Time | Thread | Line | Function | Message
--- | --- | --- | --- | ---
23:05:58.363 | A30 | 103 | GameListService::CreateProcessMap | loading game list...
23:05:58.380 | A30 | 120 | GameListService::CreateProcessMap | 3918, 4, 6009 loaded
23:05:58.383 | A30 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 9988 main window 0x102a4 -> 0x100d4, height 39 -> 40 , main True -> True
23:05:58.383 | A30 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 17732 main window 0x20392 -> 0x2046a, height 14 -> 759 , main False -> False
23:05:58.383 | A30 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 17732 main window 0x2046a -> 0x20470, height 759 -> 39 , main False -> False
23:05:58.383 | A30 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 17732 main window 0x20470 -> 0x105c4, height 39 -> 14 , main False -> False
23:05:58.383 | A30 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 17732 main window 0x105c4 -> 0x105c2, height 14 -> 759 , main False -> False
23:05:58.383 | A30 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 17732 main window 0x105c2 -> 0x105c6, height 759 -> 39 , main False -> False
23:05:58.383 | A30 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 17732 main window 0x105c6 -> 0x404e6, height 39 -> 759 , main False -> False
23:05:58.383 | A30 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 17732 main window 0x404e6 -> 0x104da, height 759 -> 400 , main False -> False
23:05:58.383 | A30 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 17732 main window 0x104da -> 0x104be, height 400 -> 1 , main False -> False
23:05:58.383 | A30 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 17732 main window 0x104be -> 0x104b0, height 1 -> 6 , main False -> False
23:05:58.383 | A30 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 17732 main window 0x104b0 -> 0x203ce, height 6 -> 39 , main False -> False
23:05:58.383 | A30 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 9988 main window 0x100d4 -> 0x101ae, height 40 -> 4 , main True -> True
23:05:58.383 | A30 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 5956 main window 0x1029c -> 0x14008a, height 1080 -> 1080 , main True -> True
23:05:58.383 | A30 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 17732 main window 0x203ce -> 0x204a8, height 39 -> 28 , main False -> False
23:05:58.383 | A30 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 9988 main window 0x101ae -> 0x1014e, height 4 -> 1080 , main True -> True
23:05:58.383 | A30 | 367 | ftw1 | Loading (pid: 17732)
23:05:58.386 | A30 | 48 | Update::Detect | Env (C:\Windows\SYSTEM32\d3d11.dll) <0XFF20000>6|2|1247876770
23:05:58.386 | A30 | 48 | Update::Detect | Env (C:\Windows\SYSTEM32\dxgi.dll) <0X135B0000>6|2|1247876770
23:05:59.119 | A30 | 173 | DXManager::Detect | Found in 0
23:05:59.120 | A30 | 209 | Initialize::GetLocation | @ 0X18C0|6336
23:05:59.120 | A30 | 209 | Initialize::GetLocation | @ 0X6AA90|436880
23:05:59.120 | A30 | 209 | Initialize::GetLocation | @ 0X22810|141328
23:05:59.120 | A30 | 209 | Initialize::GetLocation | @ 0X3300|13056
23:05:59.120 | A30 | 111 | Update::Caught | C:\Windows\SYSTEM32\d3d11.dll|0XFF20000 <> 0X135B0000
23:05:59.120 | A30 | 209 | Initialize::GetLocation | @ 0XFCA98860|-55998368
23:05:59.120 | A30 | 111 | Update::Caught | C:\Windows\SYSTEM32\d3d11.dll|0XFF20000 <> 0X135B0000
23:05:59.120 | A30 | 209 | Initialize::GetLocation | @ 0XFCA9DC30|-55976912
23:05:59.120 | A30 | 111 | Update::Caught | C:\Windows\SYSTEM32\d3d11.dll|0XFF20000 <> 0X135B0000
23:05:59.120 | A30 | 209 | Initialize::GetLocation | @ 0XFCA9C5F0|-55982608
23:05:59.120 | A30 | 111 | Update::Caught | C:\Windows\SYSTEM32\d3d11.dll|0XFF20000 <> 0X135B0000
23:05:59.120 | A30 | 209 | Initialize::GetLocation | @ 0XFC97A7E0|-57169952
23:05:59.157 | A30 | 48 | Update::Detect | Env (C:\Windows\SYSTEM32\d3d9.dll) <0XEDB20000>6|2|1247876770
23:05:59.419 | A30 | 129 | DXManager::Detect | OK
23:05:59.458 | A30 | 186 | DXManager::Detect | Done
23:05:59.458 | A30 | 215 | VTableHolderD3d9::init | d3d offsest [sht]: 0x4030 , 0x55a0
23:05:59.458 | A30 | 209 | Initialize::GetLocation | @ 0X422A0|271008
23:05:59.458 | A30 | 209 | Initialize::GetLocation | @ 0X35970|219504
23:05:59.458 | A30 | 209 | Initialize::GetLocation | @ 0X3E570|255344
23:05:59.458 | A30 | 209 | Initialize::GetLocation | @ 0XB9150|758096
23:05:59.458 | A30 | 209 | Initialize::GetLocation | @ 0XB8CA0|756896
23:05:59.458 | A30 | 209 | Initialize::GetLocation | @ 0XC100|49408
23:05:59.458 | A30 | 209 | Initialize::GetLocation | @ 0XB8D40|757056
23:05:59.458 | A30 | 209 | Initialize::GetLocation | @ 0X1D060|118880
23:05:59.458 | A30 | 209 | Initialize::GetLocation | @ 0X1FAB0|129712
23:05:59.458 | A30 | 209 | Initialize::GetLocation | @ 0X28280|164480
23:05:59.458 | A30 | 209 | Initialize::GetLocation | @ 0X115B50|1137488
23:05:59.458 | A30 | 209 | Initialize::GetLocation | @ 0X115610|1136144
23:05:59.458 | A30 | 209 | Initialize::GetLocation | @ 0X1CF50|118608
23:05:59.458 | A30 | 209 | Initialize::GetLocation | @ 0X1CE60|118368
23:05:59.458 | A30 | 209 | Initialize::GetLocation | @ 0XEA00|59904
23:05:59.458 | A30 | 209 | Initialize::GetLocation | @ 0X4B300|307968
23:05:59.458 | A30 | 209 | Initialize::GetLocation | @ 0XBC70|48240
23:05:59.458 | A30 | 209 | Initialize::GetLocation | @ 0XD0370|852848
23:05:59.458 | A30 | 209 | Initialize::GetLocation | @ 0XD0A40|854592
23:05:59.458 | A30 | 209 | Initialize::GetLocation | @ 0XBC70|48240
23:05:59.458 | A30 | 209 | Initialize::GetLocation | @ 0XD1530|857392
23:05:59.458 | A30 | 209 | Initialize::GetLocation | @ 0XD1B90|859024
23:05:59.489 | A30 | 48 | Update::Detect | Env (C:\Windows\SYSTEM32\dinput.dll) <0X8AE90000>6|2|1247870977
23:05:59.504 | A30 | 83 | VTableHolderDInput::init | m_pDIW->CreateDevice - succeded.
23:05:59.504 | A30 | 209 | Initialize::GetLocation | @ 0X4040|16448
23:05:59.504 | A30 | 209 | Initialize::GetLocation | @ 0X6410|25616
23:05:59.504 | A30 | 209 | Initialize::GetLocation | @ 0X65C0|26048
23:05:59.505 | A30 | 48 | Update::Detect | Env (C:\Windows\SYSTEM32\dinput8.dll) <0XCD750000>6|2|1247870977
23:05:59.517 | A30 | 93 | VTableHolderDInput8::init | m_pDI8W->CreateDevice - succeded.
23:05:59.517 | A30 | 110 | VTableHolderDInput8::init | m_pDI8A->CreateDevice - succeded.
23:05:59.517 | A30 | 209 | Initialize::GetLocation | @ 0XA5D0|42448
23:05:59.517 | A30 | 209 | Initialize::GetLocation | @ 0XD4D0|54480
23:05:59.517 | A30 | 209 | Initialize::GetLocation | @ 0XD290|53904
23:05:59.576 | A30 | 227 | InterProcessElement::open | InterProcess Overwolf_SHARED_MEMORY_2_2_30017732 opened succesfuly
23:05:59.576 | A30 | 72 | HookFunctionsTableInitializer::SetHookFunctionsData | D3D9 Sht offsets 0x4030 , 0x55a0
23:05:59.576 | A30 | 257 | InterProcessElement::close | InterProcess Overwolf_SHARED_MEMORY_2_2_30017732 close 2147483647 bytes
23:05:59.576 | A30 | 307 | InjectOWExplorer | Explorer file name [C:\Program Files (x86)\Overwolf\0.300.0.11\OWExplorer.dll]
23:05:59.584 | A30 | 391 | ftw1 | OWExplorer injected
23:05:59.586 | 5404 | 71 | Common::ProcessExplorer::ProcessTrackerIPCAgent::OnConnected | connected to process tracker server
23:06:09.650 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |4860| (w: 0x0): \Device\HarddiskVolume3\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
23:06:09.650 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |4844| (w: 0x0): \Device\HarddiskVolume3\Program Files (x86)\Razer\Razer Services\GMS3\GameManagerService3.exe
23:06:09.650 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |2668| (w: 0x0): \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_67995ceab8993b08\Display.NvContainer\NVDisplay.Container.exe
23:06:09.650 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |6128| (w: 0x0): \Device\HarddiskVolume3\Program Files (x86)\Razer Chroma SDK\bin\RzAppManager
23:06:09.650 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |4900| (w: 0x0): \Device\HarddiskVolume3\Program Files (x86)\Razer Chroma SDK\bin\RzSDKServer.exe
23:06:09.650 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |4884| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdater\x64\RGSUpdater.exe
23:06:09.650 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |3004| (w: 0x0): MemCompression
23:06:09.651 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |5248| (w: 0x0): \Device\HarddiskVolume3\Program Files (x86)\Razer Chroma SDK\bin\RzBTLEManager
23:06:09.651 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |15320| (w: 0x0): C:\Program Files\Riot Vanguard\vgtray.exe
23:06:09.651 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |5008| (w: 0x0): \Device\HarddiskVolume3\Program Files (x86)\Razer Chroma SDK\bin\RzDeviceManager
23:06:09.651 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |5624| (w: 0x0): \Device\HarddiskVolume3\Program Files (x86)\Razer Chroma SDK\bin\RzDeviceManagerEx
23:06:09.651 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |5684| (w: 0x0): \Device\HarddiskVolume3\Program Files (x86)\Razer Chroma SDK\bin\RzIoTDeviceManager
23:06:09.651 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |5628| (w: 0x0): \Device\HarddiskVolume3\Program Files (x86)\Razer Chroma SDK\bin\RzSmartlightingDeviceManager
23:06:09.651 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |6168| (w: 0x0): \Device\HarddiskVolume3\Program Files (x86)\Razer Chroma SDK\bin\RzWDLDeviceManager
23:06:09.651 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |6668| (w: 0x0): \Device\HarddiskVolume3\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
23:06:09.651 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |8196| (w: 0x0): C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
23:06:09.651 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |8272| (w: 0x0): C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
23:06:10.663 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |16376| (w: 0x0): C:\Program Files (x86)\Epic Games\Epic Online Services\EpicOnlineServicesUserHelper.exe
23:06:10.663 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |19432| (w: 0x0): C:\Program Files\Razer\RazerAppEngine\app-4.0.683\CommonDLL\RzEngineMon.exe
23:06:10.663 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |16244| (w: 0x0): C:\Program Files (x86)\Epic Games\Epic Online Services\EpicOnlineServicesUserHelper.exe
23:06:10.663 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |15972| (w: 0x0): C:\Program Files (x86)\Razer\Razer Axon\RazerAxon.exe
23:06:10.663 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |17176| (w: 0x0): C:\Program Files\Razer\RazerAppEngine\app-4.0.683\RazerAppEngine.exe
23:09:34.942 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |8664| (w: 0x0): C:\Users\User\AppData\Local\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe
23:09:34.942 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |10504| (w: 0x0): \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
23:09:34.942 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |9528| (w: 0x0): \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
23:09:35.943 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |17744| (w: 0x0): C:\Users\User\AppData\Local\Microsoft\OneDrive\26.088.0510.0004\OneDrive.Sync.Service.exe
23:09:48.53 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |4672| (w: 0x0): \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
23:09:51.72 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |6520| (w: 0x0): \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeUpdate\Install\{73CF09DF-3FEB-4581-975F-E808691FB83E}\MicrosoftEdge_X64_149.0.4022.52_148.0.3967.96.exe
23:09:55.122 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |14044| (w: 0x0): \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\149.0.4022.52\Installer\setup.exe
23:10:36.439 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |8424| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
23:15:35.219 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |13504| (w: 0x0): C:\Users\User\AppData\Local\Microsoft\OneDrive\26.088.0510.0004\OneDriveLauncher.exe
23:15:37.226 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |19352| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
23:15:44.270 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |22180| (w: 0x0): C:\Users\User\AppData\Local\Temp\DFFD3B2E-E8F6-4822-A7F1-9F6E847CA0B8\DismHost.exe
23:19:18.589 | 5408 | 369 | ProcessInjector::IsProcessReadyToInjectByRule | ready rule passed for process [AimLab_tb.exe], consider it is ready pid-window [0x160644]
23:19:20.187 | 5328 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 4084 main window 0x606a0 -> 0x2050a, height 1056 -> 919 , main True -> True
23:19:20.955 | 5328 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 4084 main window 0x2050a -> 0x706a8, height 919 -> 919 , main True -> True
23:19:21.349 | 5328 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 4084 main window 0x706a8 -> 0x2050a, height 919 -> 919 , main True -> True
23:19:23.205 | 5328 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 10340 main window 0x101ec -> 0x101f0, height 1080 -> 1080 , main True -> True
23:19:27.701 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |18932| (w: 0x0): C:\Program Files (x86)\Steam\steamapps\common\Aim Lab\UnityCrashHandler64.exe
23:19:28.713 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |10632| (w: 0x0): C:\Program Files (x86)\Steam\steamapps\common\Aim Lab\AimLab_tb_Data\Plugins\x86_64\crashpad_handler.dll
23:19:32.754 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |18680| (w: 0x0): C:\Program Files (x86)\Steam\steamapps\common\Aim Lab\AimLab_tb_Data\Plugins\x86_64\VuplexWebViewChromium\Vuplex WebView.vuplex
23:20:03.781 | 5328 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 4084 main window 0x2050a -> 0x303bc, height 919 -> 919 , main True -> True
23:20:24.814 | 5328 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 4084 main window 0x303bc -> 0x2050a, height 919 -> 919 , main True -> True
23:20:38.172 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |2392| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
23:25:39.332 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |4036| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
23:27:37.176 | 5408 | 369 | ProcessInjector::IsProcessReadyToInjectByRule | ready rule passed for process [Riot Client.exe], consider it is ready pid-window [0x3070c]
23:27:38.512 | 5328 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 1268 main window 0x3070c -> 0x30706, height 600 -> 864 , main True -> True
23:27:44.260 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |20412| (w: 0x0): C:\Riot Games\Riot Client\RiotClientServices.exe
23:27:45.275 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |4636| (w: 0x0): C:\Riot Games\Riot Client\RiotClientCrashHandler.exe
23:30:09.547 | 5328 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 1268 main window 0x30706 -> 0x30704, height 864 -> 864 , main True -> True
23:30:37.480 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |9080| (w: 0x0): \Device\HarddiskVolume3\Program Files\Riot Vanguard\vgc.exe
23:30:39.494 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |9460| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
23:31:09.739 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |12804| (w: 0x0): C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_7.326.5041.0_x64__8wekyb3d8bbwe\GameBarFTServer.exe
23:35:40.597 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |17492| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
23:37:51.517 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |14856| (w: 0x0): C:\Users\User\AppData\Local\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe
23:40:40.722 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |21856| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
23:41:24.507 | 5328 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 13068 main window 0x160656 -> 0xf06ec, height 600 -> 864 , main True -> True
23:41:38.179 | 5408 | 369 | ProcessInjector::IsProcessReadyToInjectByRule | ready rule passed for process [VALORANT-Win64-Shipping.exe], consider it is ready pid-window [0xd0738]
23:41:39.584 | 5408 | 698 | ProcessInjector::InjectExplorerToProcess | Injected to process 12884 [mt 18732] 0xd0738
23:41:41.218 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |4976| (w: 0x0): C:\Riot Games\VALORANT\live\VALORANT.exe
23:41:44.733 | 5328 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 10340 main window 0x101f0 -> 0x101f0, height 1080 -> 1080 , main True -> True
23:41:49.305 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |2728| (w: 0x0): C:\Users\User\AppData\Local\NVIDIA Corporation\NVIDIA app\NvBackend\ApplicationOntology\NvOAWrapperCache.exe
23:42:11.191 | 5328 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 13068 main window 0xf06ec -> 0x80716, height 864 -> 864 , main True -> True
23:42:14.140 | 5328 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 12884 main window 0xd0738 -> 0x408fe, height 1080 -> 1080 , main True -> True
23:42:24.541 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |17224| (w: 0x0): C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_7.326.5041.0_x64__8wekyb3d8bbwe\GameBarFTServer.exe
23:42:29.302 | 5328 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 13068 main window 0x80716 -> 0x80716, height 864 -> 864 , main True -> True
23:45:09.865 | 5328 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 13068 main window 0x80716 -> 0x80716, height 864 -> 864 , main True -> True
23:45:42.321 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |2324| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
23:50:42.992 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |1672| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
23:55:43.458 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |7388| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
00:00:44.435 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |22508| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
00:03:00.195 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |12940| (w: 0x0): \Device\HarddiskVolume3\Program Files\Riot Vanguard\vgm.exe
00:05:44.222 | 5328 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 15584 main window 0x706a2 -> 0x30504, height 1056 -> 919 , main True -> True
00:05:45.151 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |1716| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
00:05:46.361 | 5328 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 15584 main window 0x30504 -> 0x3031a, height 919 -> 919 , main True -> True
00:06:50.608 | 5328 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 15584 main window 0x3031a -> 0x3031a, height 919 -> 919 , main True -> True
00:07:15.455 | 5328 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 15584 main window 0x3031a -> 0x3031a, height 919 -> 919 , main True -> True
00:08:15.363 | 5328 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 15584 main window 0x3031a -> 0x3031a, height 919 -> 919 , main True -> True
00:10:45.386 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |15716| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
00:14:54.333 | 5328 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 1904 main window 0x806ac -> 0xe0328, height 1056 -> 919 , main True -> True
00:15:46.352 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |12704| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
00:16:59.608 | 5328 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 1904 main window 0xe0328 -> 0xe0328, height 919 -> 919 , main True -> True
00:20:46.609 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |21500| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
00:20:59.703 | 5328 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 1904 main window 0xe0328 -> 0xe0328, height 919 -> 919 , main True -> True
00:21:33.812 | 5328 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 1904 main window 0xe0328 -> 0xe0328, height 919 -> 919 , main True -> True
00:23:20.912 | 5328 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 1904 main window 0xe0328 -> 0xe0328, height 919 -> 919 , main True -> True
00:25:47.569 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |592| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
00:30:12.681 | 5328 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 11988 main window 0x906aa -> 0x15027a, height 1056 -> 919 , main True -> True
00:30:30.628 | 5328 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 11988 main window 0x15027a -> 0x15027a, height 919 -> 919 , main True -> True
00:30:48.347 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |9400| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
00:30:52.520 | 5328 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 11988 main window 0x15027a -> 0x15027a, height 919 -> 919 , main True -> True
00:35:48.957 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |14748| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
00:36:04.38 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |14532| (w: 0x0): \Device\HarddiskVolume3\Program Files\Riot Vanguard\vgm.exe
00:37:25.353 | 5328 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 12712 main window 0x110316 -> 0xf0504, height 1056 -> 919 , main True -> True
00:37:26.239 | 5328 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 12712 main window 0xf0504 -> 0xc0686, height 919 -> 41 , main True -> True
00:40:49.459 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |7040| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
00:45:50.88 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |10596| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
00:50:51.495 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |20012| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
00:55:52.259 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |13956| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
01:00:52.938 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |20616| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
01:05:53.687 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |18748| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
01:10:53.469 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |22496| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
01:15:54.184 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |20592| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
01:20:54.898 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |16880| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
01:25:55.576 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |18216| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
01:27:34.331 | 5328 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 11648 main window 0x903c2 -> 0x606fe, height 1056 -> 919 , main True -> True
01:28:04.313 | 5328 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 11648 main window 0x606fe -> 0x606fe, height 919 -> 919 , main True -> True
01:28:17.143 | 5328 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 11648 main window 0x606fe -> 0x606fe, height 919 -> 919 , main True -> True
01:30:19.984 | 5328 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 11648 main window 0x606fe -> 0xb0564, height 919 -> 919 , main True -> True
01:30:23.320 | 5328 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 11648 main window 0xb0564 -> 0x606fe, height 919 -> 919 , main True -> True
01:30:56.832 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |16516| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
01:30:56.988 | 5328 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 11648 main window 0x606fe -> 0x7052c, height 919 -> 919 , main True -> True
01:30:59.333 | 5328 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 11648 main window 0x7052c -> 0x606fe, height 919 -> 919 , main True -> True
01:31:09.291 | 5328 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 11648 main window 0x606fe -> 0x8052c, height 919 -> 919 , main True -> True
01:31:10.55 | 5328 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 11648 main window 0x8052c -> 0x1606b0, height 919 -> 919 , main True -> True
01:31:10.499 | 5328 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 11648 main window 0x1606b0 -> 0x8052c, height 919 -> 919 , main True -> True
01:31:18.579 | 5328 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 11648 main window 0x8052c -> 0x1606b0, height 919 -> 919 , main True -> True
01:31:26.123 | 5328 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 11648 main window 0x1606b0 -> 0x8052c, height 919 -> 919 , main True -> True
01:31:27.693 | 5328 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 11648 main window 0x8052c -> 0x170312, height 919 -> 919 , main True -> True
01:31:35.32 | 5328 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 11648 main window 0x170312 -> 0x8052c, height 919 -> 919 , main True -> True
01:31:35.814 | 5328 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 11648 main window 0x8052c -> 0x606fe, height 919 -> 919 , main True -> True
01:33:45.511 | 5328 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 11648 main window 0x606fe -> 0x606fe, height 919 -> 919 , main True -> True
01:34:47.881 | 5328 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 11648 main window 0x606fe -> 0x606fe, height 919 -> 919 , main True -> True
01:35:57.352 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |17512| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
01:36:18.679 | 5328 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 11648 main window 0x606fe -> 0x606fe, height 919 -> 919 , main True -> True
01:36:31.647 | 5328 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 11648 main window 0x606fe -> 0x606fe, height 919 -> 919 , main True -> True
01:40:58.146 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |8176| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
01:45:58.840 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |13612| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
01:50:59.397 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |356| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
01:56:00.82 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |3520| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
02:01:00.792 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |16420| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
02:06:01.482 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |6352| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
02:11:02.134 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |12676| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
02:12:08.665 | 5328 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 17160 main window 0x170372 -> 0x706fe, height 1056 -> 919 , main True -> True
02:12:36.579 | 5328 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 17160 main window 0x706fe -> 0x706fe, height 919 -> 919 , main True -> True
02:12:55.959 | 5328 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 17160 main window 0x706fe -> 0x706fe, height 919 -> 919 , main True -> True
02:13:09.473 | 5328 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 17160 main window 0x706fe -> 0x706fe, height 919 -> 919 , main True -> True
02:16:03.0 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |5640| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
02:18:21.784 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |16072| (w: 0x0): \Device\HarddiskVolume3\Program Files\Riot Vanguard\vgm.exe
02:19:16.112 | 5328 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 5892 main window 0x180366 -> 0x160318, height 1056 -> 919 , main True -> True
02:19:24.693 | 5328 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 5892 main window 0x160318 -> 0x160318, height 919 -> 919 , main True -> True
02:20:09.203 | 5328 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 5892 main window 0x160318 -> 0x160318, height 919 -> 919 , main True -> True
02:20:24.234 | 5328 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 5892 main window 0x160318 -> 0x160318, height 919 -> 919 , main True -> True
02:21:03.930 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |9436| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
02:21:25.196 | 5328 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 5892 main window 0x160318 -> 0x160318, height 919 -> 919 , main True -> True
02:22:11.210 | 5328 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 5892 main window 0x160318 -> 0x1e0372, height 919 -> 25 , main True -> True
02:26:04.853 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |21996| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
02:31:05.503 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |6664| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
02:36:06.146 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |19992| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
02:41:06.839 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |17868| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
02:46:07.544 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |11184| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
02:51:08.174 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |16652| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
02:54:13.539 | 5328 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 20544 main window 0xe0390 -> 0x51014c, height 1056 -> 919 , main True -> True
02:54:14.642 | 5328 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 20544 main window 0x51014c -> 0x1102be, height 919 -> 919 , main True -> True
02:54:19.871 | 5328 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 20544 main window 0x1102be -> 0x1102be, height 919 -> 919 , main True -> True
02:56:09.213 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |21452| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
02:56:59.447 | 5328 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 20544 main window 0x1102be -> 0x1102be, height 919 -> 919 , main True -> True
02:57:13.270 | 5328 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 20544 main window 0x1102be -> 0x25035c, height 919 -> 25 , main True -> True
03:01:09.685 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |13148| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
03:01:17.744 | 5408 | 369 | ProcessInjector::IsProcessReadyToInjectByRule | ready rule passed for process [Riot Client.exe], consider it is ready pid-window [0x703de]
03:01:34.860 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |12356| (w: 0x0): C:\Riot Games\Riot Client\RiotClientServices.exe
03:01:34.860 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |3668| (w: 0x0): C:\Riot Games\Riot Client\RiotClientCrashHandler.exe
03:02:04.998 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |1552| (w: 0x0): C:\Users\User\AppData\Local\NVIDIA Corporation\NVIDIA app\NvBackend\ApplicationOntology\NvOAWrapperCache.exe
03:06:10.320 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |5540| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
03:11:10.916 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |20136| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
03:16:11.542 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |20036| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
03:21:12.183 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |18896| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
03:26:12.976 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |2328| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
03:31:13.805 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |22472| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
03:36:14.638 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |2944| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
03:41:15.516 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |18936| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
03:46:15.442 | 5408 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |19184| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe