063e3fb5a6876766b5395599c44071683b99f9db4778af27fccd66e6e7348e8f

Sharing

Copy URL Twitter E-mail

General

Target
Xenia-Dashboard.exe
Size 112.1MB
Sample260502-zagf2abs8p
SHA256 063e3fb5a6876766b5395599c44071683b99f9db4778af27fccd66e6e7348e8f
MD5 20f3b4c593ec3254cf43d413016063c5
SHA1 cc52189fdb28d881fbbadf28167427a28e0ec52c
SHA512 2fb889b4e4ebb3c118a1d8123b6a9eaa11a375a0bd7f19bd2baa2d2f5652aba2457583b6cb140a71aeaf005f626577c93d78abefcff00d8f7e89be3a2cd8da6f
SSDEEP 3145728:WK6jM1WsN7GaqJhRuPJNKfyGUooHyaUdTUF:5FNGaQGPJNHooHyaUs
TLSH
T1EE4833D879BDA6DBCDDC423CB5ECF7A838104D8044B1C5C9B336384ADE7B3196992869
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  Xenia-Dashboard.exe
- Size 112.1MB
- SHA256 063e3fb5a6876766b5395599c44071683b99f9db4778af27fccd66e6e7348e8f
- MD5 20f3b4c593ec3254cf43d413016063c5
- SHA1 cc52189fdb28d881fbbadf28167427a28e0ec52c
- SHA512 2fb889b4e4ebb3c118a1d8123b6a9eaa11a375a0bd7f19bd2baa2d2f5652aba2457583b6cb140a71aeaf005f626577c93d78abefcff00d8f7e89be3a2cd8da6f
- SSDEEP 3145728:WK6jM1WsN7GaqJhRuPJNKfyGUooHyaUdTUF:5FNGaQGPJNHooHyaUs
- TLSH
  T1EE4833D879BDA6DBCDDC423CB5ECF7A838104D8044B1C5C9B336384ADE7B3196992869
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery pyinstaller spyware stealer
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Reads ssh keys stored on the system
  Tries to access SSH used by SSH programs.
  spyware stealer
behavioral1 behavioral2
- Target
  $PLUGINSDIR/StdUtils.dll
- Size 100KB
- SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
- MD5 c6a6e03f77c313b267498515488c5740
- SHA1 3d49fc2784b9450962ed6b82b46e9c3c957d7c15
- SHA512 9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803
- SSDEEP 3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v
- TLSH
  T125A33B62A2FA9CF5E4E70B3D1469BB264CBB7B383431D93F2342054B8534586DA2D35B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
- MD5 0d7ad4f45dc6f5aa87f606d0331c6901
- SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
- SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
- SSDEEP 192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
- TLSH
  T1BA428E12977049F2F1A0183C10A67F265FBEAE5C1BE445A39FE380867D652DF9436343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  LICENSES.chromium.html
- Size 14.5MB
- SHA256 a683de33a700d9b4989416e1cd394169154574e83773e009a71daf9dd8e1ab96
- MD5 b5e57572cfb5efa08f55f46772a42ded
- SHA1 51db84dada057af72e2fb8acca3ee4436e4bd3ed
- SHA512 288bcbf48f928866a0d2910fe57cfbc040f23b533bbdf4ef6fa43631edf6035d689ea41643b3afe833cb7476ecb2fbb932f137f3734df8462898c4837f6096eb
- SSDEEP 24576:6eBHJjZ6vobjZ6Mt3jK6DCHwR2auHxKjr61jK6yjr6gjK6ajK6XjK6QjR6pjr61J:6er8aeUSn8mMRx5
- TLSH
  T184E6A42F7B48037306C642A2AB8B65CAF31E903F3B561654345CD1681F6BA2583FF6D9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral7 behavioral8
- Target
  Xenia-Dashboard.exe
- Size 200.5MB
- SHA256 88fd06e0c450d39cb961eb4d0ca903414e9c7044eafd37d7c02aaf2f06ff4be4
- MD5 fbd12813f6e49025acc5258e54728f8c
- SHA1 b15a381762e1bf926410ed08da2b245d116bd095
- SHA512 e0b8169ce13e3db9f34ee6f3e820abf46fdbaad2c1d5ac5e8c690972271bf398b6708defcc0b39d187eacdd48ee1ecbab8f6bef56b6f36258bd82882e1edad7f
- SSDEEP 1572864:Lir3YkVksSEZWaMZDjL3r2sHCDTnq/jxOiuYSeh019IZQEKzVn7SfK4lJroH26Pq:8IAnVb+/jVSbxkg
- TLSH
  T10FA88B13E29A01D9E05DD1758B5A9633FEB1B80A4B24A3DF2B5407522F77EE42B3DB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

