F1C | 352 | ProcessInjector::HandleElevatedProcess | Fail injection to process [7220] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x0 |
21:31:02.741 | 1F1C | 291 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |7220|: Code.exe |
21:31:02.741 | 1F1C | 352 | ProcessInjector::HandleElevatedProcess | Fail injection to process [9168] [t: 0 w_t_id: 0]- openvpn.exe (elevated True) 0x0 |
21:31:02.741 | 1F1C | 291 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |9168|: openvpn.exe |
21:31:02.741 | 1F1C | 352 | ProcessInjector::HandleElevatedProcess | Fail injection to process [9276] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x0 |
21:31:02.741 | 1F1C | 291 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |9276|: Code.exe |
21:31:02.741 | 1F1C | 352 | ProcessInjector::HandleElevatedProcess | Fail injection to process [11336] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0 |
21:31:02.741 | 1F1C | 291 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |11336|: firefox.exe |
21:31:02.741 | 1F1C | 352 | ProcessInjector::HandleElevatedProcess | Fail injection to process [14740] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x0 |
21:31:02.741 | 1F1C | 291 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |14740|: Code.exe |
21:31:02.741 | 1F1C | 352 | ProcessInjector::HandleElevatedProcess | Fail injection to process [18308] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x0 |
21:31:02.741 | 1F1C | 291 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |18308|: Code.exe |
21:31:02.741 | 1F1C | 352 | ProcessInjector::HandleElevatedProcess | Fail injection to process [24580] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x0 |
21:31:02.741 | 1F1C | 291 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |24580|: Code.exe |
21:34:03.444 | 1F1C | 352 | ProcessInjector::HandleElevatedProcess | Fail injection to process [4440] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0 |
21:34:03.444 | 1F1C | 291 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |4440|: firefox.exe |
21:34:04.424 | 1F1C | 352 | ProcessInjector::HandleElevatedProcess | Fail injection to process [21576] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0 |
21:34:04.424 | 1F1C | 291 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |21576|: firefox.exe |
21:48:56.846 | 1F1C | 352 | ProcessInjector::HandleElevatedProcess | Fail injection to process [3564] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x1f |
21:48:56.846 | 1F1C | 291 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |3564|: firefox.exe |
22:08:05.188 | 1F1C | 352 | ProcessInjector::HandleElevatedProcess | Fail injection to process [25968] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x578 |
22:08:05.188 | 1F1C | 291 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |25968|: firefox.exe |
22:09:34.130 | 3390 | 66 | ProcessesMonitor::Stop | stopping PM... |
22:09:34.130 | 5A68 | 119 | ProcessesMonitor::ProcessEnumerateThread | exit process listener |