bca968bba9c5b5e046823ccfea196e2a[.]exe

bca968bba9c5b5e046823ccfea196e2a.exe

IMPHASH bf95d1fc1d10de18b32654b123ad5e1f
SHA256 e75cbce2a288aa6042ec19d11616d5fd4f7cdb25aa284c7ea5bdb5fbfe7930fb
MD5 bca968bba9c5b5e046823ccfea196e2a
SHA1 e0b46d402ce5dcff8c75407382f29fe0ef3758a9
SHA512 91ab9bfed72ad1941b3a392a699f1598cce7347c31b24d5f28c3ef4f1f575ef852b7463d1eae6a6b2e08fe5d55ddb99794d8761114348b7af353a5318282c13e
SSDEEP 24576:L0aOtLJEh/0Lg4lDDrde3wI/XfmutdHGivSTDfKlyyFgI9BWZYmiMN8sf8l6GH96:L4tBPl3rde3wIHm04ikDSlyyFaZZiMN5
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

fe:9c:60:40:06:c3:50:0f:f7:ff:bc:35:d0:06:3e:bc:08:56:1e:b5:58:e5:6f:73:7b:fb:2c:5a:99:c1:e7:fe

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

Signing Certificate

CN=Rare Ideas\, LLC,O=Rare Ideas\, LLC,POSTALCODE=10009,STREET=PO Box 227,L=New York,ST=NY,C=US

Chains

Jun 21, 2017

CN=Rare Ideas\, LLC,O=Rare Ideas\, LLC,POSTALCODE=10009,STREET=PO Box 227,L=New York,ST=NY,C=US

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

PE Signature issue

Digest

d7:d5:45:fe:85:3f:79:d1:21:9c:f6:c8:91:fa:72:2e:94:ff:aa:2e

Digest Algorithm

sha1

PE Digests Matches

Not matched

Trusted

Signing Certificate

CN=Rare Ideas\, LLC,O=Rare Ideas\, LLC,POSTALCODE=10009,STREET=PO Box 227,L=New York,ST=NY,C=US

Chains

Jun 21, 2017

CN=Rare Ideas\, LLC,O=Rare Ideas\, LLC,POSTALCODE=10009,STREET=PO Box 227,L=New York,ST=NY,C=US

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Rare Ideas\, LLC,O=Rare Ideas\, LLC,POSTALCODE=10009,STREET=PO Box 227,L=New York,ST=NY,C=US

Serial Number

af:1c:39:06:7a:47:22:8c:47:99:a8:8f:1c:31:ee:e8

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 19, 2017 - Feb 19, 2018

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 9, 2013 - May 8, 2028

Subject

CN=Rare Ideas\, LLC,O=Rare Ideas\, LLC,POSTALCODE=10009,STREET=PO Box 227,L=New York,ST=NY,C=US

Serial Number

af:1c:39:06:7a:47:22:8c:47:99:a8:8f:1c:31:ee:e8

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 19, 2017 - Feb 19, 2018

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 9, 2013 - May 8, 2028

Subject

CN=GlobalSign TSA for Advanced - G2,O=GMO GlobalSign Pte Ltd,C=SG

Serial Number

11:21:06:f1:0f:ce:68:f0:9b:fa:e5:5b:18:cd:8f:20:01:77

Issuer

CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 24, 2016 - Jun 24, 2027

Subject

CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE

Serial Number

04:00:00:00:00:01:31:89:c6:50:04

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 2, 2011 - Mar 29, 2029

Minor OS version

0

Major OS version

5

Entry point

13289

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetFileTime CompareFileTime SearchPathW GetShortPathNameW GetFullPathNameW MoveFileW SetCurrentDirectoryW GetFileAttributesW GetLastError CreateDirectoryW SetFileAttributesW Sleep GetTickCount GetFileSize GetModuleFileNameW GetCurrentProcess CopyFileW ExitProcess GetWindowsDirectoryW GetTempPathW GetCommandLineW SetErrorMode lstrcpynA CloseHandle lstrcpynW GetDiskFreeSpaceW GlobalUnlock GlobalLock CreateThread LoadLibraryW CreateProcessW lstrcmpiA CreateFileW GetTempFileNameW lstrcatW GetProcAddress LoadLibraryA GetModuleHandleA OpenProcess lstrcpyW GetVersionExW GetSystemDirectoryW GetVersion lstrcpyA RemoveDirectoryW lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalAlloc WaitForSingleObject GetExitCodeProcess GlobalFree GetModuleHandleW LoadLibraryExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW WideCharToMultiByte MulDiv lstrlenA WriteFile ReadFile MultiByteToWideChar SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW lstrlenW

