01db5e818ef7854430e9c82eef0aae477fc36f6104ef9e7d1883c278cafe8f11

max time kernel
327s
max time network
339s
platform
windows10-2004_x64
resource
win10v2004-20240704-en
resource tags

arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
submitted
07/07/2024, 08:58

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
TiffaNiedzwie.html
Size 2KB
Sample240707-kxe46a1amd
SHA256 01db5e818ef7854430e9c82eef0aae477fc36f6104ef9e7d1883c278cafe8f11
MD5 cc754e8884e4f6a0e8188aaf49be0956
SHA1 9309c90d1b38fdf373bc571e32901f9066fdf266
SHA512 34c62b0ef17f9256f03b65784d095568a2eacb4cfbf08e08245adca05dd7c502140c69a5b48d7a3d6640465073ac3e77c83df96b41c0ad99a4dbd28fd56b0933
MD5 SHA1 SHA512

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2340	msedge.exe
2340	msedge.exe
3828	msedge.exe
3828	msedge.exe
3836	identity_helper.exe
3836	identity_helper.exe
1068	msedge.exe
1068	msedge.exe
1068	msedge.exe
1068	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
3828	msedge.exe
3828	msedge.exe
3828	msedge.exe
3828	msedge.exe
3828	msedge.exe
3828	msedge.exe
3828	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3828	msedge.exe
3828	msedge.exe
3828	msedge.exe
3828	msedge.exe
3828	msedge.exe
3828	msedge.exe
3828	msedge.exe
3828	msedge.exe
3828	msedge.exe
3828	msedge.exe
3828	msedge.exe
3828	msedge.exe
3828	msedge.exe
3828	msedge.exe
3828	msedge.exe
3828	msedge.exe
3828	msedge.exe
3828	msedge.exe
3828	msedge.exe
3828	msedge.exe
3828	msedge.exe
3828	msedge.exe
3828	msedge.exe
3828	msedge.exe
3828	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3828	msedge.exe
3828	msedge.exe
3828	msedge.exe
3828	msedge.exe
3828	msedge.exe
3828	msedge.exe
3828	msedge.exe
3828	msedge.exe
3828	msedge.exe
3828	msedge.exe
3828	msedge.exe
3828	msedge.exe
3828	msedge.exe
3828	msedge.exe
3828	msedge.exe
3828	msedge.exe
3828	msedge.exe
3828	msedge.exe
3828	msedge.exe
3828	msedge.exe
3828	msedge.exe
3828	msedge.exe
3828	msedge.exe
3828	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3828 wrote to memory of 912	3828	msedge.exe	82
PID 3828 wrote to memory of 912	3828	msedge.exe	82
PID 3828 wrote to memory of 432	3828	msedge.exe	86
PID 3828 wrote to memory of 432	3828	msedge.exe	86
PID 3828 wrote to memory of 432	3828	msedge.exe	86
PID 3828 wrote to memory of 432	3828	msedge.exe	86
PID 3828 wrote to memory of 432	3828	msedge.exe	86
PID 3828 wrote to memory of 432	3828	msedge.exe	86
PID 3828 wrote to memory of 432	3828	msedge.exe	86
PID 3828 wrote to memory of 432	3828	msedge.exe	86
PID 3828 wrote to memory of 432	3828	msedge.exe	86
PID 3828 wrote to memory of 432	3828	msedge.exe	86
PID 3828 wrote to memory of 432	3828	msedge.exe	86
PID 3828 wrote to memory of 432	3828	msedge.exe	86
PID 3828 wrote to memory of 432	3828	msedge.exe	86
PID 3828 wrote to memory of 432	3828	msedge.exe	86
PID 3828 wrote to memory of 432	3828	msedge.exe	86
PID 3828 wrote to memory of 432	3828	msedge.exe	86
PID 3828 wrote to memory of 432	3828	msedge.exe	86
PID 3828 wrote to memory of 432	3828	msedge.exe	86
PID 3828 wrote to memory of 432	3828	msedge.exe	86
PID 3828 wrote to memory of 432	3828	msedge.exe	86
PID 3828 wrote to memory of 432	3828	msedge.exe	86
PID 3828 wrote to memory of 432	3828	msedge.exe	86
PID 3828 wrote to memory of 432	3828	msedge.exe	86
PID 3828 wrote to memory of 432	3828	msedge.exe	86
PID 3828 wrote to memory of 432	3828	msedge.exe	86
PID 3828 wrote to memory of 432	3828	msedge.exe	86
PID 3828 wrote to memory of 432	3828	msedge.exe	86
PID 3828 wrote to memory of 432	3828	msedge.exe	86
PID 3828 wrote to memory of 432	3828	msedge.exe	86
PID 3828 wrote to memory of 432	3828	msedge.exe	86
PID 3828 wrote to memory of 432	3828	msedge.exe	86
PID 3828 wrote to memory of 432	3828	msedge.exe	86
PID 3828 wrote to memory of 432	3828	msedge.exe	86
PID 3828 wrote to memory of 432	3828	msedge.exe	86
PID 3828 wrote to memory of 432	3828	msedge.exe	86
PID 3828 wrote to memory of 432	3828	msedge.exe	86
PID 3828 wrote to memory of 432	3828	msedge.exe	86
PID 3828 wrote to memory of 432	3828	msedge.exe	86
PID 3828 wrote to memory of 432	3828	msedge.exe	86
PID 3828 wrote to memory of 432	3828	msedge.exe	86
PID 3828 wrote to memory of 2340	3828	msedge.exe	87
PID 3828 wrote to memory of 2340	3828	msedge.exe	87
PID 3828 wrote to memory of 2000	3828	msedge.exe	88
PID 3828 wrote to memory of 2000	3828	msedge.exe	88
PID 3828 wrote to memory of 2000	3828	msedge.exe	88
PID 3828 wrote to memory of 2000	3828	msedge.exe	88
PID 3828 wrote to memory of 2000	3828	msedge.exe	88
PID 3828 wrote to memory of 2000	3828	msedge.exe	88
PID 3828 wrote to memory of 2000	3828	msedge.exe	88
PID 3828 wrote to memory of 2000	3828	msedge.exe	88
PID 3828 wrote to memory of 2000	3828	msedge.exe	88
PID 3828 wrote to memory of 2000	3828	msedge.exe	88
PID 3828 wrote to memory of 2000	3828	msedge.exe	88
PID 3828 wrote to memory of 2000	3828	msedge.exe	88
PID 3828 wrote to memory of 2000	3828	msedge.exe	88
PID 3828 wrote to memory of 2000	3828	msedge.exe	88
PID 3828 wrote to memory of 2000	3828	msedge.exe	88
PID 3828 wrote to memory of 2000	3828	msedge.exe	88
PID 3828 wrote to memory of 2000	3828	msedge.exe	88
PID 3828 wrote to memory of 2000	3828	msedge.exe	88
PID 3828 wrote to memory of 2000	3828	msedge.exe	88
PID 3828 wrote to memory of 2000	3828	msedge.exe	88

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\TiffaNiedzwie.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffab47746f8,0x7ffab4774708,0x7ffab4774718
  2⤵
  PID:912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2148,9329405608242446079,12017882019866761669,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2160 /prefetch:2
  2⤵
  PID:432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2148,9329405608242446079,12017882019866761669,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2216 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2148,9329405608242446079,12017882019866761669,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2672 /prefetch:8
  2⤵
  PID:2000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,9329405608242446079,12017882019866761669,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3336 /prefetch:1
  2⤵
  PID:3460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,9329405608242446079,12017882019866761669,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3348 /prefetch:1
  2⤵
  PID:4176
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2148,9329405608242446079,12017882019866761669,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5236 /prefetch:8
  2⤵
  PID:1564
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2148,9329405608242446079,12017882019866761669,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5236 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,9329405608242446079,12017882019866761669,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2136 /prefetch:1
  2⤵
  PID:4808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,9329405608242446079,12017882019866761669,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4136 /prefetch:1
  2⤵
  PID:2496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,9329405608242446079,12017882019866761669,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5300 /prefetch:1
  2⤵
  PID:1652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,9329405608242446079,12017882019866761669,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5372 /prefetch:1
  2⤵
  PID:4512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,9329405608242446079,12017882019866761669,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5288 /prefetch:1
  2⤵
  PID:4668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2148,9329405608242446079,12017882019866761669,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4292 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1068

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4928

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4600

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

3f0d1c43-33d5-44ec-8209-670a19ec8f61.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\3f0d1c43-33d5-44ec-8209-670a19ec8f61.tmp
Size 11KB
SHA256 6307c50e72345f1a07b291971199a3975e8b9fa5af77f263bba41dba950873f4
MD5 a3d6aa0f80d97c21fcc5bd78a424d0f4
SHA1 8dd7a2c4a765d4b719da12c85bcf836ac8ad4543
SHA512 b66f8f16fddf8892143b9a023021bca4ee25d8564b2d46fbc4e564169487b8251d9f004dd147bf83eab3b57177ae4f77e27f18680bd0b4a2b1ecc27206475c92
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexup8re2RUE85h8kyuSB6VD7PU:A9iIxuERzA83h09RZxY87ChxyuzTo
MD5 SHA1 SHA512 SSDEEP

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 82141d451d07bdb68991f33c59129214dd6d3d10158aeb7a1dc81efbc5fb12b3
MD5 e81c757cdb64c4fd5c91e6ade1a16308
SHA1 19dc7ff5e8551a2b08874131d962b697bb84ad9b
SHA512 ba8de0b3b04fec5a96d361459dde0941b1b70f5be231fdec94806efa3ecf1e8faf8e27b1800fa606dc4a82e29d4cf5109b94109e5ad242ddf9f4671e2acbcfbd
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 a50ba35608edc2f3360cc71be0d4b29bba0e3382d1f08f24df5322ce2ad2443c
MD5 2e57ec8bd99545e47a55d581964d0549
SHA1 bd7055ea7df7696298a94dedfc91136e3b530db8
SHA512 6b9b73d983c472149629c842e16e4f7c2f8a0a3bb6dd64837ef647db810ef1beb3a02b15dc1eec2c5de8aee6b3ca195c7d26c432705061c5b0ec7841a5bbf106
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 144B
SHA256 b3584163baba2b66bcdd17a7a82bb5164b1556904a47c18e1922eced1a43d1b8
MD5 334ec2d99a23fce9e12dedaa170847cb
SHA1 0b1a8213a9306655d1492d4ab3bbd55bab46baa2
SHA512 95f140e82416cd96cd05568c2cfac4e136faea03a4f62936600e37e2ef7894a69fe5c83192b2627c578228b6c30f58fde12ec15ccc4bbd71fc99ddc3a648ab97
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 919B
SHA256 842da2042a9961208e3fe393fcef96cbbd32c7da69fcfa9b74778f2ae6dbad74
MD5 d5480bb6d6ac7a546589a3d84289b9b3
SHA1 ac4c2bd8b7de37b50f21edd806ca73ae919740d9
SHA512 cb8b866dd88d692958eb14a4e60e096a18f6e2e6cce845e97b2ddb0ea549a35fe29cddd662fd1830ac963c65796bc56764cf31ee7af4fa28db982e5a22fc3f6d
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 3cc75abe9de431e1bc1d8d45c944d25b7290f2b996f4f6b58e29bbec5c0f56f5
MD5 3f0e9098566942a63f0383f3837da346
SHA1 fafe86cdffb8503456b0936bc2028093ca1e857f
SHA512 1b42b160f0e30e4c19128a41c66bc35d8b244fe8318fcb1befcefc2051056272719bad8737d75188ea9ae99a95e718019268b66d74697f30de224e133e296601
SSDEEP 96:nOkrA1WmfcwpvWMoiVmdeHSZwNBUWQyV+VDCziEwb:nOksYmfcGWMXfBro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 6f6ee2fa149273690176ea5e7f36c9bc9202ed260bdc18a9cfb40364933881ef
MD5 62565650cc93615039bdae220c574519
SHA1 a0662dd8c8514c7c8cdb211c82f8b03e2b2285ee
SHA512 6855e5a3285ca7b5a4b775dab70ffbe09441ee23d48ef36b5fc97ead0011a532bbc4d6971f07fce419f206b86cb24ce51ab22a5095df7a48617cbc78b255f076
SSDEEP 96:nOkHA1W+fcwpvWMoiVmdeHSZwNBUWQyV+VD7AiEwb:nOkgY+fcGWMXfBrg
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 6312972f1d333cb0211132322733a8bb671e7b76ebf2e36b0b092461d20255eb
MD5 9b51003c8f2c6c181f1c2dcbbba81740
SHA1 178caa090f54acfab4b4e3fa181b67a9a5f0dcc9
SHA512 c5795b1ad37aac745de66b80518302f03564be4c322167e6f68b8ff6d66847475f01e82edfcc58381c0b5b049d6ed184977a4e1a210ee60a356df81c6e820a10
SSDEEP 96:nOkLA1W+PcwpvWMoiVmdeHSZwNBUWQyV+VD7AiEwb:nOkMY+PcGWMXfBrg
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download