Time | Thread | Line | Function | Message |
18:38:36.959 | 8C0 | 365 | ftw1 | Loading (pid: 24756) |
18:38:36.959 | 76FC | 147 | ProcessHardwareRecorder::CommandThread | starting recorder thread |
18:38:36.960 | 8C0 | 48 | Update::Detect | Env (C:\WINDOWS\SYSTEM32\d3d11.dll) <0XBE2E0000>6|2|1247871722 |
18:38:36.961 | 8C0 | 48 | Update::Detect | Env (C:\WINDOWS\SYSTEM32\dxgi.dll) <0XBED70000>6|2|1247871722 |
18:38:37.53 | 8C0 | 172 | DXManager::Detect | Found in 0 |
18:38:37.54 | 8C0 | 209 | Initialize::GetLocation | @ 0X4F80|20352 |
18:38:37.54 | 8C0 | 209 | Initialize::GetLocation | @ 0X69700|431872 |
18:38:37.54 | 8C0 | 209 | Initialize::GetLocation | @ 0X206F0|132848 |
18:38:37.54 | 8C0 | 209 | Initialize::GetLocation | @ 0X1DE0|7648 |
18:38:37.54 | 8C0 | 111 | Update::Caught | C:\WINDOWS\SYSTEM32\d3d11.dll|0XBE2E0000 <> 0XBED70000 |
18:38:37.54 | 8C0 | 209 | Initialize::GetLocation | @ 0XFF698860|-9861024 |
18:38:37.54 | 8C0 | 111 | Update::Caught | C:\WINDOWS\SYSTEM32\d3d11.dll|0XBE2E0000 <> 0XBED70000 |
18:38:37.54 | 8C0 | 209 | Initialize::GetLocation | @ 0XFF69DC30|-9839568 |
18:38:37.54 | 8C0 | 111 | Update::Caught | C:\WINDOWS\SYSTEM32\d3d11.dll|0XBE2E0000 <> 0XBED70000 |
18:38:37.54 | 8C0 | 209 | Initialize::GetLocation | @ 0XFF69C5F0|-9845264 |
18:38:37.54 | 8C0 | 111 | Update::Caught | C:\WINDOWS\SYSTEM32\d3d11.dll|0XBE2E0000 <> 0XBED70000 |
18:38:37.54 | 8C0 | 209 | Initialize::GetLocation | @ 0XFF57A7F0|-11032592 |
18:38:37.67 | 8C0 | 48 | Update::Detect | Env (C:\WINDOWS\SYSTEM32\d3d9.dll) <0XA8560000>6|2|1247871638 |
18:38:37.186 | 8C0 | 129 | DXManager::Detect | OK |
18:38:37.222 | 8C0 | 186 | DXManager::Detect | Done |
18:38:37.222 | 8C0 | 215 | VTableHolderD3d9::init | d3d offsest [sht]: 0x4060 , 0x53c0 |
18:38:37.223 | 8C0 | 209 | Initialize::GetLocation | @ 0X41B90|269200 |
18:38:37.223 | 8C0 | 209 | Initialize::GetLocation | @ 0X33E20|212512 |
18:38:37.223 | 8C0 | 209 | Initialize::GetLocation | @ 0X3D6C0|251584 |
18:38:37.223 | 8C0 | 209 | Initialize::GetLocation | @ 0XB8E10|757264 |
18:38:37.223 | 8C0 | 209 | Initialize::GetLocation | @ 0XB8960|756064 |
18:38:37.223 | 8C0 | 209 | Initialize::GetLocation | @ 0XACF0|44272 |
18:38:37.223 | 8C0 | 209 | Initialize::GetLocation | @ 0XB8A00|756224 |
18:38:37.223 | 8C0 | 209 | Initialize::GetLocation | @ 0X1B6B0|112304 |
18:38:37.223 | 8C0 | 209 | Initialize::GetLocation | @ 0X1E100|123136 |
18:38:37.223 | 8C0 | 209 | Initialize::GetLocation | @ 0X26730|157488 |
18:38:37.223 | 8C0 | 209 | Initialize::GetLocation | @ 0X1146B0|1132208 |
18:38:37.223 | 8C0 | 209 | Initialize::GetLocation | @ 0X114170|1130864 |
18:38:37.223 | 8C0 | 209 | Initialize::GetLocation | @ 0X1B5A0|112032 |
18:38:37.223 | 8C0 | 209 | Initialize::GetLocation | @ 0X1B4B0|111792 |
18:38:37.223 | 8C0 | 209 | Initialize::GetLocation | @ 0XD680|54912 |
18:38:37.223 | 8C0 | 209 | Initialize::GetLocation | @ 0X493C0|299968 |