user32

ScreenToClient GetMessagePos CallWindowProcW IsWindowVisible LoadBitmapW CloseClipboard SetClipboardData EmptyClipboard OpenClipboard TrackPopupMenu GetWindowRect AppendMenuW CreatePopupMenu GetSystemMetrics EndDialog EnableMenuItem GetSystemMenu SetClassLongW IsWindowEnabled SetWindowPos DialogBoxParamW CheckDlgButton CreateWindowExW SystemParametersInfoW RegisterClassW SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharNextA CharUpperW CharPrevW DispatchMessageW PeekMessageW wsprintfA DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW LoadCursorW SetCursor GetWindowLongW GetSysColor CharNextW GetClassInfoW ExitWindowsEx FindWindowExW GetDlgItem SetWindowLongW LoadImageW GetDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndPaint IsWindow

gdi32

SetBkColor GetDeviceCaps DeleteObject CreateBrushIndirect CreateFontIndirectW SetBkMode SetTextColor SelectObject

shell32

SHBrowseForFolderW SHGetPathFromIDListW SHGetFileInfoW ShellExecuteW SHFileOperationW SHGetSpecialFolderLocation

advapi32

RegEnumKeyW RegOpenKeyExW RegCloseKey RegDeleteKeyW RegDeleteValueW RegCreateKeyExW RegSetValueExW RegQueryValueExW RegEnumValueW

comctl32

ImageList_AddMasked ImageList_Destroy ord17 ImageList_Create

ole32

CoTaskMemFree OleInitialize OleUninitialize CoCreateInstance

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

$TEMP/Admit.mui

SHA256 e30722811e63be8ddfeffc85ee9842a3896b4a330d7e6166045fafd77407be90
MD5 7b4abc719a85e18ef03da8e83b6b72f5
SHA1 2b9b356948d7788d3eb3f3c2867082574170d19b
SHA512 266784814a07f1be271c55c475bee253ad05ee7d1e0472c0c1c5821fb6ed398c304f4c3f047f77efdee3accbc01ee4b71416ee937424fe8b2140f4ee33646697
SSDEEP 1536:EtoYMIzO57auSgIZG6zA2Ke9jyEqycVs3nV1/eFER9A:MMI6BNhIG0A2Jq/s3n/QER9A
MD5 SHA1 SHA512 SSDEEP

$TEMP/Difference.mui

SHA256 19b184c00c9ee82e95957723f3b619c08d4b6bef42fa9ab89ef7a1d4098761bd
MD5 157d089a834de25cd68736c0f1294376
SHA1 e2c7d6a6dc1f342bd78149d09a402940de0ab60a
SHA512 d21536f71081b68e2d23035a58516f98e809f1a26437c3f40d581efc19360e478b921438170f329efe451470d8a75430459b51df9dd697f238d3f3be6ae66734
SSDEEP 1536:Oi2Kra7DnTVNhmh8sTrWrEMoQuG+pWfdu6bgsUU38Fdxbgqv17QpE4T7yNTAXK:B4zRb2rWr/PLVpoUsFdpv176E4PUAa
MD5 SHA1 SHA512 SSDEEP

$TEMP/Jamaica.mui

SHA256 0bc4e41cb927039eec9bf3ce81ed1a729f4e32a867d921ee282834fbfd6fc3bc
MD5 06cc479507cbd4506abd7fa3c125eb7f
SHA1 40197493052e229735dd9b1824c48271d84daf59
SHA512 9e50bf64a2579bad120046454f4c99af820e33c92739993a0cba46d70d580ff8ae68ca6331ad3f4e1ec170d7346910dfe187acc1b7fc713c813dce5bcdaf712d
SSDEEP 384:QkKi3q14TBnNaeWiAGgC5BGY+REyO8ZDd1tIFFMSBvSLP8mB2MF:QkFk4qjiwd7ZO81d1tIISYLP8mFF
MD5 SHA1 SHA512 SSDEEP

$TEMP/Opportunity.mui

SHA256 8de87feab378f18f90c08befb0a72cb1de72d4e05073cd84181a673a8d253a6d
MD5 0b27e03bfcd49f9cb004a3a6c8a67f67
SHA1 869af987902a5ec5dfaeeb1e2b5b3608fe48c492
SHA512 f033b2b27fd64f259071b4ee010ad735b3954d48745a3d0a2d5e678c840ff7fd57085ca614d7659e16bbc4f28c55da46a0d9db5b785ce561d8ecc7e57a4b4ae7
SSDEEP 12288:4DI50+QsE8uw0jV6diTI5yIoh67d9bEiPOa6ewK/1Av:4DI5tQUWjV6gTLIoA7zEimtL
MD5 SHA1 SHA512 SSDEEP

Apt

SHA256 fc59d035769ca385b7c16f40f881594a50b900bcec6ae505f74ab5b4895fb5f8
MD5 32f645485c051aa0bc4975cfb10b5433
SHA1 0bab2461faffcdfbf08d2647b22a5815954e936e
SHA512 86ac7fc37411f0122c4759697a54320866c4dfed1378ad84cc9f182d3f1779d4dfc0bc86877a3c189def7e343efaabe09a13de539ec37e6b75047cb70fccbec1
SSDEEP 3072:VpmESv+AqVnBypIbv18mLthfhnueoMmOqDoioO5bLezW9FfTut/Dde6u640ewy4i:Vp6vmVnjphfhnvO5bLezWWt/Dd314V1v
MD5 SHA1 SHA512 SSDEEP

Bring

SHA256 416c3140a813113b2f9ea21ef3aa2050c7058e2bbf9206508ea027e827f23d9c
MD5 9231318e12a589bf7ac21d1dba9857dd
SHA1 21588472948137359b2635dbee64c1973d44daa3
SHA512 5723c670f8d2f445f4b80b7e8bc8e00b6fa5c6e81fcd7e97be540b208231f1e6b15ae1ff422b8fe12fcf9f7f6fe5759650bc844959725afe0613b97b10efd349
SSDEEP 1536:43YRYfv2j62SfuVGHj1vtK7h6R8anHsWccd0vtmgMbFuz08QuklMBNIimuzaAwu8:4oRC2jfTq8QLeAg0Fuz08XvBNbjaAtst
MD5 SHA1 SHA512 SSDEEP

Camel

SHA256 adcdd1fc578dcb7e1efa8e43d62bfa011c9d1ec3e00f4b5ee1a28e7d00646cf4
MD5 7e0a738800cccaf9f52636093659f69b
SHA1 d5e756d97694e517e303f759e9f7fa2d9e940eeb
SHA512 f445917973421a5db77a067aa0171755e764ba8a4ee68dd541cf408ad8860ebf387660c0e1264ce66e7c65bff0def14c472a54e32ff4d6cc80d7a4d60ea7d246
SSDEEP 3072:wqv+32eOyKODOSpQSAU4CE0Imbi80PtCZEMnVIPPBI:pmmLsiS+SAhClbfSCOMVIPPi
MD5 SHA1 SHA512 SSDEEP

Canon

SHA256 80e8d1b0f69d93c96395ed9d0faed817ee88a699547ec2e578c6353690a987e9
MD5 918fd79030129cda4a7752eaf56be204
SHA1 fa129735a4ecff16c3399543647a31d591b38f73
SHA512 9dd3d7421493fbeb04b7f2cdac6345f87491c006806ef3448461120046ca52de0d1f0d9663496177fb4ca8591a74f1794f9f1e31988f8af49b296c2a6f1fbf9d
SSDEEP 768:1x/SGKAGWRqA60dTcR4qYnGfAHE9AUsFxyLtVSQsbZgar3R:1dKaj6iTcPAsAhxjgarB
MD5 SHA1 SHA512 SSDEEP

