TimeThreadLineFunctionMessage
15:17:44.2414094365ftw1Loading (pid: 6808)
15:17:44.24140C4147ProcessHardwareRecorder::CommandThreadstarting recorder thread
15:17:44.241409448Update::DetectEnv (C:\WINDOWS\SYSTEM32\d3d11.dll) <0X2E80000>6|2|1247871522
15:17:44.242409448Update::DetectEnv (C:\WINDOWS\SYSTEM32\dxgi.dll) <0X51A0000>6|2|1247871522
15:17:44.3494094172DXManager::DetectFound in 0
15:17:44.3504094209Initialize::GetLocation@ 0X4F80|20352
15:17:44.3504094209Initialize::GetLocation@ 0X69640|431680
15:17:44.3504094209Initialize::GetLocation@ 0X206F0|132848
15:17:44.3504094209Initialize::GetLocation@ 0X1DE0|7648
15:17:44.3504094111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0X2E80000 <> 0X51A0000
15:17:44.3504094209Initialize::GetLocation@ 0XFDE08860|-35616672
15:17:44.3504094111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0X2E80000 <> 0X51A0000
15:17:44.3504094209Initialize::GetLocation@ 0XFDE0DC30|-35595216
15:17:44.3504094111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0X2E80000 <> 0X51A0000
15:17:44.3504094209Initialize::GetLocation@ 0XFDE0C5F0|-35600912
15:17:44.3504094111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0X2E80000 <> 0X51A0000
15:17:44.3504094209Initialize::GetLocation@ 0XFDCEA7F0|-36788240
15:17:44.362409448Update::DetectEnv (C:\WINDOWS\SYSTEM32\d3d9.dll) <0XF9130000>6|2|1247871638
15:17:44.4444094129DXManager::DetectOK
15:17:44.4774094186DXManager::DetectDone
15:17:44.4774094215VTableHolderD3d9::initd3d offsest [sht]: 0x4060 , 0x53c0
15:17:44.4784094209Initialize::GetLocation@ 0X41B90|269200
15:17:44.4784094209Initialize::GetLocation@ 0X33E20|212512
15:17:44.4784094209Initialize::GetLocation@ 0X3D6C0|251584
15:17:44.4784094209Initialize::GetLocation@ 0XB8E10|757264
15:17:44.4784094209Initialize::GetLocation@ 0XB8960|756064
15:17:44.4784094209Initialize::GetLocation@ 0XACF0|44272
15:17:44.4784094209Initialize::GetLocation@ 0XB8A00|756224
15:17:44.4784094209Initialize::GetLocation@ 0X1B6B0|112304
15:17:44.4784094209Initialize::GetLocation@ 0X1E100|123136
15:17:44.4784094209Initialize::GetLocation@ 0X26730|157488
15:17:44.4784094209Initialize::GetLocation@ 0X1146B0|1132208
15:17:44.4784094209Initialize::GetLocation@ 0X114170|1130864
15:17:44.4784094209Initialize::GetLocation@ 0X1B5A0|112032
15:17:44.4784094209Initialize::GetLocation@ 0X1B4B0|111792
15:17:44.4784094209Initialize::GetLocation@ 0XD680|54912
15:17:44.4784094209Initialize::GetLocation@ 0X493C0|299968
15:17:44.4784094209Initialize::GetLocation@ 0XA860|43104
15:17:44.4784094209Initialize::GetLocation@ 0XD0000|851968
15:17:44.4784094209Initialize::GetLocation@ 0XD06D0|853712
15:17:44.4784094209Initialize::GetLocation@ 0XA860|43104
15:17:44.4784094209Initialize::GetLocation@ 0XD11C0|856512
15:17:44.4784094209Initialize::GetLocation@ 0XD1820|858144
15:17:44.491409448Update::DetectEnv (C:\WINDOWS\SYSTEM32\dinput.dll) <0XDEB70000>6|2|1247870977
15:17:44.511409483VTableHolderDInput::initm_pDIW->CreateDevice - succeded.
15:17:44.5114094209Initialize::GetLocation@ 0X4040|16448
15:17:44.5114094209Initialize::GetLocation@ 0X6410|25616
15:17:44.5114094209Initialize::GetLocation@ 0X65C0|26048
15:17:44.513409448Update::DetectEnv (C:\WINDOWS\SYSTEM32\dinput8.dll) <0XB6570000>6|2|1247870977
15:17:44.524409493VTableHolderDInput8::initm_pDI8W->CreateDevice - succeded.
15:17:44.5244094110VTableHolderDInput8::initm_pDI8A->CreateDevice - succeded.
15:17:44.5244094209Initialize::GetLocation@ 0XA5D0|42448
15:17:44.5244094209Initialize::GetLocation@ 0XD4D0|54480
15:17:44.5244094209Initialize::GetLocation@ 0XD290|53904
15:17:44.5794094225InterProcessElement::openInterProcess Overwolf_SHARED_MEMORY_2_2_84_8_6808 opened succesfuly
15:17:44.579409472HookFunctionsTableInitializer::SetHookFunctionsDataD3D9 Sht offsets 0x4060 , 0x53c0
15:17:44.5794094256InterProcessElement::closeInterProcess Overwolf_SHARED_MEMORY_2_2_84_8_6808 close 2147483647 bytes
15:17:44.5794094301InjectOWExplorerExplorer file name [C:\Program Files (x86)\Overwolf\0.165.0.5\OWExplorer.dll]
15:17:44.6114094389ftw1OWExplorer injected
15:17:44.612424070Common::ProcessExplorer::ProcessTrackerIPCAgent::OnConnectedconnected to process tracker server
15:17:44.766423C51`anonymous-namespace'::CreateProviderInitialize provider: NET
15:17:44.766423C117libprocess::NetworkTracer::Initializeinit res:0x5 [started:0 active:0 enbaled:0]
15:17:44.766423C54`anonymous-namespace'::CreateProviderFail to initlized provider: NET
15:17:44.766423C51`anonymous-namespace'::CreateProviderInitialize provider: GPU
15:17:44.8334244726ProcessInjector::InjectProcessprocess |spd.exe| missing h
15:17:44.8334244726ProcessInjector::InjectProcessprocess |lghub_updater.exe| missing h
15:17:44.8334244726ProcessInjector::InjectProcessprocess |wmpnetwk.exe| missing h
15:17:44.8964244726ProcessInjector::InjectProcessprocess |MSI.CentralServer.exe| missing h
15:17:44.8964244726ProcessInjector::InjectProcessprocess |CC_Engine_x64.exe| missing h
15:17:50.6974244562ProcessInjector::DoElevetedInjectionFailed to inject process [17296] 0x57
15:17:50.6974244464ProcessInjector::HandleElevatedProcessFail injection to process (will retry again in 5 ses) [17296] [t: 13532 w_t_id: 13532]- conhost.exe (elevated True) 0x57
15:17:51.6374244562ProcessInjector::DoElevetedInjectionFailed to inject process [17296] 0x57
15:17:51.6374244481ProcessInjector::HandleElevatedProcessFail injection to process [17296] [t: 13532 w_t_id: 13532]- conhost.exe (elevated True) 0x57
15:17:51.6374244413ProcessInjector::HandlePendingProccesssFail to inject pending process |17296|: conhost.exe
15:19:25.2794244726ProcessInjector::InjectProcessprocess |CCleaner64.exe| missing h
15:19:26.2894244726ProcessInjector::InjectProcessprocess |GoogleUpdate.exe| missing h
15:20:15.6434244481ProcessInjector::HandleElevatedProcessFail injection to process [1120] [t: 0 w_t_id: 0]- NVDisplay.Container.exe (elevated True) 0x57
15:20:15.6434244413ProcessInjector::HandlePendingProccesssFail to inject pending process |1120|: NVDisplay.Container.exe
15:20:15.6434244481ProcessInjector::HandleElevatedProcessFail injection to process [3056] [t: 0 w_t_id: 0]- CC_Engine_x64.exe (elevated True) 0x57
15:20:15.6434244413ProcessInjector::HandlePendingProccesssFail to inject pending process |3056|: CC_Engine_x64.exe
15:20:15.6434244481ProcessInjector::HandleElevatedProcessFail injection to process [3936] [t: 0 w_t_id: 0]- nvcontainer.exe (elevated True) 0x57
15:20:15.6434244413ProcessInjector::HandlePendingProccesssFail to inject pending process |3936|: nvcontainer.exe
15:20:15.6434244481ProcessInjector::HandleElevatedProcessFail injection to process [4960] [t: 0 w_t_id: 0]- spd.exe (elevated True) 0x57
15:20:15.6434244413ProcessInjector::HandlePendingProccesssFail to inject pending process |4960|: spd.exe
15:20:15.6434244481ProcessInjector::HandleElevatedProcessFail injection to process [5036] [t: 0 w_t_id: 0]- lghub_updater.exe (elevated True) 0x57
15:20:15.6434244413ProcessInjector::HandlePendingProccesssFail to inject pending process |5036|: lghub_updater.exe
15:20:15.6434244481ProcessInjector::HandleElevatedProcessFail injection to process [5240] [t: 0 w_t_id: 0]- MsMpEng.exe (elevated True) 0x57
15:20:15.6434244413ProcessInjector::HandlePendingProccesssFail to inject pending process |5240|: MsMpEng.exe
15:20:15.6434244481ProcessInjector::HandleElevatedProcessFail injection to process [6932] [t: 0 w_t_id: 0]- wmpnetwk.exe (elevated True) 0x57
15:20:15.6434244413ProcessInjector::HandlePendingProccesssFail to inject pending process |6932|: wmpnetwk.exe
15:20:15.6434244481ProcessInjector::HandleElevatedProcessFail injection to process [8492] [t: 0 w_t_id: 0]- MSI.CentralServer.exe (elevated True) 0x57
15:20:15.6434244413ProcessInjector::HandlePendingProccesssFail to inject pending process |8492|: MSI.CentralServer.exe
15:20:15.6434244481ProcessInjector::HandleElevatedProcessFail injection to process [12776] [t: 0 w_t_id: 0]- lghub.exe (elevated True) 0x57
15:20:15.6434244413ProcessInjector::HandlePendingProccesssFail to inject pending process |12776|: lghub.exe
15:20:15.6434244481ProcessInjector::HandleElevatedProcessFail injection to process [13140] [t: 0 w_t_id: 0]- lghub.exe (elevated True) 0x57
15:20:15.6434244413ProcessInjector::HandlePendingProccesssFail to inject pending process |13140|: lghub.exe
15:20:20.6804244481ProcessInjector::HandleElevatedProcessFail injection to process [16256] [t: 0 w_t_id: 0]- wdsync.exe (elevated True) 0x57
15:20:20.6804244413ProcessInjector::HandlePendingProccesssFail to inject pending process |16256|: wdsync.exe
15:20:20.6804244481ProcessInjector::HandleElevatedProcessFail injection to process [16484] [t: 0 w_t_id: 0]- kdd (elevated True) 0x57
15:20:20.6804244413ProcessInjector::HandlePendingProccesssFail to inject pending process |16484|: kdd
15:20:51.8764244481ProcessInjector::HandleElevatedProcessFail injection to process [7476] [t: 0 w_t_id: 0]- wdsync.exe (elevated True) 0x57
15:20:51.8764244413ProcessInjector::HandlePendingProccesssFail to inject pending process |7476|: wdsync.exe
15:20:51.8764244481ProcessInjector::HandleElevatedProcessFail injection to process [9960] [t: 0 w_t_id: 0]- wdsync.exe (elevated True) 0x57
15:20:51.8764244413ProcessInjector::HandlePendingProccesssFail to inject pending process |9960|: wdsync.exe
15:20:51.8764244481ProcessInjector::HandleElevatedProcessFail injection to process [16376] [t: 0 w_t_id: 0]- wdsync-inotify.exe (elevated True) 0x57
15:20:51.8764244413ProcessInjector::HandlePendingProccesssFail to inject pending process |16376|: wdsync-inotify.exe
15:22:40.5804244726ProcessInjector::InjectProcessprocess |OverwolfUpdater.exe| missing h
15:27:27.6934244726ProcessInjector::InjectProcessprocess |MpCmdRun.exe| missing h
15:27:27.6934244726ProcessInjector::InjectProcessprocess |MpCmdRun.exe| missing h
15:28:05.194244481ProcessInjector::HandleElevatedProcessFail injection to process [1700] [t: 0 w_t_id: 0]- owobs-ffmpeg-mux.exe (elevated True) 0x0
15:28:05.194244413ProcessInjector::HandlePendingProccesssFail to inject pending process |1700|: owobs-ffmpeg-mux.exe
15:33:10.994244481ProcessInjector::HandleElevatedProcessFail injection to process [16336] [t: 0 w_t_id: 0]- owobs-ffmpeg-mux.exe (elevated True) 0x0
15:33:10.994244413ProcessInjector::HandlePendingProccesssFail to inject pending process |16336|: owobs-ffmpeg-mux.exe
15:36:06.2314244481ProcessInjector::HandleElevatedProcessFail injection to process [11968] [t: 0 w_t_id: 0]- owobs-ffmpeg-mux.exe (elevated True) 0x0
15:36:06.2314244413ProcessInjector::HandlePendingProccesssFail to inject pending process |11968|: owobs-ffmpeg-mux.exe
15:42:45.8914244481ProcessInjector::HandleElevatedProcessFail injection to process [9292] [t: 0 w_t_id: 0]- owobs-ffmpeg-mux.exe (elevated True) 0x0
15:42:45.8914244413ProcessInjector::HandlePendingProccesssFail to inject pending process |9292|: owobs-ffmpeg-mux.exe
15:45:27.8484244481ProcessInjector::HandleElevatedProcessFail injection to process [11144] [t: 0 w_t_id: 0]- owobs-ffmpeg-mux.exe (elevated True) 0x0
15:45:27.8484244413ProcessInjector::HandlePendingProccesssFail to inject pending process |11144|: owobs-ffmpeg-mux.exe
16:05:45.394244481ProcessInjector::HandleElevatedProcessFail injection to process [6784] [t: 0 w_t_id: 0]- owobs-ffmpeg-mux.exe (elevated True) 0x5
16:05:45.394244413ProcessInjector::HandlePendingProccesssFail to inject pending process |6784|: owobs-ffmpeg-mux.exe
16:28:50.194244726ProcessInjector::InjectProcessprocess |GoogleUpdate.exe| missing h
16:28:58.934244726ProcessInjector::InjectProcessprocess |GoogleUpdate.exe| missing h
16:49:19.6584244481ProcessInjector::HandleElevatedProcessFail injection to process [9496] [t: 0 w_t_id: 0]- owobs-ffmpeg-mux.exe (elevated True) 0x0
16:49:19.6584244413ProcessInjector::HandlePendingProccesssFail to inject pending process |9496|: owobs-ffmpeg-mux.exe
17:07:12.1654244481ProcessInjector::HandleElevatedProcessFail injection to process [17920] [t: 0 w_t_id: 0]- owobs-ffmpeg-mux.exe (elevated True) 0x0
17:07:12.1654244413ProcessInjector::HandlePendingProccesssFail to inject pending process |17920|: owobs-ffmpeg-mux.exe
17:47:56.984244481ProcessInjector::HandleElevatedProcessFail injection to process [17772] [t: 0 w_t_id: 0]- owobs-ffmpeg-mux.exe (elevated True) 0x0
17:47:56.984244413ProcessInjector::HandlePendingProccesssFail to inject pending process |17772|: owobs-ffmpeg-mux.exe
17:59:24.5494244481ProcessInjector::HandleElevatedProcessFail injection to process [18124] [t: 0 w_t_id: 0]- owobs-ffmpeg-mux.exe (elevated True) 0x0
17:59:24.5494244413ProcessInjector::HandlePendingProccesssFail to inject pending process |18124|: owobs-ffmpeg-mux.exe
18:13:38.4134244726ProcessInjector::InjectProcessprocess |OverwolfUpdater.exe| missing h
18:21:00.984244481ProcessInjector::HandleElevatedProcessFail injection to process [664] [t: 0 w_t_id: 0]- owobs-ffmpeg-mux.exe (elevated True) 0x0
18:21:00.984244413ProcessInjector::HandlePendingProccesssFail to inject pending process |664|: owobs-ffmpeg-mux.exe
18:43:36.9864244481ProcessInjector::HandleElevatedProcessFail injection to process [4700] [t: 0 w_t_id: 0]- owobs-ffmpeg-mux.exe (elevated True) 0x0
18:43:36.9864244413ProcessInjector::HandlePendingProccesssFail to inject pending process |4700|: owobs-ffmpeg-mux.exe
19:05:14.3924244481ProcessInjector::HandleElevatedProcessFail injection to process [16948] [t: 0 w_t_id: 0]- owobs-ffmpeg-mux.exe (elevated True) 0x0
19:05:14.3924244413ProcessInjector::HandlePendingProccesssFail to inject pending process |16948|: owobs-ffmpeg-mux.exe
19:22:40.4244244726ProcessInjector::InjectProcessprocess |OverwolfUpdater.exe| missing h
19:28:49.5324244726ProcessInjector::InjectProcessprocess |GoogleUpdate.exe| missing h
19:39:34.7844244481ProcessInjector::HandleElevatedProcessFail injection to process [14032] [t: 0 w_t_id: 0]- owobs-ffmpeg-mux.exe (elevated True) 0x0
19:39:34.7844244413ProcessInjector::HandlePendingProccesssFail to inject pending process |14032|: owobs-ffmpeg-mux.exe
20:02:57.994244481ProcessInjector::HandleElevatedProcessFail injection to process [18608] [t: 0 w_t_id: 0]- owobs-ffmpeg-mux.exe (elevated True) 0x0
20:02:57.994244413ProcessInjector::HandlePendingProccesssFail to inject pending process |18608|: owobs-ffmpeg-mux.exe
20:28:50.564244726ProcessInjector::InjectProcessprocess |GoogleUpdate.exe| missing h
20:31:20.2774244481ProcessInjector::HandleElevatedProcessFail injection to process [15160] [t: 0 w_t_id: 0]- GoogleUpdate.exe (elevated True) 0x0
20:31:20.2774244413ProcessInjector::HandlePendingProccesssFail to inject pending process |15160|: GoogleUpdate.exe
20:38:26.8484244726ProcessInjector::InjectProcessprocess |MicrosoftEdgeUpdate.exe| missing h
20:42:41.7984244481ProcessInjector::HandleElevatedProcessFail injection to process [1044] [t: 0 w_t_id: 0]- owobs-ffmpeg-mux.exe (elevated True) 0x0
20:42:41.7984244413ProcessInjector::HandlePendingProccesssFail to inject pending process |1044|: owobs-ffmpeg-mux.exe
20:57:00.6254244726ProcessInjector::InjectProcessprocess |spd.exe| missing h
20:59:30.8494244481ProcessInjector::HandleElevatedProcessFail injection to process [5084] [t: 0 w_t_id: 0]- spd.exe (elevated True) 0x0
20:59:30.8494244413ProcessInjector::HandlePendingProccesssFail to inject pending process |5084|: spd.exe
21:03:58.8544244481ProcessInjector::HandleElevatedProcessFail injection to process [11836] [t: 0 w_t_id: 0]- owobs-ffmpeg-mux.exe (elevated True) 0x0
21:03:58.8544244413ProcessInjector::HandlePendingProccesssFail to inject pending process |11836|: owobs-ffmpeg-mux.exe