hxxps://natromacro[.]com/download

Analysis

max time kernel
63s
max time network
64s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
25/08/2024, 18:27

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://natromacro.com/download

Score

7^/10

discovery

Malware Config

Signatures

Executes dropped EXE 15 IoCs

pid	Process
4544	AutoHotkey32.exe
5232	AutoHotkey32.exe
5260	AutoHotkey64.exe
5292	AutoHotkey64.exe
5332	AutoHotkey64.exe
5344	AutoHotkey64.exe
5372	AutoHotkey64.exe
5400	AutoHotkey64.exe
5432	AutoHotkey64.exe
5464	AutoHotkey64.exe
5508	AutoHotkey64.exe
5520	AutoHotkey64.exe
5548	AutoHotkey64.exe
5596	AutoHotkey64.exe
6124	AutoHotkey64.exe

Loads dropped DLL 3 IoCs

pid	Process
4544	AutoHotkey32.exe
4544	AutoHotkey32.exe
4544	AutoHotkey32.exe

Legitimate hosting services abused for malware hosting/C2 1 TTPs 3 IoCs

Web Service

T1102

flow	ioc
232	raw.githubusercontent.com
233	raw.githubusercontent.com
235	raw.githubusercontent.com

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	AutoHotkey32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	AutoHotkey32.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133690840697983613"	msedge.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2170637797-568393320-3232933035-1000\{CC3E54BA-9BE5-4161-B6D0-DE8F59C838BE}	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4544	AutoHotkey32.exe
4544	AutoHotkey32.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
4544	AutoHotkey32.exe

Suspicious use of AdjustPrivilegeToken 4 IoCs

description	pid	Process
Token: SeRestorePrivilege	4720	7zG.exe
Token: 35	4720	7zG.exe
Token: SeSecurityPrivilege	4720	7zG.exe
Token: SeSecurityPrivilege	4720	7zG.exe

Suspicious use of FindShellTrayWindow 3 IoCs

pid	Process
4720	7zG.exe
4544	AutoHotkey32.exe
4544	AutoHotkey32.exe

Suspicious use of SendNotifyMessage 2 IoCs

pid	Process
4544	AutoHotkey32.exe
4544	AutoHotkey32.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4544	AutoHotkey32.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2692 wrote to memory of 4884	2692	msedge.exe	117
PID 2692 wrote to memory of 4884	2692	msedge.exe	117
PID 2692 wrote to memory of 4368	2692	msedge.exe	118
PID 2692 wrote to memory of 4368	2692	msedge.exe	118
PID 2692 wrote to memory of 4368	2692	msedge.exe	118
PID 2692 wrote to memory of 4368	2692	msedge.exe	118
PID 2692 wrote to memory of 4368	2692	msedge.exe	118
PID 2692 wrote to memory of 4368	2692	msedge.exe	118
PID 2692 wrote to memory of 4368	2692	msedge.exe	118
PID 2692 wrote to memory of 4368	2692	msedge.exe	118
PID 2692 wrote to memory of 4368	2692	msedge.exe	118
PID 2692 wrote to memory of 4368	2692	msedge.exe	118
PID 2692 wrote to memory of 4368	2692	msedge.exe	118
PID 2692 wrote to memory of 4368	2692	msedge.exe	118
PID 2692 wrote to memory of 4368	2692	msedge.exe	118
PID 2692 wrote to memory of 4368	2692	msedge.exe	118
PID 2692 wrote to memory of 4368	2692	msedge.exe	118
PID 2692 wrote to memory of 4368	2692	msedge.exe	118
PID 2692 wrote to memory of 4368	2692	msedge.exe	118
PID 2692 wrote to memory of 4368	2692	msedge.exe	118
PID 2692 wrote to memory of 4368	2692	msedge.exe	118
PID 2692 wrote to memory of 4368	2692	msedge.exe	118
PID 2692 wrote to memory of 4368	2692	msedge.exe	118
PID 2692 wrote to memory of 4368	2692	msedge.exe	118
PID 2692 wrote to memory of 4368	2692	msedge.exe	118
PID 2692 wrote to memory of 4368	2692	msedge.exe	118
PID 2692 wrote to memory of 4368	2692	msedge.exe	118
PID 2692 wrote to memory of 4368	2692	msedge.exe	118
PID 2692 wrote to memory of 4368	2692	msedge.exe	118
PID 2692 wrote to memory of 4368	2692	msedge.exe	118
PID 2692 wrote to memory of 4368	2692	msedge.exe	118
PID 2692 wrote to memory of 4368	2692	msedge.exe	118
PID 2692 wrote to memory of 4368	2692	msedge.exe	118
PID 2692 wrote to memory of 4368	2692	msedge.exe	118
PID 2692 wrote to memory of 4368	2692	msedge.exe	118
PID 2692 wrote to memory of 4368	2692	msedge.exe	118
PID 2692 wrote to memory of 4368	2692	msedge.exe	118
PID 2692 wrote to memory of 4368	2692	msedge.exe	118
PID 2692 wrote to memory of 4368	2692	msedge.exe	118
PID 2692 wrote to memory of 4368	2692	msedge.exe	118
PID 2692 wrote to memory of 4368	2692	msedge.exe	118
PID 2692 wrote to memory of 4368	2692	msedge.exe	118
PID 2692 wrote to memory of 4368	2692	msedge.exe	118
PID 2692 wrote to memory of 4368	2692	msedge.exe	118
PID 2692 wrote to memory of 4368	2692	msedge.exe	118
PID 2692 wrote to memory of 4368	2692	msedge.exe	118
PID 2692 wrote to memory of 4368	2692	msedge.exe	118
PID 2692 wrote to memory of 4368	2692	msedge.exe	118
PID 2692 wrote to memory of 4368	2692	msedge.exe	118
PID 2692 wrote to memory of 4368	2692	msedge.exe	118
PID 2692 wrote to memory of 4368	2692	msedge.exe	118
PID 2692 wrote to memory of 4368	2692	msedge.exe	118
PID 2692 wrote to memory of 4368	2692	msedge.exe	118
PID 2692 wrote to memory of 3252	2692	msedge.exe	119
PID 2692 wrote to memory of 3252	2692	msedge.exe	119
PID 2692 wrote to memory of 2392	2692	msedge.exe	120
PID 2692 wrote to memory of 2392	2692	msedge.exe	120
PID 2692 wrote to memory of 2392	2692	msedge.exe	120
PID 2692 wrote to memory of 2392	2692	msedge.exe	120
PID 2692 wrote to memory of 2392	2692	msedge.exe	120
PID 2692 wrote to memory of 2392	2692	msedge.exe	120
PID 2692 wrote to memory of 2392	2692	msedge.exe	120
PID 2692 wrote to memory of 2392	2692	msedge.exe	120
PID 2692 wrote to memory of 2392	2692	msedge.exe	120

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://natromacro.com/download
1⤵
PID:664

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=16 --field-trial-handle=748,i,10597648459838880772,16562651767759956329,262144 --variations-seed-version --mojo-platform-channel-handle=5028 /prefetch:1
1⤵
PID:3944

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=15 --field-trial-handle=744,i,10597648459838880772,16562651767759956329,262144 --variations-seed-version --mojo-platform-channel-handle=4272 /prefetch:1
1⤵
PID:2688

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=17 --field-trial-handle=5400,i,10597648459838880772,16562651767759956329,262144 --variations-seed-version --mojo-platform-channel-handle=5420 /prefetch:1
1⤵
PID:1560

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=5468,i,10597648459838880772,16562651767759956329,262144 --variations-seed-version --mojo-platform-channel-handle=5584 /prefetch:8
1⤵
PID:4256

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --field-trial-handle=5568,i,10597648459838880772,16562651767759956329,262144 --variations-seed-version --mojo-platform-channel-handle=5668 /prefetch:8
1⤵
PID:4456

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=20 --field-trial-handle=6108,i,10597648459838880772,16562651767759956329,262144 --variations-seed-version --mojo-platform-channel-handle=6148 /prefetch:1
1⤵
PID:2052

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --field-trial-handle=6096,i,10597648459838880772,16562651767759956329,262144 --variations-seed-version --mojo-platform-channel-handle=6180 /prefetch:8
1⤵
PID:380

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=22 --field-trial-handle=6180,i,10597648459838880772,16562651767759956329,262144 --variations-seed-version --mojo-platform-channel-handle=6336 /prefetch:1
1⤵
PID:2840

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=23 --field-trial-handle=6848,i,10597648459838880772,16562651767759956329,262144 --variations-seed-version --mojo-platform-channel-handle=6780 /prefetch:1
1⤵
PID:1756

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=24 --field-trial-handle=5020,i,10597648459838880772,16562651767759956329,262144 --variations-seed-version --mojo-platform-channel-handle=6772 /prefetch:1
1⤵
PID:4356

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --field-trial-handle=6824,i,10597648459838880772,16562651767759956329,262144 --variations-seed-version --mojo-platform-channel-handle=6896 /prefetch:8
1⤵
PID:4948

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=26 --field-trial-handle=6932,i,10597648459838880772,16562651767759956329,262144 --variations-seed-version --mojo-platform-channel-handle=6948 /prefetch:1
1⤵
PID:3772

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.FileUtilService --lang=en-US --service-sandbox-type=service --field-trial-handle=6876,i,10597648459838880772,16562651767759956329,262144 --variations-seed-version --mojo-platform-channel-handle=7376 /prefetch:8
1⤵
PID:4084

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --field-trial-handle=7612,i,10597648459838880772,16562651767759956329,262144 --variations-seed-version --mojo-platform-channel-handle=7620 /prefetch:8
1⤵
PID:4016

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious use of WriteProcessMemory
PID:2692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=127.0.6533.89 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=127.0.2651.86 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ff95e63d198,0x7ff95e63d1a4,0x7ff95e63d1b0
  2⤵
  PID:4884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=2456,i,6970480283731729650,331131379612787953,262144 --variations-seed-version --mojo-platform-channel-handle=2452 /prefetch:2
  2⤵
  PID:4368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --field-trial-handle=1816,i,6970480283731729650,331131379612787953,262144 --variations-seed-version --mojo-platform-channel-handle=3236 /prefetch:3
  2⤵
  PID:3252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --field-trial-handle=2128,i,6970480283731729650,331131379612787953,262144 --variations-seed-version --mojo-platform-channel-handle=3396 /prefetch:8
  2⤵
  PID:2392
- C:\Program Files (x86)\Microsoft\Edge\Application\127.0.2651.86\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\127.0.2651.86\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --field-trial-handle=4436,i,6970480283731729650,331131379612787953,262144 --variations-seed-version --mojo-platform-channel-handle=4504 /prefetch:8
  2⤵
  PID:4680
- C:\Program Files (x86)\Microsoft\Edge\Application\127.0.2651.86\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\127.0.2651.86\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --field-trial-handle=4436,i,6970480283731729650,331131379612787953,262144 --variations-seed-version --mojo-platform-channel-handle=4504 /prefetch:8
  2⤵
  PID:4896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --field-trial-handle=4500,i,6970480283731729650,331131379612787953,262144 --variations-seed-version --mojo-platform-channel-handle=4232 /prefetch:8
  2⤵
  PID:2468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --field-trial-handle=4156,i,6970480283731729650,331131379612787953,262144 --variations-seed-version --mojo-platform-channel-handle=3084 /prefetch:8
  2⤵
  PID:2532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --field-trial-handle=3020,i,6970480283731729650,331131379612787953,262144 --variations-seed-version --mojo-platform-channel-handle=4788 /prefetch:8
  2⤵
  PID:1908

C:\Program Files (x86)\Microsoft\Edge\Application\127.0.2651.86\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\127.0.2651.86\elevation_service.exe"
1⤵
PID:3528

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:1104

C:\Program Files\7-Zip\7zG.exe
"C:\Program Files\7-Zip\7zG.exe" x -o"C:\Users\Admin\Downloads\Natro_Macro_v1.0.0.2\" -ad -an -ai#7zMap5052:102:7zEvent26838
1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:4720

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\Users\Admin\Downloads\Natro_Macro_v1.0.0.2\Natro Macro v1.0.0.2\START.bat" "
1⤵
PID:4524
- C:\Windows\system32\chcp.com
  chcp 65001
  2⤵
  PID:2360
- C:\Users\Admin\Downloads\Natro_Macro_v1.0.0.2\Natro Macro v1.0.0.2\submacros\AutoHotkey32.exe
  "C:\Users\Admin\Downloads\Natro_Macro_v1.0.0.2\Natro Macro v1.0.0.2\submacros\AutoHotkey32.exe" "C:\Users\Admin\Downloads\Natro_Macro_v1.0.0.2\Natro Macro v1.0.0.2\submacros\natro_macro.ahk"
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - System Location Discovery: System Language Discovery
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious behavior: GetForegroundWindowSpam
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SendNotifyMessage
  - Suspicious use of SetWindowsHookEx
  PID:4544
- - C:\Users\Admin\Downloads\Natro_Macro_v1.0.0.2\Natro Macro v1.0.0.2\submacros\AutoHotkey32.exe
    "C:\Users\Admin\Downloads\Natro_Macro_v1.0.0.2\Natro Macro v1.0.0.2\submacros\AutoHotkey32.exe" /script "C:\Users\Admin\Downloads\Natro_Macro_v1.0.0.2\Natro Macro v1.0.0.2\submacros\Heartbeat.ahk"
    3⤵
    - Executes dropped EXE
    - System Location Discovery: System Language Discovery
    PID:5232
- - C:\Users\Admin\Downloads\Natro_Macro_v1.0.0.2\Natro Macro v1.0.0.2\submacros\AutoHotkey64.exe
    "C:\Users\Admin\Downloads\Natro_Macro_v1.0.0.2\Natro Macro v1.0.0.2\submacros\AutoHotkey64.exe" /script /Validate /ErrorStdOut *
    3⤵
    - Executes dropped EXE
    PID:5260
- - C:\Users\Admin\Downloads\Natro_Macro_v1.0.0.2\Natro Macro v1.0.0.2\submacros\AutoHotkey64.exe
    "C:\Users\Admin\Downloads\Natro_Macro_v1.0.0.2\Natro Macro v1.0.0.2\submacros\AutoHotkey64.exe" /script /Validate /ErrorStdOut *
    3⤵
    - Executes dropped EXE
    PID:5292
- - C:\Users\Admin\Downloads\Natro_Macro_v1.0.0.2\Natro Macro v1.0.0.2\submacros\AutoHotkey64.exe
    "C:\Users\Admin\Downloads\Natro_Macro_v1.0.0.2\Natro Macro v1.0.0.2\submacros\AutoHotkey64.exe" /script /Validate /ErrorStdOut *
    3⤵
    - Executes dropped EXE
    PID:5332
- - C:\Users\Admin\Downloads\Natro_Macro_v1.0.0.2\Natro Macro v1.0.0.2\submacros\AutoHotkey64.exe
    "C:\Users\Admin\Downloads\Natro_Macro_v1.0.0.2\Natro Macro v1.0.0.2\submacros\AutoHotkey64.exe" /script /Validate /ErrorStdOut *
    3⤵
    - Executes dropped EXE
    PID:5344
- - C:\Users\Admin\Downloads\Natro_Macro_v1.0.0.2\Natro Macro v1.0.0.2\submacros\AutoHotkey64.exe
    "C:\Users\Admin\Downloads\Natro_Macro_v1.0.0.2\Natro Macro v1.0.0.2\submacros\AutoHotkey64.exe" /script /Validate /ErrorStdOut *
    3⤵
    - Executes dropped EXE
    PID:5372
- - C:\Users\Admin\Downloads\Natro_Macro_v1.0.0.2\Natro Macro v1.0.0.2\submacros\AutoHotkey64.exe
    "C:\Users\Admin\Downloads\Natro_Macro_v1.0.0.2\Natro Macro v1.0.0.2\submacros\AutoHotkey64.exe" /script /Validate /ErrorStdOut *
    3⤵
    - Executes dropped EXE
    PID:5400
- - C:\Users\Admin\Downloads\Natro_Macro_v1.0.0.2\Natro Macro v1.0.0.2\submacros\AutoHotkey64.exe
    "C:\Users\Admin\Downloads\Natro_Macro_v1.0.0.2\Natro Macro v1.0.0.2\submacros\AutoHotkey64.exe" /script /Validate /ErrorStdOut *
    3⤵
    - Executes dropped EXE
    PID:5432
- - C:\Users\Admin\Downloads\Natro_Macro_v1.0.0.2\Natro Macro v1.0.0.2\submacros\AutoHotkey64.exe
    "C:\Users\Admin\Downloads\Natro_Macro_v1.0.0.2\Natro Macro v1.0.0.2\submacros\AutoHotkey64.exe" /script /Validate /ErrorStdOut *
    3⤵
    - Executes dropped EXE
    PID:5464
- - C:\Users\Admin\Downloads\Natro_Macro_v1.0.0.2\Natro Macro v1.0.0.2\submacros\AutoHotkey64.exe
    "C:\Users\Admin\Downloads\Natro_Macro_v1.0.0.2\Natro Macro v1.0.0.2\submacros\AutoHotkey64.exe" /script /Validate /ErrorStdOut *
    3⤵
    - Executes dropped EXE
    PID:5508
- - C:\Users\Admin\Downloads\Natro_Macro_v1.0.0.2\Natro Macro v1.0.0.2\submacros\AutoHotkey64.exe
    "C:\Users\Admin\Downloads\Natro_Macro_v1.0.0.2\Natro Macro v1.0.0.2\submacros\AutoHotkey64.exe" /script /Validate /ErrorStdOut *
    3⤵
    - Executes dropped EXE
    PID:5520
- - C:\Users\Admin\Downloads\Natro_Macro_v1.0.0.2\Natro Macro v1.0.0.2\submacros\AutoHotkey64.exe
    "C:\Users\Admin\Downloads\Natro_Macro_v1.0.0.2\Natro Macro v1.0.0.2\submacros\AutoHotkey64.exe" /script /Validate /ErrorStdOut *
    3⤵
    - Executes dropped EXE
    PID:5548
- - C:\Users\Admin\Downloads\Natro_Macro_v1.0.0.2\Natro Macro v1.0.0.2\submacros\AutoHotkey64.exe
    "C:\Users\Admin\Downloads\Natro_Macro_v1.0.0.2\Natro Macro v1.0.0.2\submacros\AutoHotkey64.exe" /script /Validate /ErrorStdOut *
    3⤵
    - Executes dropped EXE
    PID:5596
- - C:\Users\Admin\Downloads\Natro_Macro_v1.0.0.2\Natro Macro v1.0.0.2\submacros\AutoHotkey64.exe
    "C:\Users\Admin\Downloads\Natro_Macro_v1.0.0.2\Natro Macro v1.0.0.2\submacros\AutoHotkey64.exe" /script "C:\Users\Admin\Downloads\Natro_Macro_v1.0.0.2\Natro Macro v1.0.0.2\submacros\Status.ahk" "0" "0" "" "" "1" "" "1" "" "0" "0" "0" "1" "1" "1" "1" "1" "1" "1" "0" "0" "" "1" "1" "1" "1" "0" "0" "?" "0" "" "" "" "" "1" "0"
    3⤵
    - Executes dropped EXE
    PID:6124

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json

Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports

Filesize
2B

MD5
d751713988987e9331980363e24189ce

SHA1
97d170e1550eee4afc0af065b78cda302a97674c

SHA256
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

SHA512
b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries

Filesize
40B

MD5
20d4b8fa017a12a108c87f540836e250

SHA1
1ac617fac131262b6d3ce1f52f5907e31d5f6f00

SHA256
6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d

SHA512
507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
12KB

MD5
c4806251c3d40b9e851b24f7009029b5

SHA1
82c447329db36049dfdf11d5c9f29a952143d913

SHA256
9f913df808eafd787ca2ce22549429a42130ed5680df11619e7f4c05a4cb41d7

SHA512
dfae20b7bc6118d5d789a215a094f4c44dff70b77555abb9ae373bb919de7320fd9913b00b8dea18ddbca72dbd89e7f2d6927ba04fedb90b4333d4539a2dc7f5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences

Filesize
30KB

MD5
a337159b84325b927984b7d55c5172fb

SHA1
f2e634cf2989074c5e40d9e6654cc7e9a3345260

SHA256
679ea35ab15f889864ccff74553e4979e54a57644ccc015a0dc3281a8123aee4

SHA512
33d8a7d352056d70c03593ee4c6222e9e180c6868272a3afd73486189c97a0b9133cf8893fd65dc0e5eef7306f4b975bd9908769afe0b006e481dd296216a800

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
76KB

MD5
866e390a79464feb24d69f0fc0c26c25

SHA1
7efb0537cd82ec7b205078e6346d1feb2cf42ea7

SHA256
534583a287efcc836e7ffa3fceb6ec220bc13e8959bb8e046ca1eeb89732a364

SHA512
f3cc135a98c7b938cfadb0862be8446de0fb435c09f7cbb250b7d15b84363003a99e2bc9ddc148a55b25000f1cf3c112b0fbb418215c71bbb1bbdc0174558fe1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
73KB

MD5
58e2f8dbd0ba3e2bda8fca6f7a0a678c

SHA1
1fc3d355542bb10591301d4b14d85142df60c60a

SHA256
2c367c11388be2b17b76b8f998a7f16fe00fbb22337077cdcaac7f7368bb6b57

SHA512
ac3a0cf7753ef9ecd363bc60ba0a4736e4b5f7840bc31c08010f0e22a2522b22425c767946bfd69b746cef86f19b49b3dfddd87182b29e55c8219547a4f0af28

Download Submit
C:\Users\Admin\Downloads\Natro_Macro_v1.0.0.2.zip

Filesize
6.9MB

MD5
eb7d5b3606956d9e009fdbc384f6b843

SHA1
a5653151bd36a11afc29e07307d0b878ed7d402b

SHA256
4adfeb9a9f584c7039a6aa3b0121f7ed6c17b5ff85479b6a7246a28d619a669a

SHA512
07acdfee5f8858ebf125c8c039a7826e868cbccec2595855e48a0350368cd7fa0ba1a0c698a526fbb445715b479ebdffc238e0bbb1e4f4ed58c3e974b52281e2

Download Submit
C:\Users\Admin\Downloads\Natro_Macro_v1.0.0.2\Natro Macro v1.0.0.2\START.bat

Filesize
3KB

MD5
a58311373246197ce552ceba70ad8b5c

SHA1
1e637d4b87a39a2d569a81ef99b18184b4442c1e

SHA256
c48cd7ddf41dd81fae4db362c5c631edb582f03fb170b1a858fa655d6ccadce8

SHA512
b415cdfe258eb28e6e08b22f400f32699bb9d4df25b51754c9ea92028aba315c73dd6d7280b4743ac1f06f87275c7535248be441dbe7585d5fc9ca536b3abfff

Download Submit
C:\Users\Admin\Downloads\Natro_Macro_v1.0.0.2\Natro Macro v1.0.0.2\lib\DurationFromSeconds.ahk

Filesize
724B

MD5
0ff21713a7ebfcac269c4ca840d72816

SHA1
3cdc1400ac14672089072399d8044bedb1e4aca1

SHA256
f55525fbc7588d8b4453bc86018c1341eaf12752f5c5d37b68679a2251a14651

SHA512
97d3fb5b2577ceb90dfc79096705b8f84600e85d573ce671e52372136933ffb14ed8e8881a2f834cb073b9739e3e00de36b259d606fd63f96e72084ef72ca6ca

Download Submit
C:\Users\Admin\Downloads\Natro_Macro_v1.0.0.2\Natro Macro v1.0.0.2\lib\Gdip_All.ahk

Filesize
135KB

MD5
bdf3099831bff1f4d7d57e0aebe4afe3

SHA1
7f00c585d3ebc7993aea5964de274487d8edee7b

SHA256
72dcc0fc9bada8e76e8d2f4868f6b23f7a42db3b675a7a490360ab2d96b30fff

SHA512
3225c38960c63ea7995938d6d28d247c077ac79587f39b6a4f3a14eb975c1c75b8d5aab87dbd8323018713a8b8aac02a332be234782b69850414eaf862e7e79a

Download Submit
C:\Users\Admin\Downloads\Natro_Macro_v1.0.0.2\Natro Macro v1.0.0.2\lib\Gdip_ImageSearch.ahk

Filesize
32KB

MD5
8ffafcfd0fb2247c45a6597a69c20432

SHA1
78215ad2e0dd95094d06bc14c361c092b60e4438

SHA256
25bd9b4b006a80e43df94c30eed25df33f3e27c1380280cedd9559c8f00faf70

SHA512
1a74a60c1b4cbf7eb7dcf84385638bda24c3e255aab5e820d23ac3d1a8625435fa7ae125b4868f387b590aeb8980813e8cd3d0c8bbda1ace338a89850eb39575

Download Submit
C:\Users\Admin\Downloads\Natro_Macro_v1.0.0.2\Natro Macro v1.0.0.2\lib\JSON.ahk

Filesize
7KB

MD5
5d0f46b85b9851a4f2c0715001aebe21

SHA1
9e80a17ec8579e4fc42514364daa06c7b1cddbfc

SHA256
d1d9e2d5c8e492258461ca31f40199b2457da2404c28faed588bf3b76ce7eb80

SHA512
cb95438e4aa00ff7ab2ced3f49d1f33332ff792f5a88e858fc095815dd8548f1dc8f849b83787d9bbd24c1c6a26acf1a0c74cc2b2e1baf5fce5de8214d5c748e

Download Submit
C:\Users\Admin\Downloads\Natro_Macro_v1.0.0.2\Natro Macro v1.0.0.2\lib\Roblox.ahk

Filesize
2KB

MD5
0a37e9909366c078d20b0105214fe743

SHA1
78be65d2a15ee4d7fc36293910ceed6ba1c25332

SHA256
9cecc5b3127d14b55e5cedae5ddaaa9ea516b322297210b931bd0c28582644c3

SHA512
e519e2d8be2574e38aee9e8b5cb504f534881227dd4f6b22199b718a59cfd2083a6210cf725585269fa4e21a6bf71b9c73fd359f100537c05a20194e34aebe2d

Download Submit
C:\Users\Admin\Downloads\Natro_Macro_v1.0.0.2\Natro Macro v1.0.0.2\lib\data\memorymatch.ahk

Filesize
2KB

MD5
1bd739fb4481f7ff53f57c42a6674f41

SHA1
79407c2db393692fa68741773d247609d3fcd097

SHA256
c40415d3073ae1db8034f43fbdabe9528e0a87862f540c61be26cff180d32b00

SHA512
010a1737d4d9c55fdf9c2afb8785270a8d925263f7fcbcd0825790fb6758688debcfd812f55c4674dd85d5883edae9974091b93fbb8321c8e3dc4fa221ab89f1

Download Submit
C:\Users\Admin\Downloads\Natro_Macro_v1.0.0.2\Natro Macro v1.0.0.2\lib\enum\EnumInt.ahk

Filesize
7KB

MD5
70fb319373461d48a4c49d5da7226e0d

SHA1
76cfa041ab2a88b8b3bc12996276480910433e65

SHA256
ac5e3f1008f65cf51fbae4a9e879075f65a155869f6d4d9a4196a3b6311163b8

SHA512
87b57918c11e9f76db6832e6d67eb3dd8bff49c6a97259b3830ac2676615beab33d39c8bcf022f69bac9f0d931f7568b7da48a5a796bc80bc4baf46d698884ae

Download Submit
C:\Users\Admin\Downloads\Natro_Macro_v1.0.0.2\Natro Macro v1.0.0.2\lib\enum\EnumStr.ahk

Filesize
1KB

MD5
178b6db95ef550a82e9b441bb91af76a

SHA1
d85eefe051f8d398658a78c7758041ae21827cd8

SHA256
e9f850288c5e3b0205c1e033d7c1d2b0ebc68d5c4d9dcffccd15c0acf14ad1d9

SHA512
aae2f872a080fd70d1d8baab76833dccd913b0504406c8302319afa6782397d9e89892c7cf899944cf8bdc73eb085d4032f6a3b00a3c3f02689bc13416c38410

Download Submit
C:\Users\Admin\Downloads\Natro_Macro_v1.0.0.2\Natro Macro v1.0.0.2\lib\nm_InventorySearch.ahk

Filesize
2KB

MD5
06efd1811ee317d4c1595b6a6cb83451

SHA1
59049a6c82ed225661bf32bc099cd0368ea5fd13

SHA256
469ccae055cc92ca4b04989554aef43cfedd8e3b3ca0f89d8dcf0afb3bd6c9c6

SHA512
fadf5d4f7ae5b8d68b9600a6b2970d7339e98e24b5ef5b8ab601c58a55742128573cf333c1c88ed80874531b0e43555375f771101a77f8f1f4d53acb2a39d052

Download Submit
C:\Users\Admin\Downloads\Natro_Macro_v1.0.0.2\Natro Macro v1.0.0.2\lib\nm_OpenMenu.ahk

Filesize
2KB

MD5
923d753bcc8f129b832cb9fb3c06e30e

SHA1
5138a253af37849e1a8a51f162a5b06ca6d7d17a

SHA256
1285097abde439f5d37a48628480752d6d860f19f48ac3e78eb76cd27e9dd3dd

SHA512
a9711d2c4f23c9792fa3e418a6ddd5da0dddf2be58979a6b69a6583b3a696846cb70ce96f53fc51de51c64e49af336bf143f4ebd4a03798b74950a19389070cc

Download Submit
C:\Users\Admin\Downloads\Natro_Macro_v1.0.0.2\Natro Macro v1.0.0.2\lib\nowUnix.ahk

Filesize
63B

MD5
04dfe4f211a57a5c61aaad08d5ab55ae

SHA1
c09f5addb343221288adf0e9d5b97d45f50bf6f9

SHA256
0b96301cc53a531b0cd35ea27f2a70ba0565b982cf7e1729b312fa21afbfbc11

SHA512
c32cc0395119748c2f2be0599879d3a9ab2a1dc253b37c0b78bac9d89c1f5a4a6d010a2017064ec966a6571b693dd0d5b1ca2b6e758766b5919ff1c6621c668a

Download Submit
C:\Users\Admin\Downloads\Natro_Macro_v1.0.0.2\Natro Macro v1.0.0.2\nm_image_assets\beemenu\bitmaps.ahk

Filesize
2KB

MD5
da9734eac73121f68e1e3546861cdefd

SHA1
6a0ba013064f057645963874330febfa6d1455ae

SHA256
186482c5073f927ce0485df8cddd3edcda3985a7e3fe6e25c4f74247a07491e3

SHA512
398ccf291a1fcbc84f31733e151321874c56c79e9bd81e6d2390be1679f024c1de62de7ef5072c44fddb258c7256e58cb1d3c01da96c0ea3a27a20d8b061bb84

Download Submit
C:\Users\Admin\Downloads\Natro_Macro_v1.0.0.2\Natro Macro v1.0.0.2\nm_image_assets\buffs\bitmaps.ahk

Filesize
2KB

MD5
cd25af2a122904d0cce3608364e62f5d

SHA1
995e16cd9bc593c3f6e2c8664ede4d347c6fa630

SHA256
44f51743003faec0b4c28edfd75bca80075be3d4b0d9eb7b27210d6822682e13

SHA512
ca8f557e347f9ba0b7296eb1b810464d9feba7e27ec8d8b76983af71fa8befcabb23e0d5467c0a06d72c6432143b3199b5b6c579fab4c81073b594ba2b866884

Download Submit
C:\Users\Admin\Downloads\Natro_Macro_v1.0.0.2\Natro Macro v1.0.0.2\nm_image_assets\collect\bitmaps.ahk

Filesize
769B

MD5
c7a5f492510c1a1608933fefd7f28716

SHA1
654c6f5103cc53a34771ebe3729cb3d4997bc817

SHA256
500b1210d9dd9adc495b0d4d3d90f62ef0f742419d59d154a562cb41a0426585

SHA512
dc9476602e50523abc260cf263d4d52227acc355b7247df6e1f6a7fa9348351bf96b5c6386f44d7cad757bae3be7e2d7dd477f2922ee2d6f01aefd157492d5b8

Download Submit
C:\Users\Admin\Downloads\Natro_Macro_v1.0.0.2\Natro Macro v1.0.0.2\nm_image_assets\convert\bitmaps.ahk

Filesize
506B

MD5
8c6743a9004de5c1f3b8469d3553d523

SHA1
2cf9c0f24eb97e1f31e5e5b6b162bd1c771d4d92

SHA256
1b7dcb549b6ccf430c29bc38538009caa781246f79d8290d883974f756403b73

SHA512
d6eb53e60e3c27ccaa1de8de85c446beb102aa70bf61e837585b2c690f938f6deef41cd101d72f5c14ce4eeaa30c1d1ed66ba436c6d10090aebe07ba5fba47b8

Download Submit
C:\Users\Admin\Downloads\Natro_Macro_v1.0.0.2\Natro Macro v1.0.0.2\nm_image_assets\fdc\bitmaps.ahk

Filesize
540B

MD5
cb04cb3c79edcc0b60e6c10e1f32e709

SHA1
986a243c54d40a4b8c6be3974eec8997b85a25c9

SHA256
f5fda0424c4a0bdd390e27c90ffc35ab80f7cc2d08859efe9015fef325e68bfc

SHA512
9777ca1702a4d116c7248fc65e1bb0a8e7459621c757a0d7bfa626469d34944e90cc7dd7e72a64636491254e59f94cd8690ac0790df8cc099613585bc4a7da79

Download Submit
C:\Users\Admin\Downloads\Natro_Macro_v1.0.0.2\Natro Macro v1.0.0.2\nm_image_assets\general\bitmaps.ahk

Filesize
140KB

MD5
d08ced81de6a1ec393523d80b33546ac

SHA1
077aa05fe2969ffa3385bd794f3e99aab7823fa4

SHA256
3e0b542f26acc11350b32fdd121f8bd2381782c85cfcc72cb92479bf17002419

SHA512
92b98d1cf60d8426983aa4d93dc79af15d907556a590b0e2ce5e5985a4533751e4f521a12b36f87104c0b337dc846ac705ff1312ca4ac5a176471b5ffd8e506a

Download Submit
C:\Users\Admin\Downloads\Natro_Macro_v1.0.0.2\Natro Macro v1.0.0.2\nm_image_assets\gui\bitmaps.ahk

Filesize
23KB

MD5
a9d6e82665b29d6d95306dee363a7515

SHA1
efe8639726616f3b26d3f2050b27df78dc904526

SHA256
29d83d620c45cf9de89a699ed355d3c9d1fd2e31182e60f465a68217d3f9ddaa

SHA512
4824f7de198055498fffb03f04a097e97b9fe710205098471e336f7a41280d6dad97605dde8401eba9dfec60e5f01f422616f4a0b64ccf2e43092f7517fade09

Download Submit
C:\Users\Admin\Downloads\Natro_Macro_v1.0.0.2\Natro Macro v1.0.0.2\nm_image_assets\gui\blendershrine_bitmaps.ahk

Filesize
130KB

MD5
a97127d6145bacc2a17a3d6fac5fb614

SHA1
b44cff8d9aecdcc1ad1455cc91983599837c533c

SHA256
e079d4cdadd317e88f61f106a4c131fe5dfdf0e93e851e8708c86cc0f004dec0

SHA512
99e4bcc96ab1b6055fa9a220107c0cc3bf4908c8cd3c7d4c446d60b4c4b5a64ab4e4a5684832ff45bca4a2b4adf2b624be93a383b140ee38adb7377ec99571ad

Download Submit
C:\Users\Admin\Downloads\Natro_Macro_v1.0.0.2\Natro Macro v1.0.0.2\nm_image_assets\inventory\bitmaps.ahk

Filesize
9KB

MD5
a47ef1731b212720c3171aac6ffb9eae

SHA1
c835cb6d5f237e47cc06219be0ad5f869975832a

SHA256
b5c4e732f8baaf36dd772cf18b57e4f0c4f122e53cf6f3c28b211006fa1e93c5

SHA512
cbd1052c34ddd12cab350cafc24d8296de646d957a2fb5de666bca2b38149bb9efa6332a4a2c386f2fff9b5f3cfc46657dfccbaac89796ae4bfc49ff2db126ea

Download Submit
C:\Users\Admin\Downloads\Natro_Macro_v1.0.0.2\Natro Macro v1.0.0.2\nm_image_assets\memorymatch\bitmaps.ahk

Filesize
55KB

MD5
e27c16c665756dcd1d2480afba0b19a2

SHA1
cb3e10eacecb5fe6d46bc5542f42a19d3b2bf607

SHA256
753adb0838e781a16069b8f047e8a2f3783f0a71f3958ecc69937be1bfd6d152

SHA512
5b00c917603b8ae794c6ea42b06802c8281527c07fde8acb8934f9bbcdc8a9c4d699e4fa1ae801c8c5e570f7ebfc414742b62189dc8cf98589e19f784f3a17ca

Download Submit
C:\Users\Admin\Downloads\Natro_Macro_v1.0.0.2\Natro Macro v1.0.0.2\nm_image_assets\offset\bitmaps.ahk

Filesize
1KB

MD5
93c5dbb5cfb8578fac2726d0ed31fbe6

SHA1
9988d96916939454ef73f81847fe200a58331661

SHA256
4cff3fdbe88cba8fc14e3f37980b07b760a958184e520fb7afc4be6cdaadad05

SHA512
6fd2d0070819847326ff2f191edcf9a74057a773f9490bbe141a9c4b7e7db47ba337e4f8a91193509e8fa97ef6494b895eab198a649f301eaf36f2e600f3b329

Download Submit
C:\Users\Admin\Downloads\Natro_Macro_v1.0.0.2\Natro Macro v1.0.0.2\nm_image_assets\perfstats\bitmaps.ahk

Filesize
4KB

MD5
ed39d44fc384aba82799d903e8fb7f3c

SHA1
62e0bdd417ebcc58405895fc3ce850943e2c490e

SHA256
5aa43b1d214da01aac229f9c6e16825bb3a697da71d20bf94ee209d93556a52b

SHA512
e73264671cea13863c2ff00d181ad31ef76da3d3c58d7667213e743746c908e66be36c7b8b778884cfe4626aad4dacc252741db2500005300090554258d6af8e

Download Submit
C:\Users\Admin\Downloads\Natro_Macro_v1.0.0.2\Natro Macro v1.0.0.2\nm_image_assets\quests\bitmaps.ahk

Filesize
156KB

MD5
c718cc735b5148a9be31c52537b42f8e

SHA1
4be6f4b82ccae9aed6abf368173a4d327da793fc

SHA256
96c8d597aa8667bd2563fef3778428eabb73e80d58e71fa8dad759f43a848b20

SHA512
d990895266a03d85da596c9756ac9680993623db5580d7ee5a00f1ea846052741df66a864aa62e9bcba089b8a6c1715560ccabf69b43d12538464208fbb42653

Download Submit
C:\Users\Admin\Downloads\Natro_Macro_v1.0.0.2\Natro Macro v1.0.0.2\nm_image_assets\reconnect\bitmaps.ahk

Filesize
889B

MD5
96622cf297cd54e500265a4dd7c4e8f3

SHA1
87c3d23d5b3999ebbcc531cd98ab7aa64e8c213e

SHA256
4660f025593a3913d17df180aec6eece83cfd88e5765d4b8383581087576a790

SHA512
7ad25b2e63bfd88f1331be45503204b2b55430d03049fe3bd2b866bb4558a7927fa7705dde143ade0a7b2b6d47b8b71ded90089436f99ff96fca0f55cb69b74f

Download Submit
C:\Users\Admin\Downloads\Natro_Macro_v1.0.0.2\Natro Macro v1.0.0.2\nm_image_assets\sprinkler\bitmaps.ahk

Filesize
2KB

MD5
a5a58576dd0ed497b9d7538939483f78

SHA1
f8b56e117acf7694c9a97cdd6977ed6716960429

SHA256
62c5cf95d02825517fb9df54ea45f5b2a86db6d4b43c9db85536ddec332dcfdc

SHA512
0d9005afcb5ef5f285813051c347d6bc7c54552e2f9280e1a5eebdaa77a4850935c6c17b0ee9f33ba6df24fb3568ce4a30617494eb82873366a73d6daff921e1

Download Submit
C:\Users\Admin\Downloads\Natro_Macro_v1.0.0.2\Natro Macro v1.0.0.2\nm_image_assets\stickerprinter\bitmaps.ahk

Filesize
369B

MD5
950d1aee627c757507843f762369140e

SHA1
e3f7a2ff16f0af17a0450e750d4be851ce231f0b

SHA256
584d781836c23de0a9e82059a3f77a9995d0f3c83b8b667e97e3692b0a32c22c

SHA512
f4e1c968019388a36d99e8598028a7571d43dde308aecc824726b1bf001ab6baa4b9d0c7f9682df49fc2767004cf27cdef3e3b8200de40f71c53f856d6ede26a

Download Submit
C:\Users\Admin\Downloads\Natro_Macro_v1.0.0.2\Natro Macro v1.0.0.2\nm_image_assets\stickerstack\bitmaps.ahk

Filesize
4KB

MD5
a47aae65e60411c31b780aede3bb3109

SHA1
3d4f36042e87871b0f496b2da1f4a193a466c87d

SHA256
7c93b9d8fb03fa991896f7d55b6adcf68cc18c894383fe10b6bb59bab444ba62

SHA512
ab647c48f80ef9e1712b7d7c0bd89af1386920ca5e47fcd12a30c5f2d67c8e471677a3740f8c1d0e27f260420644d8c5191a7d059eb5bffc07a57ca6d60b27f9

Download Submit
C:\Users\Admin\Downloads\Natro_Macro_v1.0.0.2\Natro Macro v1.0.0.2\paths\gtb-blue.ahk

Filesize
821B

MD5
743220d30f0664c3158f4b0f1751ebd4

SHA1
dfd5d181841d565a17a61ca5ddb7c1a723b91dc6

SHA256
acac4a2cfbf2ec96225377396e23854c10fdb35f0a2f4e99bd40b64dee4b0e19

SHA512
c91160cfbf7a1ed32afdb2870b0472830b3deed4631e5c54312718cdec655dfef3a313baa5cc8814a0e1e0ea941777b6cfd41a4bb319eecc2bae78ec5d17441c

Download Submit
C:\Users\Admin\Downloads\Natro_Macro_v1.0.0.2\Natro Macro v1.0.0.2\paths\gtb-mountain.ahk

Filesize
606B

MD5
dce39a683a88242e516d8c9992ed4d2e

SHA1
6577d14d74fade9ab9f93951a4b976f4e857a301

SHA256
6c5dd6e76ad8d99df5efb049dfdea4bd52be645e75fe9b00b1711d9f9aa301ec

SHA512
266ac90e5edafed4c36facdfecc1d74ff8e39bb63b76c7246ef9b3d6509085521f2a4a097db9328afe93ee012aa42861301045742210fa6ddcccfc753f8fa6a1

Download Submit
C:\Users\Admin\Downloads\Natro_Macro_v1.0.0.2\Natro Macro v1.0.0.2\paths\gtb-red.ahk

Filesize
1KB

MD5
b8f22105e9d2c042eca5ff30e840b6a8

SHA1
06443fa2bbd3941558d1c88ab3033369133257a2

SHA256
d3946b7b5a6220edb74ff4d8ffc4ab9d18a40c7b0d09ca29043788129418ddc6

SHA512
5496e8a19109028df47cfe56d8e6f2ea28c8f2137450d46dc668ddc6befc29e456df0bab7bc27efe153a65176e4b1b7addc48a85ea23d61e17fc35ec892ed72e

Download Submit
C:\Users\Admin\Downloads\Natro_Macro_v1.0.0.2\Natro Macro v1.0.0.2\patterns\Auryn.ahk

Filesize
3KB

MD5
6d35110fa16931565e4a4a192a5ad7a4

SHA1
7c1c1144e4137763c7328ec4125ccbfe0e934b02

SHA256
595e67241a929b3556bf20172af95a345074f59fdb2972494125215159a05192

SHA512
c507e951734221a714d884b40b8c041bd0aba8602f550ac44f76707dbf1ddd7d75b7f78b864474084756bb73cd206f8d49b584fcf3322502811834cf55d73dd5

Download Submit
C:\Users\Admin\Downloads\Natro_Macro_v1.0.0.2\Natro Macro v1.0.0.2\patterns\CornerXSnake.ahk

Filesize
1KB

MD5
208057f5b380c7f75bbea4f109cc85b0

SHA1
5f7a0cfe01a9045a9078d36f87a3be5b6200df8c

SHA256
ee04efe9d2c51a25ba3eb77887b9e9ecf16ea98e2d473e50830ada0788352782

SHA512
d92c7f749b413a3b026c239d741150da2a314cf92414ac6b1e7a9a1475b6697ff5f42e3401464d1068d1ef759c18ecee5f0276c8033d2cebf839b8f5643bdaba

Download Submit
C:\Users\Admin\Downloads\Natro_Macro_v1.0.0.2\Natro Macro v1.0.0.2\patterns\Diamonds.ahk

Filesize
340B

MD5
6df102748bfaa7ad1b40dd46e87bbdac

SHA1
34b9cdf09cec98b435ece950bf686d86d9289966

SHA256
8518ddf4aaf9deef40d49bb26b69c662eab32e68953150a5d5073102a7fd7708

SHA512
d00c56094760bc04df2a5682be7ff0129a409da136d15d7986b37ce66b3db0b000e39f1955f6f9d26869b85289cde76eede232e1018dff617583859079715719

Download Submit
C:\Users\Admin\Downloads\Natro_Macro_v1.0.0.2\Natro Macro v1.0.0.2\patterns\Fork.ahk

Filesize
880B

MD5
f0a42658868083675481a98267264e91

SHA1
a30dee7c590d7ab2d0ab03e3de13e26bf8f70fa9

SHA256
cb4a4fa2d60d7369b8593aa6c50f8582d9cba1f017230d107e5bf305bf3b5140

SHA512
ec9ed8e9867dd9482e432845ac26a6d23efd0232652dd3053fea10fe0de4266d334747d05016c3d92f2ee1274ac50dc4674cbab53986ccd3f9e103230e0f734e

Download Submit
C:\Users\Admin\Downloads\Natro_Macro_v1.0.0.2\Natro Macro v1.0.0.2\patterns\Lines.ahk

Filesize
523B

MD5
8f56b263ef911bfd40a94f96b335998b

SHA1
d4d0fcf9aa2581f549ca3685e6b7bf3cd9fde1cb

SHA256
53224f94803f02973fd83df48eaa5f87e3093b7c781740a4d898c9aacd40fad4

SHA512
01ac78d81936a1545725cd73779599bc7134dad99fe1969c7a7240f63ae62b2d74da7e05901d32196c5bc38bc6e26cb39a92fb6f47475c423680d773bfb5f885