Caring

SHA256 7f5aad1dcbe39d6e04f222faf915fa42bd8621b543c7a4b7766b911bc4fe4af9
MD5 153cf24d9b978a70b97a44c2ec54aba0
SHA1 e960ad86bc2bbc79da03dd0fece982fed1ff9578
SHA512 ce76cd6633abc38eb53780957ec5d81f4776ac6c0fee8e5096d858995d742aa6f1624436d3e6bf8423c217a789a5c234077ea371ac3365443eae8747d85a685a
SSDEEP 1536:J5el3EYrDWyu0uZo2+9BGmdATGODv7xvTphAiPChgZ2kOE6:J5elDWy4ZNoGmROL7F1G7ho2kOb
MD5 SHA1 SHA512 SSDEEP

Dolls

SHA256 39c637a10144830ec33d6095bd4e94db8edc4d4e975ea3843203d95b96084952
MD5 b8ee6547d706296510b3ffd87981211d
SHA1 78db170d1f011872e416e28774880d2cd079b2df
SHA512 b36e88cc70d6f83cdde3d952f2bb085d8c2febc4ae2ffee260aba824d957300ffeab0d778275b5136cc3e52f2bbbab5d9b6f5aeeddce7f7fbabbe9a2b8f746ba
SSDEEP 3072:8tNPnj0nEoXnmowS2u5hVOoQ7t8T6pUkBJR8CTr:iNPj0nEo3tb2j6AUkB0CTr
MD5 SHA1 SHA512 SSDEEP

Dried

SHA256 2e2409cf71c8862842c504f2a64b6c9f60043548e307589830bca9488463f519
MD5 ce29d04f921bb2bc5cac93e5047d9a07
SHA1 b6385fe9a0384d1785c121658f21224f3be355f3
SHA512 fbfacee787ede8a47791b9c661da240fee3367688afc1d517257ab036aff056ded5e3ac03b3802792dc7b32e320bc10be891d6223d019b80feb0fdb25e487436
SSDEEP 1536:EZxu6/sPYcSyRXzW8/uC6LdTmHwANUQlHS3cctlxWboHdMJ3RA:ET/sZydTmRxlHS3NxrHSBm
MD5 SHA1 SHA512 SSDEEP

Movie

SHA256 157863eace9a2a8601afc5ab239ab376526786810066f219dafd1e1f717d3b62
MD5 207decf18650b061775529e65808cbfb
SHA1 51d4e0acb2de670ed3ad790e1781a8a9da2daf96
SHA512 b6160ddfda8931dc9e0ffdec103acdee8ab725e251a14b691eeaa1419560ddc3e8370a1d520b2c64d6aff75e7678bdea9478c86a5f3263e43f48bb45e35e6f1d
MD5 SHA1 SHA512

Regard

SHA256 c664fbf6ef5e59cc3cd0f27e38650fd92c40d8373e78fc45e39cf7e95e99df93
MD5 7af8bd69d3170f575caa20adbead0dcd
SHA1 58db35e087afd147c81c6b0345f425fc6673d8c7
SHA512 da3f7f877660462b21605b9bb6027bf70100acad185f1cca9621710873f3a820a14da33aa2a689b885357d2f5da80f1191d69534666eb7ccb7feb7c16377b306
SSDEEP 1536:XAD1EsdzVXnP94SGGLpRB6M28eFvMVpYhWoXElJUzdlDfFgQt:Xg5PXPeiR6MKkjGWoUlJUPdgQt
MD5 SHA1 SHA512 SSDEEP

Trips

SHA256 d350d23dce7a93d68ca2d27498be290a07484a613a782a467d07bf444803de54
MD5 83578709ddb5ddb58870b48039d4ad77
SHA1 a2ce97c16f61d6a3dac470fe733149a94b4d3739
SHA512 e3393f1a43dbe4381a0c05ff05e3caae96bbe47f9322746e183348f29bcce533f74076f73fab2dec894f3722eb3e34429eec360581d8d01668d0380bf0e2a47e
SSDEEP 1536:Q8BpDzdZPp7HE+tKA3QkvyNf7Xw2U0pkzUWBh2zGc/xv5mjKu2IwNnPEBiqXv+Gi:Q8Bp/LxyA3laW2UDQWf05mjccBiqXvpi
MD5 SHA1 SHA512 SSDEEP

$TEMP/Resolutions.mui

SHA256 5efc06d3427e5eecec438a2908e33367bd7647e6aa27677f8c12bf8b674b7436
MD5 7d7d5bee540495164a32d85dcf335d51
SHA1 ff90aff4e909bbb9e98a994291f7523b4df35242
SHA512 2809511448d0cdd07dc2eb0be74b77556369567b8c922a0f40f7a884f4c8fb8f9f143a67f8bc441bf8ee17084298d3bb4fa41aa0686378ef03dc065e52385a87
SSDEEP 1536:BxsAJAiEQwOALLyaXZ16k1pfSbNye12IAAu5vCmhnVQgM1d:BbJsOALLRp1tKbX2IAAb5gSd
MD5 SHA1 SHA512 SSDEEP

AshleySays/Dl.mui

SHA256 7f461a7834cccd960f7598603fc2c0667d17942c5de5df22a9a383fd177bf5d3
MD5 2fcc4974fae75ffbaf1e5df9c1c5d914
SHA1 8e9f1fdc8dddf9e1803a458c1648803d656cf303
SHA512 41a9773cb9c36f2f9c284ed3ec869cab8c55b1ff372433b55a4b587d46b6db8b2ce5db4456b115249eb6221002227f615aa3eac9d715db34db6105861204eec4
SSDEEP 1536:0C2BryilYFZWChf4rUMmuw2xYt6fU2gdtn/YOnNZEBL5RiAQHJo6HLVd6BUCOFA:0CcllYFN1oZw2xVfU2YnNiL5RdCdHz6r
MD5 SHA1 SHA512 SSDEEP

AshleySays/Flows.mui

SHA256 1ebef32f24dbe072a06aaea994f1174065396fd53656e9ec27436640bc951fcf
MD5 a938e62e8807972ba3fb5b27d161fcf0
SHA1 25748eaa61c44a8a70d00506f8aa4a5fd9bcd71f
SHA512 f5d4f39e7ede54e8e434ecbb8d3a32637c6885cf47f596917494aa6b63ef6c0f0fb34563b3881b730c6f425bc36dcdf631c77d68a49d9f5a939ae7d6c7ccd7f8
SSDEEP 1536:f0/7HRKXGNmI2IRaI+V+C3vPqa9hduNr9GQMHEvEwjqQdR5/c7NOhyXkKV:M7HR7mI21FPqa9h4N9G95wDd5AV
MD5 SHA1 SHA512 SSDEEP

AshleySays/Rec.mui

SHA256 10900d14eb9fb0ba4db759a4f0234b939b7bac8d8bb5f91840bbda3c839c6377
MD5 c05db4ae6e6febdd44ee8566a8f14822
SHA1 638a416749c36a94ee55a8567ade6a39296d0010
SHA512 4e7b2256902bd97fb7f4a29c1e3932a1999be2e4893ca35c0e5c0509a1ff5e33a4557dea3e831a0394ba0c03dd5fbaea595d6919ee6afc1ee2f88808e71562a6
SSDEEP 1536:BXz9oZnaxoJGCeqaYXBSNL5uBC+6MP7w4EEd63zeEOE21SCCMmf4DI8SDC8r:Bj9oZlJGCmLxwC+P7wId6qEOE27Cf9r
MD5 SHA1 SHA512 SSDEEP

Sharing

General

Malware Config

Signatures

File Explorer

bca968bba9c5b5e046823ccfea196e2a.exe

PE Signature issue

PE Signature issue

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

version

generic

$TEMP/Admit.mui

$TEMP/Difference.mui

$TEMP/Jamaica.mui

$TEMP/Opportunity.mui

Apt

Bring

Camel

Canon

Caring

Dolls

Dried

Movie

Regard

Trips

$TEMP/Resolutions.mui

AshleySays/Dl.mui

AshleySays/Flows.mui

AshleySays/Rec.mui