Time | Thread | Line | Function | Message |
12:22:33.190 | FA4 | 74 | GameListService::CreateProcessMap | loading game list... |
12:22:33.191 | FA4 | 88 | GameListService::CreateProcessMap | 1614, 2 loaded |
12:22:33.192 | FA4 | 369 | ftw1 | Loading (pid: 14468) |
12:22:33.192 | FA4 | 48 | Update::Detect | Env (C:\WINDOWS\SYSTEM32\d3d11.dll) <0XA09B0000>6|2|1482491926 |
12:22:33.192 | FA4 | 48 | Update::Detect | Env (C:\WINDOWS\SYSTEM32\dxgi.dll) <0XA1900000>6|2|1482491926 |
12:22:33.281 | FA4 | 173 | DXManager::Detect | Found in 0 |
12:22:33.281 | FA4 | 209 | Initialize::GetLocation | @ 0X347B0|214960 |
12:22:33.281 | FA4 | 209 | Initialize::GetLocation | @ 0X1540|5440 |
12:22:33.281 | FA4 | 209 | Initialize::GetLocation | @ 0X23820|145440 |
12:22:33.281 | FA4 | 209 | Initialize::GetLocation | @ 0X19F0|6640 |
12:22:33.281 | FA4 | 111 | Update::Caught | C:\WINDOWS\SYSTEM32\d3d11.dll|0XA09B0000 <> 0XA1900000 |
12:22:33.281 | FA4 | 209 | Initialize::GetLocation | @ 0XFF1B42F0|-14990608 |
12:22:33.281 | FA4 | 111 | Update::Caught | C:\WINDOWS\SYSTEM32\d3d11.dll|0XA09B0000 <> 0XA1900000 |
12:22:33.281 | FA4 | 209 | Initialize::GetLocation | @ 0XFF1B1E00|-15000064 |
12:22:33.281 | FA4 | 111 | Update::Caught | C:\WINDOWS\SYSTEM32\d3d11.dll|0XA09B0000 <> 0XA1900000 |
12:22:33.281 | FA4 | 209 | Initialize::GetLocation | @ 0XFF1B5880|-14985088 |
12:22:33.281 | FA4 | 111 | Update::Caught | C:\WINDOWS\SYSTEM32\d3d11.dll|0XA09B0000 <> 0XA1900000 |
12:22:33.281 | FA4 | 209 | Initialize::GetLocation | @ 0XFF0BBD10|-16007920 |
12:22:33.804 | FA4 | 48 | Update::Detect | Env (C:\WINDOWS\SYSTEM32\d3d9.dll) <0X9AA00000>6|2|1482491491 |
12:22:33.864 | FA4 | 129 | DXManager::Detect | OK |
12:22:33.892 | FA4 | 186 | DXManager::Detect | Done |
12:22:33.892 | FA4 | 215 | VTableHolderD3d9::init | d3d offsest [sht]: 0x4030 , 0x55a0 |
12:22:33.892 | FA4 | 209 | Initialize::GetLocation | @ 0X3CC50|248912 |
12:22:33.892 | FA4 | 209 | Initialize::GetLocation | @ 0X2CFD0|184272 |
12:22:33.892 | FA4 | 209 | Initialize::GetLocation | @ 0X387C0|231360 |
12:22:33.892 | FA4 | 209 | Initialize::GetLocation | @ 0XBC570|771440 |
12:22:33.892 | FA4 | 209 | Initialize::GetLocation | @ 0X482B0|295600 |
12:22:33.892 | FA4 | 209 | Initialize::GetLocation | @ 0XC2B0|49840 |
12:22:33.892 | FA4 | 209 | Initialize::GetLocation | @ 0X48350|295760 |
12:22:33.892 | FA4 | 209 | Initialize::GetLocation | @ 0X2ACE0|175328 |
12:22:33.892 | FA4 | 209 | Initialize::GetLocation | @ 0X1F260|127584 |
12:22:33.892 | FA4 | 209 | Initialize::GetLocation | @ 0X1F0B0|127152 |
12:22:33.892 | FA4 | 209 | Initialize::GetLocation | @ 0X4AD70|306544 |
12:22:33.892 | FA4 | 209 | Initialize::GetLocation | @ 0X100050|1048656 |
12:22:33.892 | FA4 | 209 | Initialize::GetLocation | @ 0X2B030|176176 |
12:22:33.892 | FA4 | 209 | Initialize::GetLocation | @ 0X2AE30|175664 |
12:22:33.892 | FA4 | 209 | Initialize::GetLocation | @ 0X2CE30|183856 |
12:22:33.892 | FA4 | 209 | Initialize::GetLocation | @ 0X40A70|264816 |
12:22:33.892 | FA4 | 209 | Initialize::GetLocation | @ 0X176B0|95920 |
12:22:33.892 | FA4 | 209 | Initialize::GetLocation | @ 0X17700|96000 |
12:22:33.892 | FA4 | 209 | Initialize::GetLocation | @ 0X177F0|96240 |
12:22:33.892 | FA4 | 209 | Initialize::GetLocation | @ 0X176B0|95920 |
12:22:33.892 | FA4 | 209 | Initialize::GetLocation | @ 0X174D0|95440 |
12:22:33.892 | FA4 | 209 | Initialize::GetLocation | @ 0X17560|95584 |
12:22:33.900 | FA4 | 48 | Update::Detect | Env (C:\WINDOWS\SYSTEM32\dinput.dll) <0X9A6F0000>6|2|1482489857 |
12:22:34.110 | FA4 | 83 | VTableHolderDInput::init | m_pDIW->CreateDevice - succeded. |
12:22:34.110 | FA4 | 209 | Initialize::GetLocation | @ 0X3DC0|15808 |
12:22:34.110 | FA4 | 209 | Initialize::GetLocation | @ 0X7140|28992 |
12:22:34.110 | FA4 | 209 | Initialize::GetLocation | @ 0X6F00|28416 |
12:22:34.111 | FA4 | 48 | Update::Detect | Env (C:\WINDOWS\SYSTEM32\dinput8.dll) <0X99980000>6|2|1482489857 |
12:22:34.596 | FA4 | 93 | VTableHolderDInput8::init | m_pDI8W->CreateDevice - succeded. |
