TimeThreadLineFunctionMessage
16:22:52.1853278363ftw1Loading (pid: 9272)
16:22:52.1851F90146ProcessHardwareRecorder::CommandThreadstarting recorder thread
16:22:52.187327848Update::DetectEnv (C:\WINDOWS\SYSTEM32\d3d11.dll) <0XA5F30000>6|2|1245708289
16:22:52.188327848Update::DetectEnv (C:\WINDOWS\SYSTEM32\dxgi.dll) <0XA81D0000>6|2|1245708289
16:22:52.2963278169DXManager::DetectFound in 0
16:22:52.2963278209Initialize::GetLocation@ 0X5240|21056
16:22:52.2963278209Initialize::GetLocation@ 0X788C0|493760
16:22:52.2963278209Initialize::GetLocation@ 0XECA0|60576
16:22:52.2963278209Initialize::GetLocation@ 0X1470|5232
16:22:52.2963278111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0XA5F30000 <> 0XA81D0000
16:22:52.2963278209Initialize::GetLocation@ 0XFDE88850|-35092400
16:22:52.2963278111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0XA5F30000 <> 0XA81D0000
16:22:52.2963278209Initialize::GetLocation@ 0XFDE8DE80|-35070336
16:22:52.2963278111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0XA5F30000 <> 0XA81D0000
16:22:52.2963278209Initialize::GetLocation@ 0XFDE8C5E0|-35076640
16:22:52.2963278111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0XA5F30000 <> 0XA81D0000
16:22:52.2963278209Initialize::GetLocation@ 0XFDD6A7F0|-36263952
16:22:52.315327848Update::DetectEnv (C:\WINDOWS\SYSTEM32\d3d9.dll) <0X8E340000>6|2|1245708289
16:22:52.4623278128DXManager::DetectOK
16:22:52.5203278185DXManager::DetectDone
16:22:52.5213278214VTableHolderD3d9::initd3d offsest [sht]: 0x4060 , 0x53c0
16:22:52.5223278209Initialize::GetLocation@ 0X3FC00|261120
16:22:52.5223278209Initialize::GetLocation@ 0X33840|211008
16:22:52.5223278209Initialize::GetLocation@ 0X3BFA0|245664
16:22:52.5223278209Initialize::GetLocation@ 0XB70D0|749776
16:22:52.5223278209Initialize::GetLocation@ 0XB6C20|748576
16:22:52.5223278209Initialize::GetLocation@ 0XAF40|44864
16:22:52.5223278209Initialize::GetLocation@ 0XB6CC0|748736
16:22:52.5223278209Initialize::GetLocation@ 0X20C40|134208
16:22:52.5223278209Initialize::GetLocation@ 0X16A10|92688
16:22:52.5223278209Initialize::GetLocation@ 0X2D530|185648
16:22:52.5223278209Initialize::GetLocation@ 0X113340|1127232
16:22:52.5223278209Initialize::GetLocation@ 0X112E00|1125888
16:22:52.5223278209Initialize::GetLocation@ 0X20B30|133936
16:22:52.5223278209Initialize::GetLocation@ 0X20A40|133696
16:22:52.5223278209Initialize::GetLocation@ 0XD8D0|55504
16:22:52.5223278209Initialize::GetLocation@ 0X466A0|288416
16:22:52.5223278209Initialize::GetLocation@ 0XAAB0|43696
16:22:52.5223278209Initialize::GetLocation@ 0XCE2C0|844480
16:22:52.5223278209Initialize::GetLocation@ 0XCE990|846224
16:22:52.5223278209Initialize::GetLocation@ 0XAAB0|43696
16:22:52.5223278209Initialize::GetLocation@ 0XCF480|849024
16:22:52.5223278209Initialize::GetLocation@ 0XCFAE0|850656
16:22:52.564327848Update::DetectEnv (C:\WINDOWS\SYSTEM32\dinput.dll) <0X82450000>6|2|1245708289
16:22:52.582327883VTableHolderDInput::initm_pDIW->CreateDevice - succeded.
16:22:52.5823278209Initialize::GetLocation@ 0X4040|16448
16:22:52.5823278209Initialize::GetLocation@ 0X6410|25616
16:22:52.5823278209Initialize::GetLocation@ 0X65C0|26048
16:22:52.583327848Update::DetectEnv (C:\WINDOWS\SYSTEM32\dinput8.dll) <0X7C740000>6|2|1245708289
16:22:52.599327891VTableHolderDInput8::initm_pDI8W->CreateDevice - succeded.
16:22:52.6003278108VTableHolderDInput8::initm_pDI8A->CreateDevice - succeded.
16:22:52.6003278209Initialize::GetLocation@ 0XA600|42496
16:22:52.6003278209Initialize::GetLocation@ 0XD500|54528
16:22:52.6003278209Initialize::GetLocation@ 0XD2C0|53952
16:22:52.6693278225InterProcessElement::openInterProcess Overwolf_SHARED_MEMORY_2_2_73_6_9272 opened succesfuly
16:22:52.669327872HookFunctionsTableInitializer::SetHookFunctionsDataD3D9 Sht offsets 0x4060 , 0x53c0
16:22:52.6693278256InterProcessElement::closeInterProcess Overwolf_SHARED_MEMORY_2_2_73_6_9272 close 2147483647 bytes
16:22:52.6693278299InjectOWExplorerExplorer file name [C:\Program Files (x86)\Overwolf\0.135.0.24\OWExplorer.dll]
16:22:52.7313278387ftw1OWExplorer injected
16:22:54.105357C51`anonymous-namespace'::CreateProviderInitialize provider: NET
16:22:54.105357C117libprocess::NetworkTracer::Initializeinit res:0x5 [started:0 active:0 enbaled:0]
16:22:54.105357C54`anonymous-namespace'::CreateProviderFail to initlized provider: NET
16:22:54.105357C51`anonymous-namespace'::CreateProviderInitialize provider: GPU
16:25:24.1481440349ProcessInjector::HandleElevatedProcessFail injection to process [3304] [t: 0 w_t_id: 0]- nvcontainer.exe (elevated True) 0x1f
16:25:24.1481440288ProcessInjector::HandlePendingProccesssFail to inject pending process |3304|: nvcontainer.exe
16:25:24.1481440349ProcessInjector::HandleElevatedProcessFail injection to process [3464] [t: 0 w_t_id: 0]- NvTelemetryContainer.exe (elevated True) 0x1f
16:25:24.1481440288ProcessInjector::HandlePendingProccesssFail to inject pending process |3464|: NvTelemetryContainer.exe
16:25:24.1491440349ProcessInjector::HandleElevatedProcessFail injection to process [3632] [t: 0 w_t_id: 0]- NVDisplay.Container.exe (elevated True) 0x1f
16:25:24.1491440288ProcessInjector::HandlePendingProccesssFail to inject pending process |3632|: NVDisplay.Container.exe
16:25:24.1491440349ProcessInjector::HandleElevatedProcessFail injection to process [6056] [t: 0 w_t_id: 0]- MsMpEng.exe (elevated True) 0x1f
16:25:24.1491440288ProcessInjector::HandlePendingProccesssFail to inject pending process |6056|: MsMpEng.exe
16:25:25.1501440349ProcessInjector::HandleElevatedProcessFail injection to process [2884] [t: 0 w_t_id: 0]- ssh-agent.exe (elevated True) 0x1f
16:25:25.1501440288ProcessInjector::HandlePendingProccesssFail to inject pending process |2884|: ssh-agent.exe
16:25:25.1501440349ProcessInjector::HandleElevatedProcessFail injection to process [3604] [t: 0 w_t_id: 0]- ssh-agent (elevated True) 0x1f
16:25:25.1501440288ProcessInjector::HandlePendingProccesssFail to inject pending process |3604|: ssh-agent
16:25:25.1501440349ProcessInjector::HandleElevatedProcessFail injection to process [4672] [t: 0 w_t_id: 0]- bash (elevated True) 0x1f
16:25:25.1501440288ProcessInjector::HandlePendingProccesssFail to inject pending process |4672|: bash
16:25:25.1501440349ProcessInjector::HandleElevatedProcessFail injection to process [5416] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x1f
16:25:25.1501440288ProcessInjector::HandlePendingProccesssFail to inject pending process |5416|: firefox.exe
16:25:25.1501440349ProcessInjector::HandleElevatedProcessFail injection to process [6612] [t: 0 w_t_id: 0]- ssh-agent (elevated True) 0x1f
