Overview

overview

7

Static

static

3

2026-08-20...ar.exe

windows10-2004-x64

7

2026-08-20...ar.exe

windows11-ltsc_2024-x64

7

Analysis

  • max time kernel
    150s
  • max time network
    162s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    20/08/2026, 03:15

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-08-20_076f07ac8d206b6c05046ce1b0f9e753_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
  • Size 76.6MB
  • Sample260820-dsd8qsdr8v
  • SHA256 73db113edd9059170c1c7344f45d270bda85402ee3abdb84d92883fddfafcdb9
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
execution

Malware Config

Signatures

  • Loads dropped DLL 64 IoCs
  • Contacts third-party web service commonly abused for C2 1 TTPs 28 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • Executes a command shell one-liner 1 TTPs 1 IoCs

    Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

    execution
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of WriteProcessMemory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-20_076f07ac8d206b6c05046ce1b0f9e753_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-20_076f07ac8d206b6c05046ce1b0f9e753_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:4356
    • C:\Users\Admin\AppData\Local\Temp\2026-08-20_076f07ac8d206b6c05046ce1b0f9e753_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
      "C:\Users\Admin\AppData\Local\Temp\2026-08-20_076f07ac8d206b6c05046ce1b0f9e753_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe"
      2⤵
      • Loads dropped DLL
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      PID:2980
      • C:\Windows\system32\cmd.exe
        C:\Windows\system32\cmd.exe /c "ver"
        3⤵
        • Executes a command shell one-liner
        PID:5868

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        VCRUNTIME140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI43562\VCRUNTIME140.dll
        • Size 106KB
        • SHA256 a8f950b4357ec12cfccddc9094cca56a3d5244b95e09ea6e9a746489f2d58736
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _bz2.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI43562\_bz2.pyd
        • Size 82KB
        • SHA256 403e76fe18515a5ea3227cf5f919aa2f32ac3233853c9fb71627f2251c554d09
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _ctypes.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI43562\_ctypes.pyd
        • Size 120KB
        • SHA256 e28d4e46e5d10b5fdcf0292f91e8fd767e33473116247cd5d577e4554d7a4c0c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _lzma.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI43562\_lzma.pyd
        • Size 155KB
        • SHA256 ad0440ca6998e18f5cc917d088af3fea2c0ff0febce2b5e2b6c0f1370f6e87b1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-console-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI43562\api-ms-win-core-console-l1-1-0.dll
        • Size 15KB
        • SHA256 be9217df60735e0189af09fd724aec3dbda3310479291033c8d9dd2a9199e1e4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-datetime-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI43562\api-ms-win-core-datetime-l1-1-0.dll
        • Size 14KB
        • SHA256 96ead2b539892f0bfdd8d1621d4cd240386971af9af4124da6d7cd7f6e11e193
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-debug-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI43562\api-ms-win-core-debug-l1-1-0.dll
        • Size 14KB
        • SHA256 8ae7565525560f18dc96086107ed258a3dd5cb531c0e1e35fb480d8cc0e4b58c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-errorhandling-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI43562\api-ms-win-core-errorhandling-l1-1-0.dll
        • Size 14KB
        • SHA256 f4e9b6beb8798ea960251fc14df4ec2a0df6eecd29d7a05fdda1978502772a1b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-file-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI43562\api-ms-win-core-file-l1-1-0.dll
        • Size 18KB
        • SHA256 c58d39263a96ca9143f4772dd90acfc67a74af200c0ad082a0abd4bc57627100
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-file-l1-2-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI43562\api-ms-win-core-file-l1-2-0.dll
        • Size 14KB
        • SHA256 c93c906bdf6c95c6d97f1994d639b73bdc292fa5555ef4efc6f16654c20cba41
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-file-l2-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI43562\api-ms-win-core-file-l2-1-0.dll
        • Size 14KB
        • SHA256 92051a9d9423f0d3e34bfc35c855e0b5e4b4fe400d5071c6abe6f4da58cfc1ed
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-handle-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI43562\api-ms-win-core-handle-l1-1-0.dll
        • Size 14KB
        • SHA256 6073f1d24fb8422079ebbdd74912aad8d95be8b5b61974b5bb7bae707bc74e14
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-heap-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI43562\api-ms-win-core-heap-l1-1-0.dll
        • Size 15KB
        • SHA256 b34af31a8fc9c14637964263653959b96042d0182e7e51d2be0070de2605f667
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-interlocked-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI43562\api-ms-win-core-interlocked-l1-1-0.dll
        • Size 14KB
        • SHA256 4fd5eeeb8258766e0c6ced3ac66862543551430d2a334955ef4945217dadbcfd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-libraryloader-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI43562\api-ms-win-core-libraryloader-l1-1-0.dll
        • Size 15KB
        • SHA256 0350d332c58fcb0e7f6dc8260fcf168ec4e9a1f3f00498607a670dd42bc6c186
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-localization-l1-2-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI43562\api-ms-win-core-localization-l1-2-0.dll
        • Size 17KB
        • SHA256 d300c40268c498b65a0cfa92b567176c8887a3c71321916d648bf61528164f99
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-memory-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI43562\api-ms-win-core-memory-l1-1-0.dll
        • Size 15KB
        • SHA256 e45dcc3e06ea90350bf704872ab12509ceb648b95641650dcf05e3831cc2d7f4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-namedpipe-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI43562\api-ms-win-core-namedpipe-l1-1-0.dll
        • Size 14KB
        • SHA256 478a3b36cc90b7b210af2c51c8bd6853af3425a7219377c973940a949ce5f9a6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-processenvironment-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI43562\api-ms-win-core-processenvironment-l1-1-0.dll
        • Size 15KB
        • SHA256 98d788796dd132912887bc5697b2bc64e3d54d5922c5f3201cba81d3a666d961
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-processthreads-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI43562\api-ms-win-core-processthreads-l1-1-0.dll
        • Size 16KB
        • SHA256 1acc481da58649a0e241fe05839363b4a8acb8d162f7d5022eea593c6bad8a5a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-processthreads-l1-1-1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI43562\api-ms-win-core-processthreads-l1-1-1.dll
        • Size 15KB
        • SHA256 f5cd835eea89c73e706905d30d6ab2942b7445d2c77f976ae62824eeacc81576
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-profile-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI43562\api-ms-win-core-profile-l1-1-0.dll
        • Size 14KB
        • SHA256 98226f704e4c8c886942d954629ee7dcf95967551f819b209685f998101e848c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-rtlsupport-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI43562\api-ms-win-core-rtlsupport-l1-1-0.dll
        • Size 15KB
        • SHA256 4258d1028c071c1adade5332cd6a0c7c565055eea50f87d9a968b2bdd0b2aaee
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-string-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI43562\api-ms-win-core-string-l1-1-0.dll
        • Size 14KB
        • SHA256 25ef6be921f28612ec990560acaae819a86adf7aeb64e1ddf62081e64a6563cf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-synch-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI43562\api-ms-win-core-synch-l1-1-0.dll
        • Size 16KB
        • SHA256 b2df98a3e031477f578eb2c9c205ca1cd01e1bf74f16da9f2e5fa02f3babdab4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-synch-l1-2-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI43562\api-ms-win-core-synch-l1-2-0.dll
        • Size 15KB
        • SHA256 bc999131c2b0f01edaa8efe86cc526058f7b17c8d3c16d9dac51adfaaf5600b3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-sysinfo-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI43562\api-ms-win-core-sysinfo-l1-1-0.dll
        • Size 15KB
        • SHA256 c524fb52d03c45acc896d98fd644a97ccf014cedb8004fc00d7deac55aaf9a11
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-timezone-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI43562\api-ms-win-core-timezone-l1-1-0.dll
        • Size 14KB
        • SHA256 11367f5fcc7ed7a41e7002655c9199b6612464e2da053445d028204810833494
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-util-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI43562\api-ms-win-core-util-l1-1-0.dll
        • Size 14KB
        • SHA256 c7b38957061b86cf6f7957300d87b4fb0291d650daade3c7368100180df76c33
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-conio-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI43562\api-ms-win-crt-conio-l1-1-0.dll
        • Size 15KB
        • SHA256 72981b04f3893eb1116bad83a097701d5c436efc7c18ba121220eae947999744
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-convert-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI43562\api-ms-win-crt-convert-l1-1-0.dll
        • Size 18KB
        • SHA256 24350e141f6d2caf50274bb3777358ef5f6ebe0e2cdd8a50482ab2ed8418501c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-environment-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI43562\api-ms-win-crt-environment-l1-1-0.dll
        • Size 15KB
        • SHA256 aacce42415a48dcd035f2e07993e185081f6b010b024034fec7ef36e74141d63
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-filesystem-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI43562\api-ms-win-crt-filesystem-l1-1-0.dll
        • Size 16KB
        • SHA256 012039b5f282aa7eaf2959c44b594138352c07bd96464bba16ce865bbf7f5fe5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-heap-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI43562\api-ms-win-crt-heap-l1-1-0.dll
        • Size 15KB
        • SHA256 5ddeef1dda3c9e1b214752eedc8b1a977c5ecd6884c82427dcb0f61ca26feaf0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-locale-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI43562\api-ms-win-crt-locale-l1-1-0.dll
        • Size 15KB
        • SHA256 fb77a5c24403eda7360580fbdd73dc60fe899305bbc764734d841c0302eb56f1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-math-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI43562\api-ms-win-crt-math-l1-1-0.dll
        • Size 23KB
        • SHA256 ce7d2ac7a2b04ade5f6e56ecdaf4d5d28c56f02d598976e3046c06ee413010e2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-multibyte-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI43562\api-ms-win-crt-multibyte-l1-1-0.dll
        • Size 22KB
        • SHA256 0eb5aaa2cf8da952390738c682412b44bf786682b83d387532efe40a5bd049e5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-private-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI43562\api-ms-win-crt-private-l1-1-0.dll
        • Size 66KB
        • SHA256 85e64417bd1c89d315d70e0f51f6f40327e9c78380095b86d170f6203ba080a9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-process-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI43562\api-ms-win-crt-process-l1-1-0.dll
        • Size 15KB
        • SHA256 b00bf8ac918d2320bd9acab0fb2ef7eb43049cae82dd7766e6bfab1debef9cde
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-runtime-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI43562\api-ms-win-crt-runtime-l1-1-0.dll
        • Size 19KB
        • SHA256 06c11aa451b820f15a8dd37e1bb6e64eb543020b9d0b73b0c6a8d2de4f6b5e1e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-stdio-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI43562\api-ms-win-crt-stdio-l1-1-0.dll
        • Size 20KB
        • SHA256 2a15bdb50f4336d0373a9f587ebc204935660ebe43e265bc9bed1d0ee68ec30b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-string-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI43562\api-ms-win-crt-string-l1-1-0.dll
        • Size 20KB
        • SHA256 de927dc6321769d8c9db549809a168786c0a063b502ae72bc08181fc565218f2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-time-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI43562\api-ms-win-crt-time-l1-1-0.dll
        • Size 17KB
        • SHA256 dcd03ab3a0d446aea0292209f93fa66609e42e1f5e440a0368775748988057c2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-utility-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI43562\api-ms-win-crt-utility-l1-1-0.dll
        • Size 15KB
        • SHA256 3476ac1432827f902ce2df37158c7d08ddad840d4671944fe6e0950a24f59878
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        base_library.zip
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI43562\base_library.zip
        • Size 1.4MB
        • SHA256 ca40732f885379489d75a2dec8eb68a7cce024f7302dd86d63f075e2745a1e7d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libcrypto-3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI43562\libcrypto-3.dll
        • Size 4.9MB
        • SHA256 2a234b5aa20c3faecf725bbb54fb33f3d94543f78fa7045408e905593e49960a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libffi-8.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI43562\libffi-8.dll
        • Size 38KB
        • SHA256 eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libssl-3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI43562\libssl-3.dll
        • Size 771KB
        • SHA256 41ad1a04ca27a7959579e87fbbda87c93099616a64a0e66260c983381c5570d1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pyexpat.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI43562\pyexpat.pyd
        • Size 194KB
        • SHA256 5604f629523125904909547a97f3cdb5dbfe33b39878bad77534de0c3c034387
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python3.DLL
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI43562\python3.DLL
        • Size 65KB
        • SHA256 e45452efa356db874f2e5ff08c9cc0fe22528609e5d341f8fb67ba48885ab77d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python311.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI43562\python311.dll
        • Size 5.5MB
        • SHA256 53a969094231b9032abe4148939ce08a3a4e4b30b0459fc7d90c89f65e8dcd4a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        select.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI43562\select.pyd
        • Size 29KB
        • SHA256 8a9a103bc417dede9f6946d9033487c410937e1761d93c358c1600b82f0a711f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        sqlite3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI43562\sqlite3.dll
        • Size 1.4MB
        • SHA256 5ac6ee18cdca84c078b66055f5e9ffc6f8502e22eaf0fa54aeec92b75a3c463e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tcl86t.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI43562\tcl86t.dll
        • Size 1.8MB
        • SHA256 a91781fe13548b89817462b00058a75fb0b607ec8ce99d265719ced573ade7b6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ucrtbase.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI43562\ucrtbase.dll
        • Size 964KB
        • SHA256 886acf70c4e946389c5665b2df5f0b0a1a10013533717a56a08a9ab527fb5d43
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download