12:22:34.596 | FA4 | 110 | VTableHolderDInput8::init | m_pDI8A->CreateDevice - succeded. |
12:22:34.596 | FA4 | 209 | Initialize::GetLocation | @ 0XB510|46352 |
12:22:34.596 | FA4 | 209 | Initialize::GetLocation | @ 0XE5B0|58800 |
12:22:34.596 | FA4 | 209 | Initialize::GetLocation | @ 0XE360|58208 |
12:22:34.657 | FA4 | 225 | InterProcessElement::open | InterProcess Overwolf_SHARED_MEMORY_2_2_23014468 opened succesfuly |
12:22:34.657 | FA4 | 72 | HookFunctionsTableInitializer::SetHookFunctionsData | D3D9 Sht offsets 0x4030 , 0x55a0 |
12:22:34.657 | FA4 | 255 | InterProcessElement::close | InterProcess Overwolf_SHARED_MEMORY_2_2_23014468 close 2147483647 bytes |
12:22:34.657 | FA4 | 305 | InjectOWExplorer | Explorer file name [C:\Program Files (x86)\Overwolf\0.230.0.10\OWExplorer.dll] |
12:22:34.756 | FA4 | 393 | ftw1 | OWExplorer injected |
12:22:34.756 | 23F4 | 71 | Common::ProcessExplorer::ProcessTrackerIPCAgent::OnConnected | connected to process tracker server |
12:24:30.321 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |268| (w: 0x0): Registry |
12:24:30.321 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |10176| (w: 0x0): C:\Program Files\Riot Vanguard\vgtray.exe |
12:24:30.321 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |2916| (w: 0x0): MemCompression |
12:24:30.321 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |5636| (w: 0x0): \Device\HarddiskVolume3\Program Files (x86)\Microsoft GameInput\x64\gameinputsvc.exe |
12:24:30.321 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |21748| (w: 0x0): \Device\HarddiskVolume3\Program Files\Dell\TechHub\Dell.TechHub.exe |
12:24:30.321 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |10296| (w: 0x0): \Device\HarddiskVolume3\Program Files\Dell\DellDataVault\DDVRulesProcessor.exe |
12:24:30.321 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |13476| (w: 0x0): \Device\HarddiskVolume3\Program Files (x86)\Google\Update\1.3.36.292\GoogleCrashHandler.exe |
12:24:30.321 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |13652| (w: 0x0): \Device\HarddiskVolume3\Program Files (x86)\Google\Update\1.3.36.292\GoogleCrashHandler64.exe |
12:24:30.321 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |12664| (w: 0x0): \Device\HarddiskVolume3\Program Files (x86)\Dell\UpdateService\ServiceShell.exe |
12:24:30.321 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |22224| (w: 0x0): \Device\HarddiskVolume3\Program Files\Dell\DTP\AnalyticsSubAgent\Dell.TechHub.Analytics.SubAgent.exe |
12:24:30.321 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |22200| (w: 0x0): \Device\HarddiskVolume3\Program Files\Dell\DTP\DiagnosticsSubAgent\Dell.TechHub.Diagnostics.SubAgent.exe |
12:24:30.321 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |22360| (w: 0x0): \Device\HarddiskVolume3\Program Files\Dell\DTP\DataManagerSubAgent\Dell.TechHub.DataManager.SubAgent.exe |
12:24:30.321 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |14200| (w: 0x0): C:\Windows\System32\smartscreen.exe |
12:24:30.321 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |22440| (w: 0x0): \Device\HarddiskVolume3\Program Files\Dell\DTP\InstrumentationSubAgent\Dell.TechHub.Instrumentation.SubAgent.exe |
12:24:30.321 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |23524| (w: 0x0): \Device\HarddiskVolume3\Program Files\McAfee\WebAdvisor\servicehost.exe |
12:24:30.321 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |24176| (w: 0x0): \Device\HarddiskVolume3\Program Files\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe |
12:24:30.321 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |24532| (w: 0x0): \Device\HarddiskVolume3\Program Files\Dell\DellDataVault\DDVDataCollector.exe |
12:24:30.321 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |24464| (w: 0x0): \Device\HarddiskVolume3\Program Files\Dell\DellDataVault\DDVCollectorSvcApi.exe |
12:24:30.321 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |26340| (w: 0x0): \Device\HarddiskVolume3\Program Files (x86)\Dell\UpdateService\DCF\Dell.DCF.UA.Bradbury.API.SubAgent.exe |
