| Time | Thread | Line | Function | Message |
| 15:11:10.877 | 4C28 | 91 | GameListService::CreateProcessMap | loading game list... |
| 15:11:10.917 | 4C28 | 108 | GameListService::CreateProcessMap | 3849, 4, 6009 loaded |
| 15:11:10.947 | 4C28 | 367 | ftw1 | Loading (pid: 23012) |
| 15:11:10.974 | 4C28 | 48 | Update::Detect | Env (C:\WINDOWS\SYSTEM32\d3d11.dll) <0XE100000>6|2|1710497305 |
| 15:11:10.974 | 4C28 | 48 | Update::Detect | Env (C:\WINDOWS\SYSTEM32\dxgi.dll) <0XFA20000>6|2|1710497305 |
| 15:11:11.416 | 4C28 | 173 | DXManager::Detect | Found in 0 |
| 15:11:11.416 | 4C28 | 209 | Initialize::GetLocation | @ 0X2CA0|11424 |
| 15:11:11.416 | 4C28 | 209 | Initialize::GetLocation | @ 0X3140|12608 |
| 15:11:11.416 | 4C28 | 209 | Initialize::GetLocation | @ 0X38C60|232544 |
| 15:11:11.416 | 4C28 | 209 | Initialize::GetLocation | @ 0X30790|198544 |
| 15:11:11.416 | 4C28 | 111 | Update::Caught | C:\WINDOWS\SYSTEM32\d3d11.dll|0XE100000 <> 0XFA20000 |
| 15:11:11.416 | 4C28 | 209 | Initialize::GetLocation | @ 0XFE83F5D0|-24906288 |
| 15:11:11.416 | 4C28 | 111 | Update::Caught | C:\WINDOWS\SYSTEM32\d3d11.dll|0XE100000 <> 0XFA20000 |
| 15:11:11.416 | 4C28 | 209 | Initialize::GetLocation | @ 0XFE8365A0|-24943200 |
| 15:11:11.416 | 4C28 | 111 | Update::Caught | C:\WINDOWS\SYSTEM32\d3d11.dll|0XE100000 <> 0XFA20000 |
| 15:11:11.416 | 4C28 | 209 | Initialize::GetLocation | @ 0XFE855060|-24817568 |
| 15:11:11.416 | 4C28 | 111 | Update::Caught | C:\WINDOWS\SYSTEM32\d3d11.dll|0XE100000 <> 0XFA20000 |
| 15:11:11.416 | 4C28 | 209 | Initialize::GetLocation | @ 0XFE745010|-25931760 |
| 15:11:11.446 | 4C28 | 48 | Update::Detect | Env (C:\WINDOWS\SYSTEM32\d3d9.dll) <0XF70C0000>6|2|1710497305 |
| 15:11:11.632 | 4C28 | 129 | DXManager::Detect | OK |
| 15:11:11.666 | 4C28 | 186 | DXManager::Detect | Done |
| 15:11:11.666 | 4C28 | 215 | VTableHolderD3d9::init | d3d offsest [sht]: 0x4030 , 0x55a0 |
| 15:11:11.667 | 4C28 | 209 | Initialize::GetLocation | @ 0X13A30|80432 |
| 15:11:11.667 | 4C28 | 209 | Initialize::GetLocation | @ 0X137C0|79808 |
| 15:11:11.667 | 4C28 | 209 | Initialize::GetLocation | @ 0X21970|137584 |
| 15:11:11.667 | 4C28 | 209 | Initialize::GetLocation | @ 0XE17E0|923616 |
| 15:11:11.667 | 4C28 | 209 | Initialize::GetLocation | @ 0X64060|409696 |
| 15:11:11.667 | 4C28 | 209 | Initialize::GetLocation | @ 0X81A60|531040 |
| 15:11:11.667 | 4C28 | 209 | Initialize::GetLocation | @ 0X1C6A0|116384 |
| 15:11:11.667 | 4C28 | 209 | Initialize::GetLocation | @ 0X45790|284560 |
| 15:11:11.667 | 4C28 | 209 | Initialize::GetLocation | @ 0X46480|287872 |
| 15:11:11.667 | 4C28 | 209 | Initialize::GetLocation | @ 0X30F70|200560 |
| 15:11:11.667 | 4C28 | 209 | Initialize::GetLocation | @ 0X1BF30|114480 |
| 15:11:11.667 | 4C28 | 209 | Initialize::GetLocation | @ 0X45950|285008 |
| 15:11:11.667 | 4C28 | 209 | Initialize::GetLocation | @ 0X47390|291728 |
| 15:11:11.667 | 4C28 | 209 | Initialize::GetLocation | @ 0X45F70|286576 |
| 15:11:11.667 | 4C28 | 209 | Initialize::GetLocation | @ 0X401A0|262560 |
| 15:11:11.667 | 4C28 | 209 | Initialize::GetLocation | @ 0XEE070|974960 |
| 15:11:11.667 | 4C28 | 209 | Initialize::GetLocation | @ 0X13C30|80944 |