18:38:37.223 | 8C0 | 209 | Initialize::GetLocation | @ 0XA860|43104 |
18:38:37.223 | 8C0 | 209 | Initialize::GetLocation | @ 0XD0000|851968 |
18:38:37.223 | 8C0 | 209 | Initialize::GetLocation | @ 0XD06D0|853712 |
18:38:37.223 | 8C0 | 209 | Initialize::GetLocation | @ 0XA860|43104 |
18:38:37.223 | 8C0 | 209 | Initialize::GetLocation | @ 0XD11C0|856512 |
18:38:37.223 | 8C0 | 209 | Initialize::GetLocation | @ 0XD1820|858144 |
18:38:37.244 | 8C0 | 48 | Update::Detect | Env (C:\WINDOWS\SYSTEM32\dinput.dll) <0X984C0000>6|2|1247870977 |
18:38:37.257 | 8C0 | 83 | VTableHolderDInput::init | m_pDIW->CreateDevice - succeded. |
18:38:37.258 | 8C0 | 209 | Initialize::GetLocation | @ 0X4040|16448 |
18:38:37.258 | 8C0 | 209 | Initialize::GetLocation | @ 0X6410|25616 |
18:38:37.258 | 8C0 | 209 | Initialize::GetLocation | @ 0X65C0|26048 |
18:38:37.259 | 8C0 | 48 | Update::Detect | Env (C:\WINDOWS\SYSTEM32\dinput8.dll) <0X941C0000>6|2|1247870977 |
18:38:37.271 | 8C0 | 93 | VTableHolderDInput8::init | m_pDI8W->CreateDevice - succeded. |
18:38:37.272 | 8C0 | 110 | VTableHolderDInput8::init | m_pDI8A->CreateDevice - succeded. |
18:38:37.273 | 8C0 | 209 | Initialize::GetLocation | @ 0XA5D0|42448 |
18:38:37.273 | 8C0 | 209 | Initialize::GetLocation | @ 0XD4D0|54480 |
18:38:37.273 | 8C0 | 209 | Initialize::GetLocation | @ 0XD290|53904 |
18:38:37.328 | 8C0 | 225 | InterProcessElement::open | InterProcess Overwolf_SHARED_MEMORY_2_2_84_12_24756 opened succesfuly |
18:38:37.328 | 8C0 | 72 | HookFunctionsTableInitializer::SetHookFunctionsData | D3D9 Sht offsets 0x4060 , 0x53c0 |
18:38:37.328 | 8C0 | 256 | InterProcessElement::close | InterProcess Overwolf_SHARED_MEMORY_2_2_84_12_24756 close 2147483647 bytes |
18:38:37.328 | 8C0 | 301 | InjectOWExplorer | Explorer file name [C:\Program Files (x86)\Overwolf\0.165.0.28\OWExplorer.dll] |
18:38:37.366 | 8C0 | 389 | ftw1 | OWExplorer injected |
18:38:37.366 | 97E4 | 70 | Common::ProcessExplorer::ProcessTrackerIPCAgent::OnConnected | connected to process tracker server |
18:38:37.913 | 89C4 | 51 | `anonymous-namespace'::CreateProvider | Initialize provider: NET |
18:38:37.914 | 89C4 | 117 | libprocess::NetworkTracer::Initialize | init res:0x5 [started:0 active:0 enbaled:0] |
18:38:37.914 | 89C4 | 54 | `anonymous-namespace'::CreateProvider | Fail to initlized provider: NET |
18:38:37.914 | 89C4 | 51 | `anonymous-namespace'::CreateProvider | Initialize provider: GPU |
18:38:37.972 | 8CD8 | 726 | ProcessInjector::InjectProcess | process |mDNSResponder.exe| missing h |
18:38:37.972 | 8CD8 | 726 | ProcessInjector::InjectProcess | process |RzSDKServer.exe| missing h |
18:38:37.972 | 8CD8 | 726 | ProcessInjector::InjectProcess | process |RtWLan.exe| missing h |
18:38:38.16 | 8CD8 | 726 | ProcessInjector::InjectProcess | process |Corsair.Service.CpuIdRemote64.exe| missing h |
18:38:38.16 | 8CD8 | 726 | ProcessInjector::InjectProcess | process |Corsair.Service.DisplayAdapter.exe| missing h |
18:38:38.104 | 8CD8 | 726 | ProcessInjector::InjectProcess | process |GoogleCrashHandler.exe| missing h |
18:38:38.104 | 8CD8 | 726 | ProcessInjector::InjectProcess | process |GoogleCrashHandler64.exe| missing h |
18:38:38.104 | 8CD8 | 726 | ProcessInjector::InjectProcess | process |servicehost.exe| missing h |
18:38:38.104 | 8CD8 | 726 | ProcessInjector::InjectProcess | process |MfeAVSvc.exe| missing h |
18:38:38.236 | 8CD8 | 726 | ProcessInjector::InjectProcess | process |BrYNSvc.exe| missing h |
18:38:38.237 | 8CD8 | 726 | ProcessInjector::InjectProcess | process |HPCommRecovery.exe| missing h |
18:38:38.237 | 8CD8 | 726 | ProcessInjector::InjectProcess | process |HPJumpStartBridge.exe| missing h |
18:38:38.237 | 8CD8 | 726 | ProcessInjector::InjectProcess | process |IAStorDataMgrSvc.exe| missing h |
18:38:38.280 | 8CD8 | 726 | ProcessInjector::InjectProcess | process |nvfvsdksvc_x64.exe| missing h |
18:38:38.280 | 8CD8 | 726 | ProcessInjector::InjectProcess | process |PresentMon_x64.exe| missing h |
18:41:08.352 | 8CD8 | 481 | ProcessInjector::HandleElevatedProcess | Fail injection to process [1412] [t: 0 w_t_id: 0]- EpicWebHelper.exe (elevated True) 0x0 |
18:41:08.352 | 8CD8 | 413 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |1412|: EpicWebHelper.exe |
18:41:08.352 | 8CD8 | 481 | ProcessInjector::HandleElevatedProcess | Fail injection to process [3504] [t: 0 w_t_id: 0]- NVDisplay.Container.exe (elevated True) 0x0 |
18:41:08.352 | 8CD8 | 413 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |3504|: NVDisplay.Container.exe |
18:41:08.352 | 8CD8 | 481 | ProcessInjector::HandleElevatedProcess | Fail injection to process [3564] [t: 0 w_t_id: 0]- PresentMon_x64.exe (elevated True) 0x0 |
18:41:08.352 | 8CD8 | 413 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |3564|: PresentMon_x64.exe |
18:41:08.352 | 8CD8 | 481 | ProcessInjector::HandleElevatedProcess | Fail injection to process [4520] [t: 0 w_t_id: 0]- EpicWebHelper.exe (elevated True) 0x0 |
18:41:08.352 | 8CD8 | 413 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |4520|: EpicWebHelper.exe |
18:41:08.352 | 8CD8 | 481 | ProcessInjector::HandleElevatedProcess | Fail injection to process [5920] [t: 0 w_t_id: 0]- mDNSResponder.exe (elevated True) 0x0 |
18:41:08.352 | 8CD8 | 413 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |5920|: mDNSResponder.exe |
18:41:08.352 | 8CD8 | 481 | ProcessInjector::HandleElevatedProcess | Fail injection to process [5952] [t: 0 w_t_id: 0]- RzSDKServer.exe (elevated True) 0x0 |
18:41:08.352 | 8CD8 | 413 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |5952|: RzSDKServer.exe |
18:41:08.352 | 8CD8 | 481 | ProcessInjector::HandleElevatedProcess | Fail injection to process [6112] [t: 0 w_t_id: 0]- nvcontainer.exe (elevated True) 0x0 |
18:41:08.352 | 8CD8 | 413 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |6112|: nvcontainer.exe |
18:41:08.352 | 8CD8 | 481 | ProcessInjector::HandleElevatedProcess | Fail injection to process [8848] [t: 0 w_t_id: 0]- Corsair.Service.CpuIdRemote64.exe (elevated True) 0x0 |
18:41:08.352 | 8CD8 | 413 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |8848|: Corsair.Service.CpuIdRemote64.exe |
18:41:08.352 | 8CD8 | 481 | ProcessInjector::HandleElevatedProcess | Fail injection to process [9076] [t: 0 w_t_id: 0]- Corsair.Service.DisplayAdapter.exe (elevated True) 0x0 |
18:41:08.352 | 8CD8 | 413 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |9076|: Corsair.Service.DisplayAdapter.exe |
18:41:08.352 | 8CD8 | 481 | ProcessInjector::HandleElevatedProcess | Fail injection to process [10232] [t: 0 w_t_id: 0]- MfeAVSvc.exe (elevated True) 0x0 |
18:41:08.352 | 8CD8 | 413 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |10232|: MfeAVSvc.exe |
18:41:08.352 | 8CD8 | 481 | ProcessInjector::HandleElevatedProcess | Fail injection to process [11276] [t: 0 w_t_id: 0]- GoogleCrashHandler.exe (elevated True) 0x0 |
18:41:08.352 | 8CD8 | 413 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |11276|: GoogleCrashHandler.exe |
18:41:08.352 | 8CD8 | 481 | ProcessInjector::HandleElevatedProcess | Fail injection to process [11644] [t: 0 w_t_id: 0]- GoogleCrashHandler64.exe (elevated True) 0x0 |
18:41:08.352 | 8CD8 | 413 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |11644|: GoogleCrashHandler64.exe |
18:41:08.352 | 8CD8 | 481 | ProcessInjector::HandleElevatedProcess | Fail injection to process [12712] [t: 0 w_t_id: 0]- servicehost.exe (elevated True) 0x0 |
18:41:08.352 | 8CD8 | 413 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |12712|: servicehost.exe |
18:41:08.352 | 8CD8 | 481 | ProcessInjector::HandleElevatedProcess | Fail injection to process [13356] [t: 0 w_t_id: 0]- uihost.exe (elevated True) 0x0 |
18:41:08.352 | 8CD8 | 413 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |13356|: uihost.exe |
18:41:08.352 | 8CD8 | 481 | ProcessInjector::HandleElevatedProcess | Fail injection to process [13632] [t: 0 w_t_id: 0]- HPJumpStartBridge.exe (elevated True) 0x0 |
18:41:08.352 | 8CD8 | 413 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |13632|: HPJumpStartBridge.exe |
18:41:08.352 | 8CD8 | 481 | ProcessInjector::HandleElevatedProcess | Fail injection to process [14752] [t: 0 w_t_id: 0]- IAStorDataMgrSvc.exe (elevated True) 0x0 |
18:41:08.352 | 8CD8 | 413 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |14752|: IAStorDataMgrSvc.exe |
18:41:08.352 | 8CD8 | 481 | ProcessInjector::HandleElevatedProcess | Fail injection to process [18144] [t: 0 w_t_id: 0]- BrYNSvc.exe (elevated True) 0x0 |
18:41:08.352 | 8CD8 | 413 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |18144|: BrYNSvc.exe |
18:41:08.352 | 8CD8 | 481 | ProcessInjector::HandleElevatedProcess | Fail injection to process [18476] [t: 0 w_t_id: 0]- HPCommRecovery.exe (elevated True) 0x0 |
18:41:08.352 | 8CD8 | 413 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |18476|: HPCommRecovery.exe |
18:41:08.352 | 8CD8 | 481 | ProcessInjector::HandleElevatedProcess | Fail injection to process [22812] [t: 0 w_t_id: 0]- MsMpEng.exe (elevated True) 0x0 |
18:41:08.352 | 8CD8 | 413 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |22812|: MsMpEng.exe |
18:41:08.352 | 8CD8 | 481 | ProcessInjector::HandleElevatedProcess | Fail injection to process [26208] [t: 0 w_t_id: 0]- nvfvsdksvc_x64.exe (elevated True) 0x0 |
18:41:08.352 | 8CD8 | 413 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |26208|: nvfvsdksvc_x64.exe |
18:41:08.352 | 8CD8 | 481 | ProcessInjector::HandleElevatedProcess | Fail injection to process [33008] [t: 0 w_t_id: 0]- EpicWebHelper.exe (elevated True) 0x0 |
18:41:08.352 | 8CD8 | 413 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |33008|: EpicWebHelper.exe |
18:41:09.353 | 8CD8 | 481 | ProcessInjector::HandleElevatedProcess | Fail injection to process [31084] [t: 0 w_t_id: 0]- NVIDIA Share.exe (elevated True) 0x0 |
18:41:09.353 | 8CD8 | 413 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |31084|: NVIDIA Share.exe |
18:41:09.353 | 8CD8 | 481 | ProcessInjector::HandleElevatedProcess | Fail injection to process [35480] [t: 0 w_t_id: 0]- NVIDIA Share.exe (elevated True) 0x0 |
18:41:09.353 | 8CD8 | 413 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |35480|: NVIDIA Share.exe |
18:41:16.352 | 8CD8 | 481 | ProcessInjector::HandleElevatedProcess | Fail injection to process [39000] [t: 0 w_t_id: 0]- curseforge.exe (elevated True) 0x0 |
18:41:16.352 | 8CD8 | 413 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |39000|: curseforge.exe |
18:45:09.332 | 8CD8 | 726 | ProcessInjector::InjectProcess | process |EasyAntiCheat.exe| missing h |
18:47:39.326 | 8CD8 | 481 | ProcessInjector::HandleElevatedProcess | Fail injection to process [39796] [t: 0 w_t_id: 0]- EasyAntiCheat.exe (elevated True) 0x0 |
18:47:39.326 | 8CD8 | 413 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |39796|: EasyAntiCheat.exe |
18:47:49.325 | 8CD8 | 481 | ProcessInjector::HandleElevatedProcess | Fail injection to process [32008] [t: 0 w_t_id: 0]- UnityCrashHandler64.exe (elevated True) 0x0 |
18:47:49.325 | 8CD8 | 413 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |32008|: UnityCrashHandler64.exe |
19:33:31.364 | 8CD8 | 726 | ProcessInjector::InjectProcess | process |MicrosoftEdgeUpdate.exe| missing h |
19:53:46.413 | 8CD8 | 726 | ProcessInjector::InjectProcess | process |GoogleUpdate.exe| missing h |
19:53:46.413 | 8CD8 | 726 | ProcessInjector::InjectProcess | process |GoogleUpdate.exe| missing h |
20:43:05.635 | 8CD8 | 726 | ProcessInjector::InjectProcess | process |mcupdate.exe| missing h |
20:45:35.645 | 8CD8 | 481 | ProcessInjector::HandleElevatedProcess | Fail injection to process [37380] [t: 0 w_t_id: 0]- mcupdate.exe (elevated True) 0x0 |
20:45:35.645 | 8CD8 | 413 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |37380|: mcupdate.exe |