Overview

overview

8

Static

static

3

2026-08-07...ry.exe

windows10-2004-x64

8

2026-08-07...ry.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    149s
  • max time network
    117s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    08/08/2026, 00:42

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-08-07_c284f6a1973bc18486c0f57e82719e08_amadey_cobalt-strike_elex_emotet_icedid_remcos_vidar_wannacry.exe
  • Size 6.2MB
  • Sample260808-a2bbnawfpc
  • SHA256 9c80b8e27710c6032da9bbbf1708121ed7a37c377c54affc25192c758fe66856
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoverypersistenceransomware

Malware Config

Signatures

  • Drops file in Drivers directory 2 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Sets desktop wallpaper using registry 2 TTPs 2 IoCs
    ransomware
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Modifies Control Panel 4 IoCs
    defense_evasion
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-07_c284f6a1973bc18486c0f57e82719e08_amadey_cobalt-strike_elex_emotet_icedid_remcos_vidar_wannacry.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-07_c284f6a1973bc18486c0f57e82719e08_amadey_cobalt-strike_elex_emotet_icedid_remcos_vidar_wannacry.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:6444
  • C:\Users\Admin\AppData\Local\Temp\2026-08-07_c284f6a1973bc18486c0f57e82719e08_amadey_cobalt-strike_elex_emotet_icedid_remcos_vidar_wannacry.exe
    C:\Users\Admin\AppData\Local\Temp/2026-08-07_c284f6a1973bc18486c0f57e82719e08_amadey_cobalt-strike_elex_emotet_icedid_remcos_vidar_wannacry.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:2796

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        7z.exe
        • Path C:\Program Files\7-Zip\7z.exe
        • Size 6.8MB
        • SHA256 610d06c2197b47d085e066635d76bcec7eb908e0f3af74c7210f42e789a1a5ab
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        7zFM.exe
        • Path C:\Program Files\7-Zip\7zFM.exe
        • Size 7.2MB
        • SHA256 8dd8c5c5ea1d1aa8d8538aae9aa17d84b6ce4492ec4386e0dac05f2ca1dbcf9d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        7zG.exe
        • Path C:\Program Files\7-Zip\7zG.exe
        • Size 13.1MB
        • SHA256 7ed1bfa688fdbfc57e39362179076d1d38963e284192ea0349323a97c78d5dce
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Uninstall.exe
        • Path C:\Program Files\7-Zip\Uninstall.exe
        • Size 12.4MB
        • SHA256 f0fad524ca634f93c4928977e4d539af1ffde158b20105d55f74c6cfb3013a4e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        AppVShNotify.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe
        • Size 12.7MB
        • SHA256 835d575daad4cadf7ef9b0fdcde5b908dc3094a08b8a1d4e02f7945c0e24f854
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        InspectorOfficeGadget.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe
        • Size 12.5MB
        • SHA256 79d1afe290ce0945901dcef15cc04ea71b46fcc8650625e5a0f4b8354d837aef
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        IntegratedOffice.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe
        • Size 16.5MB
        • SHA256 4ceacd9a012d1d273366e0f613824b65e9ebcc7bfca4e3df92f3680dea5566f5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MavInject32.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe
        • Size 12.8MB
        • SHA256 070f4251a744658518bc1400e2a7fb448e5cccbb6f2f98cbd275e74401adf76e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        OfficeC2RClient.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe
        • Size 35.9MB
        • SHA256 436d26a9c6eb706a2c0e7cc89737d4eb0d1177bbbc62df9ca020a9e38fe4c3da
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appvcleaner.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe
        • Size 8.3MB
        • SHA256 d745540bd1f1872a896653c089c41d5c6f5c901146aea61342de49a87926ec30
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VSTOInstaller.exe
        • Path C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe
        • Size 12.5MB
        • SHA256 5a2f815ed826cdd9419673b6777016400aebbf19e196f3cff14233ea52419444
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrmstp.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\chrmstp.exe
        • Size 18.5MB
        • SHA256 9e6697b7e112c3b90ee41ecc6284abc1df1aaf348947f107a6676bf83c33b1ef
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_pwa_launcher.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\chrome_pwa_launcher.exe
        • Size 14.1MB
        • SHA256 88ff0cce961d28616713af440e89916659717c6bb4a68c1050004a0d32484999
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevated_tracing_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevated_tracing_service.exe
        • Size 15.9MB
        • SHA256 a3d1ca27085af402a0a8a976ef91e59f4ad263b3b2c0dee00e7170f82d62be6f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevation_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
        • Size 14.7MB
        • SHA256 bef0bf182c0e182b21c30158c2764db3660fa7f774faa1ba55c63e5b7b41bdb4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        notification_helper.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\notification_helper.exe
        • Size 14.1MB
        • SHA256 e84dc17e436f06203952ab200a9de182c69b6a31e6399ad9773d2def6f5cb5ab
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        os_update_handler.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\os_update_handler.exe
        • Size 14.3MB
        • SHA256 3055a0cc46aa94475d52f46c7bd5dc1f5d69e460d9d1e562342006e2f3dfba83
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome.exe
        • Size 15.5MB
        • SHA256 42f033351fbbc5673e160548ad251915bf89d78a9da926a6a69efeab2d40fbab
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_proxy.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome_proxy.exe
        • Size 13.9MB
        • SHA256 d0a4d7bf4e491246a6dcfc8d384a1e3d4ec3ee8a6e4c8592022643662678bc24
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appletviewer.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe
        • Size 12.5MB
        • SHA256 26baad6008ebbf41ec6ab1c4e7f8d59b0e4897144ee0f2e7b25e22de50f991b7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        extcheck.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\extcheck.exe
        • Size 12.5MB
        • SHA256 b45b501f3abb991d5d5745255491adb57652b31689e3f432fc986bbe20f35d83
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        idlj.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\idlj.exe
        • Size 12.5MB
        • SHA256 a71dcb4cf89488cec26a57734c2ba128b8a4d76c7b9c8a5214567dd5ec709467
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe
        • Size 12.5MB
        • SHA256 cb0d7f80017d9f1e060aa1a0c88be0aaba7c43c5f41f6133fb3968a559e46b5f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jar.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
        • Size 12.5MB
        • SHA256 0c8e6f379c0f06eb52a37b8202730afad7caa5870575aece5bc365b33c6633e5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jarsigner.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe
        • Size 12.5MB
        • SHA256 5cf10efe04c11fb347995d40f94becf65040394c9efba8845c1d100699f9527e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
        • Size 12.5MB
        • SHA256 da644aa5cc331d3e286fd93befc5b241602edcd96e3d6857add3b1f0b37215cf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
        • Size 12.7MB
        • SHA256 94158f436f15887c9778a33daeed57f1bbd777e2c38a0d1cc7ea3e89066ef98a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javac.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javac.exe
        • Size 12.5MB
        • SHA256 67794631ef76e8127df8e2c5e2afcd806384524ab05a94a48d043fb4efaa918e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javadoc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
        • Size 12.5MB
        • SHA256 9be534b03d742155e547d48f580c87d56c90e3bab5af777a2d7ef7d38c4b7c07
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javafxpackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe
        • Size 12.6MB
        • SHA256 b6b12a8ebd90606ee76864f3e1fbd0e88fbe15ae997f3fd20916a38da1cfc682
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javah.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javah.exe
        • Size 12.5MB
        • SHA256 e9684a079c0d61a134d9f75c0775defaa1f73fa9ee29347368bcf48b093b74bc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javap.exe
        • Size 12.5MB
        • SHA256 a38dd28538313cce15f0f1d6c9f84a0dfadeeebf2770ef1e2524df0d749cb629
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javapackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javapackager.exe
        • Size 12.6MB
        • SHA256 56cc89488dd4f715182f53dabe3d7ce44f531e71d992860e18e7101d06c34812
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe
        • Size 12.7MB
        • SHA256 1ff6b3be73b66e23de916ffefb4a09907d1a3851284114bb0972ab06b01d01fd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
        • Size 12.9MB
        • SHA256 577930ad3c38622ffd35af8eccc80458656c3de7a5819001f6cad43847344094
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jcmd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
        • Size 12.5MB
        • SHA256 fcc02198677a1bca68c9ba0caf62d71fa19d2fdb804790ce1ae49db0307f37f1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jconsole.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
        • Size 12.5MB
        • SHA256 c9d0e15e5b7f2135259686ffd7c2a5d3619fd06ec35de743fc2418ac7aaea051
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdb.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
        • Size 12.5MB
        • SHA256 8637bbceb58b1bbbbf22a0c1475249111f60c92eccb4c34e3eedfe6184d6a38a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdeps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
        • Size 12.5MB
        • SHA256 c4d01d27257238d2a81cf1e19da30ace816f2385052102d7f1efde0f1fae153c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jhat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jhat.exe
        • Size 12.5MB
        • SHA256 53d5b599c58b149cbb761e375f7f15d7e790f657870a70e85ffa217c79f70c07
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jinfo.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
        • Size 12.5MB
        • SHA256 c1b1734843ec32f82f56b25afa43b380e3e505820b78532289c492525971481f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
        • Size 12.5MB
        • SHA256 18495fb9e3eeac3b2fe0cb4f2192b40f565d0d4ed6ee59f238f5809f0326df64
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jmap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
        • Size 12.5MB
        • SHA256 d2923b410e679f9090af1a23b0bd083ec020fbd2a09b73b1c79769a84a4ef06f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
        • Size 12.5MB
        • SHA256 9c68c03c8ee8496669ca208fbb07b449ae1b85c86a0f02cea0088ae9a8f0bd53
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jrunscript.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
        • Size 12.5MB
        • SHA256 d86758ec0bfbce0481474c20b1c7827acc67a2c98b69eaaea05c95df91f5ddf6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jsadebugd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe
        • Size 12.5MB
        • SHA256 fce3514806c811d7e5f2f86ae5059dc7a6e34856e64649887c3c314797e28f8d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstack.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstack.exe
        • Size 12.5MB
        • SHA256 65b2a2a685e104d1705bd804eb2a8e1f76554cab63c22634fd8cd73c165e4f1d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstat.exe
        • Size 12.5MB
        • SHA256 beab91b7d984a8f341e7929bd4f9e309dd16ded41f129dfdc555dfbf3f4213e9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstatd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstatd.exe
        • Size 12.5MB
        • SHA256 a34b23492f23bde1f4c2af3c350c4149fe6d55f7a93f30b068554feb1bf8bf4f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
        • Size 12.5MB
        • SHA256 83a00317c8837f341b74efa59fffa987f8f64a03eb5ca73644f875d0602b31f8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
        • Size 12.5MB
        • SHA256 f8bdf22c8577e16aef4202c333517a852f3ea2742fdf1889deca1654a7f910d0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\klist.exe
        • Size 12.5MB
        • SHA256 4ac1d0e10379e93e37154fd353294c6aad990d1eb39d475a063c78149ae603e9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
        • Size 12.5MB
        • SHA256 44520f31449ff069f20c8ba8aab711cd1365b5269054988d4426434858f1cab9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        native2ascii.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
        • Size 12.5MB
        • SHA256 2fda4030207792231b61d62dd425860aba1c5ea141c35f425f2f828f5b7ecdd4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        orbd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\orbd.exe
        • Size 12.5MB
        • SHA256 2aef21540b30e20e5a77f282bb2916da23eac8c70e973fd4be4be0a866e91dfc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\pack200.exe
        • Size 12.5MB
        • SHA256 7ccc3ba440702e43e8e43a984d11fdb42b350f87f1b7731af3afe0efa1825488
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        policytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\policytool.exe
        • Size 12.5MB
        • SHA256 34a8ed9b0a501775c1d6f0aabfb713eb4c14a51f0a1dd2a4a3fc5f2ae5116c36
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmic.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmic.exe
        • Size 12.5MB
        • SHA256 594712b780fcb765dd506352594cc37055c6036e8a350bef9811416481d49a08
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmid.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmid.exe
        • Size 12.5MB
        • SHA256 a8cd209274b2c2eb808e30cc56e23521c9cc37efa21f8a44d2408552184b6967
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        dotnet.exe
        • Path C:\Program Files\dotnet\dotnet.exe
        • Size 12.6MB
        • SHA256 bbdaf6dd3da4a896290f93d510eae9e48b6bdcfed4ed8270521ceef45cbe86d9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\createdump.exe
        • Size 12.5MB
        • SHA256 16637d904a0fa3c5f03d2b45f4db27bc9bae1bcac257673a87bf2af0396bc918
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\createdump.exe
        • Size 12.5MB
        • SHA256 0ca026969154d911e6be80b30ee1bd3ae0cf89637e51016b2c38824cd589a9b1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.15\createdump.exe
        • Size 12.5MB
        • SHA256 3fbb543c1c5501e0e1e21ba0fe4d1bc3d1ab16a2f3a9674e094a3ccd6b2ebc5f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download