Download Submit
C:\Users\Admin\Downloads\Natro_Macro_v1.0.0.2\Natro Macro v1.0.0.2\patterns\Slimline.ahk

Filesize
216B

MD5
2552306af6ddaa0691b468f881afdb45

SHA1
7b69e6ab77169cadc507d0011251739f9e933c5e

SHA256
0cb6ef88af1330a4b362250b4c37f57a1a70933c59cbdd10156100f29e565654

SHA512
8ebaedf25c0e4da9fcc8ca88d4937139e749e31ec486b1084ee3f9464328e81f01c6b4965f443ca2f00831d7a1c991483ca38501b4d7f4806c114169b8cec212

Download Submit
C:\Users\Admin\Downloads\Natro_Macro_v1.0.0.2\Natro Macro v1.0.0.2\patterns\Snake.ahk

Filesize
523B

MD5
99551602c2a94c4c667c573fcfc2db43

SHA1
5006068bde801463b4d52dc798f05cce62fee292

SHA256
044fc34c72144ce787fbded574b9ae29ddcbebce52fa55b99f6fb43213b61b4e

SHA512
839ebb329d847f27aca1381c94580c305822aee3715a6c234f7019f83872e02845e741389039c1a5ddb1b596870e4ac8eed06c142e250afea9154f62c0905e59

Download Submit
C:\Users\Admin\Downloads\Natro_Macro_v1.0.0.2\Natro Macro v1.0.0.2\patterns\Squares.ahk

Filesize
306B

MD5
35dd730c17d55a348f49ff19e747c006

SHA1
68767b95fcc7a2a6dbeec95bd9770905f4031ad4

SHA256
10b300b9fdc2d0a3d97a8ea1973fb4fc6d57b13a7128f046514bd3d172af86be

SHA512
f62a8670240caf421dc24bd7b18720b8d037629798943f36b35a906ace01c93043169da6b44f963134b3c05552449834987e820c5e8dd9f3cd1da2c562899db0

Download Submit
C:\Users\Admin\Downloads\Natro_Macro_v1.0.0.2\Natro Macro v1.0.0.2\patterns\Stationary.ahk

Filesize
15B

MD5
7f0cd59af19576b8f910aa6f5d014dba

SHA1
6d54ea63367913d1b76aa7e9a7df257c8d3a09c8

SHA256
1bca58b2491c0d629ffc1b4fc829458c3566b7181e0e6e889b87ac956371e4fb

SHA512
60fba1c93b75408f31ec8128639c79bb95c773e016ab450f07683d632a8d347ba7dbfe3e5bf4eb79a26e9036a77f9724a55ef9133ef9c97c0875ff797399f667

Download Submit
C:\Users\Admin\Downloads\Natro_Macro_v1.0.0.2\Natro Macro v1.0.0.2\patterns\SuperCat.ahk

Filesize
1KB

MD5
ee5bc0d631f7bc0b54c0196538b94687

SHA1
896cc635363b572cdee39c89872caa06c5fc3791

SHA256
c56ea3ba736db621c8cd02b733435567704966eddb545042c43358315350dc61

SHA512
9963cdfa62546e66260a2c62cd3ad7cbdf1fb85337348bcd908cb519bab6e4d8f5459db13f35d1d9408d81d0e767fa4d38e5cdd97cdf6ebfb5dff30c26f20326

Download Submit
C:\Users\Admin\Downloads\Natro_Macro_v1.0.0.2\Natro Macro v1.0.0.2\patterns\XSnake.ahk

Filesize
1KB

MD5
e1bfdb827659e0c1baa1ab4290964520

SHA1
3dcce95beade8bd9d87686cd5fdd9cb82d65f4ab

SHA256
4c90c8ee7e9765f21c45d78c06a950c606c1ec4eb4d8c72cb2934c979ce34f45

SHA512
954fd9817fa89c18b647ae385525cf1933f9f22ae29104a04f6a89b6c0d8bc7a6fd61bb46758cd34f4ced85ed7bc3de1d5c265e7175b62a27045739ef9b23d29

Download Submit
C:\Users\Admin\Downloads\Natro_Macro_v1.0.0.2\Natro Macro v1.0.0.2\patterns\e_lol.ahk

Filesize
948B

MD5
81e97ad955dd4c95420d26696bee5e4e

SHA1
f53adf5f875fca8d6af761f6e0394e9615c599a9

SHA256
3c7ebf17b09322910b8ee26eb3c88321319a7e796e195a37d728fb4ac719f26f

SHA512
488822f4fc576f1d029e32bf0c5335390140619aaca3d7ebb31f81b50469c0ed7d725f966faeb396fc65ec4e14c5227c990c8814d6c4af6fa338fac387a67662

Download Submit
C:\Users\Admin\Downloads\Natro_Macro_v1.0.0.2\Natro Macro v1.0.0.2\settings\nm_config.ini

Filesize
10KB

MD5
af5d6c7e2d945599af03a24b6fcb91d6

SHA1
b2be3ff0b67269203bb3eed716f12ff24129bdfd

SHA256
219293711787274401ad828ce6805819f448432c91bc010e264930f7cada1af4

SHA512
b6a9a6dbb49086606890196c86e6a2005ddad75e6e7954671dbe5b33234342b1e62650ad0301604f34e715af421b54a5218f8e998441ce55de8131a6eabc35fa

Download Submit
C:\Users\Admin\Downloads\Natro_Macro_v1.0.0.2\Natro Macro v1.0.0.2\submacros\AutoHotkey32.exe

Filesize
957KB

MD5
8bc086a1ce0b394de31cd415a3cd0e87

SHA1
620fbfc0fce8067a9af12c0e3267f8c17c658d6a

SHA256
05fcaf6f09b9fe4b85887f75183310d34166a0b854ca0907b497808be7b8f87d

SHA512
0f989b2584fdbfde2ea01dd0ac7ff7c51da0063ab01c57053ddf15547ba7187f2795d5013beff558431fe0db0a1a0af991dbc4af455cd86ba7d4676366104237

Download Submit
C:\Users\Admin\Downloads\Natro_Macro_v1.0.0.2\Natro Macro v1.0.0.2\submacros\AutoHotkey64.exe

Filesize
1.2MB

MD5
825448610a8213a8408578df2361d5eb

SHA1
f43875855e4f02010ad6c755067b813d0fcbe68a

SHA256
37ff15a23a98f0a658298e21f1873ca896a05208810bf796f90ca212ee07c7b1

SHA512
7556143128878b2e765309db8b35cc8206d325c0c17c37b191600bd8f719a923b0f917f4c53f0946ed2d12136a9e42774246595eed78f1038779fdcbd3736eee

Download Submit
C:\Users\Admin\Downloads\Natro_Macro_v1.0.0.2\Natro Macro v1.0.0.2\submacros\Heartbeat.ahk

Filesize
3KB

MD5
04280a07b0a3c6afd7b69ad95ad6d850

SHA1
6b7573a99b33d1835803faa921fdc9bd13b7a6fc

SHA256
c38660d8dea602faef2aefe637776f038a28bba8eca457f82be5315be3776e42

SHA512
80c0cd4cc9eb9699254b5ccacd526325f3c4acda41f9487b658bf79f7bc309c6950f57efda30d400d1b1ac377555a5b71fb10ba33a3b2313feccdcac6258f5de

Download Submit
C:\Users\Admin\Downloads\Natro_Macro_v1.0.0.2\Natro Macro v1.0.0.2\submacros\natro_macro.ahk

Filesize
772KB

MD5
acc50c19c43489b71437611da26ee933

SHA1
57f3108eb5ad5395209bcb0b9497233414e29c54

SHA256
24ec4791a9b1fdfa415ada7994dcb2a96d1c98fa1b2a91ef0d9c03a23cfd3c8a

SHA512
9caa3936a2f266fd2f07645d2aba8d9220e63b26f89ec8f6f9c5878a7bc99952614c7b79af1fbd63ec57c2ac688d3f4a4320196958d404f62a8f62bb8cab554c

Download Submit
memory/4544-1145-0x0000000010000000-0x00000000100B1000-memory.dmp

Filesize
708KB

Download
memory/4544-1158-0x0000000075B10000-0x0000000075BE3000-memory.dmp

Filesize
844KB

Download
memory/4544-1117-0x00000000751B0000-0x000000007522A000-memory.dmp

Filesize
488KB

Download
memory/4544-1146-0x0000000074B80000-0x0000000074D90000-memory.dmp

Filesize
2.1MB

Download
memory/4544-1176-0x0000000074B80000-0x0000000074D90000-memory.dmp

Filesize
2.1MB

Download
memory/4544-1168-0x0000000074B80000-0x0000000074D90000-memory.dmp

Filesize
2.1MB

Download
memory/4544-1144-0x0000000010000000-0x00000000100B1000-memory.dmp

Filesize
708KB

Download
memory/4544-1141-0x0000000000400000-0x00000000004F5000-memory.dmp

Filesize
980KB

Download
memory/4544-1142-0x0000000076E50000-0x0000000076E75000-memory.dmp

Filesize
148KB

Download
memory/4544-1140-0x0000000010000000-0x00000000100B1000-memory.dmp

Filesize
708KB

Download
memory/4544-1139-0x0000000073D80000-0x0000000073DB0000-memory.dmp

Filesize
192KB

Download
memory/4544-1138-0x0000000073DD0000-0x0000000073DF3000-memory.dmp

Filesize
140KB

Download
memory/4544-1180-0x0000000010000000-0x00000000100B1000-memory.dmp

Filesize
708KB

Download
memory/4544-1179-0x0000000075B10000-0x0000000075BE3000-memory.dmp

Filesize
844KB

Download
memory/4544-1177-0x00000000746B0000-0x0000000074724000-memory.dmp

Filesize
464KB

Download
memory/4544-1175-0x0000000000400000-0x00000000004F5000-memory.dmp

Filesize
980KB

Download
memory/4544-1174-0x0000000074EE0000-0x0000000074F8F000-memory.dmp

Filesize
700KB

Download
memory/4544-1173-0x0000000010000000-0x00000000100B1000-memory.dmp

Filesize
708KB

Download
memory/4544-1172-0x0000000075B10000-0x0000000075BE3000-memory.dmp

Filesize
844KB

Download
memory/4544-1171-0x0000000076E50000-0x0000000076E75000-memory.dmp

Filesize
148KB

Download
memory/4544-1170-0x0000000075E90000-0x0000000076443000-memory.dmp

Filesize
5.7MB

Download
memory/4544-1169-0x00000000746B0000-0x0000000074724000-memory.dmp

Filesize
464KB

Download
memory/4544-1165-0x0000000075E90000-0x0000000076443000-memory.dmp

Filesize
5.7MB

Download
memory/4544-1167-0x0000000074EE0000-0x0000000074F8F000-memory.dmp

Filesize
700KB

Download
memory/4544-1166-0x0000000010000000-0x00000000100B1000-memory.dmp

Filesize
708KB

Download
memory/4544-1164-0x00000000746B0000-0x0000000074724000-memory.dmp

Filesize
464KB

Download
memory/4544-1163-0x0000000074B80000-0x0000000074D90000-memory.dmp

Filesize
2.1MB

Download
memory/4544-1162-0x0000000000400000-0x00000000004F5000-memory.dmp

Filesize
980KB

Download
memory/4544-1161-0x0000000074EE0000-0x0000000074F8F000-memory.dmp

Filesize
700KB

Download
memory/4544-1160-0x0000000010000000-0x00000000100B1000-memory.dmp

Filesize
708KB

Download
memory/4544-1159-0x0000000073AE0000-0x0000000073C49000-memory.dmp

Filesize
1.4MB

Download
memory/4544-1123-0x0000000073DD0000-0x0000000073DF3000-memory.dmp

Filesize
140KB

Download
memory/4544-1157-0x0000000076520000-0x0000000076603000-memory.dmp

Filesize
908KB

Download
memory/4544-1156-0x0000000075E90000-0x0000000076443000-memory.dmp

Filesize
5.7MB

Download
memory/4544-1155-0x00000000746B0000-0x0000000074724000-memory.dmp

Filesize
464KB

Download
memory/4544-1154-0x0000000074B80000-0x0000000074D90000-memory.dmp

Filesize
2.1MB

Download
memory/4544-1153-0x00000000755F0000-0x00000000756CC000-memory.dmp

Filesize
880KB

Download
memory/4544-1152-0x0000000000400000-0x00000000004F5000-memory.dmp

Filesize
980KB

Download
memory/4544-1151-0x0000000074EE0000-0x0000000074F8F000-memory.dmp

Filesize
700KB

Download
memory/4544-1150-0x0000000010000000-0x00000000100B1000-memory.dmp

Filesize
708KB

Download
memory/4544-1149-0x0000000073AE0000-0x0000000073C49000-memory.dmp

Filesize
1.4MB

Download
memory/4544-1148-0x0000000076520000-0x0000000076603000-memory.dmp

Filesize
908KB

Download
memory/4544-1147-0x0000000075E90000-0x0000000076443000-memory.dmp

Filesize
5.7MB

Download
memory/4544-1137-0x0000000010000000-0x00000000100B1000-memory.dmp

Filesize
708KB

Download
memory/4544-1136-0x0000000073D80000-0x0000000073DB0000-memory.dmp

Filesize
192KB

Download
memory/4544-1135-0x0000000073DD0000-0x0000000073DF3000-memory.dmp

Filesize
140KB

Download
memory/4544-1134-0x0000000076E50000-0x0000000076E75000-memory.dmp

Filesize
148KB

Download
memory/4544-1133-0x00000000751B0000-0x000000007522A000-memory.dmp

Filesize
488KB

Download
memory/4544-1131-0x0000000010000000-0x00000000100B1000-memory.dmp

Filesize
708KB

Download
memory/4544-1130-0x0000000073D80000-0x0000000073DB0000-memory.dmp

Filesize
192KB

Download
memory/4544-1129-0x0000000073DD0000-0x0000000073DF3000-memory.dmp

Filesize
140KB

Download
memory/4544-1128-0x0000000076E50000-0x0000000076E75000-memory.dmp

Filesize
148KB

Download
memory/4544-1127-0x00000000751B0000-0x000000007522A000-memory.dmp

Filesize
488KB

Download
memory/4544-1121-0x0000000010000000-0x00000000100B1000-memory.dmp

Filesize
708KB

Download
memory/4544-1126-0x0000000000400000-0x00000000004F5000-memory.dmp

Filesize
980KB

Download
memory/4544-1125-0x0000000010000000-0x00000000100B1000-memory.dmp

Filesize
708KB

Download
memory/4544-1124-0x0000000073D80000-0x0000000073DB0000-memory.dmp

Filesize
192KB

Download
memory/4544-1122-0x00000000751B0000-0x000000007522A000-memory.dmp

Filesize
488KB

Download
memory/4544-1120-0x00000000751B0000-0x000000007522A000-memory.dmp

Filesize
488KB

Download
memory/4544-1119-0x0000000000400000-0x00000000004F5000-memory.dmp

Filesize
980KB

Download
memory/4544-1118-0x0000000010000000-0x00000000100B1000-memory.dmp

Filesize
708KB

Download
memory/4544-1143-0x0000000073DD0000-0x0000000073DF3000-memory.dmp

Filesize
140KB

Download
memory/4544-1132-0x0000000000400000-0x00000000004F5000-memory.dmp

Filesize
980KB

Download
memory/4544-1116-0x0000000000400000-0x00000000004F5000-memory.dmp

Filesize
980KB

Download