16:25:25.1501440288ProcessInjector::HandlePendingProccesssFail to inject pending process |6612|: ssh-agent
16:25:25.1501440349ProcessInjector::HandleElevatedProcessFail injection to process [6732] [t: 0 w_t_id: 0]- plugin_host.exe (elevated True) 0x1f
16:25:25.1501440288ProcessInjector::HandlePendingProccesssFail to inject pending process |6732|: plugin_host.exe
16:25:25.1501440349ProcessInjector::HandleElevatedProcessFail injection to process [6760] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x1f
16:25:25.1501440288ProcessInjector::HandlePendingProccesssFail to inject pending process |6760|: firefox.exe
16:25:25.1501440349ProcessInjector::HandleElevatedProcessFail injection to process [6888] [t: 0 w_t_id: 0]- ssh-agent (elevated True) 0x1f
16:25:25.1501440288ProcessInjector::HandlePendingProccesssFail to inject pending process |6888|: ssh-agent
16:25:25.1501440349ProcessInjector::HandleElevatedProcessFail injection to process [8956] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x1f
16:25:25.1501440288ProcessInjector::HandlePendingProccesssFail to inject pending process |8956|: firefox.exe
16:25:25.1501440349ProcessInjector::HandleElevatedProcessFail injection to process [10544] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x1f
16:25:25.1501440288ProcessInjector::HandlePendingProccesssFail to inject pending process |10544|: firefox.exe
16:25:25.1501440349ProcessInjector::HandleElevatedProcessFail injection to process [13732] [t: 0 w_t_id: 0]- bash (elevated True) 0x1f
16:25:25.1501440288ProcessInjector::HandlePendingProccesssFail to inject pending process |13732|: bash
16:25:25.1501440349ProcessInjector::HandleElevatedProcessFail injection to process [14644] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x1f
16:25:25.1501440288ProcessInjector::HandlePendingProccesssFail to inject pending process |14644|: firefox.exe
16:25:25.1501440349ProcessInjector::HandleElevatedProcessFail injection to process [14972] [t: 0 w_t_id: 0]- init (elevated True) 0x1f
16:25:25.1501440288ProcessInjector::HandlePendingProccesssFail to inject pending process |14972|: init
16:25:25.1501440349ProcessInjector::HandleElevatedProcessFail injection to process [15624] [t: 0 w_t_id: 0]- init (elevated True) 0x1f
16:25:25.1501440288ProcessInjector::HandlePendingProccesssFail to inject pending process |15624|: init
16:26:11.4851440349ProcessInjector::HandleElevatedProcessFail injection to process [13612] [t: 0 w_t_id: 0]- java (elevated True) 0x1f
16:26:11.4851440288ProcessInjector::HandlePendingProccesssFail to inject pending process |13612|: java
16:33:57.9271440349ProcessInjector::HandleElevatedProcessFail injection to process [10784] [t: 0 w_t_id: 0]- init (elevated True) 0x1f
16:33:57.9271440288ProcessInjector::HandlePendingProccesssFail to inject pending process |10784|: init
16:33:57.9271440349ProcessInjector::HandleElevatedProcessFail injection to process [12588] [t: 0 w_t_id: 0]- bash (elevated True) 0x1f
16:33:57.9271440288ProcessInjector::HandlePendingProccesssFail to inject pending process |12588|: bash
16:34:07.9981440349ProcessInjector::HandleElevatedProcessFail injection to process [420] [t: 0 w_t_id: 0]- bash (elevated True) 0x1f
16:34:07.9981440288ProcessInjector::HandlePendingProccesssFail to inject pending process |420|: bash
16:36:34.6661440349ProcessInjector::HandleElevatedProcessFail injection to process [14128] [t: 0 w_t_id: 0]- java (elevated True) 0x1f
16:36:34.6661440288ProcessInjector::HandlePendingProccesssFail to inject pending process |14128|: java
