Time | Thread | Line | Function | Message |
17:04:16.829 | 4D20 | 361 | ftw1 | Loading (pid: 14156) |
17:04:16.829 | 4D4C | 146 | ProcessHardwareRecorder::CommandThread | starting recorder thread |
17:04:16.830 | 4D20 | 48 | Update::Detect | Env (C:\WINDOWS\SYSTEM32\d3d11.dll) <0X68520000>6|2|1247870977 |
17:04:16.830 | 4D20 | 48 | Update::Detect | Env (C:\WINDOWS\SYSTEM32\dxgi.dll) <0X6B4B0000>6|2|1247870977 |
17:04:16.927 | 4D20 | 172 | DXManager::Detect | Found in 0 |
17:04:16.927 | 4D20 | 209 | Initialize::GetLocation | @ 0X4F80|20352 |
17:04:16.927 | 4D20 | 209 | Initialize::GetLocation | @ 0X69160|430432 |
17:04:16.927 | 4D20 | 209 | Initialize::GetLocation | @ 0X20410|132112 |
17:04:16.927 | 4D20 | 209 | Initialize::GetLocation | @ 0X1DE0|7648 |
17:04:16.927 | 4D20 | 111 | Update::Caught | C:\WINDOWS\SYSTEM32\d3d11.dll|0X68520000 <> 0X6B4B0000 |
17:04:16.927 | 4D20 | 209 | Initialize::GetLocation | @ 0XFD198850|-48658352 |
17:04:16.927 | 4D20 | 111 | Update::Caught | C:\WINDOWS\SYSTEM32\d3d11.dll|0X68520000 <> 0X6B4B0000 |
17:04:16.927 | 4D20 | 209 | Initialize::GetLocation | @ 0XFD19DE80|-48636288 |
17:04:16.927 | 4D20 | 111 | Update::Caught | C:\WINDOWS\SYSTEM32\d3d11.dll|0X68520000 <> 0X6B4B0000 |
17:04:16.927 | 4D20 | 209 | Initialize::GetLocation | @ 0XFD19C5E0|-48642592 |
17:04:16.927 | 4D20 | 111 | Update::Caught | C:\WINDOWS\SYSTEM32\d3d11.dll|0X68520000 <> 0X6B4B0000 |
17:04:16.927 | 4D20 | 209 | Initialize::GetLocation | @ 0XFD07A7F0|-49829904 |
17:04:16.943 | 4D20 | 48 | Update::Detect | Env (C:\WINDOWS\SYSTEM32\d3d9.dll) <0X5B690000>6|2|1247870977 |
17:04:17.51 | 4D20 | 129 | DXManager::Detect | OK |
17:04:17.100 | 4D20 | 186 | DXManager::Detect | Done |
17:04:17.108 | 4D20 | 215 | VTableHolderD3d9::init | d3d offsest [sht]: 0x4060 , 0x53c0 |
17:04:17.109 | 4D20 | 209 | Initialize::GetLocation | @ 0X3FC10|261136 |
17:04:17.109 | 4D20 | 209 | Initialize::GetLocation | @ 0X33840|211008 |
17:04:17.109 | 4D20 | 209 | Initialize::GetLocation | @ 0X3BFA0|245664 |
17:04:17.109 | 4D20 | 209 | Initialize::GetLocation | @ 0XB70E0|749792 |
17:04:17.109 | 4D20 | 209 | Initialize::GetLocation | @ 0XB6C30|748592 |
17:04:17.109 | 4D20 | 209 | Initialize::GetLocation | @ 0XAF40|44864 |
17:04:17.109 | 4D20 | 209 | Initialize::GetLocation | @ 0XB6CD0|748752 |
17:04:17.109 | 4D20 | 209 | Initialize::GetLocation | @ 0X20C40|134208 |
17:04:17.109 | 4D20 | 209 | Initialize::GetLocation | @ 0X16A10|92688 |
17:04:17.109 | 4D20 | 209 | Initialize::GetLocation | @ 0X2D530|185648 |
17:04:17.109 | 4D20 | 209 | Initialize::GetLocation | @ 0X113350|1127248 |
17:04:17.109 | 4D20 | 209 | Initialize::GetLocation | @ 0X112E10|1125904 |
17:04:17.109 | 4D20 | 209 | Initialize::GetLocation | @ 0X20B30|133936 |
17:04:17.109 | 4D20 | 209 | Initialize::GetLocation | @ 0X20A40|133696 |
17:04:17.109 | 4D20 | 209 | Initialize::GetLocation | @ 0XD8D0|55504 |
17:04:17.109 | 4D20 | 209 | Initialize::GetLocation | @ 0X466B0|288432 |
17:04:17.109 | 4D20 | 209 | Initialize::GetLocation | @ 0XAAB0|43696 |
17:04:17.109 | 4D20 | 209 | Initialize::GetLocation | @ 0XCE2D0|844496 |
17:04:17.109 | 4D20 | 209 | Initialize::GetLocation | @ 0XCE9A0|846240 |
17:04:17.109 | 4D20 | 209 | Initialize::GetLocation | @ 0XAAB0|43696 |
17:04:17.109 | 4D20 | 209 | Initialize::GetLocation | @ 0XCF490|849040 |
17:04:17.109 | 4D20 | 209 | Initialize::GetLocation | @ 0XCFAF0|850672 |
17:04:17.127 | 4D20 | 48 | Update::Detect | Env (C:\WINDOWS\SYSTEM32\dinput.dll) <0X11A60000>6|2|1247870977 |
17:04:17.144 | 4D20 | 83 | VTableHolderDInput::init | m_pDIW->CreateDevice - succeded. |
17:04:17.145 | 4D20 | 209 | Initialize::GetLocation | @ 0X4040|16448 |
17:04:17.145 | 4D20 | 209 | Initialize::GetLocation | @ 0X6410|25616 |
