TimeThreadLineFunctionMessage
12:27:31.9615E60361ftw1Loading (pid: 11696)
12:27:31.9635E6048Update::DetectEnv (C:\Windows\SYSTEM32\d3d11.dll) <0XCA490000>6|2|1203372419
12:27:31.9635E6048Update::DetectEnv (C:\Windows\SYSTEM32\dxgi.dll) <0XCBB30000>6|2|1203373081
12:27:31.9841B58146ProcessHardwareRecorder::CommandThreadstarting recorder thread
12:27:32.1985E60172DXManager::DetectFound in 0
12:27:32.1995E60209Initialize::GetLocation@ 0X4660|18016
12:27:32.1995E60209Initialize::GetLocation@ 0X661F0|418288
12:27:32.1995E60209Initialize::GetLocation@ 0X19DB0|105904
12:27:32.1995E60209Initialize::GetLocation@ 0X1350|4944
12:27:32.1995E60111Update::CaughtC:\Windows\SYSTEM32\d3d11.dll|0XCA490000 <> 0XCBB30000
12:27:32.1995E60209Initialize::GetLocation@ 0XFEA82E80|-22532480
12:27:32.1995E60111Update::CaughtC:\Windows\SYSTEM32\d3d11.dll|0XCA490000 <> 0XCBB30000
12:27:32.1995E60209Initialize::GetLocation@ 0XFEA87F80|-22511744
12:27:32.1995E60111Update::CaughtC:\Windows\SYSTEM32\d3d11.dll|0XCA490000 <> 0XCBB30000
12:27:32.1995E60209Initialize::GetLocation@ 0XFEA7E620|-22551008
12:27:32.1995E60111Update::CaughtC:\Windows\SYSTEM32\d3d11.dll|0XCA490000 <> 0XCBB30000
12:27:32.1995E60209Initialize::GetLocation@ 0XFE96AD10|-23679728
12:27:32.3995E6048Update::DetectEnv (C:\Windows\SYSTEM32\d3d9.dll) <0XA29B0000>6|2|1203372419
12:27:32.5915E60129DXManager::DetectOK
12:27:32.7075E60186DXManager::DetectDone
12:27:32.7075E60215VTableHolderD3d9::initd3d offsest [sht]: 0x4060 , 0x53c0
12:27:32.7205E60209Initialize::GetLocation@ 0X3AC00|240640
12:27:32.7205E60209Initialize::GetLocation@ 0X2C5B0|181680
12:27:32.7205E60209Initialize::GetLocation@ 0X36D00|224512
12:27:32.7215E60209Initialize::GetLocation@ 0XAE020|712736
12:27:32.7215E60209Initialize::GetLocation@ 0XADB70|711536
12:27:32.7215E60209Initialize::GetLocation@ 0X5880|22656
12:27:32.7215E60209Initialize::GetLocation@ 0XADC10|711696
12:27:32.7215E60209Initialize::GetLocation@ 0X20FF0|135152
12:27:32.7215E60209Initialize::GetLocation@ 0X1CA60|117344
12:27:32.7215E60209Initialize::GetLocation@ 0X1C8E0|116960
12:27:32.7215E60209Initialize::GetLocation@ 0X1084E0|1082592
12:27:32.7215E60209Initialize::GetLocation@ 0X107F90|1081232
12:27:32.7215E60209Initialize::GetLocation@ 0X248B0|149680
12:27:32.7215E60209Initialize::GetLocation@ 0X247A0|149408
12:27:32.7215E60209Initialize::GetLocation@ 0X2C440|181312
12:27:32.7215E60209Initialize::GetLocation@ 0X3F210|258576
12:27:32.7215E60209Initialize::GetLocation@ 0XF3E0|62432
12:27:32.7215E60209Initialize::GetLocation@ 0XF4E0|62688
12:27:32.7215E60209Initialize::GetLocation@ 0XF5D0|62928
12:27:32.7215E60209Initialize::GetLocation@ 0XF3E0|62432
12:27:32.7215E60209Initialize::GetLocation@ 0XF280|62080
12:27:32.7215E60209Initialize::GetLocation@ 0XF430|62512
12:27:32.7415E6048Update::DetectEnv (C:\Windows\SYSTEM32\dinput.dll) <0XA3A90000>6|2|1203372033
12:27:32.7535E6083VTableHolderDInput::initm_pDIW->CreateDevice - succeded.
12:27:32.7535E60209Initialize::GetLocation@ 0X3CC0|15552
12:27:32.7535E60209Initialize::GetLocation@ 0X5FD0|24528
12:27:32.7535E60209Initialize::GetLocation@ 0X6180|24960
12:27:32.7565E6048Update::DetectEnv (C:\Windows\SYSTEM32\dinput8.dll) <0X802E0000>6|2|1203372033
12:27:32.7665E6093VTableHolderDInput8::initm_pDI8W->CreateDevice - succeded.
12:27:32.7665E60110VTableHolderDInput8::initm_pDI8A->CreateDevice - succeded.
12:27:32.7665E60209Initialize::GetLocation@ 0X10000|65536
12:27:32.7665E60209Initialize::GetLocation@ 0X12C80|76928
12:27:32.7665E60209Initialize::GetLocation@ 0X12A60|76384
12:27:32.8205E60225InterProcessElement::openInterProcess Overwolf_SHARED_MEMORY_2_2_80_3_11696 opened succesfuly
12:27:32.8205E6072HookFunctionsTableInitializer::SetHookFunctionsDataD3D9 Sht offsets 0x4060 , 0x53c0
12:27:32.8205E60256InterProcessElement::closeInterProcess Overwolf_SHARED_MEMORY_2_2_80_3_11696 close 2147483647 bytes
12:27:32.8205E60297InjectOWExplorerExplorer file name [C:\Program Files (x86)\Overwolf\0.157.0.13\OWExplorer.dll]
12:27:32.8395E60385ftw1OWExplorer injected
12:27:33.35752F851`anonymous-namespace'::CreateProviderInitialize provider: NET
12:27:33.35752F8117libprocess::NetworkTracer::Initializeinit res:0x5 [started:0 active:0 enbaled:0]
12:27:33.35752F854`anonymous-namespace'::CreateProviderFail to initlized provider: NET
12:27:33.35752F851`anonymous-namespace'::CreateProviderInitialize provider: GPU
12:30:03.385462C394ProcessInjector::HandleElevatedProcessFail injection to process [4008] [t: 0 w_t_id: 0]- MsMpEng.exe (elevated True) 0x5
12:30:03.385462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |4008|: MsMpEng.exe
12:30:04.385462C394ProcessInjector::HandleElevatedProcessFail injection to process [10272] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x5
12:30:04.385462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |10272|: Teams.exe
12:30:04.385462C394ProcessInjector::HandleElevatedProcessFail injection to process [15836] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x5
12:30:04.385462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |15836|: Teams.exe
12:30:06.386462C394ProcessInjector::HandleElevatedProcessFail injection to process [13988] [t: 0 w_t_id: 0]- docker-mutagen.exe (elevated True) 0x5
12:30:06.386462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |13988|: docker-mutagen.exe
12:30:06.386462C394ProcessInjector::HandleElevatedProcessFail injection to process [17748] [t: 0 w_t_id: 0]- com.docker.backend.exe (elevated True) 0x5
12:30:06.386462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |17748|: com.docker.backend.exe
12:30:32.575462C394ProcessInjector::HandleElevatedProcessFail injection to process [9920] [t: 0 w_t_id: 0]- vpnkit-bridge.exe (elevated True) 0x1f
12:30:32.575462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |9920|: vpnkit-bridge.exe
12:30:38.576462C394ProcessInjector::HandleElevatedProcessFail injection to process [26676] [t: 0 w_t_id: 0]- vpnkit.exe (elevated True) 0x1f
12:30:38.576462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |26676|: vpnkit.exe
12:30:40.574462C394ProcessInjector::HandleElevatedProcessFail injection to process [15800] [t: 0 w_t_id: 0]- com.docker.proxy.exe (elevated True) 0x1f
12:30:40.574462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |15800|: com.docker.proxy.exe
12:31:38.572462C394ProcessInjector::HandleElevatedProcessFail injection to process [4416] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x1f
12:31:38.572462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |4416|: Code.exe
12:31:38.572462C394ProcessInjector::HandleElevatedProcessFail injection to process [26644] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x1f
12:31:38.573462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |26644|: Code.exe
12:31:42.570462C394ProcessInjector::HandleElevatedProcessFail injection to process [16640] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x1f
12:31:42.570462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |16640|: Code.exe
12:31:44.571462C394ProcessInjector::HandleElevatedProcessFail injection to process [6412] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x1f
12:31:44.571462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |6412|: Code.exe
12:31:45.575462C394ProcessInjector::HandleElevatedProcessFail injection to process [13220] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x1f
12:31:45.575462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |13220|: Code.exe
12:31:46.574462C394ProcessInjector::HandleElevatedProcessFail injection to process [28520] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x1f
12:31:46.574462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |28520|: Code.exe
12:31:58.577462C394ProcessInjector::HandleElevatedProcessFail injection to process [3464] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x1f
12:31:58.577462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |3464|: Code.exe
12:31:58.577462C394ProcessInjector::HandleElevatedProcessFail injection to process [15412] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x1f
12:31:58.577462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |15412|: Code.exe
12:32:00.575462C394ProcessInjector::HandleElevatedProcessFail injection to process [13420] [t: 0 w_t_id: 0]- rg.exe (elevated True) 0x1f
12:32:00.575462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |13420|: rg.exe
12:32:00.575462C394ProcessInjector::HandleElevatedProcessFail injection to process [13640] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x1f
12:32:00.575462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |13640|: Code.exe
12:32:00.575462C394ProcessInjector::HandleElevatedProcessFail injection to process [16140] [t: 0 w_t_id: 0]- rg.exe (elevated True) 0x1f
12:32:00.575462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |16140|: rg.exe
12:32:00.575462C394ProcessInjector::HandleElevatedProcessFail injection to process [23628] [t: 0 w_t_id: 0]- rg.exe (elevated True) 0x1f
12:32:00.575462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |23628|: rg.exe
12:33:32.691462C394ProcessInjector::HandleElevatedProcessFail injection to process [11356] [t: 0 w_t_id: 0]- node.exe (elevated True) 0x1f
12:33:32.691462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |11356|: node.exe
12:33:34.703462C394ProcessInjector::HandleElevatedProcessFail injection to process [16108] [t: 0 w_t_id: 0]- node.exe (elevated True) 0x1f
12:33:34.703462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |16108|: node.exe
12:34:05.721462C394ProcessInjector::HandleElevatedProcessFail injection to process [22320] [t: 0 w_t_id: 0]- node.exe (elevated True) 0x0
12:34:05.721462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |22320|: node.exe
12:34:05.721462C394ProcessInjector::HandleElevatedProcessFail injection to process [22760] [t: 0 w_t_id: 0]- node.exe (elevated True) 0x0
12:34:05.721462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |22760|: node.exe
12:34:05.721462C394ProcessInjector::HandleElevatedProcessFail injection to process [27940] [t: 0 w_t_id: 0]- node.exe (elevated True) 0x0
12:34:05.721462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |27940|: node.exe
12:34:06.720462C394ProcessInjector::HandleElevatedProcessFail injection to process [7736] [t: 0 w_t_id: 0]- node.exe (elevated True) 0x0
12:34:06.720462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |7736|: node.exe
12:34:43.726462C394ProcessInjector::HandleElevatedProcessFail injection to process [10780] [t: 0 w_t_id: 0]- node.exe (elevated True) 0x0
12:34:43.726462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |10780|: node.exe
12:35:20.750462C394ProcessInjector::HandleElevatedProcessFail injection to process [29244] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x0
12:35:20.750462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |29244|: Teams.exe
12:36:25.806462C394ProcessInjector::HandleElevatedProcessFail injection to process [14528] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x5
12:36:25.806462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |14528|: Teams.exe
12:39:50.939462C394ProcessInjector::HandleElevatedProcessFail injection to process [5908] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x5
12:39:50.939462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |5908|: Code.exe
12:39:52.933462C394ProcessInjector::HandleElevatedProcessFail injection to process [17136] [t: 0 w_t_id: 0]- node.exe (elevated True) 0x5
12:39:52.933462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |17136|: node.exe
12:39:59.986462C394ProcessInjector::HandleElevatedProcessFail injection to process [10756] [t: 0 w_t_id: 0]- node.exe (elevated True) 0x5
12:39:59.986462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |10756|: node.exe
12:39:59.986462C394ProcessInjector::HandleElevatedProcessFail injection to process [16504] [t: 0 w_t_id: 0]- node.exe (elevated True) 0x5
12:39:59.986462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |16504|: node.exe
12:41:33.980462C394ProcessInjector::HandleElevatedProcessFail injection to process [20012] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x5
12:41:33.980462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |20012|: Teams.exe
12:44:48.213462C394ProcessInjector::HandleElevatedProcessFail injection to process [14716] [t: 0 w_t_id: 0]- node.exe (elevated True) 0x1f
12:44:48.213462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |14716|: node.exe
12:44:48.213462C394ProcessInjector::HandleElevatedProcessFail injection to process [22280] [t: 0 w_t_id: 0]- node.exe (elevated True) 0x1f
12:44:48.213462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |22280|: node.exe
12:49:45.518462C394ProcessInjector::HandleElevatedProcessFail injection to process [16540] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x5
12:49:45.518462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |16540|: Teams.exe
12:53:17.823462C394ProcessInjector::HandleElevatedProcessFail injection to process [1576] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x5
12:53:17.823462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |1576|: Teams.exe
12:57:21.945462C394ProcessInjector::HandleElevatedProcessFail injection to process [10068] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x5
12:57:21.945462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |10068|: Teams.exe
13:03:25.9462C394ProcessInjector::HandleElevatedProcessFail injection to process [12904] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x5
13:03:25.9462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |12904|: Teams.exe
13:09:29.153462C394ProcessInjector::HandleElevatedProcessFail injection to process [4972] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x5
13:09:29.153462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |4972|: Teams.exe
13:15:28.446462C394ProcessInjector::HandleElevatedProcessFail injection to process [27768] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x5
13:15:28.446462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |27768|: Code.exe
13:26:12.871462C394ProcessInjector::HandleElevatedProcessFail injection to process [5612] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x5
13:26:12.871462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |5612|: Teams.exe
13:30:51.949462C394ProcessInjector::HandleElevatedProcessFail injection to process [16524] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x5
13:30:51.950462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |16524|: Teams.exe
13:39:29.93462C394ProcessInjector::HandleElevatedProcessFail injection to process [29024] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x5
13:39:29.93462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |29024|: Teams.exe
13:53:49.357462C394ProcessInjector::HandleElevatedProcessFail injection to process [24128] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x5
13:53:49.357462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |24128|: Teams.exe
13:59:53.434462C394ProcessInjector::HandleElevatedProcessFail injection to process [7516] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x5
13:59:53.434462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |7516|: Teams.exe
14:03:02.484462C394ProcessInjector::HandleElevatedProcessFail injection to process [23252] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x5
14:03:02.484462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |23252|: Teams.exe
14:09:34.653462C394ProcessInjector::HandleElevatedProcessFail injection to process [9208] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x5
14:09:34.653462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |9208|: Teams.exe
14:20:13.804462C394ProcessInjector::HandleElevatedProcessFail injection to process [29544] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x5
14:20:13.804462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |29544|: Teams.exe
14:28:16.895462C394ProcessInjector::HandleElevatedProcessFail injection to process [3412] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x5
14:28:16.896462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |3412|: Teams.exe
14:41:47.397462C394ProcessInjector::HandleElevatedProcessFail injection to process [16832] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x1f
14:41:47.397462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |16832|: Teams.exe
14:47:49.531462C394ProcessInjector::HandleElevatedProcessFail injection to process [22948] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x5
14:47:49.531462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |22948|: Teams.exe
14:49:55.594462C394ProcessInjector::HandleElevatedProcessFail injection to process [10660] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x5
14:49:55.594462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |10660|: Code.exe
14:49:55.594462C394ProcessInjector::HandleElevatedProcessFail injection to process [12140] [t: 0 w_t_id: 0]- node.exe (elevated True) 0x5
14:49:55.594462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |12140|: node.exe
14:49:55.594462C394ProcessInjector::HandleElevatedProcessFail injection to process [20740] [t: 0 w_t_id: 0]- node.exe (elevated True) 0x5
14:49:55.594462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |20740|: node.exe
14:51:25.665462C394ProcessInjector::HandleElevatedProcessFail injection to process [9148] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x1f
14:51:25.665462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |9148|: Teams.exe
14:53:10.764462C394ProcessInjector::HandleElevatedProcessFail injection to process [12272] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x1f
14:53:10.764462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |12272|: Code.exe
15:02:59.219462C394ProcessInjector::HandleElevatedProcessFail injection to process [25700] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x1f
15:02:59.219462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |25700|: Teams.exe
15:08:29.516462C394ProcessInjector::HandleElevatedProcessFail injection to process [368] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x5
15:08:29.516462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |368|: Teams.exe
15:16:30.755462C394ProcessInjector::HandleElevatedProcessFail injection to process [7720] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x5
15:16:30.755462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |7720|: Teams.exe
15:22:34.847462C394ProcessInjector::HandleElevatedProcessFail injection to process [7528] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x1f
15:22:34.847462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |7528|: Teams.exe
15:28:38.963462C394ProcessInjector::HandleElevatedProcessFail injection to process [9104] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x5
15:28:38.963462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |9104|: Teams.exe
15:34:40.302462C394ProcessInjector::HandleElevatedProcessFail injection to process [1488] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x1f
15:34:40.302462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |1488|: Teams.exe
15:35:47.303462C394ProcessInjector::HandleElevatedProcessFail injection to process [3068] [t: 0 w_t_id: 0]- node.exe (elevated True) 0x1f
15:35:47.303462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |3068|: node.exe
15:35:47.303462C394ProcessInjector::HandleElevatedProcessFail injection to process [20380] [t: 0 w_t_id: 0]- node.exe (elevated True) 0x1f
15:35:47.303462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |20380|: node.exe
15:47:23.836462C394ProcessInjector::HandleElevatedProcessFail injection to process [28424] [t: 0 w_t_id: 0]- node.exe (elevated True) 0x5
15:47:23.836462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |28424|: node.exe
15:47:24.838462C394ProcessInjector::HandleElevatedProcessFail injection to process [13664] [t: 0 w_t_id: 0]- node.exe (elevated True) 0x5
15:47:24.838462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |13664|: node.exe
15:47:25.841462C394ProcessInjector::HandleElevatedProcessFail injection to process [21688] [t: 0 w_t_id: 0]- node.exe (elevated True) 0x5
15:47:25.841462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |21688|: node.exe
15:47:25.841462C394ProcessInjector::HandleElevatedProcessFail injection to process [24364] [t: 0 w_t_id: 0]- node.exe (elevated True) 0x5
15:47:25.841462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |24364|: node.exe
15:47:26.847462C394ProcessInjector::HandleElevatedProcessFail injection to process [17580] [t: 0 w_t_id: 0]- node.exe (elevated True) 0x5
15:47:26.847462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |17580|: node.exe
15:47:26.847462C394ProcessInjector::HandleElevatedProcessFail injection to process [24696] [t: 0 w_t_id: 0]- node.exe (elevated True) 0x5
15:47:26.847462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |24696|: node.exe
15:47:32.838462C394ProcessInjector::HandleElevatedProcessFail injection to process [23364] [t: 0 w_t_id: 0]- node.exe (elevated True) 0x5
15:47:32.838462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |23364|: node.exe
15:53:13.882462C394ProcessInjector::HandleElevatedProcessFail injection to process [13524] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x5
15:53:13.882462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |13524|: Teams.exe
16:11:52.245462C394ProcessInjector::HandleElevatedProcessFail injection to process [23172] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x1f
16:11:52.245462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |23172|: Teams.exe
16:23:32.364462C394ProcessInjector::HandleElevatedProcessFail injection to process [19172] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x5
16:23:32.364462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |19172|: Teams.exe
16:33:36.498462C394ProcessInjector::HandleElevatedProcessFail injection to process [22404] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x5
16:33:36.498462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |22404|: Teams.exe
16:43:41.594462C394ProcessInjector::HandleElevatedProcessFail injection to process [7232] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x1f
16:43:41.594462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |7232|: Teams.exe
16:51:43.794462C394ProcessInjector::HandleElevatedProcessFail injection to process [25236] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x1f
16:51:43.794462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |25236|: Teams.exe
17:02:46.941462C394ProcessInjector::HandleElevatedProcessFail injection to process [20116] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x5
17:02:46.941462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |20116|: Teams.exe
17:07:56.982462C394ProcessInjector::HandleElevatedProcessFail injection to process [13424] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x5
17:07:56.983462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |13424|: Teams.exe
17:13:30.109462C394ProcessInjector::HandleElevatedProcessFail injection to process [6476] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x1f
17:13:30.109462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |6476|: Teams.exe
17:19:34.185462C394ProcessInjector::HandleElevatedProcessFail injection to process [27640] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x1f
17:19:34.185462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |27640|: Teams.exe
17:26:09.298462C394ProcessInjector::HandleElevatedProcessFail injection to process [5224] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x5
17:26:09.298462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |5224|: Teams.exe
17:29:18.323462C394ProcessInjector::HandleElevatedProcessFail injection to process [23176] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x5
17:29:18.323462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |23176|: Teams.exe
17:46:07.683462C394ProcessInjector::HandleElevatedProcessFail injection to process [4180] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x5
17:46:07.683462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |4180|: Teams.exe
17:47:38.856462C394ProcessInjector::HandleElevatedProcessFail injection to process [12116] [t: 0 w_t_id: 0]- node.exe (elevated True) 0x1f
17:47:38.856462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |12116|: node.exe
17:47:38.856462C394ProcessInjector::HandleElevatedProcessFail injection to process [25176] [t: 0 w_t_id: 0]- node.exe (elevated True) 0x1f
17:47:38.856462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |25176|: node.exe
17:47:38.856462C394ProcessInjector::HandleElevatedProcessFail injection to process [29236] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x1f
17:47:38.856462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |29236|: Code.exe
17:47:39.856462C394ProcessInjector::HandleElevatedProcessFail injection to process [17320] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x1f
17:47:39.856462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |17320|: Code.exe
17:58:16.217462C394ProcessInjector::HandleElevatedProcessFail injection to process [22332] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x5
17:58:16.217462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |22332|: Teams.exe
18:06:22.460462C394ProcessInjector::HandleElevatedProcessFail injection to process [21528] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x5
18:06:22.460462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |21528|: Teams.exe
18:17:58.582462C394ProcessInjector::HandleElevatedProcessFail injection to process [6020] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x5
18:17:58.582462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |6020|: Teams.exe
18:45:11.938462C394ProcessInjector::HandleElevatedProcessFail injection to process [1752] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x0
18:45:11.938462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |1752|: Teams.exe
18:53:14.24462C394ProcessInjector::HandleElevatedProcessFail injection to process [6788] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x0
18:53:14.24462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |6788|: Teams.exe
19:03:17.237462C394ProcessInjector::HandleElevatedProcessFail injection to process [15948] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x0
19:03:17.238462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |15948|: Teams.exe
19:13:21.326462C394ProcessInjector::HandleElevatedProcessFail injection to process [22636] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x0
19:13:21.326462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |22636|: Teams.exe
19:23:26.496462C394ProcessInjector::HandleElevatedProcessFail injection to process [19844] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x0
19:23:26.496462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |19844|: Teams.exe
19:33:28.617462C394ProcessInjector::HandleElevatedProcessFail injection to process [9864] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x0
19:33:28.617462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |9864|: Teams.exe
19:43:32.766462C394ProcessInjector::HandleElevatedProcessFail injection to process [28560] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x0
19:43:32.766462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |28560|: Teams.exe
19:53:38.975462C394ProcessInjector::HandleElevatedProcessFail injection to process [29708] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x0
19:53:38.975462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |29708|: Teams.exe
20:03:43.217462C394ProcessInjector::HandleElevatedProcessFail injection to process [29640] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x0
20:03:43.217462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |29640|: Teams.exe
20:15:50.315462C394ProcessInjector::HandleElevatedProcessFail injection to process [30464] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x0
20:15:50.315462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |30464|: Teams.exe
20:19:43.11462C394ProcessInjector::HandleElevatedProcessFail injection to process [20648] [t: 0 w_t_id: 0]- Microsoft.ServiceHub.Controller.exe (elevated True) 0x0
20:19:43.11462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |20648|: Microsoft.ServiceHub.Controller.exe
20:19:43.11462C394ProcessInjector::HandleElevatedProcessFail injection to process [22180] [t: 0 w_t_id: 0]- Microsoft.ServiceHub.Controller.exe (elevated True) 0x0
20:19:43.11462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |22180|: Microsoft.ServiceHub.Controller.exe
20:20:20.9462C394ProcessInjector::HandleElevatedProcessFail injection to process [18740] [t: 0 w_t_id: 0]- ServiceHub.TestWindowStoreHost.exe (elevated True) 0x0
20:20:20.9462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |18740|: ServiceHub.TestWindowStoreHost.exe
20:39:25.702462C394ProcessInjector::HandleElevatedProcessFail injection to process [228] [t: 0 w_t_id: 0]- node.exe (elevated True) 0x5
20:39:25.702462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |228|: node.exe
20:39:25.702462C394ProcessInjector::HandleElevatedProcessFail injection to process [14060] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x5
20:39:25.702462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |14060|: Code.exe
20:39:25.702462C394ProcessInjector::HandleElevatedProcessFail injection to process [14704] [t: 0 w_t_id: 0]- node.exe (elevated True) 0x5
20:39:25.702462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |14704|: node.exe
20:39:25.702462C394ProcessInjector::HandleElevatedProcessFail injection to process [17412] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x5
20:39:25.702462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |17412|: Code.exe
20:42:32.883462C394ProcessInjector::HandleElevatedProcessFail injection to process [11260] [t: 0 w_t_id: 0]- node.exe (elevated True) 0x1f
20:42:32.883462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |11260|: node.exe
20:42:32.883462C394ProcessInjector::HandleElevatedProcessFail injection to process [11724] [t: 0 w_t_id: 0]- node.exe (elevated True) 0x1f
20:42:32.883462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |11724|: node.exe
20:58:15.240462C394ProcessInjector::HandleElevatedProcessFail injection to process [30392] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x1f
20:58:15.240462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |30392|: Teams.exe
21:06:17.413462C394ProcessInjector::HandleElevatedProcessFail injection to process [17096] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x1f
21:06:17.413462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |17096|: Teams.exe
21:14:20.523462C394ProcessInjector::HandleElevatedProcessFail injection to process [14360] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x1f
21:14:20.523462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |14360|: Teams.exe
21:18:22.685462C394ProcessInjector::HandleElevatedProcessFail injection to process [28284] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x1f
21:18:22.685462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |28284|: Teams.exe
21:22:23.767462C394ProcessInjector::HandleElevatedProcessFail injection to process [25252] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x1f
21:22:23.767462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |25252|: Teams.exe
21:27:48.929462C394ProcessInjector::HandleElevatedProcessFail injection to process [18884] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x5
21:27:48.929462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |18884|: Code.exe
21:28:25.24462C394ProcessInjector::HandleElevatedProcessFail injection to process [17916] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x5
21:28:25.25462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |17916|: Teams.exe
21:31:35.190462C394ProcessInjector::HandleElevatedProcessFail injection to process [2136] [t: 0 w_t_id: 0]- node.exe (elevated True) 0x1f
21:31:35.190462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |2136|: node.exe
21:31:35.190462C394ProcessInjector::HandleElevatedProcessFail injection to process [24976] [t: 0 w_t_id: 0]- node.exe (elevated True) 0x1f
21:31:35.190462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |24976|: node.exe
21:38:28.586462C394ProcessInjector::HandleElevatedProcessFail injection to process [29548] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x1f
21:38:28.586462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |29548|: Teams.exe
21:46:31.21462C394ProcessInjector::HandleElevatedProcessFail injection to process [1964] [t: 0 w_t_id: 0]- node.exe (elevated True) 0x1f
21:46:31.21462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |1964|: node.exe
21:46:31.21462C394ProcessInjector::HandleElevatedProcessFail injection to process [23068] [t: 0 w_t_id: 0]- node.exe (elevated True) 0x1f
21:46:31.21462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |23068|: node.exe
21:48:33.124462C394ProcessInjector::HandleElevatedProcessFail injection to process [15976] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x5
21:48:33.124462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |15976|: Teams.exe
21:53:45.446462C394ProcessInjector::HandleElevatedProcessFail injection to process [28408] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x0
21:53:45.446462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |28408|: Code.exe
21:56:26.835462C394ProcessInjector::HandleElevatedProcessFail injection to process [11280] [t: 0 w_t_id: 0]- node.exe (elevated True) 0x5
21:56:26.835462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |11280|: node.exe
21:56:26.835462C394ProcessInjector::HandleElevatedProcessFail injection to process [14012] [t: 0 w_t_id: 0]- node.exe (elevated True) 0x5
21:56:26.835462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |14012|: node.exe
21:56:28.845462C394ProcessInjector::HandleElevatedProcessFail injection to process [9492] [t: 0 w_t_id: 0]- node.exe (elevated True) 0x5
21:56:28.845462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |9492|: node.exe
21:56:28.845462C394ProcessInjector::HandleElevatedProcessFail injection to process [14916] [t: 0 w_t_id: 0]- node.exe (elevated True) 0x5
21:56:28.845462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |14916|: node.exe
21:56:29.837462C394ProcessInjector::HandleElevatedProcessFail injection to process [17912] [t: 0 w_t_id: 0]- node.exe (elevated True) 0x5
21:56:29.837462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |17912|: node.exe
21:56:29.837462C394ProcessInjector::HandleElevatedProcessFail injection to process [27224] [t: 0 w_t_id: 0]- node.exe (elevated True) 0x5
21:56:29.837462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |27224|: node.exe
21:56:37.833462C394ProcessInjector::HandleElevatedProcessFail injection to process [17456] [t: 0 w_t_id: 0]- node.exe (elevated True) 0x5
21:56:37.833462C333ProcessInjector::HandlePendingProccesssFail to inject pending process |17456|: node.exe
21:57:59.715E6066ProcessesMonitor::Stopstopping PM...
21:57:59.7152F8119ProcessesMonitor::ProcessEnumerateThreadexit process listener