TimeThreadLineFunctionMessage
22:33:00.7052E40365ftw1Loading (pid: 9556)
22:33:00.7052F24147ProcessHardwareRecorder::CommandThreadstarting recorder thread
22:33:00.7072E4048Update::DetectEnv (C:\Windows\SYSTEM32\d3d11.dll) <0XF2160000>6|2|1247871722
22:33:00.7082E4048Update::DetectEnv (C:\Windows\SYSTEM32\dxgi.dll) <0XF4630000>6|2|1247871722
22:33:00.7982E40172DXManager::DetectFound in 0
22:33:00.7982E40209Initialize::GetLocation@ 0X4F80|20352
22:33:00.7982E40209Initialize::GetLocation@ 0X69700|431872
22:33:00.7982E40209Initialize::GetLocation@ 0X206F0|132848
22:33:00.7982E40209Initialize::GetLocation@ 0X1DE0|7648
22:33:00.7982E40111Update::CaughtC:\Windows\SYSTEM32\d3d11.dll|0XF2160000 <> 0XF4630000
22:33:00.7982E40209Initialize::GetLocation@ 0XFDC58860|-37386144
22:33:00.7982E40111Update::CaughtC:\Windows\SYSTEM32\d3d11.dll|0XF2160000 <> 0XF4630000
22:33:00.7982E40209Initialize::GetLocation@ 0XFDC5DC30|-37364688
22:33:00.7982E40111Update::CaughtC:\Windows\SYSTEM32\d3d11.dll|0XF2160000 <> 0XF4630000
22:33:00.7982E40209Initialize::GetLocation@ 0XFDC5C5F0|-37370384
22:33:00.7982E40111Update::CaughtC:\Windows\SYSTEM32\d3d11.dll|0XF2160000 <> 0XF4630000
22:33:00.7982E40209Initialize::GetLocation@ 0XFDB3A7F0|-38557712
22:33:00.8122E4048Update::DetectEnv (C:\Windows\SYSTEM32\d3d9.dll) <0XDAAE0000>6|2|1247871638
22:33:00.8762E40129DXManager::DetectOK
22:33:00.9032E40186DXManager::DetectDone
22:33:00.9032E40215VTableHolderD3d9::initd3d offsest [sht]: 0x4060 , 0x53c0
22:33:00.9032E40209Initialize::GetLocation@ 0X41B90|269200
22:33:00.9032E40209Initialize::GetLocation@ 0X33E20|212512
22:33:00.9032E40209Initialize::GetLocation@ 0X3D6C0|251584
22:33:00.9032E40209Initialize::GetLocation@ 0XB8E10|757264
22:33:00.9032E40209Initialize::GetLocation@ 0XB8960|756064
22:33:00.9032E40209Initialize::GetLocation@ 0XACF0|44272
22:33:00.9032E40209Initialize::GetLocation@ 0XB8A00|756224
22:33:00.9032E40209Initialize::GetLocation@ 0X1B6B0|112304
22:33:00.9032E40209Initialize::GetLocation@ 0X1E100|123136
22:33:00.9032E40209Initialize::GetLocation@ 0X26730|157488
22:33:00.9032E40209Initialize::GetLocation@ 0X1146B0|1132208
22:33:00.9032E40209Initialize::GetLocation@ 0X114170|1130864
22:33:00.9032E40209Initialize::GetLocation@ 0X1B5A0|112032
22:33:00.9032E40209Initialize::GetLocation@ 0X1B4B0|111792
22:33:00.9032E40209Initialize::GetLocation@ 0XD680|54912
22:33:00.9032E40209Initialize::GetLocation@ 0X493C0|299968
22:33:00.9032E40209Initialize::GetLocation@ 0XA860|43104
22:33:00.9032E40209Initialize::GetLocation@ 0XD0000|851968
22:33:00.9032E40209Initialize::GetLocation@ 0XD06D0|853712
22:33:00.9032E40209Initialize::GetLocation@ 0XA860|43104
22:33:00.9032E40209Initialize::GetLocation@ 0XD11C0|856512
22:33:00.9032E40209Initialize::GetLocation@ 0XD1820|858144
22:33:00.9202E4048Update::DetectEnv (C:\Windows\SYSTEM32\dinput.dll) <0XEDB80000>6|2|1247870977
22:33:00.9652E4083VTableHolderDInput::initm_pDIW->CreateDevice - succeded.
