Time | Thread | Line | Function | Message |
14:35:31.168 | 4348 | 363 | ftw1 | Loading (pid: 13356) |
14:35:31.168 | 4394 | 146 | ProcessHardwareRecorder::CommandThread | starting recorder thread |
14:35:31.172 | 4348 | 48 | Update::Detect | Env (C:\WINDOWS\SYSTEM32\d3d11.dll) <0XB18E0000>6|2|1203372419 |
14:35:31.172 | 4348 | 48 | Update::Detect | Env (C:\WINDOWS\SYSTEM32\dxgi.dll) <0XB3410000>6|2|1203372419 |
14:35:31.657 | 4348 | 169 | DXManager::Detect | Found in 0 |
14:35:31.659 | 4348 | 209 | Initialize::GetLocation | @ 0X4300|17152 |
14:35:31.659 | 4348 | 209 | Initialize::GetLocation | @ 0X66280|418432 |
14:35:31.659 | 4348 | 209 | Initialize::GetLocation | @ 0X19A50|105040 |
14:35:31.659 | 4348 | 209 | Initialize::GetLocation | @ 0X1350|4944 |
14:35:31.659 | 4348 | 111 | Update::Caught | C:\WINDOWS\SYSTEM32\d3d11.dll|0XB18E0000 <> 0XB3410000 |
14:35:31.659 | 4348 | 209 | Initialize::GetLocation | @ 0XFE5F2E80|-27316608 |
14:35:31.660 | 4348 | 111 | Update::Caught | C:\WINDOWS\SYSTEM32\d3d11.dll|0XB18E0000 <> 0XB3410000 |
14:35:31.660 | 4348 | 209 | Initialize::GetLocation | @ 0XFE5F7F80|-27295872 |
14:35:31.660 | 4348 | 111 | Update::Caught | C:\WINDOWS\SYSTEM32\d3d11.dll|0XB18E0000 <> 0XB3410000 |
14:35:31.660 | 4348 | 209 | Initialize::GetLocation | @ 0XFE5EE620|-27335136 |
14:35:31.660 | 4348 | 111 | Update::Caught | C:\WINDOWS\SYSTEM32\d3d11.dll|0XB18E0000 <> 0XB3410000 |
14:35:31.660 | 4348 | 209 | Initialize::GetLocation | @ 0XFE4DAD10|-28463856 |
14:35:31.846 | 4348 | 48 | Update::Detect | Env (C:\WINDOWS\SYSTEM32\d3d9.dll) <0XA7B40000>6|2|1203372419 |
14:35:32.187 | 4348 | 128 | DXManager::Detect | OK |
14:35:32.320 | 4348 | 185 | DXManager::Detect | Done |
14:35:32.320 | 4348 | 214 | VTableHolderD3d9::init | d3d offsest [sht]: 0x4060 , 0x53c0 |
14:35:32.321 | 4348 | 209 | Initialize::GetLocation | @ 0X3AC00|240640 |
14:35:32.321 | 4348 | 209 | Initialize::GetLocation | @ 0X2C5B0|181680 |
14:35:32.321 | 4348 | 209 | Initialize::GetLocation | @ 0X36D00|224512 |
14:35:32.321 | 4348 | 209 | Initialize::GetLocation | @ 0XAE020|712736 |
14:35:32.321 | 4348 | 209 | Initialize::GetLocation | @ 0XADB70|711536 |
14:35:32.321 | 4348 | 209 | Initialize::GetLocation | @ 0X5880|22656 |
14:35:32.321 | 4348 | 209 | Initialize::GetLocation | @ 0XADC10|711696 |
14:35:32.321 | 4348 | 209 | Initialize::GetLocation | @ 0X20FF0|135152 |
14:35:32.321 | 4348 | 209 | Initialize::GetLocation | @ 0X1CA60|117344 |
14:35:32.321 | 4348 | 209 | Initialize::GetLocation | @ 0X1C8E0|116960 |
14:35:32.321 | 4348 | 209 | Initialize::GetLocation | @ 0X1084E0|1082592 |
14:35:32.321 | 4348 | 209 | Initialize::GetLocation | @ 0X107F90|1081232 |
14:35:32.321 | 4348 | 209 | Initialize::GetLocation | @ 0X248B0|149680 |
14:35:32.321 | 4348 | 209 | Initialize::GetLocation | @ 0X247A0|149408 |
14:35:32.321 | 4348 | 209 | Initialize::GetLocation | @ 0X2C440|181312 |
14:35:32.321 | 4348 | 209 | Initialize::GetLocation | @ 0X3F210|258576 |
14:35:32.321 | 4348 | 209 | Initialize::GetLocation | @ 0XF3E0|62432 |
14:35:32.321 | 4348 | 209 | Initialize::GetLocation | @ 0XF4E0|62688 |
14:35:32.321 | 4348 | 209 | Initialize::GetLocation | @ 0XF5D0|62928 |
14:35:32.321 | 4348 | 209 | Initialize::GetLocation | @ 0XF3E0|62432 |
14:35:32.321 | 4348 | 209 | Initialize::GetLocation | @ 0XF280|62080 |
14:35:32.321 | 4348 | 209 | Initialize::GetLocation | @ 0XF430|62512 |
14:35:32.361 | 4348 | 48 | Update::Detect | Env (C:\WINDOWS\SYSTEM32\dinput.dll) <0X61960000>6|2|1203372033 |
14:35:32.379 | 4348 | 83 | VTableHolderDInput::init | m_pDIW->CreateDevice - succeded. |
14:35:32.379 | 4348 | 209 | Initialize::GetLocation | @ 0X3CC0|15552 |
14:35:32.379 | 4348 | 209 | Initialize::GetLocation | @ 0X5FD0|24528 |
14:35:32.379 | 4348 | 209 | Initialize::GetLocation | @ 0X6180|24960 |
14:35:32.382 | 4348 | 48 | Update::Detect | Env (C:\WINDOWS\SYSTEM32\dinput8.dll) <0X98180000>6|2|1203372033 |
14:35:32.396 | 4348 | 91 | VTableHolderDInput8::init | m_pDI8W->CreateDevice - succeded. |
14:35:32.396 | 4348 | 108 | VTableHolderDInput8::init | m_pDI8A->CreateDevice - succeded. |
14:35:32.396 | 4348 | 209 | Initialize::GetLocation | @ 0X10000|65536 |
14:35:32.396 | 4348 | 209 | Initialize::GetLocation | @ 0X12C80|76928 |
14:35:32.396 | 4348 | 209 | Initialize::GetLocation | @ 0X12A60|76384 |
14:35:32.510 | 4348 | 225 | InterProcessElement::open | InterProcess Overwolf_SHARED_MEMORY_2_2_74_2_13356 opened succesfuly |
14:35:32.510 | 4348 | 72 | HookFunctionsTableInitializer::SetHookFunctionsData | D3D9 Sht offsets 0x4060 , 0x53c0 |
14:35:32.510 | 4348 | 256 | InterProcessElement::close | InterProcess Overwolf_SHARED_MEMORY_2_2_74_2_13356 close 2147483647 bytes |
14:35:32.510 | 4348 | 299 | InjectOWExplorer | Explorer file name [C:\Program Files (x86)\Overwolf\0.139.0.2\OWExplorer.dll] |
14:35:32.595 | 4348 | 387 | ftw1 | OWExplorer injected |
14:35:33.83 | 2904 | 51 | `anonymous-namespace'::CreateProvider | Initialize provider: NET |
14:35:33.83 | 2904 | 117 | libprocess::NetworkTracer::Initialize | init res:0x5 [started:0 active:0 enbaled:0] |
14:35:33.83 | 2904 | 54 | `anonymous-namespace'::CreateProvider | Fail to initlized provider: NET |
14:35:33.83 | 2904 | 51 | `anonymous-namespace'::CreateProvider | Initialize provider: GPU |
14:38:03.598 | 2910 | 349 | ProcessInjector::HandleElevatedProcess | Fail injection to process [2504] [t: 0 w_t_id: 0]- NVDisplay.Container.exe (elevated True) 0x0 |
14:38:03.598 | 2910 | 288 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |2504|: NVDisplay.Container.exe |
14:38:03.598 | 2910 | 349 | ProcessInjector::HandleElevatedProcess | Fail injection to process [4784] [t: 0 w_t_id: 0]- nvcontainer.exe (elevated True) 0x0 |
14:38:03.598 | 2910 | 288 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |4784|: nvcontainer.exe |
14:38:03.598 | 2910 | 349 | ProcessInjector::HandleElevatedProcess | Fail injection to process [4792] [t: 0 w_t_id: 0]- MsMpEng.exe (elevated True) 0x0 |
14:38:03.598 | 2910 | 288 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |4792|: MsMpEng.exe |
14:38:03.598 | 2910 | 349 | ProcessInjector::HandleElevatedProcess | Fail injection to process [13888] [t: 0 w_t_id: 0]- UnrealCEFSubProcess.exe (elevated True) 0x0 |
14:38:03.598 | 2910 | 288 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |13888|: UnrealCEFSubProcess.exe |
14:38:03.598 | 2910 | 349 | ProcessInjector::HandleElevatedProcess | Fail injection to process [14952] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0 |
14:38:03.598 | 2910 | 288 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |14952|: firefox.exe |
14:38:03.598 | 2910 | 349 | ProcessInjector::HandleElevatedProcess | Fail injection to process [15024] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0 |
14:38:03.598 | 2910 | 288 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |15024|: firefox.exe |
14:38:03.598 | 2910 | 349 | ProcessInjector::HandleElevatedProcess | Fail injection to process [15680] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0 |
14:38:03.598 | 2910 | 288 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |15680|: firefox.exe |
14:38:03.598 | 2910 | 349 | ProcessInjector::HandleElevatedProcess | Fail injection to process [16488] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0 |
14:38:03.598 | 2910 | 288 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |16488|: firefox.exe |
14:38:13.598 | 2910 | 349 | ProcessInjector::HandleElevatedProcess | Fail injection to process [3592] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0 |
14:38:13.598 | 2910 | 288 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |3592|: firefox.exe |
14:38:36.608 | 2910 | 349 | ProcessInjector::HandleElevatedProcess | Fail injection to process [2352] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0 |
14:38:36.608 | 2910 | 288 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |2352|: firefox.exe |
15:54:54.779 | 2910 | 349 | ProcessInjector::HandleElevatedProcess | Fail injection to process [8208] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0 |
15:54:54.779 | 2910 | 288 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |8208|: firefox.exe |
15:55:04.783 | 2910 | 349 | ProcessInjector::HandleElevatedProcess | Fail injection to process [7236] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0 |
15:55:04.783 | 2910 | 288 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |7236|: firefox.exe |
16:04:26.793 | 2910 | 349 | ProcessInjector::HandleElevatedProcess | Fail injection to process [11680] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0 |
16:04:26.793 | 2910 | 288 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |11680|: firefox.exe |
16:05:13.791 | 2910 | 349 | ProcessInjector::HandleElevatedProcess | Fail injection to process [2020] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0 |
16:05:13.791 | 2910 | 288 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |2020|: firefox.exe |
16:38:11.869 | 2910 | 349 | ProcessInjector::HandleElevatedProcess | Fail injection to process [10428] [t: 0 w_t_id: 0]- Signal.exe (elevated True) 0x0 |
16:38:11.869 | 2910 | 288 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |10428|: Signal.exe |
19:59:41.472 | 2910 | 349 | ProcessInjector::HandleElevatedProcess | Fail injection to process [18912] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x5 |
19:59:41.473 | 2910 | 288 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |18912|: firefox.exe |
08:38:27.733 | 2910 | 349 | ProcessInjector::HandleElevatedProcess | Fail injection to process [11316] [t: 0 w_t_id: 0]- UnrealCEFSubProcess.exe (elevated True) 0x0 |
08:38:27.733 | 2910 | 288 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |11316|: UnrealCEFSubProcess.exe |
18:23:16.700 | 2910 | 349 | ProcessInjector::HandleElevatedProcess | Fail injection to process [16340] [t: 0 w_t_id: 0]- DismHost.exe (elevated True) 0x0 |
18:23:16.702 | 2910 | 288 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |16340|: DismHost.exe |
20:53:48.492 | 2910 | 349 | ProcessInjector::HandleElevatedProcess | Fail injection to process [10608] [t: 0 w_t_id: 0]- DismHost.exe (elevated True) 0x0 |
20:53:48.492 | 2910 | 288 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |10608|: DismHost.exe |
16:45:02.455 | 2910 | 349 | ProcessInjector::HandleElevatedProcess | Fail injection to process [13952] [t: 0 w_t_id: 0]- DismHost.exe (elevated True) 0x5 |
16:45:02.490 | 2910 | 288 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |13952|: DismHost.exe |
11:36:35.857 | 2910 | 349 | ProcessInjector::HandleElevatedProcess | Fail injection to process [4628] [t: 0 w_t_id: 0]- UnrealCEFSubProcess.exe (elevated True) 0x0 |
11:36:35.864 | 2910 | 288 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |4628|: UnrealCEFSubProcess.exe |
11:57:08.960 | 2910 | 349 | ProcessInjector::HandleElevatedProcess | Fail injection to process [24612] [t: 0 w_t_id: 0]- splwow64.exe (elevated True) 0x0 |
11:57:08.967 | 2910 | 288 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |24612|: splwow64.exe |
12:06:41.984 | 2910 | 349 | ProcessInjector::HandleElevatedProcess | Fail injection to process [1964] [t: 0 w_t_id: 0]- UnrealCEFSubProcess.exe (elevated True) 0x0 |
12:06:41.984 | 2910 | 288 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |1964|: UnrealCEFSubProcess.exe |
12:11:37.34 | 2910 | 349 | ProcessInjector::HandleElevatedProcess | Fail injection to process [24840] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0 |
12:11:37.34 | 2910 | 288 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |24840|: firefox.exe |
12:30:51.380 | 2910 | 349 | ProcessInjector::HandleElevatedProcess | Fail injection to process [2196] [t: 0 w_t_id: 0]- NvOAWrapperCache.exe (elevated True) 0x0 |
12:30:51.380 | 2910 | 288 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |2196|: NvOAWrapperCache.exe |
12:30:51.491 | 2910 | 349 | ProcessInjector::HandleElevatedProcess | Fail injection to process [25060] [t: 0 w_t_id: 0]- OAWrapper.exe (elevated True) 0x0 |
12:30:51.491 | 2910 | 288 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |25060|: OAWrapper.exe |
14:13:04.980 | 2910 | 349 | ProcessInjector::HandleElevatedProcess | Fail injection to process [6328] [t: 0 w_t_id: 0]- cltRT.exe (elevated True) 0x0 |
14:13:04.980 | 2910 | 288 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |6328|: cltRT.exe |
14:13:04.980 | 2910 | 349 | ProcessInjector::HandleElevatedProcess | Fail injection to process [19328] [t: 0 w_t_id: 0]- cltRT.exe (elevated True) 0x0 |
14:13:04.980 | 2910 | 288 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |19328|: cltRT.exe |
14:15:26.678 | 2910 | 374 | ProcessInjector::DoElevetedInjection | Failed to inject process [25060] 0x57 |
14:15:26.685 | 2910 | 332 | ProcessInjector::HandleElevatedProcess | Fail injection to process (will retry again in 5 ses) [25060] [t: 21336 w_t_id: 21336]- minidump-analyzer.exe (elevated True) 0x57 |
14:15:27.678 | 2910 | 374 | ProcessInjector::DoElevetedInjection | Failed to inject process [25060] 0x57 |
14:15:27.678 | 2910 | 349 | ProcessInjector::HandleElevatedProcess | Fail injection to process [25060] [t: 21336 w_t_id: 21336]- minidump-analyzer.exe (elevated True) 0x57 |
14:15:27.678 | 2910 | 288 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |25060|: minidump-analyzer.exe |
14:15:27.679 | 2910 | 374 | ProcessInjector::DoElevetedInjection | Failed to inject process [24644] 0x57 |
14:15:27.679 | 2910 | 332 | ProcessInjector::HandleElevatedProcess | Fail injection to process (will retry again in 5 ses) [24644] [t: 21680 w_t_id: 21680]- minidump-analyzer.exe (elevated True) 0x57 |
14:15:28.677 | 2910 | 374 | ProcessInjector::DoElevetedInjection | Failed to inject process [24644] 0x57 |
14:15:28.677 | 2910 | 349 | ProcessInjector::HandleElevatedProcess | Fail injection to process [24644] [t: 21680 w_t_id: 21680]- minidump-analyzer.exe (elevated True) 0x57 |
14:15:28.677 | 2910 | 288 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |24644|: minidump-analyzer.exe |