TimeThreadLineFunctionMessage
06:55:50.50818361ftw1Loading (pid: 15524)
06:55:50.508A64146ProcessHardwareRecorder::CommandThreadstarting recorder thread
06:55:50.5281848Update::DetectEnv (C:\WINDOWS\SYSTEM32\d3d11.dll) <0XAEBC0000>6|2|1247871522
06:55:50.5281848Update::DetectEnv (C:\WINDOWS\SYSTEM32\dxgi.dll) <0XB13C0000>6|2|1247871522
06:55:50.214818172DXManager::DetectFound in 0
06:55:50.215818209Initialize::GetLocation@ 0X4F80|20352
06:55:50.215818209Initialize::GetLocation@ 0X69640|431680
06:55:50.215818209Initialize::GetLocation@ 0X206F0|132848
06:55:50.215818209Initialize::GetLocation@ 0X1DE0|7648
06:55:50.215818111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0XAEBC0000 <> 0XB13C0000
06:55:50.215818209Initialize::GetLocation@ 0XFD928860|-40728480
06:55:50.215818111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0XAEBC0000 <> 0XB13C0000
06:55:50.215818209Initialize::GetLocation@ 0XFD92DC30|-40707024
06:55:50.215818111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0XAEBC0000 <> 0XB13C0000
06:55:50.215818209Initialize::GetLocation@ 0XFD92C5F0|-40712720
06:55:50.215818111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0XAEBC0000 <> 0XB13C0000
06:55:50.215818209Initialize::GetLocation@ 0XFD80A7F0|-41900048
06:55:50.26581848Update::DetectEnv (C:\WINDOWS\SYSTEM32\d3d9.dll) <0XA5290000>6|2|1247871522
06:55:50.404818129DXManager::DetectOK
06:55:50.456818186DXManager::DetectDone
06:55:50.456818215VTableHolderD3d9::initd3d offsest [sht]: 0x4060 , 0x53c0
06:55:50.457818209Initialize::GetLocation@ 0X41060|266336
06:55:50.457818209Initialize::GetLocation@ 0X33320|209696
06:55:50.457818209Initialize::GetLocation@ 0X3CB90|248720
06:55:50.457818209Initialize::GetLocation@ 0XB75B0|751024
06:55:50.457818209Initialize::GetLocation@ 0XB7100|749824
06:55:50.457818209Initialize::GetLocation@ 0XA1F0|41456
06:55:50.457818209Initialize::GetLocation@ 0XB71A0|749984
06:55:50.457818209Initialize::GetLocation@ 0X1ABB0|109488
06:55:50.457818209Initialize::GetLocation@ 0X1D600|120320
06:55:50.457818209Initialize::GetLocation@ 0X25C30|154672
06:55:50.457818209Initialize::GetLocation@ 0X113820|1128480
06:55:50.457818209Initialize::GetLocation@ 0X1132E0|1127136
06:55:50.457818209Initialize::GetLocation@ 0X1AAA0|109216
06:55:50.457818209Initialize::GetLocation@ 0X1A9B0|108976
06:55:50.457818209Initialize::GetLocation@ 0XCB80|52096
06:55:50.457818209Initialize::GetLocation@ 0X47F90|294800
06:55:50.457818209Initialize::GetLocation@ 0X9D60|40288
06:55:50.457818209Initialize::GetLocation@ 0XCE7A0|845728
06:55:50.457818209Initialize::GetLocation@ 0XCEE70|847472
06:55:50.457818209Initialize::GetLocation@ 0X9D60|40288
06:55:50.457818209Initialize::GetLocation@ 0XCF960|850272
06:55:50.457818209Initialize::GetLocation@ 0XCFFC0|851904
06:55:50.47381848Update::DetectEnv (C:\WINDOWS\SYSTEM32\dinput.dll) <0X71150000>6|2|1247870977
06:55:50.50181883VTableHolderDInput::initm_pDIW->CreateDevice - succeded.
06:55:50.501818209Initialize::GetLocation@ 0X4040|16448
06:55:50.501818209Initialize::GetLocation@ 0X6410|25616
06:55:50.501818209Initialize::GetLocation@ 0X65C0|26048
06:55:50.50681848Update::DetectEnv (C:\WINDOWS\SYSTEM32\dinput8.dll) <0X70500000>6|2|1247870977
06:55:50.52481893VTableHolderDInput8::initm_pDI8W->CreateDevice - succeded.
06:55:50.524818110VTableHolderDInput8::initm_pDI8A->CreateDevice - succeded.
06:55:50.524818209Initialize::GetLocation@ 0XA5D0|42448
06:55:50.524818209Initialize::GetLocation@ 0XD4D0|54480
06:55:50.524818209Initialize::GetLocation@ 0XD290|53904
06:55:50.579818225InterProcessElement::openInterProcess Overwolf_SHARED_MEMORY_2_2_81_2_15524 opened succesfuly
06:55:50.57981872HookFunctionsTableInitializer::SetHookFunctionsDataD3D9 Sht offsets 0x4060 , 0x53c0
06:55:50.579818256InterProcessElement::closeInterProcess Overwolf_SHARED_MEMORY_2_2_81_2_15524 close 2147483647 bytes
06:55:50.579818297InjectOWExplorerExplorer file name [C:\Program Files (x86)\Overwolf\0.158.1.1\OWExplorer.dll]
06:55:50.590818385ftw1OWExplorer injected
06:55:50.786799451`anonymous-namespace'::CreateProviderInitialize provider: NET
06:55:50.7867994117libprocess::NetworkTracer::Initializeinit res:0x5 [started:0 active:0 enbaled:0]
06:55:50.786799454`anonymous-namespace'::CreateProviderFail to initlized provider: NET
06:55:50.786799451`anonymous-namespace'::CreateProviderInitialize provider: GPU
06:58:21.593A450394ProcessInjector::HandleElevatedProcessFail injection to process [2092] [t: 0 w_t_id: 0]- NVDisplay.Container.exe (elevated True) 0x0
06:58:21.593A450333ProcessInjector::HandlePendingProccesssFail to inject pending process |2092|: NVDisplay.Container.exe
06:58:21.593A450394ProcessInjector::HandleElevatedProcessFail injection to process [4536] [t: 0 w_t_id: 0]- NvBroadcast.Container.exe (elevated True) 0x0
06:58:21.593A450333ProcessInjector::HandlePendingProccesssFail to inject pending process |4536|: NvBroadcast.Container.exe
06:58:21.593A450394ProcessInjector::HandleElevatedProcessFail injection to process [4616] [t: 0 w_t_id: 0]- nvcontainer.exe (elevated True) 0x0
06:58:21.593A450333ProcessInjector::HandlePendingProccesssFail to inject pending process |4616|: nvcontainer.exe
06:58:21.593A450394ProcessInjector::HandleElevatedProcessFail injection to process [4632] [t: 0 w_t_id: 0]- MsMpEng.exe (elevated True) 0x0
06:58:21.593A450333ProcessInjector::HandlePendingProccesssFail to inject pending process |4632|: MsMpEng.exe
06:58:21.593A450394ProcessInjector::HandleElevatedProcessFail injection to process [5860] [t: 0 w_t_id: 0]- NVIDIA Share.exe (elevated True) 0x0
06:58:21.593A450333ProcessInjector::HandlePendingProccesssFail to inject pending process |5860|: NVIDIA Share.exe
06:58:21.593A450394ProcessInjector::HandleElevatedProcessFail injection to process [27196] [t: 0 w_t_id: 0]- uihost.exe (elevated True) 0x0
06:58:21.593A450333ProcessInjector::HandlePendingProccesssFail to inject pending process |27196|: uihost.exe
06:58:21.593A450394ProcessInjector::HandleElevatedProcessFail injection to process [37840] [t: 0 w_t_id: 0]- CCXProcess.exe (elevated True) 0x0
06:58:21.593A450333ProcessInjector::HandlePendingProccesssFail to inject pending process |37840|: CCXProcess.exe
06:58:21.593A450394ProcessInjector::HandleElevatedProcessFail injection to process [38300] [t: 0 w_t_id: 0]- NVIDIA Share.exe (elevated True) 0x0
06:58:21.593A450333ProcessInjector::HandlePendingProccesssFail to inject pending process |38300|: NVIDIA Share.exe
06:58:21.593A450394ProcessInjector::HandleElevatedProcessFail injection to process [40760] [t: 0 w_t_id: 0]- node.exe (elevated True) 0x0
06:58:21.593A450333ProcessInjector::HandlePendingProccesssFail to inject pending process |40760|: node.exe
07:17:24.601A450394ProcessInjector::HandleElevatedProcessFail injection to process [39404] [t: 0 w_t_id: 0]- dynamiclinkmanager.exe (elevated True) 0x0
07:17:24.601A450333ProcessInjector::HandlePendingProccesssFail to inject pending process |39404|: dynamiclinkmanager.exe
07:17:31.604A450394ProcessInjector::HandleElevatedProcessFail injection to process [40484] [t: 0 w_t_id: 0]- TeamProjectsLocalHub.exe (elevated True) 0x0
07:17:31.604A450333ProcessInjector::HandlePendingProccesssFail to inject pending process |40484|: TeamProjectsLocalHub.exe
07:44:26.411A450394ProcessInjector::HandleElevatedProcessFail injection to process [3976] [t: 0 w_t_id: 0]- brave.exe (elevated True) 0x0
07:44:26.411A450333ProcessInjector::HandlePendingProccesssFail to inject pending process |3976|: brave.exe
07:44:26.411A450394ProcessInjector::HandleElevatedProcessFail injection to process [15580] [t: 0 w_t_id: 0]- brave.exe (elevated True) 0x0
07:44:26.411A450333ProcessInjector::HandlePendingProccesssFail to inject pending process |15580|: brave.exe
07:44:26.411A450394ProcessInjector::HandleElevatedProcessFail injection to process [35848] [t: 0 w_t_id: 0]- brave.exe (elevated True) 0x0
07:44:26.411A450333ProcessInjector::HandlePendingProccesssFail to inject pending process |35848|: brave.exe
07:44:27.411A450394ProcessInjector::HandleElevatedProcessFail injection to process [5028] [t: 0 w_t_id: 0]- brave.exe (elevated True) 0x0
07:44:27.411A450333ProcessInjector::HandlePendingProccesssFail to inject pending process |5028|: brave.exe
07:44:27.411A450394ProcessInjector::HandleElevatedProcessFail injection to process [11272] [t: 0 w_t_id: 0]- brave.exe (elevated True) 0x0
07:44:27.411A450333ProcessInjector::HandlePendingProccesssFail to inject pending process |11272|: brave.exe
07:44:27.411A450394ProcessInjector::HandleElevatedProcessFail injection to process [20592] [t: 0 w_t_id: 0]- brave.exe (elevated True) 0x0
07:44:27.411A450333ProcessInjector::HandlePendingProccesssFail to inject pending process |20592|: brave.exe
07:44:27.411A450394ProcessInjector::HandleElevatedProcessFail injection to process [30940] [t: 0 w_t_id: 0]- brave.exe (elevated True) 0x0
07:44:27.411A450333ProcessInjector::HandlePendingProccesssFail to inject pending process |30940|: brave.exe
07:44:27.411A450394ProcessInjector::HandleElevatedProcessFail injection to process [37708] [t: 0 w_t_id: 0]- brave.exe (elevated True) 0x0
07:44:27.411A450333ProcessInjector::HandlePendingProccesssFail to inject pending process |37708|: brave.exe
07:44:27.411A450394ProcessInjector::HandleElevatedProcessFail injection to process [39652] [t: 0 w_t_id: 0]- brave.exe (elevated True) 0x0
07:44:27.411A450333ProcessInjector::HandlePendingProccesssFail to inject pending process |39652|: brave.exe
07:44:27.411A450394ProcessInjector::HandleElevatedProcessFail injection to process [42460] [t: 0 w_t_id: 0]- brave.exe (elevated True) 0x0
07:44:27.411A450333ProcessInjector::HandlePendingProccesssFail to inject pending process |42460|: brave.exe
07:44:34.406A450394ProcessInjector::HandleElevatedProcessFail injection to process [38780] [t: 0 w_t_id: 0]- brave.exe (elevated True) 0x0
07:44:34.407A450333ProcessInjector::HandlePendingProccesssFail to inject pending process |38780|: brave.exe
07:44:36.406A450394ProcessInjector::HandleElevatedProcessFail injection to process [42144] [t: 0 w_t_id: 0]- brave.exe (elevated True) 0x0
07:44:36.406A450333ProcessInjector::HandlePendingProccesssFail to inject pending process |42144|: brave.exe
07:44:44.404A450394ProcessInjector::HandleElevatedProcessFail injection to process [8948] [t: 0 w_t_id: 0]- brave.exe (elevated True) 0x0
07:44:44.404A450333ProcessInjector::HandlePendingProccesssFail to inject pending process |8948|: brave.exe
07:44:44.404A450394ProcessInjector::HandleElevatedProcessFail injection to process [17024] [t: 0 w_t_id: 0]- brave.exe (elevated True) 0x0
07:44:44.404A450333ProcessInjector::HandlePendingProccesssFail to inject pending process |17024|: brave.exe
07:44:48.402A450394ProcessInjector::HandleElevatedProcessFail injection to process [43728] [t: 0 w_t_id: 0]- brave.exe (elevated True) 0x0
07:44:48.402A450333ProcessInjector::HandlePendingProccesssFail to inject pending process |43728|: brave.exe
07:57:15.307A450394ProcessInjector::HandleElevatedProcessFail injection to process [42000] [t: 0 w_t_id: 0]- brave.exe (elevated True) 0x0
07:57:15.307A450333ProcessInjector::HandlePendingProccesssFail to inject pending process |42000|: brave.exe
07:57:37.298A450394ProcessInjector::HandleElevatedProcessFail injection to process [24204] [t: 0 w_t_id: 0]- brave.exe (elevated True) 0x0
07:57:37.298A450333ProcessInjector::HandlePendingProccesssFail to inject pending process |24204|: brave.exe
08:03:17.230A450394ProcessInjector::HandleElevatedProcessFail injection to process [29064] [t: 0 w_t_id: 0]- brave.exe (elevated True) 0x0
08:03:17.230A450333ProcessInjector::HandlePendingProccesssFail to inject pending process |29064|: brave.exe
08:06:53.221A450394ProcessInjector::HandleElevatedProcessFail injection to process [5168] [t: 0 w_t_id: 0]- brave.exe (elevated True) 0x0
08:06:53.222A450333ProcessInjector::HandlePendingProccesssFail to inject pending process |5168|: brave.exe
08:06:58.223A450394ProcessInjector::HandleElevatedProcessFail injection to process [12948] [t: 0 w_t_id: 0]- brave.exe (elevated True) 0x0
08:06:58.223A450333ProcessInjector::HandlePendingProccesssFail to inject pending process |12948|: brave.exe
08:11:45.228A450394ProcessInjector::HandleElevatedProcessFail injection to process [32128] [t: 0 w_t_id: 0]- brave.exe (elevated True) 0x0
08:11:45.228A450333ProcessInjector::HandlePendingProccesssFail to inject pending process |32128|: brave.exe
08:12:08.213A450394ProcessInjector::HandleElevatedProcessFail injection to process [34364] [t: 0 w_t_id: 0]- Adobe Spaces Helper.exe (elevated True) 0x0
08:12:08.213A450333ProcessInjector::HandlePendingProccesssFail to inject pending process |34364|: Adobe Spaces Helper.exe
08:12:08.213A450394ProcessInjector::HandleElevatedProcessFail injection to process [42320] [t: 0 w_t_id: 0]- Adobe Spaces Helper.exe (elevated True) 0x0
08:12:08.213A450333ProcessInjector::HandlePendingProccesssFail to inject pending process |42320|: Adobe Spaces Helper.exe
08:12:09.211A450394ProcessInjector::HandleElevatedProcessFail injection to process [36152] [t: 0 w_t_id: 0]- Adobe Spaces Helper.exe (elevated True) 0x0
08:12:09.211A450333ProcessInjector::HandlePendingProccesssFail to inject pending process |36152|: Adobe Spaces Helper.exe
08:12:11.210A450394ProcessInjector::HandleElevatedProcessFail injection to process [37768] [t: 0 w_t_id: 0]- CEPHtmlEngine.exe (elevated True) 0x0
08:12:11.210A450333ProcessInjector::HandlePendingProccesssFail to inject pending process |37768|: CEPHtmlEngine.exe
08:13:28.202A450394ProcessInjector::HandleElevatedProcessFail injection to process [37116] [t: 0 w_t_id: 0]- brave.exe (elevated True) 0x0
08:13:28.202A450333ProcessInjector::HandlePendingProccesssFail to inject pending process |37116|: brave.exe
08:15:27.176A450394ProcessInjector::HandleElevatedProcessFail injection to process [26676] [t: 0 w_t_id: 0]- dynamiclinkmanager.exe (elevated True) 0x0
08:15:27.176A450333ProcessInjector::HandlePendingProccesssFail to inject pending process |26676|: dynamiclinkmanager.exe
08:32:28.61A450394ProcessInjector::HandleElevatedProcessFail injection to process [14220] [t: 0 w_t_id: 0]- brave.exe (elevated True) 0x0
08:32:28.61A450333ProcessInjector::HandlePendingProccesssFail to inject pending process |14220|: brave.exe
08:33:01.55A450394ProcessInjector::HandleElevatedProcessFail injection to process [43776] [t: 0 w_t_id: 0]- brave.exe (elevated True) 0x0
08:33:01.55A450333ProcessInjector::HandlePendingProccesssFail to inject pending process |43776|: brave.exe
08:35:51.13A450394ProcessInjector::HandleElevatedProcessFail injection to process [31348] [t: 0 w_t_id: 0]- brave.exe (elevated True) 0x0
08:35:51.14A450333ProcessInjector::HandlePendingProccesssFail to inject pending process |31348|: brave.exe
08:35:56.12A450394ProcessInjector::HandleElevatedProcessFail injection to process [22844] [t: 0 w_t_id: 0]- brave.exe (elevated True) 0x0
08:35:56.12A450333ProcessInjector::HandlePendingProccesssFail to inject pending process |22844|: brave.exe
08:45:11.934A450394ProcessInjector::HandleElevatedProcessFail injection to process [46152] [t: 0 w_t_id: 0]- owobs-ffmpeg-mux.exe (elevated True) 0x0
08:45:11.934A450333ProcessInjector::HandlePendingProccesssFail to inject pending process |46152|: owobs-ffmpeg-mux.exe
08:50:30.950A450394ProcessInjector::HandleElevatedProcessFail injection to process [28832] [t: 0 w_t_id: 0]- owobs-ffmpeg-mux.exe (elevated True) 0x0
08:50:30.950A450333ProcessInjector::HandlePendingProccesssFail to inject pending process |28832|: owobs-ffmpeg-mux.exe
08:59:20.5481866ProcessesMonitor::Stopstopping PM...
08:59:20.547994119ProcessesMonitor::ProcessEnumerateThreadexit process listener
08:59:20.54818479ProcessInjector::Unhookunhook running process
08:59:26.5781866ProcessesMonitor::Stopstopping PM...