spyware stealer
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Reads ssh keys stored on the system
  Tries to access SSH used by SSH programs.
  spyware stealer
behavioral9
- Target
  d3dcompiler_47.dll
- Size 4.7MB
- SHA256 289767b49dc8525bce262ea06fee4ef9fced2e131a55b25654ce871c1f0498b2
- MD5 1a7544f942a9a9de9354e7a0f9060e3a
- SHA1 fe86bc104eaaa01357d98db905711e9c73d437ce
- SHA512 c8edf94f58d8007472737351d697682cb74153455d3dbd5a529efc7eab3d862581d1a1eb22b4e5df5176d9952b6b056a720cc77225b5c5a83f2299d90453cbb0
- SSDEEP 49152:1CZnRO4XyM53Rkq4ypQqdoRpmruVNYvkaRwvdiD0N+YEzI4og/RfzHLeHTRhFRNd:UG2QCwmHjnog/pzHAo/AyU
- TLSH
  T13A367C5673EA40B9C1ABD178CE479213EBB1781403345BEB4190C669AF73BE16A3E734
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  dxcompiler.dll
- Size 24.7MB
- SHA256 d8a6ff71c310c934cc859e3e9b1a2c34b0f38253bdc258c1476cbd9ccb633e37
- MD5 da07043f07a01969dc66b66e2c9021c6
- SHA1 84f4012019684aeeee29355f64d2bbec6ce47d41
- SHA512 aff96ee5a79b0156677938f8e01495fe1c37f92bf272c33ecfc5c889226d94ecc0be007f76440f05084874a5c4c42549fa6825f9865da50da942d7e6639ae959
- SSDEEP 393216:epLjH68inXc/GE+HiCt+2xwuQbgjvMCWT:yHiEFapwuNW
- TLSH
  T1684719122646D49DF059C878C3678716CA6C34EB3FA678EBC0B461152B7BEBC1B39235
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  dxil.dll
- Size 1.4MB
- SHA256 473f5e853120a5b6ca583ac51f453664abae15c0db1d307f29c8bf7a7b89f96c
- MD5 360c2ec3a4114840498e4b0f45820395
- SHA1 d5d4a71933fa25ec338cdf18d7a03281fe814d7b
- SHA512 257d1443341792587b0259d658a706dd8797a83644e451f2bd6d5b292d8259ea11c5d1b176541747a5470a2562615edd44b147e6ad752b4714458db28b07f9c3
- SSDEEP 24576:4Y+wATtbKYxy0y3ny6eBjNSGlVZyi27+V0IJNSD11J7R+j+v1acLUkJvS5Kab:FiTMYxy0Sy66Zh7Sh/cyvS5Z
- TLSH
  T185657E1B229801B6D4BBD17CDA47CE0BE6B2B41503B09BCF12B406692F5BBF55A3E351
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  ffmpeg.dll
- Size 2.9MB
- SHA256 5c8c4804c266b3c0bd1517c42f9dd310c3733fc14c363fc151306166295af238
- MD5 2c834f16e319c48813a7366cc42d9c62
- SHA1 8caa32bbda1278f7e9c01fd4319a2af7fb3701ec
- SHA512 1b54edad363360ef99968ed2f38ecce0dbac5da8ffe265797719832e2245b17fe5f4f696cf5430fa42338c4e4d2a5b921e76b9cc8c6130bf8d1d98f36441ff65
- SSDEEP 49152:BP7qY4ctjNE3KrfHEh1UBi0L//+eKVmQbJhvTxDUG5t9xi2QMJxUVlEQj0Ey4oB4:BThPD41Uge//WPd5t9xi2QMJxUVlEQjz
- TLSH
  T101E59E03F6D650DDD029D57097AB9313F631340A8B205AEF268089253FA7FD86E7E768
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  libEGL.dll
- Size 492KB
- SHA256 09dc89e7a401f272d29ef445f1825f4ef4422c6844892a6d8a56108b47a69504
- MD5 e795c02f5692460c2ac566d5d53972bd
- SHA1 80bafe27b2af747e768ab36cf7fa5c1f072ca530
- SHA512 400478284147691a25a6eebbcff4726dffceb4e7ef4e5a77ee170cc9fa1c3831d11138dac091266c017d2c4c65f93fd5141066839e80b05e001ea6b21f2d883d
- SSDEEP 6144:FUfgtSXLx7WDlUD3ntOb5EkMNvutTutO8PcRWLMJ85IeVeRAKx/b0:eZ7olUBObyNkutO8PcRW8mIegzb0
- TLSH
  T17DB49E15F3E545A9E07AC1388A434602DB76B8560B65FAEF03E093792F37BE45B3A311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14
- Target
  libGLESv2.dll
- Size 7.7MB
- SHA256 e5d96fb54dfbbf676b0b37c7915bcd907ff28f2ba63b49a72736a43ba3939a4e
- MD5 e83cfc0b54e74499d3aece7ecd449edc
- SHA1 cd18a077a977912fc16f6f9d77477bc1291b9b5e
- SHA512 22f00196d2905d50f62636e6c628efacec3cfba69981769cbf44806fee5c0bdc07b0c593cb0177ff94433eade1a7410298dcfd5a074abaf0f76fe256e0902104
- SSDEEP 98304:tsGAgRCWeWU4Wvy0jgjZQegl99ZmD3w4r/KlX26M:S+ervqggMqgUKpN
- TLSH
  T17B868C03F29640DDD05DE2B897579227FA34B8450734B2CF2A9457252F67BE0AB3EB24
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  resources/app.asar.unpacked/assets/bin/linux/controller_service
- Size 23KB
- SHA256 b0c2d37fbc23d3013b8c5e13ee70d9c7c63eb9bfab71481ac751dee032957263
- MD5 fec65cb49c2faeb36c665eaeecd2c93b
- SHA1 02c8c8eb022dc4ecd3be28a6c7fb384fb39a5dfc
- SHA512 b28db34850dd7ef2b3154759aa8e3c7dfc3cdc372798795f1a6bf4f97c939e8fe619d0c37f4035817ffecbc6e94608a4e261ccd4f666eba3e701571c5ab36e4d
- SSDEEP 384:LJqwIe4wR39h3NuTHBdMtAy1IFqWu9cg:9d4k39h9uVyAOI8i
- TLSH
  T107B2E913A6878DB6CCD49B7410DB433AA473B834CF644667BA84A73709533D89E2EB81
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16
- Target
  resources/app.asar.unpacked/assets/bin/linux/patch_manager
- Size 9.1MB
- SHA256 8979f3376910749a177199336cf2a22930a25234e8e42059d765b832e6cbe085
- MD5 64aa3ab772ee0d7bcef99810479844bb
- SHA1 e1c53e59b5b35fefe80fefc5ebf0c5beff6cb700
- SHA512 ff1410aeb70acf311d8cde2c4ba92b6676b872daf57c668c9ef7ceffdcb985261f0f2ab043dcec54f1bb28a00ed0597b8d0720e037eec781c8bbf96576d494ef
- SSDEEP 196608:RNVfi7zismz6gDE27Hquaq8TvQH3iGIepZch9h7QhiQJ1a0IpSFLlFQXA1/+RnSL:RNVf9smz6yE27H/FuvAKC2fQ19Zew1/T
- TLSH
  T14EA6331AF531E0F2DF98F63D1AEC48765930AD368B16E4FC1257A3942D0292D2FD6C92
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral17
- Target
  resources/app.asar.unpacked/assets/bin/linux/xenia_toolbox
- Size 133KB
- SHA256 db1c3902e96a5c692d344d01ab20c4fe8d270d91bf7d1bdfba96a2dbba50956b
- MD5 a4ba2724573583b139183581649ddf5d
- SHA1 7a0f42582be3eb5fcba9832117b2708c83ee548e
- SHA512 f3f5fcf05c2212ed4235892dac633fd85cfee50c6175c75de9219982f7b0dda7aa62689ca941015523da7da94406cdae50b9378ffd53ac785a334660beb74563
- SSDEEP 1536:Aurq/W4I8i24Hz86DfLKpIr89/cwKxhEZXQsNzzICeLmX5:AWG4Hz86DfLKpb9PKxhXsNzzI
- TLSH
  T1CCD3E73BB292CFB4E0863F7838CFE19589147CF06A38206EB75A4E2E9456C88577D351
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18
- Target
  resources/app.asar.unpacked/assets/bin/win/SDL3.dll
- Size 4.3MB
- SHA256 24e78de9285bb07dfab3692b5b249f381f4b9cf894cf301c085242fd1a22cdad
- MD5 fa05b9d337d919573e234899317a6156
- SHA1 6ce87c4568db6f77cd1a2d4192dbe357523a4687
- SHA512 eb583ad35493a45ab370b2e96c6532bc2a2a3c9836ebfb46ce188e60f53c3fff9f07495affb905e892e31bc2bf827a7628725b61232a35463dc8c99ef1c29df7
- SSDEEP 49152:DqZVns8cvLVgzNXeFCMr5W4ExZzHguKAJnOk2YSaqX75f6ajRtoqOb4Jm9tTDLzN:288XeFkFOHYSaqXP8B4JcLSDVBafMb7m
- TLSH
  T1CF268D8EB5A36C8DCA27D1308257A3337634F458137BAF6B1A509A305E23ED06F1AF55
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  resources/app.asar.unpacked/assets/bin/win/controller_service.exe
- Size 12.3MB
- SHA256 6a52f42394faad217d328e057968c55e7441bb93452eede64195ac61bb6b557a
- MD5 4cfd61b29cdf5a789445c869cb002792
- SHA1 80c5d7b6130d282d19e3983af511a63258f9e474
- SHA512 c9a237de6df4f1cab30238d3f40506737a204aa7fe039ede8b3833d10aac81b033ac924ccba9dcbba3f7a472c0558bb792a8b49b3cfce99103ad05ae6d232112
- SSDEEP 98304:/QxKRMmwvguml0eB1nYht77jT6tP7revxxyuJgNdGKZmJGZ+aS/LB8WCx7aoOXIb:BwYumlDnY3nT6dmvxxy4gNdGYmJw
- TLSH
  T1D5D63B4777C74DEADCC22BB4B59B23389730ED229E690E2F694C81345C532DCAD1AB91
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  resources/app.asar.unpacked/assets/bin/win/patch_manager.exe
- Size 6.9MB
- SHA256 a7cb48ab8d4b9508432465c9aed3649a0c798cfa27720f4ea639d7b376a63083
- MD5 5b79663153911b0964822355cd8bfb28
- SHA1 7d6b105ca695ee99ec13b99c288a2c0a1c8503e6
- SHA512 b845ef56b099590880694dd8a28632169e943312e72dbf9ddf17b6dd05fa56f6b1b0a27e0e1da020757f2bd98391f21e409e4f45493dff8731c0618da8938b19
- SSDEEP 98304:xI8fhZFmHgpA1h9eT393YigJhH0y3T+q2M51Y7uRlXgVLRuq972OgQKhudxjXm9B:mqbFmHSA1HeT39Iig7auDXURuA2OOE7
- TLSH
  T1D07633A9A3B601F9F9F6913DC2A6C299E22174568725D3CF13E00A533F277E1493AF41
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Loads dropped DLL
behavioral23 behavioral24
- Target
  resources/app.asar.unpacked/assets/bin/win/xenia_toolbox.exe
- Size 15.4MB
- SHA256 78b64bb80e9a2455541a759716a7afa9dba5142ec04f02d041e98fdbfd69f089
- MD5 b8657138492d79f85646edbfaf870ce0
- SHA1 fda4212b84afca19350ee750d08c40d5103b322f
- SHA512 93922548d01b8f8fa8b2e81e16e1885fef2d538f7c34b4246c79b9ac532bcf0f3d351401eff1897df5ef5c5bfc33c3379498b27c9f731d822f2922d0063b4ef6
- SSDEEP 196608:n++D1uxT9+5rt0bxvMQTvgVF5P+pzHdj0FT2DL:n++UxT9+5rt4/Tcahj0FC
- TLSH
  T195F64C0677874DE6DCC23BB4B9AB23399730ED215F6A0B2FA58C91345C532DC9D1AB90
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  resources/elevate.exe
- Size 105KB
- SHA256 9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
- MD5 792b92c8ad13c46f27c7ced0810694df
- SHA1 d8d449b92de20a57df722df46435ba4553ecc802
- SHA512 6c247254dc18ed81213a978cce2e321d6692848c64307097d2c43432a42f4f4f6d3cf22fb92610dfa8b7b16a5f1d94e9017cf64f88f2d08e79c0fe71a9121e40
- SSDEEP 3072:1bLnrwQoRDtdMMgSXiFJWcIgUVCfRjV/GrWl:1PrwRhte1XsE1l
- TLSH
  T1EBB37C1274C0C471E5732A361974CAB14AADFD700E759FAF6398127A4FA01D09A3AFB7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral27 behavioral28
- Target
  vk_swiftshader.dll
- Size 5.3MB
- SHA256 22a2305e52d6cded30c0606c7cb44e25c1374dbbec08f5da183f91de0b1390a4
- MD5 57ed221051a5124546848d413c7bf534
- SHA1 37fa025e93d7fbeb3a6eeb21660221a35b3bc917
- SHA512 c9ce057dd2f166cf75b2d4a4d8a6ef90376cba15ad182708ba24504cc7ee11f7937feb5414a874df573a1aa7e51c23e257e611300725315a11de6f34fef3fc09
- SSDEEP 49152:ljso2Wp9s18LbsQCgJxAhgK4axTciCuE2aRj6q8U45uqPppkBXqyWwBgVGdWyKQS:ljd2WpM99ZKtA8h8AHwv
- TLSH
  T1E7462703F28680E9F05DD679875BA622F632F8814B2276DF56A01F192E77FE06739704
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29
- Target
  vulkan-1.dll
- Size 917KB
- SHA256 457ac4472ea01cdc7bf483629eed2118814611c79e39ea69304adb2509fe28ec
- MD5 84ad45974c4d28380280efe0c25137c9
- SHA1 0b6740c39c53fcfcd98c0e82bc3878ff0371d2dc
- SHA512 0c0d7454cdd38146e9ee7bf296bde8fb368e3131a6da9b204bd4b02025de1cf9a44085c5f6741159f39f82284d7dcbb9078389bd9960d9d9da08b3b7ff2b5ceb
- SSDEEP 24576:FgQmQinxRotX321+hvdK2S6Z5WGcSDYsHQDi6g3P0zAk79oOHHe:+N5nfotX32qFKb6Z5WGcSDYsHQDi6g3L
- TLSH
  T1DF155B1396958569D57AD038CDD28607C9B178822326B9CF02A817087F6FFF47B3DB29
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral30
- Target
  $PLUGINSDIR/nsis7z.dll
- Size 424KB
- SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
- MD5 80e44ce4895304c6a3a831310fbf8cd0
- SHA1 36bd49ae21c460be5753a904b4501f1abca53508
- SHA512 c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df
- SSDEEP 6144:aUWQQ5O3fz0NG3ucDaEUTWfk+ZA0NrCL/k+uyoyBOX1okfW7w+Pfzqibckl:an5QEG39fPAkrE4yrBOXDfaNbck
- TLSH
  T1E9949E22B6D2C036C56E02309918F77921AEB3B1592DDB1B73985B6F7FB44C19E24B07
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks computer location settings

Executes dropped EXE

Loads dropped DLL

Reads ssh keys stored on the system

Checks computer location settings

Reads ssh keys stored on the system

Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32