12:24:30.321 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |31080| (w: 0x0): C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_5.823.7272.0_x64__8wekyb3d8bbwe\GameBarFTServer.exe |
12:24:30.321 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |24848| (w: 0x0): \Device\HarddiskVolume3\Program Files\McAfee\WPS\1.11.184.1\mc-fw-host.exe |
12:24:30.321 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |15068| (w: 0x0): C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe |
12:24:30.321 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |6716| (w: 0x0): \Device\HarddiskVolume3\Program Files\McAfee\WPS\1.11.184.1\neo\core\mc-neo-host.exe |
12:24:30.321 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |34524| (w: 0x0): C:\Windows\System32\audiodg.exe |
12:24:30.321 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |29216| (w: 0x0): \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.GamingServices_13.80.25001.0_x64__8wekyb3d8bbwe\gamingservicesnet.exe |
12:24:30.321 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |12020| (w: 0x0): \Device\HarddiskVolume3\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe |
12:24:30.321 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |18884| (w: 0x0): \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\nvdd.inf_amd64_67b1df330bec74ef\Display.NvContainer\NVDisplay.Container.exe |
12:24:30.321 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |3312| (w: 0x0): C:\Windows\System32\taskhostw.exe |
12:24:30.321 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |17560| (w: 0x0): \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.GamingServices_13.80.25001.0_x64__8wekyb3d8bbwe\gamingservices.exe |
12:24:30.321 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |14604| (w: 0x0): \Device\HarddiskVolume3\Program Files (x86)\Microsoft GameInput\x64\gameinputsvc.exe |
12:24:30.321 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |10600| (w: 0x0): C:\Windows\System32\taskhostw.exe |
12:24:30.321 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |19156| (w: 0x0): C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe |
12:24:30.321 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |16744| (w: 0x0): C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe |
12:24:30.321 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |4232| (w: 0x0): \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe |
12:24:30.321 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |6596| (w: 0x0): C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe |
12:24:30.321 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |21952| (w: 0x0): \Device\HarddiskVolume3\Program Files (x86)\Google\Update\GoogleUpdate.exe |
12:24:30.321 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |7016| (w: 0x0): C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_423.21300.10.0_x64__cw5n1h2txyewy\Dashboard\Widgets.exe |
12:24:30.321 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |24584| (w: 0x0): C:\Windows\System32\conhost.exe |
12:24:30.321 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |34428| (w: 0x0): C:\Windows\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_661f1eb27bd1743c\ipf_helper.exe |
12:24:30.321 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |11152| (w: 0x0): C:\Program Files\McAfee\WebAdvisor\uihost.exe |
12:24:30.321 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |29848| (w: 0x0): C:\Program Files\McAfee\WPS\1.11.184.1\mc-fw-host.exe |
12:24:30.321 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |18940| (w: 0x0): C:\Program Files\WindowsApps\Microsoft.YourPhone_1.23062.153.0_x64__8wekyb3d8bbwe\PhoneExperienceHost.exe |
12:24:30.321 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |28032| (w: 0x0): C:\Windows\System32\ctfmon.exe |
12:24:30.321 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |32452| (w: 0x0): C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_423.21300.10.0_x64__cw5n1h2txyewy\Dashboard\WidgetService.exe |
12:24:30.321 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |5296| (w: 0x0): C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_444148fa7298b49f\RtkAudUService64.exe |
12:24:30.321 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |12892| (w: 0x0): C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe |
12:24:34.351 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |15188| (w: 0x0): C:\Users\logan\AppData\Roaming\Spotify\Spotify.exe |
12:24:34.351 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |6868| (w: 0x0): C:\Users\logan\AppData\Roaming\Spotify\Spotify.exe |
12:24:34.351 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |19968| (w: 0x0): C:\Users\logan\AppData\Roaming\Spotify\Spotify.exe |
12:24:34.351 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |11584| (w: 0x0): C:\Users\logan\AppData\Roaming\Spotify\Spotify.exe |
12:24:34.351 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |18176| (w: 0x0): C:\Users\logan\AppData\Roaming\Spotify\Spotify.exe |
12:24:36.374 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |3664| (w: 0x0): C:\Users\logan\AppData\Local\Medal\app-4.2050.0\Medal.exe |
12:24:37.376 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |31244| (w: 0x0): C:\Users\logan\AppData\Local\Medal\app-4.2050.0\Medal.exe |
12:24:37.376 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |31204| (w: 0x0): C:\Users\logan\AppData\Local\Medal\app-4.2050.0\Medal.exe |
12:24:37.376 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |31004| (w: 0x0): C:\Users\logan\AppData\Local\Medal\app-4.2050.0\Medal.exe |
12:24:39.398 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |28992| (w: 0x0): C:\Users\logan\AppData\Local\Medal\app-4.2050.0\Medal.exe |
12:24:39.398 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |4612| (w: 0x0): C:\Users\logan\AppData\Local\Medal\app-4.2050.0\Medal.exe |
12:24:42.422 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |30588| (w: 0x0): C:\Users\logan\AppData\Local\Medal\app-4.2050.0\Medal.exe |
12:24:49.479 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |29020| (w: 0x0): C:\Users\logan\AppData\Local\Medal\app-4.2050.0\resources\app\Medal.exe |
12:24:49.479 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |14308| (w: 0x0): C:\Windows\System32\conhost.exe |
12:24:54.509 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |30008| (w: 0x0): C:\Users\logan\AppData\Local\Medal\recorder-3.701.0\DLLs\crashpad_handler.exe |
12:26:47.258 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |11964| (w: 0x0): \Device\HarddiskVolume3\Program Files (x86)\Dell Digital Delivery Services\Dell.D3.WinSvc.exe |
12:29:07.298 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |30004| (w: 0x0): C:\Windows\System32\LocationNotificationWindows.exe |
12:29:10.316 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |24540| (w: 0x0): C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Singleton_3000.934.1904.0_x64__8wekyb3d8bbwe\PushNotificationsLongRunningTask.exe |
12:29:12.329 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |2720| (w: 0x0): \Device\HarddiskVolume3\Program Files\Dell\DTP\DataManagerSubAgent\Dell.TechHub.DataManager.SubAgent.exe |
12:29:14.340 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |24328| (w: 0x0): \Device\HarddiskVolume3\Program Files\Dell\DTP\InstrumentationSubAgent\Dell.TechHub.Instrumentation.SubAgent.exe |
12:29:14.340 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |7472| (w: 0x0): \Device\HarddiskVolume3\Program Files\Dell\DTP\InstrumentationSubAgent\Dell.TechHub.Instrumentation.UserProcess.exe |
12:51:22.801 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |15856| (w: 0x0): C:\Users\logan\AppData\Roaming\Spotify\Spotify.exe |
12:54:08.65 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |30712| (w: 0x0): C:\Windows\System32\audiodg.exe |
13:15:53.501 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |16504| (w: 0x0): C:\Users\logan\AppData\Roaming\Spotify\Spotify.exe |
13:18:27.741 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |1364| (w: 0x0): C:\Windows\System32\audiodg.exe |
13:29:31.326 | 83D0 | 613 | ProcessInjector::InjectExplorerToProcess | Injected to process 8648 [mt 26244] 0x4065c |
13:30:31.155 | 83D0 | 613 | ProcessInjector::InjectExplorerToProcess | Injected to process 1988 [mt 28036] 0x807ea |
13:30:48.876 | 83D0 | 613 | ProcessInjector::InjectExplorerToProcess | Injected to process 31256 [mt 18344] 0x70424 |
13:32:48.966 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |13832| (w: 0x0): C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_5.823.7272.0_x64__8wekyb3d8bbwe\GameBarFTServer.exe |
13:32:58.23 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |30396| (w: 0x0): C:\Windows\System32\GameBarPresenceWriter.exe |
13:40:10.695 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |6164| (w: 0x0): C:\Windows\System32\oobe\UserOOBEBroker.exe |
16:09:57.262 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |22636| (w: 0x0): C:\Users\logan\AppData\Local\Medal\app-4.2050.0\Medal.exe |
16:09:58.269 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |24912| (w: 0x0): C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe |
16:09:58.269 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |17180| (w: 0x0): C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe |
12:35:25.532 | 83D0 | 360 | ProcessInjector::DoElevetedInjection | Failed to inject process [31300 mt:32872 h:0x150642] 0x57 |
12:35:45.758 | 83D0 | 622 | ProcessInjector::InjectExplorerToProcess | Inject to process 31300 error (to many retires, TID detected: 1) |
12:35:54.745 | 83D0 | 360 | ProcessInjector::DoElevetedInjection | Failed to inject process [32972 mt:10632 h:0xf050e] 0x57 |
12:36:14.977 | 83D0 | 622 | ProcessInjector::InjectExplorerToProcess | Inject to process 32972 error (to many retires, TID detected: 1) |
12:36:16.316 | 83D0 | 360 | ProcessInjector::DoElevetedInjection | Failed to inject process [23484 mt:18220 h:0x78908a6] 0x57 |
12:36:36.531 | 83D0 | 622 | ProcessInjector::InjectExplorerToProcess | Inject to process 23484 error (to many retires, TID detected: 1) |
12:36:37.244 | 83D0 | 613 | ProcessInjector::InjectExplorerToProcess | Injected to process 34024 [mt 7476] 0xd086e |
12:38:37.508 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |16868| (w: 0x0): C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_5.823.7272.0_x64__8wekyb3d8bbwe\GameBarFTServer.exe |
12:41:55.439 | 83D0 | 613 | ProcessInjector::InjectExplorerToProcess | Injected to process 28656 [mt 24084] 0x7086a |
12:42:09.641 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |24184| (w: 0x0): C:\Users\logan\AppData\Local\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe |
12:42:21.546 | 83D0 | 613 | ProcessInjector::InjectExplorerToProcess | Injected to process 18328 [mt 17692] 0xc5a08d4 |
12:43:55.703 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |2092| (w: 0x0): C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_5.823.7272.0_x64__8wekyb3d8bbwe\GameBarFTServer.exe |
12:44:30.33 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |9116| (w: 0x0): C:\Windows\System32\GameBarPresenceWriter.exe |
12:46:16.59 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |9368| (w: 0x0): C:\Windows\System32\smartscreen.exe |
12:47:22.691 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |34568| (w: 0x0): C:\Users\logan\AppData\Local\Microsoft\OneDrive\23.169.0813.0001\Microsoft.SharePoint.exe |
13:09:38.272 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |33540| (w: 0x0): C:\Windows\System32\smartscreen.exe |
13:09:40.281 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |5092| (w: 0x0): C:\Windows\System32\conhost.exe |
13:09:40.281 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |5896| (w: 0x0): C:\Windows\System32\cmd.exe |
13:09:40.281 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |4588| (w: 0x0): C:\Windows\System32\cmd.exe |
13:09:40.281 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |10460| (w: 0x0): C:\Program Files\McAfee\WebAdvisor\browserhost.exe |
13:09:40.281 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |17584| (w: 0x0): C:\Windows\System32\conhost.exe |
13:09:40.281 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |27400| (w: 0x0): C:\Program Files\McAfee\WPS\1.11.184.1\extnhost\mc-extn-browserhost.exe |
13:25:20.868 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |32560| (w: 0x0): C:\Windows\System32\smartscreen.exe |
13:25:27.934 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |12524| (w: 0x0): C:\Users\logan\AppData\Roaming\Spotify\Spotify.exe |
13:25:28.947 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |1872| (w: 0x0): C:\Users\logan\AppData\Roaming\Spotify\Spotify.exe |
13:25:28.947 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |29200| (w: 0x0): C:\Users\logan\AppData\Roaming\Spotify\Spotify.exe |
13:25:28.947 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |31248| (w: 0x0): C:\Users\logan\AppData\Roaming\Spotify\Spotify.exe |
13:25:28.947 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |17436| (w: 0x0): C:\Users\logan\AppData\Roaming\Spotify\Spotify.exe |
16:00:09.531 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |31232| (w: 0x0): C:\Windows\System32\smartscreen.exe |
16:01:05.54 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |30480| (w: 0x0): C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2023.11050.16005.0_x64__8wekyb3d8bbwe\PhotosService\PhotosService.exe |
16:40:42.4 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |17012| (w: 0x0): C:\Windows\System32\smartscreen.exe |
20:58:42.695 | 83D0 | 360 | ProcessInjector::DoElevetedInjection | Failed to inject process [23476 mt:19976 h:0xf0542] 0x57 |
20:59:02.920 | 83D0 | 622 | ProcessInjector::InjectExplorerToProcess | Inject to process 23476 error (to many retires, TID detected: 1) |
20:59:03.698 | 83D0 | 613 | ProcessInjector::InjectExplorerToProcess | Injected to process 8492 [mt 4124] 0x8d50910 |
20:59:13.242 | 83D0 | 360 | ProcessInjector::DoElevetedInjection | Failed to inject process [24788 mt:30664 h:0x1e04e8] 0x57 |
20:59:33.472 | 83D0 | 622 | ProcessInjector::InjectExplorerToProcess | Inject to process 24788 error (to many retires, TID detected: 1) |
20:59:34.281 | 83D0 | 613 | ProcessInjector::InjectExplorerToProcess | Injected to process 13340 [mt 27144] 0xc0ac6 |
21:01:03.201 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |30784| (w: 0x0): C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_5.823.7272.0_x64__8wekyb3d8bbwe\GameBarFTServer.exe |
21:01:35.454 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |27684| (w: 0x0): C:\Windows\System32\GameBarPresenceWriter.exe |
21:46:48.191 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |11616| (w: 0x0): C:\Windows\System32\smartscreen.exe |
21:46:48.191 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |25732| (w: 0x0): C:\Users\logan\AppData\Roaming\Spotify\Spotify.exe |
21:46:48.191 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |17884| (w: 0x0): C:\Users\logan\AppData\Roaming\Spotify\Spotify.exe |
21:46:48.191 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |11940| (w: 0x0): C:\Users\logan\AppData\Roaming\Spotify\Spotify.exe |
21:46:48.191 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |9032| (w: 0x0): C:\Users\logan\AppData\Roaming\Spotify\Spotify.exe |
21:46:49.204 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |32416| (w: 0x0): C:\Users\logan\AppData\Roaming\Spotify\Spotify.exe |
22:08:34.361 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |27412| (w: 0x0): C:\Windows\System32\smartscreen.exe |
22:54:14.325 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |34208| (w: 0x0): C:\Windows\System32\smartscreen.exe |
16:00:29.718 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |28648| (w: 0x0): C:\Users\logan\AppData\Local\Microsoft\OneDrive\23.169.0813.0001\FileCoAuth.exe |
16:00:29.802 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |20060| (w: 0x0): C:\Users\logan\AppData\Roaming\Spotify\Spotify.exe |
16:02:36.9 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |5008| (w: 0x0): C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_5.823.7272.0_x64__8wekyb3d8bbwe\GameBarFTServer.exe |
16:04:00.689 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |26260| (w: 0x0): C:\Windows\UUS\Packages\Preview\amd64\MoNotificationUx.exe |
16:08:30.779 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |30788| (w: 0x0): C:\Users\logan\AppData\Local\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe |
16:09:02.58 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |24412| (w: 0x0): C:\Windows\System32\smartscreen.exe |
16:09:02.58 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |10336| (w: 0x0): C:\Program Files\Mozilla Firefox\firefox.exe |
16:09:02.58 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |25868| (w: 0x0): C:\Program Files\Mozilla Firefox\firefox.exe |
16:09:03.71 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |19780| (w: 0x0): C:\Program Files\Mozilla Firefox\firefox.exe |
16:09:03.71 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |29704| (w: 0x0): C:\Program Files\Mozilla Firefox\firefox.exe |
16:09:04.79 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |5260| (w: 0x0): C:\Program Files\Mozilla Firefox\firefox.exe |
16:09:04.79 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |30260| (w: 0x0): C:\Program Files\Mozilla Firefox\firefox.exe |
16:09:19.227 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |27052| (w: 0x0): C:\Program Files\Mozilla Firefox\firefox.exe |
16:09:35.383 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |22552| (w: 0x0): C:\Program Files\Mozilla Firefox\firefox.exe |
16:09:35.383 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |34096| (w: 0x0): C:\Program Files\Mozilla Firefox\firefox.exe |
16:09:35.383 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |26416| (w: 0x0): C:\Program Files\Mozilla Firefox\firefox.exe |
16:09:42.448 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |34020| (w: 0x0): C:\Program Files\Mozilla Firefox\firefox.exe |
16:09:49.518 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |32456| (w: 0x0): C:\Program Files\Mozilla Firefox\firefox.exe |
16:10:11.724 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |14300| (w: 0x0): C:\Program Files\Mozilla Firefox\firefox.exe |
16:10:13.745 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |10840| (w: 0x0): C:\Windows\UUS\Packages\Preview\amd64\MoNotificationUx.exe |
16:13:31.570 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |17876| (w: 0x0): C:\Users\logan\AppData\Local\Microsoft\OneDrive\23.169.0813.0001\Microsoft.SharePoint.exe |
17:03:24.912 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |17316| (w: 0x0): C:\Users\logan\AppData\Roaming\Spotify\Spotify.exe |
17:08:12.124 | 83D0 | 613 | ProcessInjector::InjectExplorerToProcess | Injected to process 28748 [mt 30680] 0xd06ce |
17:08:22.354 | 83D0 | 360 | ProcessInjector::DoElevetedInjection | Failed to inject process [7836 mt:15948 h:0x1e0248] 0x57 |
17:08:42.575 | 83D0 | 622 | ProcessInjector::InjectExplorerToProcess | Inject to process 7836 error (to many retires, TID detected: 1) |
17:08:43.384 | 83D0 | 613 | ProcessInjector::InjectExplorerToProcess | Injected to process 32796 [mt 10552] 0xb0908e0 |
17:10:43.629 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |22776| (w: 0x0): C:\Windows\System32\GameBarPresenceWriter.exe |
17:12:08.444 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |14804| (w: 0x0): C:\Windows\System32\smartscreen.exe |
17:23:27.541 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |20976| (w: 0x0): C:\Windows\System32\smartscreen.exe |
18:05:15.307 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |8356| (w: 0x0): C:\Windows\System32\smartscreen.exe |
19:19:09.800 | 83D0 | 281 | ProcessInjector::HandlePendingProccesss | process detection skipped |2572| (w: 0x0): C:\Windows\System32\smartscreen.exe |
20:34:44.217 | 23F4 | 76 | Common::ProcessExplorer::ProcessTrackerIPCAgent::OnDisconnected | disconnected to process tracker server |
20:34:44.268 | FA4 | 66 | ProcessesMonitor::Stop | stopping PM... |
20:34:44.268 | 7D38 | 125 | ProcessesMonitor::ProcessEnumerateThread | exit process listener |
20:34:44.269 | FA4 | 421 | ProcessInjector::Unhook | unhook running process |