Time | Thread | Line | Function | Message
--- | --- | --- | --- | ---
17:10:36.748 | 5228 | 103 | GameListService::CreateProcessMap | loading game list...
17:10:36.763 | 5228 | 120 | GameListService::CreateProcessMap | 3918, 4, 6009 loaded
17:10:36.766 | 5228 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 9628 main window 0x120290 -> 0x20020, height 39 -> 40 , main True -> True
17:10:36.766 | 5228 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 17648 main window 0x105ba -> 0x105b8, height 14 -> 759 , main False -> False
17:10:36.766 | 5228 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 17648 main window 0x105b8 -> 0x105b6, height 759 -> 39 , main False -> False
17:10:36.766 | 5228 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 17648 main window 0x105b6 -> 0x204f0, height 39 -> 14 , main False -> False
17:10:36.766 | 5228 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 17648 main window 0x204f0 -> 0x204f2, height 14 -> 759 , main False -> False
17:10:36.766 | 5228 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 17648 main window 0x204f2 -> 0x204fe, height 759 -> 39 , main False -> False
17:10:36.766 | 5228 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 17648 main window 0x204fe -> 0x104c2, height 39 -> 759 , main False -> False
17:10:36.766 | 5228 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 17648 main window 0x104c2 -> 0x204b0, height 759 -> 400 , main False -> False
17:10:36.766 | 5228 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 17648 main window 0x204b0 -> 0x104ac, height 400 -> 1 , main False -> False
17:10:36.766 | 5228 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 17648 main window 0x104ac -> 0x104aa, height 1 -> 6 , main False -> False
17:10:36.766 | 5228 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 17648 main window 0x104aa -> 0x103ca, height 6 -> 39 , main False -> False
17:10:36.766 | 5228 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 9628 main window 0x20020 -> 0x1015a, height 40 -> 4 , main True -> True
17:10:36.766 | 5228 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 15032 main window 0xa028e -> 0xa029a, height 1080 -> 1080 , main True -> True
17:10:36.766 | 5228 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 17648 main window 0x103ca -> 0x104a8, height 39 -> 28 , main False -> False
17:10:36.766 | 5228 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 9628 main window 0x1015a -> 0x1010a, height 4 -> 1080 , main True -> True
17:10:36.766 | 5228 | 367 | ftw1 | Loading (pid: 17648)
17:10:36.768 | 5228 | 48 | Update::Detect | Env (C:\Windows\SYSTEM32\d3d11.dll) <0XB8FB0000>6|2|1247876770
17:10:36.768 | 5228 | 48 | Update::Detect | Env (C:\Windows\SYSTEM32\dxgi.dll) <0XBC070000>6|2|1247876770
17:10:37.30 | 5228 | 173 | DXManager::Detect | Found in 0
17:10:37.30 | 5228 | 209 | Initialize::GetLocation | @ 0X18C0|6336
17:10:37.30 | 5228 | 209 | Initialize::GetLocation | @ 0X6AA90|436880
17:10:37.30 | 5228 | 209 | Initialize::GetLocation | @ 0X22810|141328
17:10:37.30 | 5228 | 209 | Initialize::GetLocation | @ 0X3300|13056
17:10:37.30 | 5228 | 111 | Update::Caught | C:\Windows\SYSTEM32\d3d11.dll|0XB8FB0000 <> 0XBC070000
17:10:37.30 | 5228 | 209 | Initialize::GetLocation | @ 0XFD068860|-49903520
17:10:37.30 | 5228 | 111 | Update::Caught | C:\Windows\SYSTEM32\d3d11.dll|0XB8FB0000 <> 0XBC070000
17:10:37.30 | 5228 | 209 | Initialize::GetLocation | @ 0XFD06DC30|-49882064
17:10:37.30 | 5228 | 111 | Update::Caught | C:\Windows\SYSTEM32\d3d11.dll|0XB8FB0000 <> 0XBC070000
17:10:37.30 | 5228 | 209 | Initialize::GetLocation | @ 0XFD06C5F0|-49887760
17:10:37.30 | 5228 | 111 | Update::Caught | C:\Windows\SYSTEM32\d3d11.dll|0XB8FB0000 <> 0XBC070000
17:10:37.30 | 5228 | 209 | Initialize::GetLocation | @ 0XFCF4A7E0|-51075104
17:10:37.77 | 5228 | 48 | Update::Detect | Env (C:\Windows\SYSTEM32\d3d9.dll) <0X88E90000>6|2|1247876770
17:10:37.294 | 5228 | 129 | DXManager::Detect | OK
17:10:37.319 | 5228 | 186 | DXManager::Detect | Done
17:10:37.319 | 5228 | 215 | VTableHolderD3d9::init | d3d offsest [sht]: 0x4030 , 0x55a0
17:10:37.319 | 5228 | 209 | Initialize::GetLocation | @ 0X422A0|271008
17:10:37.319 | 5228 | 209 | Initialize::GetLocation | @ 0X35970|219504
17:10:37.319 | 5228 | 209 | Initialize::GetLocation | @ 0X3E570|255344
17:10:37.319 | 5228 | 209 | Initialize::GetLocation | @ 0XB9150|758096
17:10:37.319 | 5228 | 209 | Initialize::GetLocation | @ 0XB8CA0|756896
17:10:37.319 | 5228 | 209 | Initialize::GetLocation | @ 0XC100|49408
17:10:37.319 | 5228 | 209 | Initialize::GetLocation | @ 0XB8D40|757056
17:10:37.319 | 5228 | 209 | Initialize::GetLocation | @ 0X1D060|118880
17:10:37.319 | 5228 | 209 | Initialize::GetLocation | @ 0X1FAB0|129712
17:10:37.319 | 5228 | 209 | Initialize::GetLocation | @ 0X28280|164480
17:10:37.319 | 5228 | 209 | Initialize::GetLocation | @ 0X115B50|1137488
17:10:37.319 | 5228 | 209 | Initialize::GetLocation | @ 0X115610|1136144
17:10:37.319 | 5228 | 209 | Initialize::GetLocation | @ 0X1CF50|118608
17:10:37.319 | 5228 | 209 | Initialize::GetLocation | @ 0X1CE60|118368
17:10:37.319 | 5228 | 209 | Initialize::GetLocation | @ 0XEA00|59904
17:10:37.319 | 5228 | 209 | Initialize::GetLocation | @ 0X4B300|307968
17:10:37.319 | 5228 | 209 | Initialize::GetLocation | @ 0XBC70|48240
17:10:37.319 | 5228 | 209 | Initialize::GetLocation | @ 0XD0370|852848
17:10:37.319 | 5228 | 209 | Initialize::GetLocation | @ 0XD0A40|854592
17:10:37.319 | 5228 | 209 | Initialize::GetLocation | @ 0XBC70|48240
17:10:37.319 | 5228 | 209 | Initialize::GetLocation | @ 0XD1530|857392
17:10:37.319 | 5228 | 209 | Initialize::GetLocation | @ 0XD1B90|859024
17:10:37.335 | 5228 | 48 | Update::Detect | Env (C:\Windows\SYSTEM32\dinput.dll) <0X22160000>6|2|1247870977
17:10:37.349 | 5228 | 83 | VTableHolderDInput::init | m_pDIW->CreateDevice - succeded.
17:10:37.350 | 5228 | 209 | Initialize::GetLocation | @ 0X4040|16448
17:10:37.350 | 5228 | 209 | Initialize::GetLocation | @ 0X6410|25616
17:10:37.350 | 5228 | 209 | Initialize::GetLocation | @ 0X65C0|26048
17:10:37.350 | 5228 | 48 | Update::Detect | Env (C:\Windows\SYSTEM32\dinput8.dll) <0XAC900000>6|2|1247870977
17:10:37.362 | 5228 | 93 | VTableHolderDInput8::init | m_pDI8W->CreateDevice - succeded.
17:10:37.362 | 5228 | 110 | VTableHolderDInput8::init | m_pDI8A->CreateDevice - succeded.
17:10:37.362 | 5228 | 209 | Initialize::GetLocation | @ 0XA5D0|42448
17:10:37.362 | 5228 | 209 | Initialize::GetLocation | @ 0XD4D0|54480
17:10:37.362 | 5228 | 209 | Initialize::GetLocation | @ 0XD290|53904
17:10:37.414 | 5228 | 227 | InterProcessElement::open | InterProcess Overwolf_SHARED_MEMORY_2_2_30017648 opened succesfuly
17:10:37.414 | 5228 | 72 | HookFunctionsTableInitializer::SetHookFunctionsData | D3D9 Sht offsets 0x4030 , 0x55a0
17:10:37.415 | 5228 | 257 | InterProcessElement::close | InterProcess Overwolf_SHARED_MEMORY_2_2_30017648 close 2147483647 bytes
17:10:37.415 | 5228 | 307 | InjectOWExplorer | Explorer file name [C:\Program Files (x86)\Overwolf\0.300.0.11\OWExplorer.dll]
17:10:37.422 | 5228 | 391 | ftw1 | OWExplorer injected
17:10:37.434 | 412C | 71 | Common::ProcessExplorer::ProcessTrackerIPCAgent::OnConnected | connected to process tracker server
17:10:38.449 | 5E8 | 369 | ProcessInjector::IsProcessReadyToInjectByRule | ready rule passed for process [RazerAppEngine.exe], consider it is ready pid-window [0x105ce]
17:10:47.512 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |4796| (w: 0x0): \Device\HarddiskVolume3\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
17:10:47.512 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |2684| (w: 0x0): \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_67995ceab8993b08\Display.NvContainer\NVDisplay.Container.exe
17:10:47.512 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |6004| (w: 0x0): \Device\HarddiskVolume3\Program Files (x86)\Razer Chroma SDK\bin\RzBTLEManager
17:10:47.512 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |4904| (w: 0x0): \Device\HarddiskVolume3\Program Files (x86)\Razer\Razer Services\GMS3\GameManagerService3.exe
17:10:47.512 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |4864| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdater\x64\RGSUpdater.exe
17:10:47.512 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |2904| (w: 0x0): MemCompression
17:10:47.512 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |4816| (w: 0x0): \Device\HarddiskVolume3\Program Files (x86)\Razer Chroma SDK\bin\RzSDKServer.exe
17:10:47.512 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |6096| (w: 0x0): \Device\HarddiskVolume3\Program Files (x86)\Razer Chroma SDK\bin\RzDeviceManager
17:10:47.512 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |5960| (w: 0x0): \Device\HarddiskVolume3\Program Files (x86)\Razer Chroma SDK\bin\RzAppManager
17:10:47.512 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |6000| (w: 0x0): \Device\HarddiskVolume3\Program Files (x86)\Razer Chroma SDK\bin\RzWDLDeviceManager
17:10:47.512 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |6128| (w: 0x0): \Device\HarddiskVolume3\Program Files (x86)\Razer Chroma SDK\bin\RzDeviceManagerEx
17:10:47.512 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |5672| (w: 0x0): \Device\HarddiskVolume3\Program Files (x86)\Razer Chroma SDK\bin\RzIoTDeviceManager
17:10:47.512 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |5460| (w: 0x0): \Device\HarddiskVolume3\Program Files (x86)\Razer Chroma SDK\bin\RzSmartlightingDeviceManager
17:10:47.512 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |11864| (w: 0x0): \Device\HarddiskVolume3\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
17:10:47.512 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |11908| (w: 0x0): C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
17:10:47.512 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |11964| (w: 0x0): C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
17:10:48.518 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |19352| (w: 0x0): C:\Program Files\Razer\RazerAppEngine\app-4.0.683\CommonDLL\RzEngineMon.exe
17:10:48.518 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |5904| (w: 0x0): C:\Program Files\Riot Vanguard\vgtray.exe
17:10:48.518 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |16020| (w: 0x0): C:\Program Files (x86)\Epic Games\Epic Online Services\EpicOnlineServicesUserHelper.exe
17:10:48.518 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |15784| (w: 0x0): C:\Program Files (x86)\Epic Games\Epic Online Services\EpicOnlineServicesUserHelper.exe
17:10:48.518 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |16124| (w: 0x0): C:\Program Files (x86)\Razer\Razer Axon\RazerAxon.exe
17:12:30.502 | 5264 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 21804 main window 0x80614 -> 0x1062a, height 1056 -> 919 , main True -> True
17:12:49.72 | 5264 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 21804 main window 0x1062a -> 0x2049c, height 919 -> 25 , main True -> True
17:15:15.49 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |11324| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
17:20:15.595 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |1992| (w: 0x0): C:\Users\User\AppData\Local\Microsoft\OneDrive\26.084.0504.0007\OneDriveLauncher.exe
17:20:15.595 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |10356| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
17:23:42.573 | 5264 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 9628 main window 0x60482 -> 0x30672, height 779 -> 658 , main True -> True
17:25:16.371 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |764| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
17:30:17.110 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |1424| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
17:35:17.738 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |19364| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
17:40:18.428 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |10788| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
17:44:58.873 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |13016| (w: 0x0): \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
17:45:03.913 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |9412| (w: 0x0): \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
17:45:19.20 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |12388| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
17:45:20.21 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |7192| (w: 0x0): \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeUpdate\Install\{AEA96ACA-B285-49EA-BE4F-21516A828DEB}\MicrosoftEdge_X64_149.0.4022.52_148.0.3967.96.exe
17:45:20.21 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |11636| (w: 0x0): \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeUpdate\Install\{AEA96ACA-B285-49EA-BE4F-21516A828DEB}\EDGEMITMP_E8FCC.tmp\setup.exe
17:45:37.159 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |15124| (w: 0x0): \Device\HarddiskVolume3\Program Files (x86)\Microsoft\Edge\Application\149.0.4022.52\Installer\setup.exe
17:50:19.587 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |1944| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
17:55:20.63 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |10944| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
17:55:43.179 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |1336| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
18:00:42.495 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |1304| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
18:05:43.952 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |21040| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
18:10:44.771 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |14236| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
18:15:45.504 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |19676| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
18:20:45.493 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |8704| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
18:25:46.69 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |11148| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
18:30:46.625 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |22224| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
18:35:47.227 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |8944| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
18:40:48.784 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |8544| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
18:45:49.269 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |2444| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
18:50:49.644 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |4180| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
18:55:50.207 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |21064| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
19:00:50.695 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |11292| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
19:14:58.198 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |21372| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
19:17:30.912 | 5264 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 21964 main window 0x5070c -> 0xa0720, height 946 -> 946 , main True -> True
19:19:58.564 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |23324| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
19:24:23.910 | 5264 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 21964 main window 0xa0720 -> 0xa0720, height 946 -> 946 , main True -> True
19:24:26.385 | 5264 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 21964 main window 0xa0720 -> 0x40446, height 946 -> 50 , main True -> True
19:24:29.510 | 5264 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 15544 main window 0x30642 -> 0x4063c, height 837 -> 837 , main True -> True
19:24:29.514 | 5264 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 15544 main window 0x4063c -> 0x8044e, height 837 -> 837 , main True -> True
19:24:29.525 | 5264 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 15544 main window 0x8044e -> 0x140606, height 837 -> 837 , main True -> True
19:24:29.781 | 5264 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 15544 main window 0x140606 -> 0x4063c, height 837 -> 837 , main True -> True
19:24:29.782 | 5264 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 15544 main window 0x4063c -> 0x140606, height 837 -> 837 , main True -> True
19:24:29.784 | 5264 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 15544 main window 0x140606 -> 0x140606, height 837 -> 801 , main True -> True
19:24:30.479 | 5264 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 15544 main window 0x140606 -> 0x7049c, height 801 -> 801 , main True -> True
19:24:59.667 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |7524| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
19:25:06.440 | 5264 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 8528 main window 0x2069c -> 0x2069e, height 124 -> 1080 , main True -> True
19:25:07.165 | 5264 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 8528 main window 0x2069e -> 0x2069c, height 1080 -> 124 , main True -> True
19:25:07.212 | 5264 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 8528 main window 0x2069c -> 0x20658, height 124 -> 553 , main True -> True
19:25:15.350 | 5264 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 8528 main window 0x20658 -> 0x1b060a, height 553 -> 25 , main True -> True
19:25:35.243 | 5264 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 22900 main window 0x5068c -> 0x5068c, height 1008 -> 1008 , main True -> True
19:25:38.710 | 5264 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 22900 main window 0x5068c -> 0x5068c, height 1008 -> 518 , main True -> True
19:30:00.11 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |13040| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
19:33:44.41 | 5264 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 21856 main window 0xf063a -> 0xf063a, height 532 -> 532 , main True -> True
19:35:01.377 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |9156| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
19:40:01.914 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |20444| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
19:45:02.258 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |22084| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
19:50:03.784 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |2996| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
19:55:04.318 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |9424| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
20:00:04.368 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |3280| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
20:04:09.556 | 5264 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 15544 main window 0x30642 -> 0x23069a, height 837 -> 837 , main True -> True
20:04:09.558 | 5264 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 15544 main window 0x23069a -> 0x260660, height 837 -> 837 , main True -> True
20:04:09.565 | 5264 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 15544 main window 0x260660 -> 0x2706c6, height 837 -> 837 , main True -> True
20:04:09.641 | 5264 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 15544 main window 0x2706c6 -> 0x23069a, height 837 -> 837 , main True -> True
20:04:09.643 | 5264 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 15544 main window 0x23069a -> 0x2706c6, height 837 -> 837 , main True -> True
20:04:09.644 | 5264 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 15544 main window 0x2706c6 -> 0x2706c6, height 837 -> 801 , main True -> True
20:04:10.607 | 5264 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 15544 main window 0x2706c6 -> 0x5c07ac, height 801 -> 801 , main True -> True
20:04:31.22 | 5264 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 15544 main window 0x340682 -> 0x30642, height 214 -> 837 , main True -> True
20:04:31.34 | 5264 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 15544 main window 0x30642 -> 0x280660, height 837 -> 837 , main True -> True
20:04:31.35 | 5264 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 15544 main window 0x280660 -> 0x100644, height 837 -> 837 , main True -> True
20:04:31.40 | 5264 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 15544 main window 0x100644 -> 0x290648, height 837 -> 837 , main True -> True
20:04:44.330 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |8600| (w: 0x0): C:\Program Files (x86)\Epic Games\Epic Online Services\service\EpicOnlineServicesHost.exe
20:04:44.330 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |5708| (w: 0x0): \Device\HarddiskVolume3\Program Files (x86)\Epic Games\Epic Online Services\service\EpicOnlineServicesHost.exe
20:04:44.330 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |11952| (w: 0x0): \Device\HarddiskVolume3\Program Files (x86)\Epic Games\Epic Online Services\EpicOnlineServicesUserHelper.exe
20:05:05.538 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |18416| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
20:10:11.627 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |16536| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
20:15:12.606 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |6760| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
20:20:13.572 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |4464| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
20:25:13.645 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |23504| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
20:30:14.849 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |9288| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
20:35:15.635 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |5252| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
20:40:15.635 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |22656| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
20:45:16.665 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |23036| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
20:50:17.770 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |22792| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
20:55:17.878 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |15192| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
21:00:19.14 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |21096| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
21:05:19.152 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |2664| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
21:10:20.239 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |21140| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
21:15:21.418 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |3848| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
21:20:21.573 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |1304| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
21:25:22.607 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |16740| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
21:30:22.764 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |22552| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
21:40:07.63 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |20492| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
21:44:44.809 | 5264 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 9628 main window 0x150642 -> 0x1010c, height 779 -> 1080 , main True -> True
21:44:54.426 | 5264 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 9628 main window 0x1010c -> 0x20064a, height 1080 -> 1080 , main True -> True
21:44:57.301 | 5264 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 9628 main window 0x20064a -> 0x1010c, height 1080 -> 1080 , main True -> True
21:45:07.746 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |20100| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
21:45:08.758 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |14756| (w: 0x0): C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2026.11050.1001.0_x64__8wekyb3d8bbwe\Photos.exe
21:50:08.441 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |18952| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
21:55:09.108 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |7040| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
22:00:10.19 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |22392| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
22:00:51.158 | 5264 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 9628 main window 0x1010c -> 0x10102, height 1080 -> 211 , main True -> True
22:00:53.187 | 5264 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 9628 main window 0x10102 -> 0x10102, height 211 -> 211 , main True -> True
22:05:10.102 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |16572| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
22:10:11.124 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |16032| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
22:15:12.285 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |22656| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
22:20:12.412 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |17800| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
22:23:09.167 | 5264 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 9628 main window 0x10102 -> 0x1015a, height 211 -> 4 , main True -> True
22:25:13.483 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |5432| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
22:30:14.441 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |23048| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
22:35:14.365 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |16844| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
22:36:27.831 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |1500| (w: 0x0): C:\Users\User\AppData\Local\Microsoft\OneDrive\26.084.0504.0007\FileCoAuth.exe
22:40:15.486 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |17256| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
22:42:29.262 | 5264 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 9628 main window 0x1015a -> 0x100cc, height 4 -> 120 , main True -> True
22:42:32.383 | 5264 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 9628 main window 0x100cc -> 0x100cc, height 120 -> 120 , main True -> True
22:42:35.641 | 5E8 | 369 | ProcessInjector::IsProcessReadyToInjectByRule | ready rule passed for process [AimLab_tb.exe], consider it is ready pid-window [0x3f0450]
22:42:37.527 | 5264 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 9628 main window 0x100cc -> 0x203ba, height 120 -> 1040 , main True -> True
22:42:40.276 | 5264 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 13272 main window 0x10280 -> 0x10284, height 1080 -> 1080 , main True -> True
22:42:44.711 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |22192| (w: 0x0): C:\Program Files (x86)\Steam\steamapps\common\Aim Lab\UnityCrashHandler64.exe
22:42:46.727 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |436| (w: 0x0): C:\Program Files (x86)\Steam\steamapps\common\Aim Lab\AimLab_tb_Data\Plugins\x86_64\crashpad_handler.dll
22:42:49.760 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |9868| (w: 0x0): C:\Program Files (x86)\Steam\steamapps\common\Aim Lab\AimLab_tb_Data\Plugins\x86_64\VuplexWebViewChromium\Vuplex WebView.vuplex
22:44:15.278 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |17780| (w: 0x0): C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_7.326.5041.0_x64__8wekyb3d8bbwe\GameBarFTServer.exe
22:45:15.709 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |21364| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
22:50:16.830 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |1028| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
22:55:22.70 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |11052| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
23:00:23.168 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |23252| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
23:02:24.12 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |16112| (w: 0x0): C:\Users\User\AppData\Local\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe
23:02:29.43 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |1532| (w: 0x0): C:\Users\User\AppData\Local\Microsoft\OneDrive\26.084.0504.0007\OneDrive.Sync.Service.exe
23:05:24.230 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |21160| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
23:10:24.395 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |14608| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
23:14:46.403 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |2236| (w: 0x0): C:\Users\User\AppData\Local\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe
23:15:25.678 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |22996| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
23:20:25.895 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |22348| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
23:25:26.999 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |22484| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
23:30:27.122 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |16760| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
23:35:28.259 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |20368| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
23:37:22.161 | 5E8 | 369 | ProcessInjector::IsProcessReadyToInjectByRule | ready rule passed for process [AimLab_tb.exe], consider it is ready pid-window [0x20065c]
23:37:22.435 | 5264 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 11088 main window 0x20065c -> 0x8053c, height 1080 -> 1080 , main True -> True
23:37:28.491 | 5264 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 13272 main window 0x10284 -> 0x10284, height 1080 -> 1080 , main True -> True
23:37:31.201 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |17704| (w: 0x0): C:\Program Files (x86)\Steam\steamapps\common\Aim Lab\UnityCrashHandler64.exe
23:37:32.216 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |10608| (w: 0x0): C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_7.326.5041.0_x64__8wekyb3d8bbwe\GameBarFTServer.exe
23:37:32.216 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |20352| (w: 0x0): C:\Program Files (x86)\Steam\steamapps\common\Aim Lab\AimLab_tb_Data\Plugins\x86_64\crashpad_handler.dll
23:37:35.241 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |9436| (w: 0x0): C:\Program Files (x86)\Steam\steamapps\common\Aim Lab\AimLab_tb_Data\Plugins\x86_64\VuplexWebViewChromium\Vuplex WebView.vuplex
23:40:28.414 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |3808| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
23:45:29.535 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |11588| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
23:46:35.890 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |21640| (w: 0x0): C:\Program Files (x86)\Steam\steamapps\common\Aim Lab\AimLab_tb_Data\Plugins\x86_64\VuplexWebViewChromium\Vuplex WebView.vuplex
23:50:30.373 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |10224| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
23:50:46.446 | 5E8 | 369 | ProcessInjector::IsProcessReadyToInjectByRule | ready rule passed for process [Riot Client.exe], consider it is ready pid-window [0x602f8]
23:50:47.557 | 5264 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 12136 main window 0x602f8 -> 0x304d8, height 600 -> 864 , main True -> True
23:50:53.472 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |15224| (w: 0x0): C:\Riot Games\Riot Client\RiotClientServices.exe
23:50:54.478 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |2576| (w: 0x0): C:\Riot Games\Riot Client\RiotClientCrashHandler.exe
23:50:55.484 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |7836| (w: 0x0): C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2026.11050.1001.0_x64__8wekyb3d8bbwe\Photos.exe
23:51:23.639 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |18816| (w: 0x0): \Device\HarddiskVolume3\Program Files\Riot Vanguard\vgc.exe
23:51:30.713 | 5E8 | 369 | ProcessInjector::IsProcessReadyToInjectByRule | ready rule passed for process [VALORANT-Win64-Shipping.exe], consider it is ready pid-window [0x50318]
23:51:31.870 | 5E8 | 698 | ProcessInjector::InjectExplorerToProcess | Injected to process 17412 [mt 18492] 0x50318
23:51:33.744 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |21260| (w: 0x0): C:\Riot Games\VALORANT\live\VALORANT.exe
23:51:36.88 | 5264 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 13272 main window 0x10284 -> 0x10284, height 1080 -> 1080 , main True -> True
23:51:41.795 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |10716| (w: 0x0): C:\Users\User\AppData\Local\NVIDIA Corporation\NVIDIA app\NvBackend\ApplicationOntology\NvOAWrapperCache.exe
23:51:53.547 | 5264 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 17412 main window 0x50318 -> 0x50332, height 1080 -> 1080 , main True -> True
23:52:03.958 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |15012| (w: 0x0): C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_7.326.5041.0_x64__8wekyb3d8bbwe\GameBarFTServer.exe
23:55:30.596 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |9052| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
00:00:31.503 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |15740| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
00:00:50.586 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |4724| (w: 0x0): \Device\HarddiskVolume3\Program Files\Riot Vanguard\vgm.exe
00:02:51.279 | 5264 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 9640 main window 0x60330 -> 0x1101ee, height 1056 -> 919 , main True -> True
00:05:20.420 | 5264 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 9640 main window 0x1101ee -> 0x1101ee, height 919 -> 919 , main True -> True
00:05:31.755 | 5264 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 9640 main window 0x1101ee -> 0x1101ee, height 919 -> 919 , main True -> True
00:05:31.829 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |16916| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
00:05:54.592 | 5264 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 9640 main window 0x1101ee -> 0x1101ee, height 919 -> 919 , main True -> True
00:06:06.462 | 5264 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 9640 main window 0x1101ee -> 0x1101ee, height 919 -> 919 , main True -> True
00:10:32.824 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |15192| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
00:13:21.824 | 5264 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 22788 main window 0x140608 -> 0x2e0370, height 1056 -> 919 , main True -> True
00:15:33.919 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |8616| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
00:17:24.242 | 5264 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 22788 main window 0x2e0370 -> 0x2e0370, height 919 -> 919 , main True -> True
00:19:07.364 | 5264 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 22788 main window 0x2e0370 -> 0x2e0370, height 919 -> 919 , main True -> True
00:20:34.149 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |8676| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
00:21:01.407 | 5264 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 22788 main window 0x2e0370 -> 0x2e0370, height 919 -> 919 , main True -> True
00:21:02.456 | 5264 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 22788 main window 0x2e0370 -> 0x2e0370, height 919 -> 919 , main True -> True
00:24:43.476 | 5264 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 22788 main window 0x2e0370 -> 0x2e0370, height 919 -> 919 , main True -> True
00:25:12.571 | 5264 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 22788 main window 0x2e0370 -> 0x100556, height 919 -> 50 , main True -> True
00:25:35.483 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |13992| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
00:29:36.356 | 5264 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 8204 main window 0x60618 -> 0x19014a, height 1056 -> 919 , main True -> True
00:29:37.893 | 5264 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 8204 main window 0x19014a -> 0x2301ec, height 919 -> 919 , main True -> True
00:30:35.642 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |13980| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
00:32:25.315 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |22292| (w: 0x0): \Device\HarddiskVolume3\Program Files\Riot Vanguard\vgm.exe
00:35:36.431 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |18908| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
00:40:37.69 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |1920| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
00:45:37.826 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |7556| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
00:50:38.559 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |18180| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
00:55:39.134 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |19724| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
00:56:10.307 | 5264 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 7616 main window 0x60442 -> 0x15061a, height 1056 -> 919 , main True -> True
00:56:13.839 | 5264 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 7616 main window 0x15061a -> 0x27014a, height 919 -> 41 , main True -> True
01:00:40.345 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |2544| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
01:05:40.620 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |496| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
01:10:41.513 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |4612| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
01:15:42.163 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |7308| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
01:20:42.810 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |1948| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
01:25:43.495 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |8944| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
01:30:44.265 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |23416| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
01:35:45.140 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |22748| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
01:40:46.323 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |11016| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
01:45:46.541 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |16160| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
01:50:47.405 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |15688| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
01:55:48.17 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |4792| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
02:00:48.703 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |2444| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
02:05:49.360 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |17536| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
02:10:49.895 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |7420| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
02:15:50.590 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |11544| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
02:18:06.419 | 5264 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 20092 main window 0xe0322 -> 0x3707b0, height 1056 -> 919 , main True -> True
02:18:14.763 | 5264 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 20092 main window 0x3707b0 -> 0xb0544, height 919 -> 25 , main True -> True
02:20:51.716 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |21532| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
02:25:52.231 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |2356| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
02:26:23.431 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |9660| (w: 0x0): C:\Users\User\AppData\Local\Microsoft\OneDrive\26.084.0504.0007\FileCoAuth.exe
02:30:53.82 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |23508| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
02:35:53.702 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |1088| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
02:40:54.452 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |10448| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
02:45:55.238 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |15540| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
02:50:55.901 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |10160| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
02:55:56.663 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |8940| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
02:58:17.632 | 5264 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 18948 main window 0x27061c -> 0x19037c, height 1056 -> 919 , main True -> True
02:58:18.610 | 5264 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 18948 main window 0x19037c -> 0xa05aa, height 919 -> 919 , main True -> True
02:58:21.68 | 5264 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 18948 main window 0xa05aa -> 0xa05aa, height 919 -> 919 , main True -> True
02:58:40.146 | 5264 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 18948 main window 0xa05aa -> 0xf04ce, height 919 -> 25 , main True -> True
03:00:56.903 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |11740| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe
03:04:34.351 | 5E8 | 369 | ProcessInjector::IsProcessReadyToInjectByRule | ready rule passed for process [Riot Client.exe], consider it is ready pid-window [0x802fa]
03:04:51.447 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |15872| (w: 0x0): C:\Users\User\AppData\Local\NVIDIA Corporation\NVIDIA app\NvBackend\ApplicationOntology\NvOAWrapperCache.exe
03:05:57.893 | 5E8 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |23312| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe