Overview
overview
8Static
static
5STEAMRIP ...es.url
windows10-2004-x64
1STEAMRIP ...es.url
windows11-ltsc_2024-x64
8Terraria/C...15.dll
windows10-2004-x64
3Terraria/C...15.dll
windows11-ltsc_2024-x64
6Terraria/C...85.ps1
windows10-2004-x64
3Terraria/C...85.ps1
windows11-ltsc_2024-x64
8Terraria/L...er.dll
windows10-2004-x64
3Terraria/L...er.dll
windows11-ltsc_2024-x64
8Terraria/M...ne.dll
windows10-2004-x64
3Terraria/M...ne.dll
windows11-ltsc_2024-x64
3Terraria/O...ix.dll
windows10-2004-x64
3Terraria/O...ix.dll
windows11-ltsc_2024-x64
8Terraria/O...ix.url
windows10-2004-x64
7Terraria/O...ix.url
windows11-ltsc_2024-x64
7Terraria/R...ve.dll
windows10-2004-x64
3Terraria/R...ve.dll
windows11-ltsc_2024-x64
3Terraria/Terraria.exe
windows10-2004-x64
3Terraria/Terraria.exe
windows11-ltsc_2024-x64
8Terraria/T...er.exe
windows10-2004-x64
3Terraria/T...er.exe
windows11-ltsc_2024-x64
3Terraria/d...up.exe
windows10-2004-x64
7Terraria/d...up.exe
windows11-ltsc_2024-x64
7Terraria/d...64.exe
windows10-2004-x64
3Terraria/d...64.exe
windows11-ltsc_2024-x64
8Terraria/nfd.dll
windows10-2004-x64
3Terraria/nfd.dll
windows11-ltsc_2024-x64
3Terraria/s...ds.bat
windows10-2004-x64
3Terraria/s...ds.bat
windows11-ltsc_2024-x64
8Terraria/s...te.bat
windows10-2004-x64
3Terraria/s...te.bat
windows11-ltsc_2024-x64
8Terraria/s...er.bat
windows10-2004-x64
3Terraria/s...er.bat
windows11-ltsc_2024-x64
3Analysis
- max time kernel
904s - max time network
583s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
11/08/2026, 22:10
Static task
static1
Behavioral task
behavioral1
Sample
STEAMRIP » Free Pre-installed Steam Games.url
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
STEAMRIP » Free Pre-installed Steam Games.url
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
Terraria/CUESDK_2015.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
Terraria/CUESDK_2015.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral5
Sample
Terraria/Content/Images/Extra_185.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
Terraria/Content/Images/Extra_185.ps1
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
Terraria/LogitechLedEnginesWrapper.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
Terraria/LogitechLedEnginesWrapper.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
Terraria/Microsoft.Xna.Framework.Content.Pipeline.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
Terraria/Microsoft.Xna.Framework.Content.Pipeline.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
Terraria/OnlineFix.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
Terraria/OnlineFix.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
Terraria/OnlineFix.url
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
Terraria/OnlineFix.url
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
Terraria/ReLogic.Native.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
Terraria/ReLogic.Native.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
Terraria/Terraria.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
Terraria/Terraria.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
Terraria/TerrariaServer.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
Terraria/TerrariaServer.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
Terraria/dotNetFx40_Full_setup.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
Terraria/dotNetFx40_Full_setup.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
Terraria/dotNetFx40_Full_x86_x64.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
Terraria/dotNetFx40_Full_x86_x64.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
Terraria/nfd.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
Terraria/nfd.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
Terraria/start-server-steam-friends.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
Terraria/start-server-steam-friends.bat
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
Terraria/start-server-steam-private.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
Terraria/start-server-steam-private.bat
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral31
Sample
Terraria/start-server.bat
Resource
win10v2004-20260513-en
General
- Target Terraria/start-server-steam-private.bat
- Size 159B
- Sample260811-13ectadr5y
- SHA256 50fabafc30cc3ee37e353dbc05c25674877abb9625fe4ca4668105b258df366b
- MD5 e621990ad60f97ff14f4978c791181c1
- SHA1 34efea572c08ca29acfa2add8f2920c05bfdd982
- SHA512 b251b86e360013066dc87ce4925db7287f6ce87d548e73bcfbf7267e11bb3b288ec61e65377307e99fbd3a63f8d79e72259a9764cae24ceef82ca60e97da09fe
- TLSH T170C08C226868087EEDBA4C90E04002A63F18418705CF8C808B9B26BB2880ACD3339F1D
- MD5 SHA1 SHA512 TLSH
Malware Config
Signatures
- Boot or Logon Autostart Execution: Active Setup 2 TTPs 1 IoCs
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
description ioc Process Key created \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000\Software\Microsoft\Active Setup\Installed Components Process not Found - Enumerates connected drives 3 TTPs 2 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\E: Process not Found File opened (read-only) \??\F: Process not Found - Executes a command shell one-liner 1 TTPs 1 IoCs
Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.
pid Process 4296 cmd.exe - Program crash 64 IoCs
pid pid_target Process procid_target 1708 1508 WerFault.exe 89 1132 5888 WerFault.exe 93 1600 2936 WerFault.exe 96 4440 1752 WerFault.exe 99 768 4500 WerFault.exe 103 5796 5380 WerFault.exe 106 5464 2072 WerFault.exe 109 4256 4304 WerFault.exe 112 4144 6116 WerFault.exe 115 1496 3400 WerFault.exe 118 1172 6044 WerFault.exe 121 3348 5512 WerFault.exe 124 5708 5020 WerFault.exe 127 356 4172 WerFault.exe 130 4812 2864 WerFault.exe 133 2576 2464 WerFault.exe 136 5360 3008 WerFault.exe 139 5800 4448 WerFault.exe 142 3484 4636 WerFault.exe 145 2756 2460 WerFault.exe 148 4628 2920 WerFault.exe 151 2376 4436 WerFault.exe 154 5780 4184 WerFault.exe 157 2816 2528 WerFault.exe 160 1456 1188 WerFault.exe 163 1704 5828 WerFault.exe 166 5328 4624 WerFault.exe 169 992 4504 WerFault.exe 172 2696 1708 WerFault.exe 175 2552 3416 WerFault.exe 178 1148 5072 WerFault.exe 181 2216 4992 WerFault.exe 184 5840 2768 WerFault.exe 187 2472 4572 WerFault.exe 190 2848 5524 WerFault.exe 193 4468 3372 WerFault.exe 196 3380 1332 WerFault.exe 199 5476 3412 WerFault.exe 202 2156 5960 WerFault.exe 205 4240 1084 WerFault.exe 208 3420 3144 WerFault.exe 211 3668 5292 WerFault.exe 214 3304 4928 WerFault.exe 217 5140 4704 WerFault.exe 220 476 2744 WerFault.exe 223 3684 1768 WerFault.exe 226 4228 1340 WerFault.exe 229 3564 1044 WerFault.exe 232 5484 5540 WerFault.exe 235 3712 4052 WerFault.exe 238 3260 4064 WerFault.exe 241 3112 716 WerFault.exe 244 3852 4276 WerFault.exe 247 4876 1476 WerFault.exe 250 5724 2556 WerFault.exe 253 5232 4596 WerFault.exe 256 5948 1876 WerFault.exe 259 5336 2452 WerFault.exe 262 3156 5560 WerFault.exe 265 2188 2436 WerFault.exe 268 588 3664 WerFault.exe 271 4176 4388 WerFault.exe 274 692 3700 WerFault.exe 277 3588 520 WerFault.exe 280 - System Location Discovery: System Language Discovery 1 TTPs 64 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language TerrariaServer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language TerrariaServer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language TerrariaServer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language TerrariaServer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language TerrariaServer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language TerrariaServer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language TerrariaServer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language TerrariaServer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language TerrariaServer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language TerrariaServer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language TerrariaServer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language TerrariaServer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language TerrariaServer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language TerrariaServer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language TerrariaServer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language TerrariaServer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language TerrariaServer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language TerrariaServer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found - Checks SCSI registry key(s) 3 TTPs 62 IoCs
SCSI information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001 Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{cf73bb51-3abf-44a2-85e0-9a3dc7a12132}\0006 Process not Found Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\HardwareID Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Properties\{51236583-0c4a-4fe8-b81f-166aec13f510}\0064 Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{cf73bb51-3abf-44a2-85e0-9a3dc7a12132}\0006 Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{51236583-0c4a-4fe8-b81f-166aec13f510}\007A Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000 Process not Found Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\HardwareID Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{51236583-0c4a-4fe8-b81f-166aec13f510}\0064 Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{8c7ed206-3f8a-4827-b3ab-ae9e1faefc6c}\0002 Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{51236583-0c4a-4fe8-b81f-166aec13f510}\007A Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{540b947e-8b40-45bc-a8a2-6a0b894cbda2}\0009 Process not Found Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\FriendlyName Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002 Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{540b947e-8b40-45bc-a8a2-6a0b894cbda2}\0009 Process not Found Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\HardwareID Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{8c7ed206-3f8a-4827-b3ab-ae9e1faefc6c}\0002 Process not Found Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\FriendlyName Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000 Process not Found Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Capabilities Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{259abffc-50a7-47ce-af08-68c9a7d73366}\000C Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Properties\{259abffc-50a7-47ce-af08-68c9a7d73366}\000C Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{51236583-0c4a-4fe8-b81f-166aec13f510}\0064 Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{8c7ed206-3f8a-4827-b3ab-ae9e1faefc6c}\0004 Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{51236583-0c4a-4fe8-b81f-166aec13f510}\007A Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Properties\{8c7ed206-3f8a-4827-b3ab-ae9e1faefc6c}\0004 Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{a45c254e-df1c-4efd-8020-67d146a850e0}\0011 Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{8c7ed206-3f8a-4827-b3ab-ae9e1faefc6c}\0004 Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{540b947e-8b40-45bc-a8a2-6a0b894cbda2}\0009 Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Properties\{540b947e-8b40-45bc-a8a2-6a0b894cbda2}\0009 Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A Process not Found Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags Process not Found Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\UpperFilters Process not Found Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\HardwareID Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Properties\{afd97640-86a3-4210-b67c-289c41aabe55}\0003 Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Properties\{51236583-0c4a-4fe8-b81f-166aec13f510}\007A Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000 Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{259abffc-50a7-47ce-af08-68c9a7d73366}\000C Process not Found Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Capabilities Process not Found Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\FriendlyName Process not Found Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\FriendlyName Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{259abffc-50a7-47ce-af08-68c9a7d73366}\000C Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{cf73bb51-3abf-44a2-85e0-9a3dc7a12132}\0006 Process not Found Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Capabilities Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{afd97640-86a3-4210-b67c-289c41aabe55}\0002 Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\005A Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\005A Process not Found Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\UpperFilters Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{51236583-0c4a-4fe8-b81f-166aec13f510}\0064 Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{afd97640-86a3-4210-b67c-289c41aabe55}\0003 Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{afd97640-86a3-4210-b67c-289c41aabe55}\0002 Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{a45c254e-df1c-4efd-8020-67d146a850e0}\0011 Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{8c7ed206-3f8a-4827-b3ab-ae9e1faefc6c}\0004 Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\005A Process not Found Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\005A Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000 Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Properties\{cf73bb51-3abf-44a2-85e0-9a3dc7a12132}\0006 Process not Found Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Capabilities Process not Found -
description ioc Process Key created \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000\Software\Microsoft\Internet Explorer\Main Process not Found - Modifies registry class 38 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Explorer\EdpDomStorage\microsoftwindows.client.cbs Process not Found Key created \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Explorer\EdpDomStorage\Total Process not Found Set value (int) \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Explorer\DOMStorage\microsoftwindows.client.cbs\ = "23" Process not Found Key created \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings Process not Found Set value (str) \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Settings\Cache\History\CachePrefix = "Visited:" Process not Found Set value (int) \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Explorer\DOMStorage\Total\ = "23" Process not Found Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\Instance\ Process not Found Set value (str) \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Settings\Cache\Cookies\CachePrefix = "Cookie:" Process not Found Key created \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Explorer\DomStorageState Process not Found Key created \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Explorer\DOMStorage\microsoftwindows.client.cbs Process not Found Set value (int) \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Explorer\DOMStorage\microsoftwindows.client.cbs\ = "56" Process not Found Set value (int) \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Explorer\DOMStorage\client.cbs\Total = "56" Process not Found Set value (data) \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 02 Process not Found Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance\ Process not Found Key created \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\TrayNotify Process not Found Key created \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Explorer\DOMStorage\client.cbs Process not Found Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\ Process not Found Key created \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\MuiCache Process not Found Set value (str) \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.startmenuexperiencehost_cw5n1h2txyewy\Internet Settings\Cache\Cookies\CachePrefix = "Cookie:" Process not Found Key created \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\MuiCache Process not Found Key created \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Explorer\EdpDomStorage Process not Found Key created \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3797332335-34111092-3597280141-1000\{39808C26-3315-4D72-8ACE-40400A7B7C54} Process not Found Key created \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell Process not Found Set value (data) \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 00000000ffffffff Process not Found Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3ADD1653-EB32-4cb0-BBD7-DFA0ABB5ACCA}\Instance\ Process not Found Set value (str) \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.startmenuexperiencehost_cw5n1h2txyewy\Internet Settings\Cache\History\CachePrefix = "Visited:" Process not Found Set value (int) \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Explorer\DOMStorage\Total\ = "56" Process not Found Set value (int) \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Explorer\DOMStorage\client.cbs\Total = "23" Process not Found Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{374DE290-123F-4565-9164-39C4925E467B}\Instance\ Process not Found Set value (str) \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.startmenuexperiencehost_cw5n1h2txyewy\Internet Settings\Cache\Content\CachePrefix Process not Found Set value (str) \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Settings\Cache\Content\CachePrefix Process not Found Key created \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Explorer\DOMStorage\Total Process not Found Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A0953C92-50DC-43bf-BE83-3742FED03C9C}\Instance\ Process not Found Key created \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU Process not Found Key created \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Explorer\EdpDomStorage\client.cbs Process not Found Key created \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3797332335-34111092-3597280141-1000\{22904FE6-EAC0-4E78-9D43-93E0C40409D6} Process not Found Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1CF1260C-4DD0-4ebb-811F-33C572699FDE}\Instance\ Process not Found Key created \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Explorer\DOMStorage Process not Found - Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 2008 Process not Found 2008 Process not Found - Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: SeShutdownPrivilege 2008 Process not Found Token: SeCreatePagefilePrivilege 2008 Process not Found Token: SeShutdownPrivilege 2008 Process not Found Token: SeCreatePagefilePrivilege 2008 Process not Found Token: SeShutdownPrivilege 2008 Process not Found Token: SeCreatePagefilePrivilege 2008 Process not Found Token: SeShutdownPrivilege 2008 Process not Found Token: SeCreatePagefilePrivilege 2008 Process not Found Token: SeShutdownPrivilege 2008 Process not Found Token: SeCreatePagefilePrivilege 2008 Process not Found Token: SeShutdownPrivilege 2008 Process not Found Token: SeCreatePagefilePrivilege 2008 Process not Found Token: SeShutdownPrivilege 2008 Process not Found Token: SeCreatePagefilePrivilege 2008 Process not Found Token: SeShutdownPrivilege 2008 Process not Found Token: SeCreatePagefilePrivilege 2008 Process not Found Token: SeShutdownPrivilege 2008 Process not Found Token: SeCreatePagefilePrivilege 2008 Process not Found Token: SeShutdownPrivilege 2008 Process not Found Token: SeCreatePagefilePrivilege 2008 Process not Found Token: SeShutdownPrivilege 2008 Process not Found Token: SeCreatePagefilePrivilege 2008 Process not Found Token: SeShutdownPrivilege 2008 Process not Found Token: SeCreatePagefilePrivilege 2008 Process not Found Token: SeShutdownPrivilege 2008 Process not Found Token: SeCreatePagefilePrivilege 2008 Process not Found Token: SeShutdownPrivilege 2008 Process not Found Token: SeCreatePagefilePrivilege 2008 Process not Found Token: SeShutdownPrivilege 2008 Process not Found Token: SeCreatePagefilePrivilege 2008 Process not Found Token: SeShutdownPrivilege 2008 Process not Found Token: SeCreatePagefilePrivilege 2008 Process not Found Token: SeShutdownPrivilege 2008 Process not Found Token: SeCreatePagefilePrivilege 2008 Process not Found Token: SeShutdownPrivilege 2008 Process not Found Token: SeCreatePagefilePrivilege 2008 Process not Found Token: SeShutdownPrivilege 2008 Process not Found Token: SeCreatePagefilePrivilege 2008 Process not Found Token: SeShutdownPrivilege 2008 Process not Found Token: SeCreatePagefilePrivilege 2008 Process not Found Token: SeShutdownPrivilege 2008 Process not Found Token: SeCreatePagefilePrivilege 2008 Process not Found Token: SeShutdownPrivilege 2008 Process not Found Token: SeCreatePagefilePrivilege 2008 Process not Found Token: SeShutdownPrivilege 2008 Process not Found Token: SeCreatePagefilePrivilege 2008 Process not Found Token: SeShutdownPrivilege 2008 Process not Found Token: SeCreatePagefilePrivilege 2008 Process not Found Token: SeShutdownPrivilege 2008 Process not Found Token: SeCreatePagefilePrivilege 2008 Process not Found Token: SeShutdownPrivilege 2008 Process not Found Token: SeCreatePagefilePrivilege 2008 Process not Found Token: SeShutdownPrivilege 2008 Process not Found Token: SeCreatePagefilePrivilege 2008 Process not Found Token: SeShutdownPrivilege 2008 Process not Found Token: SeCreatePagefilePrivilege 2008 Process not Found Token: SeShutdownPrivilege 2008 Process not Found Token: SeCreatePagefilePrivilege 2008 Process not Found Token: SeShutdownPrivilege 2008 Process not Found Token: SeCreatePagefilePrivilege 2008 Process not Found Token: SeShutdownPrivilege 2008 Process not Found Token: SeCreatePagefilePrivilege 2008 Process not Found Token: SeShutdownPrivilege 2008 Process not Found Token: SeCreatePagefilePrivilege 2008 Process not Found - Suspicious use of FindShellTrayWindow 52 IoCs
pid Process 3968 Process not Found 2008 Process not Found 2008 Process not Found 2008 Process not Found 2008 Process not Found 2008 Process not Found 2008 Process not Found 2008 Process not Found 2008 Process not Found 2008 Process not Found 2008 Process not Found 2008 Process not Found 2008 Process not Found 2008 Process not Found 2008 Process not Found 2008 Process not Found 2008 Process not Found 2008 Process not Found 2008 Process not Found 2008 Process not Found 2008 Process not Found 2008 Process not Found 2008 Process not Found 2008 Process not Found 2008 Process not Found 2008 Process not Found 2008 Process not Found 2008 Process not Found 2008 Process not Found 2008 Process not Found 2008 Process not Found 2008 Process not Found 2008 Process not Found 2008 Process not Found 2008 Process not Found 2008 Process not Found 2008 Process not Found 2008 Process not Found 2008 Process not Found 2008 Process not Found 2008 Process not Found 2008 Process not Found 2008 Process not Found 2008 Process not Found 2008 Process not Found 2008 Process not Found 2008 Process not Found 2008 Process not Found 2008 Process not Found 2008 Process not Found 2008 Process not Found 2008 Process not Found - Suspicious use of SendNotifyMessage 43 IoCs
pid Process 2008 Process not Found 2008 Process not Found 2008 Process not Found 2008 Process not Found 2008 Process not Found 2008 Process not Found 2008 Process not Found 2008 Process not Found 2008 Process not Found 2008 Process not Found 2008 Process not Found 2008 Process not Found 2008 Process not Found 2008 Process not Found 2008 Process not Found 2008 Process not Found 2008 Process not Found 2008 Process not Found 2008 Process not Found 2008 Process not Found 2008 Process not Found 2008 Process not Found 2008 Process not Found 2008 Process not Found 2008 Process not Found 2008 Process not Found 2008 Process not Found 2008 Process not Found 2008 Process not Found 2008 Process not Found 2008 Process not Found 2008 Process not Found 2008 Process not Found 2008 Process not Found 2008 Process not Found 2008 Process not Found 2008 Process not Found 2008 Process not Found 2008 Process not Found 2008 Process not Found 2008 Process not Found 2008 Process not Found 2008 Process not Found - Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 6360 Process not Found 2008 Process not Found 6736 Process not Found - Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 4296 wrote to memory of 1508 4296 cmd.exe 89 PID 4296 wrote to memory of 5888 4296 cmd.exe 93 PID 4296 wrote to memory of 2936 4296 cmd.exe 96 PID 4296 wrote to memory of 1752 4296 cmd.exe 99 PID 4296 wrote to memory of 4500 4296 cmd.exe 103 PID 4296 wrote to memory of 5380 4296 cmd.exe 106 PID 4296 wrote to memory of 2072 4296 cmd.exe 109 PID 4296 wrote to memory of 4304 4296 cmd.exe 112 PID 4296 wrote to memory of 6116 4296 cmd.exe 115 PID 4296 wrote to memory of 3400 4296 cmd.exe 118 PID 4296 wrote to memory of 6044 4296 cmd.exe 121 PID 4296 wrote to memory of 5512 4296 cmd.exe 124 PID 4296 wrote to memory of 5020 4296 cmd.exe 127 PID 4296 wrote to memory of 4172 4296 cmd.exe 130 PID 4296 wrote to memory of 2864 4296 cmd.exe 133 PID 4296 wrote to memory of 2464 4296 cmd.exe 136 PID 4296 wrote to memory of 3008 4296 cmd.exe 139 PID 4296 wrote to memory of 4448 4296 cmd.exe 142 PID 4296 wrote to memory of 4636 4296 cmd.exe 145 PID 4296 wrote to memory of 2460 4296 cmd.exe 148 PID 4296 wrote to memory of 2920 4296 cmd.exe 151 PID 4296 wrote to memory of 4436 4296 cmd.exe 154 PID 4296 wrote to memory of 4184 4296 cmd.exe 157 PID 4296 wrote to memory of 2528 4296 cmd.exe 160 PID 4296 wrote to memory of 1188 4296 cmd.exe 163 PID 4296 wrote to memory of 5828 4296 cmd.exe 166 PID 4296 wrote to memory of 4624 4296 cmd.exe 169 PID 4296 wrote to memory of 4504 4296 cmd.exe 172 PID 4296 wrote to memory of 1708 4296 cmd.exe 175 PID 4296 wrote to memory of 3416 4296 cmd.exe 178 PID 4296 wrote to memory of 5072 4296 cmd.exe 181 PID 4296 wrote to memory of 4992 4296 cmd.exe 184 PID 4296 wrote to memory of 2768 4296 cmd.exe 187 PID 4296 wrote to memory of 4572 4296 cmd.exe 190 PID 4296 wrote to memory of 5524 4296 cmd.exe 193 PID 4296 wrote to memory of 3372 4296 cmd.exe 196 PID 4296 wrote to memory of 1332 4296 cmd.exe 199 PID 4296 wrote to memory of 3412 4296 cmd.exe 202 PID 4296 wrote to memory of 5960 4296 cmd.exe 205 PID 4296 wrote to memory of 1084 4296 cmd.exe 208 PID 4296 wrote to memory of 3144 4296 cmd.exe 211 PID 4296 wrote to memory of 5292 4296 cmd.exe 214 PID 4296 wrote to memory of 4928 4296 cmd.exe 217 PID 4296 wrote to memory of 4704 4296 cmd.exe 220 PID 4296 wrote to memory of 2744 4296 cmd.exe 223 PID 4296 wrote to memory of 1768 4296 cmd.exe 226 PID 4296 wrote to memory of 1340 4296 cmd.exe 229 PID 4296 wrote to memory of 1044 4296 cmd.exe 232 PID 4296 wrote to memory of 5540 4296 cmd.exe 235 PID 4296 wrote to memory of 4052 4296 cmd.exe 238 PID 4296 wrote to memory of 4064 4296 cmd.exe 241 PID 4296 wrote to memory of 716 4296 cmd.exe 244 PID 4296 wrote to memory of 4276 4296 cmd.exe 247 PID 4296 wrote to memory of 1476 4296 cmd.exe 250 PID 4296 wrote to memory of 2556 4296 cmd.exe 253 PID 4296 wrote to memory of 4596 4296 cmd.exe 256 PID 4296 wrote to memory of 1876 4296 cmd.exe 259 PID 4296 wrote to memory of 2452 4296 cmd.exe 262 PID 4296 wrote to memory of 5560 4296 cmd.exe 265 PID 4296 wrote to memory of 2436 4296 cmd.exe 268 PID 4296 wrote to memory of 3664 4296 cmd.exe 271 PID 4296 wrote to memory of 4388 4296 cmd.exe 274 PID 4296 wrote to memory of 3700 4296 cmd.exe 277 PID 4296 wrote to memory of 520 4296 cmd.exe 280 - Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
- Uses Volume Shadow Copy WMI provider
The Volume Shadow Copy service is used to manage backups/snapshots.
- Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
Processes
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Terraria\start-server-steam-private.bat"1⤵
- Executes a command shell one-liner
- Suspicious use of WriteProcessMemory
PID:4296 -
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:1508
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1508 -s 9123⤵
- Program crash
PID:1708
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:5888
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5888 -s 8843⤵
- Program crash
PID:1132
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:2936
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2936 -s 8843⤵
- Program crash
PID:1600
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:1752
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1752 -s 8883⤵
- Program crash
PID:4440
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:4500
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4500 -s 8843⤵
- Program crash
PID:768
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:5380
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5380 -s 8843⤵
- Program crash
PID:5796
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:2072
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2072 -s 8843⤵
- Program crash
PID:5464
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:4304
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4304 -s 8843⤵
- Program crash
PID:4256
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:6116
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 6116 -s 8843⤵
- Program crash
PID:4144
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:3400
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3400 -s 8843⤵
- Program crash
PID:1496
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:6044
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 6044 -s 8843⤵
- Program crash
PID:1172
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:5512
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5512 -s 8843⤵
- Program crash
PID:3348
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:5020
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5020 -s 8843⤵
- Program crash
PID:5708
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:4172
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4172 -s 8883⤵
- Program crash
PID:356
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:2864
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2864 -s 8843⤵
- Program crash
PID:4812
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:2464
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2464 -s 8843⤵
- Program crash
PID:2576
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:3008
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3008 -s 8843⤵
- Program crash
PID:5360
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:4448
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4448 -s 8883⤵
- Program crash
PID:5800
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:4636
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4636 -s 8843⤵
- Program crash
PID:3484
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:2460
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2460 -s 8883⤵
- Program crash
PID:2756
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:2920
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2920 -s 8843⤵
- Program crash
PID:4628
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:4436
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4436 -s 8843⤵
- Program crash
PID:2376
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:4184
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4184 -s 8843⤵
- Program crash
PID:5780
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:2528
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2528 -s 8843⤵
- Program crash
PID:2816
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:1188
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1188 -s 8763⤵
- Program crash
PID:1456
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:5828
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5828 -s 8883⤵
- Program crash
PID:1704
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:4624
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4624 -s 8843⤵
- Program crash
PID:5328
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:4504
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4504 -s 8843⤵
- Program crash
PID:992
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:1708
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1708 -s 8843⤵
- Program crash
PID:2696
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:3416
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3416 -s 8843⤵
- Program crash
PID:2552
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:5072
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5072 -s 8843⤵
- Program crash
PID:1148
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:4992
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4992 -s 8843⤵
- Program crash
PID:2216
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:2768
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2768 -s 8883⤵
- Program crash
PID:5840
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:4572
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4572 -s 8883⤵
- Program crash
PID:2472
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:5524
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5524 -s 8843⤵
- Program crash
PID:2848
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:3372
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3372 -s 8843⤵
- Program crash
PID:4468
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:1332
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1332 -s 8883⤵
- Program crash
PID:3380
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵
- System Location Discovery: System Language Discovery
PID:3412 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3412 -s 8843⤵
- Program crash
PID:5476
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:5960
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5960 -s 8843⤵
- Program crash
PID:2156
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:1084
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1084 -s 8843⤵
- Program crash
PID:4240
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:3144
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3144 -s 8843⤵
- Program crash
PID:3420
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:5292
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5292 -s 8843⤵
- Program crash
PID:3668
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:4928
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4928 -s 8843⤵
- Program crash
PID:3304
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:4704
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4704 -s 8843⤵
- Program crash
PID:5140
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:2744
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2744 -s 8843⤵
- Program crash
PID:476
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:1768
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1768 -s 8843⤵
- Program crash
PID:3684
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:1340
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1340 -s 8843⤵
- Program crash
PID:4228
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:1044
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1044 -s 8843⤵
- Program crash
PID:3564
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:5540
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5540 -s 8883⤵
- Program crash
PID:5484
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:4052
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4052 -s 8843⤵
- Program crash
PID:3712
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:4064
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4064 -s 4643⤵
- Program crash
PID:3260
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:716
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 716 -s 8883⤵
- Program crash
PID:3112
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵
- System Location Discovery: System Language Discovery
PID:4276 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4276 -s 8883⤵
- Program crash
PID:3852
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:1476
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1476 -s 8843⤵
- Program crash
PID:4876
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:2556
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2556 -s 8843⤵
- Program crash
PID:5724
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵
- System Location Discovery: System Language Discovery
PID:4596 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4596 -s 8843⤵
- Program crash
PID:5232
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:1876
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1876 -s 8843⤵
- Program crash
PID:5948
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:2452
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2452 -s 8843⤵
- Program crash
PID:5336
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:5560
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5560 -s 8843⤵
- Program crash
PID:3156
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:2436
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2436 -s 8883⤵
- Program crash
PID:2188
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:3664
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3664 -s 8883⤵
- Program crash
PID:588
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵
- System Location Discovery: System Language Discovery
PID:4388 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4388 -s 8843⤵
- Program crash
PID:4176
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:3700
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3700 -s 8843⤵
- Program crash
PID:692
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:520
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 520 -s 8843⤵
- Program crash
PID:3588
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:2592
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2592 -s 8843⤵PID:5808
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:1576
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1576 -s 8843⤵PID:2472
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:5388
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5388 -s 8883⤵PID:2448
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:2388
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2388 -s 8843⤵PID:4144
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:2948
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2948 -s 8883⤵PID:2736
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:2908
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2908 -s 8843⤵PID:1496
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:996
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 996 -s 8843⤵PID:5976
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:1172
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1172 -s 8843⤵PID:1244
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:4416
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4416 -s 8843⤵PID:3188
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:5864
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5864 -s 8843⤵PID:1220
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:356
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 356 -s 8883⤵PID:4076
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:5276
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5276 -s 8843⤵PID:1604
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:6056
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 6056 -s 8883⤵PID:3708
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:2488
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2488 -s 8883⤵PID:4672
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:2704
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2704 -s 8843⤵PID:3340
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:4832
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4832 -s 8883⤵PID:1192
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:3836
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3836 -s 8843⤵PID:2004
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:1436
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1436 -s 8843⤵PID:2376
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:2944
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2944 -s 8843⤵PID:464
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:3112
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3112 -s 8843⤵PID:2816
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:5780
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5780 -s 8883⤵PID:2800
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:1480
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1480 -s 8883⤵PID:2080
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:240
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 240 -s 8843⤵PID:5416
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:820
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 820 -s 8843⤵PID:6028
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:2420
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2420 -s 8883⤵PID:5312
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:400
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 400 -s 8883⤵PID:920
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:4856
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4856 -s 8883⤵PID:2424
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:3172
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3172 -s 8883⤵PID:2496
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:5652
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5652 -s 8843⤵PID:5568
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:4768
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4768 -s 8843⤵PID:2456
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:2216
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2216 -s 8843⤵PID:3944
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:5492
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5492 -s 8843⤵PID:5840
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:4492
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4492 -s 8843⤵PID:1352
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:1872
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1872 -s 8843⤵PID:6016
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:3136
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3136 -s 8843⤵PID:5260
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:4756
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4756 -s 8843⤵PID:5008
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:5748
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5748 -s 8843⤵PID:5164
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:6100
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 6100 -s 8843⤵PID:1996
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:3348
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3348 -s 8843⤵PID:3224
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:5836
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5836 -s 8883⤵PID:4868
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:4100
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4100 -s 8843⤵PID:1728
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:2524
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2524 -s 8843⤵PID:3128
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵
- System Location Discovery: System Language Discovery
PID:4444 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4444 -s 8843⤵PID:5760
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵
- System Location Discovery: System Language Discovery
PID:556 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 556 -s 8883⤵PID:2208
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:4672
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4672 -s 8843⤵PID:4952
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:2872
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2872 -s 8843⤵PID:1716
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:3904
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3904 -s 8883⤵PID:3688
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:4904
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4904 -s 8843⤵PID:3736
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:6076
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 6076 -s 8883⤵PID:3528
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:4676
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4676 -s 8843⤵PID:3132
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:5172
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5172 -s 8843⤵PID:1324
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:4432
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4432 -s 8843⤵PID:4612
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:984
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 984 -s 8883⤵PID:5820
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:856
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 856 -s 8883⤵PID:4836
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:5048
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5048 -s 8843⤵PID:5876
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:2044
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2044 -s 8843⤵PID:1952
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:2424
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2424 -s 8843⤵PID:1264
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:2496
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2496 -s 8843⤵PID:2476
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:3104
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3104 -s 8843⤵PID:2288
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:4552
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4552 -s 8843⤵PID:3148
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:3044
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3044 -s 8843⤵PID:2448
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:2608
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2608 -s 8843⤵PID:3508
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:5816
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5816 -s 8883⤵PID:5476
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:1444
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1444 -s 8883⤵PID:5928
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:5136
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5136 -s 8843⤵PID:3184
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:1144
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1144 -s 8843⤵PID:1580
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:2124
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2124 -s 8843⤵PID:4108
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:4488
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4488 -s 8843⤵PID:4520
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:4576
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4576 -s 8883⤵PID:5140
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:1980
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1980 -s 8843⤵PID:3708
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:5992
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5992 -s 8843⤵PID:4952
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:4148
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4148 -s 8843⤵PID:5640
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:2860
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2860 -s 8843⤵PID:1992
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:2376
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2376 -s 8843⤵PID:1656
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:2656
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2656 -s 8843⤵PID:4548
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:4988
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4988 -s 8843⤵PID:5464
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:1364
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1364 -s 8843⤵PID:5952
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:2764
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2764 -s 8843⤵PID:4072
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵
- System Location Discovery: System Language Discovery
PID:4804 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4804 -s 8843⤵PID:4836
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:4688
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4688 -s 8843⤵PID:5312
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:3392
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3392 -s 8843⤵PID:1308
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:4580
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4580 -s 8843⤵PID:4808
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:5420
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5420 -s 8843⤵PID:3488
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:2296
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2296 -s 8843⤵PID:2476
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:2188
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2188 -s 8843⤵PID:5932
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:3744
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3744 -s 8923⤵PID:3124
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:5192
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5192 -s 8843⤵PID:3364
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:5180
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5180 -s 8843⤵PID:5260
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:4060
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4060 -s 8843⤵PID:252
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:5612
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5612 -s 8843⤵PID:5644
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:2736
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2736 -s 8843⤵PID:1464
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:4248
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4248 -s 8883⤵PID:4828
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:3420
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3420 -s 8843⤵PID:5556
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:3668
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3668 -s 8883⤵PID:4056
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:5968
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5968 -s 8843⤵PID:4204
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:1604
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1604 -s 8843⤵PID:4740
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:3888
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3888 -s 8843⤵PID:4840
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵
- System Location Discovery: System Language Discovery
PID:4232 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4232 -s 8843⤵PID:5468
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:1528
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1528 -s 8843⤵PID:5640
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:5484
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5484 -s 8843⤵PID:3740
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:900
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 900 -s 8843⤵PID:3736
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:2816
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2816 -s 8843⤵PID:2800
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:1184
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1184 -s 8883⤵PID:2324
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:2548
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2548 -s 8883⤵PID:3504
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:396
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 396 -s 8643⤵PID:4028
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵
- System Location Discovery: System Language Discovery
PID:4008 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4008 -s 8843⤵PID:3964
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:3216
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3216 -s 8843⤵PID:4836
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:3068
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3068 -s 8883⤵PID:1748
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:432
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 432 -s 8843⤵PID:4092
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:5128
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5128 -s 8843⤵PID:920
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:6024
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 6024 -s 8843⤵PID:4312
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:3496
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3496 -s 8843⤵PID:2292
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:6008
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 6008 -s 8843⤵PID:5672
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:1104
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1104 -s 8883⤵PID:3920
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:5808
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5808 -s 8843⤵PID:5840
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:2000
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2000 -s 8883⤵PID:5412
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:248
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 248 -s 8843⤵PID:5872
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:5160
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5160 -s 8843⤵PID:2836
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:780
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 780 -s 8843⤵PID:1572
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:1416
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1416 -s 8843⤵PID:3692
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:5024
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5024 -s 8843⤵PID:1220
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:3220
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3220 -s 8883⤵PID:4520
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:5584
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5584 -s 8923⤵PID:5140
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:5392
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5392 -s 8843⤵PID:4972
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:3484
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3484 -s 8843⤵PID:4228
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:2756
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2756 -s 8883⤵PID:3384
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵
- System Location Discovery: System Language Discovery
PID:1260 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1260 -s 8843⤵PID:3340
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:2004
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2004 -s 8883⤵PID:5936
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:8
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 8 -s 8843⤵PID:4220
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:2852
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2852 -s 8843⤵PID:3704
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:3000
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3000 -s 8843⤵PID:1456
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:560
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 560 -s 8843⤵PID:4032
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:4028
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4028 -s 8843⤵PID:4420
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:3960
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3960 -s 8843⤵PID:2368
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:4836
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4836 -s 8883⤵PID:4848
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:3524
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3524 -s 8883⤵PID:3040
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:2660
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2660 -s 8843⤵PID:2492
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:3540
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3540 -s 8883⤵PID:916
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:1160
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1160 -s 8843⤵PID:2292
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:5572
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5572 -s 8883⤵PID:5672
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:2980
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2980 -s 8843⤵PID:3920
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:4608
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4608 -s 8843⤵PID:5684
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:468
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 468 -s 8883⤵PID:1924
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:596
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 596 -s 8843⤵PID:260
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:3856
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3856 -s 8843⤵PID:3192
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:5804
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5804 -s 8843⤵PID:2712
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:4692
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4692 -s 8843⤵PID:2684
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:3224
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3224 -s 8883⤵PID:2356
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:5744
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5744 -s 8843⤵PID:5868
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:4484
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4484 -s 8843⤵PID:5360
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:3708
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3708 -s 8843⤵PID:4532
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:5144
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5144 -s 8843⤵PID:988
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:3384
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3384 -s 8843⤵PID:4924
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:1192
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1192 -s 8883⤵PID:2372
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:3740
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3740 -s 8843⤵PID:4660
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:4752
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4752 -s 8843⤵PID:1596
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵
- System Location Discovery: System Language Discovery
PID:200 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 200 -s 8843⤵PID:1196
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:2080
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2080 -s 8843⤵PID:4072
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:4000
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4000 -s 8843⤵PID:5948
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:2480
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2480 -s 8883⤵PID:3444
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:1168
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1168 -s 8843⤵PID:1120
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵
- System Location Discovery: System Language Discovery
PID:5660 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5660 -s 8843⤵PID:2932
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:4984
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4984 -s 8843⤵PID:924
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:5692
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5692 -s 8843⤵PID:1368
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:2172
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2172 -s 8883⤵PID:5840
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:4380
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4380 -s 8843⤵PID:3240
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:1352
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1352 -s 8843⤵PID:1404
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:2164
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2164 -s 8843⤵PID:3612
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵
- System Location Discovery: System Language Discovery
PID:5476 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5476 -s 8843⤵PID:4048
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:3316
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3316 -s 8843⤵PID:1996
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:2684
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2684 -s 8883⤵PID:3188
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:1220
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1220 -s 8883⤵PID:2200
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵
- System Location Discovery: System Language Discovery
PID:3304 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3304 -s 8843⤵PID:5228
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:1372
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1372 -s 8843⤵PID:4740
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:5468
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5468 -s 8843⤵PID:3100
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:1716
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1716 -s 8843⤵PID:2620
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:940
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 940 -s 8883⤵PID:2372
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:5920
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5920 -s 8843⤵PID:612
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:3344
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3344 -s 8843⤵PID:3456
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:4588
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4588 -s 8843⤵PID:3080
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:5464
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5464 -s 8843⤵PID:3160
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:5820
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5820 -s 8843⤵PID:4012
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:3964
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3964 -s 8843⤵PID:5232
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:4396
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4396 -s 8883⤵PID:4616
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:1308
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1308 -s 8843⤵PID:1560
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:5472
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5472 -s 8843⤵PID:3944
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:3276
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3276 -s 8843⤵PID:2680
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵
- System Location Discovery: System Language Discovery
PID:4652 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4652 -s 8923⤵PID:3532
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:5104
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5104 -s 8843⤵PID:1180
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:3256
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3256 -s 8843⤵PID:1956
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:5684
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5684 -s 8843⤵PID:4884
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:2536
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2536 -s 8843⤵PID:5520
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:260
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 260 -s 8843⤵PID:1660
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:2068
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2068 -s 8883⤵PID:1996
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:2712
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2712 -s 8843⤵PID:3188
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:5108
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5108 -s 8843⤵PID:1124
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:2796
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2796 -s 8843⤵PID:2468
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:4952
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4952 -s 8843⤵PID:2328
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:828
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 828 -s 8843⤵PID:3684
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:3340
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3340 -s 8843⤵PID:4632
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:2672
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2672 -s 8883⤵PID:464
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:4660
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4660 -s 8843⤵PID:2708
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:1600
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1600 -s 8843⤵PID:1408
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:4592
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4592 -s 8883⤵PID:5040
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:5416
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5416 -s 8843⤵PID:1248
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:2368
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2368 -s 8843⤵PID:992
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:4368
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4368 -s 8843⤵PID:3512
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:3320
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3320 -s 8883⤵PID:5400
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:1028
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1028 -s 8843⤵PID:5256
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:4092
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4092 -s 8883⤵PID:5068
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:3876
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3876 -s 8883⤵PID:2792
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:1328
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1328 -s 8843⤵PID:3364
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:1892
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1892 -s 8843⤵PID:768
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:5872
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5872 -s 8883⤵PID:2836
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:5644
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5644 -s 8843⤵PID:4828
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:3884
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3884 -s 8883⤵PID:5976
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:1628
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1628 -s 8843⤵PID:2844
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:1520
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1520 -s 8843⤵PID:4496
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵
- System Location Discovery: System Language Discovery
PID:2760 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2760 -s 8843⤵PID:1124
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:4084
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4084 -s 8843⤵PID:4972
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:4740
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4740 -s 8843⤵PID:4340
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:3100
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3100 -s 8843⤵PID:3564
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:4628
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4628 -s 8683⤵PID:2924
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:1452
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1452 -s 8843⤵PID:6036
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:4176
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4176 -s 8883⤵PID:3388
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:1228
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1228 -s 8843⤵PID:4212
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:1324
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1324 -s 8843⤵PID:4820
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:5724
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5724 -s 8843⤵PID:1544
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:4144
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4144 -s 8843⤵PID:5328
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:4104
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4104 -s 8843⤵PID:3108
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:4808
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4808 -s 8843⤵PID:1132
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:4568
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4568 -s 8843⤵PID:1140
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:5404
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5404 -s 8843⤵PID:1120
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵
- System Location Discovery: System Language Discovery
PID:1348 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1348 -s 8843⤵PID:1584
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:4088
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4088 -s 8843⤵PID:1652
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:5840
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5840 -s 8883⤵PID:1784
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:2648
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2648 -s 8883⤵PID:1924
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:1244
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1244 -s 8883⤵PID:4728
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:4732
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4732 -s 8843⤵PID:4048
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:2916
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2916 -s 8843⤵PID:4440
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:1580
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1580 -s 8843⤵PID:5708
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:4868
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4868 -s 8843⤵PID:5800
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:4400
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4400 -s 8883⤵PID:4648
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:5212
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5212 -s 8843⤵PID:5124
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:1992
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1992 -s 8843⤵PID:5368
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:3448
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3448 -s 8883⤵PID:5600
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:6036
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 6036 -s 8843⤵PID:5536
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:2708
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2708 -s 8843⤵PID:2324
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:3456
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3456 -s 8843⤵PID:4468
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:3244
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3244 -s 8843⤵PID:4600
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:3160
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3160 -s 8843⤵PID:5332
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:4364
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4364 -s 8843⤵PID:3108
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:840
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 840 -s 8843⤵PID:4256
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:5344
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5344 -s 8843⤵PID:1560
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:2832
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2832 -s 8883⤵PID:924
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:3424
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3424 -s 8883⤵PID:2552
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:1396
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1396 -s 8843⤵PID:1844
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:1176
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1176 -s 8843⤵PID:3920
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:2972
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2972 -s 8883⤵PID:2836
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:1232
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1232 -s 8843⤵PID:1464
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:5776
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5776 -s 8843⤵PID:3832
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:3692
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3692 -s 8843⤵PID:2356
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:2772
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2772 -s 8843⤵PID:4812
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:476
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 476 -s 8883⤵PID:2284
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:904
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 904 -s 8883⤵PID:5760
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:3688
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3688 -s 8843⤵PID:4924
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:4748
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4748 -s 8843⤵PID:2820
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:3528
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3528 -s 8843⤵PID:3260
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵
- System Location Discovery: System Language Discovery
PID:2800 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2800 -s 8883⤵PID:4212
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:1756
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1756 -s 8843⤵PID:3080
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:3796
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3796 -s 8843⤵PID:4080
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:3996
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3996 -s 8843⤵PID:4716
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:4640
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4640 -s 8843⤵PID:5736
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:5844
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5844 -s 8843⤵PID:3460
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:1120
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1120 -s 8843⤵PID:2696
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:2292
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2292 -s 8843⤵PID:3748
-
-
-
C:\Users\Admin\AppData\Local\Temp\Terraria\TerrariaServer.exeTerrariaServer.exe -steam -lobby private -config serverconfig.txt -experimental2⤵PID:5544
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5544 -s 8843⤵PID:3920
-
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 1508 -ip 15081⤵PID:5560
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 504 -p 5888 -ip 58881⤵PID:2696
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 520 -p 2936 -ip 29361⤵PID:2484
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 1752 -ip 17521⤵PID:2216
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 504 -p 4500 -ip 45001⤵PID:572
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 512 -p 5380 -ip 53801⤵PID:5092
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 520 -p 2072 -ip 20721⤵PID:5180
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 612 -p 4304 -ip 43041⤵PID:1520
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 596 -p 6116 -ip 61161⤵PID:1976
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 496 -p 3400 -ip 34001⤵PID:5960
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 6044 -ip 60441⤵PID:1048
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 392 -p 5512 -ip 55121⤵PID:4692
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 612 -p 5020 -ip 50201⤵PID:1580
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 496 -p 4172 -ip 41721⤵PID:2652
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 604 -p 2864 -ip 28641⤵PID:2796
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 392 -p 2464 -ip 24641⤵PID:3784
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 580 -p 3008 -ip 30081⤵PID:4328
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 608 -p 4448 -ip 44481⤵PID:5992
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 608 -p 4636 -ip 46361⤵PID:2620
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 600 -p 2460 -ip 24601⤵PID:4132
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 596 -p 2920 -ip 29201⤵PID:3448
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 624 -p 4436 -ip 44361⤵PID:4064
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 604 -p 4184 -ip 41841⤵PID:3024
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 588 -p 2528 -ip 25281⤵PID:2656
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 492 -p 1188 -ip 11881⤵PID:1184
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 636 -p 5828 -ip 58281⤵PID:2764
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 512 -p 4624 -ip 46241⤵PID:6024
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 636 -p 4504 -ip 45041⤵PID:2044
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 1708 -ip 17081⤵PID:5572
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 588 -p 3416 -ip 34161⤵PID:3664
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 568 -p 5072 -ip 50721⤵PID:2032
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 4992 -ip 49921⤵PID:5904
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 2768 -ip 27681⤵PID:3124
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 644 -p 4572 -ip 45721⤵PID:1352
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 5524 -ip 55241⤵PID:468
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 512 -p 3372 -ip 33721⤵PID:1520
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 1332 -ip 13321⤵PID:3776
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 3412 -ip 34121⤵PID:4060
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 5960 -ip 59601⤵PID:1496
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 492 -p 1084 -ip 10841⤵PID:6100
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 604 -p 3144 -ip 31441⤵PID:5136
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 568 -p 5292 -ip 52921⤵PID:5852
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 492 -p 4928 -ip 49281⤵PID:5584
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 4704 -ip 47041⤵PID:2524
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 492 -p 2744 -ip 27441⤵PID:2168
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 628 -p 1768 -ip 17681⤵PID:5392
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 628 -p 1340 -ip 13401⤵PID:4712
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 604 -p 1044 -ip 10441⤵PID:4952
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 644 -p 5540 -ip 55401⤵PID:988
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 624 -p 4052 -ip 40521⤵PID:3688
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 4064 -ip 40641⤵PID:2376
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 616 -p 716 -ip 7161⤵PID:4220
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 4276 -ip 42761⤵PID:2852
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 1476 -ip 14761⤵PID:52
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 608 -p 2556 -ip 25561⤵PID:4620
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 492 -p 4596 -ip 45961⤵PID:4368
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 1876 -ip 18761⤵PID:4236
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 2452 -ip 24521⤵PID:5312
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 504 -p 5560 -ip 55601⤵PID:5472
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 2436 -ip 24361⤵PID:2492
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 628 -p 3664 -ip 36641⤵PID:4292
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 624 -p 4388 -ip 43881⤵PID:1812
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 3700 -ip 37001⤵PID:4588
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 520 -ip 5201⤵PID:4312
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 612 -p 2592 -ip 25921⤵PID:2292
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 612 -p 1576 -ip 15761⤵PID:2000
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 636 -p 5388 -ip 53881⤵PID:5412
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 504 -p 2388 -ip 23881⤵PID:2536
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 612 -p 2948 -ip 29481⤵PID:1976
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 580 -p 2908 -ip 29081⤵PID:5748
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 636 -p 996 -ip 9961⤵PID:1764
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 636 -p 1172 -ip 11721⤵PID:3348
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 636 -p 4416 -ip 44161⤵PID:5852
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 5864 -ip 58641⤵PID:4112
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 604 -p 356 -ip 3561⤵PID:4300
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 616 -p 5276 -ip 52761⤵PID:5744
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 6056 -ip 60561⤵PID:5760
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 2488 -ip 24881⤵PID:1156
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 612 -p 2704 -ip 27041⤵PID:4228
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 628 -p 4832 -ip 48321⤵PID:4148
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 492 -p 3836 -ip 38361⤵PID:4132
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 628 -p 1436 -ip 14361⤵PID:3448
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 492 -p 2944 -ip 29441⤵PID:4660
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 492 -p 3112 -ip 31121⤵PID:4592
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 5780 -ip 57801⤵PID:5172
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 644 -p 1480 -ip 14801⤵PID:2148
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 612 -p 240 -ip 2401⤵PID:5952
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 492 -p 820 -ip 8201⤵PID:5908
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 392 -p 2420 -ip 24201⤵PID:840
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 400 -ip 4001⤵PID:5876
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 4856 -ip 48561⤵PID:3876
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 392 -p 3172 -ip 31721⤵PID:2540
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 632 -p 5652 -ip 56521⤵PID:3388
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 624 -p 4768 -ip 47681⤵PID:4588
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 2216 -ip 22161⤵PID:4568
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 5492 -ip 54921⤵PID:2292
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 628 -p 4492 -ip 44921⤵PID:4556
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 612 -p 1872 -ip 18721⤵PID:1176
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 3136 -ip 31361⤵PID:3108
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 628 -p 4756 -ip 47561⤵PID:4060
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 5748 -ip 57481⤵PID:5872
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 608 -p 6100 -ip 61001⤵PID:2836
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 640 -p 3348 -ip 33481⤵PID:1144
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 640 -p 5836 -ip 58361⤵PID:5108
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 520 -p 4100 -ip 41001⤵PID:5708
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 504 -p 2524 -ip 25241⤵PID:4668
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 4444 -ip 44441⤵PID:4812
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 636 -p 556 -ip 5561⤵PID:476
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 520 -p 4672 -ip 46721⤵PID:696
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 520 -p 2872 -ip 28721⤵PID:4148
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 600 -p 3904 -ip 39041⤵PID:4132
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 4904 -ip 49041⤵PID:3568
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 568 -p 6076 -ip 60761⤵PID:3060
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 492 -p 4676 -ip 46761⤵PID:4548
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 512 -p 5172 -ip 51721⤵PID:2800
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 640 -p 4432 -ip 44321⤵PID:5536
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 984 -ip 9841⤵PID:5416
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 512 -p 856 -ip 8561⤵PID:3324
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 5048 -ip 50481⤵PID:4600
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 2044 -ip 20441⤵PID:6024
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 600 -p 2424 -ip 24241⤵PID:1132
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 2496 -ip 24961⤵PID:4288
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 512 -p 3104 -ip 31041⤵PID:3588
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 392 -p 4552 -ip 45521⤵PID:1652
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 392 -p 3044 -ip 30441⤵PID:3064
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 616 -p 2608 -ip 26081⤵PID:3776
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 612 -p 5816 -ip 58161⤵PID:3612
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 580 -p 1444 -ip 14441⤵PID:4048
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 616 -p 5136 -ip 51361⤵PID:1764
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 1144 -ip 11441⤵PID:3224
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 628 -p 2124 -ip 21241⤵PID:3188
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 616 -p 4488 -ip 44881⤵PID:6064
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 616 -p 4576 -ip 45761⤵PID:1780
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 1980 -ip 19801⤵PID:2208
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 504 -p 5992 -ip 59921⤵PID:828
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 596 -p 4148 -ip 41481⤵PID:1716
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 568 -p 2860 -ip 28601⤵PID:1076
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 568 -p 2376 -ip 23761⤵PID:1756
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 392 -p 2656 -ip 26561⤵PID:3024
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 496 -p 4988 -ip 49881⤵PID:5240
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 608 -p 1364 -ip 13641⤵PID:2996
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 2764 -ip 27641⤵PID:5416
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 604 -p 4804 -ip 48041⤵PID:5328
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 604 -p 4688 -ip 46881⤵PID:5844
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 612 -p 3392 -ip 33921⤵PID:432
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 624 -p 4580 -ip 45801⤵PID:1808
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 580 -p 5420 -ip 54201⤵PID:2676
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 392 -p 2296 -ip 22961⤵PID:2456
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 616 -p 2188 -ip 21881⤵PID:4984
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 600 -p 3744 -ip 37441⤵PID:1844
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 504 -p 5192 -ip 51921⤵PID:2648
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 392 -p 5180 -ip 51801⤵PID:2000
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 600 -p 4060 -ip 40601⤵PID:1784
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 652 -p 5612 -ip 56121⤵PID:3088
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 512 -p 2736 -ip 27361⤵PID:2152
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 652 -p 4248 -ip 42481⤵PID:1416
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 600 -p 3420 -ip 34201⤵PID:4496
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 652 -p 3668 -ip 36681⤵PID:1124
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 612 -p 5968 -ip 59681⤵PID:5744
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 600 -p 1604 -ip 16041⤵PID:4484
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 392 -p 3888 -ip 38881⤵PID:696
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 612 -p 4232 -ip 42321⤵PID:2580
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 392 -p 1528 -ip 15281⤵PID:1260
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 520 -p 5484 -ip 54841⤵PID:4772
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 624 -p 900 -ip 9001⤵PID:1656
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 604 -p 2816 -ip 28161⤵PID:4660
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 604 -p 1184 -ip 11841⤵PID:3704
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 612 -p 2548 -ip 25481⤵PID:3160
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 656 -p 396 -ip 3961⤵PID:5508
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 580 -p 4008 -ip 40081⤵PID:3984
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 612 -p 3216 -ip 32161⤵PID:4364
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 496 -p 3068 -ip 30681⤵PID:5948
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 652 -p 432 -ip 4321⤵PID:1308
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 5128 -ip 51281⤵PID:4080
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 6024 -ip 60241⤵PID:4292
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 3496 -ip 34961⤵PID:5404
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 652 -p 6008 -ip 60081⤵PID:5064
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 588 -p 1104 -ip 11041⤵PID:1652
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 580 -p 5808 -ip 58081⤵PID:1176
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 616 -p 2000 -ip 20001⤵PID:2972
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 596 -p 248 -ip 2481⤵PID:4516
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 608 -p 5160 -ip 51601⤵PID:3856
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 608 -p 780 -ip 7801⤵PID:3884
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 504 -p 1416 -ip 14161⤵PID:3316
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 612 -p 5024 -ip 50241⤵PID:1492
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 3220 -ip 32201⤵PID:3188
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 504 -p 5584 -ip 55841⤵PID:2200
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 5392 -ip 53921⤵PID:2796
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 504 -p 3484 -ip 34841⤵PID:4532
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 520 -p 2756 -ip 27561⤵PID:2332
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 504 -p 1260 -ip 12601⤵PID:5640
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 604 -p 2004 -ip 20041⤵PID:3712
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 608 -p 8 -ip 81⤵PID:6036
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 616 -p 2852 -ip 28521⤵PID:3244
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 652 -p 3000 -ip 30001⤵PID:5656
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 580 -p 560 -ip 5601⤵PID:5724
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 632 -p 4028 -ip 40281⤵PID:3980
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 604 -p 3960 -ip 39601⤵PID:4000
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 568 -p 4836 -ip 48361⤵PID:4888
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 636 -p 3524 -ip 35241⤵PID:2644
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 632 -p 2660 -ip 26601⤵PID:1808
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 628 -p 3540 -ip 35401⤵PID:4292
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 608 -p 1160 -ip 11601⤵PID:4440
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 492 -p 5572 -ip 55721⤵PID:5036
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 604 -p 2980 -ip 29801⤵PID:3532
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 612 -p 4608 -ip 46081⤵PID:1180
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 624 -p 468 -ip 4681⤵PID:1784
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 504 -p 596 -ip 5961⤵PID:5008
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 596 -p 3856 -ip 38561⤵PID:2836
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 5804 -ip 58041⤵PID:1660
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 492 -p 4692 -ip 46921⤵PID:5976
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 624 -p 3224 -ip 32241⤵PID:5556
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 580 -p 5744 -ip 57441⤵PID:4056
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 580 -p 4484 -ip 44841⤵PID:1668
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 512 -p 3708 -ip 37081⤵PID:3784
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 512 -p 5144 -ip 51441⤵PID:5212
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 580 -p 3384 -ip 33841⤵PID:4628
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 604 -p 1192 -ip 11921⤵PID:4280
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 512 -p 3740 -ip 37401⤵PID:6036
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 588 -p 4752 -ip 47521⤵PID:4212
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 600 -p 200 -ip 2001⤵PID:5908
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 604 -p 2080 -ip 20801⤵PID:3968
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 600 -p 4000 -ip 40001⤵PID:3992
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 600 -p 2480 -ip 24801⤵PID:840
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 640 -p 1168 -ip 11681⤵PID:5400
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 512 -p 5660 -ip 56601⤵PID:1132
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 580 -p 4984 -ip 49841⤵PID:5404
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 520 -p 5692 -ip 56921⤵PID:3460
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 636 -p 2172 -ip 21721⤵PID:4708
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 520 -p 4380 -ip 43801⤵PID:4556
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 632 -p 1352 -ip 13521⤵PID:2448
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 600 -p 2164 -ip 21641⤵PID:1096
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 596 -p 5476 -ip 54761⤵PID:2156
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 652 -p 3316 -ip 33161⤵PID:3184
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 492 -p 2684 -ip 26841⤵PID:5700
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 656 -p 1220 -ip 12201⤵PID:4868
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 504 -p 3304 -ip 33041⤵PID:1668
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 628 -p 1372 -ip 13721⤵PID:2208
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 656 -p 5468 -ip 54681⤵PID:3564
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 640 -p 1716 -ip 17161⤵PID:3340
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 512 -p 940 -ip 9401⤵PID:1656
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 512 -p 5920 -ip 59201⤵PID:3736
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 640 -p 3344 -ip 33441⤵PID:4980
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 640 -p 4588 -ip 45881⤵PID:4816
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 5464 -ip 54641⤵PID:4612
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 612 -p 5820 -ip 58201⤵PID:4328
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 596 -p 3964 -ip 39641⤵PID:4600
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 4396 -ip 43961⤵PID:3512
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 604 -p 1308 -ip 13081⤵PID:1748
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 580 -p 5472 -ip 54721⤵PID:5424
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 652 -p 3276 -ip 32761⤵PID:2476
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 520 -p 4652 -ip 46521⤵PID:5064
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 632 -p 5104 -ip 51041⤵PID:6132
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 520 -p 3256 -ip 32561⤵PID:1176
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 520 -p 5684 -ip 56841⤵PID:1888
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 392 -p 2536 -ip 25361⤵PID:3088
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 604 -p 260 -ip 2601⤵PID:2156
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 512 -p 2068 -ip 20681⤵PID:5976
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 636 -p 2712 -ip 27121⤵PID:2968
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 652 -p 5108 -ip 51081⤵PID:5868
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 2796 -ip 27961⤵PID:5140
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 656 -p 4952 -ip 49521⤵PID:4972
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 512 -p 828 -ip 8281⤵PID:1156
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 652 -p 3340 -ip 33401⤵PID:4628
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 652 -p 2672 -ip 26721⤵PID:3712
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 620 -p 4660 -ip 46601⤵PID:4216
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 580 -p 1600 -ip 16001⤵PID:5336
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 620 -p 4592 -ip 45921⤵PID:4212
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 624 -p 5416 -ip 54161⤵PID:5908
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 636 -p 2368 -ip 23681⤵PID:5000
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 636 -p 4368 -ip 43681⤵PID:3988
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 568 -p 3320 -ip 33201⤵PID:3108
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 604 -p 1028 -ip 10281⤵PID:1132
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 636 -p 4092 -ip 40921⤵PID:5404
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 648 -p 3876 -ip 38761⤵PID:3460
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 604 -p 1328 -ip 13281⤵PID:6132
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 648 -p 1892 -ip 18921⤵PID:5412
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 604 -p 5872 -ip 58721⤵PID:5924
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 596 -p 5644 -ip 56441⤵PID:4516
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 596 -p 3884 -ip 38841⤵PID:1100
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 640 -p 1628 -ip 16281⤵PID:2960
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 596 -p 1520 -ip 15201⤵PID:2968
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 504 -p 2760 -ip 27601⤵PID:2200
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 620 -p 4084 -ip 40841⤵PID:5216
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 632 -p 4740 -ip 47401⤵PID:1040
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 504 -p 3100 -ip 31001⤵PID:5124
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 624 -p 4628 -ip 46281⤵PID:4632
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 596 -p 1452 -ip 14521⤵PID:1076
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 648 -p 4176 -ip 41761⤵PID:5548
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 620 -p 1228 -ip 12281⤵PID:1408
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 512 -p 1324 -ip 13241⤵PID:1456
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 632 -p 5724 -ip 57241⤵PID:1484
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 648 -p 4144 -ip 41441⤵PID:3968
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 520 -p 4104 -ip 41041⤵PID:5232
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 652 -p 4808 -ip 48081⤵PID:2312
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 504 -p 4568 -ip 45681⤵PID:4796
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 620 -p 5404 -ip 54041⤵PID:5068
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 492 -p 1348 -ip 13481⤵PID:3532
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 580 -p 4088 -ip 40881⤵PID:3748
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 5840 -ip 58401⤵PID:768
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 392 -p 2648 -ip 26481⤵PID:2972
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 624 -p 1244 -ip 12441⤵PID:5520
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 648 -p 4732 -ip 47321⤵PID:5976
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 512 -p 2916 -ip 29161⤵PID:3716
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 492 -p 1580 -ip 15801⤵PID:4076
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 624 -p 4868 -ip 48681⤵PID:6064
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 512 -p 4400 -ip 44001⤵PID:2284
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 648 -p 5212 -ip 52121⤵PID:5760
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 1992 -ip 19921⤵PID:1156
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 504 -p 3448 -ip 34481⤵PID:4844
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 648 -p 6036 -ip 60361⤵PID:3260
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 392 -p 2708 -ip 27081⤵PID:3852
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 624 -p 3456 -ip 34561⤵PID:5908
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 520 -p 3244 -ip 32441⤵PID:4976
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 568 -p 3160 -ip 31601⤵PID:3968
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 4364 -ip 43641⤵PID:5308
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 624 -p 840 -ip 8401⤵PID:2492
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 624 -p 5344 -ip 53441⤵PID:5036
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 492 -p 2832 -ip 28321⤵PID:3460
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 492 -p 3424 -ip 34241⤵PID:4196
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 1396 -ip 13961⤵PID:4036
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 568 -p 1176 -ip 11761⤵PID:1784
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 656 -p 2972 -ip 29721⤵PID:1924
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 640 -p 1232 -ip 12321⤵PID:4744
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 620 -p 5776 -ip 57761⤵PID:4860
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 620 -p 3692 -ip 36921⤵PID:2740
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 644 -p 2772 -ip 27721⤵PID:5852
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 492 -p 476 -ip 4761⤵PID:4056
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 568 -p 904 -ip 9041⤵PID:956
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 600 -p 3688 -ip 36881⤵PID:4532
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 4748 -ip 47481⤵PID:4192
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 512 -p 3528 -ip 35281⤵PID:5936
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 620 -p 2800 -ip 28001⤵PID:4892
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 568 -p 1756 -ip 17561⤵PID:1456
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 3796 -ip 37961⤵PID:1712
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 568 -p 3996 -ip 39961⤵PID:3040
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 624 -p 4640 -ip 46401⤵PID:4312
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 620 -p 5844 -ip 58441⤵PID:1560
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 588 -p 1120 -ip 11201⤵PID:3364
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 628 -p 2292 -ip 22921⤵PID:5092
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 5544 -ip 55441⤵PID:4884
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\prep_Activatable Class_Hermes_perf.cache
- Size 599B
- SHA256 b536a3dae9ea5c69081f0491eed829e3b57e32401fdf49a63031bcd6b20e6fdb
- MD5 658ab8c32d4cc5deb36ac5f63da4658b
- SHA1 30c12cd871ff0c2c4098d794e9ae4f2540586813
- SHA512 a73030c008ef3c2e274f11c90bfe79fa8ae402f76801c710bed8cc1ab1218a84858ea566b772be4bade8ef639a019c57d297028df15b64b3753482cf0f3c8f85
- TLSH T12AF05C83EB6A1B72C456123DC8EE56E47B31D1846EC11367A2107B1D3C2B7192D174BD
- MD5 SHA1 SHA512 TLSH