| Time | Thread | Line | Function | Message |
| 21:52:55.570 | 530C | 103 | GameListService::CreateProcessMap | loading game list... |
| 21:52:55.587 | 530C | 120 | GameListService::CreateProcessMap | 3918, 4, 6009 loaded |
| 21:52:55.590 | 530C | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 9620 main window 0x1029a -> 0x20016, height 39 -> 40 , main True -> True |
| 21:52:55.590 | 530C | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 17720 main window 0x2040c -> 0x20408, height 14 -> 759 , main False -> False |
| 21:52:55.590 | 530C | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 17720 main window 0x20408 -> 0x202ac, height 759 -> 39 , main False -> False |
| 21:52:55.590 | 530C | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 17720 main window 0x202ac -> 0x20482, height 39 -> 400 , main False -> False |
| 21:52:55.590 | 530C | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 17720 main window 0x20482 -> 0x1048a, height 400 -> 14 , main False -> False |
| 21:52:55.590 | 530C | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 17720 main window 0x1048a -> 0x10488, height 14 -> 759 , main False -> False |
| 21:52:55.590 | 530C | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 17720 main window 0x10488 -> 0x1048c, height 759 -> 39 , main False -> False |
| 21:52:55.590 | 530C | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 17720 main window 0x1048c -> 0x1043a, height 39 -> 759 , main False -> False |
| 21:52:55.590 | 530C | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 17720 main window 0x1043a -> 0x1041c, height 759 -> 1 , main False -> False |
| 21:52:55.590 | 530C | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 17720 main window 0x1041c -> 0x1041a, height 1 -> 6 , main False -> False |
| 21:52:55.590 | 530C | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 17720 main window 0x1041a -> 0x103c8, height 6 -> 39 , main False -> False |
| 21:52:55.590 | 530C | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 9620 main window 0x20016 -> 0x1016c, height 40 -> 4 , main True -> True |
| 21:52:55.590 | 530C | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 15072 main window 0x8027e -> 0x100054, height 1080 -> 1080 , main True -> True |
| 21:52:55.590 | 530C | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 17720 main window 0x103c8 -> 0x10418, height 39 -> 28 , main False -> False |
| 21:52:55.590 | 530C | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 9620 main window 0x1016c -> 0x1011a, height 4 -> 1080 , main True -> True |
| 21:52:55.590 | 530C | 367 | ftw1 | Loading (pid: 17720) |
| 21:52:55.591 | 530C | 48 | Update::Detect | Env (C:\Windows\SYSTEM32\d3d11.dll) <0X3B980000>6|2|1247876770 |
| 21:52:55.591 | 530C | 48 | Update::Detect | Env (C:\Windows\SYSTEM32\dxgi.dll) <0X3EA50000>6|2|1247876770 |
| 21:52:55.879 | 530C | 173 | DXManager::Detect | Found in 0 |
| 21:52:55.880 | 530C | 209 | Initialize::GetLocation | @ 0X18C0|6336 |
| 21:52:55.880 | 530C | 209 | Initialize::GetLocation | @ 0X6AA90|436880 |
| 21:52:55.880 | 530C | 209 | Initialize::GetLocation | @ 0X22810|141328 |
| 21:52:55.880 | 530C | 209 | Initialize::GetLocation | @ 0X3300|13056 |
| 21:52:55.880 | 530C | 111 | Update::Caught | C:\Windows\SYSTEM32\d3d11.dll|0X3B980000 <> 0X3EA50000 |
| 21:52:55.880 | 530C | 209 | Initialize::GetLocation | @ 0XFD058860|-49969056 |
| 21:52:55.880 | 530C | 111 | Update::Caught | C:\Windows\SYSTEM32\d3d11.dll|0X3B980000 <> 0X3EA50000 |
| 21:52:55.880 | 530C | 209 | Initialize::GetLocation | @ 0XFD05DC30|-49947600 |
| 21:52:55.880 | 530C | 111 | Update::Caught | C:\Windows\SYSTEM32\d3d11.dll|0X3B980000 <> 0X3EA50000 |
| 21:52:55.880 | 530C | 209 | Initialize::GetLocation | @ 0XFD05C5F0|-49953296 |
| 21:52:55.880 | 530C | 111 | Update::Caught | C:\Windows\SYSTEM32\d3d11.dll|0X3B980000 <> 0X3EA50000 |
| 21:52:55.880 | 530C | 209 | Initialize::GetLocation | @ 0XFCF3A7E0|-51140640 |
| 21:52:55.908 | 530C | 48 | Update::Detect | Env (C:\Windows\SYSTEM32\d3d9.dll) <0XBB40000>6|2|1247876770 |
| 21:52:56.334 | 530C | 129 | DXManager::Detect | OK |
| 21:52:56.374 | 530C | 186 | DXManager::Detect | Done |
| 21:52:56.374 | 530C | 215 | VTableHolderD3d9::init | d3d offsest [sht]: 0x4030 , 0x55a0 |
| 21:52:56.374 | 530C | 209 | Initialize::GetLocation | @ 0X422A0|271008 |
| 21:52:56.374 | 530C | 209 | Initialize::GetLocation | @ 0X35970|219504 |
| 21:52:56.374 | 530C | 209 | Initialize::GetLocation | @ 0X3E570|255344 |
| 21:52:56.374 | 530C | 209 | Initialize::GetLocation | @ 0XB9150|758096 |
| 21:52:56.374 | 530C | 209 | Initialize::GetLocation | @ 0XB8CA0|756896 |
