TimeThreadLineFunctionMessage
18:38:36.9598C0365ftw1Loading (pid: 24756)
18:38:36.95976FC147ProcessHardwareRecorder::CommandThreadstarting recorder thread
18:38:36.9608C048Update::DetectEnv (C:\WINDOWS\SYSTEM32\d3d11.dll) <0XBE2E0000>6|2|1247871722
18:38:36.9618C048Update::DetectEnv (C:\WINDOWS\SYSTEM32\dxgi.dll) <0XBED70000>6|2|1247871722
18:38:37.538C0172DXManager::DetectFound in 0
18:38:37.548C0209Initialize::GetLocation@ 0X4F80|20352
18:38:37.548C0209Initialize::GetLocation@ 0X69700|431872
18:38:37.548C0209Initialize::GetLocation@ 0X206F0|132848
18:38:37.548C0209Initialize::GetLocation@ 0X1DE0|7648
18:38:37.548C0111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0XBE2E0000 <> 0XBED70000
18:38:37.548C0209Initialize::GetLocation@ 0XFF698860|-9861024
18:38:37.548C0111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0XBE2E0000 <> 0XBED70000
18:38:37.548C0209Initialize::GetLocation@ 0XFF69DC30|-9839568
18:38:37.548C0111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0XBE2E0000 <> 0XBED70000
18:38:37.548C0209Initialize::GetLocation@ 0XFF69C5F0|-9845264
18:38:37.548C0111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0XBE2E0000 <> 0XBED70000
18:38:37.548C0209Initialize::GetLocation@ 0XFF57A7F0|-11032592
18:38:37.678C048Update::DetectEnv (C:\WINDOWS\SYSTEM32\d3d9.dll) <0XA8560000>6|2|1247871638
18:38:37.1868C0129DXManager::DetectOK
18:38:37.2228C0186DXManager::DetectDone
18:38:37.2228C0215VTableHolderD3d9::initd3d offsest [sht]: 0x4060 , 0x53c0
18:38:37.2238C0209Initialize::GetLocation@ 0X41B90|269200
18:38:37.2238C0209Initialize::GetLocation@ 0X33E20|212512
18:38:37.2238C0209Initialize::GetLocation@ 0X3D6C0|251584
18:38:37.2238C0209Initialize::GetLocation@ 0XB8E10|757264
18:38:37.2238C0209Initialize::GetLocation@ 0XB8960|756064
18:38:37.2238C0209Initialize::GetLocation@ 0XACF0|44272
18:38:37.2238C0209Initialize::GetLocation@ 0XB8A00|756224
18:38:37.2238C0209Initialize::GetLocation@ 0X1B6B0|112304
18:38:37.2238C0209Initialize::GetLocation@ 0X1E100|123136
18:38:37.2238C0209Initialize::GetLocation@ 0X26730|157488
18:38:37.2238C0209Initialize::GetLocation@ 0X1146B0|1132208
18:38:37.2238C0209Initialize::GetLocation@ 0X114170|1130864
18:38:37.2238C0209Initialize::GetLocation@ 0X1B5A0|112032
18:38:37.2238C0209Initialize::GetLocation@ 0X1B4B0|111792
18:38:37.2238C0209Initialize::GetLocation@ 0XD680|54912
18:38:37.2238C0209Initialize::GetLocation@ 0X493C0|299968
18:38:37.2238C0209Initialize::GetLocation@ 0XA860|43104
18:38:37.2238C0209Initialize::GetLocation@ 0XD0000|851968
18:38:37.2238C0209Initialize::GetLocation@ 0XD06D0|853712
18:38:37.2238C0209Initialize::GetLocation@ 0XA860|43104
18:38:37.2238C0209Initialize::GetLocation@ 0XD11C0|856512
18:38:37.2238C0209Initialize::GetLocation@ 0XD1820|858144
18:38:37.2448C048Update::DetectEnv (C:\WINDOWS\SYSTEM32\dinput.dll) <0X984C0000>6|2|1247870977
18:38:37.2578C083VTableHolderDInput::initm_pDIW->CreateDevice - succeded.
18:38:37.2588C0209Initialize::GetLocation@ 0X4040|16448
18:38:37.2588C0209Initialize::GetLocation@ 0X6410|25616
18:38:37.2588C0209Initialize::GetLocation@ 0X65C0|26048
18:38:37.2598C048Update::DetectEnv (C:\WINDOWS\SYSTEM32\dinput8.dll) <0X941C0000>6|2|1247870977
18:38:37.2718C093VTableHolderDInput8::initm_pDI8W->CreateDevice - succeded.
18:38:37.2728C0110VTableHolderDInput8::initm_pDI8A->CreateDevice - succeded.
18:38:37.2738C0209Initialize::GetLocation@ 0XA5D0|42448
18:38:37.2738C0209Initialize::GetLocation@ 0XD4D0|54480
18:38:37.2738C0209Initialize::GetLocation@ 0XD290|53904
18:38:37.3288C0225InterProcessElement::openInterProcess Overwolf_SHARED_MEMORY_2_2_84_12_24756 opened succesfuly
18:38:37.3288C072HookFunctionsTableInitializer::SetHookFunctionsDataD3D9 Sht offsets 0x4060 , 0x53c0
18:38:37.3288C0256InterProcessElement::closeInterProcess Overwolf_SHARED_MEMORY_2_2_84_12_24756 close 2147483647 bytes
18:38:37.3288C0301InjectOWExplorerExplorer file name [C:\Program Files (x86)\Overwolf\0.165.0.28\OWExplorer.dll]
18:38:37.3668C0389ftw1OWExplorer injected
18:38:37.36697E470Common::ProcessExplorer::ProcessTrackerIPCAgent::OnConnectedconnected to process tracker server
18:38:37.91389C451`anonymous-namespace'::CreateProviderInitialize provider: NET
18:38:37.91489C4117libprocess::NetworkTracer::Initializeinit res:0x5 [started:0 active:0 enbaled:0]
18:38:37.91489C454`anonymous-namespace'::CreateProviderFail to initlized provider: NET
18:38:37.91489C451`anonymous-namespace'::CreateProviderInitialize provider: GPU
18:38:37.9728CD8726ProcessInjector::InjectProcessprocess |mDNSResponder.exe| missing h
18:38:37.9728CD8726ProcessInjector::InjectProcessprocess |RzSDKServer.exe| missing h
18:38:37.9728CD8726ProcessInjector::InjectProcessprocess |RtWLan.exe| missing h
18:38:38.168CD8726ProcessInjector::InjectProcessprocess |Corsair.Service.CpuIdRemote64.exe| missing h
18:38:38.168CD8726ProcessInjector::InjectProcessprocess |Corsair.Service.DisplayAdapter.exe| missing h
18:38:38.1048CD8726ProcessInjector::InjectProcessprocess |GoogleCrashHandler.exe| missing h
18:38:38.1048CD8726ProcessInjector::InjectProcessprocess |GoogleCrashHandler64.exe| missing h
18:38:38.1048CD8726ProcessInjector::InjectProcessprocess |servicehost.exe| missing h
18:38:38.1048CD8726ProcessInjector::InjectProcessprocess |MfeAVSvc.exe| missing h
18:38:38.2368CD8726ProcessInjector::InjectProcessprocess |BrYNSvc.exe| missing h
18:38:38.2378CD8726ProcessInjector::InjectProcessprocess |HPCommRecovery.exe| missing h
18:38:38.2378CD8726ProcessInjector::InjectProcessprocess |HPJumpStartBridge.exe| missing h
18:38:38.2378CD8726ProcessInjector::InjectProcessprocess |IAStorDataMgrSvc.exe| missing h
18:38:38.2808CD8726ProcessInjector::InjectProcessprocess |nvfvsdksvc_x64.exe| missing h
18:38:38.2808CD8726ProcessInjector::InjectProcessprocess |PresentMon_x64.exe| missing h
18:41:08.3528CD8481ProcessInjector::HandleElevatedProcessFail injection to process [1412] [t: 0 w_t_id: 0]- EpicWebHelper.exe (elevated True) 0x0
18:41:08.3528CD8413ProcessInjector::HandlePendingProccesssFail to inject pending process |1412|: EpicWebHelper.exe
18:41:08.3528CD8481ProcessInjector::HandleElevatedProcessFail injection to process [3504] [t: 0 w_t_id: 0]- NVDisplay.Container.exe (elevated True) 0x0
18:41:08.3528CD8413ProcessInjector::HandlePendingProccesssFail to inject pending process |3504|: NVDisplay.Container.exe
18:41:08.3528CD8481ProcessInjector::HandleElevatedProcessFail injection to process [3564] [t: 0 w_t_id: 0]- PresentMon_x64.exe (elevated True) 0x0
18:41:08.3528CD8413ProcessInjector::HandlePendingProccesssFail to inject pending process |3564|: PresentMon_x64.exe
18:41:08.3528CD8481ProcessInjector::HandleElevatedProcessFail injection to process [4520] [t: 0 w_t_id: 0]- EpicWebHelper.exe (elevated True) 0x0
18:41:08.3528CD8413ProcessInjector::HandlePendingProccesssFail to inject pending process |4520|: EpicWebHelper.exe
18:41:08.3528CD8481ProcessInjector::HandleElevatedProcessFail injection to process [5920] [t: 0 w_t_id: 0]- mDNSResponder.exe (elevated True) 0x0
18:41:08.3528CD8413ProcessInjector::HandlePendingProccesssFail to inject pending process |5920|: mDNSResponder.exe
18:41:08.3528CD8481ProcessInjector::HandleElevatedProcessFail injection to process [5952] [t: 0 w_t_id: 0]- RzSDKServer.exe (elevated True) 0x0
18:41:08.3528CD8413ProcessInjector::HandlePendingProccesssFail to inject pending process |5952|: RzSDKServer.exe
18:41:08.3528CD8481ProcessInjector::HandleElevatedProcessFail injection to process [6112] [t: 0 w_t_id: 0]- nvcontainer.exe (elevated True) 0x0
18:41:08.3528CD8413ProcessInjector::HandlePendingProccesssFail to inject pending process |6112|: nvcontainer.exe
18:41:08.3528CD8481ProcessInjector::HandleElevatedProcessFail injection to process [8848] [t: 0 w_t_id: 0]- Corsair.Service.CpuIdRemote64.exe (elevated True) 0x0
18:41:08.3528CD8413ProcessInjector::HandlePendingProccesssFail to inject pending process |8848|: Corsair.Service.CpuIdRemote64.exe
18:41:08.3528CD8481ProcessInjector::HandleElevatedProcessFail injection to process [9076] [t: 0 w_t_id: 0]- Corsair.Service.DisplayAdapter.exe (elevated True) 0x0
18:41:08.3528CD8413ProcessInjector::HandlePendingProccesssFail to inject pending process |9076|: Corsair.Service.DisplayAdapter.exe
18:41:08.3528CD8481ProcessInjector::HandleElevatedProcessFail injection to process [10232] [t: 0 w_t_id: 0]- MfeAVSvc.exe (elevated True) 0x0
18:41:08.3528CD8413ProcessInjector::HandlePendingProccesssFail to inject pending process |10232|: MfeAVSvc.exe
18:41:08.3528CD8481ProcessInjector::HandleElevatedProcessFail injection to process [11276] [t: 0 w_t_id: 0]- GoogleCrashHandler.exe (elevated True) 0x0
18:41:08.3528CD8413ProcessInjector::HandlePendingProccesssFail to inject pending process |11276|: GoogleCrashHandler.exe
18:41:08.3528CD8481ProcessInjector::HandleElevatedProcessFail injection to process [11644] [t: 0 w_t_id: 0]- GoogleCrashHandler64.exe (elevated True) 0x0
18:41:08.3528CD8413ProcessInjector::HandlePendingProccesssFail to inject pending process |11644|: GoogleCrashHandler64.exe
18:41:08.3528CD8481ProcessInjector::HandleElevatedProcessFail injection to process [12712] [t: 0 w_t_id: 0]- servicehost.exe (elevated True) 0x0
18:41:08.3528CD8413ProcessInjector::HandlePendingProccesssFail to inject pending process |12712|: servicehost.exe
18:41:08.3528CD8481ProcessInjector::HandleElevatedProcessFail injection to process [13356] [t: 0 w_t_id: 0]- uihost.exe (elevated True) 0x0
18:41:08.3528CD8413ProcessInjector::HandlePendingProccesssFail to inject pending process |13356|: uihost.exe
18:41:08.3528CD8481ProcessInjector::HandleElevatedProcessFail injection to process [13632] [t: 0 w_t_id: 0]- HPJumpStartBridge.exe (elevated True) 0x0
18:41:08.3528CD8413ProcessInjector::HandlePendingProccesssFail to inject pending process |13632|: HPJumpStartBridge.exe
18:41:08.3528CD8481ProcessInjector::HandleElevatedProcessFail injection to process [14752] [t: 0 w_t_id: 0]- IAStorDataMgrSvc.exe (elevated True) 0x0
18:41:08.3528CD8413ProcessInjector::HandlePendingProccesssFail to inject pending process |14752|: IAStorDataMgrSvc.exe
18:41:08.3528CD8481ProcessInjector::HandleElevatedProcessFail injection to process [18144] [t: 0 w_t_id: 0]- BrYNSvc.exe (elevated True) 0x0
18:41:08.3528CD8413ProcessInjector::HandlePendingProccesssFail to inject pending process |18144|: BrYNSvc.exe
18:41:08.3528CD8481ProcessInjector::HandleElevatedProcessFail injection to process [18476] [t: 0 w_t_id: 0]- HPCommRecovery.exe (elevated True) 0x0
18:41:08.3528CD8413ProcessInjector::HandlePendingProccesssFail to inject pending process |18476|: HPCommRecovery.exe
18:41:08.3528CD8481ProcessInjector::HandleElevatedProcessFail injection to process [22812] [t: 0 w_t_id: 0]- MsMpEng.exe (elevated True) 0x0
18:41:08.3528CD8413ProcessInjector::HandlePendingProccesssFail to inject pending process |22812|: MsMpEng.exe
18:41:08.3528CD8481ProcessInjector::HandleElevatedProcessFail injection to process [26208] [t: 0 w_t_id: 0]- nvfvsdksvc_x64.exe (elevated True) 0x0
18:41:08.3528CD8413ProcessInjector::HandlePendingProccesssFail to inject pending process |26208|: nvfvsdksvc_x64.exe
18:41:08.3528CD8481ProcessInjector::HandleElevatedProcessFail injection to process [33008] [t: 0 w_t_id: 0]- EpicWebHelper.exe (elevated True) 0x0
18:41:08.3528CD8413ProcessInjector::HandlePendingProccesssFail to inject pending process |33008|: EpicWebHelper.exe
18:41:09.3538CD8481ProcessInjector::HandleElevatedProcessFail injection to process [31084] [t: 0 w_t_id: 0]- NVIDIA Share.exe (elevated True) 0x0
18:41:09.3538CD8413ProcessInjector::HandlePendingProccesssFail to inject pending process |31084|: NVIDIA Share.exe
18:41:09.3538CD8481ProcessInjector::HandleElevatedProcessFail injection to process [35480] [t: 0 w_t_id: 0]- NVIDIA Share.exe (elevated True) 0x0
18:41:09.3538CD8413ProcessInjector::HandlePendingProccesssFail to inject pending process |35480|: NVIDIA Share.exe
18:41:16.3528CD8481ProcessInjector::HandleElevatedProcessFail injection to process [39000] [t: 0 w_t_id: 0]- curseforge.exe (elevated True) 0x0
18:41:16.3528CD8413ProcessInjector::HandlePendingProccesssFail to inject pending process |39000|: curseforge.exe
18:45:09.3328CD8726ProcessInjector::InjectProcessprocess |EasyAntiCheat.exe| missing h
18:47:39.3268CD8481ProcessInjector::HandleElevatedProcessFail injection to process [39796] [t: 0 w_t_id: 0]- EasyAntiCheat.exe (elevated True) 0x0
18:47:39.3268CD8413ProcessInjector::HandlePendingProccesssFail to inject pending process |39796|: EasyAntiCheat.exe
18:47:49.3258CD8481ProcessInjector::HandleElevatedProcessFail injection to process [32008] [t: 0 w_t_id: 0]- UnityCrashHandler64.exe (elevated True) 0x0
18:47:49.3258CD8413ProcessInjector::HandlePendingProccesssFail to inject pending process |32008|: UnityCrashHandler64.exe
19:33:31.3648CD8726ProcessInjector::InjectProcessprocess |MicrosoftEdgeUpdate.exe| missing h
19:53:46.4138CD8726ProcessInjector::InjectProcessprocess |GoogleUpdate.exe| missing h
19:53:46.4138CD8726ProcessInjector::InjectProcessprocess |GoogleUpdate.exe| missing h
20:43:05.6358CD8726ProcessInjector::InjectProcessprocess |mcupdate.exe| missing h
20:45:35.6458CD8481ProcessInjector::HandleElevatedProcessFail injection to process [37380] [t: 0 w_t_id: 0]- mcupdate.exe (elevated True) 0x0
20:45:35.6458CD8413ProcessInjector::HandlePendingProccesssFail to inject pending process |37380|: mcupdate.exe