17:04:17.145 | 4D20 | 209 | Initialize::GetLocation | @ 0X65C0|26048 |
17:04:17.147 | 4D20 | 48 | Update::Detect | Env (C:\WINDOWS\SYSTEM32\dinput8.dll) <0XFD270000>6|2|1247870977 |
17:04:17.161 | 4D20 | 93 | VTableHolderDInput8::init | m_pDI8W->CreateDevice - succeded. |
17:04:17.162 | 4D20 | 110 | VTableHolderDInput8::init | m_pDI8A->CreateDevice - succeded. |
17:04:17.162 | 4D20 | 209 | Initialize::GetLocation | @ 0XA5D0|42448 |
17:04:17.162 | 4D20 | 209 | Initialize::GetLocation | @ 0XD4D0|54480 |
17:04:17.162 | 4D20 | 209 | Initialize::GetLocation | @ 0XD290|53904 |
17:04:17.219 | 4D20 | 225 | InterProcessElement::open | InterProcess Overwolf_SHARED_MEMORY_2_2_79_3_14156 opened succesfuly |
17:04:17.219 | 4D20 | 72 | HookFunctionsTableInitializer::SetHookFunctionsData | D3D9 Sht offsets 0x4060 , 0x53c0 |
17:04:17.219 | 4D20 | 256 | InterProcessElement::close | InterProcess Overwolf_SHARED_MEMORY_2_2_79_3_14156 close 2147483647 bytes |
17:04:17.219 | 4D20 | 297 | InjectOWExplorer | Explorer file name [D:\Program Files (x86)\Overwolf\0.149.2.6\OWExplorer.dll] |
17:04:17.874 | 4D20 | 385 | ftw1 | OWExplorer injected |
17:04:18.163 | 4F0C | 51 | `anonymous-namespace'::CreateProvider | Initialize provider: NET |
17:04:18.163 | 4F0C | 117 | libprocess::NetworkTracer::Initialize | init res:0x5 [started:0 active:0 enbaled:0] |
17:04:18.163 | 4F0C | 54 | `anonymous-namespace'::CreateProvider | Fail to initlized provider: NET |
17:04:18.163 | 4F0C | 51 | `anonymous-namespace'::CreateProvider | Initialize provider: GPU |
17:06:48.570 | 4F10 | 352 | ProcessInjector::HandleElevatedProcess | Fail injection to process [2648] [t: 0 w_t_id: 0]- NVDisplay.Container.exe (elevated True) 0x1f |
17:06:48.570 | 4F10 | 291 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |2648|: NVDisplay.Container.exe |
17:06:48.570 | 4F10 | 352 | ProcessInjector::HandleElevatedProcess | Fail injection to process [5028] [t: 0 w_t_id: 0]- nvcontainer.exe (elevated True) 0x1f |
17:06:48.570 | 4F10 | 291 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |5028|: nvcontainer.exe |
17:06:48.570 | 4F10 | 352 | ProcessInjector::HandleElevatedProcess | Fail injection to process [5052] [t: 0 w_t_id: 0]- MsMpEng.exe (elevated True) 0x1f |
17:06:48.570 | 4F10 | 291 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |5052|: MsMpEng.exe |
17:06:48.570 | 4F10 | 352 | ProcessInjector::HandleElevatedProcess | Fail injection to process [11352] [t: 0 w_t_id: 0]- NVIDIA Share.exe (elevated True) 0x1f |
17:06:48.570 | 4F10 | 291 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |11352|: NVIDIA Share.exe |
17:06:48.570 | 4F10 | 352 | ProcessInjector::HandleElevatedProcess | Fail injection to process [12700] [t: 0 w_t_id: 0]- NVIDIA Share.exe (elevated True) 0x1f |
17:06:48.570 | 4F10 | 291 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |12700|: NVIDIA Share.exe |
17:06:49.576 | 4F10 | 352 | ProcessInjector::HandleElevatedProcess | Fail injection to process [13452] [t: 0 w_t_id: 0]- googledrivesync.exe (elevated True) 0x1f |
17:06:49.576 | 4F10 | 291 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |13452|: googledrivesync.exe |
17:06:49.576 | 4F10 | 352 | ProcessInjector::HandleElevatedProcess | Fail injection to process [14368] [t: 0 w_t_id: 0]- UnrealCEFSubProcess.exe (elevated True) 0x1f |
17:06:49.576 | 4F10 | 291 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |14368|: UnrealCEFSubProcess.exe |
17:06:49.576 | 4F10 | 352 | ProcessInjector::HandleElevatedProcess | Fail injection to process [16396] [t: 0 w_t_id: 0]- lghub.exe (elevated True) 0x1f |
17:06:49.576 | 4F10 | 291 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |16396|: lghub.exe |
17:06:49.576 | 4F10 | 352 | ProcessInjector::HandleElevatedProcess | Fail injection to process [17028] [t: 0 w_t_id: 0]- lghub.exe (elevated True) 0x1f |