| 15:11:11.667 | 4C28 | 209 | Initialize::GetLocation | @ 0X109A0|68000 |
| 15:11:11.667 | 4C28 | 209 | Initialize::GetLocation | @ 0X40380|263040 |
| 15:11:11.667 | 4C28 | 209 | Initialize::GetLocation | @ 0X13C30|80944 |
| 15:11:11.667 | 4C28 | 209 | Initialize::GetLocation | @ 0X6E920|452896 |
| 15:11:11.667 | 4C28 | 209 | Initialize::GetLocation | @ 0X72850|469072 |
| 15:11:11.682 | 4C28 | 48 | Update::Detect | Env (C:\WINDOWS\SYSTEM32\dinput.dll) <0X6F520000>6|2|1710491191 |
| 15:11:11.760 | 4C28 | 83 | VTableHolderDInput::init | m_pDIW->CreateDevice - succeded. |
| 15:11:11.760 | 4C28 | 209 | Initialize::GetLocation | @ 0X3D40|15680 |
| 15:11:11.760 | 4C28 | 209 | Initialize::GetLocation | @ 0X7030|28720 |
| 15:11:11.760 | 4C28 | 209 | Initialize::GetLocation | @ 0X6E00|28160 |
| 15:11:11.761 | 4C28 | 48 | Update::Detect | Env (C:\WINDOWS\SYSTEM32\dinput8.dll) <0XD79A0000>6|2|1710491191 |
| 15:11:11.774 | 4C28 | 93 | VTableHolderDInput8::init | m_pDI8W->CreateDevice - succeded. |
| 15:11:11.774 | 4C28 | 110 | VTableHolderDInput8::init | m_pDI8A->CreateDevice - succeded. |
| 15:11:11.775 | 4C28 | 209 | Initialize::GetLocation | @ 0X11F10|73488 |
| 15:11:11.775 | 4C28 | 209 | Initialize::GetLocation | @ 0X13060|77920 |
| 15:11:11.775 | 4C28 | 209 | Initialize::GetLocation | @ 0X12B00|76544 |
| 15:11:11.826 | 4C28 | 227 | InterProcessElement::open | InterProcess Overwolf_SHARED_MEMORY_2_2_29423012 opened succesfuly |
| 15:11:11.826 | 4C28 | 72 | HookFunctionsTableInitializer::SetHookFunctionsData | D3D9 Sht offsets 0x4030 , 0x55a0 |
| 15:11:11.826 | 4C28 | 257 | InterProcessElement::close | InterProcess Overwolf_SHARED_MEMORY_2_2_29423012 close 2147483647 bytes |
| 15:11:11.827 | 4C28 | 307 | InjectOWExplorer | Explorer file name [C:\Program Files (x86)\Overwolf\0.294.2.2\OWExplorer.dll] |
| 15:11:11.836 | 4C28 | 391 | ftw1 | OWExplorer injected |
| 15:11:11.840 | 28C0 | 71 | Common::ProcessExplorer::ProcessTrackerIPCAgent::OnConnected | connected to process tracker server |
| 15:11:21.998 | 6BEC | 323 | ProcessInjector::HandlePendingProccesss | process detection skipped |2696| (w: 0x0): \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\nvmdi.inf_amd64_bfde79998353fa5d\Display.NvContainer\NVDisplay.Container.exe |
| 15:11:21.998 | 6BEC | 323 | ProcessInjector::HandlePendingProccesss | process detection skipped |3068| (w: 0x0): \Device\HarddiskVolume3\Program Files (x86)\ASUS\AXSP\4.02.12\atkexComSvc.exe |
| 15:11:21.998 | 6BEC | 323 | ProcessInjector::HandlePendingProccesss | process detection skipped |2924| (w: 0x0): MemCompression |
| 15:11:21.998 | 6BEC | 323 | ProcessInjector::HandlePendingProccesss | process detection skipped |5468| (w: 0x0): \Device\HarddiskVolume3\Program Files\Realtek\WifiAutoInstall\WifiAutoInstallSrv.exe |
| 15:11:21.998 | 6BEC | 323 | ProcessInjector::HandlePendingProccesss | process detection skipped |5436| (w: 0x0): \Device\HarddiskVolume3\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe |
| 15:11:21.998 | 6BEC | 323 | ProcessInjector::HandlePendingProccesss | process detection skipped |8828| (w: 0x0): \Device\HarddiskVolume3\Program Files\ASUS\KINGSTON_Aac_DRAM\AacKingstonDramHal_x64.exe |