22:33:00.9652E40209Initialize::GetLocation@ 0X4040|16448
22:33:00.9652E40209Initialize::GetLocation@ 0X6410|25616
22:33:00.9652E40209Initialize::GetLocation@ 0X65C0|26048
22:33:00.9692E4048Update::DetectEnv (C:\Windows\SYSTEM32\dinput8.dll) <0XAD6B0000>6|2|1247870977
22:33:00.9782E4093VTableHolderDInput8::initm_pDI8W->CreateDevice - succeded.
22:33:00.9782E40110VTableHolderDInput8::initm_pDI8A->CreateDevice - succeded.
22:33:00.9782E40209Initialize::GetLocation@ 0XA5D0|42448
22:33:00.9782E40209Initialize::GetLocation@ 0XD4D0|54480
22:33:00.9782E40209Initialize::GetLocation@ 0XD290|53904
22:33:01.392E40225InterProcessElement::openInterProcess Overwolf_SHARED_MEMORY_2_2_84_12_9556 opened succesfuly
22:33:01.402E4072HookFunctionsTableInitializer::SetHookFunctionsDataD3D9 Sht offsets 0x4060 , 0x53c0
22:33:01.402E40256InterProcessElement::closeInterProcess Overwolf_SHARED_MEMORY_2_2_84_12_9556 close 2147483647 bytes
22:33:01.402E40301InjectOWExplorerExplorer file name [C:\Program Files\Overwolf\0.166.1.16\OWExplorer.dll]
22:33:01.582E40389ftw1OWExplorer injected
22:33:01.582C7470Common::ProcessExplorer::ProcessTrackerIPCAgent::OnConnectedconnected to process tracker server
22:33:01.2012D4C51`anonymous-namespace'::CreateProviderInitialize provider: NET
22:33:01.2012D4C117libprocess::NetworkTracer::Initializeinit res:0x5 [started:0 active:0 enbaled:0]
22:33:01.2012D4C54`anonymous-namespace'::CreateProviderFail to initlized provider: NET
22:33:01.2012D4C51`anonymous-namespace'::CreateProviderInitialize provider: GPU
22:33:01.5422C6C726ProcessInjector::InjectProcessprocess |OverwolfUpdater.exe| missing h
22:35:31.2082C6C481ProcessInjector::HandleElevatedProcessFail injection to process [4060] [t: 0 w_t_id: 0]- MsMpEng.exe (elevated True) 0x0
22:35:31.2082C6C413ProcessInjector::HandlePendingProccesssFail to inject pending process |4060|: MsMpEng.exe
22:35:32.2092C6C481ProcessInjector::HandleElevatedProcessFail injection to process [10332] [t: 0 w_t_id: 0]- CCXProcess.exe (elevated True) 0x0
22:35:32.2092C6C413ProcessInjector::HandlePendingProccesssFail to inject pending process |10332|: CCXProcess.exe
22:35:32.2092C6C481ProcessInjector::HandleElevatedProcessFail injection to process [10348] [t: 0 w_t_id: 0]- node.exe (elevated True) 0x0
22:35:32.2092C6C413ProcessInjector::HandlePendingProccesssFail to inject pending process |10348|: node.exe
22:35:34.2332C6C481ProcessInjector::HandleElevatedProcessFail injection to process [12604] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0
22:35:34.2332C6C413ProcessInjector::HandlePendingProccesssFail to inject pending process |12604|: firefox.exe
22:35:34.2332C6C481ProcessInjector::HandleElevatedProcessFail injection to process [13104] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0
22:35:34.2332C6C413ProcessInjector::HandlePendingProccesssFail to inject pending process |13104|: firefox.exe
22:35:35.2432C6C481ProcessInjector::HandleElevatedProcessFail injection to process [12868] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0
22:35:35.2432C6C413ProcessInjector::HandlePendingProccesssFail to inject pending process |12868|: firefox.exe
22:35:35.2432C6C481ProcessInjector::HandleElevatedProcessFail injection to process [12900] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0
22:35:35.2432C6C413ProcessInjector::HandlePendingProccesssFail to inject pending process |12900|: firefox.exe
22:35:35.2432C6C481ProcessInjector::HandleElevatedProcessFail injection to process [13224] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0
22:35:35.2432C6C413ProcessInjector::HandlePendingProccesssFail to inject pending process |13224|: firefox.exe
22:35:37.2602C6C481ProcessInjector::HandleElevatedProcessFail injection to process [14024] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0
22:35:37.2602C6C413ProcessInjector::HandlePendingProccesssFail to inject pending process |14024|: firefox.exe
22:36:10.4722C6C481ProcessInjector::HandleElevatedProcessFail injection to process [13572] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0
22:36:10.4722C6C413ProcessInjector::HandlePendingProccesssFail to inject pending process |13572|: firefox.exe
22:36:31.5392C6C481ProcessInjector::HandleElevatedProcessFail injection to process [8896] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0
22:36:31.5392C6C413ProcessInjector::HandlePendingProccesssFail to inject pending process |8896|: firefox.exe
22:37:16.8232C6C481ProcessInjector::HandleElevatedProcessFail injection to process [3556] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0
22:37:16.8232C6C413ProcessInjector::HandlePendingProccesssFail to inject pending process |3556|: firefox.exe
22:37:56.1892C6C726ProcessInjector::InjectProcessprocess |OverwolfUpdater.exe| missing h
22:38:11.3312C6C481ProcessInjector::HandleElevatedProcessFail injection to process [13492] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0
22:38:11.3312C6C413ProcessInjector::HandlePendingProccesssFail to inject pending process |13492|: firefox.exe
22:39:07.7492C6C562ProcessInjector::DoElevetedInjectionFailed to inject process [10132] 0x57
22:39:07.7492C6C464ProcessInjector::HandleElevatedProcessFail injection to process (will retry again in 5 ses) [10132] [t: 10772 w_t_id: 10772]- ngrok.exe (elevated True) 0x57
22:39:08.7532C6C562ProcessInjector::DoElevetedInjectionFailed to inject process [10132] 0x57
22:39:08.7532C6C481ProcessInjector::HandleElevatedProcessFail injection to process [10132] [t: 10772 w_t_id: 10772]- ngrok.exe (elevated True) 0x57
22:39:08.7532C6C413ProcessInjector::HandlePendingProccesssFail to inject pending process |10132|: ngrok.exe
22:39:28.8932C6C481ProcessInjector::HandleElevatedProcessFail injection to process [13772] [t: 0 w_t_id: 0]- Microsoft.ServiceHub.Controller.exe (elevated True) 0x57
22:39:28.8932C6C413ProcessInjector::HandlePendingProccesssFail to inject pending process |13772|: Microsoft.ServiceHub.Controller.exe
22:39:37.9602C6C481ProcessInjector::HandleElevatedProcessFail injection to process [8360] [t: 0 w_t_id: 0]- ServiceHub.RoslynCodeAnalysisService.exe (elevated True) 0x57
22:39:37.9602C6C413ProcessInjector::HandlePendingProccesssFail to inject pending process |8360|: ServiceHub.RoslynCodeAnalysisService.exe
22:39:46.142C6C481ProcessInjector::HandleElevatedProcessFail injection to process [8488] [t: 0 w_t_id: 0]- VBCSCompiler.exe (elevated True) 0x57
22:39:46.142C6C413ProcessInjector::HandlePendingProccesssFail to inject pending process |8488|: VBCSCompiler.exe
22:41:45.352C6C481ProcessInjector::HandleElevatedProcessFail injection to process [13624] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x57
22:41:45.352C6C413ProcessInjector::HandlePendingProccesssFail to inject pending process |13624|: firefox.exe
22:42:29.4102C6C726ProcessInjector::InjectProcessprocess |MpCmdRun.exe| missing h
22:42:29.4102C6C726ProcessInjector::InjectProcessprocess |MpCmdRun.exe| missing h
22:42:44.5252C6C481ProcessInjector::HandleElevatedProcessFail injection to process [15444] [t: 0 w_t_id: 0]- ngrok.exe (elevated True) 0x57
22:42:44.5252C6C413ProcessInjector::HandlePendingProccesssFail to inject pending process |15444|: ngrok.exe
22:43:18.7802C6C562ProcessInjector::DoElevetedInjectionFailed to inject process [1576] 0x57
22:43:18.7802C6C464ProcessInjector::HandleElevatedProcessFail injection to process (will retry again in 5 ses) [1576] [t: 17484 w_t_id: 17484]- ngrok.exe (elevated True) 0x57
22:43:19.7742C6C562ProcessInjector::DoElevetedInjectionFailed to inject process [1576] 0x57
22:43:19.7742C6C481ProcessInjector::HandleElevatedProcessFail injection to process [1576] [t: 17484 w_t_id: 17484]- ngrok.exe (elevated True) 0x57
22:43:19.7742C6C413ProcessInjector::HandlePendingProccesssFail to inject pending process |1576|: ngrok.exe
22:45:15.5572C6C481ProcessInjector::HandleElevatedProcessFail injection to process [12872] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x57
22:45:15.5572C6C413ProcessInjector::HandlePendingProccesssFail to inject pending process |12872|: firefox.exe
22:45:18.5752C6C481ProcessInjector::HandleElevatedProcessFail injection to process [6796] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x57
22:45:18.5752C6C413ProcessInjector::HandlePendingProccesssFail to inject pending process |6796|: firefox.exe
22:45:20.5902C6C481ProcessInjector::HandleElevatedProcessFail injection to process [4320] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x57
22:45:20.5902C6C413ProcessInjector::HandlePendingProccesssFail to inject pending process |4320|: firefox.exe
22:47:10.3922C6C481ProcessInjector::HandleElevatedProcessFail injection to process [2204] [t: 0 w_t_id: 0]- ngrok.exe (elevated True) 0x57
22:47:10.3922C6C413ProcessInjector::HandlePendingProccesssFail to inject pending process |2204|: ngrok.exe
23:01:45.5802C6C481ProcessInjector::HandleElevatedProcessFail injection to process [8980] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x57
23:01:45.5802C6C413ProcessInjector::HandlePendingProccesssFail to inject pending process |8980|: firefox.exe
23:01:46.5922C6C481ProcessInjector::HandleElevatedProcessFail injection to process [17196] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x57
23:01:46.5922C6C413ProcessInjector::HandlePendingProccesssFail to inject pending process |17196|: firefox.exe
23:12:54.5652C6C481ProcessInjector::HandleElevatedProcessFail injection to process [19032] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0
23:12:54.5652C6C413ProcessInjector::HandlePendingProccesssFail to inject pending process |19032|: firefox.exe
23:15:25.5122C6C726ProcessInjector::InjectProcessprocess |MicrosoftEdgeUpdate.exe| missing h
23:23:00.5342C6C481ProcessInjector::HandleElevatedProcessFail injection to process [19252] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0
23:23:00.5342C6C413ProcessInjector::HandlePendingProccesssFail to inject pending process |19252|: firefox.exe
23:30:51.8282C6C481ProcessInjector::HandleElevatedProcessFail injection to process [18300] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0
23:30:51.8282C6C413ProcessInjector::HandlePendingProccesssFail to inject pending process |18300|: firefox.exe
23:30:52.8382C6C481ProcessInjector::HandleElevatedProcessFail injection to process [16208] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0
23:30:52.8382C6C413ProcessInjector::HandlePendingProccesssFail to inject pending process |16208|: firefox.exe
23:45:25.8902C6C481ProcessInjector::HandleElevatedProcessFail injection to process [15664] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0
23:45:25.8902C6C413ProcessInjector::HandlePendingProccesssFail to inject pending process |15664|: firefox.exe
23:45:52.692C6C726ProcessInjector::InjectProcessprocess |EasyAntiCheat.exe| missing h
23:47:15.7442C6C481ProcessInjector::HandleElevatedProcessFail injection to process [1216] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x0
23:47:15.7442C6C413ProcessInjector::HandlePendingProccesssFail to inject pending process |1216|: Code.exe
23:47:15.7442C6C481ProcessInjector::HandleElevatedProcessFail injection to process [2768] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x0
23:47:15.7442C6C413ProcessInjector::HandlePendingProccesssFail to inject pending process |2768|: Code.exe
23:47:15.7442C6C481ProcessInjector::HandleElevatedProcessFail injection to process [8656] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x0
23:47:15.7442C6C413ProcessInjector::HandlePendingProccesssFail to inject pending process |8656|: Code.exe
23:47:20.7892C6C481ProcessInjector::HandleElevatedProcessFail injection to process [13548] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x0
23:47:20.7892C6C413ProcessInjector::HandlePendingProccesssFail to inject pending process |13548|: Code.exe
23:47:21.8032C6C481ProcessInjector::HandleElevatedProcessFail injection to process [7852] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x0
23:47:21.8032C6C413ProcessInjector::HandlePendingProccesssFail to inject pending process |7852|: Code.exe
23:47:22.8142C6C481ProcessInjector::HandleElevatedProcessFail injection to process [5812] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x0
23:47:22.8142C6C413ProcessInjector::HandlePendingProccesssFail to inject pending process |5812|: Code.exe
23:47:22.8142C6C481ProcessInjector::HandleElevatedProcessFail injection to process [7476] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x0
23:47:22.8142C6C413ProcessInjector::HandlePendingProccesssFail to inject pending process |7476|: Code.exe
23:47:22.8142C6C481ProcessInjector::HandleElevatedProcessFail injection to process [15252] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x0
23:47:22.8142C6C413ProcessInjector::HandlePendingProccesssFail to inject pending process |15252|: Code.exe
23:47:27.8362C6C481ProcessInjector::HandleElevatedProcessFail injection to process [8848] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x0
23:47:27.8362C6C413ProcessInjector::HandlePendingProccesssFail to inject pending process |8848|: Code.exe
23:47:27.8362C6C481ProcessInjector::HandleElevatedProcessFail injection to process [15080] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x0
23:47:27.8362C6C413ProcessInjector::HandlePendingProccesssFail to inject pending process |15080|: Code.exe
23:48:22.2902C6C481ProcessInjector::HandleElevatedProcessFail injection to process [8964] [t: 0 w_t_id: 0]- EasyAntiCheat.exe (elevated True) 0x0
23:48:22.2902C6C413ProcessInjector::HandlePendingProccesssFail to inject pending process |8964|: EasyAntiCheat.exe
00:18:42.2582C6C481ProcessInjector::HandleElevatedProcessFail injection to process [4804] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0
00:18:42.2582C6C413ProcessInjector::HandlePendingProccesssFail to inject pending process |4804|: firefox.exe
00:19:16.4262C6C726ProcessInjector::InjectProcessprocess |OverwolfUpdater.exe| missing h
00:32:17.8292C6C481ProcessInjector::HandleElevatedProcessFail injection to process [18140] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0
00:32:17.8292C6C413ProcessInjector::HandlePendingProccesssFail to inject pending process |18140|: firefox.exe
00:33:08.1402C6C481ProcessInjector::HandleElevatedProcessFail injection to process [4852] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0
00:33:08.1402C6C413ProcessInjector::HandlePendingProccesssFail to inject pending process |4852|: firefox.exe
00:33:31.2942C6C726ProcessInjector::InjectProcessprocess |EasyAntiCheat.exe| missing h
00:36:01.3772C6C481ProcessInjector::HandleElevatedProcessFail injection to process [15740] [t: 0 w_t_id: 0]- EasyAntiCheat.exe (elevated True) 0x0
00:36:01.3772C6C413ProcessInjector::HandlePendingProccesssFail to inject pending process |15740|: EasyAntiCheat.exe
00:43:59.6952C7475Common::ProcessExplorer::ProcessTrackerIPCAgent::OnDisconnecteddisconnected to process tracker server
00:43:59.8542E4066ProcessesMonitor::Stopstopping PM...
00:43:59.8542D4C119ProcessesMonitor::ProcessEnumerateThreadexit process listener