Overview
overview
8Static
static
5STEAMRIP ...es.url
windows10-2004-x64
1STEAMRIP ...es.url
windows11-ltsc_2024-x64
8Terraria/C...15.dll
windows10-2004-x64
3Terraria/C...15.dll
windows11-ltsc_2024-x64
6Terraria/C...85.ps1
windows10-2004-x64
3Terraria/C...85.ps1
windows11-ltsc_2024-x64
8Terraria/L...er.dll
windows10-2004-x64
3Terraria/L...er.dll
windows11-ltsc_2024-x64
8Terraria/M...ne.dll
windows10-2004-x64
3Terraria/M...ne.dll
windows11-ltsc_2024-x64
3Terraria/O...ix.dll
windows10-2004-x64
3Terraria/O...ix.dll
windows11-ltsc_2024-x64
8Terraria/O...ix.url
windows10-2004-x64
7Terraria/O...ix.url
windows11-ltsc_2024-x64
7Terraria/R...ve.dll
windows10-2004-x64
3Terraria/R...ve.dll
windows11-ltsc_2024-x64
3Terraria/Terraria.exe
windows10-2004-x64
3Terraria/Terraria.exe
windows11-ltsc_2024-x64
8Terraria/T...er.exe
windows10-2004-x64
3Terraria/T...er.exe
windows11-ltsc_2024-x64
3Terraria/d...up.exe
windows10-2004-x64
7Terraria/d...up.exe
windows11-ltsc_2024-x64
7Terraria/d...64.exe
windows10-2004-x64
3Terraria/d...64.exe
windows11-ltsc_2024-x64
8Terraria/nfd.dll
windows10-2004-x64
3Terraria/nfd.dll
windows11-ltsc_2024-x64
3Terraria/s...ds.bat
windows10-2004-x64
3Terraria/s...ds.bat
windows11-ltsc_2024-x64
8Terraria/s...te.bat
windows10-2004-x64
3Terraria/s...te.bat
windows11-ltsc_2024-x64
8Terraria/s...er.bat
windows10-2004-x64
3Terraria/s...er.bat
windows11-ltsc_2024-x64
3Analysis
- max time kernel
904s - max time network
592s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
11/08/2026, 22:10
Static task
static1
Behavioral task
behavioral1
Sample
STEAMRIP » Free Pre-installed Steam Games.url
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
STEAMRIP » Free Pre-installed Steam Games.url
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
Terraria/CUESDK_2015.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
Terraria/CUESDK_2015.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral5
Sample
Terraria/Content/Images/Extra_185.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
Terraria/Content/Images/Extra_185.ps1
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
Terraria/LogitechLedEnginesWrapper.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
Terraria/LogitechLedEnginesWrapper.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
Terraria/Microsoft.Xna.Framework.Content.Pipeline.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
Terraria/Microsoft.Xna.Framework.Content.Pipeline.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
Terraria/OnlineFix.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
Terraria/OnlineFix.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
Terraria/OnlineFix.url
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
Terraria/OnlineFix.url
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
Terraria/ReLogic.Native.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
Terraria/ReLogic.Native.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
Terraria/Terraria.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
Terraria/Terraria.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
Terraria/TerrariaServer.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
Terraria/TerrariaServer.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
Terraria/dotNetFx40_Full_setup.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
Terraria/dotNetFx40_Full_setup.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
Terraria/dotNetFx40_Full_x86_x64.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
Terraria/dotNetFx40_Full_x86_x64.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
Terraria/nfd.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
Terraria/nfd.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
Terraria/start-server-steam-friends.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
Terraria/start-server-steam-friends.bat
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
Terraria/start-server-steam-private.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
Terraria/start-server-steam-private.bat
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral31
Sample
Terraria/start-server.bat
Resource
win10v2004-20260513-en
General
- Target Terraria/start-server-steam-friends.bat
- Size 145B
- Sample260811-13ectadr5y
- SHA256 162e2b50355f931f2b3004c4c3ed3a6a588d6f9fd66ead9e7c14e9bc31085955
- MD5 9292ea74c3a6f5b29db916a25e80181b
- SHA1 23defde0883a446a5ede1a48aeb0d9b28a91b89b
- SHA512 10716a64d90f5ba4e825d4af547ef28691881562d1aa6765209e3259406341723489f41e31aad9ed9d15f61c9fd9f5db3554c079656010bd62d30d1112103271
- TLSH T1ACC04C22681908AF8EB94C54E14201457F2945C305CF49514A5B26BA25806DD3636A1D
- MD5 SHA1 SHA512 TLSH
Malware Config
Signatures
- Boot or Logon Autostart Execution: Active Setup 2 TTPs 1 IoCs
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
description ioc Process Key created \REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000\Software\Microsoft\Active Setup\Installed Components Process not Found - Enumerates connected drives 3 TTPs 2 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\E: Process not Found File opened (read-only) \??\F: Process not Found - Executes a command shell one-liner 1 TTPs 1 IoCs
Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.
pid Process 436 cmd.exe - Program crash 64 IoCs
pid pid_target Process procid_target 4828 2788 WerFault.exe 89 2604 5044 WerFault.exe 93 3424 1576 WerFault.exe 96 2016 2968 WerFault.exe 99 2848 6068 WerFault.exe 102 3472 2840 WerFault.exe 105 5760 1084 WerFault.exe 108 2936 2612 WerFault.exe 111 1728 2304 WerFault.exe 114 1348 3140 WerFault.exe 118 4484 3924 WerFault.exe 121 1200 3168 WerFault.exe 124 3348 2224 WerFault.exe 127 1228 6092 WerFault.exe 130 5772 5884 WerFault.exe 133 4284 5468 WerFault.exe 136 5972 1260 WerFault.exe 139 3480 5084 WerFault.exe 142 4640 4644 WerFault.exe 145 5196 4972 WerFault.exe 148 4324 1684 WerFault.exe 151 3148 1800 WerFault.exe 154 3104 3468 WerFault.exe 157 2380 2272 WerFault.exe 160 5404 4160 WerFault.exe 163 1668 5800 WerFault.exe 166 4052 5352 WerFault.exe 169 4936 2736 WerFault.exe 172 1508 2988 WerFault.exe 175 1280 6120 WerFault.exe 178 5980 3684 WerFault.exe 181 5992 3152 WerFault.exe 184 476 4940 WerFault.exe 187 4880 2976 WerFault.exe 190 3356 4376 WerFault.exe 193 6012 6124 WerFault.exe 196 3928 4756 WerFault.exe 199 5620 1272 WerFault.exe 202 1804 4484 WerFault.exe 205 704 1200 WerFault.exe 208 3192 5564 WerFault.exe 211 4616 3760 WerFault.exe 214 2516 4132 WerFault.exe 217 4284 5772 WerFault.exe 220 5824 3200 WerFault.exe 223 1284 832 WerFault.exe 226 5576 4908 WerFault.exe 229 4104 1336 WerFault.exe 232 2924 5556 WerFault.exe 235 5984 3088 WerFault.exe 238 1960 3408 WerFault.exe 241 3360 1396 WerFault.exe 244 4600 2380 WerFault.exe 247 5356 4700 WerFault.exe 250 3948 1412 WerFault.exe 253 1608 5320 WerFault.exe 256 4828 440 WerFault.exe 259 1508 5316 WerFault.exe 262 5364 2880 WerFault.exe 265 4780 2868 WerFault.exe 268 2664 5328 WerFault.exe 271 476 5548 WerFault.exe 274 4880 6100 WerFault.exe 277 3416 256 WerFault.exe 280 - System Location Discovery: System Language Discovery 1 TTPs 64 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language TerrariaServer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language TerrariaServer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language TerrariaServer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language TerrariaServer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language TerrariaServer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language TerrariaServer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language TerrariaServer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language TerrariaServer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language TerrariaServer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language TerrariaServer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language TerrariaServer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language TerrariaServer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found - Checks SCSI registry key(s) 3 TTPs 62 IoCs
SCSI information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\005A Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{259abffc-50a7-47ce-af08-68c9a7d73366}\000C Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\005A Process not Found Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\UpperFilters Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{259abffc-50a7-47ce-af08-68c9a7d73366}\000C Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{8c7ed206-3f8a-4827-b3ab-ae9e1faefc6c}\0004 Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{540b947e-8b40-45bc-a8a2-6a0b894cbda2}\0009 Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Properties\{540b947e-8b40-45bc-a8a2-6a0b894cbda2}\0009 Process not Found Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{8c7ed206-3f8a-4827-b3ab-ae9e1faefc6c}\0004 Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{51236583-0c4a-4fe8-b81f-166aec13f510}\007A Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{cf73bb51-3abf-44a2-85e0-9a3dc7a12132}\0006 Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Properties\{51236583-0c4a-4fe8-b81f-166aec13f510}\007A Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000 Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{540b947e-8b40-45bc-a8a2-6a0b894cbda2}\0009 Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{51236583-0c4a-4fe8-b81f-166aec13f510}\007A Process not Found Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Capabilities Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{8c7ed206-3f8a-4827-b3ab-ae9e1faefc6c}\0002 Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{259abffc-50a7-47ce-af08-68c9a7d73366}\000C Process not Found Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\HardwareID Process not Found Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\FriendlyName Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000 Process not Found Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Capabilities Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Properties\{afd97640-86a3-4210-b67c-289c41aabe55}\0003 Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{8c7ed206-3f8a-4827-b3ab-ae9e1faefc6c}\0002 Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{cf73bb51-3abf-44a2-85e0-9a3dc7a12132}\0006 Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\005A Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000 Process not Found Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Capabilities Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{51236583-0c4a-4fe8-b81f-166aec13f510}\007A Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Properties\{51236583-0c4a-4fe8-b81f-166aec13f510}\0064 Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{afd97640-86a3-4210-b67c-289c41aabe55}\0002 Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{a45c254e-df1c-4efd-8020-67d146a850e0}\0011 Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002 Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A Process not Found Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\FriendlyName Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Properties\{8c7ed206-3f8a-4827-b3ab-ae9e1faefc6c}\0004 Process not Found Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\FriendlyName Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000 Process not Found Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\UpperFilters Process not Found Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\HardwareID Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{51236583-0c4a-4fe8-b81f-166aec13f510}\0064 Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{8c7ed206-3f8a-4827-b3ab-ae9e1faefc6c}\0004 Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{51236583-0c4a-4fe8-b81f-166aec13f510}\0064 Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001 Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\005A Process not Found Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Capabilities Process not Found Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\FriendlyName Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{cf73bb51-3abf-44a2-85e0-9a3dc7a12132}\0006 Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Properties\{cf73bb51-3abf-44a2-85e0-9a3dc7a12132}\0006 Process not Found Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags Process not Found Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\HardwareID Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{afd97640-86a3-4210-b67c-289c41aabe55}\0002 Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{540b947e-8b40-45bc-a8a2-6a0b894cbda2}\0009 Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A Process not Found Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\HardwareID Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{51236583-0c4a-4fe8-b81f-166aec13f510}\0064 Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Properties\{259abffc-50a7-47ce-af08-68c9a7d73366}\000C Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{afd97640-86a3-4210-b67c-289c41aabe55}\0003 Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{a45c254e-df1c-4efd-8020-67d146a850e0}\0011 Process not Found -
description ioc Process Key created \REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000\Software\Microsoft\Internet Explorer\Main Process not Found - Modifies registry class 38 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.startmenuexperiencehost_cw5n1h2txyewy\Internet Settings\Cache\History\CachePrefix = "Visited:" Process not Found Set value (str) \REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Settings\Cache\History\CachePrefix = "Visited:" Process not Found Key created \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1738198120-2966725515-3980530802-1000\{5AFDA458-18FE-4680-95D7-A97395A10C30} Process not Found Set value (str) \REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Settings\Cache\Cookies\CachePrefix = "Cookie:" Process not Found Key created \REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Explorer\DOMStorage\microsoftwindows.client.cbs Process not Found Key created \REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\TrayNotify Process not Found Set value (str) \REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.startmenuexperiencehost_cw5n1h2txyewy\Internet Settings\Cache\Cookies\CachePrefix = "Cookie:" Process not Found Set value (str) \REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Settings\Cache\Content\CachePrefix Process not Found Key created \REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Explorer\DOMStorage\Total Process not Found Set value (int) \REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Explorer\DOMStorage\client.cbs\Total = "56" Process not Found Key created \REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Local Settings Process not Found Key created \REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Explorer\DOMStorage\client.cbs Process not Found Set value (int) \REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Explorer\DOMStorage\microsoftwindows.client.cbs\ = "56" Process not Found Set value (data) \REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 02 Process not Found Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3ADD1653-EB32-4cb0-BBD7-DFA0ABB5ACCA}\Instance\ Process not Found Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance\ Process not Found Set value (str) \REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.startmenuexperiencehost_cw5n1h2txyewy\Internet Settings\Cache\Content\CachePrefix Process not Found Key created \REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Local Settings\MuiCache Process not Found Key created \REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Explorer\EdpDomStorage Process not Found Key created \REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Explorer\EdpDomStorage\client.cbs Process not Found Set value (int) \REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Explorer\DOMStorage\Total\ = "23" Process not Found Key created \REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU Process not Found Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1CF1260C-4DD0-4ebb-811F-33C572699FDE}\Instance\ Process not Found Key created \REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell Process not Found Set value (data) \REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 00000000ffffffff Process not Found Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A0953C92-50DC-43bf-BE83-3742FED03C9C}\Instance\ Process not Found Key created \REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Local Settings\MuiCache Process not Found Key created \REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Explorer\DOMStorage Process not Found Key created \REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Explorer\DomStorageState Process not Found Set value (int) \REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Explorer\DOMStorage\Total\ = "56" Process not Found Set value (int) \REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Explorer\DOMStorage\microsoftwindows.client.cbs\ = "23" Process not Found Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\Instance\ Process not Found Key created \REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Explorer\EdpDomStorage\microsoftwindows.client.cbs Process not Found Key created \REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Explorer\EdpDomStorage\Total Process not Found Set value (int) \REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Explorer\DOMStorage\client.cbs\Total = "23" Process not Found Key created \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1738198120-2966725515-3980530802-1000\{DF6FA66C-6A57-4C14-B359-2E24367E1FB6} Process not Found Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\ Process not Found Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{374DE290-123F-4565-9164-39C4925E467B}\Instance\ Process not Found - Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 6584 Process not Found 6584 Process not Found - Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: SeShutdownPrivilege 6584 Process not Found Token: SeCreatePagefilePrivilege 6584 Process not Found Token: SeShutdownPrivilege 6584 Process not Found Token: SeCreatePagefilePrivilege 6584 Process not Found Token: SeShutdownPrivilege 6584 Process not Found Token: SeCreatePagefilePrivilege 6584 Process not Found Token: SeShutdownPrivilege 6584 Process not Found Token: SeCreatePagefilePrivilege 6584 Process not Found Token: SeShutdownPrivilege 6584 Process not Found Token: SeCreatePagefilePrivilege 6584 Process not Found Token: SeShutdownPrivilege 6584 Process not Found Token: SeCreatePagefilePrivilege 6584 Process not Found Token: SeShutdownPrivilege 6584 Process not Found Token: SeCreatePagefilePrivilege 6584 Process not Found Token: SeShutdownPrivilege 6584 Process not Found Token: SeCreatePagefilePrivilege 6584 Process not Found Token: SeShutdownPrivilege 6584 Process not Found Token: SeCreatePagefilePrivilege 6584 Process not Found Token: SeShutdownPrivilege 6584 Process not Found Token: SeCreatePagefilePrivilege 6584 Process not Found Token: SeShutdownPrivilege 6584 Process not Found Token: SeCreatePagefilePrivilege 6584 Process not Found Token: SeShutdownPrivilege 6584 Process not Found Token: SeCreatePagefilePrivilege 6584 Process not Found Token: SeShutdownPrivilege 6584 Process not Found Token: SeCreatePagefilePrivilege 6584 Process not Found Token: SeShutdownPrivilege 6584 Process not Found Token: SeCreatePagefilePrivilege 6584 Process not Found Token: SeShutdownPrivilege 6584 Process not Found Token: SeCreatePagefilePrivilege 6584 Process not Found Token: SeShutdownPrivilege 6584 Process not Found Token: SeCreatePagefilePrivilege 6584 Process not Found Token: SeShutdownPrivilege 6584 Process not Found Token: SeCreatePagefilePrivilege 6584 Process not Found Token: SeShutdownPrivilege 6584 Process not Found Token: SeCreatePagefilePrivilege 6584 Process not Found Token: SeShutdownPrivilege 6584 Process not Found Token: SeCreatePagefilePrivilege 6584 Process not Found Token: SeShutdownPrivilege 6584 Process not Found Token: SeCreatePagefilePrivilege 6584 Process not Found Token: SeShutdownPrivilege 6584 Process not Found Token: SeCreatePagefilePrivilege 6584 Process not Found Token: SeShutdownPrivilege 6584 Process not Found Token: SeCreatePagefilePrivilege 6584 Process not Found Token: SeShutdownPrivilege 6584 Process not Found Token: SeCreatePagefilePrivilege 6584 Process not Found Token: SeShutdownPrivilege 6584 Process not Found Token: SeCreatePagefilePrivilege 6584 Process not Found Token: SeShutdownPrivilege 6584 Process not Found Token: SeCreatePagefilePrivilege 6584 Process not Found Token: SeShutdownPrivilege 6584 Process not Found Token: SeCreatePagefilePrivilege 6584 Process not Found Token: SeShutdownPrivilege 6584 Process not Found Token: SeCreatePagefilePrivilege 6584 Process not Found Token: SeShutdownPrivilege 6584 Process not Found Token: SeCreatePagefilePrivilege 6584 Process not Found Token: SeShutdownPrivilege 6584 Process not Found Token: SeCreatePagefilePrivilege 6584 Process not Found Token: SeShutdownPrivilege 6584 Process not Found Token: SeCreatePagefilePrivilege 6584 Process not Found Token: SeShutdownPrivilege 6584 Process not Found Token: SeCreatePagefilePrivilege 6584 Process not Found Token: SeShutdownPrivilege 6584 Process not Found Token: SeCreatePagefilePrivilege 6584 Process not Found - Suspicious use of FindShellTrayWindow 52 IoCs
pid Process 6188 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found - Suspicious use of SendNotifyMessage 45 IoCs
pid Process 6584 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found 6584 Process not Found - Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 7072 Process not Found 6584 Process not Found 3404 Process not Found - Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 436 wrote to memory of 2788 436 cmd.exe 89 PID 436 wrote to memory of 5044 436 cmd.exe 93 PID 436 wrote to memory of 1576 436 cmd.exe 96 PID 436 wrote to memory of 2968 436 cmd.exe 99 PID 436 wrote to memory of 6068 436 cmd.exe 102 PID 436 wrote to memory of 2840 436 cmd.exe 105 PID 436 wrote to memory of 1084 436 cmd.exe 108 PID 436 wrote to memory of 2612 436 cmd.exe 111 PID 436 wrote to memory of 2304 436 cmd.exe 114 PID 436 wrote to memory of 3140 436 cmd.exe 118 PID 436 wrote to memory of 3924 436 cmd.exe 121 PID 436 wrote to memory of 3168 436 cmd.exe 124 PID 436 wrote to memory of 2224 436 cmd.exe 127 PID 436 wrote to memory of 6092 436 cmd.exe 130 PID 436 wrote to memory of 5884 436 cmd.exe 133 PID 436 wrote to memory of 5468 436 cmd.exe 136 PID 436 wrote to memory of 1260 436 cmd.exe 139 PID 436 wrote to memory of 5084 436 cmd.exe 142 PID 436 wrote to memory of 4644 436 cmd.exe 145 PID 436 wrote to memory of 4972 436 cmd.exe 148 PID 436 wrote to memory of 1684 436 cmd.exe 151 PID 436 wrote to memory of 1800 436 cmd.exe 154 PID 436 wrote to memory of 3468 436 cmd.exe 157 PID 436 wrote to memory of 2272 436 cmd.exe 160 PID 436 wrote to memory of 4160 436 cmd.exe 163 PID 436 wrote to memory of 5800 436 cmd.exe 166 PID 436 wrote to memory of 5352 436 cmd.exe 169 PID 436 wrote to memory of 2736 436 cmd.exe 172 PID 436 wrote to memory of 2988 436 cmd.exe 175 PID 436 wrote to memory of 6120 436 cmd.exe 178 PID 436 wrote to memory of 3684 436 cmd.exe 181 PID 436 wrote to memory of 3152 436 cmd.exe 184 PID 436 wrote to memory of 4940 436 cmd.exe 187 PID 436 wrote to memory of 2976 436 cmd.exe 190 PID 436 wrote to memory of 4376 436 cmd.exe 193 PID 436 wrote to memory of 6124 436 cmd.exe 196 PID 436 wrote to memory of 4756 436 cmd.exe 199 PID 436 wrote to memory of 1272 436 cmd.exe 202 PID 436 wrote to memory of 4484 436 cmd.exe 205 PID 436 wrote to memory of 1200 436 cmd.exe 208 PID 436 wrote to memory of 5564 436 cmd.exe 211 PID 436 wrote to memory of 3760 436 cmd.exe 214 PID 436 wrote to memory of 4132 436 cmd.exe 217 PID 436 wrote to memory of 5772 436 cmd.exe 220 PID 436 wrote to memory of 3200 436 cmd.exe 223 PID 436 wrote to memory of 832 436 cmd.exe 226 PID 436 wrote to memory of 4908 436 cmd.exe 229 PID 436 wrote to memory of 1336 436 cmd.exe 232 PID 436 wrote to memory of 5556 436 cmd.exe 235 PID 436 wrote to memory of 3088 436 cmd.exe 238 PID 436 wrote to memory of 3408 436 cmd.exe 241 PID 436 wrote to memory of 1396 436 cmd.exe 244 PID 436 wrote to memory of 2380 436 cmd.exe 247 PID 436 wrote to memory of 4700 436 cmd.exe 250 PID 436 wrote to memory of 1412 436 cmd.exe 253 PID 436 wrote to memory of 5320 436 cmd.exe 256 PID 436 wrote to memory of 440 436 cmd.exe 259 PID 436 wrote to memory of 5316 436 cmd.exe 262 PID 436 wrote to memory of 2880 436 cmd.exe 265 PID 436 wrote to memory of 2868 436 cmd.exe 268 PID 436 wrote to memory of 5328 436 cmd.exe 271 PID 436 wrote to memory of 5548 436 cmd.exe 274 PID 436 wrote to memory of 6100 436 cmd.exe 277 PID 436 wrote to memory of 256 436 cmd.exe 280 - Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
- Uses Volume Shadow Copy WMI provider
The Volume Shadow Copy service is used to manage backups/snapshots.
- Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
Processes
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Terraria\start-server-steam-friends.bat"1⤵
- Executes a command shell one-liner
- Suspicious use of WriteProcessMemory
PID:436 -
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:2788
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2788 -s 9123⤵
- Program crash
PID:4828
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:5044
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5044 -s 8883⤵
- Program crash
PID:2604
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:1576
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1576 -s 8923⤵
- Program crash
PID:3424
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:2968
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2968 -s 8843⤵
- Program crash
PID:2016
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:6068
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 6068 -s 8843⤵
- Program crash
PID:2848
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:2840
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2840 -s 8883⤵
- Program crash
PID:3472
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:1084
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1084 -s 8843⤵
- Program crash
PID:5760
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:2612
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2612 -s 8843⤵
- Program crash
PID:2936
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:2304
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2304 -s 8883⤵
- Program crash
PID:1728
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:3140
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3140 -s 8843⤵
- Program crash
PID:1348
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:3924
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3924 -s 8843⤵
- Program crash
PID:4484
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:3168
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3168 -s 8883⤵
- Program crash
PID:1200
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:2224
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2224 -s 8843⤵
- Program crash
PID:3348
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:6092
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 6092 -s 8843⤵
- Program crash
PID:1228
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:5884
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5884 -s 8843⤵
- Program crash
PID:5772
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:5468
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5468 -s 8883⤵
- Program crash
PID:4284
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:1260
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1260 -s 8843⤵
- Program crash
PID:5972
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:5084
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5084 -s 8843⤵
- Program crash
PID:3480
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:4644
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4644 -s 8843⤵
- Program crash
PID:4640
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:4972
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4972 -s 8883⤵
- Program crash
PID:5196
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:1684
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1684 -s 8883⤵
- Program crash
PID:4324
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:1800
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1800 -s 8843⤵
- Program crash
PID:3148
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:3468
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3468 -s 8843⤵
- Program crash
PID:3104
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:2272
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2272 -s 8843⤵
- Program crash
PID:2380
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:4160
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4160 -s 8843⤵
- Program crash
PID:5404
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:5800
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5800 -s 8883⤵
- Program crash
PID:1668
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:5352
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5352 -s 8843⤵
- Program crash
PID:4052
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:2736
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2736 -s 8883⤵
- Program crash
PID:4936
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:2988
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2988 -s 8843⤵
- Program crash
PID:1508
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:6120
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 6120 -s 8883⤵
- Program crash
PID:1280
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:3684
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3684 -s 8883⤵
- Program crash
PID:5980
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:3152
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3152 -s 8843⤵
- Program crash
PID:5992
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:4940
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4940 -s 8843⤵
- Program crash
PID:476
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:2976
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2976 -s 8843⤵
- Program crash
PID:4880
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:4376
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4376 -s 8843⤵
- Program crash
PID:3356
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:6124
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 6124 -s 8843⤵
- Program crash
PID:6012
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:4756
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4756 -s 8843⤵
- Program crash
PID:3928
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:1272
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1272 -s 8843⤵
- Program crash
PID:5620
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:4484
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4484 -s 8843⤵
- Program crash
PID:1804
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:1200
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1200 -s 8843⤵
- Program crash
PID:704
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:5564
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5564 -s 8843⤵
- Program crash
PID:3192
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:3760
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3760 -s 8843⤵
- Program crash
PID:4616
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵
- System Location Discovery: System Language Discovery
PID:4132 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4132 -s 8883⤵
- Program crash
PID:2516
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:5772
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5772 -s 8883⤵
- Program crash
PID:4284
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:3200
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3200 -s 8843⤵
- Program crash
PID:5824
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:832
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 832 -s 8843⤵
- Program crash
PID:1284
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:4908
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4908 -s 8843⤵
- Program crash
PID:5576
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:1336
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1336 -s 8883⤵
- Program crash
PID:4104
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵
- System Location Discovery: System Language Discovery
PID:5556 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5556 -s 8843⤵
- Program crash
PID:2924
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:3088
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3088 -s 8883⤵
- Program crash
PID:5984
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:3408
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3408 -s 8883⤵
- Program crash
PID:1960
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:1396
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1396 -s 8843⤵
- Program crash
PID:3360
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:2380
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2380 -s 8843⤵
- Program crash
PID:4600
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:4700
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4700 -s 8843⤵
- Program crash
PID:5356
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:1412
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1412 -s 8843⤵
- Program crash
PID:3948
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:5320
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5320 -s 8843⤵
- Program crash
PID:1608
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:440
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 440 -s 8843⤵
- Program crash
PID:4828
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:5316
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5316 -s 8883⤵
- Program crash
PID:1508
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:2880
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2880 -s 8843⤵
- Program crash
PID:5364
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:2868
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2868 -s 8843⤵
- Program crash
PID:4780
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:5328
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5328 -s 8843⤵
- Program crash
PID:2664
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:5548
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5548 -s 8843⤵
- Program crash
PID:476
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:6100
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 6100 -s 8883⤵
- Program crash
PID:4880
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:256
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 256 -s 8843⤵
- Program crash
PID:3416
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:2068
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2068 -s 8883⤵PID:876
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:4796
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4796 -s 8843⤵PID:2028
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:4156
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4156 -s 8883⤵PID:5876
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:4060
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4060 -s 8843⤵PID:3400
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:4728
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4728 -s 8883⤵PID:4768
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:5516
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5516 -s 8843⤵PID:4092
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:1804
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1804 -s 8883⤵PID:704
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:5392
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5392 -s 8883⤵PID:2556
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:4204
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4204 -s 8843⤵PID:4616
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:4452
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4452 -s 8843⤵PID:3312
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵
- System Location Discovery: System Language Discovery
PID:2340 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2340 -s 8843⤵PID:960
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:5536
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5536 -s 8843⤵PID:3524
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:5268
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5268 -s 8843⤵PID:3932
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:5412
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5412 -s 8843⤵PID:5756
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:2144
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2144 -s 8843⤵PID:3680
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵
- System Location Discovery: System Language Discovery
PID:4324 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4324 -s 8843⤵PID:4072
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:5916
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5916 -s 8843⤵PID:4348
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:5632
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5632 -s 8883⤵PID:4776
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:1636
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1636 -s 8883⤵PID:4184
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:3360
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3360 -s 8843⤵PID:2584
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:5560
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5560 -s 8843⤵PID:5332
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:2756
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2756 -s 8843⤵PID:3948
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:5872
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5872 -s 8883⤵PID:2424
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:3320
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3320 -s 8843⤵PID:4220
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:1132
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1132 -s 8843⤵PID:884
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:980
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 980 -s 8843⤵PID:5980
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:4780
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4780 -s 8843⤵PID:4264
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:2664
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2664 -s 8843⤵PID:1888
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:476
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 476 -s 8843⤵PID:4188
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:1592
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1592 -s 8843⤵PID:3112
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:2240
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2240 -s 8843⤵PID:1172
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:5708
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5708 -s 8843⤵PID:1324
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:5004
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5004 -s 8843⤵PID:6012
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:3928
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3928 -s 8843⤵PID:3400
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:4056
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4056 -s 8843⤵PID:3824
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:4192
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4192 -s 8843⤵PID:3796
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:1108
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1108 -s 8843⤵PID:4572
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:3828
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3828 -s 8883⤵PID:764
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:3692
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3692 -s 8843⤵PID:3208
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:2516
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2516 -s 8843⤵PID:2592
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:2104
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2104 -s 8843⤵PID:5780
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:2376
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2376 -s 8843⤵PID:3428
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:3932
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3932 -s 8843⤵PID:3812
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:2904
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2904 -s 8843⤵PID:3680
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:4380
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4380 -s 8843⤵PID:2040
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:4580
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4580 -s 8843⤵PID:4832
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:3068
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3068 -s 8843⤵PID:5984
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:3852
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3852 -s 8843⤵PID:3676
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:2184
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2184 -s 8843⤵PID:1848
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:5448
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5448 -s 8883⤵PID:2832
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:2960
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2960 -s 8843⤵PID:1676
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:4520
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4520 -s 8883⤵PID:1148
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:1328
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1328 -s 8843⤵PID:1508
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:3424
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3424 -s 8843⤵PID:5420
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:5048
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5048 -s 8843⤵PID:3392
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:4372
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4372 -s 8843⤵PID:4304
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:1888
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1888 -s 8883⤵PID:5572
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:6060
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 6060 -s 8883⤵PID:3112
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:1860
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1860 -s 8883⤵PID:3396
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:1312
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1312 -s 8843⤵PID:4236
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:4488
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4488 -s 8843⤵PID:5880
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵
- System Location Discovery: System Language Discovery
PID:6076 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 6076 -s 8843⤵PID:4468
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:5620
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5620 -s 8843⤵PID:5788
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:5072
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5072 -s 8843⤵PID:3796
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:704
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 704 -s 8843⤵PID:2556
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:1484
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1484 -s 8843⤵PID:3080
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:2592
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2592 -s 8883⤵PID:2544
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:4628
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4628 -s 8843⤵PID:1936
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:4692
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4692 -s 8883⤵PID:5764
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:1584
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1584 -s 8883⤵PID:4708
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:2480
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2480 -s 8883⤵PID:1512
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵
- System Location Discovery: System Language Discovery
PID:1424 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1424 -s 8843⤵PID:3576
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:4432
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4432 -s 8843⤵PID:3956
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:4652
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4652 -s 8843⤵PID:4228
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:3148
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3148 -s 8843⤵PID:3104
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:1848
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1848 -s 8883⤵PID:2768
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:5636
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5636 -s 8883⤵PID:1608
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:2796
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2796 -s 8883⤵PID:2424
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:4444
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4444 -s 8883⤵PID:4936
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:2604
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2604 -s 8843⤵PID:3012
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:5980
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5980 -s 8843⤵PID:5020
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:2052
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2052 -s 8883⤵PID:5540
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:5964
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5964 -s 8843⤵PID:2804
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:240
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 240 -s 8843⤵PID:3704
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:3416
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3416 -s 8883⤵PID:2872
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:4760
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4760 -s 8843⤵PID:5876
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:3864
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3864 -s 8843⤵PID:3508
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:3716
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3716 -s 8843⤵PID:5464
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:5580
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5580 -s 8883⤵PID:4952
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:2696
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2696 -s 8843⤵PID:2076
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:3856
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3856 -s 8843⤵PID:2556
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:4572
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4572 -s 8843⤵PID:6056
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:1928
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1928 -s 8843⤵PID:5312
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:4140
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4140 -s 8843⤵PID:4436
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵
- System Location Discovery: System Language Discovery
PID:2320 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2320 -s 8843⤵PID:5436
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:4612
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4612 -s 8843⤵PID:944
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:3844
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3844 -s 8843⤵PID:1796
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:2984
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2984 -s 8843⤵PID:716
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:3576
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3576 -s 8843⤵PID:2372
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:4528
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4528 -s 8843⤵PID:4228
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:1948
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1948 -s 8843⤵PID:480
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:4984
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4984 -s 8883⤵PID:2356
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:4164
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4164 -s 8843⤵PID:5116
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:4828
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4828 -s 8843⤵PID:4124
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:4448
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4448 -s 8843⤵PID:2440
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:2672
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2672 -s 8843⤵PID:4684
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:3472
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3472 -s 8843⤵PID:2780
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:2400
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2400 -s 8843⤵PID:4176
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:3180
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3180 -s 8843⤵PID:3188
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:1172
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1172 -s 8843⤵PID:1504
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:1464
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1464 -s 8883⤵PID:2936
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:6012
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 6012 -s 8843⤵PID:4512
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:2608
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2608 -s 8883⤵PID:5788
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:4904
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4904 -s 8883⤵PID:4316
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:5212
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5212 -s 9523⤵PID:6048
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:1348
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1348 -s 8883⤵PID:2336
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:2556
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2556 -s 8843⤵PID:3784
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:4240
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4240 -s 8923⤵PID:4672
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:5828
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5828 -s 8883⤵PID:3076
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:4704
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4704 -s 8843⤵PID:1940
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:5628
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5628 -s 8883⤵PID:1544
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:5324
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5324 -s 8883⤵PID:5584
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:4636
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4636 -s 8843⤵PID:4792
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:5576
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5576 -s 8843⤵PID:4072
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:4044
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4044 -s 8843⤵PID:3992
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:3972
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3972 -s 8843⤵PID:4976
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:1264
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1264 -s 8883⤵PID:2372
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:5452
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5452 -s 8883⤵PID:5984
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:2344
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2344 -s 8843⤵PID:3108
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:5888
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5888 -s 8843⤵PID:3260
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:2140
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2140 -s 8843⤵PID:720
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:2972
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2972 -s 8843⤵PID:4220
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:4864
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4864 -s 8843⤵PID:1932
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:4264
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4264 -s 8883⤵PID:1984
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:3740
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3740 -s 8883⤵PID:4588
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:3188
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3188 -s 8883⤵PID:3036
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:3660
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3660 -s 8843⤵PID:1072
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:1856
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1856 -s 8843⤵PID:1728
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:1028
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1028 -s 8843⤵PID:1176
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:2436
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2436 -s 8843⤵PID:3664
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:5060
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5060 -s 8923⤵PID:3900
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:4328
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4328 -s 8843⤵PID:3268
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:3604
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3604 -s 8883⤵PID:3208
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:4092
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4092 -s 8843⤵PID:3276
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:4964
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4964 -s 8843⤵PID:4436
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:5928
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5928 -s 8843⤵PID:5508
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:5192
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5192 -s 8843⤵PID:1544
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:5504
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5504 -s 8843⤵PID:5864
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:4500
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4500 -s 8843⤵PID:1680
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:2268
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2268 -s 8843⤵PID:4000
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:3976
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3976 -s 8843⤵PID:3328
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:6112
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 6112 -s 8843⤵PID:2676
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:2372
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2372 -s 8843⤵PID:4228
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:1596
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1596 -s 8843⤵PID:5124
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:3108
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3108 -s 8843⤵PID:3260
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:2624
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2624 -s 8843⤵PID:720
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:3236
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3236 -s 8843⤵PID:4888
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:2860
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2860 -s 8843⤵PID:5992
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:4816
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4816 -s 8843⤵PID:1984
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:5960
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5960 -s 8843⤵PID:4588
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:3820
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3820 -s 8843⤵PID:268
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:5676
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5676 -s 8843⤵PID:3704
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:3400
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3400 -s 8843⤵PID:1524
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:5868
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5868 -s 8843⤵PID:5876
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:5012
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5012 -s 8883⤵PID:3508
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:4120
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4120 -s 8843⤵PID:3804
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:3348
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3348 -s 8923⤵PID:1968
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:3080
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3080 -s 8843⤵PID:6096
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:4672
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4672 -s 8843⤵PID:5408
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:4276
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4276 -s 8843⤵PID:3812
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:5600
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5600 -s 8843⤵PID:4884
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:432
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 432 -s 8843⤵PID:2512
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:4224
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4224 -s 8843⤵PID:3952
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:4020
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4020 -s 8843⤵PID:4032
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:4668
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4668 -s 8843⤵PID:4300
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:2676
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2676 -s 8843⤵PID:1960
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:4200
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4200 -s 8843⤵PID:4928
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:5156
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5156 -s 8843⤵PID:5332
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:5852
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5852 -s 8843⤵PID:2980
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:1104
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1104 -s 8843⤵PID:4084
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:2016
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2016 -s 8843⤵PID:252
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:4764
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4764 -s 8843⤵PID:1944
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:2824
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2824 -s 8843⤵PID:5088
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:2560
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2560 -s 8763⤵PID:4468
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:2936
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2936 -s 8883⤵PID:3396
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:4660
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4660 -s 8883⤵PID:5876
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:5464
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5464 -s 8843⤵PID:3160
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:4648
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4648 -s 8843⤵PID:4100
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:4956
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4956 -s 8843⤵PID:3528
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:3268
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3268 -s 8843⤵PID:4548
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:1844
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1844 -s 8843⤵PID:1688
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:2820
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2820 -s 8643⤵PID:2712
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:6020
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 6020 -s 8883⤵PID:1940
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:1384
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1384 -s 8843⤵PID:3516
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵
- System Location Discovery: System Language Discovery
PID:3680 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3680 -s 8883⤵PID:4720
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:3444
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3444 -s 8843⤵PID:608
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:1244
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1244 -s 8843⤵PID:4040
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:4012
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4012 -s 8883⤵PID:3384
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:3332
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3332 -s 8843⤵PID:5140
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:1008
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1008 -s 8843⤵PID:3832
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:3536
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3536 -s 8843⤵PID:3380
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:1044
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1044 -s 8843⤵PID:5588
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:52
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 52 -s 8843⤵PID:5776
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:5760
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5760 -s 8843⤵PID:1280
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:5784
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5784 -s 8963⤵PID:1196
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:5056
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5056 -s 8843⤵PID:3036
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:5088
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5088 -s 8843⤵PID:4068
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:1072
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1072 -s 8843⤵PID:4512
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:4924
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4924 -s 8843⤵PID:3000
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:3824
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3824 -s 8843⤵PID:3160
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵
- System Location Discovery: System Language Discovery
PID:4604 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4604 -s 8843⤵PID:3900
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:3292
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3292 -s 8843⤵PID:4732
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:1768
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1768 -s 8883⤵PID:4524
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:3784
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3784 -s 8883⤵PID:3480
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:3276
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3276 -s 8843⤵PID:2704
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:2564
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2564 -s 8843⤵PID:3428
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:4260
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4260 -s 8843⤵PID:2008
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:1792
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1792 -s 8843⤵PID:5400
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:4008
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4008 -s 8843⤵PID:4128
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:2308
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2308 -s 8923⤵PID:1632
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:4016
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4016 -s 8843⤵PID:3696
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵
- System Location Discovery: System Language Discovery
PID:3328 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3328 -s 8843⤵PID:3832
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:2632
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2632 -s 8843⤵PID:4928
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:2424
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2424 -s 8843⤵PID:4212
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:4888
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4888 -s 8843⤵PID:880
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:4304
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4304 -s 8843⤵PID:4836
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:2848
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2848 -s 8843⤵PID:1932
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:1644
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1644 -s 8843⤵PID:5368
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:2484
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2484 -s 8843⤵PID:1380
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:4588
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4588 -s 8843⤵PID:3772
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:4332
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4332 -s 8843⤵PID:4108
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:5952
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5952 -s 8843⤵PID:4952
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:1448
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1448 -s 8843⤵PID:3136
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:3764
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3764 -s 8843⤵PID:3528
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:864
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 864 -s 8843⤵PID:4548
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:2544
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2544 -s 8843⤵PID:3208
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:1416
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1416 -s 8843⤵PID:3812
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:5820
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5820 -s 8843⤵PID:3240
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:4708
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4708 -s 8883⤵PID:2180
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:4844
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4844 -s 8843⤵PID:3952
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵
- System Location Discovery: System Language Discovery
PID:1680 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1680 -s 8883⤵PID:4128
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:5240
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5240 -s 8843⤵PID:4312
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:5896
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5896 -s 8843⤵PID:2040
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:6072
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 6072 -s 8843⤵PID:4896
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:5488
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5488 -s 8843⤵PID:1824
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:1668
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1668 -s 8843⤵PID:4212
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:5116
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5116 -s 8843⤵PID:2784
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:3300
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3300 -s 8843⤵PID:3252
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:5420
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5420 -s 8843⤵PID:3356
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:5368
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5368 -s 8843⤵PID:5244
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:6084
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 6084 -s 8883⤵PID:1220
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:1780
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1780 -s 8843⤵PID:5876
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:6016
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 6016 -s 8843⤵PID:6048
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:4952
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4952 -s 8843⤵PID:260
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:3136
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3136 -s 8843⤵PID:3668
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:3900
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3900 -s 8843⤵PID:5312
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:5248
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5248 -s 8843⤵PID:2076
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:5972
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5972 -s 8883⤵PID:5824
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:3480
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3480 -s 8843⤵PID:3240
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:3084
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3084 -s 8843⤵PID:5864
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵
- System Location Discovery: System Language Discovery
PID:4624 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4624 -s 8843⤵PID:5672
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:4148
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4148 -s 8883⤵PID:3052
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:4832
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4832 -s 8843⤵PID:716
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:5404
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5404 -s 8843⤵PID:724
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:1152
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1152 -s 8883⤵PID:3456
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:1608
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1608 -s 8843⤵PID:5612
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:5332
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5332 -s 8843⤵PID:1852
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:5100
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5100 -s 8883⤵PID:4084
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:4176
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4176 -s 8843⤵PID:2928
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:2804
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2804 -s 8843⤵PID:1656
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:1380
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1380 -s 8883⤵PID:1524
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:6004
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 6004 -s 8843⤵PID:1176
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:5876
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5876 -s 8843⤵PID:1436
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:4108
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4108 -s 8843⤵PID:4608
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:5104
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5104 -s 8843⤵PID:3528
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:4352
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4352 -s 8843⤵PID:4548
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby friends -config serverconfig.txt2⤵PID:4912
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4912 -s 8843⤵PID:2336
-
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 2788 -ip 27881⤵PID:2764
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 580 -p 5044 -ip 50441⤵PID:2440
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 540 -p 1576 -ip 15761⤵PID:4216
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 544 -p 2968 -ip 29681⤵PID:3684
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 6068 -ip 60681⤵PID:3152
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 608 -p 2840 -ip 28401⤵PID:4112
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 564 -p 1084 -ip 10841⤵PID:2532
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 632 -p 2612 -ip 26121⤵PID:1592
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 540 -p 2304 -ip 23041⤵PID:1028
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 656 -p 3140 -ip 31401⤵PID:3928
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 608 -p 3924 -ip 39241⤵PID:3000
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 616 -p 3168 -ip 31681⤵PID:2124
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 608 -p 2224 -ip 22241⤵PID:4572
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 552 -p 6092 -ip 60921⤵PID:3192
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 648 -p 5884 -ip 58841⤵PID:1080
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 628 -p 5468 -ip 54681⤵PID:2320
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1260 -ip 12601⤵PID:4704
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 616 -p 5084 -ip 50841⤵PID:1940
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 604 -p 4644 -ip 46441⤵PID:4168
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 612 -p 4972 -ip 49721⤵PID:1336
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 612 -p 1684 -ip 16841⤵PID:5228
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 588 -p 1800 -ip 18001⤵PID:1792
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 544 -p 3468 -ip 34681⤵PID:4776
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 584 -p 2272 -ip 22721⤵PID:480
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 544 -p 4160 -ip 41601⤵PID:1848
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 648 -p 5800 -ip 58001⤵PID:6116
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 624 -p 5352 -ip 53521⤵PID:5808
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 624 -p 2736 -ip 27361⤵PID:5156
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 668 -p 2988 -ip 29881⤵PID:4968
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 668 -p 6120 -ip 61201⤵PID:5020
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 544 -p 3684 -ip 36841⤵PID:2016
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 672 -p 3152 -ip 31521⤵PID:2848
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 592 -p 4940 -ip 49401⤵PID:2824
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 684 -p 2976 -ip 29761⤵PID:5056
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 4376 -ip 43761⤵PID:3704
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 612 -p 6124 -ip 61241⤵PID:1312
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 648 -p 4756 -ip 47561⤵PID:4332
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 612 -p 1272 -ip 12721⤵PID:5788
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 632 -p 4484 -ip 44841⤵PID:6048
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 604 -p 1200 -ip 12001⤵PID:1376
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 684 -p 5564 -ip 55641⤵PID:4256
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 640 -p 3760 -ip 37601⤵PID:1204
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 604 -p 4132 -ip 41321⤵PID:1080
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 640 -p 5772 -ip 57721⤵PID:5968
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 656 -p 3200 -ip 32001⤵PID:2376
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 656 -p 832 -ip 8321⤵PID:4464
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 4908 -ip 49081⤵PID:3812
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 1336 -ip 13361⤵PID:5196
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 648 -p 5556 -ip 55561⤵PID:2180
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 648 -p 3088 -ip 30881⤵PID:3040
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 664 -p 3408 -ip 34081⤵PID:1948
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 584 -p 1396 -ip 13961⤵PID:200
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2380 -ip 23801⤵PID:2624
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 608 -p 4700 -ip 47001⤵PID:4200
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 632 -p 1412 -ip 14121⤵PID:5116
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 648 -p 5320 -ip 53201⤵PID:4784
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 612 -p 440 -ip 4401⤵PID:2440
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 636 -p 5316 -ip 53161⤵PID:4396
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 572 -p 2880 -ip 28801⤵PID:2672
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 572 -p 2868 -ip 28681⤵PID:4816
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 628 -p 5328 -ip 53281⤵PID:1660
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 612 -p 5548 -ip 55481⤵PID:4304
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 600 -p 6100 -ip 61001⤵PID:3820
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 584 -p 256 -ip 2561⤵PID:3252
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 684 -p 2068 -ip 20681⤵PID:3036
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 632 -p 4796 -ip 47961⤵PID:1812
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 664 -p 4156 -ip 41561⤵PID:1580
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 620 -p 4060 -ip 40601⤵PID:4512
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4728 -ip 47281⤵PID:2060
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 620 -p 5516 -ip 55161⤵PID:6048
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 628 -p 1804 -ip 18041⤵PID:3020
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 672 -p 5392 -ip 53921⤵PID:5380
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 664 -p 4204 -ip 42041⤵PID:4240
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 628 -p 4452 -ip 44521⤵PID:3528
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 612 -p 2340 -ip 23401⤵PID:1844
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 620 -p 5536 -ip 55361⤵PID:5780
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 656 -p 5268 -ip 52681⤵PID:4704
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 684 -p 5412 -ip 54121⤵PID:2884
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 552 -p 2144 -ip 21441⤵PID:2480
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 536 -p 4324 -ip 43241⤵PID:3432
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 584 -p 5916 -ip 59161⤵PID:5400
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 584 -p 5632 -ip 56321⤵PID:1948
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 604 -p 1636 -ip 16361⤵PID:200
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 540 -p 3360 -ip 33601⤵PID:2184
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 612 -p 5560 -ip 55601⤵PID:4200
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 600 -p 2756 -ip 27561⤵PID:2768
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 628 -p 5872 -ip 58721⤵PID:1664
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 608 -p 3320 -ip 33201⤵PID:4828
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 544 -p 1132 -ip 11321⤵PID:4448
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 656 -p 980 -ip 9801⤵PID:1104
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 572 -p 4780 -ip 47801⤵PID:4340
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 552 -p 2664 -ip 26641⤵PID:1644
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 536 -p 476 -ip 4761⤵PID:2400
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 584 -p 1592 -ip 15921⤵PID:240
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 584 -p 2240 -ip 22401⤵PID:1476
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 636 -p 5708 -ip 57081⤵PID:1780
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 672 -p 5004 -ip 50041⤵PID:2608
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 636 -p 3928 -ip 39281⤵PID:3664
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 552 -p 4056 -ip 40561⤵PID:5212
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 684 -p 4192 -ip 41921⤵PID:5072
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 632 -p 1108 -ip 11081⤵PID:4208
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 552 -p 3828 -ip 38281⤵PID:2056
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 608 -p 3692 -ip 36921⤵PID:4912
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 552 -p 2516 -ip 25161⤵PID:1080
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 620 -p 2104 -ip 21041⤵PID:5828
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 672 -p 2376 -ip 23761⤵PID:4284
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 572 -p 3932 -ip 39321⤵PID:5628
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 536 -p 2904 -ip 29041⤵PID:3016
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 540 -p 4380 -ip 43801⤵PID:2268
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 644 -p 4580 -ip 45801⤵PID:1792
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 3068 -ip 30681⤵PID:3956
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 656 -p 3852 -ip 38521⤵PID:1596
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 656 -p 2184 -ip 21841⤵PID:2584
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 600 -p 5448 -ip 54481⤵PID:5332
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 664 -p 2960 -ip 29601⤵PID:5808
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 540 -p 4520 -ip 45201⤵PID:5052
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 600 -p 1328 -ip 13281⤵PID:2972
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 608 -p 3424 -ip 34241⤵PID:4864
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 656 -p 5048 -ip 50481⤵PID:5364
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 656 -p 4372 -ip 43721⤵PID:1712
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 664 -p 1888 -ip 18881⤵PID:5964
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 608 -p 6060 -ip 60601⤵PID:240
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 600 -p 1860 -ip 18601⤵PID:1944
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 604 -p 1312 -ip 13121⤵PID:5944
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 552 -p 4488 -ip 44881⤵PID:5876
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 600 -p 6076 -ip 60761⤵PID:4608
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 632 -p 5620 -ip 56201⤵PID:3288
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 620 -p 5072 -ip 50721⤵PID:3728
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 536 -p 704 -ip 7041⤵PID:3372
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 1484 -ip 14841⤵PID:5920
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 620 -p 2592 -ip 25921⤵PID:2704
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 620 -p 4628 -ip 46281⤵PID:2820
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 636 -p 4692 -ip 46921⤵PID:2320
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 572 -p 1584 -ip 15841⤵PID:5408
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 612 -p 2480 -ip 24801⤵PID:4792
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 552 -p 1424 -ip 14241⤵PID:6072
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 552 -p 4432 -ip 44321⤵PID:5452
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 672 -p 4652 -ip 46521⤵PID:2344
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 632 -p 3148 -ip 31481⤵PID:5888
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 632 -p 1848 -ip 18481⤵PID:3336
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 5636 -ip 56361⤵PID:5808
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 2796 -ip 27961⤵PID:1496
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 636 -p 4444 -ip 44441⤵PID:4448
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 648 -p 2604 -ip 26041⤵PID:1316
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 5980 -ip 59801⤵PID:1196
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 600 -p 2052 -ip 20521⤵PID:4304
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 596 -p 5964 -ip 59641⤵PID:5572
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 684 -p 240 -ip 2401⤵PID:3252
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 684 -p 3416 -ip 34161⤵PID:1504
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 648 -p 4760 -ip 47601⤵PID:2936
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 552 -p 3864 -ip 38641⤵PID:3400
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 640 -p 3716 -ip 37161⤵PID:3824
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 644 -p 5580 -ip 55801⤵PID:4620
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 620 -p 2696 -ip 26961⤵PID:6048
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 552 -p 3856 -ip 38561⤵PID:3136
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 4572 -ip 45721⤵PID:1768
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 620 -p 1928 -ip 19281⤵PID:5948
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 608 -p 4140 -ip 41401⤵PID:1936
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 644 -p 2320 -ip 23201⤵PID:4464
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 636 -p 4612 -ip 46121⤵PID:1284
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 552 -p 3844 -ip 38441⤵PID:5756
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 684 -p 2984 -ip 29841⤵PID:2268
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 608 -p 3576 -ip 35761⤵PID:1960
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 584 -p 4528 -ip 45281⤵PID:1596
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 1948 -ip 19481⤵PID:4200
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 572 -p 4984 -ip 49841⤵PID:5744
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 544 -p 4164 -ip 41641⤵PID:4212
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 664 -p 4828 -ip 48281⤵PID:52
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 644 -p 4448 -ip 44481⤵PID:4936
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 596 -p 2672 -ip 26721⤵PID:4864
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 664 -p 3472 -ip 34721⤵PID:5992
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 644 -p 2400 -ip 24001⤵PID:1984
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 616 -p 3180 -ip 31801⤵PID:4880
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 616 -p 1172 -ip 11721⤵PID:3772
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 616 -p 1464 -ip 14641⤵PID:1476
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 544 -p 6012 -ip 60121⤵PID:4660
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 616 -p 2608 -ip 26081⤵PID:3000
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 4904 -ip 49041⤵PID:4604
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 5212 -ip 52121⤵PID:4648
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 648 -p 1348 -ip 13481⤵PID:2088
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 2556 -ip 25561⤵PID:3496
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4240 -ip 42401⤵PID:2544
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 644 -p 5828 -ip 58281⤵PID:960
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 672 -p 4704 -ip 47041⤵PID:3480
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 620 -p 5628 -ip 56281⤵PID:1392
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 620 -p 5324 -ip 53241⤵PID:2008
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 536 -p 4636 -ip 46361⤵PID:5008
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 5576 -ip 55761⤵PID:2308
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 648 -p 4044 -ip 40441⤵PID:4016
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 644 -p 3972 -ip 39721⤵PID:3332
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 672 -p 1264 -ip 12641⤵PID:3956
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 640 -p 5452 -ip 54521⤵PID:1008
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 588 -p 2344 -ip 23441⤵PID:1668
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 588 -p 5888 -ip 58881⤵PID:2832
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 620 -p 2140 -ip 21401⤵PID:5052
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 644 -p 2972 -ip 29721⤵PID:884
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 644 -p 4864 -ip 48641⤵PID:3300
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 564 -p 4264 -ip 42641⤵PID:6044
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 3740 -ip 37401⤵PID:964
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 612 -p 3188 -ip 31881⤵PID:2560
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 644 -p 3660 -ip 36601⤵PID:4068
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 544 -p 1856 -ip 18561⤵PID:4608
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 536 -p 1028 -ip 10281⤵PID:3000
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 636 -p 2436 -ip 24361⤵PID:4952
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 596 -p 5060 -ip 50601⤵PID:4120
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 540 -p 4328 -ip 43281⤵PID:3348
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 668 -p 3604 -ip 36041⤵PID:3080
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 4092 -ip 40921⤵PID:5948
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 656 -p 4964 -ip 49641⤵PID:5968
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 668 -p 5928 -ip 59281⤵PID:3480
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 596 -p 5192 -ip 51921⤵PID:3812
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 636 -p 5504 -ip 55041⤵PID:4884
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 540 -p 4500 -ip 45001⤵PID:4168
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 636 -p 2268 -ip 22681⤵PID:4508
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 636 -p 3976 -ip 39761⤵PID:4024
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 636 -p 6112 -ip 61121⤵PID:3968
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 540 -p 2372 -ip 23721⤵PID:1292
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1596 -ip 15961⤵PID:1668
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 552 -p 3108 -ip 31081⤵PID:1676
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 596 -p 2624 -ip 26241⤵PID:760
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3236 -ip 32361⤵PID:1104
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 636 -p 2860 -ip 28601⤵PID:3300
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 608 -p 4816 -ip 48161⤵PID:1992
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 644 -p 5960 -ip 59601⤵PID:4880
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 540 -p 3820 -ip 38201⤵PID:3356
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 632 -p 5676 -ip 56761⤵PID:1656
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 616 -p 3400 -ip 34001⤵PID:1780
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 544 -p 5868 -ip 58681⤵PID:5788
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 5012 -ip 50121⤵PID:5732
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 596 -p 4120 -ip 41201⤵PID:3900
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 644 -p 3348 -ip 33481⤵PID:3268
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 3080 -ip 30801⤵PID:3208
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 552 -p 4672 -ip 46721⤵PID:4892
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 580 -p 4276 -ip 42761⤵PID:6020
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 540 -p 5600 -ip 56001⤵PID:944
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 432 -ip 4321⤵PID:1648
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 596 -p 4224 -ip 42241⤵PID:5008
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 644 -p 4020 -ip 40201⤵PID:4072
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 616 -p 4668 -ip 46681⤵PID:3956
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 684 -p 2676 -ip 26761⤵PID:5984
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 664 -p 4200 -ip 42001⤵PID:3104
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 684 -p 5156 -ip 51561⤵PID:3380
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 644 -p 5852 -ip 58521⤵PID:5588
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 632 -p 1104 -ip 11041⤵PID:4888
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 596 -p 2016 -ip 20161⤵PID:4596
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 632 -p 4764 -ip 47641⤵PID:1644
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2824 -ip 28241⤵PID:5944
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 648 -p 2560 -ip 25601⤵PID:3264
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 2936 -ip 29361⤵PID:1780
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 552 -p 4660 -ip 46601⤵PID:3288
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 616 -p 5464 -ip 54641⤵PID:6048
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 4648 -ip 46481⤵PID:3752
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 640 -p 4956 -ip 49561⤵PID:4632
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 664 -p 3268 -ip 32681⤵PID:1768
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 572 -p 1844 -ip 18441⤵PID:5972
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 552 -p 2820 -ip 28201⤵PID:3376
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 552 -p 6020 -ip 60201⤵PID:3812
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 552 -p 1384 -ip 13841⤵PID:3240
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 664 -p 3680 -ip 36801⤵PID:2744
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 640 -p 3444 -ip 34441⤵PID:5400
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 544 -p 1244 -ip 12441⤵PID:4048
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 596 -p 4012 -ip 40121⤵PID:1716
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 648 -p 3332 -ip 33321⤵PID:5404
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 572 -p 1008 -ip 10081⤵PID:5488
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 616 -p 3536 -ip 35361⤵PID:480
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 572 -p 1044 -ip 10441⤵PID:1676
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 544 -p 52 -ip 521⤵PID:5100
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 648 -p 5760 -ip 57601⤵PID:4936
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 540 -p 5784 -ip 57841⤵PID:1932
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 636 -p 5056 -ip 50561⤵PID:5368
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 628 -p 5088 -ip 50881⤵PID:4496
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 636 -p 1072 -ip 10721⤵PID:4768
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4924 -ip 49241⤵PID:5736
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 564 -p 3824 -ip 38241⤵PID:6028
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 536 -p 4604 -ip 46041⤵PID:5492
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 536 -p 3292 -ip 32921⤵PID:3668
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 536 -p 1768 -ip 17681⤵PID:4548
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 3784 -ip 37841⤵PID:3208
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 536 -p 3276 -ip 32761⤵PID:924
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 688 -p 2564 -ip 25641⤵PID:5936
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 624 -p 4260 -ip 42601⤵PID:5584
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 540 -p 1792 -ip 17921⤵PID:4720
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 540 -p 4008 -ip 40081⤵PID:1776
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 636 -p 2308 -ip 23081⤵PID:4832
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 564 -p 4016 -ip 40161⤵PID:5404
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 536 -p 3328 -ip 33281⤵PID:5336
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 2632 -ip 26321⤵PID:1608
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 2424 -ip 24241⤵PID:3012
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 688 -p 4888 -ip 48881⤵PID:4244
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 544 -p 4304 -ip 43041⤵PID:2980
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 544 -p 2848 -ip 28481⤵PID:4084
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1644 -ip 16441⤵PID:252
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2484 -ip 24841⤵PID:1944
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 628 -p 4588 -ip 45881⤵PID:1580
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 640 -p 4332 -ip 43321⤵PID:5876
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 636 -p 5952 -ip 59521⤵PID:4916
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 624 -p 1448 -ip 14481⤵PID:4608
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 540 -p 3764 -ip 37641⤵PID:2056
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 864 -ip 8641⤵PID:2108
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 672 -p 2544 -ip 25441⤵PID:4524
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 672 -p 1416 -ip 14161⤵PID:5752
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 564 -p 5820 -ip 58201⤵PID:1940
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 564 -p 4708 -ip 47081⤵PID:1136
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 648 -p 4844 -ip 48441⤵PID:4720
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 608 -p 1680 -ip 16801⤵PID:4048
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 580 -p 5240 -ip 52401⤵PID:3956
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 608 -p 5896 -ip 58961⤵PID:4228
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 6072 -ip 60721⤵PID:3104
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 624 -p 5488 -ip 54881⤵PID:1608
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 648 -p 1668 -ip 16681⤵PID:1884
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 608 -p 5116 -ip 51161⤵PID:4680
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 688 -p 3300 -ip 33001⤵PID:2856
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 544 -p 5420 -ip 54201⤵PID:552
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 636 -p 5368 -ip 53681⤵PID:4496
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 668 -p 6084 -ip 60841⤵PID:1524
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 668 -p 1780 -ip 17801⤵PID:5340
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 624 -p 6016 -ip 60161⤵PID:4236
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 628 -p 4952 -ip 49521⤵PID:2124
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 536 -p 3136 -ip 31361⤵PID:3752
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 536 -p 3900 -ip 39001⤵PID:4632
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 544 -p 5248 -ip 52481⤵PID:4524
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 540 -p 5972 -ip 59721⤵PID:5752
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 540 -p 3480 -ip 34801⤵PID:5172
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 664 -p 3084 -ip 30841⤵PID:2008
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 536 -p 4624 -ip 46241⤵PID:2284
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 668 -p 4148 -ip 41481⤵PID:5648
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 596 -p 4832 -ip 48321⤵PID:4776
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 536 -p 5404 -ip 54041⤵PID:5984
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 1152 -ip 11521⤵PID:3228
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1608 -ip 16081⤵PID:1824
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 540 -p 5332 -ip 53321⤵PID:3012
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 668 -p 5100 -ip 51001⤵PID:4244
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 564 -p 4176 -ip 41761⤵PID:4396
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 652 -p 2804 -ip 28041⤵PID:1924
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 540 -p 1380 -ip 13801⤵PID:5992
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 636 -p 6004 -ip 60041⤵PID:2520
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 540 -p 5876 -ip 58761⤵PID:6088
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 608 -p 4108 -ip 41081⤵PID:764
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 608 -p 5104 -ip 51041⤵PID:5076
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 540 -p 4352 -ip 43521⤵PID:3496
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 644 -p 4912 -ip 49121⤵PID:1376
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\prep_Activatable Class_Hermes_perf.cache
- Size 599B
- SHA256 b536a3dae9ea5c69081f0491eed829e3b57e32401fdf49a63031bcd6b20e6fdb
- MD5 658ab8c32d4cc5deb36ac5f63da4658b
- SHA1 30c12cd871ff0c2c4098d794e9ae4f2540586813
- SHA512 a73030c008ef3c2e274f11c90bfe79fa8ae402f76801c710bed8cc1ab1218a84858ea566b772be4bade8ef639a019c57d297028df15b64b3753482cf0f3c8f85
- TLSH T12AF05C83EB6A1B72C456123DC8EE56E47B31D1846EC11367A2107B1D3C2B7192D174BD
- MD5 SHA1 SHA512 TLSH