SHAS2 mode started at 2021-01-10 02:54:46 for Rainbow Six on x64
ping:185ms
update 6
DirectX version is 12.0( )
OS is 10.0 64 bit
Real OS Microsoft Windows 10 Enterprise
memory: 16328 MB
version: MOSS 5,4,8,0
Physical: Gigabyte Technology Co., Ltd.A520 AORUS ELITEA520 AORUS ELITEDefault string
Sign ID1: 508173376 ID2: 670677376
User: Jack@DESKTOP-ARHSU41
Drive: KINGSTON SA2000M8500G serial: 0026_B768_3C98_4D05.
Drive: serial:
Net: 18C04D3BE6D4 /192.168.0.2 Public: 58.172.73.xxx
Video: NVIDIA GeForce RTX 2070 SUPER driver : 27.21.14.6089
Monitor: (Standard monitor types) ACR KG251Q serial: T8ZSA00485720121077C
processor BIOS details 3693 MHz by 36.93*100. AMD Ryzen 7 3700X 8-Core Processor
Directx11
SHAS2: 7fe327ae2dd924e2318796508b6cff5fd6b70a3deb30a2b7c7403abdbd805462 process: C:\Windows\System32\lsass.exe
SHAS2: 1a1fe677953a31886243f5410fa08fbd12f6022cc952f6712542bed02259779c process: C:\Windows\System32\winlogon.exe
SHAS2: 4f5d509ed0813495684a0a5ced614f234e3f595b7a83b25c0aa2940c76d327aa process: C:\Windows\System32\fontdrvhost.exe
SHAS2: 4f5d509ed0813495684a0a5ced614f234e3f595b7a83b25c0aa2940c76d327aa process: C:\Windows\System32\fontdrvhost.exe
SHAS2: 18b84df6110f4a23660a256e558bce4f5fc0d47678e4d1f9f8188dd490e5b293 process: C:\Windows\System32\dwm.exe
SHAS2: 51dd22577dd33ebe36b327fc6a7f12d38a9da4e55a82a1f5224ad8da7b2c9424 process: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_a51067c0ac557884\Display.NvContainer\NVDisplay.Container.exe
SHAS2: 51dd22577dd33ebe36b327fc6a7f12d38a9da4e55a82a1f5224ad8da7b2c9424 process: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_a51067c0ac557884\Display.NvContainer\NVDisplay.Container.exe
SHAS2: 4ccd2f52f39cc72787bb4cac73befc5d27e2e77b14e70b04cf604159d19313b4 process: C:\Windows\System32\spoolsv.exe
SHAS2: 82f69fe7a5fcc23a0f4dab5af68f4b959b7799eacae7cde904af502ad006576f process: C:\Program Files (x86)\CoolerMaster\PORTAL\CMService.exe
SHAS2: b28eca3b53b6d3e55725bd2cf76d8a9e67fa0f85f2bc575aa39815de4ca25183 process: C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
SHAS2: f1dc9560d0c381c78304d94f7ba469490017d9728a03c2dd32c3be957fc9f923 process: C:\Windows\System32\rundll32.exe
SHAS2: 22afa24d1a010b9465897bd8657ff34f27efec9ef0aa919eb3f211f1c1026948 process: C:\Windows\System32\MoUsoCoreWorker.exe
Monitor Started at 2021-01-10 02:54:53
Windows Defender: enabled
SHAS2: b28eca3b53b6d3e55725bd2cf76d8a9e67fa0f85f2bc575aa39815de4ca25183 process: C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
Windows Defender: enabled
SteamId: 0
SHAS2: b28eca3b53b6d3e55725bd2cf76d8a9e67fa0f85f2bc575aa39815de4ca25183 process: C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
SHAS2: c2194f45c7b614b4520ed551c88c2b32d2e0065edcf3d7208086a1b0ec07d835 process: C:\Windows\System32\sihost.exe
SHAS2: 59c34f131dcedcc34252d2ab18754481843efb2a64a92996391330c321154943 process: C:\Windows\System32\taskhostw.exe
SHAS2: 04441a2e82a4bd350b448b135d52f0a981cf8d011279bed98afe48f500767b66 process: C:\Windows\explorer.exe
SHAS2: 484fed5f039f429ed933931ba607b7efda7d1a343d79cfab60910e1843147012 process: C:\Windows\System32\ctfmon.exe
ping:184ms
SHAS2: 1fc01c71a356375dbd1f632a101620d90e65f02c1047fd6f0ea8cf62b8695cbc process: C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
SHAS2: 03f57900a9324df23da95a46f58245649b0357f065b7f4128e387507ce9582e6 process: C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
SHAS2: a9b3185119953859889b462faf68d75df365ff569ee1b9a5c5ce1c26cb443cb9 process: C:\Windows\System32\conhost.exe
SHAS2: 48374326938273e5804c33c4355d72cc4bb470421527a53b1c30cc0d1247dca6 process: C:\Program Files (x86)\Google\Update\1.3.36.52\GoogleCrashHandler.exe
SHAS2: 06d800a11205b5fbee8b6a29671f78d72f1b27cd484f8307ebc79b53e6f0db7a process: C:\Program Files (x86)\Google\Update\1.3.36.52\GoogleCrashHandler64.exe
SHAS2: 70d968b4f65c5ce471474096f8623aecd7d496e4f10c8b94c3577c8362e0ada1 process: C:\Windows\System32\RuntimeBroker.exe
SHAS2: be1c4326648531600d4edaff0383ac6d1022844557b5ab4d89bab71760113c41 process: C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
SHAS2: 63b92d3657ec7e81ad3a8ad8eca83c456752eb654715518732da1adc9c4241ad process: C:\Windows\System32\SearchIndexer.exe
SHAS2: 70d968b4f65c5ce471474096f8623aecd7d496e4f10c8b94c3577c8362e0ada1 process: C:\Windows\System32\RuntimeBroker.exe
SHAS2: 5f5b8d1b767d42e8d48bf8a9b466975901a30fe9dca52157a48a4c8b1d7375c4 process: C:\Program Files\WindowsApps\Microsoft.YourPhone_1.20112.72.0_x64__8wekyb3d8bbwe\YourPhone.exe
SHAS2: 73d8f23a1acf635a39b2dcb8b37304658f6f84d1090af961ea031efab833d916 process: C:\Windows\System32\SettingSyncHost.exe
SHAS2: 70d968b4f65c5ce471474096f8623aecd7d496e4f10c8b94c3577c8362e0ada1 process: C:\Windows\System32\RuntimeBroker.exe
SHAS2: 6d4b513a97133a884c779172a424871a96947d7470297147d2f089d1daea80a2 process: C:\Program Files (x86)\CoolerMaster\PORTAL\cm-blackhawk.exe
SHAS2: a9b3185119953859889b462faf68d75df365ff569ee1b9a5c5ce1c26cb443cb9 process: C:\Windows\System32\conhost.exe
SHAS2: 70d968b4f65c5ce471474096f8623aecd7d496e4f10c8b94c3577c8362e0ada1 process: C:\Windows\System32\RuntimeBroker.exe
SHAS2: 9c54b6121f55263d209e9c445008eb70578db31f91b3e33d54bfd649169436f9 process: C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe
SHAS2: 28269de5fc0198b7e1a734146840bf4a11ab54a146b88d42fbc4fd66f41e8def process: C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
captured: C:\Users\Jack\Documents\my games\Rainbow Six - Siege\27eb932e-f205-4492-bf90-3bb105addd47\GameSettings.ini file: GameSettings.ini.001- Zip CRC: c637549c8624c7139fa36a95b81b8a7bfa5c4523b4f668fec9027bd46867a27f
captured: C:\Users\Jack\Documents\my games\Rainbow Six - Siege\cf0cc92f-0118-4d63-b64c-20588fc2f638\GameSettings.ini file: GameSettings.ini.002- Zip CRC: d98000eb21a5f46bf31adba974175743c24c12df01115a0f3c145636fa493d57
CRYPTED #¿”ÝhVhü{`˼§>tùh’x…Ô váùÕWB+…| ¨w; C*°°Ï¿Îi còàÝ8%¾Ù8>à¾xÐcªÆHy¬Axè+ÄŠ™ Õ—
SHAS2: 28269de5fc0198b7e1a734146840bf4a11ab54a146b88d42fbc4fd66f41e8def process: C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
CRYPTED W[¶ª3A ù=?Œè³i"¥1•pÈÄοֻ€P«y^TÔe:D kˆÅ˜ìŸFP<3DàGà.
CRYPTED
ã× 3B ¯>>è³9-¤1• Å—Î~í²ˆCRE©+Y[Ôe:D kˆÅ˜ìŸFP<3DàGà.
SHAS2: 28269de5fc0198b7e1a734146840bf4a11ab54a146b88d42fbc4fd66f41e8def process: C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
SHAS2: 570b37a7a3ffdafcceccc33cbc1968feb857b73ca3cb4dffedc2e67e9abd0878 process: C:\Windows\System32\SecurityHealthSystray.exe
*SHAS2: 642c9ad2b0f862567367fc7b8a463252b54f716b32a1f0b10a162c47a0536889 process: C:\Users\Jack\AppData\Local\Microsoft\OneDrive\OneDrive.exe
SHAS2: 21ce0c67be3233a903718c60ab9d2c1ebbabb52f014d40d71024aafa6f694f0c process: C:\Users\Jack\AppData\Local\Discord\app-0.0.309\Discord.exe
SHAS2: 21ce0c67be3233a903718c60ab9d2c1ebbabb52f014d40d71024aafa6f694f0c process: C:\Users\Jack\AppData\Local\Discord\app-0.0.309\Discord.exe
(Mon 1) DX11(628) : Each 120 at 2021-01-10 02:54:56 file: 001.JPG- Zip CRC: b9cf8483baa1f8513eecf776930d6363208318d9cbd0b4604974805ea6905fb2
ping:193ms
SHAS2: 21ce0c67be3233a903718c60ab9d2c1ebbabb52f014d40d71024aafa6f694f0c process: C:\Users\Jack\AppData\Local\Discord\app-0.0.309\Discord.exe
SHAS2: 21ce0c67be3233a903718c60ab9d2c1ebbabb52f014d40d71024aafa6f694f0c process: C:\Users\Jack\AppData\Local\Discord\app-0.0.309\Discord.exe
F
SHAS2: 21ce0c67be3233a903718c60ab9d2c1ebbabb52f014d40d71024aafa6f694f0c process: C:\Users\Jack\AppData\Local\Discord\app-0.0.309\Discord.exe
SHAS2: 9b4efa993b2680bafa8ac6332bdff7ce1db89a81ead5d6d180455918b17a0e08 process: C:\Users\Jack\AppData\Roaming\Spotify\Spotify.exe
SHAS2: 9b4efa993b2680bafa8ac6332bdff7ce1db89a81ead5d6d180455918b17a0e08 process: C:\Users\Jack\AppData\Roaming\Spotify\Spotify.exe
SHAS2: 9b4efa993b2680bafa8ac6332bdff7ce1db89a81ead5d6d180455918b17a0e08 process: C:\Users\Jack\AppData\Roaming\Spotify\Spotify.exe
SHAS2: 9b4efa993b2680bafa8ac6332bdff7ce1db89a81ead5d6d180455918b17a0e08 process: C:\Users\Jack\AppData\Roaming\Spotify\Spotify.exe
SHAS2: 9b4efa993b2680bafa8ac6332bdff7ce1db89a81ead5d6d180455918b17a0e08 process: C:\Users\Jack\AppData\Roaming\Spotify\Spotify.exe
SHAS2: ad94f86ab5a7b6775564340bb91e1ef11afc6f3d882287eeb01556d4e1837c61 process: D:\Overwolf\Overwolf.exe
SHAS2: 21ce0c67be3233a903718c60ab9d2c1ebbabb52f014d40d71024aafa6f694f0c process: C:\Users\Jack\AppData\Local\Discord\app-0.0.309\Discord.exe
SHAS2: 61e162f9e9d53fc9473e84500e7d6e8ca783500eb6a3ac3dfc6b189e04468093 process: D:\Overwolf\0.162.0.9\OverwolfBrowser.exe
SHAS2: 61e162f9e9d53fc9473e84500e7d6e8ca783500eb6a3ac3dfc6b189e04468093 process: D:\Overwolf\0.162.0.9\OverwolfBrowser.exe
SHAS2: 61e162f9e9d53fc9473e84500e7d6e8ca783500eb6a3ac3dfc6b189e04468093 process: D:\Overwolf\0.162.0.9\OverwolfBrowser.exe
SHAS2: 7685ead1c23a7616955268421f97f95c48fd8c95f35820e3901f0d1eb53b2f15 process: C:\Program Files (x86)\Common Files\Overwolf\0.162.0.9\OverwolfHelper.exe
SHAS2: 5621e11c89f626bc5861e15e4962cec01285bf97b317cb41b793a523a94586c7 process: C:\Program Files (x86)\Common Files\Overwolf\0.162.0.9\OverwolfHelper64.exe
SHAS2: 5da7a338fa478c96e83a27db481e39c1f2689e9016cf9aa7ff5cd2bff32f33f2 process: C:\Windows\System32\ApplicationFrameHost.exe
SHAS2: 29163b7ba95324898cf3aeba2a40bc77960409d2e6e50abfbf82a458fe2316cd process: C:\Program Files\WindowsApps\Microsoft.WindowsStore_12011.1001.1.0_x64__8wekyb3d8bbwe\WinStore.App.exe
SHAS2: 70d968b4f65c5ce471474096f8623aecd7d496e4f10c8b94c3577c8362e0ada1 process: C:\Windows\System32\RuntimeBroker.exe
SHAS2: 3add6875517843f8a58dfb760d042ae50f1ed562c44bea91d28edd353f05deca process: C:\Windows\ImmersiveControlPanel\SystemSettings.exe
SHAS2: 8231545cfc9058dd631a059ac58a69999250b97ab929a1f22c52eebc3016fd7f process: C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.20112.10111.0_x64__8wekyb3d8bbwe\Video.UI.exe
SHAS2: 70d968b4f65c5ce471474096f8623aecd7d496e4f10c8b94c3577c8362e0ada1 process: C:\Windows\System32\RuntimeBroker.exe
SHAS2: 399dfaa74cf9c50426a780137c6a06ba78d85e5d12cc9c8d89ff2352a0be46d4 process: C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\InputApp\TextInputHost.exe
SHAS2: c10027d801f70d9a347b38e4949f4650c12d307a8e7c0579f6f7198cac390579 process: C:\Program Files\Google\Chrome\Application\chrome.exe
SHAS2: c10027d801f70d9a347b38e4949f4650c12d307a8e7c0579f6f7198cac390579 process: C:\Program Files\Google\Chrome\Application\chrome.exe
SHAS2: c10027d801f70d9a347b38e4949f4650c12d307a8e7c0579f6f7198cac390579 process: C:\Program Files\Google\Chrome\Application\chrome.exe
SHAS2: c10027d801f70d9a347b38e4949f4650c12d307a8e7c0579f6f7198cac390579 process: C:\Program Files\Google\Chrome\Application\chrome.exe
SHAS2: c10027d801f70d9a347b38e4949f4650c12d307a8e7c0579f6f7198cac390579 process: C:\Program Files\Google\Chrome\Application\chrome.exe
SHAS2: c10027d801f70d9a347b38e4949f4650c12d307a8e7c0579f6f7198cac390579 process: C:\Program Files\Google\Chrome\Application\chrome.exe
SHAS2: c10027d801f70d9a347b38e4949f4650c12d307a8e7c0579f6f7198cac390579 process: C:\Program Files\Google\Chrome\Application\chrome.exe
SHAS2: c10027d801f70d9a347b38e4949f4650c12d307a8e7c0579f6f7198cac390579 process: C:\Program Files\Google\Chrome\Application\chrome.exe
SHAS2: 55b144d3bdd0c14ff810fa295ca79e08a1e418ee3bb46eab78982eeb0bb7816f process: C:\Windows\System32\audiodg.exe
SHAS2: c10027d801f70d9a347b38e4949f4650c12d307a8e7c0579f6f7198cac390579 process: C:\Program Files\Google\Chrome\Application\chrome.exe
SHAS2: 11db76e7363203bff596c5c716ef2984e27d94d918e0548e5eefde9bb313fdf5 process: C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\upc.exe
SHAS2: 0590b25f89848ce4b64134d1567a3121a9d1bc5d71f0cf6589cd352c1b6b3a07 process: C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UplayWebCore.exe
SHAS2: 0590b25f89848ce4b64134d1567a3121a9d1bc5d71f0cf6589cd352c1b6b3a07 process: C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UplayWebCore.exe
SHAS2: 0590b25f89848ce4b64134d1567a3121a9d1bc5d71f0cf6589cd352c1b6b3a07 process: C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UplayWebCore.exe
SHAS2: 0590b25f89848ce4b64134d1567a3121a9d1bc5d71f0cf6589cd352c1b6b3a07 process: C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UplayWebCore.exe
SHAS2: 61e162f9e9d53fc9473e84500e7d6e8ca783500eb6a3ac3dfc6b189e04468093 process: D:\Overwolf\0.162.0.9\OverwolfBrowser.exe
SHAS2: 61e162f9e9d53fc9473e84500e7d6e8ca783500eb6a3ac3dfc6b189e04468093 process: D:\Overwolf\0.162.0.9\OverwolfBrowser.exe
SHAS2: 61e162f9e9d53fc9473e84500e7d6e8ca783500eb6a3ac3dfc6b189e04468093 process: D:\Overwolf\0.162.0.9\OverwolfBrowser.exe
SHAS2: e7fc40b41aa8b83841a0b96d169eaf0800aa784733e636935374d56536253f10 process: C:\Windows\System32\dllhost.exe
SHAS2: d8f509f1d247e6ef0655e1e0d2bc44270b7ac2996796e40f46e750e107f0f8d4 process: C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe
SHAS2: aefd0894435d9a9f9e4987028800112601b24e62693bdb683a5127e813a04f24 process: C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Tom Clancy's Rainbow Six Siege\rainbowsix_be.exe
SHAS2: 0d1e2493e5c355ae9f85f526d13043b1dda17e10b466e2eeadc066239290b3a5 process: C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Tom Clancy's Rainbow Six Siege\RainbowSix.exe
Windows Defender: enabled
SteamId: 0
FileCheck start for C:\PROGRAM FILES (X86)\UBISOFT\UBISOFT GAME LAUNCHER\GAMES\TOM CLANCY'S RAINBOW SIX SIEGE at 2021-01-10 02:54:55:
captured: C:\Users\Jack\Documents\my games\Rainbow Six - Siege\27eb932e-f205-4492-bf90-3bb105addd47\GameSettings.ini file: GameSettings.ini.003- Zip CRC: c637549c8624c7139fa36a95b81b8a7bfa5c4523b4f668fec9027bd46867a27f
captured: C:\Users\Jack\Documents\my games\Rainbow Six - Siege\cf0cc92f-0118-4d63-b64c-20588fc2f638\GameSettings.ini file: GameSettings.ini.004- Zip CRC: d98000eb21a5f46bf31adba974175743c24c12df01115a0f3c145636fa493d57
CRYPTED #¿”ÝhVhü{`˼§>tùh’x…Ô váùÕWB+…| ¨w; C*°°Ï¿Îi còàÝ8%¾Ù8>à¾xÐcªÆHy¬Axè+ÄŠ™ Õ—
CRYPTED W[¶ª3A ù=?Œè³i"¥1•pÈÄοֻ€P«y^TÔe:D kˆÅ˜ìŸFP<3DàGà.
CRYPTED
ã× 3B ¯>>è³9-¤1• Å—Î~í²ˆCRE©+Y[Ôe:D kˆÅ˜ìŸFP<3DàGà.
*-
SHAS2: 21ce0c67be3233a903718c60ab9d2c1ebbabb52f014d40d71024aafa6f694f0c process: C:\Users\Jack\AppData\Local\Discord\app-0.0.309\Discord.exe
SHAS2: 21ce0c67be3233a903718c60ab9d2c1ebbabb52f014d40d71024aafa6f694f0c process: C:\Users\Jack\AppData\Local\Discord\app-0.0.309\Discord.exe
(Mon 1) DX11(587) : Each 120 at 2021-01-10 02:55:05 file: 003.JPG- Zip CRC: 7d6394d4ed7097062c6f818284db5e4ebc80db355cca1325d177b4d79afc640a
SHAS2: 21ce0c67be3233a903718c60ab9d2c1ebbabb52f014d40d71024aafa6f694f0c process: C:\Users\Jack\AppData\Local\Discord\app-0.0.309\Discord.exe
ping:188ms
SHAS2: 21ce0c67be3233a903718c60ab9d2c1ebbabb52f014d40d71024aafa6f694f0c process: C:\Users\Jack\AppData\Local\Discord\app-0.0.309\Discord.exe
SHAS2: 61e162f9e9d53fc9473e84500e7d6e8ca783500eb6a3ac3dfc6b189e04468093 process: D:\Overwolf\0.162.0.9\OverwolfBrowser.exe
SHAS2: 61e162f9e9d53fc9473e84500e7d6e8ca783500eb6a3ac3dfc6b189e04468093 process: D:\Overwolf\0.162.0.9\OverwolfBrowser.exe
SHAS2: 61e162f9e9d53fc9473e84500e7d6e8ca783500eb6a3ac3dfc6b189e04468093 process: D:\Overwolf\0.162.0.9\OverwolfBrowser.exe
F
SHAS2: 21ce0c67be3233a903718c60ab9d2c1ebbabb52f014d40d71024aafa6f694f0c process: C:\Users\Jack\AppData\Local\Discord\app-0.0.309\Discord.exe
SHAS2: 0590b25f89848ce4b64134d1567a3121a9d1bc5d71f0cf6589cd352c1b6b3a07 process: C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UplayWebCore.exe
SHAS2: 0590b25f89848ce4b64134d1567a3121a9d1bc5d71f0cf6589cd352c1b6b3a07 process: C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UplayWebCore.exe
SHAS2: d6da071b3f18d38553019143dd2da58785fe98b1ae88321323ef541f64097828 process: D:\Overwolf\0.162.0.9\obs\bin\64bit\ow-obs.exe
SHAS2: 21ce0c67be3233a903718c60ab9d2c1ebbabb52f014d40d71024aafa6f694f0c process: C:\Users\Jack\AppData\Local\Discord\app-0.0.309\Discord.exe
SHAS2: d5816718026274f5bfd67ee85f6ec008c81c7069aa0e883caa3b01953c855d30 process: C:\Windows\System32\GameBarPresenceWriter.exe
SHAS2: c10027d801f70d9a347b38e4949f4650c12d307a8e7c0579f6f7198cac390579 process: C:\Program Files\Google\Chrome\Application\chrome.exe
SHAS2: c10027d801f70d9a347b38e4949f4650c12d307a8e7c0579f6f7198cac390579 process: C:\Program Files\Google\Chrome\Application\chrome.exe
SHAS2: 213a6c4e60449b0b3bc799ab2a892afecd321be159794ae92cb900c9af09ba26 process: C:\Users\Jack\Desktop\MossX64.exe
SHAS2: f328c675147e50ac78f8d9bf57d1127aba7c24c5ca0ac933d3c36660194b5ef4 process: D:\Overwolf\0.162.0.9\obs\bin\64bit\owobs-ffmpeg-mux.exe
SHAS2: a9b3185119953859889b462faf68d75df365ff569ee1b9a5c5ce1c26cb443cb9 process: C:\Windows\System32\conhost.exe
SHAS2: 2198a7b58bccb758036b969ddae6cc2ece07565e2659a7c541a313a0492231a3 process: C:\Windows\System32\wbem\WmiPrvSE.exe
SHAS2: f328c675147e50ac78f8d9bf57d1127aba7c24c5ca0ac933d3c36660194b5ef4 process: D:\Overwolf\0.162.0.9\obs\bin\64bit\owobs-ffmpeg-mux.exe
SHAS2: a9b3185119953859889b462faf68d75df365ff569ee1b9a5c5ce1c26cb443cb9 process: C:\Windows\System32\conhost.exe
SHAS2: a9b3185119953859889b462faf68d75df365ff569ee1b9a5c5ce1c26cb443cb9 process: C:\Windows\System32\conhost.exe
SHAS2: 9b4efa993b2680bafa8ac6332bdff7ce1db89a81ead5d6d180455918b17a0e08 process: C:\Users\Jack\AppData\Roaming\Spotify\Spotify.exe
SHAS2: 9b4efa993b2680bafa8ac6332bdff7ce1db89a81ead5d6d180455918b17a0e08 process: C:\Users\Jack\AppData\Roaming\Spotify\Spotify.exe
SHAS2: c10027d801f70d9a347b38e4949f4650c12d307a8e7c0579f6f7198cac390579 process: C:\Program Files\Google\Chrome\Application\chrome.exe
SHAS2: c10027d801f70d9a347b38e4949f4650c12d307a8e7c0579f6f7198cac390579 process: C:\Program Files\Google\Chrome\Application\chrome.exe
SHAS2: c10027d801f70d9a347b38e4949f4650c12d307a8e7c0579f6f7198cac390579 process: C:\Program Files\Google\Chrome\Application\chrome.exe
SHAS2: f328c675147e50ac78f8d9bf57d1127aba7c24c5ca0ac933d3c36660194b5ef4 process: D:\Overwolf\0.162.0.9\obs\bin\64bit\owobs-ffmpeg-mux.exe
SHAS2: a9b3185119953859889b462faf68d75df365ff569ee1b9a5c5ce1c26cb443cb9 process: C:\Windows\System32\conhost.exe
SHAS2: a9b3185119953859889b462faf68d75df365ff569ee1b9a5c5ce1c26cb443cb9 process: C:\Windows\System32\conhost.exe
SHAS2: f328c675147e50ac78f8d9bf57d1127aba7c24c5ca0ac933d3c36660194b5ef4 process: D:\Overwolf\0.162.0.9\obs\bin\64bit\owobs-ffmpeg-mux.exe
SHAS2: a9b3185119953859889b462faf68d75df365ff569ee1b9a5c5ce1c26cb443cb9 process: C:\Windows\System32\conhost.exe
SHAS2: a9b3185119953859889b462faf68d75df365ff569ee1b9a5c5ce1c26cb443cb9 process: C:\Windows\System32\conhost.exe
SHAS2: f328c675147e50ac78f8d9bf57d1127aba7c24c5ca0ac933d3c36660194b5ef4 process: D:\Overwolf\0.162.0.9\obs\bin\64bit\owobs-ffmpeg-mux.exe
SHAS2: a9b3185119953859889b462faf68d75df365ff569ee1b9a5c5ce1c26cb443cb9 process: C:\Windows\System32\conhost.exe
-
SHAS2: a9b3185119953859889b462faf68d75df365ff569ee1b9a5c5ce1c26cb443cb9 process: C:\Windows\System32\conhost.exe
(Mon 1) DX11(574) : Each 120 at 2021-01-10 02:58:11 file: 005.JPG- Zip CRC: 18530efaa7da19577e8685bf73f757adde5fe8a892f759bc5e74460a9df3e47a
ping:182ms
F
SHAS2: c10027d801f70d9a347b38e4949f4650c12d307a8e7c0579f6f7198cac390579 process: C:\Program Files\Google\Chrome\Application\chrome.exe
SHAS2: c10027d801f70d9a347b38e4949f4650c12d307a8e7c0579f6f7198cac390579 process: C:\Program Files\Google\Chrome\Application\chrome.exe
SHAS2: 9b4efa993b2680bafa8ac6332bdff7ce1db89a81ead5d6d180455918b17a0e08 process: C:\Users\Jack\AppData\Roaming\Spotify\Spotify.exe
SHAS2: 9b4efa993b2680bafa8ac6332bdff7ce1db89a81ead5d6d180455918b17a0e08 process: C:\Users\Jack\AppData\Roaming\Spotify\Spotify.exe
SHAS2: 59cc005c70a7e16bd2e0c8df3daf7e6f9fca5b49a7a377a62775480579a5252f process: C:\Windows\System32\SearchProtocolHost.exe
SHAS2: ffbcf5f709e1e017eac64af5c9e232140fca2d1a02a64c1fffd965b1e5ab842f process: C:\Windows\System32\SearchFilterHost.exe
SHAS2: ffbcf5f709e1e017eac64af5c9e232140fca2d1a02a64c1fffd965b1e5ab842f process: C:\Windows\System32\SearchFilterHost.exe
SHAS2: f328c675147e50ac78f8d9bf57d1127aba7c24c5ca0ac933d3c36660194b5ef4 process: D:\Overwolf\0.162.0.9\obs\bin\64bit\owobs-ffmpeg-mux.exe
SHAS2: a9b3185119953859889b462faf68d75df365ff569ee1b9a5c5ce1c26cb443cb9 process: C:\Windows\System32\conhost.exe
SHAS2: a9b3185119953859889b462faf68d75df365ff569ee1b9a5c5ce1c26cb443cb9 process: C:\Windows\System32\conhost.exe
SHAS2: f328c675147e50ac78f8d9bf57d1127aba7c24c5ca0ac933d3c36660194b5ef4 process: D:\Overwolf\0.162.0.9\obs\bin\64bit\owobs-ffmpeg-mux.exe
SHAS2: a9b3185119953859889b462faf68d75df365ff569ee1b9a5c5ce1c26cb443cb9 process: C:\Windows\System32\conhost.exe
SHAS2: a9b3185119953859889b462faf68d75df365ff569ee1b9a5c5ce1c26cb443cb9 process: C:\Windows\System32\conhost.exe
-
(Mon 1) DX11(551) : Each 120 at 2021-01-10 03:00:32 file: 007.JPG- Zip CRC: 3ac065c3d673ee3a41f682cfe767dcf36375819303fe12ac3452428e87c435f8
ping:190ms
F
SHAS2: c10027d801f70d9a347b38e4949f4650c12d307a8e7c0579f6f7198cac390579 process: C:\Program Files\Google\Chrome\Application\chrome.exe
SHAS2: c10027d801f70d9a347b38e4949f4650c12d307a8e7c0579f6f7198cac390579 process: C:\Program Files\Google\Chrome\Application\chrome.exe
SHAS2: c10027d801f70d9a347b38e4949f4650c12d307a8e7c0579f6f7198cac390579 process: C:\Program Files\Google\Chrome\Application\chrome.exe
SHAS2: 9b4efa993b2680bafa8ac6332bdff7ce1db89a81ead5d6d180455918b17a0e08 process: C:\Users\Jack\AppData\Roaming\Spotify\Spotify.exe
SHAS2: 9b4efa993b2680bafa8ac6332bdff7ce1db89a81ead5d6d180455918b17a0e08 process: C:\Users\Jack\AppData\Roaming\Spotify\Spotify.exe
SHAS2: f328c675147e50ac78f8d9bf57d1127aba7c24c5ca0ac933d3c36660194b5ef4 process: D:\Overwolf\0.162.0.9\obs\bin\64bit\owobs-ffmpeg-mux.exe
SHAS2: a9b3185119953859889b462faf68d75df365ff569ee1b9a5c5ce1c26cb443cb9 process: C:\Windows\System32\conhost.exe
SHAS2: b811e99e85088d9ca76cbec430b6ee26e2148c2a6e34750e8d532630964dd289 process: D:\Overwolf\0.162.0.9\obs\bin\64bit\ffmpeg.exe
-
(Mon 1) DX11(560) : Each 120 at 2021-01-10 03:01:43 file: 009.JPG- Zip CRC: 5dcaf2b42603ccbe51d614da4546cf8db705f6250de113377a9475fc3468eb01
ping:186ms
F
SHAS2: f328c675147e50ac78f8d9bf57d1127aba7c24c5ca0ac933d3c36660194b5ef4 process: D:\Overwolf\0.162.0.9\obs\bin\64bit\owobs-ffmpeg-mux.exe
SHAS2: a9b3185119953859889b462faf68d75df365ff569ee1b9a5c5ce1c26cb443cb9 process: C:\Windows\System32\conhost.exe
SHAS2: a9b3185119953859889b462faf68d75df365ff569ee1b9a5c5ce1c26cb443cb9 process: C:\Windows\System32\conhost.exe
SHAS2: f328c675147e50ac78f8d9bf57d1127aba7c24c5ca0ac933d3c36660194b5ef4 process: D:\Overwolf\0.162.0.9\obs\bin\64bit\owobs-ffmpeg-mux.exe
SHAS2: a9b3185119953859889b462faf68d75df365ff569ee1b9a5c5ce1c26cb443cb9 process: C:\Windows\System32\conhost.exe
SHAS2: a9b3185119953859889b462faf68d75df365ff569ee1b9a5c5ce1c26cb443cb9 process: C:\Windows\System32\conhost.exe
SHAS2: c10027d801f70d9a347b38e4949f4650c12d307a8e7c0579f6f7198cac390579 process: C:\Program Files\Google\Chrome\Application\chrome.exe
SHAS2: c10027d801f70d9a347b38e4949f4650c12d307a8e7c0579f6f7198cac390579 process: C:\Program Files\Google\Chrome\Application\chrome.exe
SHAS2: 9b4efa993b2680bafa8ac6332bdff7ce1db89a81ead5d6d180455918b17a0e08 process: C:\Users\Jack\AppData\Roaming\Spotify\Spotify.exe
SHAS2: c10027d801f70d9a347b38e4949f4650c12d307a8e7c0579f6f7198cac390579 process: C:\Program Files\Google\Chrome\Application\chrome.exe
SHAS2: c10027d801f70d9a347b38e4949f4650c12d307a8e7c0579f6f7198cac390579 process: C:\Program Files\Google\Chrome\Application\chrome.exe
SHAS2: f328c675147e50ac78f8d9bf57d1127aba7c24c5ca0ac933d3c36660194b5ef4 process: D:\Overwolf\0.162.0.9\obs\bin\64bit\owobs-ffmpeg-mux.exe
SHAS2: a9b3185119953859889b462faf68d75df365ff569ee1b9a5c5ce1c26cb443cb9 process: C:\Windows\System32\conhost.exe
SHAS2: a9b3185119953859889b462faf68d75df365ff569ee1b9a5c5ce1c26cb443cb9 process: C:\Windows\System32\conhost.exe
-
(Mon 1) DX11(585) : Each 120 at 2021-01-10 03:04:49 file: 011.JPG- Zip CRC: d133420f156e9f6f1a38bbed0ea3a66822f66187f2a8c12ed86bd7fe5b076ed6
ping:186ms
F
SHAS2: f328c675147e50ac78f8d9bf57d1127aba7c24c5ca0ac933d3c36660194b5ef4 process: D:\Overwolf\0.162.0.9\obs\bin\64bit\owobs-ffmpeg-mux.exe
SHAS2: a9b3185119953859889b462faf68d75df365ff569ee1b9a5c5ce1c26cb443cb9 process: C:\Windows\System32\conhost.exe
SHAS2: a9b3185119953859889b462faf68d75df365ff569ee1b9a5c5ce1c26cb443cb9 process: C:\Windows\System32\conhost.exe
SHAS2: c10027d801f70d9a347b38e4949f4650c12d307a8e7c0579f6f7198cac390579 process: C:\Program Files\Google\Chrome\Application\chrome.exe
SHAS2: c10027d801f70d9a347b38e4949f4650c12d307a8e7c0579f6f7198cac390579 process: C:\Program Files\Google\Chrome\Application\chrome.exe
SHAS2: c10027d801f70d9a347b38e4949f4650c12d307a8e7c0579f6f7198cac390579 process: C:\Program Files\Google\Chrome\Application\chrome.exe
SHAS2: f328c675147e50ac78f8d9bf57d1127aba7c24c5ca0ac933d3c36660194b5ef4 process: D:\Overwolf\0.162.0.9\obs\bin\64bit\owobs-ffmpeg-mux.exe
SHAS2: a9b3185119953859889b462faf68d75df365ff569ee1b9a5c5ce1c26cb443cb9 process: C:\Windows\System32\conhost.exe
SHAS2: a9b3185119953859889b462faf68d75df365ff569ee1b9a5c5ce1c26cb443cb9 process: C:\Windows\System32\conhost.exe
SHAS2: c10027d801f70d9a347b38e4949f4650c12d307a8e7c0579f6f7198cac390579 process: C:\Program Files\Google\Chrome\Application\chrome.exe
SHAS2: c10027d801f70d9a347b38e4949f4650c12d307a8e7c0579f6f7198cac390579 process: C:\Program Files\Google\Chrome\Application\chrome.exe
SHAS2: 9b4efa993b2680bafa8ac6332bdff7ce1db89a81ead5d6d180455918b17a0e08 process: C:\Users\Jack\AppData\Roaming\Spotify\Spotify.exe
SHAS2: 9b4efa993b2680bafa8ac6332bdff7ce1db89a81ead5d6d180455918b17a0e08 process: C:\Users\Jack\AppData\Roaming\Spotify\Spotify.exe
SHAS2: f328c675147e50ac78f8d9bf57d1127aba7c24c5ca0ac933d3c36660194b5ef4 process: D:\Overwolf\0.162.0.9\obs\bin\64bit\owobs-ffmpeg-mux.exe
SHAS2: a9b3185119953859889b462faf68d75df365ff569ee1b9a5c5ce1c26cb443cb9 process: C:\Windows\System32\conhost.exe
SHAS2: a9b3185119953859889b462faf68d75df365ff569ee1b9a5c5ce1c26cb443cb9 process: C:\Windows\System32\conhost.exe
(Mon 1) DX11(549) : Each 120 at 2021-01-10 03:07:36 file: 013.JPG- Zip CRC: 780458dab9e4d726e0d8c21d79a90a1d9704313a14431a3f0396e7a9c6029c43
ping:187ms
Monitor stoppped at 2021-01-10 03:07:34
ping:190ms
Processes statistics ping:190
PID Running Time Kernel Time User Time Name
908 00:02:18:14 00:00:01 00:00:00 lsass.exe
980 00:02:18:14 00:00:00 00:00:00 winlogon.exe
928 00:02:18:14 00:00:00 00:00:00 fontdrvhost.exe
920 00:02:18:14 00:00:00 00:00:00 fontdrvhost.exe
1244 00:02:18:14 00:03:03 00:05:38 dwm.exe
1936 00:02:18:14 00:00:00 00:00:00 NVDisplay.Container.exe
2644 00:02:18:13 00:00:01 00:00:01 NVDisplay.Container.exe
3276 00:02:18:13 00:00:00 00:00:00 spoolsv.exe
3772 00:02:18:13 00:00:14 00:00:00 CMService.exe
3852 00:02:18:13 00:00:01 00:00:01 nvcontainer.exe
4984 00:02:18:13 00:00:00 00:00:00 rundll32.exe
1904 00:02:18:10 00:00:00 00:00:00 mousocoreworker.exe
6528 00:02:16:26 00:00:30 00:00:20 nvcontainer.exe
5224 00:02:16:26 00:00:01 00:00:15 nvcontainer.exe
3052 00:02:16:26 00:00:00 00:00:00 sihost.exe
7104 00:02:16:26 00:00:00 00:00:00 taskhostw.exe
1676 00:02:16:26 00:00:37 00:00:26 Explorer.EXE
3892 00:02:16:26 00:00:05 00:00:02 ctfmon.exe
4028 00:02:16:26 00:00:00 00:00:01 NVIDIA Web Helper.exe
6028 00:02:16:26 00:00:01 00:00:01 StartMenuExperienceHost.exe
2544 00:02:16:26 00:00:00 00:00:00 conhost.exe
6724 00:02:16:26 00:00:00 00:00:00 GoogleCrashHandler.exe
5604 00:02:16:26 00:00:00 00:00:00 GoogleCrashHandler64.exe
4804 00:02:16:26 00:00:00 00:00:00 RuntimeBroker.exe
7048 00:02:16:26 00:00:00 00:00:02 SearchApp.exe
3580 00:02:16:26 00:00:01 00:00:01 SearchIndexer.exe
7344 00:02:16:25 00:00:00 00:00:00 RuntimeBroker.exe
7640 00:02:16:25 00:00:00 00:00:00 YourPhone.exe
7832 00:02:16:25 00:00:00 00:00:00 SettingSyncHost.exe
8000 00:02:16:25 00:00:00 00:00:00 RuntimeBroker.exe
9012 00:02:16:24 00:00:00 00:00:00 cm-blackhawk.exe
9020 00:02:16:24 00:00:00 00:00:00 conhost.exe
1236 00:02:16:23 00:00:00 00:00:00 RuntimeBroker.exe
8380 00:02:16:22 00:00:00 00:00:01 nvsphelper64.exe
8384 00:02:16:22 00:00:05 00:00:02 NVIDIA Share.exe
3592 00:02:16:22 00:00:00 00:00:00 NVIDIA Share.exe
8348 00:02:16:22 00:00:00 00:00:01 NVIDIA Share.exe
9536 00:02:16:15 00:00:00 00:00:00 SecurityHealthSystray.exe
9656 00:02:16:14 00:00:01 00:00:01 OneDrive.exe
10116 00:02:16:12 00:00:18 00:00:27 Discord.exe
6512 00:02:16:12 00:00:00 00:00:00 Discord.exe
7428 00:02:16:12 00:00:29 00:02:18 Discord.exe
7464 00:02:16:12 00:00:02 00:00:03 Discord.exe
10644 00:02:16:10 00:02:12 00:25:38 Discord.exe
10908 00:02:16:10 00:00:02 00:00:06 Spotify.exe
11068 00:02:16:10 00:00:00 00:00:00 Spotify.exe
11176 00:02:16:10 00:00:00 00:00:00 Spotify.exe
11240 00:02:16:10 00:00:00 00:00:01 Spotify.exe
10864 00:02:16:10 00:00:00 00:00:05 Spotify.exe
11728 00:02:16:09 00:01:30 00:00:36 Overwolf.exe
11796 00:02:16:09 00:00:00 00:00:00 Discord.exe
11980 00:02:16:06 00:00:00 00:00:00 OverwolfBrowser.exe
12308 00:02:16:06 00:00:01 00:00:11 OverwolfBrowser.exe
12480 00:02:16:05 00:00:03 00:00:06 OverwolfBrowser.exe
13260 00:02:16:03 00:00:30 00:00:01 OverwolfHelper.exe
12520 00:02:16:03 00:00:25 00:00:00 OverwolfHelper64.exe
2080 00:02:15:51 00:00:00 00:00:00 ApplicationFrameHost.exe
2304 00:02:15:51 00:00:00 00:00:00 WinStore.App.exe
13248 00:02:15:51 00:00:00 00:00:00 RuntimeBroker.exe
12596 00:02:15:41 00:00:00 00:00:00 SystemSettings.exe
10504 00:02:15:31 00:00:00 00:00:00 Video.UI.exe
11592 00:02:15:30 00:00:00 00:00:00 RuntimeBroker.exe
5572 00:02:14:12 00:00:01 00:00:00 TextInputHost.exe
3880 00:02:05:06 00:00:39 00:01:02 chrome.exe
12212 00:02:05:06 00:00:00 00:00:00 chrome.exe
11144 00:02:05:06 00:00:14 00:01:02 chrome.exe
7116 00:02:05:06 00:00:04 00:00:11 chrome.exe
13044 00:02:05:06 00:00:00 00:00:00 chrome.exe
4748 00:02:05:06 00:00:00 00:00:04 chrome.exe
9824 00:02:05:06 00:00:01 00:00:09 chrome.exe
592 00:01:59:42 00:00:10 00:03:09 chrome.exe
2332 00:01:57:20 00:01:29 00:01:17 AUDIODG.EXE
11708 00:01:54:52 00:00:00 00:00:00 chrome.exe
11896 00:01:33:27 00:03:02 00:02:40 upc.exe
7384 00:01:33:23 00:00:00 00:00:00 UplayWebCore.exe
12088 00:01:33:09 00:00:00 00:00:04 UplayWebCore.exe
13128 00:01:33:09 00:00:00 00:00:00 UplayWebCore.exe
12248 00:01:33:04 00:00:01 00:00:14 UplayWebCore.exe
11588 00:01:32:15 00:00:02 00:00:36 OverwolfBrowser.exe
6500 00:01:32:15 00:00:00 00:00:07 OverwolfBrowser.exe
6628 00:01:29:00 00:00:00 00:00:00 OverwolfBrowser.exe
6048 00:01:06:05 00:00:00 00:00:00 DllHost.exe
9532 00:00:42:38 00:00:00 00:00:00 UbisoftGameLauncher.exe
6904 00:00:42:32 00:00:00 00:00:00 RainbowSix_BE.exe
6960 00:00:42:13 00:00:18 00:00:42 Discord.exe
13532 00:00:42:12 00:00:00 00:00:02 Discord.exe
7264 00:00:42:12 00:00:00 00:00:00 Discord.exe
15328 00:00:42:12 00:00:00 00:00:00 Discord.exe
9604 00:00:42:12 00:00:00 00:00:00 OverwolfBrowser.exe
9416 00:00:42:12 00:00:00 00:00:01 OverwolfBrowser.exe
15652 00:00:42:11 00:00:00 00:00:07 OverwolfBrowser.exe
16120 00:00:42:07 00:00:20 00:02:19 Discord.exe
2244 00:00:42:06 00:00:00 00:00:04 UplayWebCore.exe
10400 00:00:42:06 00:00:44 00:02:57 UplayWebCore.exe
8200 00:00:42:02 00:00:58 00:02:37 ow-obs.exe
7524 00:00:41:59 00:00:00 00:00:00 Discord.exe
10216 00:00:41:52 00:00:00 00:00:00 GameBarPresenceWriter.exe
7216 00:00:35:42 00:00:00 00:00:00 chrome.exe
2344 00:00:33:46 00:00:00 00:00:00 chrome.exe
11696 00:00:33:11 00:00:15 00:00:16 MossX64.exe
14552 00:00:00:41 00:00:00 00:00:00 owobs-ffmpeg-mux.exe
8784 00:00:00:41 00:00:00 00:00:00 conhost.exe
2508 00:00:00:04 00:00:00 00:00:00 chrome.exe
730 keystroke, 71 Patterns found
Mouse down moves
^ events 11
10 |
9 |
8 |
7 |
6 |
5 |
4 |
3 |
2 |
1 |
----------------------------------------------------------------------------------------------------------------------------------------------------------> 150 px moves
0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000111111111111111111111111111111111111111111111111111
0000000000111111111122222222223333333333444444444455555555556666666666777777777788888888889999999999000000000011111111112222222222333333333344444444445
0123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890
Mouse fast moves
^ events: 26 over : 0
11 | X
9 | X
8 | X
7 | X
6 | X
5 | X
4 | X
3 | X
2 | X XXXX
1 | XXXXXXXX XX XX
----------------------------------------------------------------------------------------------------------------------------------------------------------> px/s moves
0000000000000000000011111111111111111111222222222222222222223333333333333333333344444444444444444444555555555555555555556666666666666666666677777777777
0011223344556677889900112233445566778899001122334455667788990011223344556677889900112233445566778899001122334455667788990011223344556677889900112233445
0505050505050505050505050505050505050505050505050505050505050505050505050505050505050505050505050505050505050505050505050505050505050505050505050505050
0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Global log CRC: d81d601b91f90d6ec7d344fe9eafa73a61883fe068957b157b4f9d8d2331790b