| Time | Thread | Line | Function | Message |
| 11:58:10.103 | 19B0 | 103 | GameListService::CreateProcessMap | loading game list... |
| 11:58:10.119 | 19B0 | 120 | GameListService::CreateProcessMap | 3918, 4, 6009 loaded |
| 11:58:10.123 | 19B0 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 9580 main window 0x102a0 -> 0x20022, height 39 -> 40 , main True -> True |
| 11:58:10.123 | 19B0 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 17292 main window 0x2049a -> 0x20498, height 14 -> 759 , main False -> False |
| 11:58:10.123 | 19B0 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 17292 main window 0x20498 -> 0x10560, height 759 -> 39 , main False -> False |
| 11:58:10.123 | 19B0 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 17292 main window 0x10560 -> 0x10518, height 39 -> 14 , main False -> False |
| 11:58:10.123 | 19B0 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 17292 main window 0x10518 -> 0x204da, height 14 -> 759 , main False -> False |
| 11:58:10.123 | 19B0 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 17292 main window 0x204da -> 0x1051a, height 759 -> 39 , main False -> False |
| 11:58:10.123 | 19B0 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 17292 main window 0x1051a -> 0x20470, height 39 -> 759 , main False -> False |
| 11:58:10.123 | 19B0 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 17292 main window 0x20470 -> 0x20458, height 759 -> 400 , main False -> False |
| 11:58:10.123 | 19B0 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 17292 main window 0x20458 -> 0x104ac, height 400 -> 1 , main False -> False |
| 11:58:10.123 | 19B0 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 17292 main window 0x104ac -> 0x104aa, height 1 -> 6 , main False -> False |
| 11:58:10.123 | 19B0 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 17292 main window 0x104aa -> 0x103d0, height 6 -> 39 , main False -> False |
| 11:58:10.123 | 19B0 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 9580 main window 0x20022 -> 0x1015e, height 40 -> 4 , main True -> True |
| 11:58:10.123 | 19B0 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 14776 main window 0x6029e -> 0x140088, height 1080 -> 1080 , main True -> True |
| 11:58:10.123 | 19B0 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 17292 main window 0x103d0 -> 0x502e0, height 39 -> 28 , main False -> False |
| 11:58:10.123 | 19B0 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 9580 main window 0x1015e -> 0x1010e, height 4 -> 1080 , main True -> True |
| 11:58:10.123 | 19B0 | 367 | ftw1 | Loading (pid: 17292) |
| 11:58:10.124 | 19B0 | 48 | Update::Detect | Env (C:\Windows\SYSTEM32\d3d11.dll) <0X3B580000>6|2|1247876770 |
| 11:58:10.125 | 19B0 | 48 | Update::Detect | Env (C:\Windows\SYSTEM32\dxgi.dll) <0X3E650000>6|2|1247876770 |
| 11:58:10.333 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 9580 main window 0x1010e -> 0x10576, height 1080 -> 1040 , main True -> True |
| 11:58:10.436 | 19B0 | 173 | DXManager::Detect | Found in 0 |
| 11:58:10.436 | 19B0 | 209 | Initialize::GetLocation | @ 0X18C0|6336 |
| 11:58:10.436 | 19B0 | 209 | Initialize::GetLocation | @ 0X6AA90|436880 |
| 11:58:10.436 | 19B0 | 209 | Initialize::GetLocation | @ 0X22810|141328 |
| 11:58:10.436 | 19B0 | 209 | Initialize::GetLocation | @ 0X3300|13056 |
| 11:58:10.436 | 19B0 | 111 | Update::Caught | C:\Windows\SYSTEM32\d3d11.dll|0X3B580000 <> 0X3E650000 |
| 11:58:10.436 | 19B0 | 209 | Initialize::GetLocation | @ 0XFD058860|-49969056 |
| 11:58:10.436 | 19B0 | 111 | Update::Caught | C:\Windows\SYSTEM32\d3d11.dll|0X3B580000 <> 0X3E650000 |
| 11:58:10.436 | 19B0 | 209 | Initialize::GetLocation | @ 0XFD05DC30|-49947600 |
| 11:58:10.436 | 19B0 | 111 | Update::Caught | C:\Windows\SYSTEM32\d3d11.dll|0X3B580000 <> 0X3E650000 |
| 11:58:10.436 | 19B0 | 209 | Initialize::GetLocation | @ 0XFD05C5F0|-49953296 |
| 11:58:10.436 | 19B0 | 111 | Update::Caught | C:\Windows\SYSTEM32\d3d11.dll|0X3B580000 <> 0X3E650000 |
| 11:58:10.436 | 19B0 | 209 | Initialize::GetLocation | @ 0XFCF3A7E0|-51140640 |
| 11:58:10.452 | 19B0 | 48 | Update::Detect | Env (C:\Windows\SYSTEM32\d3d9.dll) <0XB800000>6|2|1247876770 |
| 11:58:10.643 | 19B0 | 129 | DXManager::Detect | OK |
| 11:58:10.668 | 19B0 | 186 | DXManager::Detect | Done |
| 11:58:10.668 | 19B0 | 215 | VTableHolderD3d9::init | d3d offsest [sht]: 0x4030 , 0x55a0 |
| 11:58:10.669 | 19B0 | 209 | Initialize::GetLocation | @ 0X422A0|271008 |
| 11:58:10.669 | 19B0 | 209 | Initialize::GetLocation | @ 0X35970|219504 |
| 11:58:10.669 | 19B0 | 209 | Initialize::GetLocation | @ 0X3E570|255344 |
| 11:58:10.669 | 19B0 | 209 | Initialize::GetLocation | @ 0XB9150|758096 |
| 11:58:10.669 | 19B0 | 209 | Initialize::GetLocation | @ 0XB8CA0|756896 |
| 11:58:10.669 | 19B0 | 209 | Initialize::GetLocation | @ 0XC100|49408 |
| 11:58:10.669 | 19B0 | 209 | Initialize::GetLocation | @ 0XB8D40|757056 |
| 11:58:10.669 | 19B0 | 209 | Initialize::GetLocation | @ 0X1D060|118880 |
| 11:58:10.669 | 19B0 | 209 | Initialize::GetLocation | @ 0X1FAB0|129712 |
| 11:58:10.669 | 19B0 | 209 | Initialize::GetLocation | @ 0X28280|164480 |
| 11:58:10.669 | 19B0 | 209 | Initialize::GetLocation | @ 0X115B50|1137488 |
| 11:58:10.669 | 19B0 | 209 | Initialize::GetLocation | @ 0X115610|1136144 |
| 11:58:10.669 | 19B0 | 209 | Initialize::GetLocation | @ 0X1CF50|118608 |
| 11:58:10.669 | 19B0 | 209 | Initialize::GetLocation | @ 0X1CE60|118368 |
| 11:58:10.669 | 19B0 | 209 | Initialize::GetLocation | @ 0XEA00|59904 |
| 11:58:10.669 | 19B0 | 209 | Initialize::GetLocation | @ 0X4B300|307968 |
| 11:58:10.669 | 19B0 | 209 | Initialize::GetLocation | @ 0XBC70|48240 |
| 11:58:10.669 | 19B0 | 209 | Initialize::GetLocation | @ 0XD0370|852848 |
| 11:58:10.669 | 19B0 | 209 | Initialize::GetLocation | @ 0XD0A40|854592 |
| 11:58:10.669 | 19B0 | 209 | Initialize::GetLocation | @ 0XBC70|48240 |
| 11:58:10.669 | 19B0 | 209 | Initialize::GetLocation | @ 0XD1530|857392 |
| 11:58:10.669 | 19B0 | 209 | Initialize::GetLocation | @ 0XD1B90|859024 |
| 11:58:10.683 | 19B0 | 48 | Update::Detect | Env (C:\Windows\SYSTEM32\dinput.dll) <0XB5C80000>6|2|1247870977 |
| 11:58:10.696 | 19B0 | 83 | VTableHolderDInput::init | m_pDIW->CreateDevice - succeded. |
| 11:58:10.697 | 19B0 | 209 | Initialize::GetLocation | @ 0X4040|16448 |
| 11:58:10.697 | 19B0 | 209 | Initialize::GetLocation | @ 0X6410|25616 |
| 11:58:10.697 | 19B0 | 209 | Initialize::GetLocation | @ 0X65C0|26048 |
| 11:58:10.697 | 19B0 | 48 | Update::Detect | Env (C:\Windows\SYSTEM32\dinput8.dll) <0X33550000>6|2|1247870977 |
| 11:58:10.710 | 19B0 | 93 | VTableHolderDInput8::init | m_pDI8W->CreateDevice - succeded. |
| 11:58:10.710 | 19B0 | 110 | VTableHolderDInput8::init | m_pDI8A->CreateDevice - succeded. |
| 11:58:10.710 | 19B0 | 209 | Initialize::GetLocation | @ 0XA5D0|42448 |
| 11:58:10.710 | 19B0 | 209 | Initialize::GetLocation | @ 0XD4D0|54480 |
| 11:58:10.710 | 19B0 | 209 | Initialize::GetLocation | @ 0XD290|53904 |
| 11:58:10.770 | 19B0 | 227 | InterProcessElement::open | InterProcess Overwolf_SHARED_MEMORY_2_2_30017292 opened succesfuly |
| 11:58:10.770 | 19B0 | 72 | HookFunctionsTableInitializer::SetHookFunctionsData | D3D9 Sht offsets 0x4030 , 0x55a0 |
| 11:58:10.770 | 19B0 | 257 | InterProcessElement::close | InterProcess Overwolf_SHARED_MEMORY_2_2_30017292 close 2147483647 bytes |
| 11:58:10.770 | 19B0 | 307 | InjectOWExplorer | Explorer file name [C:\Program Files (x86)\Overwolf\0.300.0.11\OWExplorer.dll] |
| 11:58:10.777 | 19B0 | 391 | ftw1 | OWExplorer injected |
| 11:58:10.778 | 50FC | 71 | Common::ProcessExplorer::ProcessTrackerIPCAgent::OnConnected | connected to process tracker server |
| 11:58:13.828 | 5100 | 369 | ProcessInjector::IsProcessReadyToInjectByRule | ready rule passed for process [RazerAppEngine.exe], consider it is ready pid-window [0x1060e] |
| 11:58:20.893 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |2684| (w: 0x0): \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_67995ceab8993b08\Display.NvContainer\NVDisplay.Container.exe |
| 11:58:20.893 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |4724| (w: 0x0): \Device\HarddiskVolume3\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe |
| 11:58:20.893 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |2932| (w: 0x0): MemCompression |
| 11:58:20.893 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |6048| (w: 0x0): \Device\HarddiskVolume3\Program Files (x86)\Razer Chroma SDK\bin\RzAppManager |
| 11:58:20.893 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |6112| (w: 0x0): \Device\HarddiskVolume3\Program Files (x86)\Razer Chroma SDK\bin\RzDeviceManager |
| 11:58:20.893 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |4808| (w: 0x0): \Device\HarddiskVolume3\Program Files (x86)\Razer Chroma SDK\bin\RzSDKServer.exe |
| 11:58:20.893 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |15972| (w: 0x0): C:\Program Files (x86)\Epic Games\Epic Online Services\EpicOnlineServicesUserHelper.exe |
| 11:58:20.893 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |4800| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdater\x64\RGSUpdater.exe |
| 11:58:20.893 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |6092| (w: 0x0): \Device\HarddiskVolume3\Program Files (x86)\Razer Chroma SDK\bin\RzBTLEManager |
| 11:58:20.893 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |4872| (w: 0x0): \Device\HarddiskVolume3\Program Files (x86)\Razer\Razer Services\GMS3\GameManagerService3.exe |
| 11:58:20.893 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |5148| (w: 0x0): \Device\HarddiskVolume3\Program Files (x86)\Razer Chroma SDK\bin\RzDeviceManagerEx |
| 11:58:20.893 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |5576| (w: 0x0): \Device\HarddiskVolume3\Program Files (x86)\Razer Chroma SDK\bin\RzIoTDeviceManager |
| 11:58:20.893 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |5500| (w: 0x0): \Device\HarddiskVolume3\Program Files (x86)\Razer Chroma SDK\bin\RzSmartlightingDeviceManager |
| 11:58:20.893 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |6040| (w: 0x0): \Device\HarddiskVolume3\Program Files (x86)\Razer Chroma SDK\bin\RzWDLDeviceManager |
| 11:58:20.893 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |11556| (w: 0x0): \Device\HarddiskVolume3\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe |
| 11:58:20.893 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |11652| (w: 0x0): C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe |
| 11:58:20.893 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |11704| (w: 0x0): C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe |
| 11:58:20.893 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |10596| (w: 0x0): C:\Program Files\Riot Vanguard\vgtray.exe |
| 11:58:20.893 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |15896| (w: 0x0): C:\Program Files (x86)\Epic Games\Epic Online Services\EpicOnlineServicesUserHelper.exe |
| 11:58:20.893 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |16032| (w: 0x0): C:\Program Files (x86)\Razer\Razer Axon\RazerAxon.exe |
| 11:58:21.901 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |18448| (w: 0x0): C:\Program Files\Razer\RazerAppEngine\app-4.0.683\CommonDLL\RzEngineMon.exe |
| 12:00:36.545 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 5408 main window 0x2048c -> 0x301de, height 1056 -> 41 , main True -> True |
| 12:01:47.363 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 5268 main window 0x2066e -> 0x10696, height 909 -> 909 , main True -> True |
| 12:02:49.503 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |1720| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 12:03:52.151 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 5268 main window 0x10696 -> 0x10696, height 909 -> 909 , main True -> True |
| 12:06:12.474 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 5268 main window 0x10696 -> 0x10696, height 909 -> 909 , main True -> True |
| 12:07:50.384 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |19804| (w: 0x0): C:\Users\User\AppData\Local\Microsoft\OneDrive\26.084.0504.0007\OneDriveLauncher.exe |
| 12:07:50.384 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |21936| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 12:12:51.103 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |22372| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 12:17:51.880 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |16888| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 12:22:52.592 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |8772| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 12:27:53.346 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |2412| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 12:32:54.102 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |3460| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 12:33:28.892 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 2604 main window 0x1706dc -> 0x1806c4, height 1056 -> 919 , main True -> True |
| 12:33:38.471 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 2604 main window 0x1806c4 -> 0x1606f6, height 919 -> 919 , main True -> True |
| 12:34:01.557 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 5268 main window 0x10696 -> 0x10696, height 909 -> 909 , main True -> True |
| 12:34:31.923 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 2604 main window 0x1606f6 -> 0x1606f6, height 919 -> 919 , main True -> True |
| 12:34:40.485 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 2604 main window 0x1606f6 -> 0x1606f6, height 919 -> 919 , main True -> True |
| 12:34:50.736 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 5268 main window 0x10696 -> 0x10696, height 909 -> 909 , main True -> True |
| 12:35:09.95 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 2604 main window 0x1606f6 -> 0x1606f6, height 919 -> 919 , main True -> True |
| 12:35:14.719 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 2604 main window 0x1606f6 -> 0xc01be, height 919 -> 919 , main True -> True |
| 12:35:51.452 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 2604 main window 0xc01be -> 0x1b00b0, height 919 -> 919 , main True -> True |
| 12:36:10.538 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 2604 main window 0x1b00b0 -> 0x1806f6, height 919 -> 919 , main True -> True |
| 12:36:35.114 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 5268 main window 0x10696 -> 0x10696, height 909 -> 909 , main True -> True |
| 12:36:39.252 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 5268 main window 0x10696 -> 0x10696, height 909 -> 909 , main True -> True |
| 12:36:41.743 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 9580 main window 0x1e01d0 -> 0x1206f0, height 779 -> 658 , main True -> True |
| 12:36:48.771 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 9580 main window 0x1070c -> 0x107a0, height 779 -> 658 , main True -> True |
| 12:36:49.41 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 9580 main window 0x107a0 -> 0x2075e, height 658 -> 55 , main True -> True |
| 12:37:54.971 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |13592| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 12:42:55.939 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |2100| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 12:44:59.129 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |17476| (w: 0x0): \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe |
| 12:47:55.824 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |23184| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 12:52:56.787 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |17472| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 12:57:57.684 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |10040| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 13:02:58.669 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |15968| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 13:07:58.717 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |11964| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 13:13:00.114 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |23424| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 13:13:27.760 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 15992 main window 0x4e0684 -> 0xb07b2, height 837 -> 837 , main True -> True |
| 13:13:27.761 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 15992 main window 0xb07b2 -> 0xb06f2, height 837 -> 837 , main True -> True |
| 13:13:27.769 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 15992 main window 0xb06f2 -> 0x90794, height 837 -> 837 , main True -> True |
| 13:13:28.72 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 15992 main window 0x90794 -> 0xb07b2, height 837 -> 837 , main True -> True |
| 13:13:28.75 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 15992 main window 0xb07b2 -> 0x90794, height 837 -> 837 , main True -> True |
| 13:13:28.78 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 15992 main window 0x90794 -> 0x90794, height 837 -> 801 , main True -> True |
| 13:13:29.170 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 15992 main window 0x90794 -> 0x1301e0, height 801 -> 801 , main True -> True |
| 13:13:31.329 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 14804 main window 0x1601f0 -> 0x207fe, height 1056 -> 919 , main True -> True |
| 13:13:43.93 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 14804 main window 0x207fe -> 0xd06f2, height 919 -> 41 , main True -> True |
| 13:14:13.105 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 5268 main window 0x10696 -> 0x10696, height 909 -> 909 , main True -> True |
| 13:18:00.417 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |21464| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 13:22:16.617 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 5268 main window 0x10696 -> 0x10696, height 909 -> 909 , main True -> True |
| 13:22:32.319 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 5268 main window 0x10696 -> 0x9047c, height 909 -> 540 , main True -> True |
| 13:22:34.782 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 5268 main window 0x9047c -> 0x10860, height 540 -> 29 , main True -> True |
| 13:22:41.326 | 5100 | 369 | ProcessInjector::IsProcessReadyToInjectByRule | ready rule passed for process [Photos.exe], consider it is ready pid-window [0x2602b6] |
| 13:22:51.369 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |14808| (w: 0x0): C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2026.11050.1001.0_x64__8wekyb3d8bbwe\Photos.exe |
| 13:23:01.438 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |2744| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 13:23:10.131 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 21384 main window 0x50894 -> 0x50892, height 124 -> 1080 , main True -> True |
| 13:23:15.646 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 21384 main window 0x50892 -> 0x50894, height 1080 -> 124 , main True -> True |
| 13:23:15.687 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 21384 main window 0x50894 -> 0xf07be, height 124 -> 513 , main True -> True |
| 13:23:29.819 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 13140 main window 0x4082c -> 0x308c8, height 1040 -> 24 , main False -> False |
| 13:23:29.822 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 13140 main window 0x308c8 -> 0x3085e, height 24 -> 29 , main False -> True |
| 13:24:36.173 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |21700| (w: 0x0): C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2026.11050.1001.0_x64__8wekyb3d8bbwe\Photos.exe |
| 13:27:51.491 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |8264| (w: 0x0): C:\Users\User\AppData\Local\Microsoft\OneDrive\26.084.0504.0007\FileCoAuth.exe |
| 13:28:01.574 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |8424| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 13:31:34.998 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |6272| (w: 0x0): C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2026.11050.1001.0_x64__8wekyb3d8bbwe\Photos.exe |
| 13:33:02.469 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |9320| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 13:38:03.324 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |23240| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 13:43:04.386 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |10128| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 13:46:22.821 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |11596| (w: 0x0): C:\Program Files (x86)\Epic Games\Epic Online Services\service\EpicOnlineServicesHost.exe |
| 13:46:22.821 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |9076| (w: 0x0): \Device\HarddiskVolume3\Program Files (x86)\Epic Games\Epic Online Services\service\EpicOnlineServicesHost.exe |
| 13:46:22.821 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |11348| (w: 0x0): \Device\HarddiskVolume3\Program Files (x86)\Epic Games\Epic Online Services\EpicOnlineServicesUserHelper.exe |
| 13:48:05.561 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |8672| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 13:53:06.749 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |14532| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 13:57:52.433 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |7384| (w: 0x0): C:\Users\User\AppData\Local\Microsoft\OneDrive\26.084.0504.0007\FileCoAuth.exe |
| 13:58:07.550 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |14412| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 14:03:07.588 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |21440| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 14:07:51.546 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |11500| (w: 0x0): C:\Users\User\AppData\Local\Microsoft\OneDrive\26.084.0504.0007\FileCoAuth.exe |
| 14:08:08.672 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |3424| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 14:13:09.583 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |3896| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 14:17:47.408 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |22284| (w: 0x0): C:\Users\User\AppData\Local\Microsoft\OneDrive\26.084.0504.0007\FileCoAuth.exe |
| 14:18:09.600 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |2128| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 14:23:10.454 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |12316| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 14:27:48.38 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |3028| (w: 0x0): C:\Users\User\AppData\Local\Microsoft\OneDrive\26.084.0504.0007\FileCoAuth.exe |
| 14:28:11.210 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |3836| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 14:33:12.36 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |16940| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 14:38:12.995 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |9736| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 14:51:30.643 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |2820| (w: 0x0): C:\Users\User\AppData\Local\Microsoft\OneDrive\26.084.0504.0007\FileCoAuth.exe |
| 14:54:39.63 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |11720| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 14:59:40.201 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |24016| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 15:04:40.288 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |23304| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 15:09:41.386 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |21584| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 15:14:41.585 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |24224| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 15:19:43.674 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |5664| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 15:24:44.944 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |7804| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 15:24:59.84 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 5268 main window 0x2066e -> 0x10696, height 909 -> 909 , main True -> True |
| 15:29:45.50 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |17420| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 15:31:39.834 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |8428| (w: 0x0): C:\Users\User\AppData\Local\Microsoft\OneDrive\26.084.0504.0007\FileCoAuth.exe |
| 15:31:46.199 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 5268 main window 0x10696 -> 0x2066e, height 909 -> 909 , main True -> True |
| 15:31:46.207 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 5268 main window 0x2066e -> 0x10696, height 909 -> 909 , main True -> True |
| 15:31:55.59 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 5268 main window 0x10696 -> 0x1f08c2, height 909 -> 50 , main True -> True |
| 15:34:46.105 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |10280| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 15:39:47.198 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |20832| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 15:44:48.305 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |528| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 15:49:49.322 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |10784| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 15:54:49.445 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |8888| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 15:59:50.495 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |20940| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 16:04:51.407 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |4504| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 16:09:51.425 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |10884| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 16:14:52.948 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |10012| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 16:19:52.880 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |776| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 16:24:53.786 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |24160| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 16:29:55.207 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |504| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 16:34:55.676 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |1876| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 16:39:56.142 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |1324| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 16:44:56.755 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |23408| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 16:49:57.426 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |21552| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 16:54:58.113 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |7636| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 16:59:59.670 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |19824| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 17:05:00.260 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |20252| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 17:10:00.801 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |2472| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 20:23:13.133 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |11148| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 20:24:52.30 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |12204| (w: 0x0): \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe |
| 20:28:13.871 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |22584| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 20:33:14.674 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |7276| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 20:38:15.407 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |9900| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 20:41:03.189 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 15992 main window 0x5d0840 -> 0x40018, height 0 -> 214 , main True -> True |
| 20:41:03.722 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 15992 main window 0x40018 -> 0x4e0684, height 214 -> 837 , main True -> True |
| 20:41:03.730 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 15992 main window 0x4e0684 -> 0x202e4, height 837 -> 837 , main True -> True |
| 20:41:03.731 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 15992 main window 0x202e4 -> 0x302f0, height 837 -> 837 , main True -> True |
| 20:41:03.737 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 15992 main window 0x302f0 -> 0x302ec, height 837 -> 837 , main True -> True |
| 20:41:30.73 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 16592 main window 0x1060e -> 0x2702b4, height 400 -> 312 , main True -> True |
| 20:43:15.582 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |22612| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 20:48:16.265 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |9552| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 20:53:20.287 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |23932| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 20:58:25.129 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |18892| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 21:03:41.289 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |20880| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 21:08:42.371 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |12268| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 21:13:42.843 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |1004| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 21:18:43.961 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |21640| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 21:23:45.53 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |9044| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 21:28:46.8 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |4252| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 21:31:55.638 | 5100 | 369 | ProcessInjector::IsProcessReadyToInjectByRule | ready rule passed for process [Riot Client.exe], consider it is ready pid-window [0xd014c] |
| 21:31:56.919 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 5484 main window 0xd014c -> 0x303aa, height 600 -> 864 , main True -> True |
| 21:32:02.714 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |16128| (w: 0x0): C:\Riot Games\Riot Client\RiotClientServices.exe |
| 21:32:03.721 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |20568| (w: 0x0): C:\Riot Games\Riot Client\RiotClientCrashHandler.exe |
| 21:32:13.838 | 5100 | 369 | ProcessInjector::IsProcessReadyToInjectByRule | ready rule passed for process [AimLab_tb.exe], consider it is ready pid-window [0xd0646] |
| 21:32:14.482 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 24480 main window 0xd0646 -> 0x203d8, height 1080 -> 1080 , main True -> True |
| 21:32:18.753 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 13276 main window 0x10286 -> 0x1028c, height 1080 -> 1080 , main True -> True |
| 21:32:22.914 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |16584| (w: 0x0): C:\Program Files (x86)\Steam\steamapps\common\Aim Lab\UnityCrashHandler64.exe |
| 21:32:23.31 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 13276 main window 0x1028c -> 0x1028c, height 1080 -> 1080 , main True -> True |
| 21:32:23.926 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |20496| (w: 0x0): C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_7.326.5041.0_x64__8wekyb3d8bbwe\GameBarFTServer.exe |
| 21:32:24.940 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |23424| (w: 0x0): C:\Program Files (x86)\Steam\steamapps\common\Aim Lab\AimLab_tb_Data\Plugins\x86_64\crashpad_handler.dll |
| 21:32:28.986 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |3700| (w: 0x0): C:\Program Files (x86)\Steam\steamapps\common\Aim Lab\AimLab_tb_Data\Plugins\x86_64\VuplexWebViewChromium\Vuplex WebView.vuplex |
| 21:33:46.504 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |21508| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 21:38:47.653 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |16528| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 21:43:47.711 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |20220| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 21:48:48.984 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |12304| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 21:53:49.206 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |8304| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 21:55:28.2 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |22028| (w: 0x0): C:\Program Files (x86)\Steam\steamapps\common\Aim Lab\AimLab_tb_Data\Plugins\x86_64\VuplexWebViewChromium\Vuplex WebView.vuplex |
| 21:57:07.53 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 5484 main window 0x303aa -> 0x203b2, height 864 -> 864 , main True -> True |
| 21:57:16.805 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 5484 main window 0x203b2 -> 0x203b2, height 864 -> 864 , main True -> True |
| 21:57:19.809 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |19588| (w: 0x0): \Device\HarddiskVolume3\Program Files\Riot Vanguard\vgc.exe |
| 21:57:27.874 | 5100 | 369 | ProcessInjector::IsProcessReadyToInjectByRule | ready rule passed for process [VALORANT-Win64-Shipping.exe], consider it is ready pid-window [0x70356] |
| 21:57:28.935 | 5100 | 698 | ProcessInjector::InjectExplorerToProcess | Injected to process 22212 [mt 6032] 0x70356 |
| 21:57:30.902 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |3800| (w: 0x0): C:\Riot Games\VALORANT\live\VALORANT.exe |
| 21:57:33.565 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 13276 main window 0x1028c -> 0x1028c, height 1080 -> 1080 , main True -> True |
| 21:57:38.952 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |21364| (w: 0x0): C:\Users\User\AppData\Local\NVIDIA Corporation\NVIDIA app\NvBackend\ApplicationOntology\NvOAWrapperCache.exe |
| 21:58:45.997 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 5484 main window 0x203b2 -> 0x203b2, height 864 -> 864 , main True -> True |
| 21:58:48.553 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 22212 main window 0x70356 -> 0x30702, height 1080 -> 1080 , main True -> True |
| 21:58:50.586 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |9448| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 21:58:59.641 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |23572| (w: 0x0): C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_7.326.5041.0_x64__8wekyb3d8bbwe\GameBarFTServer.exe |
| 22:03:51.80 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |468| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 22:08:52.271 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |15504| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 22:09:47.564 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |18768| (w: 0x0): \Device\HarddiskVolume3\Program Files\Riot Vanguard\vgm.exe |
| 22:12:11.664 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 24472 main window 0x40782 -> 0x3078e, height 350 -> 909 , main True -> True |
| 22:12:52.332 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 24472 main window 0x3078e -> 0x50710, height 909 -> 218 , main True -> True |
| 22:13:52.338 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |24188| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 22:18:53.831 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |5032| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 22:23:54.499 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |7852| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 22:28:55.118 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |24480| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 22:33:55.723 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |22596| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 22:35:22.471 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |16116| (w: 0x0): \Device\HarddiskVolume3\Program Files\Riot Vanguard\vgm.exe |
| 22:38:56.277 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |1776| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 22:43:56.632 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |8148| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 22:48:58.5 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |23796| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 22:53:58.767 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |5736| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 22:58:58.972 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |17576| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 23:02:27.127 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |23796| (w: 0x0): \Device\HarddiskVolume3\Program Files\Riot Vanguard\vgm.exe |
| 23:03:59.607 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |6984| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 23:09:00.254 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |21436| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 23:14:01.817 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |22112| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 23:14:47.72 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |12320| (w: 0x0): C:\Users\User\AppData\Local\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe |
| 23:19:02.388 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |13680| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 23:24:02.976 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |9116| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 23:24:52.263 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |9164| (w: 0x0): \Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe |
| 23:28:55.399 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 17036 main window 0x1b06ca -> 0x14043e, height 1056 -> 919 , main True -> True |
| 23:29:03.761 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |18752| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 23:29:05.951 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 17036 main window 0x14043e -> 0xf0794, height 919 -> 25 , main True -> True |
| 23:34:04.229 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |8596| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 23:39:05.431 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |7112| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 23:42:22.863 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |3028| (w: 0x0): C:\Users\User\AppData\Local\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe |
| 23:42:23.867 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |11592| (w: 0x0): C:\Users\User\AppData\Local\Microsoft\OneDrive\26.084.0504.0007\OneDrive.Sync.Service.exe |
| 23:44:06.490 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |14924| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 23:49:06.385 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |23648| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 23:54:07.488 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |9912| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 23:59:07.710 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |10944| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 00:04:08.754 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |16076| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 00:09:10.99 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |11880| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 00:14:10.130 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |21668| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 00:17:16.660 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 9996 main window 0x906e2 -> 0x130786, height 1056 -> 919 , main True -> True |
| 00:19:11.258 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |6164| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 00:20:45.712 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 9996 main window 0x130786 -> 0x6106f4, height 919 -> 919 , main True -> True |
| 00:20:51.211 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 9996 main window 0x6106f4 -> 0x130786, height 919 -> 919 , main True -> True |
| 00:20:52.332 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 9996 main window 0x130786 -> 0x130786, height 919 -> 919 , main True -> True |
| 00:21:48.891 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 9996 main window 0x130786 -> 0x130786, height 919 -> 919 , main True -> True |
| 00:24:11.903 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |22804| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 00:24:19.481 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 9996 main window 0x130786 -> 0x130786, height 919 -> 919 , main True -> True |
| 00:24:57.938 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 9996 main window 0x130786 -> 0x130786, height 919 -> 919 , main True -> True |
| 00:25:59.512 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 9996 main window 0x130786 -> 0x130786, height 919 -> 919 , main True -> True |
| 00:26:47.254 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 9996 main window 0x130786 -> 0x130786, height 919 -> 919 , main True -> True |
| 00:26:52.762 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 9996 main window 0x130786 -> 0x130786, height 919 -> 919 , main True -> True |
| 00:28:11.786 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 9996 main window 0x130786 -> 0x130786, height 919 -> 919 , main True -> True |
| 00:28:14.688 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 9996 main window 0x130786 -> 0x130786, height 919 -> 919 , main True -> True |
| 00:29:12.552 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |15688| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 00:30:45.836 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 9996 main window 0x130786 -> 0x130786, height 919 -> 919 , main True -> True |
| 00:30:46.408 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 9996 main window 0x130786 -> 0x150852, height 919 -> 25 , main True -> True |
| 00:34:13.39 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |10480| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 00:39:14.126 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |6020| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 00:44:14.788 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |20844| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 00:49:15.490 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |10492| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 00:54:16.223 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |5864| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 00:59:16.962 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |22600| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 01:04:17.533 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |5072| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 01:09:18.265 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |7616| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 01:14:08.733 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 16720 main window 0x1606e0 -> 0x2900b0, height 1056 -> 919 , main True -> True |
| 01:14:19.4 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |24256| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 01:15:30.633 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 16720 main window 0x2900b0 -> 0x1c0798, height 919 -> 919 , main True -> True |
| 01:15:39.467 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 16720 main window 0x1c0798 -> 0x2900b0, height 919 -> 919 , main True -> True |
| 01:19:19.352 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |2188| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 01:21:07.707 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 16720 main window 0x2900b0 -> 0x1d0254, height 919 -> 919 , main True -> True |
| 01:21:52.35 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 16720 main window 0x1d0254 -> 0x2900b0, height 919 -> 919 , main True -> True |
| 01:21:52.895 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 16720 main window 0x2900b0 -> 0x1d0254, height 919 -> 919 , main True -> True |
| 01:22:06.113 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 16720 main window 0x1d0254 -> 0x3b0732, height 919 -> 919 , main True -> True |
| 01:22:07.673 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 16720 main window 0x3b0732 -> 0x1d0254, height 919 -> 919 , main True -> True |
| 01:22:09.533 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 16720 main window 0x1d0254 -> 0x2900b0, height 919 -> 919 , main True -> True |
| 01:24:19.752 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |22908| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 01:27:49.231 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 16720 main window 0x2900b0 -> 0x3c0732, height 919 -> 919 , main True -> True |
| 01:28:08.221 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 16720 main window 0x3c0732 -> 0x2900b0, height 919 -> 919 , main True -> True |
| 01:28:22.666 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 16720 main window 0x2900b0 -> 0x200254, height 919 -> 50 , main True -> True |
| 01:29:21.348 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |19660| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 01:34:21.784 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |9988| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 01:39:21.987 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |24148| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 01:44:22.704 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |11604| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 01:49:23.434 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |9028| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 01:54:24.129 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |14412| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 01:59:24.904 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |14920| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 02:04:25.570 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |18380| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 02:09:26.255 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |21800| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 02:14:27.10 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |8252| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 02:17:17.571 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 20932 main window 0x36072a -> 0x3106cc, height 1056 -> 919 , main True -> True |
| 02:18:14.48 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 20932 main window 0x3106cc -> 0xf045c, height 919 -> 25 , main True -> True |
| 02:19:27.964 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |11680| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 02:24:28.367 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |17456| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 02:29:28.922 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |20540| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 02:34:30.234 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |12316| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 02:39:31.169 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |20440| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 02:44:31.493 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |656| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 02:49:32.205 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |22636| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 02:54:32.840 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |11700| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 02:59:33.552 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |6668| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 03:04:34.211 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |22120| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 03:09:35.31 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |17304| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 03:14:35.821 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |12572| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 03:19:36.636 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |19344| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 03:20:51.588 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 12936 main window 0x2b00b0 -> 0x2e003e, height 1056 -> 919 , main True -> True |
| 03:20:51.757 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 12936 main window 0x2e003e -> 0x4d0732, height 919 -> 919 , main True -> True |
| 03:22:46.798 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 12936 main window 0x4d0732 -> 0x4d0732, height 919 -> 919 , main True -> True |
| 03:22:56.776 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 12936 main window 0x4d0732 -> 0x4d0732, height 919 -> 919 , main True -> True |
| 03:22:58.687 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 12936 main window 0x4d0732 -> 0x4d0732, height 919 -> 919 , main True -> True |
| 03:22:59.268 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 12936 main window 0x4d0732 -> 0x48077e, height 919 -> 25 , main True -> True |
| 03:24:36.863 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |15452| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 03:27:56.433 | 5100 | 369 | ProcessInjector::IsProcessReadyToInjectByRule | ready rule passed for process [Riot Client.exe], consider it is ready pid-window [0x702e2] |
| 03:27:57.522 | 4474 | 230 | ProcessMainThreadIdFinder::AddWindow | overwrite process 1760 main window 0x702e2 -> 0x40332, height 600 -> 864 , main True -> True |
| 03:28:25.583 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |24188| (w: 0x0): C:\Users\User\AppData\Local\NVIDIA Corporation\NVIDIA app\NvBackend\ApplicationOntology\NvOAWrapperCache.exe |
| 03:29:37.916 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |1224| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 03:34:38.641 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |24148| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |
| 03:39:39.400 | 5100 | 336 | ProcessInjector::HandlePendingProccesss | process detection skipped |13284| (w: 0x0): \Device\HarddiskVolume3\Program Files\RGSUpdaterAgent\bin\RGSUpdaterAgent.exe |