TimeThreadLineFunctionMessage
10:12:58.6612A8361ftw1Loading (pid: 6808)
10:12:58.709D0146ProcessHardwareRecorder::CommandThreadstarting recorder thread
10:12:58.7112A848Update::DetectEnv (C:\Windows\SYSTEM32\d3d11.dll) <0X2E460000>6|2|1203372419
10:12:58.7112A848Update::DetectEnv (C:\Windows\SYSTEM32\dxgi.dll) <0X32C40000>6|2|1203372847
10:12:58.15912A8172DXManager::DetectFound in 0
10:12:58.15912A8209Initialize::GetLocation@ 0X4670|18032
10:12:58.15912A8209Initialize::GetLocation@ 0X66400|418816
10:12:58.15912A8209Initialize::GetLocation@ 0X19DE0|105952
10:12:58.15912A8209Initialize::GetLocation@ 0X1350|4944
10:12:58.15912A8111Update::CaughtC:\Windows\SYSTEM32\d3d11.dll|0X2E460000 <> 0X32C40000
10:12:58.15912A8209Initialize::GetLocation@ 0XFB942E80|-74174848
10:12:58.15912A8111Update::CaughtC:\Windows\SYSTEM32\d3d11.dll|0X2E460000 <> 0X32C40000
10:12:58.15912A8209Initialize::GetLocation@ 0XFB947F80|-74154112
10:12:58.15912A8111Update::CaughtC:\Windows\SYSTEM32\d3d11.dll|0X2E460000 <> 0X32C40000
10:12:58.15912A8209Initialize::GetLocation@ 0XFB93E620|-74193376
10:12:58.15912A8111Update::CaughtC:\Windows\SYSTEM32\d3d11.dll|0X2E460000 <> 0X32C40000
10:12:58.15912A8209Initialize::GetLocation@ 0XFB82AD10|-75322096
10:12:58.17112A848Update::DetectEnv (C:\Windows\SYSTEM32\d3d9.dll) <0XEAB0000>6|2|1203372419
10:12:58.22212A8129DXManager::DetectOK
10:12:58.24512A8186DXManager::DetectDone
10:12:58.24612A8215VTableHolderD3d9::initd3d offsest [sht]: 0x4060 , 0x53c0
10:12:58.24912A8209Initialize::GetLocation@ 0X3AC00|240640
10:12:58.24912A8209Initialize::GetLocation@ 0X2C5B0|181680
10:12:58.24912A8209Initialize::GetLocation@ 0X36D00|224512
10:12:58.24912A8209Initialize::GetLocation@ 0XAE020|712736
10:12:58.24912A8209Initialize::GetLocation@ 0XADB70|711536
10:12:58.24912A8209Initialize::GetLocation@ 0X5880|22656
10:12:58.24912A8209Initialize::GetLocation@ 0XADC10|711696
10:12:58.24912A8209Initialize::GetLocation@ 0X20FF0|135152
10:12:58.24912A8209Initialize::GetLocation@ 0X1CA60|117344
10:12:58.24912A8209Initialize::GetLocation@ 0X1C8E0|116960
10:12:58.24912A8209Initialize::GetLocation@ 0X1084E0|1082592
10:12:58.24912A8209Initialize::GetLocation@ 0X107F90|1081232
10:12:58.24912A8209Initialize::GetLocation@ 0X248B0|149680
10:12:58.25012A8209Initialize::GetLocation@ 0X247A0|149408
10:12:58.25012A8209Initialize::GetLocation@ 0X2C440|181312
10:12:58.25012A8209Initialize::GetLocation@ 0X3F210|258576
10:12:58.25012A8209Initialize::GetLocation@ 0XF3E0|62432
10:12:58.25012A8209Initialize::GetLocation@ 0XF4E0|62688
10:12:58.25012A8209Initialize::GetLocation@ 0XF5D0|62928
10:12:58.25012A8209Initialize::GetLocation@ 0XF3E0|62432
10:12:58.25012A8209Initialize::GetLocation@ 0XF280|62080
10:12:58.25012A8209Initialize::GetLocation@ 0XF430|62512
10:12:58.27512A848Update::DetectEnv (C:\Windows\SYSTEM32\dinput.dll) <0XD93F0000>6|2|1203372033
10:12:58.32712A883VTableHolderDInput::initm_pDIW->CreateDevice - succeded.
10:12:58.32712A8209Initialize::GetLocation@ 0X3CC0|15552
10:12:58.32712A8209Initialize::GetLocation@ 0X5FD0|24528
10:12:58.32712A8209Initialize::GetLocation@ 0X6180|24960
10:12:58.33212A848Update::DetectEnv (C:\Windows\SYSTEM32\dinput8.dll) <0XD69B0000>6|2|1203372033
10:12:58.35912A893VTableHolderDInput8::initm_pDI8W->CreateDevice - succeded.
10:12:58.35912A8110VTableHolderDInput8::initm_pDI8A->CreateDevice - succeded.
10:12:58.35912A8209Initialize::GetLocation@ 0X10000|65536
10:12:58.35912A8209Initialize::GetLocation@ 0X12C80|76928
10:12:58.35912A8209Initialize::GetLocation@ 0X12A60|76384
10:12:58.41312A8225InterProcessElement::openInterProcess Overwolf_SHARED_MEMORY_2_2_79_8_6808 opened succesfuly
10:12:58.41312A872HookFunctionsTableInitializer::SetHookFunctionsDataD3D9 Sht offsets 0x4060 , 0x53c0
10:12:58.41312A8256InterProcessElement::closeInterProcess Overwolf_SHARED_MEMORY_2_2_79_8_6808 close 2147483647 bytes
10:12:58.41312A8297InjectOWExplorerExplorer file name [C:\Program Files (x86)\Overwolf\0.153.0.10\OWExplorer.dll]
10:12:58.42912A8385ftw1OWExplorer injected
10:12:58.94337EC51`anonymous-namespace'::CreateProviderInitialize provider: NET
10:12:58.94337EC117libprocess::NetworkTracer::Initializeinit res:0x5 [started:0 active:0 enbaled:0]
10:12:58.94337EC54`anonymous-namespace'::CreateProviderFail to initlized provider: NET
10:12:58.94337EC51`anonymous-namespace'::CreateProviderInitialize provider: GPU
10:15:29.435423C394ProcessInjector::HandleElevatedProcessFail injection to process [3624] [t: 0 w_t_id: 0]- NVDisplay.Container.exe (elevated True) 0x0
10:15:29.435423C333ProcessInjector::HandlePendingProccesssFail to inject pending process |3624|: NVDisplay.Container.exe
10:15:29.435423C394ProcessInjector::HandleElevatedProcessFail injection to process [5408] [t: 0 w_t_id: 0]- nvcontainer.exe (elevated True) 0x0
10:15:29.435423C333ProcessInjector::HandlePendingProccesssFail to inject pending process |5408|: nvcontainer.exe
10:15:29.435423C394ProcessInjector::HandleElevatedProcessFail injection to process [12484] [t: 0 w_t_id: 0]- NVIDIA Share.exe (elevated True) 0x0
10:15:29.435423C333ProcessInjector::HandlePendingProccesssFail to inject pending process |12484|: NVIDIA Share.exe
10:15:29.435423C394ProcessInjector::HandleElevatedProcessFail injection to process [12636] [t: 0 w_t_id: 0]- NVIDIA Share.exe (elevated True) 0x0
10:15:29.435423C333ProcessInjector::HandlePendingProccesssFail to inject pending process |12636|: NVIDIA Share.exe
10:15:29.435423C394ProcessInjector::HandleElevatedProcessFail injection to process [14492] [t: 0 w_t_id: 0]- software_reporter_tool.exe (elevated True) 0x0
10:15:29.435423C333ProcessInjector::HandlePendingProccesssFail to inject pending process |14492|: software_reporter_tool.exe
10:15:29.435423C394ProcessInjector::HandleElevatedProcessFail injection to process [15160] [t: 0 w_t_id: 0]- software_reporter_tool.exe (elevated True) 0x0
10:15:29.435423C333ProcessInjector::HandlePendingProccesssFail to inject pending process |15160|: software_reporter_tool.exe
10:15:29.435423C394ProcessInjector::HandleElevatedProcessFail injection to process [15244] [t: 0 w_t_id: 0]- software_reporter_tool.exe (elevated True) 0x0
10:15:29.435423C333ProcessInjector::HandlePendingProccesssFail to inject pending process |15244|: software_reporter_tool.exe
10:15:29.435423C394ProcessInjector::HandleElevatedProcessFail injection to process [15452] [t: 0 w_t_id: 0]- lghub.exe (elevated True) 0x0
10:15:29.435423C333ProcessInjector::HandlePendingProccesssFail to inject pending process |15452|: lghub.exe
10:15:29.435423C394ProcessInjector::HandleElevatedProcessFail injection to process [17168] [t: 0 w_t_id: 0]- lghub.exe (elevated True) 0x0
10:15:29.436423C333ProcessInjector::HandlePendingProccesssFail to inject pending process |17168|: lghub.exe
10:15:30.435423C394ProcessInjector::HandleElevatedProcessFail injection to process [5152] [t: 0 w_t_id: 0]- UnrealCEFSubProcess.exe (elevated True) 0x0
10:15:30.435423C333ProcessInjector::HandlePendingProccesssFail to inject pending process |5152|: UnrealCEFSubProcess.exe
10:31:42.695423C394ProcessInjector::HandleElevatedProcessFail injection to process [17356] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x1f
10:31:42.696423C333ProcessInjector::HandlePendingProccesssFail to inject pending process |17356|: Code.exe
10:31:42.696423C394ProcessInjector::HandleElevatedProcessFail injection to process [20168] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x1f
10:31:42.696423C333ProcessInjector::HandlePendingProccesssFail to inject pending process |20168|: Code.exe
10:31:46.683423C394ProcessInjector::HandleElevatedProcessFail injection to process [12988] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x1f
10:31:46.684423C333ProcessInjector::HandlePendingProccesssFail to inject pending process |12988|: Code.exe
10:31:46.684423C394ProcessInjector::HandleElevatedProcessFail injection to process [16312] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x1f
10:31:46.684423C333ProcessInjector::HandlePendingProccesssFail to inject pending process |16312|: Code.exe
10:31:47.690423C394ProcessInjector::HandleElevatedProcessFail injection to process [4160] [t: 0 w_t_id: 0]- init (elevated True) 0x1f
10:31:47.690423C333ProcessInjector::HandlePendingProccesssFail to inject pending process |4160|: init
10:31:47.690423C394ProcessInjector::HandleElevatedProcessFail injection to process [10884] [t: 0 w_t_id: 0]- init (elevated True) 0x1f
10:31:47.690423C333ProcessInjector::HandlePendingProccesssFail to inject pending process |10884|: init
10:31:47.690423C394ProcessInjector::HandleElevatedProcessFail injection to process [15648] [t: 0 w_t_id: 0]- zsh (elevated True) 0x1f
10:31:47.690423C333ProcessInjector::HandlePendingProccesssFail to inject pending process |15648|: zsh
10:31:48.685423C394ProcessInjector::HandleElevatedProcessFail injection to process [21332] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x1f
10:31:48.685423C333ProcessInjector::HandlePendingProccesssFail to inject pending process |21332|: Code.exe
10:32:33.693423C394ProcessInjector::HandleElevatedProcessFail injection to process [6932] [t: 0 w_t_id: 0]- git-credential-cache--daemon (elevated True) 0x1f
10:32:33.693423C333ProcessInjector::HandlePendingProccesssFail to inject pending process |6932|: git-credential-cache--daemon
10:32:47.698423C394ProcessInjector::HandleElevatedProcessFail injection to process [11316] [t: 0 w_t_id: 0]- zsh (elevated True) 0x1f
10:32:47.698423C333ProcessInjector::HandlePendingProccesssFail to inject pending process |11316|: zsh
10:32:47.698423C394ProcessInjector::HandleElevatedProcessFail injection to process [21064] [t: 0 w_t_id: 0]- init (elevated True) 0x1f
10:32:47.698423C333ProcessInjector::HandlePendingProccesssFail to inject pending process |21064|: init
10:34:54.714423C394ProcessInjector::HandleElevatedProcessFail injection to process [21172] [t: 0 w_t_id: 0]- node (elevated True) 0x1f
10:34:54.714423C333ProcessInjector::HandlePendingProccesssFail to inject pending process |21172|: node
10:43:20.780423C394ProcessInjector::HandleElevatedProcessFail injection to process [20700] [t: 0 w_t_id: 0]- UnrealCEFSubProcess.exe (elevated True) 0x0
10:43:20.780423C333ProcessInjector::HandlePendingProccesssFail to inject pending process |20700|: UnrealCEFSubProcess.exe
11:28:42.642423C394ProcessInjector::HandleElevatedProcessFail injection to process [20120] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x0
11:28:42.642423C333ProcessInjector::HandlePendingProccesssFail to inject pending process |20120|: Code.exe
11:28:42.642423C394ProcessInjector::HandleElevatedProcessFail injection to process [20436] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x0
11:28:42.642423C333ProcessInjector::HandlePendingProccesssFail to inject pending process |20436|: Code.exe
11:28:42.642423C394ProcessInjector::HandleElevatedProcessFail injection to process [23500] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x0
11:28:42.642423C333ProcessInjector::HandlePendingProccesssFail to inject pending process |23500|: Code.exe
11:28:43.642423C394ProcessInjector::HandleElevatedProcessFail injection to process [18156] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x0
11:28:43.642423C333ProcessInjector::HandlePendingProccesssFail to inject pending process |18156|: Code.exe
11:51:48.797423C394ProcessInjector::HandleElevatedProcessFail injection to process [6276] [t: 0 w_t_id: 0]- VALORANT.exe (elevated True) 0x0
11:51:48.797423C333ProcessInjector::HandlePendingProccesssFail to inject pending process |6276|: VALORANT.exe
11:53:23.783423C394ProcessInjector::HandleElevatedProcessFail injection to process [8228] [t: 0 w_t_id: 0]- owobs-ffmpeg-mux.exe (elevated True) 0x0
11:53:23.783423C333ProcessInjector::HandlePendingProccesssFail to inject pending process |8228|: owobs-ffmpeg-mux.exe