| 21:52:56.374 | 530C | 209 | Initialize::GetLocation | @ 0XC100|49408 |
| 21:52:56.374 | 530C | 209 | Initialize::GetLocation | @ 0XB8D40|757056 |
| 21:52:56.374 | 530C | 209 | Initialize::GetLocation | @ 0X1D060|118880 |
| 21:52:56.374 | 530C | 209 | Initialize::GetLocation | @ 0X1FAB0|129712 |
| 21:52:56.374 | 530C | 209 | Initialize::GetLocation | @ 0X28280|164480 |
| 21:52:56.374 | 530C | 209 | Initialize::GetLocation | @ 0X115B50|1137488 |
| 21:52:56.374 | 530C | 209 | Initialize::GetLocation | @ 0X115610|1136144 |
| 21:52:56.374 | 530C | 209 | Initialize::GetLocation | @ 0X1CF50|118608 |
| 21:52:56.374 | 530C | 209 | Initialize::GetLocation | @ 0X1CE60|118368 |
| 21:52:56.374 | 530C | 209 | Initialize::GetLocation | @ 0XEA00|59904 |
| 21:52:56.374 | 530C | 209 | Initialize::GetLocation | @ 0X4B300|307968 |
| 21:52:56.374 | 530C | 209 | Initialize::GetLocation | @ 0XBC70|48240 |
| 21:52:56.374 | 530C | 209 | Initialize::GetLocation | @ 0XD0370|852848 |
| 21:52:56.374 | 530C | 209 | Initialize::GetLocation | @ 0XD0A40|854592 |
| 21:52:56.374 | 530C | 209 | Initialize::GetLocation | @ 0XBC70|48240 |
| 21:52:56.374 | 530C | 209 | Initialize::GetLocation | @ 0XD1530|857392 |
| 21:52:56.374 | 530C | 209 | Initialize::GetLocation | @ 0XD1B90|859024 |
| 21:52:56.534 | 530C | 48 | Update::Detect | Env (C:\Windows\SYSTEM32\dinput.dll) <0XD0650000>6|2|1247870977 |
| 21:52:56.618 | 530C | 83 | VTableHolderDInput::init | m_pDIW->CreateDevice - succeded. |
| 21:52:56.618 | 530C | 209 | Initialize::GetLocation | @ 0X4040|16448 |
| 21:52:56.618 | 530C | 209 | Initialize::GetLocation | @ 0X6410|25616 |
| 21:52:56.618 | 530C | 209 | Initialize::GetLocation | @ 0X65C0|26048 |
| 21:52:56.619 | 530C | 48 | Update::Detect | Env (C:\Windows\SYSTEM32\dinput8.dll) <0X338B0000>6|2|1247870977 |
| 21:52:56.631 | 530C | 93 | VTableHolderDInput8::init | m_pDI8W->CreateDevice - succeded. |
| 21:52:56.631 | 530C | 110 | VTableHolderDInput8::init | m_pDI8A->CreateDevice - succeded. |
| 21:52:56.631 | 530C | 209 | Initialize::GetLocation | @ 0XA5D0|42448 |
| 21:52:56.631 | 530C | 209 | Initialize::GetLocation | @ 0XD4D0|54480 |
| 21:52:56.631 | 530C | 209 | Initialize::GetLocation | @ 0XD290|53904 |
| 21:52:56.686 | 530C | 227 | InterProcessElement::open | InterProcess Overwolf_SHARED_MEMORY_2_2_30017720 opened succesfuly |
| 21:52:56.686 | 530C | 72 | HookFunctionsTableInitializer::SetHookFunctionsData | D3D9 Sht offsets 0x4030 , 0x55a0 |
| 21:52:56.686 | 530C | 257 | InterProcessElement::close | InterProcess Overwolf_SHARED_MEMORY_2_2_30017720 close 2147483647 bytes |
| 21:52:56.686 | 530C | 307 | InjectOWExplorer | Explorer file name [C:\Program Files (x86)\Overwolf\0.300.0.11\OWExplorer.dll] |
| 21:52:56.694 | 530C | 391 | ftw1 | OWExplorer injected |
| 21:52:56.694 | 5178 | 71 | Common::ProcessExplorer::ProcessTrackerIPCAgent::OnConnected | connected to process tracker server |
| 21:52:58.666 | 5174 | 369 | ProcessInjector::IsProcessReadyToInjectByRule | ready rule passed for process [RazerAppEngine.exe], consider it is ready pid-window [0x0] |
| 21:53:07.558 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |2672| (w: 0x0): \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_67995ceab8993b08\Display.NvContainer\NVDisplay.Container.exe |
| 21:53:07.558 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |2908| (w: 0x0): MemCompression |
| 21:53:07.558 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |6072| (w: 0x0): \Device\HarddiskVolume3\Program Files (x86)\Razer Chroma SDK\bin\RzDeviceManager |
| 21:53:07.558 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |6000| (w: 0x0): \Device\HarddiskVolume3\Program Files (x86)\Razer Chroma SDK\bin\RzBTLEManager |
| 21:53:07.558 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |5968| (w: 0x0): \Device\HarddiskVolume3\Program Files (x86)\Razer Chroma SDK\bin\RzAppManager |
| 21:53:07.558 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |11896| (w: 0x0): \Device\HarddiskVolume3\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe |
| 21:53:07.558 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |4860| (w: 0x0): \Device\HarddiskVolume3\Program Files (x86)\Razer Chroma SDK\bin\RzSDKServer.exe |
| 21:53:07.558 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |4828| (w: 0x0): \Device\HarddiskVolume3\Program Files (x86)\Razer\Razer Services\GMS3\GameManagerService3.exe |
| 21:53:07.558 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |4780| (w: 0x0): \Device\HarddiskVolume3\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe |
| 21:53:07.558 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |5900| (w: 0x0): C:\Program Files\Riot Vanguard\vgtray.exe |
| 21:53:07.558 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |4912| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdater\x64\RGSUpdater.exe |
| 21:53:07.558 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |5092| (w: 0x0): \Device\HarddiskVolume3\Program Files (x86)\Razer Chroma SDK\bin\RzDeviceManagerEx |
| 21:53:07.558 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |15760| (w: 0x0): C:\Program Files (x86)\Epic Games\Epic Online Services\EpicOnlineServicesUserHelper.exe |
| 21:53:07.558 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |5592| (w: 0x0): \Device\HarddiskVolume3\Program Files (x86)\Razer Chroma SDK\bin\RzIoTDeviceManager |
| 21:53:07.558 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |16004| (w: 0x0): C:\Program Files (x86)\Epic Games\Epic Online Services\EpicOnlineServicesUserHelper.exe |
| 21:53:07.558 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |5884| (w: 0x0): \Device\HarddiskVolume3\Program Files (x86)\Razer Chroma SDK\bin\RzSmartlightingDeviceManager |
| 21:53:07.558 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |11984| (w: 0x0): C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe |
| 21:53:07.558 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |5704| (w: 0x0): \Device\HarddiskVolume3\Program Files (x86)\Razer Chroma SDK\bin\RzWDLDeviceManager |
| 21:53:07.558 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |11940| (w: 0x0): C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe |
| 21:53:07.558 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |16108| (w: 0x0): C:\Program Files (x86)\Razer\Razer Axon\RazerAxon.exe |
| 21:53:07.558 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |20648| (w: 0x0): C:\Program Files\Razer\RazerAppEngine\app-4.0.683\CommonDLL\RzEngineMon.exe |
| 21:55:38.76 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |912| (w: 0x0): \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe |
| 21:55:39.88 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |7568| (w: 0x0): C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_7.326.5041.0_x64__8wekyb3d8bbwe\GameBarFTServer.exe |
| 21:57:39.272 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |6816| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 22:02:40.268 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |5588| (w: 0x0): C:\Users\User\AppData\Local\Microsoft\OneDrive\26.084.0504.0007\OneDriveLauncher.exe |
| 22:02:40.268 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |8016| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 22:02:52.350 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |10080| (w: 0x0): C:\Users\User\AppData\Local\Temp\40337ED1-BC0C-4E16-8C1D-34F1BDE87DA2\DismHost.exe |
| 22:03:04.485 | 532C | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 16976 main window 0x105c2 -> 0x30244, height 400 -> 312 , main True -> True |
| 22:04:26.947 | 5174 | 369 | ProcessInjector::IsProcessReadyToInjectByRule | ready rule passed for process [AimLab_tb.exe], consider it is ready pid-window [0x30332] |
| 22:04:27.374 | 532C | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 16968 main window 0x30332 -> 0x40370, height 1080 -> 1080 , main True -> True |
| 22:04:36.30 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |5004| (w: 0x0): C:\Program Files (x86)\Steam\steamapps\common\Aim Lab\UnityCrashHandler64.exe |
| 22:04:37.41 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |7772| (w: 0x0): C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_7.326.5041.0_x64__8wekyb3d8bbwe\GameBarFTServer.exe |
| 22:04:38.54 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |6560| (w: 0x0): C:\Program Files (x86)\Steam\steamapps\common\Aim Lab\AimLab_tb_Data\Plugins\x86_64\crashpad_handler.dll |
| 22:04:41.72 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |18616| (w: 0x0): C:\Program Files (x86)\Steam\steamapps\common\Aim Lab\AimLab_tb_Data\Plugins\x86_64\VuplexWebViewChromium\Vuplex WebView.vuplex |
| 22:07:41.355 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |6228| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 22:12:41.498 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |9744| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 22:17:42.654 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |15524| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 22:21:16.859 | 532C | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 8792 main window 0x30404 -> 0x403da, height 1056 -> 919 , main True -> True |
| 22:22:42.985 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |17988| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 22:27:43.935 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |14952| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 22:29:37.116 | 532C | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 8792 main window 0x403da -> 0x403da, height 919 -> 919 , main True -> True |
| 22:29:43.658 | 5174 | 369 | ProcessInjector::IsProcessReadyToInjectByRule | ready rule passed for process [Riot Client.exe], consider it is ready pid-window [0x40636] |
| 22:29:46.675 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |8868| (w: 0x0): C:\Riot Games\Riot Client\RiotClientServices.exe |
| 22:29:48.693 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |21540| (w: 0x0): C:\Riot Games\Riot Client\RiotClientCrashHandler.exe |
| 22:30:53.278 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |5928| (w: 0x0): \Device\HarddiskVolume3\Program Files\Riot Vanguard\vgc.exe |
| 22:31:00.353 | 5174 | 369 | ProcessInjector::IsProcessReadyToInjectByRule | ready rule passed for process [VALORANT-Win64-Shipping.exe], consider it is ready pid-window [0x902f0] |
| 22:31:01.714 | 5174 | 698 | ProcessInjector::InjectExplorerToProcess | Injected to process 14928 [mt 14812] 0x902f0 |
| 22:31:03.391 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |16696| (w: 0x0): C:\Riot Games\VALORANT\live\VALORANT.exe |
| 22:31:06.47 | 532C | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 12464 main window 0x10282 -> 0x10286, height 1080 -> 1080 , main True -> True |
| 22:31:11.443 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |16672| (w: 0x0): C:\Users\User\AppData\Local\NVIDIA Corporation\NVIDIA app\NvBackend\ApplicationOntology\NvOAWrapperCache.exe |
| 22:32:07.570 | 532C | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 6824 main window 0x40636 -> 0x4063c, height 864 -> 864 , main True -> True |
| 22:32:09.871 | 532C | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 14928 main window 0x902f0 -> 0x50660, height 1080 -> 1080 , main True -> True |
| 22:32:20.867 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |15596| (w: 0x0): C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_7.326.5041.0_x64__8wekyb3d8bbwe\GameBarFTServer.exe |
| 22:32:45.56 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |13468| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 22:33:36.544 | 532C | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 8792 main window 0x403da -> 0x403da, height 919 -> 919 , main True -> True |
| 22:35:07.402 | 532C | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 8792 main window 0x403da -> 0x403da, height 919 -> 919 , main True -> True |
| 22:35:35.999 | 532C | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 8792 main window 0x403da -> 0x403da, height 919 -> 919 , main True -> True |
| 22:35:47.58 | 532C | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 8792 main window 0x403da -> 0x403da, height 919 -> 919 , main True -> True |
| 22:36:15.589 | 532C | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 8792 main window 0x403da -> 0x403da, height 919 -> 919 , main True -> True |
| 22:37:19.540 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |3988| (w: 0x0): \Device\HarddiskVolume3\Program Files\Riot Vanguard\vgm.exe |
| 22:37:45.679 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |22408| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 22:41:50.120 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |6444| (w: 0x0): \Device\HarddiskVolume3\Program Files\Riot Vanguard\vgm.exe |
| 22:42:13.48 | 532C | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 20928 main window 0x60672 -> 0x70306, height 1056 -> 919 , main True -> True |
| 22:42:23.948 | 532C | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 20928 main window 0x70306 -> 0x803da, height 919 -> 919 , main True -> True |
| 22:42:44.439 | 532C | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 20928 main window 0x803da -> 0x803ce, height 919 -> 919 , main True -> True |
| 22:42:46.562 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |16556| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 22:43:00.515 | 532C | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 20928 main window 0x803ce -> 0x803da, height 919 -> 919 , main True -> True |
| 22:43:01.376 | 532C | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 20928 main window 0x803da -> 0x70306, height 919 -> 919 , main True -> True |
| 22:44:58.653 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |17660| (w: 0x0): \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe |
| 22:45:31.88 | 532C | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 20928 main window 0x70306 -> 0x70306, height 919 -> 919 , main True -> True |
| 22:45:59.50 | 532C | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 20928 main window 0x70306 -> 0x70306, height 919 -> 919 , main True -> True |
| 22:45:59.440 | 532C | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 20928 main window 0x70306 -> 0x70306, height 919 -> 919 , main True -> True |
| 22:46:20.361 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |21652| (w: 0x0): \Device\HarddiskVolume3\Program Files\Riot Vanguard\vgm.exe |
| 22:47:46.935 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |8088| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 22:50:51.898 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |792| (w: 0x0): \Device\HarddiskVolume3\Program Files\Riot Vanguard\vgm.exe |
| 22:52:47.655 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |10884| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 22:53:07.634 | 532C | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 20928 main window 0x70306 -> 0x70306, height 919 -> 919 , main True -> True |
| 22:53:13.919 | 532C | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 20928 main window 0x70306 -> 0x70306, height 919 -> 919 , main True -> True |
| 22:53:54.518 | 532C | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 20928 main window 0x70306 -> 0x100390, height 919 -> 50 , main True -> True |
| 22:53:54.655 | 532C | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 20928 main window 0x100390 -> 0xa03d0, height 50 -> 20 , main True -> True |
| 22:53:54.876 | 532C | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 20928 main window 0xa03d0 -> 0xf03b6, height 20 -> 919 , main True -> True |
| 22:53:57.899 | 532C | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 20928 main window 0xf03b6 -> 0xb03d0, height 919 -> 919 , main True -> True |
| 22:54:02.766 | 532C | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 20928 main window 0xb03d0 -> 0x70306, height 919 -> 919 , main True -> True |
| 22:54:04.895 | 532C | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 20928 main window 0x70306 -> 0xc03d0, height 919 -> 25 , main True -> True |
| 22:57:48.133 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |9500| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 23:01:23.730 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |15720| (w: 0x0): \Device\HarddiskVolume3\Program Files\Riot Vanguard\vgm.exe |
| 23:02:49.202 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |7388| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 23:04:24.753 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |13164| (w: 0x0): \Device\HarddiskVolume3\Program Files\Riot Vanguard\vgm.exe |
| 23:07:49.926 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |3836| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 23:12:51.247 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |21188| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 23:14:46.211 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |17460| (w: 0x0): C:\Users\User\AppData\Local\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe |
| 23:17:17.705 | 532C | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 16236 main window 0x100244 -> 0x40480, height 350 -> 28 , main True -> True |
| 23:17:18.194 | 532C | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 16236 main window 0x40480 -> 0x8063a, height 28 -> 909 , main True -> True |
| 23:17:18.350 | 532C | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 16236 main window 0x8063a -> 0x40416, height 909 -> 909 , main True -> True |
| 23:17:18.939 | 532C | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 16236 main window 0x40416 -> 0xb031a, height 909 -> 350 , main True -> True |
| 23:17:51.793 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |1676| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 23:20:48.227 | 532C | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 9620 main window 0x10114 -> 0x10114, height 211 -> 211 , main True -> True |
| 23:20:48.712 | 532C | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 9620 main window 0x10114 -> 0x1016c, height 211 -> 4 , main True -> True |
| 23:21:00.864 | 532C | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 9620 main window 0x1016c -> 0xc058e, height 4 -> 1 , main True -> True |
| 23:21:00.869 | 532C | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 9620 main window 0xc058e -> 0xc0304, height 1 -> 1 , main True -> True |
| 23:21:00.871 | 532C | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 9620 main window 0xc0304 -> 0x204f8, height 1 -> 1040 , main True -> True |
| 23:21:00.898 | 532C | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 9620 main window 0x204f8 -> 0x14040e, height 1040 -> 1080 , main True -> True |
| 23:21:01.536 | 532C | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 9620 main window 0x14040e -> 0x30490, height 1080 -> 1040 , main True -> True |
| 23:21:01.623 | 532C | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 9620 main window 0x30490 -> 0x1016c, height 1040 -> 4 , main True -> True |
| 23:21:02.758 | 532C | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 9620 main window 0x1016c -> 0x1016c, height 4 -> 4 , main True -> True |
| 23:21:05.629 | 532C | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 9620 main window 0x1016c -> 0x20492, height 4 -> 1040 , main True -> True |
| 23:22:52.506 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |16220| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 23:23:57.942 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |19496| (w: 0x0): \Device\HarddiskVolume3\Program Files\Riot Vanguard\vgm.exe |
| 23:26:58.905 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |16464| (w: 0x0): \Device\HarddiskVolume3\Program Files\Riot Vanguard\vgm.exe |
| 23:27:53.162 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |18128| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 23:32:53.758 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |14880| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 23:37:54.403 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |13156| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 23:42:55.54 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |19564| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 23:47:55.848 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |7780| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 23:52:49.278 | 532C | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 12936 main window 0xd0344 -> 0xd0490, height 1056 -> 919 , main True -> True |
| 23:52:56.536 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |20524| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 23:53:34.175 | 532C | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 12936 main window 0xd0490 -> 0xd0490, height 919 -> 919 , main True -> True |
| 23:55:26.475 | 532C | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 12936 main window 0xd0490 -> 0xd0490, height 919 -> 919 , main True -> True |
| 23:55:37.280 | 532C | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 12936 main window 0xd0490 -> 0xd0490, height 919 -> 919 , main True -> True |
| 23:58:00.132 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |18156| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 23:59:02.236 | 532C | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 12936 main window 0xd0490 -> 0x604b6, height 919 -> 919 , main True -> True |
| 23:59:21.391 | 532C | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 12936 main window 0x604b6 -> 0xd0490, height 919 -> 919 , main True -> True |
| 00:00:33.916 | 532C | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 12936 main window 0xd0490 -> 0xd0490, height 919 -> 919 , main True -> True |
| 00:00:46.176 | 532C | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 12936 main window 0xd0490 -> 0xd0490, height 919 -> 919 , main True -> True |
| 00:00:46.748 | 532C | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 12936 main window 0xd0490 -> 0xb04ec, height 919 -> 25 , main True -> True |
| 00:03:00.706 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |13448| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 00:08:01.492 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |14240| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 00:12:45.266 | 532C | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 16236 main window 0x40480 -> 0x40416, height 909 -> 909 , main True -> True |
| 00:12:49.441 | 532C | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 16236 main window 0x40416 -> 0x1c04b6, height 909 -> 218 , main True -> True |
| 00:13:00.14 | 532C | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 16976 main window 0xc0454 -> 0xf0346, height 822 -> 778 , main True -> True |
| 00:13:02.834 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |22496| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 00:13:04.90 | 532C | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 16976 main window 0xf0346 -> 0x1a03ce, height 778 -> 436 , main True -> True |
| 00:13:15.370 | 532C | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 16976 main window 0x1a03ce -> 0x1b03ce, height 436 -> 778 , main True -> True |
| 00:13:49.49 | 532C | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 16976 main window 0x1b03ce -> 0xc063a, height 778 -> 252 , main True -> True |
| 00:18:02.944 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |18980| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 00:18:09.6 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |3388| (w: 0x0): \Device\HarddiskVolume3\Program Files\Riot Vanguard\vgm.exe |
| 00:23:03.558 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |7724| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 00:28:04.270 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |20996| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 00:28:27.380 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |8660| (w: 0x0): C:\Users\User\AppData\Local\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe |
| 00:33:04.874 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |7808| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 00:34:29.299 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |7772| (w: 0x0): C:\Users\User\AppData\Local\Microsoft\OneDrive\26.084.0504.0007\OneDrive.Sync.Service.exe |
| 00:38:05.568 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |8828| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 00:43:06.280 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |12876| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 00:48:06.913 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |19340| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 00:48:33.323 | 532C | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 5088 main window 0x804e6 -> 0xa031e, height 1056 -> 919 , main True -> True |
| 00:51:15.610 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |8824| (w: 0x0): \Device\HarddiskVolume3\Program Files\Riot Vanguard\vgm.exe |
| 00:53:07.317 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |2376| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 00:55:46.170 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |4028| (w: 0x0): \Device\HarddiskVolume3\Program Files\Riot Vanguard\vgm.exe |
| 00:58:08.2 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |12840| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 01:03:08.716 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |11476| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 01:08:10.350 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |7668| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 01:13:10.998 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |21468| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 01:18:11.657 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |20828| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 01:20:37.764 | 532C | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 14988 main window 0x1a062e -> 0xa03d6, height 1056 -> 919 , main True -> True |
| 01:22:06.698 | 532C | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 14988 main window 0xa03d6 -> 0xa03d6, height 919 -> 919 , main True -> True |
| 01:22:15.350 | 5174 | 369 | ProcessInjector::IsProcessReadyToInjectByRule | ready rule passed for process [Riot Client.exe], consider it is ready pid-window [0x3034e] |
| 01:22:40.973 | 532C | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 14988 main window 0xa03d6 -> 0xa03d2, height 919 -> 25 , main True -> True |
| 01:23:03.781 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |22280| (w: 0x0): C:\Users\User\AppData\Local\NVIDIA Corporation\NVIDIA app\NvBackend\ApplicationOntology\NvOAWrapperCache.exe |
| 01:23:11.861 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |16224| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 01:28:12.567 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |9632| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 01:33:13.183 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |3204| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 01:38:13.702 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |3348| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 01:43:15.169 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |9632| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 01:48:15.768 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |7780| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 01:53:16.309 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |5936| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 01:58:16.899 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |9716| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 02:03:17.543 | 5174 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |16124| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |