TimeThreadLineFunctionMessage
12:31:26.4475040361ftw1Loading (pid: 24300)
12:31:26.449504048Update::DetectEnv (C:\Windows\SYSTEM32\d3d11.dll) <0X58560000>6|2|1203373203
12:31:26.449504048Update::DetectEnv (C:\Windows\SYSTEM32\dxgi.dll) <0X59FB0000>6|2|1203373081
12:31:26.4495CC0146ProcessHardwareRecorder::CommandThreadstarting recorder thread
12:31:26.5225040172DXManager::DetectFound in 0
12:31:26.5225040209Initialize::GetLocation@ 0X4660|18016
12:31:26.5225040209Initialize::GetLocation@ 0X661F0|418288
12:31:26.5225040209Initialize::GetLocation@ 0X19DB0|105904
12:31:26.5225040209Initialize::GetLocation@ 0X1350|4944
12:31:26.5225040111Update::CaughtC:\Windows\SYSTEM32\d3d11.dll|0X58560000 <> 0X59FB0000
12:31:26.5225040209Initialize::GetLocation@ 0XFE6D3020|-26398688
12:31:26.5225040111Update::CaughtC:\Windows\SYSTEM32\d3d11.dll|0X58560000 <> 0X59FB0000
12:31:26.5225040209Initialize::GetLocation@ 0XFE6D8060|-26378144
12:31:26.5225040111Update::CaughtC:\Windows\SYSTEM32\d3d11.dll|0X58560000 <> 0X59FB0000
12:31:26.5225040209Initialize::GetLocation@ 0XFE6CE620|-26417632
12:31:26.5225040111Update::CaughtC:\Windows\SYSTEM32\d3d11.dll|0X58560000 <> 0X59FB0000
12:31:26.5225040209Initialize::GetLocation@ 0XFE5BAA80|-27547008
12:31:26.560504048Update::DetectEnv (C:\Windows\SYSTEM32\d3d9.dll) <0X2DCE0000>6|2|1203373142
12:31:26.6905040129DXManager::DetectOK
12:31:26.7945040186DXManager::DetectDone
12:31:26.7945040215VTableHolderD3d9::initd3d offsest [sht]: 0x4060 , 0x53c0
12:31:26.7975040209Initialize::GetLocation@ 0X3AC00|240640
12:31:26.7975040209Initialize::GetLocation@ 0X2C5B0|181680
12:31:26.7975040209Initialize::GetLocation@ 0X36D00|224512
12:31:26.7975040209Initialize::GetLocation@ 0XAE210|713232
12:31:26.7975040209Initialize::GetLocation@ 0XADD60|712032
12:31:26.7975040209Initialize::GetLocation@ 0X5880|22656
12:31:26.7975040209Initialize::GetLocation@ 0XADE00|712192
12:31:26.7975040209Initialize::GetLocation@ 0X20FF0|135152
12:31:26.7975040209Initialize::GetLocation@ 0X1CA60|117344
12:31:26.7975040209Initialize::GetLocation@ 0X1C8E0|116960
12:31:26.7975040209Initialize::GetLocation@ 0X1086D0|1083088
12:31:26.7975040209Initialize::GetLocation@ 0X108180|1081728
12:31:26.7975040209Initialize::GetLocation@ 0X248B0|149680
12:31:26.7975040209Initialize::GetLocation@ 0X247A0|149408
12:31:26.7975040209Initialize::GetLocation@ 0X2C440|181312
12:31:26.7975040209Initialize::GetLocation@ 0X3F3F0|259056
12:31:26.7975040209Initialize::GetLocation@ 0XF3E0|62432
12:31:26.7975040209Initialize::GetLocation@ 0XF4E0|62688
12:31:26.7975040209Initialize::GetLocation@ 0XF5D0|62928
12:31:26.7975040209Initialize::GetLocation@ 0XF3E0|62432
12:31:26.7975040209Initialize::GetLocation@ 0XF280|62080
12:31:26.7975040209Initialize::GetLocation@ 0XF430|62512
12:31:26.819504048Update::DetectEnv (C:\Windows\SYSTEM32\dinput.dll) <0X39EE0000>6|2|1203372033
12:31:26.829504083VTableHolderDInput::initm_pDIW->CreateDevice - succeded.
12:31:26.8295040209Initialize::GetLocation@ 0X3CC0|15552
12:31:26.8295040209Initialize::GetLocation@ 0X5FD0|24528
12:31:26.8295040209Initialize::GetLocation@ 0X6180|24960
12:31:26.830504048Update::DetectEnv (C:\Windows\SYSTEM32\dinput8.dll) <0X2BEC0000>6|2|1203372033
12:31:26.839504093VTableHolderDInput8::initm_pDI8W->CreateDevice - succeded.
12:31:26.8395040110VTableHolderDInput8::initm_pDI8A->CreateDevice - succeded.
12:31:26.8395040209Initialize::GetLocation@ 0X10000|65536
12:31:26.8395040209Initialize::GetLocation@ 0X12C80|76928
12:31:26.8395040209Initialize::GetLocation@ 0X12A60|76384
12:31:26.8915040225InterProcessElement::openInterProcess Overwolf_SHARED_MEMORY_2_2_83_1_24300 opened succesfuly
12:31:26.891504072HookFunctionsTableInitializer::SetHookFunctionsDataD3D9 Sht offsets 0x4060 , 0x53c0
12:31:26.8915040256InterProcessElement::closeInterProcess Overwolf_SHARED_MEMORY_2_2_83_1_24300 close 2147483647 bytes
12:31:26.8925040297InjectOWExplorerExplorer file name [C:\Program Files (x86)\Overwolf\0.162.0.7\OWExplorer.dll]
12:31:26.8995040385ftw1OWExplorer injected
12:31:27.3915C5051`anonymous-namespace'::CreateProviderInitialize provider: NET
12:31:27.3925C50117libprocess::NetworkTracer::Initializeinit res:0x5 [started:0 active:0 enbaled:0]
12:31:27.3925C5054`anonymous-namespace'::CreateProviderFail to initlized provider: NET
12:31:27.3925C5051`anonymous-namespace'::CreateProviderInitialize provider: GPU
12:31:27.4123ABC629ProcessInjector::InjectProcessprocess |vpnagent.exe| missing h
12:31:27.4123ABC629ProcessInjector::InjectProcessprocess |com.docker.service| missing h
12:31:27.4133ABC629ProcessInjector::InjectProcessprocess |gameinputsvc.exe| missing h
12:31:27.4133ABC629ProcessInjector::InjectProcessprocess |nassvc.exe| missing h
12:31:27.4133ABC629ProcessInjector::InjectProcessprocess |httpd.exe| missing h
12:31:27.4133ABC629ProcessInjector::InjectProcessprocess |mysqld.exe| missing h
12:31:27.4133ABC629ProcessInjector::InjectProcessprocess |DropboxUpdate.exe| missing h
12:31:27.4133ABC629ProcessInjector::InjectProcessprocess |httpd.exe| missing h
12:31:27.4133ABC629ProcessInjector::InjectProcessprocess |GoogleCrashHandler.exe| missing h
12:31:27.4133ABC629ProcessInjector::InjectProcessprocess |GoogleCrashHandler64.exe| missing h
12:31:27.4133ABC629ProcessInjector::InjectProcessprocess |gameinputsvc.exe| missing h
12:31:27.4133ABC629ProcessInjector::InjectProcessprocess |tv_w32.exe| missing h
12:31:27.4133ABC629ProcessInjector::InjectProcessprocess |tv_x64.exe| missing h
12:31:27.8973ABC629ProcessInjector::InjectProcessprocess |OverwolfUpdater.exe| missing h
12:33:58.1573ABC441ProcessInjector::HandleElevatedProcessFail injection to process [940] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x1f
12:33:58.1583ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |940|: Code.exe
12:33:58.1583ABC441ProcessInjector::HandleElevatedProcessFail injection to process [2968] [t: 0 w_t_id: 0]- vpnagent.exe (elevated True) 0x1f
12:33:58.1583ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |2968|: vpnagent.exe
12:33:58.1583ABC441ProcessInjector::HandleElevatedProcessFail injection to process [3652] [t: 0 w_t_id: 0]- com.docker.service (elevated True) 0x1f
12:33:58.1583ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |3652|: com.docker.service
12:33:58.1583ABC441ProcessInjector::HandleElevatedProcessFail injection to process [3720] [t: 0 w_t_id: 0]- gameinputsvc.exe (elevated True) 0x1f
12:33:58.1583ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |3720|: gameinputsvc.exe
12:33:58.1583ABC441ProcessInjector::HandleElevatedProcessFail injection to process [3984] [t: 0 w_t_id: 0]- nassvc.exe (elevated True) 0x1f
12:33:58.1583ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |3984|: nassvc.exe
12:33:58.1583ABC441ProcessInjector::HandleElevatedProcessFail injection to process [4024] [t: 0 w_t_id: 0]- MsMpEng.exe (elevated True) 0x1f
12:33:58.1583ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |4024|: MsMpEng.exe
12:33:58.1583ABC441ProcessInjector::HandleElevatedProcessFail injection to process [4044] [t: 0 w_t_id: 0]- httpd.exe (elevated True) 0x1f
12:33:58.1583ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |4044|: httpd.exe
12:33:58.1583ABC441ProcessInjector::HandleElevatedProcessFail injection to process [4464] [t: 0 w_t_id: 0]- mysqld.exe (elevated True) 0x1f
12:33:58.1583ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |4464|: mysqld.exe
12:33:58.1583ABC441ProcessInjector::HandleElevatedProcessFail injection to process [5204] [t: 0 w_t_id: 0]- DropboxUpdate.exe (elevated True) 0x1f
12:33:58.1583ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |5204|: DropboxUpdate.exe
12:33:58.1583ABC441ProcessInjector::HandleElevatedProcessFail injection to process [5876] [t: 0 w_t_id: 0]- docker-mutagen.exe (elevated True) 0x1f
12:33:58.1583ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |5876|: docker-mutagen.exe
12:33:58.1583ABC441ProcessInjector::HandleElevatedProcessFail injection to process [6368] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x1f
12:33:58.1583ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |6368|: Code.exe
12:33:58.1583ABC441ProcessInjector::HandleElevatedProcessFail injection to process [6484] [t: 0 w_t_id: 0]- GoogleCrashHandler64.exe (elevated True) 0x1f
12:33:58.1583ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |6484|: GoogleCrashHandler64.exe
12:33:58.1583ABC441ProcessInjector::HandleElevatedProcessFail injection to process [7992] [t: 0 w_t_id: 0]- httpd.exe (elevated True) 0x1f
12:33:58.1583ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |7992|: httpd.exe
12:33:58.1583ABC441ProcessInjector::HandleElevatedProcessFail injection to process [8208] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x1f
12:33:58.1583ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |8208|: Code.exe
12:33:58.1583ABC441ProcessInjector::HandleElevatedProcessFail injection to process [8576] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x1f
12:33:58.1583ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |8576|: Code.exe
12:33:58.1583ABC441ProcessInjector::HandleElevatedProcessFail injection to process [10936] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x1f
12:33:58.1583ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |10936|: Teams.exe
12:33:58.1583ABC441ProcessInjector::HandleElevatedProcessFail injection to process [11176] [t: 0 w_t_id: 0]- gameinputsvc.exe (elevated True) 0x1f
12:33:58.1583ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |11176|: gameinputsvc.exe
12:33:58.1583ABC441ProcessInjector::HandleElevatedProcessFail injection to process [11244] [t: 0 w_t_id: 0]- GoogleCrashHandler.exe (elevated True) 0x1f
12:33:58.1583ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |11244|: GoogleCrashHandler.exe
12:33:58.1583ABC441ProcessInjector::HandleElevatedProcessFail injection to process [11716] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x1f
12:33:58.1583ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |11716|: Code.exe
12:33:58.1583ABC441ProcessInjector::HandleElevatedProcessFail injection to process [11836] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x1f
12:33:58.1583ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |11836|: Code.exe
12:33:58.1583ABC441ProcessInjector::HandleElevatedProcessFail injection to process [12116] [t: 0 w_t_id: 0]- node.exe (elevated True) 0x1f
12:33:58.1583ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |12116|: node.exe
12:33:58.1583ABC441ProcessInjector::HandleElevatedProcessFail injection to process [12712] [t: 0 w_t_id: 0]- vpnkit-bridge.exe (elevated True) 0x1f
12:33:58.1583ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |12712|: vpnkit-bridge.exe
12:33:58.1583ABC441ProcessInjector::HandleElevatedProcessFail injection to process [13380] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x1f
12:33:58.1583ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |13380|: Teams.exe
12:33:58.1583ABC441ProcessInjector::HandleElevatedProcessFail injection to process [13916] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x1f
12:33:58.1583ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |13916|: Code.exe
12:33:58.1583ABC441ProcessInjector::HandleElevatedProcessFail injection to process [13996] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x1f
12:33:58.1583ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |13996|: Code.exe
12:33:58.1583ABC441ProcessInjector::HandleElevatedProcessFail injection to process [15768] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x1f
12:33:58.1583ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |15768|: Teams.exe
12:33:58.1583ABC441ProcessInjector::HandleElevatedProcessFail injection to process [16592] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x1f
12:33:58.1583ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |16592|: Teams.exe
12:33:58.1583ABC441ProcessInjector::HandleElevatedProcessFail injection to process [17948] [t: 0 w_t_id: 0]- vpnkit.exe (elevated True) 0x1f
12:33:58.1583ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |17948|: vpnkit.exe
12:33:58.1583ABC441ProcessInjector::HandleElevatedProcessFail injection to process [18216] [t: 0 w_t_id: 0]- tv_w32.exe (elevated True) 0x1f
12:33:58.1583ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |18216|: tv_w32.exe
12:33:58.1583ABC441ProcessInjector::HandleElevatedProcessFail injection to process [18372] [t: 0 w_t_id: 0]- com.docker.backend.exe (elevated True) 0x1f
12:33:58.1583ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |18372|: com.docker.backend.exe
12:33:58.1583ABC441ProcessInjector::HandleElevatedProcessFail injection to process [18716] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x1f
12:33:58.1583ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |18716|: Code.exe
12:33:58.1583ABC441ProcessInjector::HandleElevatedProcessFail injection to process [20632] [t: 0 w_t_id: 0]- com.docker.proxy.exe (elevated True) 0x1f
12:33:58.1583ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |20632|: com.docker.proxy.exe
12:33:58.1583ABC441ProcessInjector::HandleElevatedProcessFail injection to process [22188] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x1f
12:33:58.1583ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |22188|: Code.exe
12:33:58.1583ABC441ProcessInjector::HandleElevatedProcessFail injection to process [22552] [t: 0 w_t_id: 0]- node.exe (elevated True) 0x1f
12:33:58.1593ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |22552|: node.exe
12:33:58.1593ABC441ProcessInjector::HandleElevatedProcessFail injection to process [23084] [t: 0 w_t_id: 0]- tv_x64.exe (elevated True) 0x1f
12:33:58.1593ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |23084|: tv_x64.exe
12:33:58.1593ABC441ProcessInjector::HandleElevatedProcessFail injection to process [23988] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x1f
12:33:58.1593ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |23988|: Teams.exe
12:36:22.1693ABC629ProcessInjector::InjectProcessprocess |OverwolfUpdater.exe| missing h
12:38:10.3193ABC441ProcessInjector::HandleElevatedProcessFail injection to process [7404] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x5
12:38:10.3193ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |7404|: Teams.exe
12:46:50.6313ABC441ProcessInjector::HandleElevatedProcessFail injection to process [15928] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x0
12:46:50.6313ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |15928|: Teams.exe
13:04:01.7673ABC629ProcessInjector::InjectProcessprocess |MpCmdRun.exe| missing h
13:04:01.7673ABC629ProcessInjector::InjectProcessprocess |MpCmdRun.exe| missing h
13:04:01.7683ABC629ProcessInjector::InjectProcessprocess |MpCmdRun.exe| missing h
13:04:01.7683ABC629ProcessInjector::InjectProcessprocess |MpCmdRun.exe| missing h
13:10:57.5723ABC441ProcessInjector::HandleElevatedProcessFail injection to process [13940] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x0
13:10:57.5723ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |13940|: Teams.exe
13:16:56.7173ABC441ProcessInjector::HandleElevatedProcessFail injection to process [23996] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x0
13:16:56.7183ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |23996|: Teams.exe
13:18:02.7343ABC629ProcessInjector::InjectProcessprocess |DropboxUpdate.exe| missing h
13:25:37.7883ABC441ProcessInjector::HandleElevatedProcessFail injection to process [4200] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x0
13:25:37.7893ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |4200|: Teams.exe
13:35:41.9833ABC441ProcessInjector::HandleElevatedProcessFail injection to process [16664] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x5
13:35:41.9833ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |16664|: Teams.exe
13:45:43.5673ABC441ProcessInjector::HandleElevatedProcessFail injection to process [15368] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x0
13:45:43.5673ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |15368|: Teams.exe
13:59:05.2573ABC441ProcessInjector::HandleElevatedProcessFail injection to process [22120] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x0
13:59:05.2573ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |22120|: Teams.exe
14:05:06.4983ABC441ProcessInjector::HandleElevatedProcessFail injection to process [20548] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x1f
14:05:06.4983ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |20548|: Teams.exe
14:13:46.5853ABC441ProcessInjector::HandleElevatedProcessFail injection to process [23800] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x1f
14:13:46.5853ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |23800|: Teams.exe
14:18:02.7213ABC629ProcessInjector::InjectProcessprocess |DropboxUpdate.exe| missing h
14:19:47.7173ABC441ProcessInjector::HandleElevatedProcessFail injection to process [24508] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x5
14:19:47.7173ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |24508|: Teams.exe
14:25:47.9043ABC441ProcessInjector::HandleElevatedProcessFail injection to process [2240] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x5
14:25:47.9043ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |2240|: Teams.exe
14:31:49.1113ABC441ProcessInjector::HandleElevatedProcessFail injection to process [22180] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x0
14:31:49.1113ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |22180|: Teams.exe
14:32:40.1923ABC629ProcessInjector::InjectProcessprocess |MicrosoftEdgeUpdate.exe| missing h
14:40:30.4343ABC441ProcessInjector::HandleElevatedProcessFail injection to process [9556] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x5
14:40:30.4343ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |9556|: Teams.exe
14:49:51.6133ABC629ProcessInjector::InjectProcessprocess |GoogleUpdate.exe| missing h
14:53:12.6213ABC441ProcessInjector::HandleElevatedProcessFail injection to process [3696] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x5
14:53:12.6213ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |3696|: Teams.exe
14:59:12.6573ABC441ProcessInjector::HandleElevatedProcessFail injection to process [4708] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x5
14:59:12.6573ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |4708|: Teams.exe
15:05:14.5933ABC441ProcessInjector::HandleElevatedProcessFail injection to process [22640] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x5
15:05:14.5933ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |22640|: Teams.exe
15:18:02.6133ABC629ProcessInjector::InjectProcessprocess |DropboxUpdate.exe| missing h
15:22:10.8033ABC629ProcessInjector::InjectProcessprocess |OverwolfUpdater.exe| missing h
15:32:39.2903ABC629ProcessInjector::InjectProcessprocess |MicrosoftEdgeUpdate.exe| missing h
15:45:14.713ABC441ProcessInjector::HandleElevatedProcessFail injection to process [3600] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x5
15:45:14.713ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |3600|: Code.exe
15:49:51.3133ABC629ProcessInjector::InjectProcessprocess |GoogleUpdate.exe| missing h
15:50:00.3103ABC441ProcessInjector::HandleElevatedProcessFail injection to process [17192] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x0
15:50:00.3103ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |17192|: Teams.exe
15:56:00.6353ABC441ProcessInjector::HandleElevatedProcessFail injection to process [19876] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x1f
15:56:00.6363ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |19876|: Teams.exe
16:02:00.8003ABC441ProcessInjector::HandleElevatedProcessFail injection to process [16672] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x1f
16:02:00.8003ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |16672|: Teams.exe
16:08:01.8353ABC441ProcessInjector::HandleElevatedProcessFail injection to process [17160] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x1f
16:08:01.8353ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |17160|: Teams.exe
16:16:42.8453ABC441ProcessInjector::HandleElevatedProcessFail injection to process [14468] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x1f
16:16:42.8453ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |14468|: Teams.exe
16:18:02.9643ABC629ProcessInjector::InjectProcessprocess |DropboxUpdate.exe| missing h
16:18:08.9693ABC629ProcessInjector::InjectProcessprocess |DropboxUpdate.exe| missing h
16:20:43.1203ABC441ProcessInjector::HandleElevatedProcessFail injection to process [3268] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x5
16:20:43.1203ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |3268|: Teams.exe
16:28:44.6943ABC441ProcessInjector::HandleElevatedProcessFail injection to process [17096] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x0
16:28:44.6943ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |17096|: Teams.exe
16:34:44.6983ABC441ProcessInjector::HandleElevatedProcessFail injection to process [18664] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x0
16:34:44.6983ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |18664|: Teams.exe
16:36:25.6923ABC629ProcessInjector::InjectProcessprocess |OverwolfUpdater.exe| missing h
16:36:26.6913ABC629ProcessInjector::InjectProcessprocess |OverwolfUpdater.exe| missing h
16:41:00.8183ABC629ProcessInjector::InjectProcessprocess |DropboxUpdate.exe| missing h
16:49:51.2263ABC629ProcessInjector::InjectProcessprocess |GoogleUpdate.exe| missing h
16:50:18.2423ABC629ProcessInjector::InjectProcessprocess |GoogleUpdate.exe| missing h
17:02:08.7793ABC441ProcessInjector::HandleElevatedProcessFail injection to process [8924] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x5
17:02:08.7793ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |8924|: Teams.exe
17:10:49.9523ABC441ProcessInjector::HandleElevatedProcessFail injection to process [21820] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x5
17:10:49.9523ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |21820|: Teams.exe
17:15:29.9763ABC441ProcessInjector::HandleElevatedProcessFail injection to process [13124] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x0
17:15:29.9763ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |13124|: Teams.exe
17:18:02.9943ABC629ProcessInjector::InjectProcessprocess |DropboxUpdate.exe| missing h
17:26:11.1133ABC441ProcessInjector::HandleElevatedProcessFail injection to process [16688] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x0
17:26:11.1133ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |16688|: Teams.exe
17:32:12.1623ABC441ProcessInjector::HandleElevatedProcessFail injection to process [10864] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x0
17:32:12.1623ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |10864|: Teams.exe
17:38:13.1763ABC441ProcessInjector::HandleElevatedProcessFail injection to process [6684] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x0
17:38:13.1773ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |6684|: Teams.exe
17:44:14.2393ABC441ProcessInjector::HandleElevatedProcessFail injection to process [17972] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x0
17:44:14.2393ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |17972|: Teams.exe
17:50:15.3633ABC441ProcessInjector::HandleElevatedProcessFail injection to process [20836] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x0
17:50:15.3633ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |20836|: Teams.exe
18:10:17.7143ABC441ProcessInjector::HandleElevatedProcessFail injection to process [1032] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x0
18:10:17.7143ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |1032|: Teams.exe
18:16:58.7413ABC441ProcessInjector::HandleElevatedProcessFail injection to process [15636] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x5
18:16:58.7413ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |15636|: Teams.exe
18:18:02.7423ABC629ProcessInjector::InjectProcessprocess |DropboxUpdate.exe| missing h
18:22:59.7743ABC441ProcessInjector::HandleElevatedProcessFail injection to process [1592] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x5
18:22:59.7743ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |1592|: Teams.exe
18:28:59.8473ABC441ProcessInjector::HandleElevatedProcessFail injection to process [14304] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x5
18:28:59.8473ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |14304|: Teams.exe
18:35:00.8913ABC441ProcessInjector::HandleElevatedProcessFail injection to process [780] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x5
18:35:00.8913ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |780|: Teams.exe
19:10:26.763ABC441ProcessInjector::HandleElevatedProcessFail injection to process [12460] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x5
19:10:26.763ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |12460|: Teams.exe
19:18:03.1563ABC629ProcessInjector::InjectProcessprocess |DropboxUpdate.exe| missing h
19:22:11.1643ABC629ProcessInjector::InjectProcessprocess |OverwolfUpdater.exe| missing h
19:22:36.1623ABC629ProcessInjector::InjectProcessprocess |owver64.exe| missing h
19:22:58.1583ABC629ProcessInjector::InjectProcessprocess |OverwolfSetup.exe| missing h
19:22:58.1583ABC629ProcessInjector::InjectProcessprocess |OverwolfSetup.exe| missing h
19:23:03.1603ABC629ProcessInjector::InjectProcessprocess |OverwolfUpdater.exe| missing h
19:23:03.1603ABC629ProcessInjector::InjectProcessprocess |OverwolfUpdater.exe| missing h
19:30:28.2583ABC441ProcessInjector::HandleElevatedProcessFail injection to process [19904] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x0
19:30:28.2583ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |19904|: Teams.exe
19:32:39.3193ABC629ProcessInjector::InjectProcessprocess |MicrosoftEdgeUpdate.exe| missing h
19:40:29.7143ABC441ProcessInjector::HandleElevatedProcessFail injection to process [19612] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x578
19:40:29.7143ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |19612|: Teams.exe
19:45:44.7583ABC441ProcessInjector::HandleElevatedProcessFail injection to process [3864] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x578
19:45:44.7583ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |3864|: Teams.exe
19:49:50.7993ABC441ProcessInjector::HandleElevatedProcessFail injection to process [13952] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x578
19:49:50.7993ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |13952|: Teams.exe
19:55:51.8503ABC441ProcessInjector::HandleElevatedProcessFail injection to process [13800] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x578
19:55:51.8503ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |13800|: Teams.exe
20:01:51.8833ABC441ProcessInjector::HandleElevatedProcessFail injection to process [20388] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x578
20:01:51.8833ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |20388|: Teams.exe
20:05:52.8993ABC441ProcessInjector::HandleElevatedProcessFail injection to process [8148] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x578
20:05:52.8993ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |8148|: Teams.exe
20:11:53.9233ABC441ProcessInjector::HandleElevatedProcessFail injection to process [7708] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x578
20:11:53.9233ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |7708|: Teams.exe
20:18:01.9833ABC629ProcessInjector::InjectProcessprocess |DropboxUpdate.exe| missing h
20:19:54.9883ABC441ProcessInjector::HandleElevatedProcessFail injection to process [13496] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x578
20:19:54.9883ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |13496|: Teams.exe
20:25:55.513ABC441ProcessInjector::HandleElevatedProcessFail injection to process [16244] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x578
20:25:55.513ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |16244|: Teams.exe
20:31:56.1163ABC441ProcessInjector::HandleElevatedProcessFail injection to process [12492] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x578
20:31:56.1163ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |12492|: Teams.exe
20:35:57.1413ABC441ProcessInjector::HandleElevatedProcessFail injection to process [11100] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x578
20:35:57.1413ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |11100|: Teams.exe
20:36:24.1483ABC629ProcessInjector::InjectProcessprocess |OverwolfUpdater.exe| missing h
20:49:51.2063ABC629ProcessInjector::InjectProcessprocess |GoogleUpdate.exe| missing h
20:50:38.2243ABC441ProcessInjector::HandleElevatedProcessFail injection to process [5452] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x578
20:50:38.2243ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |5452|: Teams.exe
21:10:47.4393ABC629ProcessInjector::InjectProcessprocess |MicrosoftEdgeUpdate.exe| missing h
21:11:42.4443ABC629ProcessInjector::InjectProcessprocess |MicrosoftEdgeUpdate.exe| missing h
21:14:01.4403ABC441ProcessInjector::HandleElevatedProcessFail injection to process [24464] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x5
21:14:01.4403ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |24464|: Teams.exe
21:18:02.4713ABC629ProcessInjector::InjectProcessprocess |DropboxUpdate.exe| missing h
21:20:02.5053ABC441ProcessInjector::HandleElevatedProcessFail injection to process [22948] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x5
21:20:02.5053ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |22948|: Teams.exe
21:26:03.5173ABC441ProcessInjector::HandleElevatedProcessFail injection to process [6168] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x5
21:26:03.5173ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |6168|: Teams.exe
21:32:04.5693ABC441ProcessInjector::HandleElevatedProcessFail injection to process [21392] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x5
21:32:04.5693ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |21392|: Teams.exe
21:38:04.6043ABC441ProcessInjector::HandleElevatedProcessFail injection to process [7868] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x5
21:38:04.6043ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |7868|: Teams.exe
21:44:05.6963ABC441ProcessInjector::HandleElevatedProcessFail injection to process [12496] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x578
21:44:05.6963ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |12496|: Teams.exe
21:49:51.7323ABC629ProcessInjector::InjectProcessprocess |GoogleUpdate.exe| missing h
21:50:46.7383ABC441ProcessInjector::HandleElevatedProcessFail injection to process [252] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x0
21:50:46.7383ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |252|: Teams.exe
21:54:25.9163ABC441ProcessInjector::HandleElevatedProcessFail injection to process [17688] [t: 0 w_t_id: 0]- msedge.exe (elevated True) 0x0
21:54:25.9163ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |17688|: msedge.exe
21:54:30.9263ABC441ProcessInjector::HandleElevatedProcessFail injection to process [3964] [t: 0 w_t_id: 0]- msedge.exe (elevated True) 0x0
21:54:30.9263ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |3964|: msedge.exe
21:54:30.9263ABC441ProcessInjector::HandleElevatedProcessFail injection to process [4032] [t: 0 w_t_id: 0]- msedge.exe (elevated True) 0x0
21:54:30.9263ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |4032|: msedge.exe
21:54:30.9263ABC441ProcessInjector::HandleElevatedProcessFail injection to process [6548] [t: 0 w_t_id: 0]- msedge.exe (elevated True) 0x0
21:54:30.9263ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |6548|: msedge.exe
21:54:30.9263ABC441ProcessInjector::HandleElevatedProcessFail injection to process [13440] [t: 0 w_t_id: 0]- msedge.exe (elevated True) 0x0
21:54:30.9263ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |13440|: msedge.exe
21:54:30.9263ABC441ProcessInjector::HandleElevatedProcessFail injection to process [13568] [t: 0 w_t_id: 0]- msedge.exe (elevated True) 0x0
21:54:30.9273ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |13568|: msedge.exe
21:54:32.9273ABC441ProcessInjector::HandleElevatedProcessFail injection to process [8540] [t: 0 w_t_id: 0]- msedge.exe (elevated True) 0x0
21:54:32.9273ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |8540|: msedge.exe
21:54:33.9813ABC441ProcessInjector::HandleElevatedProcessFail injection to process [16192] [t: 0 w_t_id: 0]- msedge.exe (elevated True) 0x0
21:54:33.9813ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |16192|: msedge.exe
21:54:33.9813ABC441ProcessInjector::HandleElevatedProcessFail injection to process [21260] [t: 0 w_t_id: 0]- msedge.exe (elevated True) 0x0
21:54:33.9813ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |21260|: msedge.exe
21:58:47.2643ABC441ProcessInjector::HandleElevatedProcessFail injection to process [20788] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x1f
21:58:47.2643ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |20788|: Teams.exe
22:10:48.6773ABC441ProcessInjector::HandleElevatedProcessFail injection to process [7780] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x5
22:10:48.6773ABC380ProcessInjector::HandlePendingProccesssFail to inject pending process |7780|: Teams.exe
22:14:49.733ABC629ProcessInjector::InjectProcessprocess |gameinputsvc.exe| missing h