17:06:49.576 | 4F10 | 291 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |17028|: lghub.exe |
17:09:22.537 | 4F10 | 352 | ProcessInjector::HandleElevatedProcess | Fail injection to process [8428] [t: 0 w_t_id: 0]- WhatsApp.exe (elevated True) 0x1f |
17:09:22.537 | 4F10 | 291 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |8428|: WhatsApp.exe |
17:09:22.537 | 4F10 | 352 | ProcessInjector::HandleElevatedProcess | Fail injection to process [20152] [t: 0 w_t_id: 0]- WhatsApp.exe (elevated True) 0x1f |
17:09:22.537 | 4F10 | 291 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |20152|: WhatsApp.exe |
17:09:24.548 | 4F10 | 352 | ProcessInjector::HandleElevatedProcess | Fail injection to process [12320] [t: 0 w_t_id: 0]- WhatsApp.exe (elevated True) 0x1f |
17:09:24.548 | 4F10 | 291 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |12320|: WhatsApp.exe |
17:10:26.973 | 4F10 | 352 | ProcessInjector::HandleElevatedProcess | Fail injection to process [8016] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x1f |
17:10:26.973 | 4F10 | 291 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |8016|: Code.exe |
17:10:26.973 | 4F10 | 352 | ProcessInjector::HandleElevatedProcess | Fail injection to process [12188] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x1f |
17:10:26.973 | 4F10 | 291 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |12188|: Code.exe |
17:10:28.986 | 4F10 | 352 | ProcessInjector::HandleElevatedProcess | Fail injection to process [11920] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x1f |
17:10:28.986 | 4F10 | 291 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |11920|: Code.exe |
17:10:29.992 | 4F10 | 352 | ProcessInjector::HandleElevatedProcess | Fail injection to process [11648] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x1f |
17:10:29.992 | 4F10 | 291 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |11648|: Code.exe |
17:10:32.7 | 4F10 | 352 | ProcessInjector::HandleElevatedProcess | Fail injection to process [22184] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x1f |
17:10:32.7 | 4F10 | 291 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |22184|: Code.exe |
17:10:32.7 | 4F10 | 352 | ProcessInjector::HandleElevatedProcess | Fail injection to process [22192] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x1f |
17:10:32.7 | 4F10 | 291 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |22192|: Code.exe |
17:10:32.7 | 4F10 | 352 | ProcessInjector::HandleElevatedProcess | Fail injection to process [22216] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x1f |
17:10:32.7 | 4F10 | 291 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |22216|: Code.exe |
17:10:32.7 | 4F10 | 352 | ProcessInjector::HandleElevatedProcess | Fail injection to process [22396] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x1f |
17:10:32.7 | 4F10 | 291 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |22396|: Code.exe |
17:10:32.7 | 4F10 | 352 | ProcessInjector::HandleElevatedProcess | Fail injection to process [22444] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x1f |
17:10:32.7 | 4F10 | 291 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |22444|: Code.exe |
17:10:32.7 | 4F10 | 352 | ProcessInjector::HandleElevatedProcess | Fail injection to process [22464] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x1f |
17:10:32.7 | 4F10 | 291 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |22464|: Code.exe |
17:10:36.42 | 4F10 | 352 | ProcessInjector::HandleElevatedProcess | Fail injection to process [22580] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x1f |
17:10:36.42 | 4F10 | 291 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |22580|: Code.exe |