16:37:38.9161440349ProcessInjector::HandleElevatedProcessFail injection to process [6576] [t: 0 w_t_id: 0]- bash (elevated True) 0x1f
16:37:38.9161440288ProcessInjector::HandlePendingProccesssFail to inject pending process |6576|: bash
16:37:38.9161440349ProcessInjector::HandleElevatedProcessFail injection to process [13640] [t: 0 w_t_id: 0]- init (elevated True) 0x1f
16:37:38.9161440288ProcessInjector::HandlePendingProccesssFail to inject pending process |13640|: init
16:38:06.9661440349ProcessInjector::HandleElevatedProcessFail injection to process [1668] [t: 0 w_t_id: 0]- bash (elevated True) 0x1f
16:38:06.9661440288ProcessInjector::HandlePendingProccesssFail to inject pending process |1668|: bash
16:39:49.1851440349ProcessInjector::HandleElevatedProcessFail injection to process [1688] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x1f
16:39:49.1851440288ProcessInjector::HandlePendingProccesssFail to inject pending process |1688|: firefox.exe
17:11:47.9231440349ProcessInjector::HandleElevatedProcessFail injection to process [14236] [t: 0 w_t_id: 0]- java (elevated True) 0x1f
17:11:47.9231440288ProcessInjector::HandlePendingProccesssFail to inject pending process |14236|: java
17:17:52.8021440349ProcessInjector::HandleElevatedProcessFail injection to process [5572] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0
17:17:52.8021440288ProcessInjector::HandlePendingProccesssFail to inject pending process |5572|: firefox.exe
17:43:43.3391440349ProcessInjector::HandleElevatedProcessFail injection to process [14200] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x1f
17:43:43.3391440288ProcessInjector::HandlePendingProccesssFail to inject pending process |14200|: firefox.exe
17:46:48.8331440349ProcessInjector::HandleElevatedProcessFail injection to process [8860] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x1f
17:46:48.8331440288ProcessInjector::HandlePendingProccesssFail to inject pending process |8860|: firefox.exe
17:49:09.9761440349ProcessInjector::HandleElevatedProcessFail injection to process [2636] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x1f
17:49:09.9761440288ProcessInjector::HandlePendingProccesssFail to inject pending process |2636|: firefox.exe
17:50:45.7201440349ProcessInjector::HandleElevatedProcessFail injection to process [14932] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x1f
17:50:45.7201440288ProcessInjector::HandlePendingProccesssFail to inject pending process |14932|: firefox.exe
17:50:55.8031440349ProcessInjector::HandleElevatedProcessFail injection to process [3888] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x1f
17:50:55.8031440288ProcessInjector::HandlePendingProccesssFail to inject pending process |3888|: firefox.exe
18:11:30.1151440349ProcessInjector::HandleElevatedProcessFail injection to process [524] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x1f
18:11:30.1161440288ProcessInjector::HandlePendingProccesssFail to inject pending process |524|: firefox.exe
18:11:46.2391440349ProcessInjector::HandleElevatedProcessFail injection to process [13844] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x1f
18:11:46.2391440288ProcessInjector::HandlePendingProccesssFail to inject pending process |13844|: firefox.exe
18:25:38.1421440349ProcessInjector::HandleElevatedProcessFail injection to process [9428] [t: 0 w_t_id: 0]- NvOAWrapperCache.exe (elevated True) 0x1f
18:25:38.4291440288ProcessInjector::HandlePendingProccesssFail to inject pending process |9428|: NvOAWrapperCache.exe