| 15:11:21.998 | 6BEC | 323 | ProcessInjector::HandlePendingProccesss | process detection skipped |25856| (w: 0x0): \Device\HarddiskVolume3\Program Files\LogiOptionsPlus\logioptionsplus_updater.exe |
| 15:11:21.998 | 6BEC | 323 | ProcessInjector::HandlePendingProccesss | process detection skipped |22660| (w: 0x0): C:\Program Files\LogiOptionsPlus\logioptionsplus_appbroker.exe |
| 15:11:21.998 | 6BEC | 323 | ProcessInjector::HandlePendingProccesss | process detection skipped |18516| (w: 0x0): \Device\HarddiskVolume3\Program Files\LogiOptionsPlus\logi_crashpad_handler.exe |
| 15:11:21.998 | 6BEC | 323 | ProcessInjector::HandlePendingProccesss | process detection skipped |18480| (w: 0x0): C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe |
| 15:11:21.998 | 6BEC | 323 | ProcessInjector::HandlePendingProccesss | process detection skipped |14400| (w: 0x0): \Device\HarddiskVolume3\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe |
| 15:11:21.998 | 6BEC | 323 | ProcessInjector::HandlePendingProccesss | process detection skipped |15508| (w: 0x0): C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe |
| 15:11:21.998 | 6BEC | 323 | ProcessInjector::HandlePendingProccesss | process detection skipped |27792| (w: 0x0): C:\Program Files\ASUS\Armoury Crate Service\ArmouryCrate.UserSessionHelper.exe |
| 15:11:21.998 | 6BEC | 323 | ProcessInjector::HandlePendingProccesss | process detection skipped |25392| (w: 0x0): C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_526.1202.40.0_x64__cw5n1h2txyewy\WidgetBoard.exe |
| 15:11:21.998 | 6BEC | 323 | ProcessInjector::HandlePendingProccesss | process detection skipped |26508| (w: 0x0): \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe |
| 15:11:21.998 | 6BEC | 323 | ProcessInjector::HandlePendingProccesss | process detection skipped |18668| (w: 0x0): C:\Program Files\LogiOptionsPlus\logioptionsplus_agent.exe |
| 15:11:21.998 | 6BEC | 323 | ProcessInjector::HandlePendingProccesss | process detection skipped |6324| (w: 0x0): C:\Program Files\LogiOptionsPlus\logi_crashpad_handler.exe |
| 15:11:21.998 | 6BEC | 323 | ProcessInjector::HandlePendingProccesss | process detection skipped |19360| (w: 0x0): C:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.26012.79.0_x64__cw5n1h2txyewy\CrossDeviceService.exe |
| 15:11:21.998 | 6BEC | 323 | ProcessInjector::HandlePendingProccesss | process detection skipped |13972| (w: 0x0): C:\Users\ferna\AppData\Local\Microsoft\OneDrive\26.022.0203.0006\FileCoAuth.exe |
| 15:11:21.998 | 6BEC | 323 | ProcessInjector::HandlePendingProccesss | process detection skipped |15988| (w: 0x0): C:\Program Files\WindowsApps\Microsoft.WidgetsPlatformRuntime_1.6.14.0_x64__8wekyb3d8bbwe\WidgetService\WidgetService.exe |
| 15:11:23.12 | 6BEC | 323 | ProcessInjector::HandlePendingProccesss | process detection skipped |20552| (w: 0x0): C:\Users\ferna\AppData\Local\Programs\Insights Capture V3\Insights Capture.exe |
| 15:11:23.12 | 6BEC | 323 | ProcessInjector::HandlePendingProccesss | process detection skipped |20372| (w: 0x0): C:\Program Files (x86)\ASUS\ArmouryDevice\dll\ArmourySocketServer\ArmourySocketServer.exe |
| 15:11:23.12 | 6BEC | 323 | ProcessInjector::HandlePendingProccesss | process detection skipped |20164| (w: 0x0): C:\Riot Games\Riot Client\RiotClientCrashHandler.exe |
| 15:11:23.12 | 6BEC | 323 | ProcessInjector::HandlePendingProccesss | process detection skipped |10104| (w: 0x0): C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.229.1.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe |
| 15:11:23.12 | 6BEC | 323 | ProcessInjector::HandlePendingProccesss | process detection skipped |23884| (w: 0x0): C:\Program Files\WindowsApps\Microsoft.YourPhone_1.26012.101.0_x64__8wekyb3d8bbwe\PhoneExperienceHost.exe |
| 15:11:23.12 | 6BEC | 323 | ProcessInjector::HandlePendingProccesss | process detection skipped |19612| (w: 0x0): C:\Riot Games\Riot Client\RiotClientServices.exe |
| 15:13:02.580 | 6BEC | 323 | ProcessInjector::HandlePendingProccesss | process detection skipped |13872| (w: 0x0): \Device\HarddiskVolume3\Program Files\Riot Vanguard\vgc.exe |
| 15:13:08.602 | 6BEC | 323 | ProcessInjector::HandlePendingProccesss | process detection skipped |8772| (w: 0x0): C:\Riot Games\VALORANT\live\VALORANT.exe |
| 15:13:10.956 | 6BEC | 659 | ProcessInjector::InjectExplorerToProcess | Injected to process 11036 [mt 8728] 0x206e4 |
| 15:13:20.708 | 6BEC | 323 | ProcessInjector::HandlePendingProccesss | process detection skipped |21204| (w: 0x0): C:\Users\ferna\AppData\Local\NVIDIA Corporation\NVIDIA App\NvBackend\ApplicationOntology\NvOAWrapperCache.exe |
| 15:13:20.708 | 6BEC | 323 | ProcessInjector::HandlePendingProccesss | process detection skipped |21044| (w: 0x0): C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_7.326.2102.0_x64__8wekyb3d8bbwe\GameBarFTServer.exe |
| 15:13:21.713 | 6BEC | 323 | ProcessInjector::HandlePendingProccesss | process detection skipped |26720| (w: 0x0): C:\Program Files\WindowsApps\Microsoft.GamingApp_2602.1001.5.0_x64__8wekyb3d8bbwe\XboxPcAppFT.exe |
| 15:13:28.789 | 6BEC | 323 | ProcessInjector::HandlePendingProccesss | process detection skipped |10576| (w: 0x0): C:\Users\ferna\AppData\Roaming\ow-electron\fljbachcphmmjflapcokloinfikfpdhepkobcbco\packages\jjcifboncjjhdoooodcnhnenmmfgcnmpjanimpid\0.32.32\obs\bin\64bit\ow-electron-obs.exe |
| 15:13:48.991 | 6BEC | 323 | ProcessInjector::HandlePendingProccesss | process detection skipped |28080| (w: 0x0): C:\Users\ferna\AppData\Roaming\ow-electron\fljbachcphmmjflapcokloinfikfpdhepkobcbco\packages\jjcifboncjjhdoooodcnhnenmmfgcnmpjanimpid\0.32.32\obs\bin\64bit\ow-electron-obs.exe |
| 15:15:47.945 | 6BEC | 323 | ProcessInjector::HandlePendingProccesss | process detection skipped |3548| (w: 0x0): C:\Program Files\WindowsApps\Microsoft.OutlookForWindows_1.2025.1208.200_x64__8wekyb3d8bbwe\olk.exe |
| 15:15:54.12 | 6BEC | 323 | ProcessInjector::HandlePendingProccesss | process detection skipped |7692| (w: 0x0): C:\Program Files\WindowsApps\Microsoft.OutlookForWindows_1.2025.1208.200_x64__8wekyb3d8bbwe\xpdAgent.exe |
| 15:16:35.503 | 6BEC | 323 | ProcessInjector::HandlePendingProccesss | process detection skipped |11804| (w: 0x0): C:\Users\ferna\AppData\Local\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe |
| 15:16:35.503 | 6BEC | 323 | ProcessInjector::HandlePendingProccesss | process detection skipped |3000| (w: 0x0): C:\Users\ferna\AppData\Local\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe |
| 15:16:47.616 | 6BEC | 323 | ProcessInjector::HandlePendingProccesss | process detection skipped |4020| (w: 0x0): C:\Program Files\WindowsApps\Microsoft.WindowsStore_22601.1401.3.0_x64__8wekyb3d8bbwe\StoreDesktopExtension.exe |
| 15:16:53.674 | 6BEC | 323 | ProcessInjector::HandlePendingProccesss | process detection skipped |31688| (w: 0x0): C:\Users\ferna\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\OneDriveSetup.exe |
| 15:16:53.674 | 6BEC | 323 | ProcessInjector::HandlePendingProccesss | process detection skipped |9656| (w: 0x0): C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.28.190.0_x64__8wekyb3d8bbwe\WindowsPackageManagerServer.exe |
| 15:16:56.711 | 6BEC | 323 | ProcessInjector::HandlePendingProccesss | process detection skipped |29388| (w: 0x0): C:\Users\ferna\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\OneDriveSetup.exe |
| 15:17:13.856 | 6BEC | 323 | ProcessInjector::HandlePendingProccesss | process detection skipped |19672| (w: 0x0): C:\Users\ferna\AppData\Local\Microsoft\OneDrive\26.026.0209.0004\OneDrive.Sync.Service.exe |
| 15:29:25.772 | 6BEC | 323 | ProcessInjector::HandlePendingProccesss | process detection skipped |12596| (w: 0x0): C:\Users\ferna\AppData\Roaming\ow-electron\fljbachcphmmjflapcokloinfikfpdhepkobcbco\packages\jjcifboncjjhdoooodcnhnenmmfgcnmpjanimpid\0.32.32\obs\bin\64bit\obs-ffmpeg-mux.exe |
| 16:10:34.830 | 6BEC | 323 | ProcessInjector::HandlePendingProccesss | process detection skipped |29580| (w: 0x0): C:\Users\ferna\AppData\Roaming\ow-electron\fljbachcphmmjflapcokloinfikfpdhepkobcbco\packages\jjcifboncjjhdoooodcnhnenmmfgcnmpjanimpid\0.32.32\obs\bin\64bit\obs-ffmpeg-mux.exe |
| 16:17:15.143 | 6BEC | 323 | ProcessInjector::HandlePendingProccesss | process detection skipped |13884| (w: 0x0): C:\Users\ferna\AppData\Local\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe |
| 16:49:17.850 | 6BEC | 323 | ProcessInjector::HandlePendingProccesss | process detection skipped |17164| (w: 0x0): C:\Users\ferna\AppData\Roaming\ow-electron\fljbachcphmmjflapcokloinfikfpdhepkobcbco\packages\jjcifboncjjhdoooodcnhnenmmfgcnmpjanimpid\0.32.32\obs\bin\64bit\obs-ffmpeg-mux.exe |
| 18:21:49.619 | 6BEC | 323 | ProcessInjector::HandlePendingProccesss | process detection skipped |29760| (w: 0x0): C:\Program Files\WindowsApps\Microsoft.WindowsStore_22601.1401.3.0_x64__8wekyb3d8bbwe\StoreDesktopExtension.exe |
| 18:27:59.319 | 6BEC | 323 | ProcessInjector::HandlePendingProccesss | process detection skipped |10952| (w: 0x0): C:\Riot Games\Riot Client\RiotClientServices.exe |
| 18:28:00.937 | 4C28 | 66 | ProcessesMonitor::Stop | stopping PM... |
| 18:28:00.937 | 4AB0 | 125 | ProcessesMonitor::ProcessEnumerateThread | exit process listener |
| 18:28:00.940 | 4C28 | 463 | ProcessInjector::Unhook | unhook running process |
| 18:28:06.989 | 4C28 | 66 | ProcessesMonitor::Stop | stopping PM... |
| | | | |