Dropped Files | ZeroBOX

Favorites
Tools
Dr.Zero Chatbot
Notifications
Guide 2020-06-10
Version history 2020-06-10

Dropped Files | ZeroBOX

Name	2ad923c263c652d5_ll12_defaults.dat Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Defaults.dat
Size	26.4KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`ebc46ce2606cd6c282831b8014973f06`
SHA1	`baf7d902b12495815dcdf1a6fee510a3e22076d0`
SHA256	`2ad923c263c652d5e6081370ef5a7792da7b2ba121b01379c6e80873fffaa04b`
CRC32	`170BF7C0`
ssdeep	`24:1+7XZaMwFH1EJgwCfTxQDneOvci3w3AHUl+5q:1+7XsMuVogwqCneOU5AcEq`
Yara	None matched
VirusTotal	Search for analysis

Name	c57c680d53fff3a3_LL12_Rentline.idx Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Rentline.idx
Size	36.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`c4d4cec31d8b3acf14a65ef8d0a110b0`
SHA1	`9c57f002f33d1a0d27e870f27b97b7d0c5e42768`
SHA256	`c57c680d53fff3a3e5564e091be4caf61c829e5058f55e76e761d8d76563190c`
CRC32	`255AC844`
ssdeep	`3:1lDQCuGZBul/lwnll1lYA//lblFlFlzVllzlHl+lttl/Ql/s/AYIl/pqll0LMtlt:kG/utqn/wAd/7+I5sC5pqlWM`
Yara	None matched
VirusTotal	Search for analysis

Name	7fab00d746f0c97b_ll12_xjltemp.dat Submit file
Filepath	C:\Users\test22\AppData\Local\PROMAS\LandlordForWindows\Instance1\LL12_XJLTEMP.dat
Size	17.0KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`8da83c678be53374e4fdb7444986f268`
SHA1	`9b2c60ca00fc7772d6893918f882e988f7290339`
SHA256	`7fab00d746f0c97bd3b1b0c1d40d432cfe88b0e29c57aa057860173e33d9cf39`
CRC32	`9932DFAF`
ssdeep	`12:qhZ0UMseAYAK+Hyxnux2lGXQLwq14I/nF:qq3aHCnG2lGgUtI`
Yara	None matched
VirusTotal	Search for analysis

Name	b5e9161e52df180c_LL12_NOTEITEM.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_NOTEITEM.ibk
Size	36.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`c29a7c9e55367b140f9c45c53302cf8b`
SHA1	`b16383f4856fd11cc5764a46ed72cc1dc3c149df`
SHA256	`b5e9161e52df180c0fb48b8fc76b4443390f3469c5e2194fc9f242935862e78e`
CRC32	`BCEF90C2`
ssdeep	`48:q/sNBZFzZldXBFfR9WOHUKtWO3kb1HmJ+Hf9ucjlBLDqC:qsnZxZlzFfjWOdWO3QHlHE6l1`
Yara	None matched
VirusTotal	Search for analysis

Name	230eee9349e6a7b9_ll12_xarbl.dat Submit file
Filepath	C:\RPromas\LL12_Training\LL12_XARBL.dat
Size	5.0KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`a86b7e0f3f388e9b1562938a29c4ccc0`
SHA1	`b060943fb0c150665c9ebd21ac7b919c40394c70`
SHA256	`230eee9349e6a7b99a92f9c8ba6f9a941a284bfe0afad5a6f37f7ed9738cbfe2`
CRC32	`69798C36`
ssdeep	`12:7LIq3cTiXbCXXDo6CCChFXCCCCuHOC62nikMCM26wCHCCr6PCOAH9tWtKC0FJqZ0:7LjLCXXDotRp2uLRLqtohw/`
Yara	None matched
VirusTotal	Search for analysis

Name	65286a48d6af4aa1_LL12_XAR.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_XAR.ibk
Size	56.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`a0ef65c5f01a9667b692500e89b191f7`
SHA1	`a81889b5d7cfa9c535bd9640ac28a3192aab5874`
SHA256	`65286a48d6af4aa1a324e98abe3b01f2bd165510baf263850bf5de359ee21367`
CRC32	`F1B50B4A`
ssdeep	`192:e5HxXNN5Ou5HxXNN5euM5kKscCuc9usOecRHEZSenLkKsDYuA0iJOecRHyuYEC/p:e/hl/heFFSOecRH0ZnXysOecRH9q`
Yara	None matched
VirusTotal	Search for analysis

Name	c8fdc1180440954e_registration.dfm.miaf Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\mia1\registration.dfm.miaf
Size	576.0B
Processes	2088 (Install_Rental_LL12_2018_4.exe)
Type	ASCII text, with CRLF line terminators
MD5	`ff697c2ffa89894ec61f9adf6839926e`
SHA1	`25ca863e1866d72d2ab76f76b15a7705f2c0cd12`
SHA256	`c8fdc1180440954e7773abfa450d153194fa675b8b2764f0300c00a73c989bac`
CRC32	`56FCD9FD`
ssdeep	`12:+GYMtg+YMtgdmMtgpMtgxINIkU3lkimkU3MIkT:+ffFmB5INI53ldm53MIk`
Yara	None matched
VirusTotal	Search for analysis

Name	5866c2ff25928c36_ll12_vendor.dat Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Vendor.dat
Size	57.6KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`9eff6638814ac3ef24dc7c2e58079584`
SHA1	`773efcbaf154dd9790b090531e49fe38921d53c5`
SHA256	`5866c2ff25928c3698329152ce86892e49028152fa75df3e913db962e42eaa7f`
CRC32	`4A36D61B`
ssdeep	`48:y0rGzX3JG46VPIIOqpV2syyBo2KQTA9nk/VIFQhepgvxlcTv9s57dvOvHlp7gBle:rb1ThyyWoTAvsbcTv962pbJ56L`
Yara	None matched
VirusTotal	Search for analysis

Name	d32c9a1dbd0af571_LL12_PROPERTY.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_PROPERTY.ibk
Size	44.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`9347348d98fc7e9f5307b736472a8093`
SHA1	`ffbb5b48515ba2a3f8054a79a8f69fdcb8007884`
SHA256	`d32c9a1dbd0af5714f4fdf17ec0aae6f1ecd82d89f0b2cdc939861d24ee018cd`
CRC32	`A5362E1E`
ssdeep	`6:mEG/utc9l/sOFiGxXcFtzXAmDXt/7dlSjlp//jlb8sNlms9l4LL:U3HEyiGxXcDXxDXt/7aQL`
Yara	None matched
VirusTotal	Search for analysis

Name	692786fb6bf3363d_progress.dfm.miaf Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\mia1\progress.dfm.miaf
Size	666.0B
Processes	2088 (Install_Rental_LL12_2018_4.exe)
Type	ASCII text, with CRLF line terminators
MD5	`03d007fb3fc47a2f8ca6eb2c13881052`
SHA1	`3212c3fb7faa97630f849ad7eba205d90eac7ee3`
SHA256	`692786fb6bf3363dfdd0cda8013986f4f63fd9209da6bd1299cc8cf06275df89`
CRC32	`10D0A4E2`
ssdeep	`6:a3jF2duukAiRcjjuukTDoRcjF2duukTDQTjjuukA6uN82du+wg4RBN82dukU3ekd:csIrqar1sIroarIINIkU3lkimkU3MIkT`
Yara	None matched
VirusTotal	Search for analysis

Name	b04a03d88f916232_LL12_XGL.dat Submit file
Filepath	C:\RPromas\LL12_Training\LL12_XGL.dat
Size	23.0KB
Processes	1936 (Landlord12.exe)
Type	AmigaOS bitmap font
MD5	`3998c02f9e45057a574eda8bb4f23b51`
SHA1	`7c8baef37278d61e3f3b771a29eee0addc22f5e4`
SHA256	`b04a03d88f91623292e77bd28f90c550efaf2d865f5add600b9833a5f83a21f7`
CRC32	`3E2681B3`
ssdeep	`12:Mh9q0kX0ivBmba/ml1PxaqvaFXgmraXg3DJFrHP2oU:Mvqkpa/ml15aqvMTr6gTf2o`
Yara	None matched
VirusTotal	Search for analysis

Name	9bbc2e45728de615_ll12_rjcopy.dat Submit file
Filepath	C:\Users\test22\AppData\Local\PROMAS\LandlordForWindows\Instance1\LL12_RJCOPY.dat
Size	5.0KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`2ebaa6b20276509f1a279a7bee49d9a4`
SHA1	`2149f52f57655cd59ad424f6a3781481054b326c`
SHA256	`9bbc2e45728de6154250aee281ac00b3539abdd86b644db7c92561aff064c518`
CRC32	`399BD540`
ssdeep	`6:g8G/ut6f9k0U38seAY/IlXB5v/qgtlS1w:qhFk0UMseAYATgw`
Yara	None matched
VirusTotal	Search for analysis

Name	f7406abcde7190ed_LL12_Mxbrand.idx Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Mxbrand.idx
Size	40.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`e58a47f45750f42e9d839643f3260819`
SHA1	`44eb9eed6fa3b459bd7f9d72f615c2221a657165`
SHA256	`f7406abcde7190edcc32c893d4336192c4a02a772dee192ea456996922a20b68`
CRC32	`2F8B9F13`
ssdeep	`6:CG/ut+UWOFiGxXcFtzXw/7+IIS/sytlwGapNFGyPQg:9ZyiGxXcDXw/7+IIi5wlNFMg`
Yara	None matched
VirusTotal	Search for analysis

Name	73a856ac7b568edd_LL12_Parline.idx Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Parline.idx
Size	40.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`cfe16293887623532bdfa2c7f0ffb5a6`
SHA1	`a0bbc1c015bf4e3341fe139cc0c6cff71327b74c`
SHA256	`73a856ac7b568edd6534e0d4d432a9e424be887548b73cedd63f87067cbf3d2e`
CRC32	`A57FD02B`
ssdeep	`6:CG/ut+UWllt7GF/7xlkdl/pl5hWiVX/l//lQ3H9UnlFtuoXl5Oh38l/fMi:9ZlX7GF/74dl/6Kl/JlFk5E/E`
Yara	None matched
VirusTotal	Search for analysis

Name	9e99e868fbd6c31a_LL12_XAR.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_XAR.ibk
Size	128.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`43388fc97d3b61a93bffe9ffce3dd653`
SHA1	`b54f8111b51ec4dec23edd9093639755fd480372`
SHA256	`9e99e868fbd6c31a89c8cf623fc6195059206edf599042d238e16220a8c6d771`
CRC32	`BCB48D9A`
ssdeep	`3072:GIH6AG4KIOg6gmo64+AGcHEUG+mmeOGu:7D`
Yara	None matched
VirusTotal	Search for analysis

Name	98067cd8edf633a5_LL12_XGL.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_XGL.ibk
Size	352.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`c635527aa2a9dcd1c9590b3945f50b9b`
SHA1	`e09a9ae783699cd256eca81490d64b67aced5dcd`
SHA256	`98067cd8edf633a54dc5d83acd55e0f8741d8db76b0ff715a86d506300508876`
CRC32	`0D5C42BD`
ssdeep	`3072:T2HfXpPR3J/BXPRbMs9VQO9XwEOuoXldWEjbWxe+WXkEjq1AzEOfwdB+RIGVfoky:T2H/1J+1wyWo+a0t`
Yara	None matched
VirusTotal	Search for analysis

Name	86efd44c3b7083c9_LL12_XGL.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_XGL.ibk
Size	300.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`1916ad2b2a9414209b5d4bed5cadfa2b`
SHA1	`02eaee598298ba7b24c540807e220326dc76c960`
SHA256	`86efd44c3b7083c952646a77c90058b20962c899bd6f5b229c30df434a93952e`
CRC32	`ACE429B1`
ssdeep	`3072:12HfXpPR3J/BXPRbMs9VQO9XwEOuoXldWEjbWxe+WXkEjq1AzEOfwd:12H/1J+1wyWo+a0`
Yara	None matched
VirusTotal	Search for analysis

Name	8b864b845e01af52_LL12_MXWO.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_MXWO.ibk
Size	64.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`a92b81c04de214260b29ae5b97cd0c89`
SHA1	`c230c04436a05ef25146b7bd2b2982aa8bdc9004`
SHA256	`8b864b845e01af52e5e8a8a544673e837f31208aa9b9906c35ce51015227e13c`
CRC32	`6CA0C137`
ssdeep	`24:rLl/lb8jtXQymozqv0IT56fuZyu2xUbaO:rx/5ge0P`
Yara	None matched
VirusTotal	Search for analysis

Name	bbdd88fd40d6b1c6_LL12_XAR.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_XAR.ibk
Size	104.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`2751f757f1994570ad25a20ca1118bd9`
SHA1	`22c6d80eb9212c8ce2c8e80e4e1e1d144e521be8`
SHA256	`bbdd88fd40d6b1c6d04a7886b1124125eebed8dd9b275d57e95305e082b1fa50`
CRC32	`4964733A`
ssdeep	`1536:/fvLZDWDH6AG4KIOg6gmo64+AaAOZZBVkyg:VIH6AG4KIOg6gmo64+AGc`
Yara	None matched
VirusTotal	Search for analysis

Name	0a54700237eec787_LL12_XGL.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_XGL.ibk
Size	136.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`e3bdd68112b0af5dd3d9fcdf29845d01`
SHA1	`d42a8bd56db4542b433e4418a9c5913fff429692`
SHA256	`0a54700237eec7877155851066f64a9a5990145fa64e414de253391056fa562c`
CRC32	`3DB1AF5C`
ssdeep	`1536:crZR3tpP233bTXpPR3J/BXPskbMs9VQO9XwE4Tun:S2HfXpPR3J/BXPRbMs9VQO9XwEOu`
Yara	None matched
VirusTotal	Search for analysis

Name	8a9ce30f887652b8_welcome.dfm Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\mia1\welcome.dfm
Size	156.3KB
Processes	2088 (Install_Rental_LL12_2018_4.exe)
Type	data
MD5	`90f5ff6eddcca361d3d359958a97d5a4`
SHA1	`85af264588c053310154318dab63f754584206d9`
SHA256	`8a9ce30f887652b86334075b2e42e5b76f48075928ce56c53c4d23e375dd546f`
CRC32	`479D838E`
ssdeep	`192:1vMMfzvu9vJSm3IZ8Zgspkk4B9heXItzNGzOiOWEpap5PKo6Mmp4CBH1qwWn5meN:1pI/V9d`
Yara	None matched
VirusTotal	Search for analysis

Name	ddff7efb86aca6b4_LL12_PROLIST.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_PROLIST.ibk
Size	32.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`303a5de71b822b131acad7d93b4b5c60`
SHA1	`b55c1be0234e81d0b8d70a5a0ca540c35f4f30c4`
SHA256	`ddff7efb86aca6b4b1ca20279211c9ec840ef7819a575c28f657549974c038be`
CRC32	`50BF9BDA`
ssdeep	`3:xllxQCuGZBul/lwlUl6ltFlWlzVllzlHlIllntl+qGll/+le/Q/ll:YG/utlOFih/7IGzOY/`
Yara	None matched
VirusTotal	Search for analysis

Name	b9e7e332d8c4b7c0_LL12_XARBL.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_XARBL.ibk
Size	28.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`42b06e3d063c641cd4379464b7464f0b`
SHA1	`494de435b1c79ab5efb820f6d8625310cf396546`
SHA256	`b9e7e332d8c4b7c0e1284b89eb93608839ee163493d184b83485cd8549cf3db0`
CRC32	`C0AC949D`
ssdeep	`3:qQCuGZBul/l/lelMl6ltFln/tNVllzlHlmlltl+dl+84l+llK:hG/utikOF/tz/7mGdl9pl`
Yara	None matched
VirusTotal	Search for analysis

Name	6c60a5584dda427f_PublishingManager7.exe Submit file
Filepath	C:\ProgramData\mia796F.tmp\data\The Professional Landlord\A056D2F4\B21C7FEA\PublishingManager7.exe
Size	340.0KB
Processes	1052 (Install_Rental_LL12_2018_4.exe)
Type	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
MD5	`d2ee41ca1e6f1e7b2ae154a949bcfd60`
SHA1	`ca9455344731565ffd20bf2d1e3bccde4c1ab88b`
SHA256	`6c60a5584dda427f48be11649f53fd002c24a76b58a3bdf295c0eae42fccfb7c`
CRC32	`B652ADE8`
ssdeep	`6144:UI70KGvukJLJC5Zs1+q7apBaz/v82z52X9K:p7NGvuOJCy8M5UtK`
Yara	PE_Header_Zero - PE File Signature Generic_Malware_Zero - Generic Malware Is_DotNET_EXE - (no description) IsPE32 - (no description) Win_Backdoor_AsyncRAT_Zero - Win Backdoor AsyncRAT Win32_Trojan_PWS_Net_1_Zero - Win32 Trojan PWS .NET Azorult
VirusTotal	Search for analysis

Name	04a9004d4caad2cf_LL12_XAR.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_XAR.ibk
Size	188.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`29eef8cd92d066847db338847f6a7e42`
SHA1	`63087f4b34f53a0bb70a44223254ab0565d8c594`
SHA256	`04a9004d4caad2cfa0a02b5caab0c36801156e130f135a105285c3a7c6efc0e8`
CRC32	`044106B3`
ssdeep	`3072:qIH6AG4KIOg6gmo64+AGcHEUG+mmeOGuFUG+mmeOL09KF:fDY`
Yara	None matched
VirusTotal	Search for analysis

Name	d65d017c4e6f112f_setuptype.dfm Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\mia1\setuptype.dfm
Size	32.8KB
Processes	2088 (Install_Rental_LL12_2018_4.exe)
Type	data
MD5	`0ed309fe577738be9f9ec6e6d4630658`
SHA1	`3d22b4956c8da2c4e91d99c590e165710915aec3`
SHA256	`d65d017c4e6f112f1959f6bbc50fdff35348596be68183a5570257a199eac1a6`
CRC32	`58966546`
ssdeep	`768:+YHXQ1NmO7ZDrkqzM+KGlm1ccHq7kBTT5DmoibfQd:+YXQ1NmO7ZDrkqzM+KGk1ccHq7kJT5Dp`
Yara	None matched
VirusTotal	Search for analysis

Name	31537e0d85d5c164_ll12_letter.blb Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Letter.blb
Size	4.0KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`40af358324da0bf83416f0e35b293ace`
SHA1	`b10583b89e19efe755f92a8edb37ca24f045c6aa`
SHA256	`31537e0d85d5c1642674baae08562e65be0836f88534bde12737f5345b5fd210`
CRC32	`9FA649E9`
ssdeep	`96:GnGN4wKI9zUZp5xVXsPuPpPCcs1M2V+J:vPxPuPpPCcs1M0+`
Yara	None matched
VirusTotal	Search for analysis

Name	c58bbc6cd65996e7_LL12_ENTITY.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_ENTITY.ibk
Size	36.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`8f65e3b8d9277acf37c439be45b42938`
SHA1	`11ecb8abe2cac948fce4f47f2b0211501933cf8b`
SHA256	`c58bbc6cd65996e76863a679884fceb73285dfe605756a69fbf7e1ce0d8d8c84`
CRC32	`C377CC29`
ssdeep	`48:q8sf5HNfdOtMSNndAEectEjTjzl+vRQ6xaiJ:A5HNfdCMqAEJGjTj81x`
Yara	None matched
VirusTotal	Search for analysis

Name	47f8b03badc4a2e9_ll12_integration.dat Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Integration.dat
Size	7.2KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`1f902ae98b01237559e9e1c5632eac94`
SHA1	`20ea40d2cfd70185f70c0ad5c8830318c0f56381`
SHA256	`47f8b03badc4a2e9df920d87149609b3b3633bccfbb8bec2549bc7c88d4658cd`
CRC32	`5BA6ED44`
ssdeep	`6:aG/ut6xE6t0fgQ/+13gXs1uDKM2DG+w0KLK4fqN/lUOcEgzWI/ll:1hr0fl/Z0TM2DGDLK4iN+OcETI`
Yara	None matched
VirusTotal	Search for analysis

Name	66c1752706b9223a_ll12_noteitem.dat Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Noteitem.dat
Size	15.4KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`1043dbc8abe642f0901ff2b09a7f097c`
SHA1	`3666c392f7f69fb086350598e06a6bfde8a564cb`
SHA256	`66c1752706b9223ab38d2597a1b7b424e0f7b758aa0b7fa0dfb7f9d00d3dc1fc`
CRC32	`CA5B4511`
ssdeep	`96:SOMGXziGF/05dHqpnHaE+ima8jhZMYE/XnJ9N:VWGFqjXaOCL`
Yara	None matched
VirusTotal	Search for analysis

Name	b44284140dd446de_ll12_rentline.idx Submit file
Filepath	C:\RPromas\LL12_Training\LL12_RENTLINE.idx
Size	36.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`5a69fbf3b8251fd8f0c0088aaa7067ff`
SHA1	`3acbea8e075675b46deecd3b5848768a26aa902c`
SHA256	`b44284140dd446de62eecab2203f4c3e0f9ef425b2386ad41a14df99924718fe`
CRC32	`7D443B37`
ssdeep	`3:gltxQCuGZBul/lwnll1lYA//lblFlFlzVllzlHl+lttl/Ql/s/AYIl/pqll0LMtX:g8G/utqn/wAd/7+I5sC5pqlWM`
Yara	None matched
VirusTotal	Search for analysis

Name	c3fc8a17eb4a56a9_ll12_vendor.idx Submit file
Filepath	C:\RPromas\LL12_Training\LL12_VENDOR.idx
Size	56.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`47e2b522d1d86c81627e87763f29036c`
SHA1	`0cd08dbf19d9af95a1afe9576645190fe865ef18`
SHA256	`c3fc8a17eb4a56a9de780fbea66a9f5ee16dc9b2d9842e6a21454076eb5fca2a`
CRC32	`9D962990`
ssdeep	`48:Rt0M46F2NfT+oX/ytgm0lIqLifw1iXw1:w6FGfaovyB0lBawQXw`
Yara	None matched
VirusTotal	Search for analysis

Name	7e4bdeda3194f87d_LL12_Tenant.idx Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Tenant.idx
Size	72.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`e48abc651930721b9922bb9c5f4735dc`
SHA1	`b56a6179904d04f8c958ba7806cc4a06296e3a2f`
SHA256	`7e4bdeda3194f87dd46177b27b6e6722e6fbb28bf8c25500b65d26459da7e76e`
CRC32	`C241085B`
ssdeep	`96:bCGo0wVo+sJPyEyTaC6ylw1ec98qFlQO1VOWMF:ba0we+sJPyEymMl+f98SOyVOzF`
Yara	None matched
VirusTotal	Search for analysis

Name	497be80707d8085e_netlog.txt Submit file
Filepath	C:\NETLOG.TXT
Size	144.0B
Processes	1936 (Landlord12.exe)
Type	ASCII text, with CRLF line terminators
MD5	`d97c29c70494c21b743d757971b0c79f`
SHA1	`7ca2752e6a79ba4d1a7d3ceb62ad2d0d88d55316`
SHA256	`497be80707d8085e3280ebe00a88c7e4f02318c7b5ce734f1344c0e31c56afef`
CRC32	`F758A742`
ssdeep	`3:tUI2IVKUvm+k4MDcIVKUvm2AQyAF8Zzk4MDcIVKUvmj0U2V3gt4C:m+9Ib59xTygXb59S0Ddgtt`
Yara	None matched
VirusTotal	Search for analysis

Name	04416f2295db10a5_LL12_Defaults.idx Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Defaults.idx
Size	28.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`b28bd8b44563372c32f63f56d5389ff1`
SHA1	`9a573bdfc04ea7a8c4c44478686bf04d0d2b126d`
SHA256	`04416f2295db10a51877ec9ebf74abcdf78b00a8532e10fbf010906b03ddde48`
CRC32	`3D39BF47`
ssdeep	`3:qQCuGZBul/l/lelMl6ltFln/tNVllzlHldlS:hG/utikOF/tz/7dlS`
Yara	None matched
VirusTotal	Search for analysis

Name	0e670026bb481825_ll12_entity.dat Submit file
Filepath	C:\RPromas\LL12_Training\LL12_ENTITY.dat
Size	22.2KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`fc5d19e893e2b7090fd61849d793e317`
SHA1	`3a3fa788d4629cb9f30140c221a90c8ab7f7a8b9`
SHA256	`0e670026bb4818252a8b7880294f851d9cb04b2ac60951748cc3e3cef9fdc8a7`
CRC32	`F34072DE`
ssdeep	`192:10YcRMT3+70WqDJjuEdec9UZJq9J1lSHI53+pOHKgclXiBt:1gU3+70/juEdeUU+XT53+pOHKgcRiL`
Yara	None matched
VirusTotal	Search for analysis

Name	2194537808b44f27_ll12_cxoline.dat Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Cxoline.dat
Size	15.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`f109e668ad1e4c2a27dc72378b3f0f5e`
SHA1	`db10f8f9c6941685da412ae754b9885d2b65b16e`
SHA256	`2194537808b44f27980b05aa07b75543a2e25ef056f1f791ff7db9f929e32224`
CRC32	`3ADC9059`
ssdeep	`12:6PhPk0UMX2AYJzl0tehH4IGA+tyqjsNRDeptj5clkVCHa:6P5mQehH4E+MqjIZeDT`
Yara	None matched
VirusTotal	Search for analysis

Name	adb27708d8e5668e_LL12_BILL.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_BILL.ibk
Size	36.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`e4e8b1a14470ed8bcef2af4aac0d5fc2`
SHA1	`ee7f1564ab9dd57d229a9ade53417bb0af018773`
SHA256	`adb27708d8e5668e25b0973181a33c5d284ab4904bba00727d8a916104b0e43c`
CRC32	`8697016A`
ssdeep	`24:q8lnRf0nRf71/ijuz47Z8a/4Tggyk/Eb:q8jfsf7TC6ggykW`
Yara	None matched
VirusTotal	Search for analysis

Name	d8f62d34a73dfbea_ll12_mxbrand.dat Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Mxbrand.dat
Size	2.9KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`be3449ce71417e859ebe42ff9db8b70f`
SHA1	`cad83ff293ed3dffb5760b60041a74c9ea60bdb6`
SHA256	`d8f62d34a73dfbea2b7b65a5f8c4948ad25adb75dd48ba227c9cc16867cbcefa`
CRC32	`6A322ABC`
ssdeep	`6:SG/utEk0U38XWXzIAtXDtm8Kg/dtPtxc/nFl/:NS0UMXWXzj9Kgdtl2f/`
Yara	None matched
VirusTotal	Search for analysis

Name	2f5f8e16abe6aa45_LL12_CHARGE.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_CHARGE.ibk
Size	36.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`db07db54293075a72e0e1373d0215e38`
SHA1	`74e55d38fb4c291b188fb12b474b52928ae796d5`
SHA256	`2f5f8e16abe6aa45bed6eaa911b431fcac980a4ffeccf3d6d0bccb65694fbe6a`
CRC32	`5EA8E38C`
ssdeep	`24:q8XnRfCOHaw4LjuXtj6/ff/igM282WVo:q8hf75yfqgM28H`
Yara	None matched
VirusTotal	Search for analysis

Name	83e9363777cfb65c_{8E49067C-4FD9-47D5-B3F0-7DA4D714B3AF} Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\{8E49067C-4FD9-47D5-B3F0-7DA4D714B3AF}
Size	4.8KB
Processes	2088 (Install_Rental_LL12_2018_4.exe)
Type	ASCII text, with CRLF line terminators
MD5	`3731ae23132799f768c92c9e96b0e56e`
SHA1	`1316c14a828bcdad3fe7c2c04a5dd21a4ef660ce`
SHA256	`83e9363777cfb65c4a04e9b892a9655913a05e22015a615abbacf047967387db`
CRC32	`14FF2027`
ssdeep	`96:2PLktuA3PLlJJdgG/ptg/6cqPLcH9FG1/t8hvbXr690tmvXAsKEIx2R9flEC8mEp:yLGuSLlhH/PS6rLcdFG78hjXm92aXAsG`
Yara	None matched
VirusTotal	Search for analysis

Name	643e960d760f57f8_LL12_Rcheck.idx Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Rcheck.idx
Size	36.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`79967ab4dc725eceb64f85b58d71a0f1`
SHA1	`f823173e2dfdd1cea88ba4bf84593fc30d80884f`
SHA256	`643e960d760f57f8cb915a6e236c5f2833ea9c724333e24e4fa665387b6f160c`
CRC32	`7BC29EDC`
ssdeep	`6:g8G/utqn/OFio5v/6l3/7e2Q1GhyEiLl/:qHyimo/7e2Q1GhyEo`
Yara	None matched
VirusTotal	Search for analysis

Name	d079c56be622ea88_LL12_XGL.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_XGL.ibk
Size	456.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`fffce310f4d0c9f85e36d5a9f76791e7`
SHA1	`af520b962045e71bfa1f4ecdf4f73d84a5ab14aa`
SHA256	`d079c56be622ea88bcd877281f589d076975c9a06805a023801b2bb6c1a4b64c`
CRC32	`35568745`
ssdeep	`3072:02HfXpPR3J/BXPRbMs9VQO9XwEOuoXldWEjbWxe+WXkEjq1AzEOfwdB+RIGVfok1:02H/1J+1wyWo+a0tiGzYy`
Yara	None matched
VirusTotal	Search for analysis

Name	681467dfef87b9bf_ll12_systemlock.dat Submit file
Filepath	C:\RPromas\LL12_Training\LL12_SystemLock.dat
Size	4.4KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`70ecfa8f943775a0dac67c719d48075a`
SHA1	`fe39d9622e76e18431c0c6676d7411948c40a4b0`
SHA256	`681467dfef87b9bfef0787364c6414af09c0ead6092b2cd7b585bd5b352bcfc2`
CRC32	`91BBF83E`
ssdeep	`6:0G/ut5q03SXARSUKtH/lEkt/uSCIkJsaIvl1VTv3aVF8cWfan:nf03SXARSUKjvFka1vUIfan`
Yara	None matched
VirusTotal	Search for analysis

Name	c25ffb5869192141_LL12_Mxmtype.idx Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Mxmtype.idx
Size	40.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`72bf9cd2ecfef4669449b88adde3ce35`
SHA1	`5519650df12fbe3443155a6c080aa5372f3faa1b`
SHA256	`c25ffb5869192141bdf24cf5a0e3d16f13c82c6e4de04bac19e4cfe0816dc6c9`
CRC32	`00419513`
ssdeep	`6:CG/ut+UWOFiGxXcFtzXw/7e2GZ8Dk3/wmuj9m3Mr:9ZyiGxXcDXw/7e2GCSopGM`
Yara	None matched
VirusTotal	Search for analysis

Name	de60b57de550d9a9_LL12_NOTEITEM.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_NOTEITEM.ibk
Size	28.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`c5fd648912a7d0ab8d815525927753de`
SHA1	`77138ad64e6b8ca15c89129b63b33225b3ace880`
SHA256	`de60b57de550d9a9b24e01f40389d6a2eb393770063e8b237c568f59d88025ee`
CRC32	`23D4F2F0`
ssdeep	`12:ALky1z/7Idlp3R3B/RPNFlDnjJ1llDPbZN1llllBJtlB:A8n1NBZXlDd1zbtlzJXB`
Yara	None matched
VirusTotal	Search for analysis

Name	cc4adca3dfbf9067_LL12_XGL.idx Submit file
Filepath	C:\RPromas\LL12_Training\LL12_XGL.idx
Size	28.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`eab6ccdac7bfef804455b1766adba61a`
SHA1	`57ff8d5288a82309034b5389f34e43b17960f761`
SHA256	`cc4adca3dfbf9067389d65b551b5388271d0e2d04045800f21df6195a3bee5db`
CRC32	`DBC80D46`
ssdeep	`6:2G/utn1OF/tz/7ulsHWzJz/SQOQ/qkgieAxqiS58AKB7fpl8LRX:54y1z/7PcR/ZRqONqiorKHAl`
Yara	None matched
VirusTotal	Search for analysis

Name	83db7b674a21cef8_ll12_xap.dat Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Xap.dat
Size	145.8KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`4144066f87df7ed7612829cc986237c2`
SHA1	`db71c501aefb46420fd0b74606413fa15ecc284d`
SHA256	`83db7b674a21cef8ea682ff5ef0d3eac643b2598b306cb10a1e9dbdf44613d4f`
CRC32	`5B436860`
ssdeep	`384:O6684OMPpyCIh+LyhmC1zO33xgYX6Vm7TKWUnAvhCF1gYCYqTLS/mRu5r5Cw8sEB:OX7pxLyInxBvkM1keIB`
Yara	None matched
VirusTotal	Search for analysis

Name	bccef1de236e3b32_PublishingManager6_20173.exe Submit file
Filepath	C:\ProgramData\mia796F.tmp\data\The Professional Landlord\A056D2F4\B21C7FEA\PublishingManager6_20173.exe
Size	704.0KB
Processes	1052 (Install_Rental_LL12_2018_4.exe)
Type	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
MD5	`d10f991b8b90e45adc10123a68c29e00`
SHA1	`4204686e2cd18090a46dcaf3d88d7b5d4ed9a519`
SHA256	`bccef1de236e3b32caf34dd170bd66a0ef2ac81c6700136b85729ecc8ceabf3c`
CRC32	`CC5732EC`
ssdeep	`12288:U2emLNWw9caAJyfRvuKc42OWNMARcSJlQKBMZUxe:UGSyugWNMARcSJlQDm`
Yara	PE_Header_Zero - PE File Signature Generic_Malware_Zero - Generic Malware Is_DotNET_EXE - (no description) IsPE32 - (no description) Win_Backdoor_AsyncRAT_Zero - Win Backdoor AsyncRAT Win32_Trojan_PWS_Net_1_Zero - Win32 Trojan PWS .NET Azorult
VirusTotal	Search for analysis

Name	5dfc191f83eff7a1_LL12_MGMTFEE.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_MGMTFEE.ibk
Size	32.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`a8632303da6095a37ee054ceec4e3da0`
SHA1	`bd3f19c5d13f05bdf651400fc277987cc04d2951`
SHA256	`5dfc191f83eff7a14f961073efd33b063845c24bd3747a89d3032137f83650eb`
CRC32	`AEA29663`
ssdeep	`3:xllxQCuGZBul/lwlUl6ltFlWlzVllzlHlXtl+vtl+:YG/utlOFih/7e2`
Yara	None matched
VirusTotal	Search for analysis

Name	5e2755ed418809aa_LL12_MANAGER.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_MANAGER.ibk
Size	40.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`d6b747705f0acf5055142ced30d4f547`
SHA1	`b2187538c8cae926f483e6ab1360b6ef978571ae`
SHA256	`5e2755ed418809aa982506a911adc101eeed2a86c6c91ace599d856830e93871`
CRC32	`6ACE8238`
ssdeep	`6:CG/ut+UWOFiGxXcFtzXw/7+IS/Q9UJOCYlsku:9ZyiGxXcDXw/7+IiQHbJ`
Yara	None matched
VirusTotal	Search for analysis

Name	81297110bb6af515_ll12_catgline.dat Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Catgline.dat
Size	11.1KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`72b783a09523b22bca15172f56bab851`
SHA1	`27ee5289d6fdc6455cfe0029ffdeaef1e2add6ea`
SHA256	`81297110bb6af5153439e4b0fe10a196675462a1baac76329415a4183a95d0f3`
CRC32	`0676BC39`
ssdeep	`48:n7mhezsxG9OS7m/durLxvoaH/dl4KEEZmieBdtiVCD6BwUq5DllW3rZX7udw:7aezspsvxdvPcsw79l48dw`
Yara	None matched
VirusTotal	Search for analysis

Name	6552ff982fcd3b01_LL12_XAR.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_XAR.ibk
Size	32.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`651d6c5e7301e678089a94e86bfd9196`
SHA1	`74d63325f11485b5eed5b1e584d5e58c287f1814`
SHA256	`6552ff982fcd3b017ca9e43a3590a88edc5ed8fc22b2aa2dc60851b7226810ae`
CRC32	`D69FCBDE`
ssdeep	`96:u5HNfdFNFhHNfRtsfKMkMu5HNfdFNFhHNfReuMlGMHe:u5HxXNN5Ou5HxXNN5euM`
Yara	None matched
VirusTotal	Search for analysis

Name	12911ec115d17c68_Release 2017-2.pdf Submit file
Filepath	C:\ProgramData\mia796F.tmp\data\The Professional Landlord\A056D2F4\465BD09E\Release 2017-2.pdf
Size	205.2KB
Processes	1052 (Install_Rental_LL12_2018_4.exe)
Type	PDF document, version 1.5
MD5	`252a2fa0d07cd45e1d19f7488d9253a1`
SHA1	`f34d849493e09487b280e0edf41551059ef30ded`
SHA256	`12911ec115d17c68a831b83314f573f339bfed716ceab19e0ff9321292fd91b2`
CRC32	`B622E9E7`
ssdeep	`6144:8Oai8+XXooHh+rUNmfcnUk7YH2Wr08Dklrpn9rJbNr:8Vi3lp7Ur08Il9rlR`
Yara	PDF_Format_Z - PDF Format
VirusTotal	Search for analysis

Name	9586102dd18824a7_ll12_cxscopy.dat Submit file
Filepath	C:\Users\test22\AppData\Local\PROMAS\LandlordForWindows\Instance1\LL12_CXSCOPY.dat
Size	8.0KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`9788e34c1de27071fdccf3267ba2e330`
SHA1	`181ea7478f841a0996c87839722cb14f84e7e018`
SHA256	`9586102dd18824a725e776f80bf5d8c307d0516694aa0f4e517906434808ee0e`
CRC32	`4333207B`
ssdeep	`6:g8G/ut6Ulq0U38seAY/IlXR9Acp2stlUt/TUnAItcawlqXRI:qhUU0UMseAYAx0t7AOaQqXR`
Yara	None matched
VirusTotal	Search for analysis

Name	f4a40547f0a33991_Landlord12.exe Submit file
Filepath	C:\ProgramData\mia796F.tmp\data\The Professional Landlord\A056D2F4\B21C7FEA\Landlord12.exe
Size	13.5MB
Processes	1052 (Install_Rental_LL12_2018_4.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`a8dff771646dba2f307c6c4819563c93`
SHA1	`dc45d7198a5fc662cc4a780a7a412bdca0a5432f`
SHA256	`f4a40547f0a33991c95ac01a8038a3a26b83dfa83548fdb7390224c7a3bcd466`
CRC32	`0F8D98B9`
ssdeep	`196608:AEYORIicIDT2xUwzWPfpf1beLVNm+c4cnXgRsKg:LRRIifDT+zWPfpf1beLVNmTIsKg`
Yara	PE_Header_Zero - PE File Signature Admin_Tool_IN_Zero - Admin Tool Sysinternals UPX_Zero - UPX packed file Win32_Trojan_Emotet_2_Zero - Win32 Trojan Emotet OS_Processor_Check_Zero - OS Processor Check Malicious_Library_Zero - Malicious_Library IsPE32 - (no description) PDF_Suspicious_Link_Z - PDF Suspicious Link Malicious_Packer_Zero - Malicious Packer
VirusTotal	Search for analysis

Name	4807843cf701a337_Release 2017-5.pdf Submit file
Filepath	C:\ProgramData\mia796F.tmp\data\The Professional Landlord\A056D2F4\465BD09E\Release 2017-5.pdf
Size	648.9KB
Processes	1052 (Install_Rental_LL12_2018_4.exe)
Type	PDF document, version 1.5
MD5	`95848dab364876c2893920ecf0eff419`
SHA1	`15c5fe3ab25c150dce269f093a5450a84cae5cae`
SHA256	`4807843cf701a337624b862450d22dc766ca05bfb2ecc1f9a21563eb8b8b3d61`
CRC32	`7C1484DC`
ssdeep	`12288:7u7fdjmZzhlU9H9ZFFFFFFFFFFFFFFFFFFFRwF2AN5chUiM99cm6nxiLM1tyJRDV:7u7+llU9H9eF2Q5KU5zctcQS4vIv`
Yara	PDF_Format_Z - PDF Format
VirusTotal	Search for analysis

Name	24e3f356d00a6690_ll12_xap.idx Submit file
Filepath	C:\RPromas\LL12_Training\LL12_XAP.idx
Size	92.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`776ea2fecade04b9f028521372bf6462`
SHA1	`325aae0dc0e1064442f27f95d590204893a52202`
SHA256	`24e3f356d00a6690fa82e71e6b1f601c73da518ad2058861087661c58520b370`
CRC32	`8A090C54`
ssdeep	`384:D/c/gbFrHDEzTiNyd6jrLIdb9wfj5djCOcmuDx69qe:tHIzLdGLIdbMj5drtu`
Yara	None matched
VirusTotal	Search for analysis

Name	09c1f259d8087384_LL12_TENANT.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_TENANT.ibk
Size	52.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`e79c71f02419366edd4d490ea5ea5e51`
SHA1	`fed17aa6d1112db688a92e32ca7b1e7ea667cbf2`
SHA256	`09c1f259d80873846dc0cfd019df2b190b42e4bcb5178d86666820b9aaecc13d`
CRC32	`1AF4E8D0`
ssdeep	`48:ePsMyO+6rYLsNJPyEy1B0xyv+RyljzwtbetBsw08q0/56lQNXv8:S+sJPyEyTaC6ylw1ec98qFlQO`
Yara	None matched
VirusTotal	Search for analysis

Name	e8c1e30d09267e2d_ll12_xar.dat Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Xar.dat
Size	157.1KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`e84c6dc921f6a532a3e70152471d9206`
SHA1	`c1b7b484da08dfcc9fe12870f7bd71c786eb93d3`
SHA256	`e8c1e30d09267e2d40e3f5554a9487c34050dca5f76eed0ba7b4368d6575bde6`
CRC32	`9385D1B0`
ssdeep	`768:BoD5FrvRIFHEiA3nDLwJKdUAHGjcW6zjl4oe1HghkwIFgh15sfa9syNRox1d0weP:yu8`
Yara	None matched
VirusTotal	Search for analysis

Name	cf8c617651de44dc_Release History 2014.pdf Submit file
Filepath	C:\ProgramData\mia796F.tmp\data\The Professional Landlord\A056D2F4\465BD09E\Release History 2014.pdf
Size	212.7KB
Processes	1052 (Install_Rental_LL12_2018_4.exe)
Type	PDF document, version 1.5
MD5	`bb2f9e342ae6a803961359e680cb2d33`
SHA1	`8f6a4033a8a8f08a3f21c80edd81cfb89b02b2e3`
SHA256	`cf8c617651de44dcb3bbd37f6ab3484b60a5c2b85902c98cd83dc435f7243b82`
CRC32	`4FDFBE2C`
ssdeep	`6144:0q+pvgh3T5P21IETWvCpaa+rejzRiPacWgS:v+pId5uLpaa+qQScC`
Yara	PDF_Format_Z - PDF Format
VirusTotal	Search for analysis

Name	30b4b1869862f861_LL12_ENTITY.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_ENTITY.ibk
Size	32.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`47d817ef1483a8c47cbbcd09bc705b11`
SHA1	`7f821c4af2bfe2d73c3c787a4d605eb8bc1df3b7`
SHA256	`30b4b1869862f86157e1a1773996271dff3f66f4fc72ed52bc361dc4e37a942f`
CRC32	`B17C5851`
ssdeep	`12:TIyih/7gdlRR1lxp9lBFH3llv3XHZtn3llXfXnpFHXllFA/nauAaU/3yDV/bCCkE:TbnRf5HB9tJRdFAntU/ebCChP`
Yara	None matched
VirusTotal	Search for analysis

Name	b960217fe8965bd7_LL12_Entity.idx Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Entity.idx
Size	52.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`f39de2dde949b88d901e16bfb91fee8a`
SHA1	`b6c7d5ab11d414bb9b376f20ae53e21446fbb14a`
SHA256	`b960217fe8965bd7d0ea83ce77679a66cfcf9cbea811d89e304316479a80fba6`
CRC32	`D5DDE52B`
ssdeep	`192:UGgjTjkxP0hrJ33Y1LMaByIIMbiJFKOVBtY9/UyQIB9Q4CYA1z6wdXdIm0mwe0ug:UGQE0hdY1LNcIIhKeX4MyP9B6Yic6`
Yara	None matched
VirusTotal	Search for analysis

Name	2e2559de3a1317ef_LL12_Bxline.idx Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Bxline.idx
Size	24.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`2cb502d4095f44310c59ae005557a59a`
SHA1	`7d11a2508e6a6795a26087add1f36ef6d8be02bd`
SHA256	`2e2559de3a1317ef98401957477249b9736e7e16f657654249bd44d7ef8834c7`
CRC32	`5F377E21`
ssdeep	`3:gltxQCuGZBul/llltlWl1lWGKQlXZlFlFlzVllzlHl:g8G/utf1iZK4/7`
Yara	None matched
VirusTotal	Search for analysis

Name	330285cfe96e4754_LL12_XAP.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_XAP.ibk
Size	80.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`5286e03a6850739460b29d0add4e672f`
SHA1	`50ff9454b5f54222a958ab47b4cadc062bc7ee46`
SHA256	`330285cfe96e47541c028dde50104918c4c47b861212a5465d73f1807164d183`
CRC32	`4C73B021`
ssdeep	`384:+/c/gbFrHDEzTiNyd6jrLIdb9wfj5djCOcmuD:oHIzLdGLIdbMj5drtu`
Yara	None matched
VirusTotal	Search for analysis

Name	840c409510ed22e9_ll12_cxcline.dat Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Cxcline.dat
Size	12.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`6fc4598af6b2b6b77eb8449025ae9804`
SHA1	`de5538ff898059aa3c4bd287825ddc985142fe28`
SHA256	`840c409510ed22e9d5195c21cab8faf6bfd95bd9fbec03b1662a30624f42c461`
CRC32	`6CEE4928`
ssdeep	`6:68G/ut66KX0U38X2AY/nC8teXAU0tQlAK1sapq/zOlI5IptlU7jHptly7lYSC0HG:6PhrX0UMX2AYJoD1sapqyGAlY30He`
Yara	None matched
VirusTotal	Search for analysis

Name	adabe2f3955714f1_ll12_advsched.dbk Submit file
Filepath	c:\rpromas\ll12_training\ll12_advsched.dbk
Size	15.2KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`3a83bb7d980a4877d50ad40fdcdda6aa`
SHA1	`d8338a44e4291ab1fadd8ba965f346ce8f2705ff`
SHA256	`adabe2f3955714f176cfdbc53764ccbb212896865fd9c23a0a093f4659931b10`
CRC32	`63A640F5`
ssdeep	`12:mL70UMXRePthLgZXQGf0x1CvXjpC5lVIPsgsigQKgBRGaPCH0CSiDPJD/IsgsiOG:mLOBuvqgD4vdzQcCHxLh6T`
Yara	None matched
VirusTotal	Search for analysis

Name	ee4ae8d69fd9d1b9_ll12_ptable.dat Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Ptable.dat
Size	21.0KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`eed01330e6b4fac62797ee3ee67a5242`
SHA1	`acb65c65a6ad6a1214a2fcf76848f97434e823f3`
SHA256	`ee4ae8d69fd9d1b98248927ddd6384bb5407cbfaad8a16ad593ba84a4dbda889`
CRC32	`FA530B4F`
ssdeep	`24:6Z2mXzua8Taj0y5n2smnnUQIscetMKc5pr/:6Z2GzC2l52sXeqKc5B`
Yara	None matched
VirusTotal	Search for analysis

Name	096cb36cd8c94094_LL12_REPORT.dat Submit file
Filepath	C:\ProgramData\mia796F.tmp\data\The Professional Landlord\A056D2F4\3F943650\LL12_REPORT.dat
Size	43.2KB
Processes	1052 (Install_Rental_LL12_2018_4.exe)
Type	data
MD5	`d1feb507c68b4fbf9579ed9d645e09fc`
SHA1	`6292cbc66b09a28af3658ff678f3b64d67051c9a`
SHA256	`096cb36cd8c9409432b89195e4531516555ed3e5d047a1fe9f3cc2459b30b205`
CRC32	`D0DFC127`
ssdeep	`384:nQjj9+xSPCjtn/E1WFAlb5OcP4Sbbl40lFc/8XIoaylJ8Ji0:nOpJPCjtn/E1aYOcP4S60lFc/8XIY8i`
Yara	None matched
VirusTotal	Search for analysis

Name	0a0eb310ef84197a_ll12_tenant.idx Submit file
Filepath	C:\RPromas\LL12_Training\LL12_TENANT.idx
Size	72.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`9d4c18fab3d2207a51fa00bcf61056da`
SHA1	`29d82c32a2e5073401c427f4bcad86811d8a0b7e`
SHA256	`0a0eb310ef84197a1a7519594f1cccd1d3ee19ce9b8ea8f756a6b896e0329060`
CRC32	`0C54EB61`
ssdeep	`96:rdGov+sJPyEyTaC6ylw1ec98qFlQO1VOWMF:rnv+sJPyEymMl+f98SOyVOzF`
Yara	None matched
VirusTotal	Search for analysis

Name	12e1b80a76d42d9e_ll12_notice.dat Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Notice.dat
Size	8.9KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`898c35a629da1f4cb8f14ed39e865b01`
SHA1	`3ba13c8db9502a9aaf99d76482dbe917d9627a9a`
SHA256	`12e1b80a76d42d9e1455e3c6c03e88c3d6864e9be863b410e99bda68e53dfc95`
CRC32	`70DC8578`
ssdeep	`12:6bshX0UMXWXzjVwXcXsyXJwXRtgXMu15htDXtFaADqTTZtm:65mXz2XcXsyXJwX0Mu15htD94p4`
Yara	None matched
VirusTotal	Search for analysis

Name	50bb476d4a7bf061_LL12_ZRCODE.dat Submit file
Filepath	C:\ProgramData\mia796F.tmp\data\The Professional Landlord\A056D2F4\3F943650\LL12_ZRCODE.dat
Size	30.4KB
Processes	1052 (Install_Rental_LL12_2018_4.exe)
Type	data
MD5	`4748b082d9f1fe7c42be7f2451660a0a`
SHA1	`af7a27220350e6ae4c10663df7ece41fd45db9a6`
SHA256	`50bb476d4a7bf06197d7b0240a211a0843f0a5a657ecec63f425a9f40106525d`
CRC32	`8624D220`
ssdeep	`192:BH9PHM5V2/xAKCqh5adGQ1R77tTtj8SC0yyDU82FDJHl6cHd0s6YkTZDSCu2wSqo:bHhx5zyxLRCSGyI8u9HlJHCPDTzC4qVO`
Yara	None matched
VirusTotal	Search for analysis

Name	402a90bfcc70d3e6_LL12_MGROUP.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_MGROUP.ibk
Size	44.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`945bfd0d8b57c418419f2cc3e4112928`
SHA1	`8a428f2e2a2cded98136315bab2c39cdcf297822`
SHA256	`402a90bfcc70d3e6306caf9dfb2c18bbea5fe1b1ff683ca058d7b3033f474553`
CRC32	`AE11B44C`
ssdeep	`6:mEG/utc9l/sOFiGxXcFtzXAmDXy/7dlSjlMlI2sNlfls9l1IIQIdmZYTYX:U3HEyiGxXcDXxDXy/7cdomZY`
Yara	None matched
VirusTotal	Search for analysis

Name	7d03b8f7dfc6c5f4_LL12_XAP.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_XAP.ibk
Size	48.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`d70d3bb79c15e25e2230738472dd80a8`
SHA1	`da7b5dea363056e95f1901bb6d3e02b8b613f48f`
SHA256	`7d03b8f7dfc6c5f4ac21a2171d67d65d0d5f6921bc5eea8d0a7c36c1f90cbac0`
CRC32	`21F4F577`
ssdeep	`192:d5HxXNG5HxXNYSTSJAoS5S3Y4r8Z4hPr5rvamTGhv7Ngb0:d/c/gbFrHDEzTi`
Yara	None matched
VirusTotal	Search for analysis

Name	1294641f37a02b58_LL12_MANAGER.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_MANAGER.ibk
Size	36.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`4a8540780f80df1a7ea6752ae7e1eb20`
SHA1	`a5d21c623e5d4acccc92ddda2971e4e198e8299e`
SHA256	`1294641f37a02b58bef96e76913f82a5168a909df56296a762df4975a4606e18`
CRC32	`08891BF6`
ssdeep	`3:gltxQCuGZBul/lwnll6ltFlWlG/lvtl9lrVllzlHl+lttl/QlF+l/QlffXPk35m0:g8G/utqn/OFiGxX5/7+IS/Q9UJ`
Yara	None matched
VirusTotal	Search for analysis

Name	c8fad984ce9ea633_ll12_unit.dat Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Unit.dat
Size	46.2KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`1ccd944d5206dfb2732b09f3066e6cc3`
SHA1	`de56dc0e1a0b15f1f9dbd5e28b7cc8038b76ad68`
SHA256	`c8fad984ce9ea6335295f511fd7b7168afcd3b701569900a3c463fd38e2eeb00`
CRC32	`57FC640A`
ssdeep	`48:uPGzE4rUeJJwRgd8RNttuvF7SpjACS3Enw1nANs+SE5r2kYCnCrjnc4BKVmz1Lop:oD0HwCavdg0MksBlkYGOJKVYw`
Yara	None matched
VirusTotal	Search for analysis

Name	74eefbe85be9cfb0_LL12_XAP.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_XAP.ibk
Size	72.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`0c88b49dab9271617f3c930078507fe8`
SHA1	`f1005d55d1ba32e48dc22b81e821c6016dcbd590`
SHA256	`74eefbe85be9cfb0ea04dd5e0e98d89f62ae128313063a540f3baeb4fc2adca2`
CRC32	`134DA9C9`
ssdeep	`384:1/c/gbFrHDEzTiNyd6jrLIdb9wfj5djC:nHIzLdGLIdbMj5d`
Yara	None matched
VirusTotal	Search for analysis

Name	802565602d79dda5_rpromas.ini Submit file
Filepath	C:\Users\test22\AppData\Local\CMS\User\LL\RPROMAS.INI
Size	588.0B
Processes	1936 (Landlord12.exe)
Type	ASCII text, with CRLF line terminators
MD5	`3dc2858585f6b0c8297ad3bd3aef595e`
SHA1	`18428921633f7aad82ff96a177951d284c286ef3`
SHA256	`802565602d79dda5586deba7505689d54ad32ae0078540d246e9364f28c76e13`
CRC32	`95AA48B6`
ssdeep	`12:OV75wlYB2ONbFDOIOoV3OmO/GkcOO3OrRk9h1pr4:iWYFR03oV+VO4O+tA1d4`
Yara	None matched
VirusTotal	Search for analysis

Name	afb37b735c0e14d9_LL12_XGL.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_XGL.ibk
Size	96.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`dfee7309246fa894a554c00e54823d2b`
SHA1	`741e3ac03cc33c19d3a7104566749ffb39058189`
SHA256	`afb37b735c0e14d92f93c0996684eaaf4efbb4285d9910cbc292de6dd09fe33a`
CRC32	`8AC4FF90`
ssdeep	`768:lrMAL7zlzyCtpM27zezyC3QyVwq6SXpPR3J/BXPMJDoa9p:lrZR3tpP233bTXpPR3J/BXPs`
Yara	None matched
VirusTotal	Search for analysis

Name	f1945cd6c19e56b3_install_rental_ll12_2018_4.lnk Submit file
Filepath	C:\ProgramData\{EA5BECAE-CF5A-44BE-B357-0B73427F81A9}\Install_Rental_LL12_2018_4.lnk
Size	3.0B
Processes	2088 (Install_Rental_LL12_2018_4.exe)
Type	UTF-8 Unicode text, with no line terminators
MD5	`ecaa88f7fa0bf610a5a26cf545dcd3aa`
SHA1	`57218c316b6921e2cd61027a2387edc31a2d9471`
SHA256	`f1945cd6c19e56b3c1c78943ef5ec18116907a4ca1efc40a57d48ab1db7adfc5`
CRC32	`011097E1`
ssdeep	`3:g:g`
Yara	None matched
VirusTotal	Search for analysis

Name	24ffb7338b735c13_LL12_TENANT.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_TENANT.ibk
Size	32.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`d01329320a1c915c34b17f0baca1d885`
SHA1	`9f0cde55b37a6216cb23ed68624e7024c8242da7`
SHA256	`24ffb7338b735c13f45cf55b2cb824bd4a798145265f37613d3753b858e45e56`
CRC32	`37F45B85`
ssdeep	`6:YG/utlOFih/7Rlcdl9plPldfln/s2km/abHLHh:TIyih/7wdlRO2kiabHLHh`
Yara	None matched
VirusTotal	Search for analysis

Name	b376c3644e83526e_LL12_ZRREL.idx Submit file
Filepath	C:\ProgramData\mia796F.tmp\data\The Professional Landlord\A056D2F4\3F943650\LL12_ZRREL.idx
Size	32.5KB
Processes	1052 (Install_Rental_LL12_2018_4.exe)
Type	data
MD5	`ce6ade09d1e38faa9976b958caeef064`
SHA1	`867331a502426d27f027f09c22669175931205f4`
SHA256	`b376c3644e83526e18ed40e4ddfccd9e1fa17113eab2dbd98dc038176d983279`
CRC32	`E3DE0A6E`
ssdeep	`6:YG/utG1OFih/7ulsHWzJz/SQOQ/qkgieAxqiS58AKB7fpl8LRXTlvt:Tbyih/7PcR/ZRqONqiorKHAl`
Yara	None matched
VirusTotal	Search for analysis

Name	cfeba603367d7ce2_startinstallation.dfm Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\mia1\startinstallation.dfm
Size	156.3KB
Processes	2088 (Install_Rental_LL12_2018_4.exe)
Type	data
MD5	`72fb03688eb1dc0bfb2ec47efc219136`
SHA1	`4c05f9b7f93b9caefdfbde71aefa33662e30284b`
SHA256	`cfeba603367d7ce269e6806bef49e135370cb4ae80ea575442dce0833fdb991a`
CRC32	`2D502B60`
ssdeep	`192:BrMMfzvu9vJSm3IZ8Zgspkk4B9heXItzNGzOiOWEpap5PKo6Mmp4C/DE+n5mW+y:BNI/SjJ`
Yara	None matched
VirusTotal	Search for analysis

Name	cc5653072ec25a45_LL12_NOTICE.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_NOTICE.ibk
Size	32.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`e9bf77217cdac2dee57e5c517256d487`
SHA1	`79d4988075918415d7c34799250d512a7d919b3f`
SHA256	`cc5653072ec25a4548abbbb35e1afe4b0fcd39b3f5346aade91d44eeee073036`
CRC32	`461BD2D0`
ssdeep	`3:xllxQCuGZBul/lwlUl6ltFlWlzVllzlHldlSjlS:YG/utlOFih/7dlSjlS`
Yara	None matched
VirusTotal	Search for analysis

Name	53b978d0fab21b19_ll12_network.dat Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Network.dat
Size	1.2KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`679ca2a2f351769021b9a1b508ea52b7`
SHA1	`a99e2ac211d3ae9d9d3f353d10634356cd2d5fcb`
SHA256	`53b978d0fab21b199e59181d324a8e43bb5026b66243889fea3e25a3e10e55c6`
CRC32	`293F9E7E`
ssdeep	`3:1lDQCuGZBul/lkl0lll9/lZt8lUFt/tStl:kG/ut60l/9Z0U38X`
Yara	None matched
VirusTotal	Search for analysis

Name	58ddf2a62f553a04_ll12_xar.blb Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Xar.blb
Size	1.0KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`7cc7593940ae5f852b2046cb81314dff`
SHA1	`8f0b2ea9475e93346a37d0496d7a3113c2fe47ff`
SHA256	`58ddf2a62f553a041cf1eb24e44390bc9fe97d9098a96808cb6afac04185e27b`
CRC32	`F5AFB0A3`
ssdeep	`3:gltxQCuGZBul/l/lklel/0QhBv2LsxKLri/t:g8G/utke6Q+LRXy`
Yara	None matched
VirusTotal	Search for analysis

Name	7f1fca8cc4d002d8_LL12_Proline.idx Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Proline.idx
Size	32.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`54355bdf2d0b58cbdce2b801a2302827`
SHA1	`ff981297882d0104c0cbd9581fa5f5c9ad85d527`
SHA256	`7f1fca8cc4d002d8705fd47f09e3d7844454328ab8c23c2e5003f2b77d66079d`
CRC32	`1693916B`
ssdeep	`3:xllxQCuGZBul/lwlUl1llVllzlHldtl+dl+84l+llV+Cfl++Hlk+z/so9wsblkLK:YG/utlT/7Udl9pls+Hl1Qo9wSGvG/v`
Yara	None matched
VirusTotal	Search for analysis

Name	bb19dc31787c8dac_LL12_MANAGER.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_MANAGER.ibk
Size	32.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`7885639e7de40aa2454a1ea86afd0742`
SHA1	`2dcc1c3b0c576cd9165502d2427e5cedc1ac4d0a`
SHA256	`bb19dc31787c8dac60ce9fa906280dfb5d26b897b13929690c3e56c270de1e3f`
CRC32	`6DA884B1`
ssdeep	`3:xllxQCuGZBul/lwlUl6ltFlWlzVllzlHl+lttl/QlF+l/:YG/utlOFih/7+IS/`
Yara	None matched
VirusTotal	Search for analysis

Name	3c2c809dc8f2f195_ll12_noteitem.blb Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Noteitem.blb
Size	84.0KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`a50460013d77668f2449d509735d0d14`
SHA1	`5c401532e71f53b86649425664cb55c422ea7dc9`
SHA256	`3c2c809dc8f2f19518cce035d07110fe4dcc3982fc491a68c146d58d94a73a6a`
CRC32	`1BFFE59F`
ssdeep	`96:HkDJOfTmT0TQTypTyTeT6TuTSTOTKTeTST+TaT1sTVIT90TKT+TyTeT6TuTSTOTQ:+ok69S6v6`
Yara	None matched
VirusTotal	Search for analysis

Name	c80145cfcc4111e5_LL12_TENANT.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_TENANT.ibk
Size	56.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`894a75e783dff2e3165124af18a28e42`
SHA1	`889a821c9169a33f125506a48c57f2b1883de593`
SHA256	`c80145cfcc4111e576ed78841d17c25d7d28d85dbd1517e8d681ef94d6250bab`
CRC32	`A1BA5B21`
ssdeep	`48:Rt0MBpO+6rYLsNJPyEy1B0xyv+RyljzwtbetBsw08q0/56lQNXv869O:pY+sJPyEyTaC6ylw1ec98qFlQO1`
Yara	None matched
VirusTotal	Search for analysis

Name	6abd41905e1d4707_ll12_publish.dat Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Publish.dat
Size	19.4KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`60e846c380a9e6fadeeb9f2d5590160e`
SHA1	`316a943b53a16f3d3ad83242491d45c6109b0020`
SHA256	`6abd41905e1d47074701c3f8ae60f6eefa30d4b6ebd7d8be3b83d226ae5aeecc`
CRC32	`4DD57D1D`
ssdeep	`24:r1k4E+3ih6m/cljcvclnVKEex/Yv1YcJclHczclhC:r1ShDUgvUWivhJU8zUh`
Yara	None matched
VirusTotal	Search for analysis

Name	3561025c215dd360_LL12_LETTER.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_LETTER.ibk
Size	36.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`04f2be988b7a1ea065ddb6f7f8660064`
SHA1	`4981a2db57b30d007ec95599029fbb93abe535b7`
SHA256	`3561025c215dd360a2878b70b0535597a4e80b68939532606a6f90f09839f9fa`
CRC32	`82FA1770`
ssdeep	`6:g8G/utqn/OFiGxX5/7IGzGz5b2xSW2TWEs:qHyiGxX5/7tyQAWZ`
Yara	None matched
VirusTotal	Search for analysis

Name	8f9cea6304f3e1c0_ll12_mgmtfee.idx Submit file
Filepath	C:\RPromas\LL12_Training\LL12_MGMTFEE.idx
Size	40.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`6ec85b441caa89ee7bbd5a0bc7d6ef76`
SHA1	`99cb938b952fceab9004de307c8fb2a7ecd1a4f2`
SHA256	`8f9cea6304f3e1c0c871297180239e483908cf6aa63d4e5e5e002b68af3ccf8a`
CRC32	`BC391AFC`
ssdeep	`12:9GyiGxXcDXw/7PcR/ZRqONqiorKHAlQN+WhlTn+gH:9LzyRq8qiorKHA20ml`
Yara	None matched
VirusTotal	Search for analysis

Name	58c1947d3da81895_ll12_xartemp.idx Submit file
Filepath	C:\Users\test22\AppData\Local\PROMAS\LandlordForWindows\Instance1\LL12_XARTEMP.idx
Size	24.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`659c1bfc64876780a353996d3bd46149`
SHA1	`d599dfa708e7d29aac9039f5b53a06eda947c69a`
SHA256	`58c1947d3da8189560e89e10f166dbaf6677a1ea9f839138743b9d3aaaf21060`
CRC32	`73DA4F47`
ssdeep	`3:gltxQCuGZBul/llltlWl1lnMAllllWllkllFVllzlHl:g8G/utf1iEAMmJ/7`
Yara	None matched
VirusTotal	Search for analysis

Name	d91ea0800e998ca5_ll12_cxocopy.dat Submit file
Filepath	C:\Users\test22\AppData\Local\PROMAS\LandlordForWindows\Instance1\LL12_CXOCOPY.dat
Size	15.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`05b41ac143bb9a6c2eefccc436d88c09`
SHA1	`3aa2e96bc8a9ab68b3696b275ee71ef6da7583e9`
SHA256	`d91ea0800e998ca5a8ee2f6dc4290a204b005bb9ebb05a9cc43af857837302b8`
CRC32	`BFBDED72`
ssdeep	`12:qhD0UMseAYA9zl0tehH4IGA+tyqjsNRDeptjDXUml48H:qk3rehH4E+MqjIZeDv`
Yara	None matched
VirusTotal	Search for analysis

Name	73d050c7419444c1_LL12_XGL.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_XGL.ibk
Size	24.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`ac851aaa7e3858ce3d362a80c9354820`
SHA1	`3eb92e623621b651abb4a8e3a7928545dffd09ad`
SHA256	`73d050c7419444c19212284c8e9c169cb19daeed70d9598afffcc840faeb83e9`
CRC32	`E41E722A`
ssdeep	`3:CllxQCuGZBul/lnlGl6ltFlWlYzi/lX3lvlppL2l//SlYlmk/l/l0llzl9llllFJ:mEG/utdsOFiYmhe/uYG1lH/J/7`
Yara	None matched
VirusTotal	Search for analysis

Name	e56148b66c31cbe3_LL12_ENTITY.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_ENTITY.ibk
Size	44.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`fa60fe437e2cb320f0dc24223ec9cc4b`
SHA1	`39754f0208bde07f88e92b2348e1f76f76043bbb`
SHA256	`e56148b66c31cbe39acef40f2e864c87d7e9559eaf1c20ca80c6df05edaa6321`
CRC32	`D2F780BA`
ssdeep	`192:t5HxRGgjTjkxP0hrJ33Y1LMaByIIMbiJFKOVBtY9/UyQIB9Q4CY:tpGQE0hdY1LNcIIhKeX4MyP9B`
Yara	None matched
VirusTotal	Search for analysis

Name	e3b0c44298fc1c14_mia796F.tmp Empty file or file not found
Filepath	C:\ProgramData\mia796F.tmp
Size	0.0B
Type	empty
MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
CRC32	`00000000`
ssdeep	`3::`
Yara	None matched
VirusTotal	Search for analysis

Name	887d9bebb1a5badf_LL12_SUBST.dat Submit file
Filepath	C:\ProgramData\mia796F.tmp\data\The Professional Landlord\A056D2F4\3F943650\LL12_SUBST.dat
Size	5.4KB
Processes	1052 (Install_Rental_LL12_2018_4.exe)
Type	data
MD5	`887445c49c85f5925290c42fdf489c6d`
SHA1	`7e108a04467ccc3663445fdd7238d8aa58df10b9`
SHA256	`887d9bebb1a5badf56c8fe3838358d6d95c971be318122184bdf227adec45712`
CRC32	`8C4DF58F`
ssdeep	`48:DQorg5Akh+gV8FLMXEbdlFhLsZ7nm7h/mKyXCoTCqqOC72:corgKkh+gV8FLt1h4U71pyrG72`
Yara	None matched
VirusTotal	Search for analysis

Name	873f60bec86094fe_install_rental_ll12_2018_4.dat Submit file
Filepath	C:\ProgramData\{EA5BECAE-CF5A-44BE-B357-0B73427F81A9}\Install_Rental_LL12_2018_4.dat
Size	315.0B
Processes	2088 (Install_Rental_LL12_2018_4.exe)
Type	ASCII text, with CRLF line terminators
MD5	`b7e3ba9a3607ca78e00535229eae6d79`
SHA1	`0fa52847589bc80fcf76629ddb1352bb73ebcaf6`
SHA256	`873f60bec86094fe819f7b1952c5ea421e166975404d0804128159ed56353f80`
CRC32	`65B9BD62`
ssdeep	`6:SpSSn0gxVSDF8erkp2v0N5poKn0gsU6IBFp+ft7TnTzAz7jM41wy:SpS/8VSDFLr/op87+BFQft/f8MXy`
Yara	None matched
VirusTotal	Search for analysis

Name	b818ccc56c05a003_LL12_Acctline.idx Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Acctline.idx
Size	24.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`f60b3f968c1df4a4490ef9fe904bd58b`
SHA1	`4ab6555d4c183fb99fdb4812f24fd8f14620a4a3`
SHA256	`b818ccc56c05a003cce56734417ca56f927acbc3731b9dafcec4a24507f136d7`
CRC32	`AEC3A826`
ssdeep	`3:xllxQCuGZBul/lklGl1llVllzlHl:YG/ut6yT/7`
Yara	None matched
VirusTotal	Search for analysis

Name	8672d74229ec4bc1_Install_Rental_LL12_2018_4.exe Submit file
Filepath	C:\ProgramData\mia796F.tmp\Install_Rental_LL12_2018_4.exe
Size	5.1MB
Processes	1052 (Install_Rental_LL12_2018_4.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`6e37d98b5880fe89dfd1f9a7e6fd6c69`
SHA1	`9c8656a6d0855233a8a06b7fe87751e008575dd9`
SHA256	`8672d74229ec4bc156c5937334ad975d9c5be0570ca1fee7d5984ccd07adf180`
CRC32	`0886252B`
ssdeep	`98304:LvmT/VnGxlgfYlC/ZUC7IYL82Rjo53qnX0zH28aYK13icjqsNTUjJE:L0Vn4gdRUC7IYL70JHmFIE`
Yara	PE_Header_Zero - PE File Signature Generic_Malware_Zero - Generic Malware Win32_Trojan_Emotet_2_Zero - Win32 Trojan Emotet Win32_Trojan_Gen_2_0904B0_Zero - Win32 Trojan Gen OS_Processor_Check_Zero - OS Processor Check anti_vm_detect - Possibly employs anti-virtualization techniques Malicious_Library_Zero - Malicious_Library ASPack_Zero - ASPack packed file IsPE32 - (no description) Malicious_Packer_Zero - Malicious Packer Win32_Trojan_Gen_1_0904B0_Zero - Win32 Trojan Emotet Win_Backdoor_AsyncRAT_Zero - Win Backdoor AsyncRAT
VirusTotal	Search for analysis

Name	054c80bafc18e68e_LL12_UNITTYPE.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_UNITTYPE.ibk
Size	36.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`823db660aeb5de78b241d33f3a142c86`
SHA1	`44ceead24c53fe04a946b571672b73a9a834d06b`
SHA256	`054c80bafc18e68ed953431899d973e9e690f80d4c5a5f40a9571f1671d29b49`
CRC32	`2E555629`
ssdeep	`12:qHyiGxX5/7UdlRMP2/xE4jYtHIh+UN9l:q8AnRMP264stoh/N`
Yara	None matched
VirusTotal	Search for analysis

Name	1119adbda474bc36_Release 2017-1.pdf Submit file
Filepath	C:\ProgramData\mia796F.tmp\data\The Professional Landlord\A056D2F4\465BD09E\Release 2017-1.pdf
Size	188.6KB
Processes	1052 (Install_Rental_LL12_2018_4.exe)
Type	PDF document, version 1.5
MD5	`85ae4db45c2e50c7521b2fd19037ae3d`
SHA1	`45220e2da15e7dc0b507ffb1f088fd6733e9f27d`
SHA256	`1119adbda474bc369490a071fbcb37ddc68766741c9744c4ebc59084d30650d0`
CRC32	`BEC3C6E2`
ssdeep	`3072:abt/H6norfn0LhH5XpVROJA04Hk9E0U1+mve/f+xUBWgl4y4n:CtHg2v+H5XoJA70U1+/gZg/4n`
Yara	PDF_Format_Z - PDF Format
VirusTotal	Search for analysis

Name	3f675ad99bc6ab12_ll12_parline.dat Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Parline.dat
Size	6.1KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`dc14bb3fa1f5cf81a337a8e284904126`
SHA1	`6690eb60a877f94f39876772cede2e3696a9cf48`
SHA256	`3f675ad99bc6ab120713401c5dba4bb774e0cd9747897a3df64cc52fdb4d3742`
CRC32	`624F8122`
ssdeep	`12:03jsI0UMX2AYkXG/k5ivNRVtbtXth0Cm48A/qmx5oUmFpZGxu:ujs/mcF5ITvhH5avG`
Yara	None matched
VirusTotal	Search for analysis

Name	7aef8ef0d965d2ae_prereq.dfm.miaf Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\mia1\prereq.dfm.miaf
Size	744.0B
Processes	2088 (Install_Rental_LL12_2018_4.exe) 1936 (Landlord12.exe)
Type	ASCII text, with CRLF line terminators
MD5	`172d6845744a1ec7dc233e9335c5a47c`
SHA1	`f0e3cb9c55f0f0961ef496d3ebf532943fb155e1`
SHA256	`7aef8ef0d965d2aedddf2fbc2b99ba2a3e5e96517bcd38adb1a3315456d16e6f`
CRC32	`7ADE9A3C`
ssdeep	`12:qITMDIb6UIJTc6S6juINIkU3lkimkU3MIkT:qIMIb6UIJA6SsuINI53ldm53MIk`
Yara	None matched
VirusTotal	Search for analysis

Name	00c256967d2374fe_ADVMICR.TTF Submit file
Filepath	C:\ProgramData\mia796F.tmp\data\The Professional Landlord\A056D2F4\3F943650\ADVMICR.TTF
Size	5.4KB
Processes	1052 (Install_Rental_LL12_2018_4.exe)
Type	TrueType Font data, 14 tables, 1st "OS/2", 16 names, Macintosh, (c) Copyright 1994 Advantage Laser Products, Inc MICR E13BNormalFontMonger:MICR E13B NormalMICR
MD5	`59fbd66ef5b87e96a65437d2423bcc6e`
SHA1	`faf672f279768f8afe11cb1d5b3693da18d9358a`
SHA256	`00c256967d2374fe187776ba4f8efb28c3a46cbcb25fc1869b8838dd9c9db4d3`
CRC32	`1480E36B`
ssdeep	`96:T2zOOOK4tj7gJjRDohbMDeSSiGhgbKzUfUzT77gdmgUMJDyMy2zkUvoMwULkUv1:azTOK8j7g9Rch1SSlhgbK3LgAetyMyfQ`
Yara	None matched
VirusTotal	Search for analysis

Name	a1f6b6aac0968e42_LL12_UserSettings.idx Submit file
Filepath	C:\RPromas\LL12_Training\LL12_UserSettings.idx
Size	24.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`a1cb90c66c1737be58c0972d6e1cd30f`
SHA1	`46f226726b8668b1af9996fb2183d61540c237d1`
SHA256	`a1f6b6aac0968e425608fc0f5b786ef97673ec494dbc9a314cfe8a578797c23e`
CRC32	`6D77EF85`
ssdeep	`3:xllxQCuGZBul/lklGldlc//lWlzVllzlHl:YG/ut6y8tih/7`
Yara	None matched
VirusTotal	Search for analysis

Name	ee84efe018f6a5ac_LL12_NOTEITEM.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_NOTEITEM.ibk
Size	40.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`87d2695fb4a997627b2ab2c0ffa896b7`
SHA1	`0fbf0f384465490fc27225810d7d5c4f3b62f483`
SHA256	`ee84efe018f6a5ac03f3ca795f4784eea5aa0e4e84a4d5f9555f2f5a7391c921`
CRC32	`3606FDD0`
ssdeep	`96:XonZxZlzFfjWOdWO3QHlHE6l1roHZTbVl2cl:XonZlzFf6AN3Ylk6lQTJAcl`
Yara	None matched
VirusTotal	Search for analysis

Name	c49145988ea662bc_LL12_XAP.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_XAP.ibk
Size	84.5KB
Processes	1936 (Landlord12.exe)
Type	AmigaOS bitmap font
MD5	`ffd03efb5b219f1bd8e2e2f1e6ffdbc3`
SHA1	`0db68b490aaa2e8fe1238ec10438c97eff3ea9fa`
SHA256	`c49145988ea662bc63234aa4569192e5b93c8fcd365786fd14cda86588528aab`
CRC32	`0504CCC6`
ssdeep	`384:p/c/gbFrHDEzTiNyd6jrLIdb9wfj5djCOcmuDx69:THIzLdGLIdbMj5drtu`
Yara	None matched
VirusTotal	Search for analysis

Name	4995053f64101739_LL12_ENTITY.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_ENTITY.ibk
Size	24.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`97cf6e2d5d848fad340a3b1fdd5ff512`
SHA1	`97364cafc723daafe5108d26b6028f24293d6c11`
SHA256	`4995053f641017399110a9ea0689c1b04a8b2c3db9b5e61682151f88bbb9148b`
CRC32	`9DCB24A3`
ssdeep	`3:1lDQCuGZBul/lgltllMl6ltFlWlG/lvtl9l8IAtlzlntlAmXhlvtlal045t/Vlj3:kG/utuyOFiGxXcFtzXAmDXu08tHf/7`
Yara	None matched
VirusTotal	Search for analysis

Name	f86fef60fc2f7e4e_LL12_NOTICE.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_NOTICE.ibk
Size	36.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`4a4bfd7cc3981e5ca7b3dec711ef3f83`
SHA1	`c3f8be4ef6ef316d569a4fdf9162f36a330a141c`
SHA256	`f86fef60fc2f7e4ec3e4288e73095049d5e4fc2d5a8423fc43e0934ca53838f8`
CRC32	`E6B3B480`
ssdeep	`3:gltxQCuGZBul/lwnll6ltFlWlG/lvtl9lrVllzlHldlSjlSjl8Xnks:g8G/utqn/OFiGxX5/7dlSjlSjl1s`
Yara	None matched
VirusTotal	Search for analysis

Name	5915ada1d4bbf58a_ll12_mgmtfee.dbk Submit file
Filepath	c:\rpromas\ll12_training\ll12_mgmtfee.dbk
Size	12.3KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`576d64688bbfcf7fea26631dedd152f4`
SHA1	`ee00565c129e2b330d8b2d1f48804a8c34703635`
SHA256	`5915ada1d4bbf58a0341d1a9aecc0436fb8b4550d204c0ece74723283bc33d73`
CRC32	`FADE298C`
ssdeep	`12:6t8X0UMXWXzjqJKXwt3J4sltjX7N5mE1By14ddnlit6i5aaXMEvACdVQuaX0jtB0:6hmXzGXcajf51BBnli874WwtiEs`
Yara	None matched
VirusTotal	Search for analysis

Name	ddb71478b87a71c2_ll12_noteitem.idx Submit file
Filepath	C:\RPromas\LL12_Training\LL12_NOTEITEM.idx
Size	48.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`71986a5b0893275c5c12177211022849`
SHA1	`ddb6b38a644a7ef3a0d089838d28bdcf33e89d2d`
SHA256	`ddb71478b87a71c2bdb133339c58bd91ecfbf14f99a191d3e1cf67edf51b0ad6`
CRC32	`72E3C090`
ssdeep	`192:qUnZlzFf6AN3Ylk6lQTJAclTl6Cfl6PUoxl:qUnYOYMFAGl4P`
Yara	None matched
VirusTotal	Search for analysis

Name	7a4efbe48ce18c5e_ll12_cxccopy.dat Submit file
Filepath	C:\Users\test22\AppData\Local\PROMAS\LandlordForWindows\Instance1\LL12_CXCCOPY.dat
Size	12.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`fa9e7dde508daf144de06a26e88a465d`
SHA1	`98f9f00f75a5719a3b48fb893be67ea8090ae4a7`
SHA256	`7a4efbe48ce18c5e114812d44dc9a7f3904b5edf604c3b4f1279a7f2d3d246e9`
CRC32	`49485CDB`
ssdeep	`6:g8G/ut6uI0U38seAY/IlXju2XAOGIlI/oapWXbOlINIptlQ7jHptlO7lc//CCQHe:qhuI0UMseAYAGYIoapWXiuclcXnQHSl`
Yara	None matched
VirusTotal	Search for analysis

Name	9623c1da6941fe0c_LL12_RTABLE.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_RTABLE.ibk
Size	36.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`6afb0fc7d5429c74165660e4336f4ba9`
SHA1	`d1b49724f42070eb2bee3da0f5241902b191d335`
SHA256	`9623c1da6941fe0ccd667245a07894b6f086b7d4942a7c0ebdc6260226b5ec94`
CRC32	`B3664F8D`
ssdeep	`3:gltxQCuGZBul/lwnll6ltFlWlG/lvtl9lrVllzlHlXtl+vtl+LxQXFk+Rl/Vm49v:g8G/utqn/OFiGxX5/7e2/+A4`
Yara	None matched
VirusTotal	Search for analysis

Name	23b6f881f809c117_LL12_NOTEITEM.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_NOTEITEM.ibk
Size	44.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`f617105e7264bff210761da91e360c76`
SHA1	`6e22d01110a1a68475a18ed50072c8a60354c93d`
SHA256	`23b6f881f809c117cecc92449c8debbb977d31daf85a319fab581d9a55b201cd`
CRC32	`6FC44F07`
ssdeep	`96:lPnZxZlzFfjWOdWO3QHlHE6l1roHZTbVl2clmJwl6CUYlhX:lPnZlzFf6AN3Ylk6lQTJAclTl6Cfl`
Yara	None matched
VirusTotal	Search for analysis

Name	f8e1d63e7c80f0e3_Release 2017-3.pdf Submit file
Filepath	C:\ProgramData\mia796F.tmp\data\The Professional Landlord\A056D2F4\465BD09E\Release 2017-3.pdf
Size	169.7KB
Processes	1052 (Install_Rental_LL12_2018_4.exe)
Type	PDF document, version 1.5
MD5	`50494e7cc0a62304d96e84c3f28fe38b`
SHA1	`99cbe5fe46eadcae0298eb1d9b345fac16614e4f`
SHA256	`f8e1d63e7c80f0e311cf8920d83256235751cd01a92d1a2ed75706ae540dcf9a`
CRC32	`0212A022`
ssdeep	`3072:aXxaPTv74tMaEdEgoFt4zBNoM5J3m48mtmjln/eS5XZPdLVdOIdB1gvrAEyTE:aXx8v06aE3m4zBiM5NJQjln/eS5XzVdE`
Yara	PDF_Format_Z - PDF Format
VirusTotal	Search for analysis

Name	aa5ea1d016246144_LL12_XAP.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_XAP.ibk
Size	88.5KB
Processes	1936 (Landlord12.exe)
Type	TIM image, Pixel at (9049,52068) Size=15680x53873
MD5	`4e6bbf6de621731799f73c698c2de5de`
SHA1	`4eaf5ccfafe0b699cb142972f346e36ffdb10529`
SHA256	`aa5ea1d0162461447147342dd56b4bc8e74962723f7c4b5f489e76811d676b89`
CRC32	`B75F012D`
ssdeep	`384:G/c/gbFrHDEzTiNyd6jrLIdb9wfj5djCOcmuDx69q:wHIzLdGLIdbMj5drtu`
Yara	None matched
VirusTotal	Search for analysis

Name	a3ec6f9ec6fb4861_LL12_XAP.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_XAP.ibk
Size	44.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`58b8e6d5b19bc207cea741bbac39ae69`
SHA1	`fa57c1fd5894874b03b03aa0853ec9a337bab579`
SHA256	`a3ec6f9ec6fb4861cf49e54d3687f47b4d08b7e174622d628a0384bf7d7a009d`
CRC32	`EFD18A56`
ssdeep	`192:N5HxXNG5HxXNYSTSJAoS5S3Y4r8Z4hPr5rv:N/c/gbFrHD`
Yara	None matched
VirusTotal	Search for analysis

Name	c623b82a8be3ead1_licensecheck.dfm Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\mia1\licensecheck.dfm
Size	31.8KB
Processes	2088 (Install_Rental_LL12_2018_4.exe)
Type	data
MD5	`9a87495839ca4357f293308c86139f03`
SHA1	`0529f4612d004baa1fe8806f6ead5e78b3e76e55`
SHA256	`c623b82a8be3ead16900164c09afee00215dc1749a6de8d4f381cf983a3f5ceb`
CRC32	`F4AD1E2D`
ssdeep	`768:j2HXQ1NmO7ZDrkqzM+KGlm1ccHq7kBTT5DmoibfE:juXQ1NmO7ZDrkqzM+KGk1ccHq7kJT5D1`
Yara	None matched
VirusTotal	Search for analysis

Name	6dff4e7777f9a4de_LL12_CATGCODE.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_CATGCODE.ibk
Size	28.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`f356c81f2491bc8824bb3b5d2239b8d3`
SHA1	`00d75cfa6ed499bba26e20b43142ac35afca5569`
SHA256	`6dff4e7777f9a4de417ef739d09108d7eb5b3cbdb58ca7a886c49c66b9f7043a`
CRC32	`EDDDAFE4`
ssdeep	`12:ALky1z/7i2dlRR1lxp9lBFH3llv3XHZt:ADnRf5HB9`
Yara	None matched
VirusTotal	Search for analysis

Name	dcd3068686461611_ll12_catgline.blb Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Catgline.blb
Size	7.0KB
Processes	1936 (Landlord12.exe)
Type	AmigaOS bitmap font
MD5	`92cc577b12803687623324f55ebd2ce6`
SHA1	`f2c32dd5f8118b740bb6e3d061ecc097da2c4ac6`
SHA256	`dcd3068686461611cebeda85e30efa9e17d8550bdbe5f0fe8bc4c507d52cfc20`
CRC32	`18524919`
ssdeep	`24:MzzJiItA+7bYpqOKeED/8RgbYpqOKeEDCDDG1sqDUlky:MzzJfi6I11O8CI119DD7nl`
Yara	None matched
VirusTotal	Search for analysis

Name	0532d357abc7096e_ll12_unit.idx Submit file
Filepath	C:\RPromas\LL12_Training\LL12_UNIT.idx
Size	52.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`c11de54aa658112837e4c1e7d375455e`
SHA1	`1ef58c329d8e93eee1d9fd67f2a4c43829e8ab48`
SHA256	`0532d357abc7096e897b146ac8a91aad885413e4979dca16b5881c5f3f4cb157`
CRC32	`F1561122`
ssdeep	`48:ePsMDSagTn64IguWTkEJ2sgBwamurz15Oo+:nagTAgu0ki2s8wMG`
Yara	None matched
VirusTotal	Search for analysis

Name	e490c8a7822b218e_ll12_acctlist.dat Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Acctlist.dat
Size	2.8KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`517f643ae3fd7f7066629903c00967b0`
SHA1	`27e8942deac832de78fb1063eba61a3e347a76f5`
SHA256	`e490c8a7822b218e5734560d69139ebf6eaaff9a888fce69a242bcbfcd056b1e`
CRC32	`CD892EF2`
ssdeep	`3:UltxQCuGZBul/lklglault8lUFt/tStl1Alt3jIAtlZD/ll:88G/ut6TO0U38XWXzIAtXD`
Yara	None matched
VirusTotal	Search for analysis

Name	ae59d79f24fd0951_MARYLAND.INT Submit file
Filepath	C:\ProgramData\mia796F.tmp\data\The Professional Landlord\A056D2F4\B21C7FEA\MARYLAND.INT
Size	105.0B
Processes	1052 (Install_Rental_LL12_2018_4.exe)
Type	ASCII text, with CRLF line terminators
MD5	`2f36a3a621bb8bdc085a48a3803625d9`
SHA1	`00e0fcf167f7e054836ea2e5367989a60fcfa9e9`
SHA256	`ae59d79f24fd09517df84b39202602c9a6024640ef59b4479b162b69e546e335`
CRC32	`A6BEA81F`
ssdeep	`3:TEXFBWxC0m8HRLxHFV2U8sPJlIp7L7lJIL:IXFAS8xmsx+p7k`
Yara	None matched
VirusTotal	Search for analysis

Name	cf034262cb0e848e_LL12_MXBRAND.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_MXBRAND.ibk
Size	36.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`76a205abac89e1e97780ed3d98c6edcd`
SHA1	`fa7ddbd08f0630905dc0fa523b8bcec6d7406890`
SHA256	`cf034262cb0e848e539d01b7bf67b6e8d441ef14a06cf5955eebd387ef392a2c`
CRC32	`501BB511`
ssdeep	`3:gltxQCuGZBul/lwnll6ltFlWlG/lvtl9lrVllzlHl+lttl/Qlttl/QlUllll/kyv:g8G/utqn/OFiGxX5/7+IIS/sytl`
Yara	None matched
VirusTotal	Search for analysis

Name	68f4cb6314cd7fc6_ll12_usersettings.dat Submit file
Filepath	C:\RPromas\LL12_Training\LL12_UserSettings.dat
Size	2.8KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`8e07fea89368ff48d20e2c6b1d2d92f7`
SHA1	`9ad28c702dfb1767e1725f8f3c2642cda5b9fc26`
SHA256	`68f4cb6314cd7fc6a7c7c9128698312bff1dee5864d4e187a2e811dbf1a9cf9b`
CRC32	`2E1EFC5C`
ssdeep	`3:jlDQCuGZBul/lklNH/LZbqGk8lvEREP8/lWcctl+h4Hv0ls1tL5IwXZll/:aG/ut6Bwj0cREklQX+h/+1tLWw`
Yara	None matched
VirusTotal	Search for analysis

Name	18a76073e151dba9_LL12_XGl.dat Submit file
Filepath	C:\RPromas\LL12_Training\LL12_XGl.dat
Size	205.2KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`80e279f0a86eedd31d49983c55fa1c53`
SHA1	`c779b92545c3346b7b05dcc9079357edd7e227a6`
SHA256	`18a76073e151dba92115f2be114051545283357495e44aae59d3a0a33c07f260`
CRC32	`1A1EDC2D`
ssdeep	`768:fb3z1Z4VGljvkR2jcOtWiDwVRV1VSqwMoN5QIjQrQNQOQBQMQuQqcEFPM7Ish3Nf:YVajkR2jcOnqgBd0YhLXz`
Yara	None matched
VirusTotal	Search for analysis

Name	7b32c9c1c74ebe93_PublishingManager5_20111.exe Submit file
Filepath	C:\ProgramData\mia796F.tmp\data\The Professional Landlord\A056D2F4\B21C7FEA\PublishingManager5_20111.exe
Size	136.5KB
Processes	1052 (Install_Rental_LL12_2018_4.exe)
Type	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
MD5	`adcc9b3f0516edcf243fcef128c3a3cb`
SHA1	`68c08666a46976a4267d3dd8af558d82b5d2ac37`
SHA256	`7b32c9c1c74ebe93968bbb6842ec2e51c4ff5a5bcad291c96fc56f72318d151c`
CRC32	`3DCAA62A`
ssdeep	`3072:mr5JoTfx1hD+4iXXdCvFYiaPDvFYiaPkgucSPM4ai2rto:S4MN8Fl4DFl4kguHY`
Yara	PE_Header_Zero - PE File Signature Generic_Malware_Zero - Generic Malware Is_DotNET_EXE - (no description) IsPE32 - (no description)
VirusTotal	Search for analysis

Name	997bd63fde5adac9_LL12_Rtable.idx Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Rtable.idx
Size	40.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`7faa496489499ec87637777804de7d44`
SHA1	`d3ad098301ea8133cec191fd48751dfaab6270b8`
SHA256	`997bd63fde5adac9858f46c2ab2ac8a3ee00732247a7668d9ca9c449073c2ed2`
CRC32	`F213AB63`
ssdeep	`6:CG/ut+UWOFiGxXcFtzXw/7e2/+A4NZ8W4q8+K2o9/us:9ZyiGxXcDXw/7e2t4NZ8W4q8+KtF`
Yara	None matched
VirusTotal	Search for analysis

Name	dbfb43b084d92fc3_LL12_ZRCODE.idx Submit file
Filepath	C:\ProgramData\mia796F.tmp\data\The Professional Landlord\A056D2F4\3F943650\LL12_ZRCODE.idx
Size	112.5KB
Processes	1052 (Install_Rental_LL12_2018_4.exe)
Type	data
MD5	`1234257603c237c9ef53286e454b6040`
SHA1	`151777bdffd4cce2f5e72b1321332733d82a2ed4`
SHA256	`dbfb43b084d92fc30978a32a35179d5da05d605234c796d8941496b199dc89c8`
CRC32	`7D7AEB08`
ssdeep	`768:36SZcHzEmPyqIumzGyQ4mr3sfsrHFc2/yMnmUk:qSM9PyTyr3GH`
Yara	None matched
VirusTotal	Search for analysis

Name	8d6d100b2e441dff_LL12_PARLINE.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_PARLINE.ibk
Size	36.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`48045956cf8286f33233ccc0b37da8e0`
SHA1	`9e7f7ae65c667c16da0faa0033c7084c237f98c6`
SHA256	`8d6d100b2e441dff25353fc88e27e734b8db8182383cf9536ec6be5b593e1920`
CRC32	`9E8DD4E9`
ssdeep	`6:g8G/utqn/llt7J/7xlkdl/pl5hWiVX/l//lQ3H9UnlFtuo:qHlX7J/74dl/6Kl/JlFk`
Yara	None matched
VirusTotal	Search for analysis

Name	ee54ada9c4b50d29_LL12_Charge.idx Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Charge.idx
Size	44.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`bb1d743c7c36bc2949a73757ae263979`
SHA1	`e2fc09b850d66aa718f4e72c455dcdf16a9091cd`
SHA256	`ee54ada9c4b50d29091fb66f23d60785ca53d0397bfb1c0f90cf416df8238d65`
CRC32	`78BC0419`
ssdeep	`48:63s4/RCsAS5yfqgM28HYHf6C/rWPIMwQWLeT:GwVS5yfLMREfbT/QW`
Yara	None matched
VirusTotal	Search for analysis

Name	cb9e91f90284d908_LL12_XAP.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_XAP.ibk
Size	36.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`f5817c50cc00f97bf00c890f66855a4e`
SHA1	`36dd0ecec9d3b38333fc6f82e47719f1a52bbbbd`
SHA256	`cb9e91f90284d90866a809c06f0a5fa32c3ada395a078ce07b88e0fefc12c72d`
CRC32	`A0E6E464`
ssdeep	`48:qOf5HNfdt/tFP/RHHHF3yf5HNfdt/tFP/RHHHF3hBGXi9fhX9PxP1TxupBcTbBPR:r5HNfdFNFc5HNfdFNFLGXiTupJAs`
Yara	None matched
VirusTotal	Search for analysis

Name	9fc26ffab07ae39d_LL12_PARTNER.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_PARTNER.ibk
Size	44.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`2bc82599bd0e606f81ef89b42d7f7f22`
SHA1	`27b8fd9153ff29f7be16a8dc71f88bf50e216d55`
SHA256	`9fc26ffab07ae39d68fbce40bad0462793c87935de0c1f8d558e63c3c7d8b70c`
CRC32	`98B5C5F8`
ssdeep	`6:mEG/utc9l/sOFiGxXcFtzXAmDXAh/7dlSjlplb8sNlbkds9lrgUaC0m4Mu/H:U3HEyiGxXcDXxDXk/73vBC0Bp/`
Yara	None matched
VirusTotal	Search for analysis

Name	9e7054257b4d608b_prereq.dfm Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\mia1\prereq.dfm
Size	31.9KB
Processes	2088 (Install_Rental_LL12_2018_4.exe)
Type	data
MD5	`3b989c7730df816a13a88b722a25b021`
SHA1	`882f64912d28ed7c1ee1d59333e934cc73e1c50a`
SHA256	`9e7054257b4d608bc16547468b0e6d4aa06b0a0cf467cf76cd7ed169979e0b2c`
CRC32	`6262E849`
ssdeep	`768:scHXQ1NmO7ZDrkqzM+KGlm1ccHq7kBTT5Dmoibfi:scXQ1NmO7ZDrkqzM+KGk1ccHq7kJT5Dp`
Yara	None matched
VirusTotal	Search for analysis

Name	bbf8acf4808aaa57_mia.tmp Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\mia.tmp
Size	66.8KB
Processes	2088 (Install_Rental_LL12_2018_4.exe)
Type	UTF-8 Unicode (with BOM) text, with very long lines, with CRLF line terminators
MD5	`ea45f89dca526759166187eb9bbd5149`
SHA1	`11d2dbbe569d376bc7c3d21ababce429926355ec`
SHA256	`bbf8acf4808aaa5762d50b341235217d447e88d7942dd2cf694629184a8c8d12`
CRC32	`9F14599B`
ssdeep	`768:nFSlWQIq9DqnILvuduPk3/bFSGaBQ1N8NODIQpR:nAl1lqnIBM8GS28NODIQpR`
Yara	None matched
VirusTotal	Search for analysis

Name	10466ea85dada6e2_LL12_Xar.idx Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Xar.idx
Size	224.5KB
Processes	1936 (Landlord12.exe)
Type	Encore
MD5	`937bb33eb6359b05f9c7ac3ce8f87bdd`
SHA1	`97339303624a984459bd2fadc9de3ed88eb579b8`
SHA256	`10466ea85dada6e237fccac706e1f36b77be8cac7c4339504b3d55b27ec9ef26`
CRC32	`8B7E8B82`
ssdeep	`3072:CyAW4P44HTmB5549KFuUG+mmeOGjH6AG4KIOg6gmo64+Ai2H6AG4KIOg6gmo64+V:ZAMwy2`
Yara	None matched
VirusTotal	Search for analysis

Name	7ba5630e5a683a80_LL12_MXWO.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_MXWO.ibk
Size	56.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`6c9ced974ab22ae4f254c55ef1108683`
SHA1	`f999087c24389c5c143f1e0e810ba36a83691af5`
SHA256	`7ba5630e5a683a80dea3836349b4592412ee233b9b0c75c474baf48ba53e4fb4`
CRC32	`59813ABD`
ssdeep	`12:Rt/yiGxXcDX6nb8jtXj/7tymozqUBef08kTt8UlnKp56fX+ZyYZ2x:Rt0lb8jtXFymozqv0IT56fuZyu2x`
Yara	None matched
VirusTotal	Search for analysis

Name	e41433a8d2f0cec0_ll12_xjl.dat Submit file
Filepath	C:\RPromas\LL12_Training\LL12_XJl.dat
Size	23.4KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`d3abe80b9a7b4f3d920c69ba55423212`
SHA1	`a93d2beeffd886dc4d41f1e3a9e1874be008cad6`
SHA256	`e41433a8d2f0cec0de803be5615c9281b469384073adf742bc6bf3e8a4476bd0`
CRC32	`A9E544FB`
ssdeep	`24:yYCJ61CiOLMY6uRn2l8WpuzFgIckcfDT7MXKoD/61KLaP:yYCdCuRPjF/Ef7Zo2QO`
Yara	None matched
VirusTotal	Search for analysis

Name	5f0bf72040990704_LL12_XAR.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_XAR.ibk
Size	28.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`68d60961e4edc7ad0df54b61f38f7066`
SHA1	`f555b31de8df41450ded7bafdea0078bbf0986c5`
SHA256	`5f0bf72040990704f8cda25546f0796f09836dd9a89ec437011512f64f64a28c`
CRC32	`5B609083`
ssdeep	`48:Adf5HNfdt/tFP/RHHHF33hHnNfRHNcHfKMkMfx:g5HNfdFNFhHNfRtsfKMkM`
Yara	None matched
VirusTotal	Search for analysis

Name	be472a7837309677_Quick Start Data.BKP Submit file
Filepath	C:\ProgramData\mia796F.tmp\data\The Professional Landlord\A056D2F4\3F943650\Quick Start Data.BKP
Size	77.2KB
Processes	1052 (Install_Rental_LL12_2018_4.exe)
Type	data
MD5	`ec2f6ee27e3d468102161259a7b6f78c`
SHA1	`ea08a94712edc0aaa11886b691317c8882ea3956`
SHA256	`be472a783730967736c2ebcdf219edde926ae6ae113eaa62543a456d4d2dd4c4`
CRC32	`93E6A32E`
ssdeep	`1536:WknLG6pK6/9/+RrNqvkeSSsxRswWDqOeNY+v57lOXY:Wmh06/9/+6ceSSsxRskPNY+BKY`
Yara	None matched
VirusTotal	Search for analysis

Name	cd8f8a370a4a8fc8_LL12_Integration.idx Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Integration.idx
Size	24.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`d936acbbf0e848661f09378ef923d85f`
SHA1	`2173df97ba0de42e016110f2a511bb1353e6edeb`
SHA256	`cd8f8a370a4a8fc88e4a30083c54bd80cf37baba6afb15212648c394a7897293`
CRC32	`B5B05505`
ssdeep	`3:CllxQCuGZBul/lnlGlNlE//lWl1Gm/E/SlllllllLAxgRA/l4llw/RllllllVtA0:mEG/utds0tismZl//MxLupxUIGxlZ/7`
Yara	None matched
VirusTotal	Search for analysis

Name	507f958f4337e45c_Install_Rental_LL12_2018_4.msi Submit file
Filepath	C:\ProgramData\mia796F.tmp\data\Install_Rental_LL12_2018_4.msi
Size	776.0KB
Processes	1052 (Install_Rental_LL12_2018_4.exe)
Type	Composite Document File V2 Document, Little Endian, Os: Windows, Version 10.0, MSI Installer, Code page: 1252, Template: Intel;1033, Revision Number: {EA5BECAE-CF5A-44BE-B357-0B73427F81A9}, Number of Words: 0, Number of Pages: 200, Title: The Professional Landlord, Subject: The Professional Landlord Installation, Keywords: Installer, MSI, Database, Author: The Promas Landlord Software Center, Comments: All rights reserved, Name of Creating Application: InstallAware, Security: 0
MD5	`9c49ad2f5d60a7d8541f148d208cd443`
SHA1	`a197555c02bf1cd7bddf40dc5772c30f96208767`
SHA256	`507f958f4337e45c6e7f9fa25893a9535f2c1efc53425bf92134ed5dd851efe4`
CRC32	`B81B34F8`
ssdeep	`12288:vLMSxQ8mWBKXsbzlDSJjQ8guBoN2KA2wKc7wMz7:vLMSxRW5BqPA2fc7wMz7`
Yara	OS_Processor_Check_Zero - OS Processor Check Malicious_Library_Zero - Malicious_Library Microsoft_Office_File_Zero - Microsoft Office File Malicious_Packer_Zero - Malicious Packer
VirusTotal	Search for analysis

Name	905bbfede6e19926_registrationwithserial.dfm.miaf Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\mia1\registrationwithserial.dfm.miaf
Size	1.1KB
Processes	2088 (Install_Rental_LL12_2018_4.exe)
Type	ASCII text, with CRLF line terminators
MD5	`e30f9bd0eb3c6a3372f67e0f8886e28c`
SHA1	`b390aaedce02e0a1a031506ee73c313221367bbf`
SHA256	`905bbfede6e19926541295e4599a14169cdc21392388dae0ee1974a5c827d608`
CRC32	`DBFFD1CC`
ssdeep	`12:+GYMtg+YMtgPt0YMtgPrYMtgP0ZYMtgPpDYMtgPuYMtgdmMtgpMtg6tkMtg63Mtz:+ff7kkKSHFmBBApVeN5INI53ldm53MIk`
Yara	None matched
VirusTotal	Search for analysis

Name	b2d3738ca5fb5190_ll12_parcopy.dat Submit file
Filepath	C:\Users\test22\AppData\Local\PROMAS\LandlordForWindows\Instance1\LL12_PARCOPY.dat
Size	5.8KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`ef82b48ca784f04fdb0d3cbc8f10362c`
SHA1	`70fba5ecc187c93b74062b00d7fcdda19b6b1d72`
SHA256	`b2d3738ca5fb5190714f64154b278fc188a692eeee0b3a95b7030525ae21c0f2`
CRC32	`0D188710`
ssdeep	`6:g8G/ut60vk0U38seAY/IlXwltEmWh/tulIAugt:qh080UMseAYAwXG/keg`
Yara	None matched
VirusTotal	Search for analysis

Name	2a0d690a0be5b6e4_LL12_XAR.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_XAR.ibk
Size	44.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`674710db5d0227188afc9a052c1b2ec5`
SHA1	`4861d403eed7078e53b4b6f232bbfd996581b3b8`
SHA256	`2a0d690a0be5b6e42aef869feb2b6cad7b443e7a3d0ac8a739c1f437b4696851`
CRC32	`0E736366`
ssdeep	`192:c5HxXNN5Ou5HxXNN5euM5kKscCuc9usOecRHEZSen:c/hl/heFFSOecRH0Zn`
Yara	None matched
VirusTotal	Search for analysis

Name	44f496583aa69c4e_ll12_bxbudg.dat Submit file
Filepath	C:\RPromas\LL12_Training\LL12_BXBudg.dat
Size	6.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`f7ee78ada73c1d022eb90c1aa8cb8f8c`
SHA1	`13ca110da73cab2da2c84a135e4509516564c6ac`
SHA256	`44f496583aa69c4e3f17d8d04d6e52e403cc81cb7b1a7b92c9fe67f4880ed5ae`
CRC32	`BA9CA3F6`
ssdeep	`6:oG/ut68P9k0U38XWXzIAtXDXAv/XZ025//S6lExKt:jhm9k0UMXWXzjSv/5XSOf`
Yara	None matched
VirusTotal	Search for analysis

Name	a9b4eb2fc025ea05_mMSIExec.dll Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\mia1\mMSIExec.dll
Size	1.4MB
Processes	2088 (Install_Rental_LL12_2018_4.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`196efacdc6841a55e68b5e4224af5511`
SHA1	`9eac6ee53081f61930f826a698b9e5222bd8943b`
SHA256	`a9b4eb2fc025ea05c93c7d83adfb3fab5f1d058957f743e7e871ef6d3946973d`
CRC32	`FDF9E66C`
ssdeep	`24576:i0VVsOA8OlyuOOQbsjMBG3hCaWuaBfhBiSlGJsRMVw3IB9eVgfR6V:iaVHtBYOfhESlFP3CImfR`
Yara	PE_Header_Zero - PE File Signature Admin_Tool_IN_Zero - Admin Tool Sysinternals OS_Processor_Check_Zero - OS Processor Check IsDLL - (no description) Malicious_Library_Zero - Malicious_Library IsPE32 - (no description) Malicious_Packer_Zero - Malicious Packer
VirusTotal	Search for analysis

Name	f68033bf8015bb23_ll12_xbl.idx Submit file
Filepath	C:\RPromas\LL12_Training\LL12_XBL.idx
Size	56.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`c8a2e32f90eead6e8a7e54dace2e4a8e`
SHA1	`5c0ed1c4ab1b1d513f13d69dda2cf4931c40ddb7`
SHA256	`f68033bf8015bb237b43d0af52fee304d48460f4493ec4756b4b72b2c3054b96`
CRC32	`730B9A6E`
ssdeep	`192:lmhYTS97luKGkZMGsHoRE73TTVwTuzr2FiMPqtjQMPqtUuhAt:lFolU5iuzr28MPqNQMPqNA`
Yara	None matched
VirusTotal	Search for analysis

Name	9f10e8527399030b_LL12_SystemLock.idx Submit file
Filepath	C:\RPromas\LL12_Training\LL12_SystemLock.idx
Size	32.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`34089f670971333a79ada01db0833e49`
SHA1	`1dbf67bc7ba22462978494a7bd8ac67344ed4ece`
SHA256	`9f10e8527399030b17b1210ec241355830c9262476695933d215ea2863945d82`
CRC32	`0B52D429`
ssdeep	`3:xllxQCuGZBul/lwlUl1lH5FVllzlHl+lttl/QlUnCM/l:YG/utlP1/7+IO`
Yara	None matched
VirusTotal	Search for analysis

Name	32640676fb34dc7e_LL12_Mxasset.idx Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Mxasset.idx
Size	40.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`7fbbfaadc57ce716af53ecf4c8f341f3`
SHA1	`4e03ec120a193d1d81abc2db1850ce6a7ae4da94`
SHA256	`32640676fb34dc7e39ed5edd0e68ec88624a62a8655ac24264173bde39c78316`
CRC32	`E5CE1C7A`
ssdeep	`6:CG/ut+UWOFiGxXcFtzXw/7dlSjlSjlhEsNlXYoTks:9ZyiGxXcDXw/7XT`
Yara	None matched
VirusTotal	Search for analysis

Name	f1b8176a95d81b01_LL12_UserReport.idx Submit file
Filepath	C:\RPromas\LL12_Training\LL12_UserReport.idx
Size	24.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`c8ffa6a34f7cba463d5babcd9a045b47`
SHA1	`0904cb742607e710793fdab506f71959778ab0c1`
SHA256	`f1b8176a95d81b016e47eff9120cb56b490445472ba933fa3f6c45392adcab98`
CRC32	`F691C479`
ssdeep	`3:gltxQCuGZBul/llltlWl6lt6//lWlIxlvtl9lrVllzlHl:g8G/utf1iO8tiSX5/7`
Yara	None matched
VirusTotal	Search for analysis

Name	0b7de186a023f9e0_LL12_XGL.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_XGL.ibk
Size	24.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`07ec2371a7ae742793a9d075fc272c20`
SHA1	`4cf1319393aca2f90688de8df6edd963f94dd595`
SHA256	`0b7de186a023f9e075224581398ec01f2337fba406b0ee03bbb8e28455cf4b05`
CRC32	`1F84A586`
ssdeep	`3:gltxQCuGZBul/llltlWl6ltFlWlYzi/lX3lvlzVllzlHl:g8G/utf1iOFiYmr/7`
Yara	None matched
VirusTotal	Search for analysis

Name	e337a8ee77aef092_LL12_XGL.idx Submit file
Filepath	C:\RPromas\LL12_Training\LL12_XGL.idx
Size	44.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`bf5dcb3d9118d135906d7485dd738f39`
SHA1	`966a2e94a1403bbb4288485d4e9ae1724905c0f7`
SHA256	`e337a8ee77aef0928257ad1d4338aec2ba685f84d4c127dc5ffdacf5be384ac3`
CRC32	`59A82EA3`
ssdeep	`192:k5HxXNN5IZVKMSLbvH33bznZ1dd2EVXX3wyltHHH0S3laSVMRC:k/hCkMSLLHbztd5Lz3lMRC`
Yara	None matched
VirusTotal	Search for analysis

Name	9ab4ca19d20f08b9_LL12_XBL.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_XBL.ibk
Size	24.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`3564efc42e9e505db82efab2c590c9f7`
SHA1	`810a031ec2f787e749ab867c4e13e9539003e7fc`
SHA256	`9ab4ca19d20f08b9e53b500974ccef7a7d5fe1097f3bdbc8fdf7af4f4da7cc56`
CRC32	`A789990B`
ssdeep	`3:xllxQCuGZBul/lklGlal9VllzlHl:YG/ut6yK/7`
Yara	None matched
VirusTotal	Search for analysis

Name	c999aba358587065_LL12_TENANT.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_TENANT.ibk
Size	28.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`ce6a3ef9b425df4854761656114f890a`
SHA1	`81a90a48a26dc1fe2fd63382f030128e9a8c28f3`
SHA256	`c999aba3585870656a7c29aa2b794dba9bda1d0a4a019d29433644eeaf0ab55d`
CRC32	`F1AE82F4`
ssdeep	`3:qQCuGZBul/l/lelMl6ltFln/tNVllzlHlRlltl+dl+84l+llKU1l+llC:hG/utikOF/tz/7Rlcdl9plPld`
Yara	None matched
VirusTotal	Search for analysis

Name	e72eaea7667c2b99_LL12_XAP.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_XAP.ibk
Size	68.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`d1231667fb91fd425ac1c1a51cb24cb4`
SHA1	`8abb5fd5b2a129e32f0eb540ef04dff2808d87e9`
SHA256	`e72eaea7667c2b9980241b3d9a732365702ee1d6e812b26e307c226a436e8124`
CRC32	`81B9AB8B`
ssdeep	`192:C5HxXNG5HxXNYSTSJAoS5S3Y4r8Z4hPr5rvamTGhv7Ngb0cqf3N6c9vmPOXqcEpo:C/c/gbFrHDEzTiNyd6jrLIdb9w`
Yara	None matched
VirusTotal	Search for analysis

Name	54c1242e2120ab7d_Landlord.bmp Submit file
Filepath	C:\ProgramData\mia796F.tmp\data\The Professional Landlord\A056D2F4\B21C7FEA\Landlord.bmp
Size	133.1KB
Processes	1052 (Install_Rental_LL12_2018_4.exe)
Type	PC bitmap, Windows 3.x format, 343 x 132 x 24
MD5	`c150a4a821975290968f9e6c6e3a8087`
SHA1	`8c2367deb7f9d55788201d28cdcd460bec7d0ce8`
SHA256	`54c1242e2120ab7d4274145c2db487e86db8f63a58e585ed32a4475cc33723c8`
CRC32	`D90A35CD`
ssdeep	`1536:MDxE899999999999999999999999G3X6t06s9n39h+QwVKN7sSs+rfMemLnhLyMM:b6sh3YVKLx+2`
Yara	None matched
VirusTotal	Search for analysis

Name	27ab0ab59e1744e4_LL12_CHKINFO.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_CHKINFO.ibk
Size	24.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`3a25c641dcc89ec0daaa2fa0618bf7b2`
SHA1	`ecda1df55b3fb2376c2dae9a36d00fa1f0a2b247`
SHA256	`27ab0ab59e1744e4688968f7c5b0fb8f66b57daf899eb9b1cb66fd194fb1f958`
CRC32	`156CE6B5`
ssdeep	`3:qQCuGZBul/lklGl6ltFln/tNVllzlHl:hG/ut6yOF/tz/7`
Yara	None matched
VirusTotal	Search for analysis

Name	51265a508a89b058_LL12_TENANT.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_TENANT.ibk
Size	36.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`2f27a376645926d9167c61e092e1df4d`
SHA1	`33a8dd085720b5ba622afd0aa1cec6f1d13d85e0`
SHA256	`51265a508a89b0588193d21fc8959682af9170acf987c3bdc39a430d67c08fc8`
CRC32	`9D4D5DC0`
ssdeep	`12:qHyiGxX5/7wdlRO2kiabHLHhjsqzxdaWqs/5jQU:q8knRO2kiabrBYsaLsNQ`
Yara	None matched
VirusTotal	Search for analysis

Name	5ce3ed56fb766672_ll12_bxline.dat Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Bxline.dat
Size	12.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`f0bc6d8de2e32ccad4635da23a205d10`
SHA1	`da8a3e3def1193a894e4a19d866d14ea5c56fd1a`
SHA256	`5ce3ed56fb766672aa75d400a2b123510959af287abccf00ffea1c9024131ffe`
CRC32	`43239B22`
ssdeep	`12:1hqX0UMX2AYlAhaty89b6rdWtj64/tV/:1Y6mtLy0b60r1d`
Yara	None matched
VirusTotal	Search for analysis

Name	d373464576295632_PublishingManager5.exe Submit file
Filepath	C:\ProgramData\mia796F.tmp\data\The Professional Landlord\A056D2F4\B21C7FEA\PublishingManager5.exe
Size	674.5KB
Processes	1052 (Install_Rental_LL12_2018_4.exe)
Type	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
MD5	`e6f5cbbb7ba31791d0354261ce000633`
SHA1	`82d52f8f8d16fea732ab92d15f1fa6186bf98541`
SHA256	`d37346457629563202e89c2f51d57a8836a1d18e423036f12607d33a0e637ff4`
CRC32	`040F6F5B`
ssdeep	`6144:5XZhWdtF9c/jP1WAdFDgQcaAJs1+SRvukzcgNpFl4ktG0isO6y4Bw4n/U6Uiuw73:5JhUmLNWw9caAJyfRvuac4DxKv`
Yara	PE_Header_Zero - PE File Signature Generic_Malware_Zero - Generic Malware Is_DotNET_EXE - (no description) IsPE32 - (no description) Win_Backdoor_AsyncRAT_Zero - Win Backdoor AsyncRAT Win32_Trojan_PWS_Net_1_Zero - Win32 Trojan PWS .NET Azorult
VirusTotal	Search for analysis

Name	156d601412b0ea9f_LL12_STMT.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_STMT.ibk
Size	32.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`8480a62db295589af2580491e1947dd7`
SHA1	`29c162ee7c9cfeba8168c4c517a4b73443bf6e87`
SHA256	`156d601412b0ea9fb1eca7e8854e8e174a6da341751ceb18978188d840c91670`
CRC32	`C85E29BC`
ssdeep	`3:xllxQCuGZBul/lwlUl6ltFlWlzVllzlHlxltntl+dl//hltntl+dl//:YG/utlOFih/7xlkdl/plkdl/`
Yara	None matched
VirusTotal	Search for analysis

Name	6e7d7bf6d46cb210_ll12_xaptemp.dat Submit file
Filepath	C:\Users\test22\AppData\Local\PROMAS\LandlordForWindows\Instance1\LL12_XAPTEMP.dat
Size	8.0KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`4c68602388a837468528d8ecb63c4001`
SHA1	`55c5dd8010b75e16f988f35ffecedfd44349b6f6`
SHA256	`6e7d7bf6d46cb21008735c61665c662316c380bac9a38c067832dc9bb506d1c3`
CRC32	`9BB31A64`
ssdeep	`6:g8G/ut6D0U38seAY/IlXqedAv/WY/swXV8OXeAQtl+:qhD0UMseAYAq7+YnV8`
Yara	None matched
VirusTotal	Search for analysis

Name	1ca5435a21ea5eaa_LL12_Ptable.idx Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Ptable.idx
Size	40.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`103dc3b86f99c9de8b82fd8299d11540`
SHA1	`05154d2c56228a46ee44866ef8b9b329548ff16c`
SHA256	`1ca5435a21ea5eaa3a375b961ce4444e567b0fed634d2782cd2adfee456463e3`
CRC32	`F53E5974`
ssdeep	`6:CG/ut+UWOFiGxXcFtzXw/7dlSjlSjlxCetOsNlxCet+s:9ZyiGxXcDXw/7tCetnCet`
Yara	None matched
VirusTotal	Search for analysis

Name	dbbc6e5576b22ebb_netinfo.ncf Submit file
Filepath	C:\RPromas\LL12_Training\NETINFO.NCF
Size	6.1KB
Processes	1936 (Landlord12.exe)
Type	Targa image data - Map 65536 x 65536 x 0 ""
MD5	`6da553bca507ea81bc50a5d0d5fe01ed`
SHA1	`2286155b9cef6814c0065d254b0902486efe045e`
SHA256	`dbbc6e5576b22ebb06ca8b66efaabae3407722b6945676dea2749d6620316a2e`
CRC32	`929A0550`
ssdeep	`3:VlOWuSA49WA/l/l:POWPnzl`
Yara	None matched
VirusTotal	Search for analysis

Name	95512dd81f4ead71_finish.dfm.miaf Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\mia1\finish.dfm.miaf
Size	1.9KB
Processes	2088 (Install_Rental_LL12_2018_4.exe)
Type	ASCII text, with CRLF line terminators
MD5	`bf999dde33e63ddefc93dcc78fa2ed67`
SHA1	`55b507bd0fbf3d2cc8801c8c383d434d9372e0c9`
SHA256	`95512dd81f4ead716affb1faae2c443ff0c749882db03985a8c0035ecee37ef4`
CRC32	`6C602A14`
ssdeep	`24:UuikSi+nfi0ZiFuEai/pZSruicvSi+pipUivuNsIi/pEaiDatfi/pTvSgREii/p5:U5ExAGVPbu1ZRMfkf3faWYxWqQch`
Yara	None matched
VirusTotal	Search for analysis

Name	2fbbe0a714dc7fd2_LL12_XAR.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_XAR.ibk
Size	176.5KB
Processes	1936 (Landlord12.exe)
Type	TIM image, Pixel at (9049,52068) Size=15680x53873
MD5	`9116684d8a4fca670a05f501072d6eb3`
SHA1	`dc0e9ab4a1b2f45f7882807776d6083ed15010b5`
SHA256	`2fbbe0a714dc7fd25aecc4f17536a4d4bd6a3f43340c683b1ab1d3a0908e4277`
CRC32	`63AA797C`
ssdeep	`3072:OIH6AG4KIOg6gmo64+AGcHEUG+mmeOGuFUG+mmeOL09KF:DDY`
Yara	None matched
VirusTotal	Search for analysis

Name	e5e64cdfc0b84506_LL12_MXASSET.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_MXASSET.ibk
Size	36.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`0a547ef081176767797ca20518dbda0f`
SHA1	`1244976f9316eeb8654885dce299de360551ce71`
SHA256	`e5e64cdfc0b84506ce10a4c98ebcb2afd3b0ebcc8673c131bb57313771db72d1`
CRC32	`75319B49`
ssdeep	`3:gltxQCuGZBul/lwnll6ltFlWlG/lvtl9lrVllzlHldlSjlSjlUitHks:g8G/utqn/OFiGxX5/7dlSjlSjlhEs`
Yara	None matched
VirusTotal	Search for analysis

Name	8d6916ee04a9952e_LL12_XGL.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_XGL.ibk
Size	404.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`779d43921954af9b8cb8d376280ccc06`
SHA1	`1f343820b26640c83feeedb6b5764eb1f38cb746`
SHA256	`8d6916ee04a9952e47b2d1454c7d2ce82678d30ddfbc302117a1b0d5f027deec`
CRC32	`96AFF942`
ssdeep	`3072:02HfXpPR3J/BXPRbMs9VQO9XwEOuoXldWEjbWxe+WXkEjq1AzEOfwdB+RIGVfokL:02H/1J+1wyWo+a0tiG`
Yara	None matched
VirusTotal	Search for analysis

Name	611be022c102eae7_LL12_XAR.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_XAR.ibk
Size	92.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`a290e854487577a5644df88f20780724`
SHA1	`c84cf064608af52025c3060c41bee47cde3a05a7`
SHA256	`611be022c102eae73416ca49fa1cec11363b802e65daaa2eed765b09a622e92a`
CRC32	`F856490A`
ssdeep	`1536:zfvLZDWDH6AG4KIOg6gmo64+AaAOZZBV:ZIH6AG4KIOg6gmo64+AG`
Yara	None matched
VirusTotal	Search for analysis

Name	6c33eb8296e0fcc2_LL12_ENTITY.idx Submit file
Filepath	C:\RPromas\LL12_Training\LL12_ENTITY.idx
Size	56.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`c97af680173eabfe980a4187dfcd0c29`
SHA1	`f6db9017b7e5323664917b864fd99f01d9b619e0`
SHA256	`6c33eb8296e0fcc222ae9d18e96ab9eaa83fcdbe4cc599d79cfd224c3420d8d5`
CRC32	`41297EB5`
ssdeep	`192:b5HxRGgjTjkxP0hrJ33Y1LMaByIIMbiJFKOVBtY9/UyQIB9Q4CYA1z6wdXdIm0mg:bpGQE0hdY1LNcIIhKeX4MyP9B6Yic6`
Yara	None matched
VirusTotal	Search for analysis

Name	4221122f99005536_readme.dfm Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\mia1\readme.dfm
Size	31.6KB
Processes	2088 (Install_Rental_LL12_2018_4.exe)
Type	data
MD5	`8db37e945737a642476551e6ea537ed5`
SHA1	`2579ecffd229f167398337358778e032aaae3e3d`
SHA256	`4221122f990055367be3af2ccd9a8a6a28e4e8a8889b74bd543c70e96ff63527`
CRC32	`540CC0C6`
ssdeep	`768:F2HXQ1NmO7ZDrkqzM+KGlm1ccHq7kBTT5DmoibfMR:FuXQ1NmO7ZDrkqzM+KGk1ccHq7kJT5Dn`
Yara	None matched
VirusTotal	Search for analysis

Name	12e1c09a1fd2b74f_LL12_UNITTYPE.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_UNITTYPE.ibk
Size	44.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`1d123eb23a5c1df2c6c8a61455c8fbf5`
SHA1	`2329c74ee191a1a166804fcbfcc97f1e6b34a170`
SHA256	`12e1c09a1fd2b74f2914ef61edd440cd6d93a64570bba6f412958628bdda1030`
CRC32	`1F183F50`
ssdeep	`24:U3pMSnRMP264stoh/NeoltyQ0X4aRex/WgDUJx8iCZbfpf:U3pMm0T4sYNeozyQm4W4+eUxK`
Yara	None matched
VirusTotal	Search for analysis

Name	e2307b964b01b031_Training Data.BKP Submit file
Filepath	C:\ProgramData\mia796F.tmp\data\The Professional Landlord\A056D2F4\3F943650\Training Data.BKP
Size	286.8KB
Processes	1052 (Install_Rental_LL12_2018_4.exe)
Type	data
MD5	`44ba9d2b0ab0eb5cae0d170994c1952b`
SHA1	`8dd78897c150e24f105584e1b5d8f4bb9ad39dfd`
SHA256	`e2307b964b01b03171d1aff8a9fe5fc0b89fd0d2e9f0b2b5f7778aa0d3a86073`
CRC32	`F1D563C8`
ssdeep	`6144:fxOHr0zPlvDZNT5+/BnLvLAHXZrjjdtgVE:fxU2VN0/BvAHXVjjdl`
Yara	None matched
VirusTotal	Search for analysis

Name	0bc55158632acdeb_LL12_PTABLE.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_PTABLE.ibk
Size	36.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`f7f52c4406fd589b67b0324c2904e75d`
SHA1	`247770ef91a9a308a6bd5971943de2f0bf10bd41`
SHA256	`0bc55158632acdebe88b5702a41e3968be43a700a72db952620f7f723f85b544`
CRC32	`7534F3ED`
ssdeep	`6:g8G/utqn/OFiGxX5/7dlSjlSjlxCetOs:qHyiGxX5/7tCet`
Yara	None matched
VirusTotal	Search for analysis

Name	5726dae6a0f21696_LL12_Acctsec.idx Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Acctsec.idx
Size	44.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`dd86fce3f7bd673eabe33a2a076039fd`
SHA1	`b2ddd9cd3d63344e64c4e121359f70a1fe75233f`
SHA256	`5726dae6a0f2169635862b9151c03d05ac557df3d11d029c54dd7ed26acd7213`
CRC32	`BABFB3FB`
ssdeep	`24:U3pZnRQnu3UNdjzLSrXwvKZKj6+KXyyFZCsCxoa:U3pPWdjzJUKW+K3FZaoa`
Yara	None matched
VirusTotal	Search for analysis

Name	815449326530289a_PublishingManager6.exe Submit file
Filepath	C:\ProgramData\mia796F.tmp\data\The Professional Landlord\A056D2F4\B21C7FEA\PublishingManager6.exe
Size	703.5KB
Processes	1052 (Install_Rental_LL12_2018_4.exe)
Type	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
MD5	`b13f7887f5e9ca7f7f65a8f973e562f2`
SHA1	`f3f77f1848e1ff026ce065da2dff882766fa6535`
SHA256	`815449326530289a0d546a8865f150ee0a2f02dc14a72557eaf035e3bb9fd920`
CRC32	`C69D0400`
ssdeep	`12288:ctBmLNWw9caAJyfRvuKc42OiNYc9wGdZcLiI6YH:caSyugiNYc9wGdZcWdY`
Yara	PE_Header_Zero - PE File Signature Generic_Malware_Zero - Generic Malware Is_DotNET_EXE - (no description) IsPE32 - (no description) Win_Backdoor_AsyncRAT_Zero - Win Backdoor AsyncRAT Win32_Trojan_PWS_Net_1_Zero - Win32 Trojan PWS .NET Azorult
VirusTotal	Search for analysis

Name	bba58b7649101da1_LL12_Bill.idx Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Bill.idx
Size	40.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`3700e4abc51024b95b331e771c78052e`
SHA1	`0c9f1df4caa87932be778bbeccccc74cb87099e5`
SHA256	`bba58b7649101da198b55a93dfeff42e3e3fdcbc9c35cce74713b9edd8ac591b`
CRC32	`FD5E374A`
ssdeep	`24:9mNnRf0nRf71/ijuz47Z8a/4Tggyk/EbFvrCuD8fd8Ogh2k/5XMUlc1QR:9m7fsf7TC6ggykWt1oaOgYk/5XQ1k`
Yara	None matched
VirusTotal	Search for analysis

Name	b5ae8f2ec5f61a70_LL12_ENTITY.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_ENTITY.ibk
Size	28.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`9582c880e578759ae293612eac9172c2`
SHA1	`891d4135dfe9e3aed31e879d8ef289c035336685`
SHA256	`b5ae8f2ec5f61a707eec4acee7e6b99b7bbfe846438959521f674e79a238dd21`
CRC32	`C819111F`
ssdeep	`12:ALky1z/7gdlRR1lxp9lBFH3llv3XHZtn3llXfXnpFHXll:AUnRf5HB9tJRd`
Yara	None matched
VirusTotal	Search for analysis

Name	26c93e6e455eee52_Install_Rental_LL12_2018_4.msi Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\mia1\Install_Rental_LL12_2018_4.msi
Size	776.0KB
Type	Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.1, MSI Installer, Code page: 1252, Revision Number: {EA5BECAE-CF5A-44BE-B357-0B73427F81A9}, Number of Pages: 200, Title: The Professional Landlord, Subject: The Professional Landlord Installation, Keywords: Installer, MSI, Database, Author: The Promas Landlord Software Center, Comments: All rights reserved, Name of Creating Application: InstallAware, Security: 0, Template: Intel;1033, Number of Words: 8
MD5	`113f04b65f4525b6ddc099f457007a48`
SHA1	`7e73c90065ec6307c1ea4d7c30317d97590dca4a`
SHA256	`26c93e6e455eee52378d53f30aeade618882a33740e99064675240998b01127e`
CRC32	`F5B29AB2`
ssdeep	`12288:ULMSxF8mXBKXsbzlDSJjQ8guBoN2KA2wKc7wMz7:ULMSxNW5BqPA2fc7wMz7`
Yara	OS_Processor_Check_Zero - OS Processor Check Malicious_Library_Zero - Malicious_Library Microsoft_Office_File_Zero - Microsoft Office File Malicious_Packer_Zero - Malicious Packer
VirusTotal	Search for analysis

Name	a6c2eea1cd73af95_ll12_xgl.dat Submit file
Filepath	C:\RPromas\LL12_Training\LL12_XGL.dat
Size	205.2KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`70b10e513aa1cfa8f8d592d3fbff0873`
SHA1	`5ffc5a7637d33a6cd67b6d1e3ca6ec737e155b97`
SHA256	`a6c2eea1cd73af95b7d56fcde694274cc5ac18185fdb85f6ff73591ff00871f7`
CRC32	`A02045CF`
ssdeep	`768:bbI9WrEiLDlJysdW2uul4VCVnfeCQh+eFSQRAQoQ7Q8QmQyQJQxBXMlewNwxlKjv:rJLDDys5jld2rhXMUJ`
Yara	None matched
VirusTotal	Search for analysis

Name	e2bf6c47c7e7bc1d_LL12_XGL.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_XGL.ibk
Size	176.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`ed979f1c3e6918035b25d49da23b3dfa`
SHA1	`91c01eb1a8ecde8351ec41e0e897ea56f5e793b6`
SHA256	`e2bf6c47c7e7bc1dc845502c9f9c59f3436448c8efdb9b12b2f9cc908cbfb6af`
CRC32	`259F936D`
ssdeep	`3072:H2HfXpPR3J/BXPRbMs9VQO9XwEOuoXld:H2H/1J+1`
Yara	None matched
VirusTotal	Search for analysis

Name	b880c39dae7dc2f9_LL12_STMTTEN.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_STMTTEN.ibk
Size	36.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`020676dabe8319fcf6e67bcc9afe45d6`
SHA1	`9afaa8765d2b28509fe5c84360075f5c5f99d4ad`
SHA256	`b880c39dae7dc2f9e84ee51638526603f7ea0a472930ad2d0fcbcc2033e012c7`
CRC32	`763D8272`
ssdeep	`3:gltxQCuGZBul/lwnll6ltFlWlG/lvtl9lrVllzlHldlSjlSjlD2lVks:g8G/utqn/OFiGxX5/7dlSjlSjlD2cs`
Yara	None matched
VirusTotal	Search for analysis

Name	f592954689585599_ll12_cxlease.dat Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Cxlease.dat
Size	12.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`a63da2ff61f06833c1421cf97379b90d`
SHA1	`be7a5da6213ae048f495124ef5df610779b2663c`
SHA256	`f592954689585599096712477ebebe28905aaa0c109e7b426552068bc651d4a7`
CRC32	`A92FCA6F`
ssdeep	`12:6PhKb0UMXUrPCd00dtNWHO5ro4slgxHitGR5:6PMuQUrfWuil6H2Gj`
Yara	None matched
VirusTotal	Search for analysis

Name	8e9da41d4629940e_LL12_TENANT.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_TENANT.ibk
Size	60.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`220c409ea08a8712adeec3de6b9c085c`
SHA1	`7c608be522e68d7d386525708b8fe60d4fd7f107`
SHA256	`8e9da41d4629940ec8f152f5dcf61ff551bcef7212a1192288ce3e226fdb1195`
CRC32	`F35E445F`
ssdeep	`48:YvpMBoO+6rYLsNJPyEy1B0xyv+RyljzwtbetBsw08q0/56lQNXv869OyW1G:Hd+sJPyEyTaC6ylw1ec98qFlQO1V`
Yara	None matched
VirusTotal	Search for analysis

Name	4713943c81ad7c2a_LL12_UNIT.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_UNIT.ibk
Size	28.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`a6d0c6b2c340b44c3faf539dd81b9e54`
SHA1	`b73869e280d75b4f9e3e262891bcc98dc26e2ca6`
SHA256	`4713943c81ad7c2aa195084ad694f4093a051f784dd736049ae9a365b01f91bb`
CRC32	`534727B6`
ssdeep	`3:qQCuGZBul/l/lelMl6ltFln/tNVllzlHlAtl+dl+84l+llKU1l+ll:hG/utikOF/tz/7ldl9plPl`
Yara	None matched
VirusTotal	Search for analysis

Name	347ba1ee80be7e8b_ll12_recrline.dat Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Recrline.dat
Size	10.4KB
Processes	1936 (Landlord12.exe)
Type	AmigaOS bitmap font
MD5	`c231203acfcc0fb0af8642c55e49aaf3`
SHA1	`340d50fad434797c8d0e6185cb7a5a1960abea67`
SHA256	`347ba1ee80be7e8bb38e99a679ba59c7f6af227e236efb3dfb9fd4965ce6bc96`
CRC32	`99FB0981`
ssdeep	`12:Mb0b0UMX2AY10t7AOaQ31nuw4aXg7CbSXG/:Mfm98cjzw4aXg7C7`
Yara	None matched
VirusTotal	Search for analysis

Name	6d5bf4e04f123c7f_LL12_MGROUP.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_MGROUP.ibk
Size	36.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`1105eaee9680bcdef0ca18dda2ae62b0`
SHA1	`5601bc19f545eb83bc2fe53c75e56b4ee5954c81`
SHA256	`6d5bf4e04f123c7f348b23983a41af1663864af76f3c3a9ede470e668ade74ec`
CRC32	`B6220258`
ssdeep	`3:gltxQCuGZBul/lwnll6ltFlWlG/lvtl9lrVllzlHldlSjlMlTkNks:g8G/utqn/OFiGxX5/7dlSjlMlI2s`
Yara	None matched
VirusTotal	Search for analysis

Name	d2267023e1f38fa5_wizard.dfm Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\mia1\wizard.dfm
Size	31.5KB
Processes	2088 (Install_Rental_LL12_2018_4.exe)
Type	data
MD5	`8aa68dee4b3d18226980261469a560ed`
SHA1	`e359a76c34d1f906690054a871c85dfa3a1c88a4`
SHA256	`d2267023e1f38fa5e44afdf55b6dd485e25f2f1a8ec82c9e93eb8f137f0fba2f`
CRC32	`3DCBD034`
ssdeep	`768:arHXQ1NmO7ZDrkqzM+KGlm1ccHq7kBTT5DmoibfH:arXQ1NmO7ZDrkqzM+KGk1ccHq7kJT5DI`
Yara	None matched
VirusTotal	Search for analysis

Name	d38ff13d749bfe5e_LL12_XGL.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_XGL.ibk
Size	24.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`0a527264d658162d22512c6ee590e5fa`
SHA1	`f4d541b81810b9d2f8b4ad7296a27d49a6f80f4d`
SHA256	`d38ff13d749bfe5e892b06541edbae75aacb1f8e2443c7a6186c315e53e783aa`
CRC32	`66F5BD52`
ssdeep	`6:QG/utiyOFiYmhe/uYG1lH/GXK8djL/nlh/7:rJyyiYmMmxlR8NT7/7`
Yara	None matched
VirusTotal	Search for analysis

Name	d1c3c0f90e4b03f1_LL12_MENU.idx Submit file
Filepath	C:\ProgramData\mia796F.tmp\data\The Professional Landlord\A056D2F4\3F943650\LL12_MENU.idx
Size	32.5KB
Processes	1052 (Install_Rental_LL12_2018_4.exe)
Type	data
MD5	`46015357d0ab2e497078325bacf7cdc3`
SHA1	`c31678b0466502fd87b5c52da51ad38e1199674b`
SHA256	`d1c3c0f90e4b03f1331f806dcba0d0beb67c6902061f0946241dcaa228a621c2`
CRC32	`30CC20BA`
ssdeep	`24:QKyRq8qiorKHA7WHbATByE8Db6FXSfsmBlZ1/1Esdl4/H6cUANF9:QbRCsA7WHQ8b0CflBl/1jbc7NF9`
Yara	None matched
VirusTotal	Search for analysis

Name	70547adddf4e3ead_LL12_Mxwo.idx Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Mxwo.idx
Size	68.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`a02e3318329d8aa47f411d180ae8be34`
SHA1	`4779cb074bb7ddb1572dae5b5eb262147576acab`
SHA256	`70547adddf4e3eada6a44fba77a910b5ca3bd19e45c67c40d7e11245a862d9b4`
CRC32	`2F28C9DC`
ssdeep	`24:JX0Rlb8jtX/ymozqv0IT56fuZyu2xUbaOfwdW:JXs5gb0P`
Yara	None matched
VirusTotal	Search for analysis

Name	f4bb9cf2e03832f2_mia.lib Submit file
Filepath	C:\ProgramData\mia796F.tmp\mia.lib
Size	592.1KB
Processes	1052 (Install_Rental_LL12_2018_4.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`6017c5f8ea6382684def62597535b277`
SHA1	`1ed79b319b3b0e47bd3b08c194b4cfe1a06f12a8`
SHA256	`f4bb9cf2e03832f23b407d4bdef1d44d4dfd6a510f2fdc1a6be263241914b55b`
CRC32	`D80D9FF8`
ssdeep	`6144:77mkzB4Do4JUqptRCwCzae0LYPpeBnVZ8w4toZAcLrJa/liSVHUPk:nmkzB+dtRRReCYRo38KLg/lIk`
Yara	PE_Header_Zero - PE File Signature Win32_Trojan_Emotet_2_Zero - Win32 Trojan Emotet IsDLL - (no description) Malicious_Library_Zero - Malicious_Library IsPE32 - (no description)
VirusTotal	Search for analysis

Name	859924c39d273718_icon.ico Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\mia1\icon.ico
Size	36.8KB
Processes	2088 (Install_Rental_LL12_2018_4.exe)
Type	MS Windows icon resource - 13 icons, 48x48, 16 colors, 4 bits/pixel, 32x32, 16 colors, 4 bits/pixel
MD5	`cc1c30a7193fc48716a3cc23d7e55351`
SHA1	`be076236e2996302ea55607aa3b28bc15e7ad306`
SHA256	`859924c39d2737184222b2a245086eb8bd257fce5544bdfb671bc5dbe055f43f`
CRC32	`E991C713`
ssdeep	`384:NkmJ+MjLbejEz7B06Ok0LRSPift+ri/ylsV1i:xdyj4K2GRCA+Wqlag`
Yara	None matched
VirusTotal	Search for analysis

Name	44bec559350a5a55_LL12_NOTEITEM.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_NOTEITEM.ibk
Size	32.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`6968d25574a1c53469c69ec328d89c59`
SHA1	`a5e1d8942840a38c4d2b4dc2f099268acb2cf303`
SHA256	`44bec559350a5a557e91940f1b4647ac874ec09a7bcc6e33e5ccb07e6b45489f`
CRC32	`9893E96C`
ssdeep	`24:Tzn1NBZXlDd1zbtlzJXBFfR3tWOkaNG+33kKtWOdtkb:TZNBZFzZldXBFfR9WOHUKtWO3kb`
Yara	None matched
VirusTotal	Search for analysis

Name	29cc0dd833a703ba_ll12_prolist.dat Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Prolist.dat
Size	5.6KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`e84d70967417dad02eeaf301becd6e5a`
SHA1	`28efd6eabf02857ec30b0a3e95bc88635b43cd16`
SHA256	`29cc0dd833a703bae7a0b5ec84a08d7692f112a932e7a7d3511ca1ab92003eb6`
CRC32	`5A033DD9`
ssdeep	`12:xZ0UMXWXzjTuMvgI+kpwtajIDDdfOn481oUtZu0/h+0qSXYuFDl/RmBDX:xMmXzO7DgiDdffGFZ+QXPTAX`
Yara	None matched
VirusTotal	Search for analysis

Name	ed0237a9b22211ac_ll12_latefee.dat Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Latefee.dat
Size	17.4KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`3e4f14cce4e196405580be869101b169`
SHA1	`30a2b73201ed2d865390f7bb96d4070150fefb97`
SHA256	`ed0237a9b22211accd539ba4f17febd078ab94b52edfcd69d5565c2cf0220fdc`
CRC32	`95C4BDEA`
ssdeep	`12:NTm0UMXWXzjOq9tOv1fyTFn+37RCGDP17t8Ng1lz9oS5nsLaaaaXTCpX/s/nlBaI:NhmXz99cApn61BzHWYXa`
Yara	None matched
VirusTotal	Search for analysis

Name	75821d26f9ea5bc2_LL12_Partner.idx Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Partner.idx
Size	48.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`d148bbf434fab9b40a324e73dba323a5`
SHA1	`c0d1caae61ef85845d272105a469d6c31d74db69`
SHA256	`75821d26f9ea5bc2cee372f1af0fe9d8689226ff5d6d9e5734319357a9c823a5`
CRC32	`378E2C77`
ssdeep	`6:kG/ut2Vl/mOFiGxXcFtzXAmDXA08t+yf/7dlSjlplb8sNlbkds9lrgUaC0m4Mu/U:XZP+yiGxXcDXxDX09f/73vBC0Bp/`
Yara	None matched
VirusTotal	Search for analysis

Name	000a50af0b49ae26_LL12_VENDOR.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_VENDOR.ibk
Size	48.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`e438a21c2111d98c1f2b4a78a11cbd1c`
SHA1	`6cd84bbe2bc7d324a49b0f453274db272436a618`
SHA256	`000a50af0b49ae264fc4042431afd435b0c93f108b71e0c1b01ff7be2cd62ed9`
CRC32	`9A2C9D75`
ssdeep	`24:XxjMien3FgRxteSfTPmots8LbytgmuttbYAUFc/Lu1h:XxjMi6F2NfT+oX/ytgm0lIqLi`
Yara	None matched
VirusTotal	Search for analysis

Name	48773438df2bc062_LL12_ACCTSEC.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_ACCTSEC.ibk
Size	32.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`6ad4f1ba59dafadee8357b764d05f922`
SHA1	`422be8854d0139c3d52a7ca008be47c921e61087`
SHA256	`48773438df2bc0628a6199ec5c3d12a2fa4ea7ee69ca2503c2f8760ceef4559f`
CRC32	`DF872B7B`
ssdeep	`6:YG/utlOFih/7ldl9plPladl9o/KkkGf/:TIyih/7ldlRQdl2/0G3`
Yara	None matched
VirusTotal	Search for analysis

Name	3040f1d12b48219f_LL12_UNIT.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_UNIT.ibk
Size	32.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`831e8c1cccb4f55a07ba6e63feda7cd9`
SHA1	`6a326abdae6c64c29dfecfbf1e099ea2d5afa146`
SHA256	`3040f1d12b48219f474ffa8ed79e06a3227ab7784da18c8e750f28e14f7bd489`
CRC32	`4D2B8FE7`
ssdeep	`3:xllxQCuGZBul/lwlUl6ltFlWlzVllzlHlAtl+dl+84l+llKU1l+llk+e+wl+lk7V:YG/utlOFih/7ldl9plPlkPwsQ/s`
Yara	None matched
VirusTotal	Search for analysis

Name	9fc3c14c5909363b_ll12_owner.blb Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Owner.blb
Size	1.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`b802f7a9262d5c7bf502fbec8802d604`
SHA1	`5c068c5fc3589f58e8010c4f22e7c53cea2e7262`
SHA256	`9fc3c14c5909363b11132f9b3dec77a6335eb411ad8dc1f5bf6c19fab0283d9b`
CRC32	`BF4D6454`
ssdeep	`3:xllxQCuGZBul/l3laGLrOADJb1u+owLAcFW8WGkRHqxeKEX0//zlDlV+HF9U1AJr:YG/ut3PbmgTFmAxJ+0XFK9yAJoIfW`
Yara	None matched
VirusTotal	Search for analysis

Name	9fa6d52d1949b154_LL12_XAP.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_XAP.ibk
Size	28.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`0d4280d0723c46ade8e8c858190e065a`
SHA1	`5c8a79d288571b5c0194a47a33f1e199cd4b881a`
SHA256	`9fa6d52d1949b154fe750bc3a3e6057261ba28b1e58c5bcd212e91caf323e94c`
CRC32	`FB3916BD`
ssdeep	`24:AknRf5HB9tJRdt/tl3Blv/v/RHt1tZBdHnl3/:A8f5HNfdt/tFP/RHHHF3`
Yara	None matched
VirusTotal	Search for analysis

Name	ccbeeeb8a7304def_LL12_XGl.idx Submit file
Filepath	C:\RPromas\LL12_Training\LL12_XGl.idx
Size	620.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`e59bf71e2ce4b8723bf1025bc41aca4b`
SHA1	`6c985d0b1bf1e1f37004c2b70d14ffe2dfe15b9b`
SHA256	`ccbeeeb8a7304deff5c08c99686d65dc36e111c2687d2a55f37372187d56e566`
CRC32	`48E50F81`
ssdeep	`3072:G2uxZEUJZvnPXNbMs9VkuLXYdCEjbWxe+qf0V0XVQ2q1AzEafwdBVh7qMRIGVf0l:G2rgIIyWo+dzZLGeQTiQbO1da`
Yara	None matched
VirusTotal	Search for analysis

Name	ca528320d34ee468_LL12_STMT.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_STMT.ibk
Size	36.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`e368259ae454204eb6021608bc67ce09`
SHA1	`5915d625bc14403bbfe0e4ca45ed985cf32b6836`
SHA256	`ca528320d34ee468eaa672292cd2b1155d279c9bc944b48359730e5e3fff6d5b`
CRC32	`915099EF`
ssdeep	`6:g8G/utqn/OFiGxX5/7xlkdl/plkdl/pl6EXlgglQs1+JXOm/:qHyiGxX5/74dl/wdl/mEDQE+JXP`
Yara	None matched
VirusTotal	Search for analysis

Name	afb1f959697d131d_ll12_acctsec.dat Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Acctsec.dat
Size	22.3KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`3d967e6623bf0fcfb073628ca179bcf6`
SHA1	`98fea76ea6af05996e80f1daad59ea611182c8f8`
SHA256	`afb1f959697d131d0d8fcb00b22b2c7634d5b4d75bb55ef7f87564839eeee885`
CRC32	`830C2116`
ssdeep	`48:CPl6GzEB5szawvXePIfQZDu1uRinamY5DYGglb:i6ZwzBPePIfQVu1uR/ON`
Yara	None matched
VirusTotal	Search for analysis

Name	db975b0c3f9c6b42_LL12_ZIPCODE.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_ZIPCODE.ibk
Size	28.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`57ce433cbe0b38bd45dace47b14a6ddb`
SHA1	`e9f5649e419dda77d12faede7207f2cf8129061a`
SHA256	`db975b0c3f9c6b42bc0ff96e399b24fa5acf0ac3a03dce5a01354b0b8b2acad8`
CRC32	`9F293D5A`
ssdeep	`3:qQCuGZBul/l/lelMl6ltFln/tNVllzlHllltntl+dl+84l+llKU1l+llV1l+1l//:hG/utikOF/tz/7llkdl9plPlP1l/`
Yara	None matched
VirusTotal	Search for analysis

Name	d0a41a2d4417913c_LL12_XARBL.idx Submit file
Filepath	C:\RPromas\LL12_Training\LL12_XARBL.idx
Size	32.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`2c36abdbe114edb492edadba0dad400a`
SHA1	`30bf0d21f0b889bfe3329a13332b76be0469cec5`
SHA256	`d0a41a2d4417913c14b1ba55a64af718d00df05f7884372218263aeb0cbcc71b`
CRC32	`33EC6381`
ssdeep	`3:xllxQCuGZBul/lwlUl6ltFlWlzVllzlHlmlltl+dl+84l+llKOln/O3aPK+lrl:YG/utlOFih/7mGdl9plzx/OKya`
Yara	None matched
VirusTotal	Search for analysis

Name	7502942eee8772a1_dbisam.lck Submit file
Filepath	C:\RPromas\LL12_Training\dbisam.lck
Size	924.0B
Processes	1936 (Landlord12.exe)
Type	data
MD5	`62dfbf2feb7cd2d0597126799bff493e`
SHA1	`c067b40a839f6bbb7ba2fd85c0528bf5c5d2b335`
SHA256	`7502942eee8772a11c2fa525fc3ffac7c0027dd85c8ac9e828d30119873adad7`
CRC32	`18E68F2B`
ssdeep	`24:NmI4f7+oBprsbJ9rBEXIUzOIWFIzXh/6Dy+L:qV41BE9BNzXhmy0`
Yara	None matched
VirusTotal	Search for analysis

Name	ea4eaff09db195a8_LL12_ENTITY.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_ENTITY.ibk
Size	24.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`36cfa36d99d46846660d352626aa487c`
SHA1	`ed3ddf24760006a920253d83863a87be0df20966`
SHA256	`ea4eaff09db195a88c6f23583400f4230e8421420587aa4bb2e73a499a994f9a`
CRC32	`EC1A6EDB`
ssdeep	`6:XG/utbtqOFiGxXcFtzXAmDXu08tH5eltRmZ/7:eRyiGxXcDXxDXu3H56tRW/7`
Yara	None matched
VirusTotal	Search for analysis

Name	4b6701a195afaef5_VIRGINIA.INT Submit file
Filepath	C:\ProgramData\mia796F.tmp\data\The Professional Landlord\A056D2F4\B21C7FEA\VIRGINIA.INT
Size	619.0B
Processes	1052 (Install_Rental_LL12_2018_4.exe)
Type	ASCII text, with CRLF line terminators
MD5	`8133a7621e4ff8bc857ebbc7fa249a83`
SHA1	`0dfcc2f7cf771ec4ef438145a4888f3b5f6e25a7`
SHA256	`4b6701a195afaef5a8e2c720fdcf4ae0a5615aa9680ec8e920dec422f26a016f`
CRC32	`3DA8DB62`
ssdeep	`6:bOAdFMYaN9HJ9GvtHVOxIBX0IpH1F7IOIhUksxHJFPHLVdsF53LHF2HFpA2WbT1k:i3NlX4103IH1RiBsxTEopa1+dSIv`
Yara	None matched
VirusTotal	Search for analysis

Name	7a7a84109b70043f_LL12_XJl.idx Submit file
Filepath	C:\RPromas\LL12_Training\LL12_XJl.idx
Size	40.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`b1109eecc76089c216e81ac541c6a683`
SHA1	`0b0f21eb21f95a1cd9033f4a744b51923ff0e308`
SHA256	`7a7a84109b70043f70eb59b3c9a63749fff67b7efa7eb212acd2c8547f01d72f`
CRC32	`D6895C9C`
ssdeep	`6:CG/ut+UWOFiGXRJZf/7xlkdl/plkdl/pl+XDgl/Zl+XDgl/:9ZyiELf/74dl/wdl/KX0l/6X0l/`
Yara	None matched
VirusTotal	Search for analysis

Name	6416b337159b043b_PROMASCentral.exe Submit file
Filepath	C:\ProgramData\mia796F.tmp\data\The Professional Landlord\A056D2F4\B21C7FEA\PROMASCentral.exe
Size	649.5KB
Processes	1052 (Install_Rental_LL12_2018_4.exe)
Type	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
MD5	`e54f134c8a9d6e4079eefd4c177cf475`
SHA1	`16fb78314aa91f52a0a481335f10e2969f0851d7`
SHA256	`6416b337159b043bd3972c7f79a99be03afb5c599e59ce1590b84c9f5a481a4d`
CRC32	`1A0DBA89`
ssdeep	`6144:7DGoF9c/jP1WAdFDgQcaAJs1+SRvukzcgNpFl40wG0isO6y9/yY1Aht6BZNKbpEj:7NmLNWw9caAJyfRvuac4Dey7i`
Yara	PE_Header_Zero - PE File Signature Generic_Malware_Zero - Generic Malware Is_DotNET_EXE - (no description) IsPE32 - (no description) Win_Backdoor_AsyncRAT_Zero - Win Backdoor AsyncRAT Win32_Trojan_PWS_Net_1_Zero - Win32 Trojan PWS .NET Azorult
VirusTotal	Search for analysis

Name	87ac6b356a221cda_LL12_ACCOUNT.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_ACCOUNT.ibk
Size	28.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`5dee0e0fb5452741294c42bcd518a99e`
SHA1	`b4407e55c497d0113a86a189d5c275c29c33175d`
SHA256	`87ac6b356a221cda9f086f1515dce44f24e1878d674a33fc2bd3c5747ddfb27c`
CRC32	`9DC1FB01`
ssdeep	`12:ALky1z/7ddlRR1lxp9lBFH3llv3XHZtn3llXf:ARnRf5HB9tJ`
Yara	None matched
VirusTotal	Search for analysis

Name	05f113d0ffd9c290_ll12_mxwo.idx Submit file
Filepath	C:\RPromas\LL12_Training\LL12_MXWO.idx
Size	68.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`42ee32c0b0abd4b47fcd197b4906f67b`
SHA1	`aff9111a0ac13988fdde4a07a2649a56ccd3198c`
SHA256	`05f113d0ffd9c2902bdb8d1b57db6e4f3b9360e89b0caf0b053cf0b5f7da099d`
CRC32	`C9D6C02D`
ssdeep	`24:43X0Rlb8jtX/ymozqv0IT56fuZyu2xUbaOfwdW:iXs5gb0P`
Yara	None matched
VirusTotal	Search for analysis

Name	511eddad845bbb4a_ll12_extra.dat Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Extra.dat
Size	11.3KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`56e6baf010df0f36b7aedbc1f478ddea`
SHA1	`f7616f4b3e3483f0f49c1ffe20c618670c69f1dd`
SHA256	`511eddad845bbb4aebf3ec2cc512e0cefd457e7e4dcd91d4e0d0288087450c99`
CRC32	`6CCB94B3`
ssdeep	`192:rHOi3FGEWCAEx+GzWdpZZVP9mZHrkUMZMNIyv3DOsCc+DeUMxDu4xiWEfcK:rHOi3FGEWCAEx+GzWdpZZVVmZHrkUMZv`
Yara	None matched
VirusTotal	Search for analysis

Name	c0f64c9b44184af3_LL12_MXWO.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_MXWO.ibk
Size	40.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`129e4695a1143bc9f6e6d577884e3c9d`
SHA1	`0228b9a0a1ef483b1bd26c58eee330f06c3143de`
SHA256	`c0f64c9b44184af33c244d70a99879a8016982232c46cfc7104e178fcdba084c`
CRC32	`5198FE26`
ssdeep	`12:9ZyiGxXcDXw/7tymozqUBef08kTt8UlnK:9m5ymozqv0I`
Yara	None matched
VirusTotal	Search for analysis

Name	fef51dd65f4539ec_LL12_COMPANY.dat Submit file
Filepath	C:\ProgramData\mia796F.tmp\data\The Professional Landlord\A056D2F4\3F943650\LL12_COMPANY.dat
Size	10.5KB
Processes	1052 (Install_Rental_LL12_2018_4.exe)
Type	data
MD5	`c5bce4709af17789ac3d6195635ed0a6`
SHA1	`4072db73a28195637d7cdf514155c531ebbd52d1`
SHA256	`fef51dd65f4539ecbe5843c8daf3e95a13df6572e45dd78c00c15df0da8adcff`
CRC32	`04ACC766`
ssdeep	`12:qbcW5d//kwJJrK6q1bSnlU175F7XaP9J0P/zCJ2nLa:q9/MaJrE1by+WJ0nzC2nL`
Yara	None matched
VirusTotal	Search for analysis

Name	7d4be5de64f003e2_LL12_STMt.idx Submit file
Filepath	C:\RPromas\LL12_Training\LL12_STMt.idx
Size	40.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`ae9274f4cba6a5f63252a0d95ad1b6c7`
SHA1	`9c1e2afe4658133b6a0c0392894bda2a1685896a`
SHA256	`7d4be5de64f003e2096c4eb83565977e815f6be0933f231a4db04ba40ea5ff1a`
CRC32	`842900D2`
ssdeep	`12:9ZyiGxXcDXw/74dl/wdl/mEDQE+JXPZQFXRj7uo:9mEn4npCJXB8XRb`
Yara	None matched
VirusTotal	Search for analysis

Name	7309d7791954cc76_ll12_tenant.blb Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Tenant.blb
Size	2.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`2f42372cbfd2ac9f0b10c9cc84d2805b`
SHA1	`f537f46c248b233d2ffd7ce70a494e48b0ee28e8`
SHA256	`7309d7791954cc76f6e64cad1822f4c58a276c155a5e26724d55c4b3759046ab`
CRC32	`31F4DA25`
ssdeep	`3:LxQCuGZBul/lglklOleTvlj5k2XGNaz8GKlI1CBRNkVVl/OlNHEFN2FECFk2DLlf:CG/ut+sOaBWUlKTmVEWWtw`
Yara	None matched
VirusTotal	Search for analysis

Name	962a4924636154fc_LL12_OWNER.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_OWNER.ibk
Size	36.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`1a0889f5347c68fe6aec1dde05cf401e`
SHA1	`c781165aa019c64bf5568eca29fd55069ddc79f1`
SHA256	`962a4924636154fc6c67db4454833e9a85fa9ca0c1f585eed5e4edd9c53d9e42`
CRC32	`C954DCF5`
ssdeep	`12:qHyiGxX5/7zdlRClht0AZwuCP31XMwSVllW:q8fnRGt6uw8`
Yara	None matched
VirusTotal	Search for analysis

Name	0bd6d7c9b0fc7e14_dbsys.exe Submit file
Filepath	C:\ProgramData\mia796F.tmp\data\The Professional Landlord\A056D2F4\3F943650\dbsys.exe
Size	2.7MB
Processes	1052 (Install_Rental_LL12_2018_4.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`f7260bab2d83a409f8bcb5a3454a3113`
SHA1	`b627856457a50c8beb7d689d830fb7d067ce2cd4`
SHA256	`0bd6d7c9b0fc7e146a1d4decf21713cd27753837ff9ced8f14a27e531102deb6`
CRC32	`B60A4A1A`
ssdeep	`49152:eHsx7WNuaCL7S5Yz/sWLberqV1iob84UcSWfaT:eMx7W0aCLmYz/sU7viob84UcSWa`
Yara	PE_Header_Zero - PE File Signature Admin_Tool_IN_Zero - Admin Tool Sysinternals UPX_Zero - UPX packed file Malicious_Library_Zero - Malicious_Library IsPE32 - (no description)
VirusTotal	Search for analysis

Name	0e2defc9b470d3f9_installaware.png Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\mia1\installaware.png
Size	1.6KB
Processes	2088 (Install_Rental_LL12_2018_4.exe)
Type	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
MD5	`b7225a16daf9de1d514aefe567fdf2f5`
SHA1	`d6a00c526c425fcd5ef49b0c87814f2cf476cb59`
SHA256	`0e2defc9b470d3f9bd184d254493efad94ea0273c1fe17fc8fc651d47b01734e`
CRC32	`F6B111E7`
ssdeep	`24:X93kpZjQLmEcxtIwWXPAGpKpkZcks41xdrqUaBdJbYfxpJgx7YWg/uLwdCnq:N3Yj8mEcxywiPrpKpNMdr07SxgSt`
Yara	PNG_Format_Zero - PNG Format
VirusTotal	Search for analysis

Name	5c9ac434882340d4_LL12_UNIT.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_UNIT.ibk
Size	40.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`2528ad2d11a48a8fd02519e8358f8f58`
SHA1	`aa45be4a00157fafcb18f6d30c422d69c9e9a0b7`
SHA256	`5c9ac434882340d49a759bc1f634607d945dca417370d956a83862e2875c28ce`
CRC32	`BB27206B`
ssdeep	`12:9ZyiGxXcDXw/7ldlRSP2/sYlgZtMXa6w57/AqX7mLkZb/WjaAqX:9mBnRSeEIgTua6w5X78kVu+RX`
Yara	None matched
VirusTotal	Search for analysis

Name	b3472c5cc322b137_LL12_Recrnote.idx Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Recrnote.idx
Size	36.5KB
Processes	1936 (Landlord12.exe)
Type	AmigaOS bitmap font
MD5	`75c1de8d755971b1ffe918c35e0ffceb`
SHA1	`34aa71651e0a2a131973f814a7eb7daaf70bcda3`
SHA256	`b3472c5cc322b1374d9ba73e38858c5ac1e7a8694e57a77bce23cb000ac36765`
CRC32	`08A1CF1B`
ssdeep	`6:VG/utqn/OFio5v/Uxl/J/7xlkdl/plkxzXflFWlA+pZIlClP:MHyimIl/J/74dl/YulAYIlCl`
Yara	None matched
VirusTotal	Search for analysis

Name	b2a8dfeec466408b_LL12_XAR.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_XAR.ibk
Size	68.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`463c8098e55f82fc052fd99649487a8b`
SHA1	`5f6138f67a1324ed8fec03b55c8056a90a8fdf97`
SHA256	`b2a8dfeec466408b62480b99539a2d31ca061dede1238aef1ca0e28a0626e3a5`
CRC32	`1C2AF88D`
ssdeep	`384:1/hl/heFFSOecRH0ZnXysOecRH9qEH6AG4KIOgTWgmo64+ANH1/y/6cIX:vfvLZDWDH6AG4KIOg6gmo64+A116A`
Yara	None matched
VirusTotal	Search for analysis

Name	6d5e6d0a7bfd0d70_LL12_PROPERTY.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_PROPERTY.ibk
Size	40.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`235bf8ee90c9a0c8ee9933e3c4bf9123`
SHA1	`c7d79c481f780162c1b418ee5a17d33c1fd32905`
SHA256	`6d5e6d0a7bfd0d70ac87d9b2806a2f4e436a2d6ff5cc7e327f6a8f860735d1be`
CRC32	`A3E54F3F`
ssdeep	`6:CG/ut+UWOFiGxXcFtzXw/7dlSjlp//jlb8sNlms:9ZyiGxXcDXw/7a`
Yara	None matched
VirusTotal	Search for analysis

Name	6d2aed812d8d971b_Release History 2015.pdf Submit file
Filepath	C:\ProgramData\mia796F.tmp\data\The Professional Landlord\A056D2F4\465BD09E\Release History 2015.pdf
Size	202.3KB
Processes	1052 (Install_Rental_LL12_2018_4.exe)
Type	PDF document, version 1.5
MD5	`0c88f32a5354fde064c84b3bcb10e87b`
SHA1	`52af5db256986f76f4f448a3710b595691e89678`
SHA256	`6d2aed812d8d971bd1498441bf843a5d204cc0a964759fe1ce3dc2e8ba2e6a2c`
CRC32	`D7B272D8`
ssdeep	`6144:2nWvLIo00+C6iKnwJ+Hd7IcgoDW7lPRt710Nt2whBll:2ngBtX6i/zcgoqJ5tKNrz`
Yara	PDF_Format_Z - PDF Format
VirusTotal	Search for analysis

Name	ed97f35ffd313fc7_ll12_rentcopy.idx Submit file
Filepath	C:\Users\test22\AppData\Local\PROMAS\LandlordForWindows\Instance1\LL12_RENTCOPY.idx
Size	24.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`f45bcaf33362b07d93c411f951d0f7f2`
SHA1	`e3624a4dd0c758675f43be755115d831aff566f5`
SHA256	`ed97f35ffd313fc7295b1f51f04c35c5cf038bdbcc792eaf82289c59e9f28078`
CRC32	`EEF08276`
ssdeep	`3:gltxQCuGZBul/llltlWl1lYA//lblFlFlzVllzlHl:g8G/utf1iwAd/7`
Yara	None matched
VirusTotal	Search for analysis

Name	79c09b2b6f715af1_ll12_cxsline.dat Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Cxsline.dat
Size	8.0KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`e58dce37819a1c29e8e6e601663f3729`
SHA1	`0cb51c513dd5db137c6e41df6ef8abfc664ff240`
SHA256	`79c09b2b6f715af10c0a4042841f8f46e042ff271cd1659ca716565ead8dd525`
CRC32	`066007E3`
ssdeep	`6:68G/ut6p0U38X2AY/19Acp2stlUt/TUnAItcawlA+1nu/:6Php0UMX2AY10t7AOaQ31nu`
Yara	None matched
VirusTotal	Search for analysis

Name	d30c36fce94908af_LL12_RECRNote.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_RECRNote.ibk
Size	32.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`5359546588b1b8b8e8f4c14916acb6d3`
SHA1	`e576e9de4e9f5cd5dcc2f24d0fc817ab5b13d327`
SHA256	`d30c36fce94908af825d1b563c84623ae067222ba9f9ebbd3375ce83bfa40ab8`
CRC32	`DB33D271`
ssdeep	`3:xllxQCuGZBul/lwlUl6ltFlWlzVllzlHlxltntl+dl//hltm+lsEUl/ll:YG/utlOFih/7xlkdl/plkxzX`
Yara	None matched
VirusTotal	Search for analysis

Name	ef979a36bf879a74_LL12_Mgmtfee.idx Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Mgmtfee.idx
Size	40.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`873907593c402b1aa51a042ea256629a`
SHA1	`6d95ab4d6f62a716ce3b9595a658f5fa5b776bf1`
SHA256	`ef979a36bf879a7491ac6d0fe370648ff4530936257f9789e6d9331819adafe2`
CRC32	`03738EA8`
ssdeep	`6:CG/ut+UWOFiGxXcFtzXw/7e2N+Whl0on+7sdN:9ZyiGxXcDXw/7e2N+WhlTn+gH`
Yara	None matched
VirusTotal	Search for analysis

Name	2b3a78f4393103a1_ll12_mxwocopy.dat Submit file
Filepath	C:\Users\test22\AppData\Local\PROMAS\LandlordForWindows\Instance1\LL12_MXWOCOPY.dat
Size	3.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`688be3148f56e373e12afabc2e0fbe88`
SHA1	`b0915e3ef1a91ebcfe10e1f004150f8eccd94776`
SHA256	`2b3a78f4393103a175060ae2da16f6ffa646a052bf4091e32d130b10455ea9eb`
CRC32	`30BEBF18`
ssdeep	`3:gltxQCuGZBul/lkl5lll9lllayt8lUFt/tSklnpsAY//nzklXgDXVU03ehntlX/X:g8G/ut6mm0U38seAY/IlXOq0atl`
Yara	None matched
VirusTotal	Search for analysis

Name	0e5415be7b044a3e_LL12_LATEFEE.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_LATEFEE.ibk
Size	36.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`09e3118f389000880849832c36572a24`
SHA1	`faa547524cb85ecbac8f49d12226e33df741b6be`
SHA256	`0e5415be7b044a3e1719173bfdf3d140300234ac48f7d32eeea0ff9e5aa9dbd3`
CRC32	`FC24DB3C`
ssdeep	`3:gltxQCuGZBul/lwnll6ltFlWlG/lvtl9lrVllzlHl+lttl/Qlttl/Ql+Ql1nkv1m:g8G/utqn/OFiGxX5/7+IIIQ8N`
Yara	None matched
VirusTotal	Search for analysis

Name	2f916c6d0cc57092_Autocorrect.adu Submit file
Filepath	C:\ProgramData\mia796F.tmp\data\The Professional Landlord\A056D2F4\3F943650\Autocorrect.adu
Size	53.2KB
Processes	1052 (Install_Rental_LL12_2018_4.exe)
Type	data
MD5	`b970522fbd0f90109b7772b08bda849b`
SHA1	`0a1166d86043c7ee72feb4652285c738253635d6`
SHA256	`2f916c6d0cc5709223b3149b4e457e9f5e89cd22e128d616e2fe3d6d2d8e6bd7`
CRC32	`DEEF5A96`
ssdeep	`768:vezQvOo8sBd1p3F7rkNYpqewbwNNY3RYnCsoVD:myOo8sBd1pQOw3+Cs+`
Yara	None matched
VirusTotal	Search for analysis

Name	4bbdd25791f823e3_ll12_recrxfer.dat Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Recrxfer.dat
Size	17.2KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`3587424b330e1a58c27a86d60327d8d9`
SHA1	`b21dce8d818bcbc316d9964f202a67388612aadd`
SHA256	`4bbdd25791f823e3c31480a1421c8ebc6f5828fcb7f3601a0e5d40fc9790bcc1`
CRC32	`4C9A2132`
ssdeep	`12:6b8yX0UMXWXzjQZXJxZ7bo4JX9lGwlMK1OjU3ZobUcuex8oR2n:68mXz+rZ7fZ9lN1TpoYcHU`
Yara	None matched
VirusTotal	Search for analysis

Name	480bee1573a87e37_ll12_stmtten.dat Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Stmtten.dat
Size	18.0KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`676efe176f0c713b3cece405993159c4`
SHA1	`716cadd185b85435b93faaf38a03f46fdfe345c7`
SHA256	`480bee1573a87e3762181d1eae2b9807285d3d29b507a48bd00c0814e0057ea7`
CRC32	`6F29F21D`
ssdeep	`12:6bkmyX0UMXWXzj+g2CXhOdZRm1Pk6p/p1BR21R/+m1fxgys2Aw/R/vR/5ZaaaaaX:6DmXzalUhOTRV6p/p1zi1fxgV4Zx`
Yara	None matched
VirusTotal	Search for analysis

Name	ee893fda097443c9_ll12_recrcopy.dat Submit file
Filepath	C:\Users\test22\AppData\Local\PROMAS\LandlordForWindows\Instance1\LL12_RECRCOPY.dat
Size	8.0KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`ad12f1021d2957200518bf16fee45ae7`
SHA1	`564151c05ef58c1b44fa57ea15344f507cf46a1d`
SHA256	`ee893fda097443c9776aa06d7b3d8cf7c09be77f761aa80cd4e547de42275899`
CRC32	`58D0D1F2`
ssdeep	`6:g8G/ut6llm0U38seAY/IlXR9Acp2stlUt/TUnAItcawlqXRI:qhG0UMseAYAx0t7AOaQqXR`
Yara	None matched
VirusTotal	Search for analysis

Name	00fd246e8c2e5c79_progress.dfm Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\mia1\progress.dfm
Size	42.5KB
Processes	2088 (Install_Rental_LL12_2018_4.exe)
Type	data
MD5	`5c0175d2688d0942c2616e689b52c5f9`
SHA1	`200fe3d32b6a593538f61e3d1aa2a860bc40a2ea`
SHA256	`00fd246e8c2e5c79a0753c5bfd0d37a21c1cc0b272312c127e0775db94669392`
CRC32	`0B0CD064`
ssdeep	`768:3JHXQ1NmO7ZDrkqzM+KGlm1ccHq7kBTT5DmoibfR:3hXQ1NmO7ZDrkqzM+KGk1ccHq7kJT5Da`
Yara	None matched
VirusTotal	Search for analysis

Name	5f7600dfdb031986_LL12_Recrline.idx Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Recrline.idx
Size	32.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`525ec79f2ded4f5fb4973a3e49c26893`
SHA1	`a10d2fada0d78187c4aaa88f5dd43ef74968e189`
SHA256	`5f7600dfdb03198644e93610be69784975c8d94732737d1ed55bf6866db2d666`
CRC32	`1648E477`
ssdeep	`3:xllxQCuGZBul/lwlUl1llVllzlHldlSjlnss:YG/utlT/7dlSjlnss`
Yara	None matched
VirusTotal	Search for analysis

Name	a80e8c5db09e3ae7_ll12_acctcopy.dat Submit file
Filepath	C:\Users\test22\AppData\Local\PROMAS\LandlordForWindows\Instance1\LL12_ACCTCOPY.dat
Size	3.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`170e843d8234f71ff50df7b55852dfdf`
SHA1	`57a90027f31112b113630c4d422c6017766b1747`
SHA256	`a80e8c5db09e3ae78e0837f13daa240a68ce3f4ffac71d6881e0b4ec1153c315`
CRC32	`64540B72`
ssdeep	`3:gltxQCuGZBul/lklRnllltlm8lUFt/tSklnpsAY//nzklX1GKQlXvULl1znllN/X:g8G/ut6hI0U38seAY/IlXLpR`
Yara	None matched
VirusTotal	Search for analysis

Name	439ebc90bd85c570_ll12_mxasset.dat Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Mxasset.dat
Size	17.3KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`bc2de124b7a62e4fc23cc058df4c3955`
SHA1	`d43e3ede5512d8da680e38513332e2e47bc8c508`
SHA256	`439ebc90bd85c5706c970920e53d5380b56b78d71641b6f2e3685584298d6210`
CRC32	`07C40A0C`
ssdeep	`12:6bVA0UMXWXzjZAVdvtwdttZGAydXg5nMNNQleXWw/IGq3/TNCm3t3X16:6NmXzF8dvadttVy2nMNGeXWwQTZ`
Yara	None matched
VirusTotal	Search for analysis

Name	58ced632fb136f2d_LL12_XAR.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_XAR.ibk
Size	80.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`6760147475896a2ac7dea95b8f75dce5`
SHA1	`aace43cdf39ecab8bd21c3c5f53f637fc041cfc4`
SHA256	`58ced632fb136f2dc1785b94d82f885fb45ec2beef72195d1237d982dce0d977`
CRC32	`1D97B229`
ssdeep	`768:NfvLZDWDH6AG4KIOg6gmo64+A116AYdE+:NfvLZDWDH6AG4KIOg6gmo64+AaAOZ`
Yara	None matched
VirusTotal	Search for analysis

Name	509bf11782bcbf46_LL12_Catgcode.idx Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Catgcode.idx
Size	36.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`0f674024c298c0a690783e07a7947c0e`
SHA1	`2ea6bc7f6e936c4ccfe24ec8df28ec1ccca4fb24`
SHA256	`509bf11782bcbf46656dd4810dda4f09ce66eea09d9921c53c42cc039f101db2`
CRC32	`572BABC3`
ssdeep	`24:qWnRf5HB9knRfA0LOFyLKX37a9JqDIZJK6ubUHjikjrHL86ERVHXppKHxlk:qCf5HcfAKOr8qDIzZuYmKrmXDC`
Yara	None matched
VirusTotal	Search for analysis

Name	1a920fc079b36d1e_LL12_UNIT.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_UNIT.ibk
Size	48.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`7cc0a1b79cf7e028285cf8be268d8766`
SHA1	`811489223fc39115ca1645e31aebe0beef06c556`
SHA256	`1a920fc079b36d1e6842935838caf47ea79cf6933c40bba846e68d820d983464`
CRC32	`0153E9E3`
ssdeep	`48:XxjM/SagTn64IguWTkEJ2sgBwamurz15:bagTAgu0ki2s8wM`
Yara	None matched
VirusTotal	Search for analysis

Name	0abf09a17b07e7db_LL12_ACCTSEC.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_ACCTSEC.ibk
Size	36.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`f8177fd7045e80b12eec0e13115ad9fe`
SHA1	`2154c73ac7cbe011f1841e1547ef3f6ff08b659a`
SHA256	`0abf09a17b07e7db96a82cd1a8fb036a406c6c5c2e57327cdcb39d871130434f`
CRC32	`35C794E4`
ssdeep	`12:qHyiGxX5/7ldlRQdl2/0G3USkndjuqB9R8rX4Z/:q8ZnRQnu3UNdjzLSrXw`
Yara	None matched
VirusTotal	Search for analysis

Name	ace3b005b4b4960e_LL12_Mxwoline.idx Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Mxwoline.idx
Size	32.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`019ad4416c80f71810a71a11f8111140`
SHA1	`cf6421f7a1f05b79ac0bf6b9c60a16daea0f2d80`
SHA256	`ace3b005b4b4960e07d17ee9475993cbd11f837a2580fe22af28c3f5373f7f67`
CRC32	`9FA708AF`
ssdeep	`3:xllxQCuGZBul/lwlUl1llVllzlHlIllntl+qGll003ll+KsWlkKvz//l:YG/utlT/7IGzMCWKsWlp`
Yara	None matched
VirusTotal	Search for analysis

Name	5fa57c21a12c434a_ll12_extra.idx Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Extra.idx
Size	32.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`8249a9f8adb201a4baa4632b9efe2ae2`
SHA1	`521c1175babd36505fdd2e7867d96494b48a50b5`
SHA256	`5fa57c21a12c434aea45fb1d12b7104f2dde49e3528b5a7a9187f01c4cfae474`
CRC32	`25F44108`
ssdeep	`24:8yyRq8qiorKHAYn6Eobim65iKfV+G8SU2sy3cvU1lHbtAkR:8jRCsAa65iL9GUD5`
Yara	None matched
VirusTotal	Search for analysis

Name	1e5f3ad66f38e261_ll12_recrnote.idx Submit file
Filepath	C:\RPromas\LL12_Training\LL12_RECRNote.idx
Size	36.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`16c593c26c8e415c69746f72f3f46000`
SHA1	`c8e0c72b7cef1e66b4f445fe1c9ab8bcd6d96c65`
SHA256	`1e5f3ad66f38e26104cb11414e84e4aef95fec50978a87ac632639019b97f987`
CRC32	`0A0A58EA`
ssdeep	`6:g8G/utqn/OFio5v/Uxl/J/7xlkdl/plkxzXflFWlA+pZIlClP:qHyimIl/J/74dl/YulAYIlCl`
Yara	None matched
VirusTotal	Search for analysis

Name	c4dd1b1758cad395_LL12_UNIT.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_UNIT.ibk
Size	36.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`c71164cee7962023a4ec8364addbf2d7`
SHA1	`01647e6f7a4e9c40d70bfc76d30d772d24a24bf4`
SHA256	`c4dd1b1758cad395608eaf6a811ebe6944697c4839d9505db5e4c7fa2afd1a23`
CRC32	`7C3079B3`
ssdeep	`12:qHyiGxX5/7ldlRSP2/sYlgZtMXa6w57/AqX:q8ZnRSeEIgTua6w5X`
Yara	None matched
VirusTotal	Search for analysis

Name	eaafda6ea1e5af67_ll12_charge.dat Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Charge.dat
Size	11.8KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`181d5b906242e6b00fa197960f60a07a`
SHA1	`7c65b81753a92ead1406da96f652f569349bafc3`
SHA256	`eaafda6ea1e5af67016025b43d7a05d20ce30123ad6ba09fc64dcca816124847`
CRC32	`3864D1DD`
ssdeep	`48:yFGzp9XyFyPcmb77FwLZiuhaAXgK167EHZIRwS5lls+SNtdkog9:OuCFy0mLSliIgK16p7ONm`
Yara	None matched
VirusTotal	Search for analysis

Name	f27a9b4d46863278_componentstree.dfm Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\mia1\componentstree.dfm
Size	32.5KB
Processes	2088 (Install_Rental_LL12_2018_4.exe)
Type	data
MD5	`f1ba2d0a20cf4290fcdb45b3cf54840c`
SHA1	`ec808ebc2563d3d00866bde0aff4059c3c995c03`
SHA256	`f27a9b4d468632780547e3fc26a59993b3108a18cb096852a302577bfa4c6f2f`
CRC32	`D11BC520`
ssdeep	`768:pJHXQ1NmO7ZDrkqzM+KGlm1ccHq7kBTT5DmoibfTE:phXQ1NmO7ZDrkqzM+KGk1ccHq7kJT5Dt`
Yara	None matched
VirusTotal	Search for analysis

Name	bc8ef3164dacdd63_LL12_SystemLock.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_SystemLock.ibk
Size	28.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`1e8aa9128b9d4a3355d95256b2c65dba`
SHA1	`f8fd7eea890989e571d4dfa8986290ed8f2d2b07`
SHA256	`bc8ef3164dacdd63d4c293982c0a4b809d721a9039edd8d89131505dc8b83291`
CRC32	`7E4A4AE5`
ssdeep	`3:qQCuGZBul/l/lelMl6ltFln/tNVllzlHl+lttl/:hG/utikOF/tz/7+`
Yara	None matched
VirusTotal	Search for analysis

Name	cb551638cf1b94d2_LL12_XGL.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_XGL.ibk
Size	24.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`30d2344c966835dff5553d7939c36616`
SHA1	`aab115c4c4f733350c95cb2549fa55c2f370853b`
SHA256	`cb551638cf1b94d22b0fa085d905e72a12ca95e16da142538896a29fb6659988`
CRC32	`76CB83FE`
ssdeep	`6:68G/utZ1iOFiYmhe/uYG1lH/GXK8dc/7:6P8syiYmMmxlR8m/7`
Yara	None matched
VirusTotal	Search for analysis

Name	6286d7a74a587d36_LL12_TENANT.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_TENANT.ibk
Size	68.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`88d56c45e045ff34fa82cda4d86e5509`
SHA1	`23f706b1c876ead8daa508227f5924e58c2c1eff`
SHA256	`6286d7a74a587d36702f26c55c1836869aff7ad0d8324f7b6d3c531850ae0f85`
CRC32	`E5722AB6`
ssdeep	`48:iXsMBdO+6rYLsNJPyEy1B0xyv+RyljzwtbetBsw08q0/56lQNXv869OyW1GKqWMu:2U+sJPyEyTaC6ylw1ec98qFlQO1VOWM`
Yara	None matched
VirusTotal	Search for analysis

Name	76852cfe06e0aad9_ll12_xbl.dat Submit file
Filepath	C:\RPromas\LL12_Training\LL12_XBL.dat
Size	34.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`cfe0c52de6cb19f63705d391efb80dfb`
SHA1	`7f63490a5dcfa26070b0fa2127eb477f1f9f6fc4`
SHA256	`76852cfe06e0aad96b4bd23e685649661333a9881c8c12aa0dffe4acbc2cbafb`
CRC32	`322B564F`
ssdeep	`384:3MuB7N4nLDbgu30sjyJ20UvbDnonocdkom+W:3MWaDzEvMUocKovW`
Yara	None matched
VirusTotal	Search for analysis

Name	5d3ed44d8dad0984_LL12_PARLINE.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_PARLINE.ibk
Size	32.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`0c3a07f3123d65348adbcfb966d63016`
SHA1	`7950694c920102cbfcece0d31ca1a338808eddb8`
SHA256	`5d3ed44d8dad09840732f500e855998c283c4527389935ba92f4bac38c70019c`
CRC32	`6DBA04C1`
ssdeep	`3:xllxQCuGZBul/lwlUl1llVllzlHlxltntl+dl//hltP0Mll+iVX/l//:YG/utlT/7xlkdl/pl5hWiVX/l/`
Yara	None matched
VirusTotal	Search for analysis

Name	03f906d6cff671f4_LL12_MXWO.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_MXWO.ibk
Size	48.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`659271d0f3551de4841b43ce0f0da28b`
SHA1	`0381fecdf0b8cd12c8fe581d4203b680c3c054f8`
SHA256	`03f906d6cff671f450fd56a0ac7a3c7f20dd75e9a317490fb70c47c6eeba0041`
CRC32	`A4685B44`
ssdeep	`12:XZP+yiGxXcDX6nz/7tymozqUBef08kTt8UlnKp56fX+:XxjlVymozqv0IT56fu`
Yara	None matched
VirusTotal	Search for analysis

Name	e3dc15fc621ed0a7_LL12_Advsched.idx Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Advsched.idx
Size	32.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`bfbf5e554e167ca9a81289d770a6061d`
SHA1	`3709ecca386c5008472161ce232f06783d69a45e`
SHA256	`e3dc15fc621ed0a7ee5f9f5bae9546cfedbb0be9ef003732aff177d3850e650c`
CRC32	`069708C8`
ssdeep	`3:xllxQCuGZBul/lwlUl6ltFlWlzVllzlHlmlltl+dl+84l+llKOlM+ldlkRUl+ylm:YG/utlOFih/7mGdl9plzuykRUs2`
Yara	None matched
VirusTotal	Search for analysis

Name	d032973ae78f7786_LL12_ENTITY.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_ENTITY.ibk
Size	24.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`5a346bbc71d2e0d1850c2b2502c51703`
SHA1	`2c7e7d8642401a7eaf4e2b832ad06fe731d57b7a`
SHA256	`d032973ae78f7786699bbd7a50026d8c1f1981a954af1d40d9b83dea7cf78ffb`
CRC32	`0F12647B`
ssdeep	`3:CllxQCuGZBul/lnlGl6ltFlWlG/lvtl9l8IAtlzlntlAmXhlvtlalzVllzlHl:mEG/utdsOFiGxXcFtzXAmDXuh/7`
Yara	None matched
VirusTotal	Search for analysis

Name	ac44f5d17dafd4fa_ll12_bill.dat Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Bill.dat
Size	8.4KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`beb1f62c63cfe8e13fcd99979d324ef5`
SHA1	`0ff22e5ebace3c36afba5ddab2197e5fb7742ab5`
SHA256	`ac44f5d17dafd4fa38d228096e01f1de702941d78d864c3f6215deb2f9854bd9`
CRC32	`FC0679E9`
ssdeep	`48:L/GzYsQ/81CV3tI/dCAv5llllOQM2lggBxGq:bAQ/UCVdIFCI7/IQM2l1TB`
Yara	None matched
VirusTotal	Search for analysis

Name	30497f0c98d19a96_LL12_PARTNER.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_PARTNER.ibk
Size	32.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`f64431ac5ee18a188fc473cc5b6c78c5`
SHA1	`0d53677331cb70d5a9c9a5241f272ecafb645362`
SHA256	`30497f0c98d19a966acc80d4ad144b68fe97f3e94464740f608184a360ec7cee`
CRC32	`731C8118`
ssdeep	`3:xllxQCuGZBul/lwlUl6ltFlWlzVllzlHldlSjl:YG/utlOFih/7dlSjl`
Yara	None matched
VirusTotal	Search for analysis

Name	364bc68e604fa60b_LL12_XGL.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_XGL.ibk
Size	24.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`23ced06d5b21c724573bead85f424476`
SHA1	`28f35465b4aa9f638751366c599ea2403d121a14`
SHA256	`364bc68e604fa60bf71507480ec3d8650506a34b9019df5a1c98915e2e050f0d`
CRC32	`AD95C864`
ssdeep	`3:fl7QCuGZBul/lil1Ml6ltFlWlYzi/lX3lvlppL2l//SlYlmk/l/l0llzl9llllWn:uG/utIyOFiYmhe/uYG1lH/GXKS/7`
Yara	None matched
VirusTotal	Search for analysis

Name	8b4271c35dcbf123_ll12_account.idx Submit file
Filepath	C:\RPromas\LL12_Training\LL12_ACCOUNT.idx
Size	40.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`f98eb9082b6455c67dcd28e0e66c2469`
SHA1	`c6e85d9ef09f9e461124a7c66d96b20793767b00`
SHA256	`8b4271c35dcbf12375b1d2d0c4265dd7b51ccc902fa294dc5a910b2dff7b6d37`
CRC32	`18032B4D`
ssdeep	`96:q5HNW5HNlneahXyCTMvUgy3EalEyTtJdx9k:q5HI5HDnHyOMvUg15yTtJ5`
Yara	None matched
VirusTotal	Search for analysis

Name	2aede9b62ab9b8ca_LL12_XBl.idx Submit file
Filepath	C:\RPromas\LL12_Training\LL12_XBl.idx
Size	56.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`656fbed5fd4beb531095569db0e76166`
SHA1	`78f0037ceecfba35e0523ce08aa0f0cdfe7a6653`
SHA256	`2aede9b62ab9b8ca77bc1a417269e0f8857ac62bf79464708691d0f0adc6800f`
CRC32	`C8534F1E`
ssdeep	`192:KBGxyxl76TuuRHqPOvIikTfL/bgtOIcuvC5gd3H2sg+IBot8Rpg2IBot8RpgAsg:K4ExEvX4fL/bihd3H2szQkgpHQkgps`
Yara	None matched
VirusTotal	Search for analysis

Name	68d709626b5bca37_LL12_Zipcode.idx Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Zipcode.idx
Size	40.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`75b54ddb900fed425ca1218e1ca00c2e`
SHA1	`fccfac2c7d078b7e39165eccd9827c0b375e5654`
SHA256	`68d709626b5bca373f8cb3f35837f4356c7714219071aa1de007359bcfbb4142`
CRC32	`04410456`
ssdeep	`48:9nIsjmfERgst3/380yZ6ul3luzTX1/ze/QYeZGMt3TEdfYzsX:ZcERD5eZDizs/2IMhdwX`
Yara	None matched
VirusTotal	Search for analysis

Name	9a63aba942634b36_LL12_TENANT.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_TENANT.ibk
Size	40.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`c86ca4f24556f2f023267bbe8efad124`
SHA1	`e80d174513b91989ed7e3c711de5397f29d0d555`
SHA256	`9a63aba942634b36e7e0b4225121aefa01083b470cb4901921d0e5102b7255ba`
CRC32	`75ECCCE8`
ssdeep	`24:9mMnRO2kiabrBYsaLsNQqN5ya+8rydLRB0x:9mUO+6rYLsNJPyEy1B0x`
Yara	None matched
VirusTotal	Search for analysis

Name	06575827721fd174_LL12_MANAGER.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_MANAGER.ibk
Size	44.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`dcd6630ad51d4ec5a8c2c5bce2076919`
SHA1	`c5e9a9b36fe9a33663c2a5d0defba784e9578a51`
SHA256	`06575827721fd17468171ad8afbdf9df36be3d4448f1f2a86fe10ad90dd262e6`
CRC32	`1E8D7ADC`
ssdeep	`12:U3HEyiGxXcDXxDXC/7+IiQHbJgmZh+SSKX+H4:U3pMZUJ9h+pa+H4`
Yara	None matched
VirusTotal	Search for analysis

Name	212c2416703c2658_LL12_MGROUP.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_MGROUP.ibk
Size	40.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`79273bd9cc646eb047c93ef869754d58`
SHA1	`df3b6743187c5c38cb64ba92e0505f62c9bd495b`
SHA256	`212c2416703c26582764ed57306748a35557503f13ecd55b905f13742ce2cd9b`
CRC32	`7CDFA15B`
ssdeep	`6:CG/ut+UWOFiGxXcFtzXw/7dlSjlMlI2sNlfls:9ZyiGxXcDXw/7`
Yara	None matched
VirusTotal	Search for analysis

Name	3c4b0caf790c8d83_LL12_ZIPCODE.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_ZIPCODE.ibk
Size	32.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`a436dabcf6cb0f717d8bdf86965b66a8`
SHA1	`2546ae560161fbf1ff4d2a2161ec761e3eba530f`
SHA256	`3c4b0caf790c8d83a6a8c229198406ac125e380b64f31c93cbcca19d2b24bc2c`
CRC32	`76F7C117`
ssdeep	`24:TInRfts9zF14i80istFW4/3lyP0LeZ6k8HJU:T4fERgst3/380yZ6u`
Yara	None matched
VirusTotal	Search for analysis

Name	0ab406ad6f1abd7b_LL12_MENU.dat Submit file
Filepath	C:\ProgramData\mia796F.tmp\data\The Professional Landlord\A056D2F4\3F943650\LL12_MENU.dat
Size	17.3KB
Processes	1052 (Install_Rental_LL12_2018_4.exe)
Type	data
MD5	`9aab4c7dff09e34dc929f9c99cd3a3ad`
SHA1	`4b8e81c45bdee05a4cbd8de5629e0310bda40a8a`
SHA256	`0ab406ad6f1abd7b64e0d3af9891710a94eed3f48de83378a4460f0a8070e004`
CRC32	`AB48AB75`
ssdeep	`96:e8oGVp6+ZVOR9a8roj7qNuqDlIjHVCqF8JRfkqSDPOiiznQdDbFDxizIZ7if:Roep6rzf8Pyl+1CqF8LWPiTQhbI4m`
Yara	None matched
VirusTotal	Search for analysis

Name	07708f9b4876d2dd_LL12_ENTITY.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_ENTITY.ibk
Size	52.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`f4aaef30bb03db1b03a14f034ffdd950`
SHA1	`5cc367601907181de1618b700036386d0f013e90`
SHA256	`07708f9b4876d2dd5107f5a5744ab1ad3d86c9f8ee0eebdb7f2f29f88664911c`
CRC32	`1FD1C044`
ssdeep	`192:+5HxRGgjTjkxP0hrJ33Y1LMaByIIMbiJFKOVBtY9/UyQIB9Q4CYA1z6wdXdIm0mx:+pGQE0hdY1LNcIIhKeX4MyP9B6`
Yara	None matched
VirusTotal	Search for analysis

Name	bb423cbf6070dd8e_LL12_CHARGE.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_CHARGE.ibk
Size	40.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`ea919ef45e10fe6d7fd93120c8ed8c1f`
SHA1	`7a492dd105f93df0a80cf74d5fadf3f0c4d112da`
SHA256	`bb423cbf6070dd8e16841edf63d07c7d1a58816bb47834e0797bb6eb4b6d3c57`
CRC32	`8E55226A`
ssdeep	`24:9mvnRfCOHaw4LjuXtj6/ff/igM282WVoD8Lc8TVEfvihw/htWmlcIMQtQhb:9mJf75yfqgM28HYHf6C/rWPIMwQ`
Yara	None matched
VirusTotal	Search for analysis

Name	d703be387aa3f2cc_LL12_Unit.idx Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Unit.idx
Size	52.5KB
Processes	1936 (Landlord12.exe)
Type	AmigaOS bitmap font
MD5	`85c680eed2220a4bc93611a33dbbbf4d`
SHA1	`8b516f36c29fa6c3a0d11efa00ae4d6bc9b4172b`
SHA256	`d703be387aa3f2ccaf693de2235cc277a2ce88ed13f00e8aff8d61c86ee68a08`
CRC32	`2750968F`
ssdeep	`48:MPpMaRCsAtagTn64IguWTkEJ2sgBwamurz15Oo+:kwVtagTAgu0ki2s8wMG`
Yara	None matched
VirusTotal	Search for analysis

Name	ed50635652c5e71d_startmenu.dfm Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\mia1\startmenu.dfm
Size	32.6KB
Processes	2088 (Install_Rental_LL12_2018_4.exe)
Type	data
MD5	`79a6d4ac0d44492941dbf1bcf729fce0`
SHA1	`b9a4351ba665d5f190fdceaac2f278214e402628`
SHA256	`ed50635652c5e71dd4ee1fbeb5b64e312235d3215c519e2da2966ff44c61745b`
CRC32	`5DD24555`
ssdeep	`768:27HXQ1NmO7ZDrkqzM+KGlm1ccHq7kBTT5DmoibftPV:27XQ1NmO7ZDrkqzM+KGk1ccHq7kJT5Di`
Yara	None matched
VirusTotal	Search for analysis

Name	6f2630c787c6fbd4_ll12_tenant.dat Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Tenant.dat
Size	91.7KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`b29d1c1ace177fe2a3afc88963bd860e`
SHA1	`f9f80cac84ec38e81e30c79b1dd30bf54238ab17`
SHA256	`6f2630c787c6fbd4e97bc5d7cb1c1559fd7496fa105ad3ec476611e77746421c`
CRC32	`F208F79E`
ssdeep	`192:ZthntwxpkOCBE0QvnYhIaqJF6aiaku9+ZFZSPZJM8b+:FhNQvnYhIBJF6ika+XkPP5+`
Yara	None matched
VirusTotal	Search for analysis

Name	43f98f9685a4d94c_ll12_charge.idx Submit file
Filepath	C:\RPromas\LL12_Training\LL12_CHARGE.idx
Size	44.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`787346b23c28ba98986330c419762843`
SHA1	`b065352e494c294da883ebbc972cfe71745738b2`
SHA256	`43f98f9685a4d94ce2b7616b8a88866d508226dae5d3230201d6e3d5eaf92ffd`
CRC32	`7F6ACE2F`
ssdeep	`48:U3p40f75yfqgM28HYHf6C/rWPIMwQWLeT:E75yfLMREfbT/QW`
Yara	None matched
VirusTotal	Search for analysis

Name	6a59b1e985a1a2a3_LL12_ZRLIC.idx Submit file
Filepath	C:\ProgramData\mia796F.tmp\data\The Professional Landlord\A056D2F4\3F943650\LL12_ZRLIC.idx
Size	32.5KB
Processes	1052 (Install_Rental_LL12_2018_4.exe)
Type	data
MD5	`1653d014e01ff9b697fea69527237030`
SHA1	`db1fd3e7223d3282821696cd8b55047f4ef6b209`
SHA256	`6a59b1e985a1a2a3966cc27b6a32bd3631307dbb70db5440cd0951f4958368b8`
CRC32	`B3BA4FF7`
ssdeep	`6:mEG/utG1OFih/7ulsHWzJz/SQOQ/qkgieAxqiS58AKB7fpl8LRXGG:Ubyih/7PcR/ZRqONqiorKHAlT`
Yara	None matched
VirusTotal	Search for analysis

Name	0e31362092b62142_LL12_MGROUP.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_MGROUP.ibk
Size	32.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`dd7975d0af6092f375814652ac8bac27`
SHA1	`59e5c81be3e1e226316190d7131ab2c377c36cf0`
SHA256	`0e31362092b621425348b0692283ce99151dc64b386261caf8d07af365fd6245`
CRC32	`F6C1EBFC`
ssdeep	`3:xllxQCuGZBul/lwlUl6ltFlWlzVllzlHldlSjl:YG/utlOFih/7dlSjl`
Yara	None matched
VirusTotal	Search for analysis

Name	654b360e67209066_LL12_XGL.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_XGL.ibk
Size	24.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`9a3892060866cf85b8d981cdac22be01`
SHA1	`e9829a5d84ca3275ce01df8d641a3441f5288fa2`
SHA256	`654b360e67209066e3e847cd1809843030c8495fb4703b3684e58a1eab09dc08`
CRC32	`DCB26D38`
ssdeep	`3:UQCuGZBul/lhllltMl6ltFlWlYzi/lX3lvlppL2l//SlYlmk/l/l0llzl9llllW7:XG/utbtqOFiYmhe/uYG1lH/G1/7`
Yara	None matched
VirusTotal	Search for analysis

Name	bf6e6e19b06fa187_ll12_reclock.dat Submit file
Filepath	C:\RPromas\LL12_Training\LL12_RECLOCK.dat
Size	1.2KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`6dd851edc0e801c1fdfc9c6ccf328259`
SHA1	`2f083518f0b045754a76f8232a0f5783215e9b64`
SHA256	`bf6e6e19b06fa187ea015a2e84d35455af228f683b927c2cd3e93432074cb4f5`
CRC32	`71AFE793`
ssdeep	`3:gltxQCuGZBul/lkl0lll9/lxZq8lUFt/tSkl:g8G/ut60l/9DI0U38s`
Yara	None matched
VirusTotal	Search for analysis

Name	63a3a21213c294aa_ll12_partner.dat Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Partner.dat
Size	43.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`dabfa7a71d03d95eabaf050fe8fb92b2`
SHA1	`605c59a89aa188a6bce0fc75f7c4a36cc6963b12`
SHA256	`63a3a21213c294aa1fd03fa17316dc563816717f59bfe64783a07b98f5aaf205`
CRC32	`08011C6C`
ssdeep	`24:z85NmXzOf0ZGVPExjcz2KzjK367hlh/DWs/uTEczfleJY/h8SXVkVV+C0A:z2GzA2oIDt6fJD/CbcUkVVP0A`
Yara	None matched
VirusTotal	Search for analysis

Name	76aa59963903f029_lang.loc Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\lang.loc
Size	158.1KB
Processes	2088 (Install_Rental_LL12_2018_4.exe)
Type	ASCII text, with CRLF line terminators
MD5	`6d2ea67b5892dc26d5abd01608bc086a`
SHA1	`14bc24724509e44918252d155fa3e7152fe232f3`
SHA256	`76aa59963903f0299cda780a1da7583227cb4c84f4eff213a101841ce02c39c7`
CRC32	`939E55D4`
ssdeep	`3072:VmLCDQ9xl64bNmso7f4vqp/Mp+WD7UB4/YQfl:s`
Yara	None matched
VirusTotal	Search for analysis

Name	d4a6a701a092ebc5_LL12_VENDOR.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_VENDOR.ibk
Size	28.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`6273ef6d1c82a91fef4009240bcb96b8`
SHA1	`69f87260f9c691bc49e6f8bac205d38350a175fd`
SHA256	`d4a6a701a092ebc51ae4901222476c99340596775a7fc953580d513416b760f5`
CRC32	`858D3CAB`
ssdeep	`3:qQCuGZBul/l/lelMl6ltFln/tNVllzlHlklttl+dl+84l/l:hG/utikOF/tz/7kedl9`
Yara	None matched
VirusTotal	Search for analysis

Name	c480acf14b7cd819_LL12_MXMTYPE.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_MXMTYPE.ibk
Size	36.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`2ec2ebd4fa705a39dc23607e2f66abe7`
SHA1	`c69e3926a173b8bbc62f2d75c2f518df7a96de56`
SHA256	`c480acf14b7cd81960a051971abe5fe05a88e6d2a91c4882befd69182ebbe21c`
CRC32	`7AE2591A`
ssdeep	`3:gltxQCuGZBul/lwnll6ltFlWlG/lvtl9lrVllzlHlXtl+vtl+Gx//lPmJnt/lVkX:g8G/utqn/OFiGxX5/7e2GZ8Dk3/`
Yara	None matched
VirusTotal	Search for analysis

Name	fb740fc2a2e0edab_ll12_unit.blb Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Unit.blb
Size	2.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`220850663b4adff84580989f5c0df373`
SHA1	`8c784fc05cb86d28386a008f249b284d23babe18`
SHA256	`fb740fc2a2e0edab57e596ebd2330c49616ddde659f0449a4ba57552de76e137`
CRC32	`F5D70243`
ssdeep	`12:T6eYHuwTDQAY3aOZ9AJAVaDDKWJQHuwTDQAY3aOZ9AJAVaDD7DD0F:Tj+bYpqOKeED7YbYpqOKeEDnDDG`
Yara	None matched
VirusTotal	Search for analysis

Name	4fbbd690c654c555_ll12_account.dat Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Account.dat
Size	60.8KB
Processes	1936 (Landlord12.exe)
Type	PGP encrypted data
MD5	`694ba44b1e2b5226dce847d7561675fc`
SHA1	`32466cf08ce242f54394a07b3e21cd57f8844a5a`
SHA256	`4fbbd690c654c555ca10292c124ad017ec2ff4adf85d82f0d8d760b3a8ef9219`
CRC32	`139ABAA3`
ssdeep	`96:Jvm2HbhSFADtLT8k/3qK1ikMdiIRdwufKkZWdu94in4eGgaM6L0tdHaMQ/Axjydp:mK/uEdGe0S/qg4`
Yara	None matched
VirusTotal	Search for analysis

Name	99264b33fd6dd4d5_LL12_Xap.idx Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Xap.idx
Size	92.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`4695c4ff27e5df22623fe06890580d79`
SHA1	`4e2af6545c8b404b79b4d2d59c5d5576124c380d`
SHA256	`99264b33fd6dd4d518979a0cbce122ad7fd25777b9e4a1d80f20d003ddb63898`
CRC32	`63E3C90E`
ssdeep	`384:V/c/gbFrHDEzTi/yd6QIHD5rLIdb9wfj5djCOcmuDx69qe:HHIzBdrIHFLIdbMj5drtu`
Yara	None matched
VirusTotal	Search for analysis

Name	02e1506604de74b9_LL12_XBl.dat Submit file
Filepath	C:\RPromas\LL12_Training\LL12_XBl.dat
Size	34.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`4937ee19c79c9f601f5f392fc0166515`
SHA1	`ad94506ed2a3bb3da16d381738594bf8520eb461`
SHA256	`02e1506604de74b949fb966d049e1b8dff842cba2fe9bb80d698c95759de58b9`
CRC32	`44C3E3AA`
ssdeep	`384:9P0Zrg+M/2LCag8jhE6EAeyy919rbDxfmrxqeTCVq13Po:9PBmB1EhRzZmseTCV4/o`
Yara	None matched
VirusTotal	Search for analysis

Name	db1c3a93a00a46c7_licensecheck.dfm.miaf Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\mia1\licensecheck.dfm.miaf
Size	502.0B
Processes	2088 (Install_Rental_LL12_2018_4.exe)
Type	ASCII text, with CRLF line terminators
MD5	`d312f2fdc09193a04578d688a2ca292d`
SHA1	`54bd3aa4cc72e68fc613a4227cada7ad702d795e`
SHA256	`db1c3a93a00a46c77f3e8d19c5da4d42c54ce58c9eb71b586e512abee2d46967`
CRC32	`9F22E4B3`
ssdeep	`6:aHi6GKuMtrk86i6euMtrkeuN82du+wg4RBN82dukU3ekRBN+ukYRBN+u+wgAuN+J:0IMtgfjMtgxINIkU3lkimkU3MIkT`
Yara	None matched
VirusTotal	Search for analysis

Name	5d1abc8b155c9a2b_LL12_UNITTYPE.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_UNITTYPE.ibk
Size	40.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`3b6984b707b5c935e4db803b2d3188fc`
SHA1	`f5d121cef8632e540df6b7ac4445ceb011e23307`
SHA256	`5d1abc8b155c9a2b6a4a483c0cb5e98571a579d16f8859b408f6e860a695a959`
CRC32	`B8A2B418`
ssdeep	`12:9ZyiGxXcDXw/7UdlRMP2/xE4jYtHIh+UN9l+ojT3ttHSQ0X4aRex0:9monRMP264stoh/NeoltyQ0X4aRex`
Yara	None matched
VirusTotal	Search for analysis

Name	8858f6590acddc2e_LL12_Integration.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Integration.ibk
Size	24.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`3ee828142736e7d5ae634bfbcadf0efe`
SHA1	`58fd52503f87e717cf01af8daa5b4117416358f9`
SHA256	`8858f6590acddc2eae9c168f444955e60d49951b27b0606330ed4004aa2e16d1`
CRC32	`D10D2D49`
ssdeep	`3:xllxQCuGZBul/lklGlNlE//lWlzVllzlHl:YG/ut6y0tih/7`
Yara	None matched
VirusTotal	Search for analysis

Name	36747a3c64d9435b_ll12_unittype.dat Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Unittype.dat
Size	20.6KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`3e37ff5d9b650850a04065c9c0510d11`
SHA1	`4973454e57e40af2894ac09989e090c829fa8437`
SHA256	`36747a3c64d9435b6dc70a75126757dd7e6115a02e7a5c61b76ca029d85d2d89`
CRC32	`36F01CD4`
ssdeep	`48:DE/ENGz+Xu2XbvthNFCnknEExLI7f9tlGJOWuo2aHB9:w4U2XbVnFC7JPGgnaHB9`
Yara	None matched
VirusTotal	Search for analysis

Name	d6b3481e4785916f_ll12_xartemp.dat Submit file
Filepath	C:\Users\test22\AppData\Local\PROMAS\LandlordForWindows\Instance1\LL12_XARTEMP.dat
Size	40.2KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`1a10ecf7121fe3cf6fa38ac1277a77fe`
SHA1	`6fa1be3226045c5923f398ba3b3590c6fe1b4112`
SHA256	`d6b3481e4785916fd1b9f267d28127c148a6ba6ac861666d2fa50f703c0278d6`
CRC32	`E3AC2BB5`
ssdeep	`24:9f30nsIsG0Gek7cmCTZM3X32XXqagy1P3ekNz1lnA:9f3QGkofq3Xbyhekp1l`
Yara	None matched
VirusTotal	Search for analysis

Name	1872ca04f20a641c_install_rental_ll12_2018_4.par Submit file
Filepath	C:\ProgramData\{EA5BECAE-CF5A-44BE-B357-0B73427F81A9}\Install_Rental_LL12_2018_4.par
Size	1.1KB
Processes	2088 (Install_Rental_LL12_2018_4.exe)
Type	UTF-8 Unicode (with BOM) text, with CRLF line terminators
MD5	`85e07bc4b43ca8a7dc070b64e0f76860`
SHA1	`18f39b300f91e92b6414e015d2dfdd1abaa95d8b`
SHA256	`1872ca04f20a641cd84306a1663cee58f946c8e20874cb8f614da4ce8a09b823`
CRC32	`991876BA`
ssdeep	`24:apTeAIDNJVMqL+hte4e83VMqL+H2963zOy/uM3NIv+:apTeAIDNJPLWtRe83PLQ290zOy/uM3a2`
Yara	None matched
VirusTotal	Search for analysis

Name	c9093915136025e3_LL12_Property.idx Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Property.idx
Size	48.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`60ec5018602ff20d7efa57d2a5ee9bc8`
SHA1	`1f922d6be7dd0ce71c39d8cab6fc4b66da620fcb`
SHA256	`c9093915136025e3fbd999008c664b620f2d2ce2641d425593434de81cc033c6`
CRC32	`CF1BE691`
ssdeep	`6:kG/ut2Vl/mOFiGxXcFtzXAmDXQ8t+yf/7dlSjlp//jlb8sNlms9l4LLFlUs:XZP+yiGxXcDXxDXD9f/7aQL`
Yara	None matched
VirusTotal	Search for analysis

Name	39c9b22ed31f75b7_instance.dat Submit file
Filepath	C:\ProgramData\{EA5BECAE-CF5A-44BE-B357-0B73427F81A9}\instance.dat
Size	125.0B
Processes	2088 (Install_Rental_LL12_2018_4.exe)
Type	ASCII text, with CRLF line terminators
MD5	`e99e835e08b2a99700a26a2e49e986d8`
SHA1	`7a8522188bb173592c52e7390050c3f667ef2d8a`
SHA256	`39c9b22ed31f75b7f9e55e49c893ff4c1156acba3fec50b0b25ab25035e65a2c`
CRC32	`0DC96992`
ssdeep	`3:CvTyjphiBhSafVegZngmRjOFWJoSanLQgTitUdoMJBFUCv:CvkKXSasgeeOFFn0gsU6IBFpv`
Yara	None matched
VirusTotal	Search for analysis

Name	636e92c39696a5a1_ll12_letter.dat Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Letter.dat
Size	14.8KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`b971cd07233d0681d0b468fcc97d06f5`
SHA1	`38371fd68428775adfe2f7be0cadc15461be9aa4`
SHA256	`636e92c39696a5a1189d2c176e43bc7f7c049e89c3f87dfca5100727a54a188d`
CRC32	`67A3F790`
ssdeep	`12:n00UMXWXzji3m7A1qL/5kl1dRtl6g1pJ4wgKFOAlEb63aaaaX7pHAeVFOAlY/ha2:n7mXzG3m7VL/6l1dP14bKCveVzAO3Ct`
Yara	None matched
VirusTotal	Search for analysis

Name	5ab6bb3f2f724370_LL12_Integration.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Integration.ibk
Size	24.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`a7a5c48aba5411cdcf17a1d6dada40d7`
SHA1	`7e7a9ff2c73cc1ccc9cc27b30fe7675afa202ce1`
SHA256	`5ab6bb3f2f724370e47aab19b5568324b6fde0e3d2dbd605b59c71fa1ad7ec43`
CRC32	`CD3FBAF9`
ssdeep	`3:LxQCuGZBul/lmlllulNlE//lWl1Gm/E/SlllllllLAxgRA/l4llw/RllllllFVlh:CG/utUy0tismZl//MxLuo/7`
Yara	None matched
VirusTotal	Search for analysis

Name	355654c45f118a86_LL12_XJL.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_XJL.ibk
Size	36.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`49584952f57e37bd99b26bfed2fcfb91`
SHA1	`3fe36d3297ce506f0bec8c03a4d30b48c9df208b`
SHA256	`355654c45f118a86f5b09ba2ce3743b1ef9c6257c7127351d9560250387c8b22`
CRC32	`88764099`
ssdeep	`6:g8G/utqn/OFiGXRw/7xlkdl/plkdl/pl+XDgl/:qHyiEw/74dl/wdl/KX0l/`
Yara	None matched
VirusTotal	Search for analysis

Name	dce2e98a6a9e8720_LL12_Manager.idx Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Manager.idx
Size	48.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`e24b5d5b2a9a10b29958482552542872`
SHA1	`a4a9462c6c474b8dfd38ffdaa326fd778214ebd7`
SHA256	`dce2e98a6a9e8720fd0b25b13e6ca03cfa9fd7ad7c28389627f41b7fa6f7440e`
CRC32	`36804DD8`
ssdeep	`12:qZPRyiGxXcDXxDXi9f/7PcR/ZRqONqiorKHAlgiQHbJgmZh+SSKX+H4s:qx+MsyRq8qiorKHAPUJ9h+pa+H4`
Yara	None matched
VirusTotal	Search for analysis

Name	a3c1091497738c12_LL12_CHARGE.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_CHARGE.ibk
Size	28.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`28078943d2aa3251033bf9c4e87f1eef`
SHA1	`8c2c05df8fe0ed05847be78d3347e35920b39ebc`
SHA256	`a3c1091497738c127192b269ceb18cd8a24758926fb62fcc49cd8dc6b4daac74`
CRC32	`39A7B0DD`
ssdeep	`3:qQCuGZBul/l/lelMl6ltFln/tNVllzlHluntl+dl+84l+llKU1l+llV1l+1l+nl:hG/utikOF/tz/7Ldl9plPlP1l`
Yara	None matched
VirusTotal	Search for analysis

Name	0f663b0943011c5c_ll12_zipcode.dat Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Zipcode.dat
Size	3.8KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`948a222b15af26d092d7590e2d99f116`
SHA1	`8ca9482c11311d084ef99e966b4b5f0bd288741c`
SHA256	`0f663b0943011c5cb314731a1a72ea49bce8a369d27f7d6070373753d1ebabb4`
CRC32	`C2EEF50D`
ssdeep	`24:A3JN85cXE5Yvx01dw90iqvt93slLFcQOtmlh6lHLGgjEFpo:A3JN85tYGfwtetS9OUyLGgGp`
Yara	None matched
VirusTotal	Search for analysis

Name	8ce57782a4efdfc0_LL12_PROPERTY.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_PROPERTY.ibk
Size	32.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`b15ae747b2a3bd1b183ea95025dc0043`
SHA1	`3c860d0f8a403844a6b821d8386f23fd5388fb79`
SHA256	`8ce57782a4efdfc0f1c73defc2c33a1373dff1bcf6b6eee658a2aa557a2c1780`
CRC32	`AEACF76A`
ssdeep	`3:xllxQCuGZBul/lwlUl6ltFlWlzVllzlHldlSjlp//:YG/utlOFih/7dlSjlp//`
Yara	None matched
VirusTotal	Search for analysis

Name	512598dd0dcb0efc_LL12_PROLIST.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_PROLIST.ibk
Size	40.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`7220eb0095dc08b21a17d7d72a126158`
SHA1	`c85943f1df1a89909f49f937ed7bb8ce8c9f5b3c`
SHA256	`512598dd0dcb0efc3656c043060c2c65dc3840eeb061faed99ec67730bfa93a9`
CRC32	`BFCB3F12`
ssdeep	`6:CG/ut+UWOFiGxXcFtzXw/7IGzOY/ds8rrUKousQTdll/ZG/8SsqWOft:9ZyiGxXcDXw/7tg8HUKoenl/s/8St`
Yara	None matched
VirusTotal	Search for analysis

Name	6c1ca49422deeca5_LL12_LATEFEE.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_LATEFEE.ibk
Size	32.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`5fda5f7bc1b1ab489e2ad44006d1d0e4`
SHA1	`a6b570d973e0e246c43629082968b03368561b6e`
SHA256	`6c1ca49422deeca56fcb353e4b6cd5e7222813e47880363881a69572cddca814`
CRC32	`D23CEDDB`
ssdeep	`3:xllxQCuGZBul/lwlUl6ltFlWlzVllzlHl+lttl/Qlttl/:YG/utlOFih/7+I`
Yara	None matched
VirusTotal	Search for analysis

Name	02967f583aafae11_ll12_doccopy.dat Submit file
Filepath	C:\Users\test22\AppData\Local\PROMAS\LandlordForWindows\Instance1\LL12_DOCCOPY.dat
Size	3.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`c6694ee240f37ff4b9b34ed676d161cf`
SHA1	`c3a7ef26af57d1f38b12a156a9f7fda856a77191`
SHA256	`02967f583aafae1149c69528ff1d2f4e953f3d77da6918ed5222857bdfcb741b`
CRC32	`75D7C7D4`
ssdeep	`3:gltxQCuGZBul/lklRlkFtGst8lUFt/tSklnpsAY//nzklXnIAlltlym+/ClK:g8G/ut64H0U38seAY/IlXnHltcQY`
Yara	None matched
VirusTotal	Search for analysis

Name	9bde398ef7ee5508_finish.dfm Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\mia1\finish.dfm
Size	157.7KB
Processes	2088 (Install_Rental_LL12_2018_4.exe)
Type	data
MD5	`1fc44f157739b702c26cfbd0397b4a6d`
SHA1	`8eafd74c123227d78d444fef0f620b207b5eecd4`
SHA256	`9bde398ef7ee5508a8533f71c9f3432c5bdc1cb3e59be14b0c9cde9f77d5a294`
CRC32	`5A4968C9`
ssdeep	`192:t3MMfzvu9vJSm3IZ8Zgspkk4B9heXItzNGzOiOWEpap5PKo6Mmp4CWNux1LAwpnc:txI/T9P`
Yara	None matched
VirusTotal	Search for analysis

Name	3aa2da5151509b0d_LL12_PARTNER.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_PARTNER.ibk
Size	36.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`c5d76f498968991207cdef0850b4b1e8`
SHA1	`6ee6aac628666a3607d74d466dd654b6b93e0bcd`
SHA256	`3aa2da5151509b0d103adb2ffbdb6b19e6704e511a578c33090a44a3dbb6d097`
CRC32	`F91D4D90`
ssdeep	`3:gltxQCuGZBul/lwnll6ltFlWlG/lvtl9lrVllzlHldlSjlplbttks:g8G/utqn/OFiGxX5/7dlSjlplb8s`
Yara	None matched
VirusTotal	Search for analysis

Name	d45a9f684e9c20d3_LL12_XGL.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_XGL.ibk
Size	44.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`963300fe7c5ce224857aa80484948e7a`
SHA1	`fa4b1ebc34000c73386c870e2482dc5f73f6bb3d`
SHA256	`d45a9f684e9c20d3ae386bf199e80f24748719694fb3552ec33bd471f02c78af`
CRC32	`97A808BA`
ssdeep	`192:y5HxXNN5IZVKMSLbvH33bznZ1dd2EVXX3wyltHHH0S3laSVMRC:y/hCkMSLLHbztd5Lz3lMRC`
Yara	None matched
VirusTotal	Search for analysis

Name	1517d0dac1328c9f_Ll_menu.lcf Submit file
Filepath	C:\ProgramData\mia796F.tmp\data\The Professional Landlord\A056D2F4\B21C7FEA\Ll_menu.lcf
Size	1018.0B
Processes	1052 (Install_Rental_LL12_2018_4.exe)
Type	ASCII text, with CRLF line terminators
MD5	`a8779bed921f802924fd9570f25a1593`
SHA1	`1fc4f621b02bfa830ea3228839ddb8c77ad39e78`
SHA256	`1517d0dac1328c9f049e81fa1f002775cb1ed62918ada9a58937ed6819097e71`
CRC32	`7A2951A9`
ssdeep	`24:+I+Rz03Te0bRz0sMTb0rHCrU8uE/CraGCrF3qF8Sh0EsV/FTKnrhTqHPzTA6cdJz:+gli2rUU8nMgsqS2rYnr8HPI6AJysJ`
Yara	None matched
VirusTotal	Search for analysis

Name	87d97153fd772ae3_ll12_recrnote.blb Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Recrnote.blb
Size	4.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`97167e2f0c9b6f0ab75a904b0679b92a`
SHA1	`434245aef729816e2dddd60eb983ed7ae510814a`
SHA256	`87d97153fd772ae333c9b05cfef2182d45ce4376a10b1e4d7ec43a85bbd69b0e`
CRC32	`91B30156`
ssdeep	`6:mEG/utFiTycRV+AyA66VSTQRvNaEgKKTvuGG3AyAr4tLAWlRIJ6adXAyAqsYhE/v:UWiTt+A66VS0RzgDTPOAro8WlRkAqxg`
Yara	None matched
VirusTotal	Search for analysis

Name	f212110823a6cf11_LL12_XAR.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_XAR.ibk
Size	152.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`dab7aa4e27b279d9bd5bed8e5b134e3e`
SHA1	`25aec751c32ea6d1278a4f984a7922d9a4bb4a26`
SHA256	`f212110823a6cf11bc6020d3b38416e8e614ab81fea17e4ea357396844558da2`
CRC32	`BAEF4C9B`
ssdeep	`3072:VIH6AG4KIOg6gmo64+AGcHEUG+mmeOGuFUG+mmeOL09:GDY`
Yara	None matched
VirusTotal	Search for analysis

Name	51b26048506f6889_LL12_XAP.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_XAP.ibk
Size	76.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`2e1ebd19085d1f282641313cf3538d2b`
SHA1	`65b515947a86c679f901acd15c2e3ee83c15d5ec`
SHA256	`51b26048506f68893ab0ea667bbd52bb585c85a714a7cdd87ddd81bb473e3168`
CRC32	`C0A8104C`
ssdeep	`384:3/c/gbFrHDEzTiNyd6jrLIdb9wfj5djCOcm:5HIzLdGLIdbMj5drt`
Yara	None matched
VirusTotal	Search for analysis

Name	d68321cbb28cc432_ll12_systemlock.blb Submit file
Filepath	C:\RPromas\LL12_Training\LL12_SystemLock.blb
Size	1.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`6c53ab22bc858973b261bf176191bbb1`
SHA1	`e71a7825da20dfa9b16125cfe7755518607424af`
SHA256	`d68321cbb28cc4322e2d1eca8f318a497e067c1b3fbd520421d18951d5a5276a`
CRC32	`1C59527B`
ssdeep	`3:gltxQCuGZBul/l3lml3HjQXE4cFp80MonrOYKLNV6vlyQNLWokcFp80MonrOYKLa:g8G/ut3S3jQXxc3MorlNnkc3Morl`
Yara	None matched
VirusTotal	Search for analysis

Name	65ea88c710c2dbac_LL12_Prolist.idx Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Prolist.idx
Size	48.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`67f0f90164740313f6ce2f90f41a10e3`
SHA1	`03b8a674d9ed5085255a3860547c085c68ce6c06`
SHA256	`65ea88c710c2dbacac0ca4eecceaabaaeecdb6be0c7c10f6730a6453fe1651a0`
CRC32	`792FFE38`
ssdeep	`12:XZP+yiGxXcDXxDXG9f/7tg8HUKoenl/s/8StwUBomBo+0HjIDJ:XxjMEbUKNUzBa+n`
Yara	None matched
VirusTotal	Search for analysis

Name	35460af3318e1e5d_LL12_XAR.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_XAR.ibk
Size	140.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`b07f1b9c709860afc2548cdbfb8abb81`
SHA1	`1069ecd6ba3cef008d1c4d524d06e946ec3fd7de`
SHA256	`35460af3318e1e5d8b591d4582112841e457a529aa5c663fe5c1abab43bfc20b`
CRC32	`C5747F43`
ssdeep	`3072:uIH6AG4KIOg6gmo64+AGcHEUG+mmeOGuFUG+mmeOL:jDY`
Yara	None matched
VirusTotal	Search for analysis

Name	c78d80b8470f08d7_Release 2018-3.pdf Submit file
Filepath	C:\ProgramData\mia796F.tmp\data\The Professional Landlord\A056D2F4\465BD09E\Release 2018-3.pdf
Size	2.0MB
Processes	1052 (Install_Rental_LL12_2018_4.exe)
Type	PDF document, version 1.7
MD5	`12de6776de9f89ed4a7e805354da9edb`
SHA1	`2ad2ef8cceffcf9ea50639deff8927e78d911dd7`
SHA256	`c78d80b8470f08d7e3d5093715f966a797e3753d54d599323b607b03ed708b3c`
CRC32	`7A49D8F1`
ssdeep	`49152:4huLCq3GKrs3PS/jTus71/C2SZTZ0mPPzQVjRS999J3NNI:gQCCGmg+jTuE/C2MHzQVUzI`
Yara	PDF_Format_Z - PDF Format
VirusTotal	Search for analysis

Name	acfc9cf111e58245_LL12_Owner.idx Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Owner.idx
Size	48.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`aadd6284d9f4c0e8143fd6cb72a67200`
SHA1	`4b8073000404d61da32d6e8d03e83f7d87b1a099`
SHA256	`acfc9cf111e58245b4154fbab5de476fdc10c95f6899bf2183dcddcd6b128508`
CRC32	`0757D061`
ssdeep	`24:43x+MXyRq8qiorKHA1t6uw8H0ZgreLoMo7nemWZYWg7BFqOHtfR21h5:ix+MiRCsA1TAirTMo6Q3EKpa5`
Yara	None matched
VirusTotal	Search for analysis

Name	380f23916560f9a7_LL12_Catgline.idx Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Catgline.idx
Size	52.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`9d37d536f8504fff04a80d210e792580`
SHA1	`31d1f1b4a01309922c27a3abdd55edb58b6e7298`
SHA256	`380f23916560f9a76e3e81cda57387c67f54f1df6fe899ca39980c09c98e2f1a`
CRC32	`ED805188`
ssdeep	`192:05HxM3vsrLmLNQxiZoKGiZoKp/WuerMo/WuerM:0E3vsraz050`
Yara	None matched
VirusTotal	Search for analysis

Name	f1491301b72fd203_ll12_proline.dat Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Proline.dat
Size	3.9KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`6ae3bd87261c88b8560fa1ad13cd9dd2`
SHA1	`d63c9212da9dde0b223d55a67e5907c94973ef9c`
SHA256	`f1491301b72fd2037355aae95558c8d06871e733da095d2a7668fa5d9a5051bc`
CRC32	`204B49FA`
ssdeep	`12:mP90UMX2AYnckXXZv6exeXIW6j/vYgll9XyZKsmDZtsoxS/4:kQmfckXvWQYg4Ze6`
Yara	None matched
VirusTotal	Search for analysis

Name	530794a8ab8911d4_LL12_XGL.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_XGL.ibk
Size	24.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`c87ae16145a3482af25e7cae727ef609`
SHA1	`fab1af007475767a62173395d48558ebf432dfa7`
SHA256	`530794a8ab8911d4fec7871e3dfe53945873021bd266cca1f7cf8a99db0244a4`
CRC32	`26E81207`
ssdeep	`6:4EG/utXsOFiYmhe/uYG1lH/GXK8djL/nlXy/J/7:43lyiYmMmxlR8NTRoJ/7`
Yara	None matched
VirusTotal	Search for analysis

Name	33630ca1b058fcf6_LL12_UserReport.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_UserReport.ibk
Size	24.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`c42e160198a014299550d0ba87539600`
SHA1	`74e83848f53f6ddf6e6480c635e9c92cfe37d5b9`
SHA256	`33630ca1b058fcf670d1902db156cff469db92b5d43b69894b884ceeaeeac851`
CRC32	`5A72534C`
ssdeep	`3:xllxQCuGZBul/lklGl6lt6//lWlzVllzlHl:YG/ut6yO8tih/7`
Yara	None matched
VirusTotal	Search for analysis

Name	5a61970e4f349857_LL12_CATGLINE.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_CATGLINE.ibk
Size	36.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`eba1df398fe3ffb7415307b9f5d52db2`
SHA1	`5373a9ae92d2fe8137d69aeb59510113c3104d03`
SHA256	`5a61970e4f349857cb46d345d16bd2b8b8b581911883a11caab9fac21ebfe624`
CRC32	`44F66761`
ssdeep	`48:qPf5HNfd2IhMhJvZZcFVLmeIq0MW8EQ4:E5HNfd2r3vsrLmLNQ4`
Yara	None matched
VirusTotal	Search for analysis

Name	cc07410fedbc4ade_american.adm Submit file
Filepath	C:\ProgramData\mia796F.tmp\data\The Professional Landlord\A056D2F4\3F943650\american.adm
Size	312.2KB
Processes	1052 (Install_Rental_LL12_2018_4.exe)
Type	data
MD5	`2a8dd156deecc96b45e519e45a1aa776`
SHA1	`eecfebc969bba067be4c834dae0aca31907f9851`
SHA256	`cc07410fedbc4ade9d4b640bb73225b489c2f53d7aad2bb1f443d4b02af63918`
CRC32	`F1F3C4AE`
ssdeep	`6144:N4vPzBEjOR207zABOh5ilirOnZTJwWoEQeyr+86N+RGLRQvJu+:N4vqjpK2IglirAVJyw2+86NRU`
Yara	None matched
VirusTotal	Search for analysis

Name	01ba9feb02a53a72_LL12_MGMTFEE.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_MGMTFEE.ibk
Size	36.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`5ed2b9a8f511c9e478db6deeb3ea4a48`
SHA1	`576ce65900b3742bffbdbd3763d8bccedcfff1e3`
SHA256	`01ba9feb02a53a726f25edf70a60052335bb0d52d75c386572377878c0885402`
CRC32	`B76FB453`
ssdeep	`3:gltxQCuGZBul/lwnll6ltFlWlG/lvtl9lrVllzlHlXtl+vtl+zqFEtlVnll+Whlq:g8G/utqn/OFiGxX5/7e2N+Whl0on+`
Yara	None matched
VirusTotal	Search for analysis

Name	f3401fe90d2c5abe_ll12_mxatype.dat Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Mxatype.dat
Size	3.7KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`0f97c7c9a81eca6337b574dcdef8ae4f`
SHA1	`4ebed84f57207f1ce35f01b151f2bade46036136`
SHA256	`f3401fe90d2c5abe36975ab9dd4b7c9958444051b585b3fe17dca0544dfb4709`
CRC32	`95832C38`
ssdeep	`6:SG/uthw9kX0U38XWXzIAtXDP+kUfntrHclMZaDl:Nmwm0UMXWXzjjKntHUMQl`
Yara	None matched
VirusTotal	Search for analysis

Name	1c3b5b6edbf14110_LL12_ACCOUNT.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_ACCOUNT.ibk
Size	36.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`e1927f37bb1227f281ef9d2f6166df81`
SHA1	`a9458007706e89161d854a38be67e28371b64c76`
SHA256	`1c3b5b6edbf14110eba1c7b156ebc0ebdd9c4f3e548c2e3fa7bd07cbf87453e2`
CRC32	`50E1C6A0`
ssdeep	`48:q8Xf5HNgf5HN31nUuCahwGybpgDqCJ+b9d:V5HNW5HNlneahXyCTM`
Yara	None matched
VirusTotal	Search for analysis

Name	8ad9ebb626464b91_ll12_mxwoline.dat Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Mxwoline.dat
Size	3.7KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`a664ec9ed8d490655ad28eb4c6d95bf0`
SHA1	`9f9cc32863239301bdd087474bee521543d6a5ee`
SHA256	`8ad9ebb626464b912601471856431593661df22afdd31b1437713f83f382ce15`
CRC32	`B9522A1C`
ssdeep	`6:GG/ut+plm0U38X2AY/yq0atlFImdkh/aaXyi6x81VaX5nlNZtsoLP4aX:Jw0UMX2AYaVx0UBB6xj5bZtsSPr`
Yara	None matched
VirusTotal	Search for analysis

Name	d5051ab7b20974aa_netlog.txt Submit file
Filepath	C:\RPromas\LL12_Training\NETLOG.TXT
Size	55.0B
Processes	1936 (Landlord12.exe)
Type	ASCII text, with CRLF line terminators
MD5	`d7f8ed6d6345655da2302e06f8d0106f`
SHA1	`9b6825dba7a241c2809acbb62994e73c7b36869a`
SHA256	`d5051ab7b20974aa73f8eafa4bb9221e26523c2ea0d90f462037d7e2a07e2d5e`
CRC32	`B86B20B3`
ssdeep	`3:tUI2IVKUvm0CwXMTeBERre:m+9NMfRre`
Yara	None matched
VirusTotal	Search for analysis

Name	53e150ee7db78eb8_ll12_rentcopy.dat Submit file
Filepath	C:\Users\test22\AppData\Local\PROMAS\LandlordForWindows\Instance1\LL12_RENTCOPY.dat
Size	3.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`9aa3cc5a82d18094c3f265a26da360d6`
SHA1	`6ec92b7a8bac4b8031e89374d9e9a74e35454ff7`
SHA256	`53e150ee7db78eb8d65d0cee88d7f732e1f093772ae08780b8c8d58abac49821`
CRC32	`A012DA3B`
ssdeep	`3:LxQCuGZBul/lkl5lll9lllPpklt8lUFt/tSklnpsAY//nzklXRA//lNle03ehntd:CG/ut6rpk0U38seAY/IlXyI0atl`
Yara	None matched
VirusTotal	Search for analysis

Name	d2ced752610faef4_LL12_MXATYPE.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_MXATYPE.ibk
Size	36.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`ac4edbf69a1a042a622734fe5ae5a0dd`
SHA1	`5d2250d9e1767a470ef323a405634b99c47e9275`
SHA256	`d2ced752610faef41a69a163913ab4217cd138962977c3bffa0a5a5ae7615dc3`
CRC32	`2310408A`
ssdeep	`3:gltxQCuGZBul/lwnll6ltFlWlG/lvtl9lrVllzlHl+lttl/Qlttl/QlEx//lPnlH:g8G/utqn/OFiGxX5/7+IIuZUQnks`
Yara	None matched
VirusTotal	Search for analysis

Name	19878ce6f272ecdb_startmenu.dfm.miaf Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\mia1\startmenu.dfm.miaf
Size	602.0B
Processes	2088 (Install_Rental_LL12_2018_4.exe)
Type	ASCII text, with CRLF line terminators
MD5	`5622cbe0342ea56dbeddb3f036450ae9`
SHA1	`97d52e9ce2fe1ba92ba141bcc66d2ecc6ec93978`
SHA256	`19878ce6f272ecdbe413786244a8476214f99445ebb85f307e92b07f2a4c8869`
CRC32	`2CB52D80`
ssdeep	`12:jOYMtgQeMtg1dsdrHEUxIsdrHExINIkU3lkimkU3MIkT:jXoe3GI1INI53ldm53MIk`
Yara	None matched
VirusTotal	Search for analysis

Name	f5bd968e1580c2b4_progressprereq.dfm Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\mia1\progressprereq.dfm
Size	42.1KB
Processes	2088 (Install_Rental_LL12_2018_4.exe)
Type	data
MD5	`af75c73b31b45d4797a326367b1a696a`
SHA1	`b2795faa612f4bfaedf79ef0ddc6cc7e43fb5801`
SHA256	`f5bd968e1580c2b47d800867a237d4f90cd7465e38219836e7792094354cbbd2`
CRC32	`C5BFDC27`
ssdeep	`768:yUHXQ1NmO7ZDrkqzM+KGlm1ccHq7kBTT5Dmoibf/D:y0XQ1NmO7ZDrkqzM+KGk1ccHq7kJT5Dm`
Yara	None matched
VirusTotal	Search for analysis

Name	a2b2ea27466e0da6_LL12_MXWO.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_MXWO.ibk
Size	52.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`0cd54341421980b996a3cbb6105f9ca4`
SHA1	`eb4d5a171d16a625e9739a255c8552cbced33ba1`
SHA256	`a2b2ea27466e0da64f3dbe78ce0ece5bb5621074b15168ced8af9a03106f98c7`
CRC32	`8FFA6099`
ssdeep	`12:ePXyiGxXcDX6nb8S/7tymozqUBef08kTt8UlnKp56fX+Z:ePslb8gymozqv0IT56fuZ`
Yara	None matched
VirusTotal	Search for analysis

Name	1f9b7df430b1d3f3_LL12_Mgroup.idx Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Mgroup.idx
Size	48.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`1643b1358687028e248cc946db27f4b2`
SHA1	`0447f132df6a6ed04513be20147d83d276a9fda3`
SHA256	`1f9b7df430b1d3f32985c76ff5cc1b6666593e65eeac64e26f16cbf2bd844229`
CRC32	`E2A07EEF`
ssdeep	`6:kG/ut2Vl/mOFiGxXcFtzXAmDX58t+yf/7dlSjlMlI2sNlfls9l1IIQIdmZYTYXFS:XZP+yiGxXcDXxDXS9f/7cdomZY`
Yara	None matched
VirusTotal	Search for analysis

Name	7e5099588ac9eb46_registrationwithserial.dfm Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\mia1\registrationwithserial.dfm
Size	32.6KB
Processes	2088 (Install_Rental_LL12_2018_4.exe)
Type	data
MD5	`8616c794648fd69fac8f0f88edb22e4e`
SHA1	`dddfecf6ea3719e9cef5c406fd4d525af7d74a61`
SHA256	`7e5099588ac9eb46983021cfdfcdddbefebfe4cbd8388a531edad35fc3da842d`
CRC32	`1765D336`
ssdeep	`768:JdHXQ1NmO7ZDrkqzM+KGlm1ccHq7kBTT5DmoibfM4:JFXQ1NmO7ZDrkqzM+KGk1ccHq7kJT5Dk`
Yara	None matched
VirusTotal	Search for analysis

Name	77ee7ce65c84d384_dbisam.lck Submit file
Filepath	C:\RPromas\LL12_Training\dbisam.lck
Size	8.0B
Processes	1936 (Landlord12.exe)
Type	data
MD5	`8a6b092e5a5b51d523abc81348eedcda`
SHA1	`427845ff8332d3b3488218a31fcad974337e0e52`
SHA256	`77ee7ce65c84d38465b8162c58afd76001b97d06f7e68e7abc06ad7eee78756c`
CRC32	`26EA48A0`
ssdeep	`3:gl/:g/`
Yara	None matched
VirusTotal	Search for analysis

Name	1f54d261c922442d_ll12_advsched.dat Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Advsched.dat
Size	15.9KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`aa1245fd2514c78e5dec897fbc8ece14`
SHA1	`9e142e283fff34d87ceae21fd3db6a230e747775`
SHA256	`1f54d261c922442d2443e7dec904754defe52a7f9d6713cd7a1abe36dc5248bd`
CRC32	`5E39AAC5`
ssdeep	`12:43Lwu3EMXRePthLgZXQGf0x1CvXjpC5lVAp2UPsgsiqQKgBRGa6CH0CSiHPJD/Pf:43LlBuvqgD4vAUZQNCHtnZlx`
Yara	None matched
VirusTotal	Search for analysis

Name	c676ff54966a95f1_Demo Data.BKP Submit file
Filepath	C:\ProgramData\mia796F.tmp\data\The Professional Landlord\A056D2F4\3F943650\Demo Data.BKP
Size	147.3KB
Processes	1052 (Install_Rental_LL12_2018_4.exe)
Type	data
MD5	`d664e1d000cfcdcd32dbdb9785531e00`
SHA1	`cedb8f4129593b76fa8908f5b3b4515dc60d8acb`
SHA256	`c676ff54966a95f1c8697994c4a72cd7f61a50081a456035b60ccbafcd5b2967`
CRC32	`8FA97605`
ssdeep	`3072:YAff8ffSGHlEyXfpr3nrCAWy92Cef077pchCr5v/JAoGOOdDoO8:YAff8nSaNXfd3rCAKf2chCVv/+oG18`
Yara	None matched
VirusTotal	Search for analysis

Name	623518d48b62b3e7_LL_MENU.LCF Submit file
Filepath	C:\ProgramData\mia796F.tmp\data\The Professional Landlord\A056D2F4\3F943650\LL_MENU.LCF
Size	1.6KB
Processes	1052 (Install_Rental_LL12_2018_4.exe)
Type	ASCII text, with CRLF line terminators
MD5	`24ed9c85946814a24691c6b4eb29e8ba`
SHA1	`273111ad78b18883c3629d85dab7678b9a9cbbf7`
SHA256	`623518d48b62b3e7f9075837a3d8a8fe7c35fbd450b9ec7e494053acf1aed92c`
CRC32	`EFDAC976`
ssdeep	`48:+z8nMgLS2rR3inrISHPy4emo9H+Q5CyGza22vj:+z8MgLSO380Svy4emo9HRCyGb0`
Yara	None matched
VirusTotal	Search for analysis

Name	2c08ced7e0118de7_LL12_TENANT.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_TENANT.ibk
Size	48.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`596542f087d69c5a85c54a193432efff`
SHA1	`d681d03ef6ecbbd529aa3672d6bbbe4609c78a55`
SHA256	`2c08ced7e0118de79a4306e151ff65a02769b0069c10071e61cdb23c34827f57`
CRC32	`29BDF1BA`
ssdeep	`48:XxjMOO+6rYLsNJPyEy1B0xyv+RyljzwtbetBsw08q0/5:C+sJPyEyTaC6ylw1ec98q`
Yara	None matched
VirusTotal	Search for analysis

Name	aa6fef71d6881742_Install_Rental_LL12_2018_4.res Submit file
Filepath	C:\ProgramData\mia796F.tmp\Install_Rental_LL12_2018_4.res
Size	2.5MB
Processes	1052 (Install_Rental_LL12_2018_4.exe)
Type	7-zip archive data, version 0.3
MD5	`7710f65107e9c41a6342f542b093685b`
SHA1	`125988dde09fab3dbff1437c7f6d87dfc00f93cc`
SHA256	`aa6fef71d6881742b4149d9598842ffb42205d970c67839385fa9a06b6c6147c`
CRC32	`9D2D55BB`
ssdeep	`49152:JXHX+APX91XhXWXbXRXVXgXLwXmJXGLse9HhESJh3m17Mfx6:9CVX6`
Yara	Admin_Tool_IN_Zero - Admin Tool Sysinternals Win32_Trojan_Emotet_2_Zero - Win32 Trojan Emotet OS_Processor_Check_Zero - OS Processor Check Malicious_Library_Zero - Malicious_Library Malicious_Packer_Zero - Malicious Packer
VirusTotal	Search for analysis

Name	e3b74b80d4e68624_LL12_ZRREL.blb Submit file
Filepath	C:\ProgramData\mia796F.tmp\data\The Professional Landlord\A056D2F4\3F943650\LL12_ZRREL.blb
Size	33.0KB
Processes	1052 (Install_Rental_LL12_2018_4.exe)
Type	data
MD5	`6f881a4e45a3ae78df90b4d5a1fb4566`
SHA1	`4279ac96bbd1ff328a1b8b02e6bc4e077da77e6c`
SHA256	`e3b74b80d4e68624f41cad37a4523b1b3175e044a80068a5d419032d105e96f5`
CRC32	`310E5CB1`
ssdeep	`768:7dqqhKpi2a4Qm4lgckwhGuejw/ngmCwclt5xg:4fT7xwwuecfA3`
Yara	None matched
VirusTotal	Search for analysis

Name	a014ed07781e67f3_LL12_Notice.idx Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Notice.idx
Size	40.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`9f19cee6157320cec5958ab081a00c00`
SHA1	`9060d6b7d7ce47a8eaaca718fc9e870e3222f76b`
SHA256	`a014ed07781e67f346bcf44c2d8bbfafbb0c29d369a5905417d90a2b61a7913e`
CRC32	`2E6EE4A1`
ssdeep	`6:CG/ut+UWOFiGxXcFtzXw/7dlSjlSjl1sNlIF+xAlms:9ZyiGxXcDXw/7jFOAl`
Yara	None matched
VirusTotal	Search for analysis

Name	844f2811744d2dfb_LL12_ACCTLIST.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_ACCTLIST.ibk
Size	24.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`f9fef265febb500d6d3ccb293a7cdaaf`
SHA1	`12183470091115c4f0530ca6627e68ec6bb5c7c7`
SHA256	`844f2811744d2dfb3267c504d10b0bb46ba3c64985febaf72448e9f1cbf79fee`
CRC32	`D48AF7C0`
ssdeep	`3:gltxQCuGZBul/llltlWl6ltFlWlG/lvtl9lrVllzlHl:g8G/utf1iOFiGxX5/7`
Yara	None matched
VirusTotal	Search for analysis

Name	9d65491a88f06afb_LL12_ACCOUNT.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_ACCOUNT.ibk
Size	32.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`2b5364e3c690812959cfe6c4f3885052`
SHA1	`bc6eb116868318f0a488b7b35639981d83889e88`
SHA256	`9d65491a88f06afb461f1684ea1f7b3eda958f0571b13d3ebfc8323e66a6f6fc`
CRC32	`9DAF65FD`
ssdeep	`12:TIyih/7ddlRR1lxp9lBFH3llv3XHZtn3llXfadlRR1lxp9lBFH3llv3XHZtn3llv:T2nRf5HB9tJCnRf5HB9tJ`
Yara	None matched
VirusTotal	Search for analysis

Name	dfa7c745c86ca5ec_LL12_Letter.idx Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Letter.idx
Size	40.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`7168189756daf9a0c47a40539c436545`
SHA1	`58b22631485a0d8a4e5d7f9a1f267355c9e94bb5`
SHA256	`dfa7c745c86ca5ecf354cad564a2895ef254c8aa283747ce277f29f127b6d172`
CRC32	`6F1C9F50`
ssdeep	`12:9ZyiGxXcDXw/7tyQAWZ/Al/ol/sxb1Ygl:9m5yQAuYtot2ZY`
Yara	None matched
VirusTotal	Search for analysis

Name	f428241271e2dacf_ll12_mgroup.dat Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Mgroup.dat
Size	26.7KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`96288881eae8adae4d9baadd7ef6522b`
SHA1	`ef9ad44906d2d7daa7d3f9a4019f56a82d9ccdbe`
SHA256	`f428241271e2dacfc572d64c392f2bee1676a91d33b6ce2e48c79a88924c540b`
CRC32	`92D58829`
ssdeep	`24:zh0FmXzX3Jrq4ChVP77juACUV/HlP+AcHxpd0nzXhY9:zgGzX3JG46VP77cUVPNcHxpwY9`
Yara	None matched
VirusTotal	Search for analysis

Name	d0875d0e2752b73a_LL12_XAP.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_XAP.ibk
Size	40.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`f89a68cb918902a9838295d7b4ae7c2c`
SHA1	`58d24ec361094afd219a63a0cebb402a0bcf4d4d`
SHA256	`d0875d0e2752b73a877d72161920abe3dab1f50284219d8e392972a06b23339d`
CRC32	`6DA12D80`
ssdeep	`96:/5HNfdFNFc5HNfdFNFLGXiTupJAsPXi5upQCY4Q:/5HxXNG5HxXNYSTSJAoS5S3Y4`
Yara	None matched
VirusTotal	Search for analysis

Name	4d925229d13e4df5_LL12_ZRLIC.dat Submit file
Filepath	C:\ProgramData\mia796F.tmp\data\The Professional Landlord\A056D2F4\3F943650\LL12_ZRLIC.dat
Size	2.2KB
Processes	1052 (Install_Rental_LL12_2018_4.exe)
Type	data
MD5	`b4d46738949fd264b608c9c46f62a0ea`
SHA1	`95fda56854c3192284fa7107a3a083f321f212a4`
SHA256	`4d925229d13e4df55051bde4097cd9de2e6cd0a542e1971503d4fd34484fde3d`
CRC32	`46FFCDDC`
ssdeep	`6:mEG/ut+IiZX91xiXxsZIo3j/6yPbiSWWnYdQ0Q/huYD:U/nxiXxib62biyYdA4YD`
Yara	None matched
VirusTotal	Search for analysis

Name	0e5a0442ac00afeb_LL12_VENDOR.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_VENDOR.ibk
Size	32.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`47f387f7b13a2df83dfa35138fa05ae3`
SHA1	`298991a38ebef208e67e5a328a5d21c2f40b4a53`
SHA256	`0e5a0442ac00afebbfc10265e765bd548f89b8969e249010db3356f2d2bfd6f6`
CRC32	`E876165D`
ssdeep	`3:xllxQCuGZBul/lwlUl6ltFlWlzVllzlHlklttl+dl+84l/l8lU/vl+fcl+lsfl/:YG/utlOFih/7kedl9Rq/9Vs`
Yara	None matched
VirusTotal	Search for analysis

Name	bd259b8a7f4145b8_LL12_Account.idx Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Account.idx
Size	40.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`4db8ce1bdf62f12ce8ea2e011a45896a`
SHA1	`ea7eed888d8cf827dbefbbf9a17462f845efda3e`
SHA256	`bd259b8a7f4145b8f154ffbec62b94e89efe241749c1ef1a0116f4532528056e`
CRC32	`777739E1`
ssdeep	`96:NwVz5HNlneahXyCTMvUgy3EalEyTtJdx9k:NwR5HDnHyOMvUg15yTtJ5`
Yara	None matched
VirusTotal	Search for analysis

Name	a767780280c4082b_ll12_mortgage.dat Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Mortgage.dat
Size	7.2KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`700f72b2e8763b2b8d06b4b78b49966e`
SHA1	`3db9736ad876b866bfcb988ed05641e2792db333`
SHA256	`a767780280c4082b49fba96e402eb26567e250f2ce56adb3212b63e49098218b`
CRC32	`AE7B31F4`
ssdeep	`6:68G/ut6hukX0U38X+13pKcGAvtlcdtl/8rNoJXIixStQ1FLftlYt/Cyain:6Phhb0UMX2lGAkV0NoZI3btP`
Yara	None matched
VirusTotal	Search for analysis

Name	3c0efe5064ab1f7b_DC.INT Submit file
Filepath	C:\ProgramData\mia796F.tmp\data\The Professional Landlord\A056D2F4\B21C7FEA\DC.INT
Size	504.0B
Processes	1052 (Install_Rental_LL12_2018_4.exe)
Type	ASCII text, with CRLF line terminators
MD5	`a174462ccbce0342b68803f219e37197`
SHA1	`c10913663add2a509d8da8cb3d74d0cefe461ff4`
SHA256	`3c0efe5064ab1f7b757ffa260347ed67013b248c4232c71db635c026b1674aa9`
CRC32	`19A0BE80`
ssdeep	`12:iwa6MxGOzvNOOgQdpjF5prFtg24+dP3gWsi:iKMxGWFOsd35hffreWsi`
Yara	None matched
VirusTotal	Search for analysis

Name	3a3ec3c6a2c26194_ll12_recrnote.dat Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Recrnote.dat
Size	11.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`9506c62d02f2980c74e8f11f6287f962`
SHA1	`54dfd1338c3176abff941492b2db75a9d1a13582`
SHA256	`3a3ec3c6a2c261941bf5f4c242b8385a5b1c2f9613ae97de0b6d9ad4ebb1bab1`
CRC32	`9A54B1E6`
ssdeep	`12:ctb0UMXsDtHzd/R/2CqrYOKCCgYL7EuYynVVTfpMlf0MDaaadLyPS:ctumh+9rKCCVL7Ew3SsM`
Yara	None matched
VirusTotal	Search for analysis

Name	66db97d62ca59ea7_LL12_XGL.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_XGL.ibk
Size	24.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`b9540a118b4de183bb6efae7f52cdca6`
SHA1	`adff8d8bd81172fdfae700b9fe5d9c0c6785dc72`
SHA256	`66db97d62ca59ea78c163b4a68b14ff1157a567745dc1d300658e3a77a3abd24`
CRC32	`94A215E5`
ssdeep	`3:LxQCuGZBul/lmlllul6ltFlWlYzi/lX3lvlppL2l//SlYlm7VllzlHl:CG/utUyOFiYmhe/uYc/7`
Yara	None matched
VirusTotal	Search for analysis

Name	69ab9966eb99e92c_ll12_manager.idx Submit file
Filepath	C:\RPromas\LL12_Training\LL12_MANAGER.idx
Size	48.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`a35023f35c13373758571a6aa2985b64`
SHA1	`b5ae5be99f770b94add3e01624d42556ddcbd8e8`
SHA256	`69ab9966eb99e92c21cdfd5332611f6b792bca0e281f7afbff0f3ac19694e937`
CRC32	`9DC32AC9`
ssdeep	`12:XZP+yiGxXcDXxDXi9f/7+IiQHbJgmZh+SSKX+H4s:XxjMdUJ9h+pa+H4`
Yara	None matched
VirusTotal	Search for analysis

Name	d3c0021e5558c275_LL12_VENDOR.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_VENDOR.ibk
Size	36.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`0407414a3a42acb7ae8fda378ceb126b`
SHA1	`0704f6e3c9d649e4952b80a8677e489ba2504531`
SHA256	`d3c0021e5558c275035eb9d659ceb5379ee3cf467823fee4ec671e7e78e37a08`
CRC32	`D0C1FE14`
ssdeep	`6:g8G/utqn/OFiGxX5/7kedl9Rq/9VsFyXaglRl+rXEpkyZvl/exS:qHyiGxX5/7kedl3qogRzky5l/exS`
Yara	None matched
VirusTotal	Search for analysis

Name	7c8e336b94673f1c_dbisam.lck Submit file
Filepath	C:\Program Files (x86)\RPROMAS\Ref\dbisam.lck
Size	111.0B
Processes	1936 (Landlord12.exe)
Type	data
MD5	`7e5366be8ffa19e301c33134f8698e44`
SHA1	`7b7ecc9ad3ff7382cc1dea3bc0e7b6cbf4f8392c`
SHA256	`7c8e336b94673f1c7f8d9a18c63adeb63a0b5089c4d974861ef719150f0e7203`
CRC32	`B692591D`
ssdeep	`3:PlllyiWq9rEUs2+geUW3SpU6cPxmpVlwUEVopn:PtbB9DW3SpTcJmvEVop`
Yara	None matched
VirusTotal	Search for analysis

Name	65b28e5335703c1b_LL12_BILL.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_BILL.ibk
Size	28.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`d90d96ee2a9cd523f903eefb28ad852d`
SHA1	`6a084346c766890c29eadfcc6b4dc4a0cf18f63a`
SHA256	`65b28e5335703c1b401030db9c3a7b22e0cca62d04108b34563a371ecf3c52ad`
CRC32	`EBA791FC`
ssdeep	`3:qQCuGZBul/l/lelMl6ltFln/tNVllzlHl0tl+dl+84l+llKU1l+llV1l+1l+UQll:hG/utikOF/tz/7Zdl9plPlP1l1xlXl`
Yara	None matched
VirusTotal	Search for analysis

Name	ee414fef5a74d3bb_Release 2018-2.pdf Submit file
Filepath	C:\ProgramData\mia796F.tmp\data\The Professional Landlord\A056D2F4\465BD09E\Release 2018-2.pdf
Size	855.0KB
Processes	1052 (Install_Rental_LL12_2018_4.exe)
Type	PDF document, version 1.7
MD5	`ecaff8415dd37b1829e3d0fdf6e52c98`
SHA1	`7e656aaae1fb3e8261bfbffd26082cfb74cd7013`
SHA256	`ee414fef5a74d3bb152dc324ad2b4984d017aec335c2ca8eb9bc348026dfa709`
CRC32	`BF177527`
ssdeep	`12288:kq9rUbhfasP05wa5UnoMGqJe2IBU7R1+9FNGyVORsWZGRjJh0jeBkV4Gdq:JmlWksFO1+92sksnRjJa0Gw`
Yara	PDF_Format_Z - PDF Format
VirusTotal	Search for analysis

Name	848956f6868e517d_LL12_ENTITY.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_ENTITY.ibk
Size	48.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`18221c04a6d46d4ec7383908ff6442b3`
SHA1	`45c9f18373737b086c73d25d59624f363d783066`
SHA256	`848956f6868e517d9f4a3216d791fcd9356d2962ea998871ca4ff4069763479d`
CRC32	`CCAA4E9B`
ssdeep	`192:W5HxRGgjTjkxP0hrJ33Y1LMaByIIMbiJFKOVBtY9/UyQIB9Q4CYA1z6:WpGQE0hdY1LNcIIhKeX4MyP9B`
Yara	None matched
VirusTotal	Search for analysis

Name	7fcbea1d8e2078a2_LL12_ENTITY.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_ENTITY.ibk
Size	40.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`b22eddf0e6bf46e7f692b87d9b4f727c`
SHA1	`5f8ff21e1c6e3de04075ed4f21674b51ed0af3c0`
SHA256	`7fcbea1d8e2078a2aff41893b8dee05cf14f8d969a6a5928168ac560efc0c10e`
CRC32	`B3138037`
ssdeep	`96:v5HNfdCMqAEJGjTj81xPAOSzhrJE63Y1yIb0w7HcaCSyI:v5HxRGgjTjkxP0hrJ33Y1LMaByI`
Yara	None matched
VirusTotal	Search for analysis

Name	b7b00f03809391f4_LL12_PROLIST.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_PROLIST.ibk
Size	44.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`d766bd2146c538d99cef9478c9f30d4e`
SHA1	`98ae24feb5258d224f328cd336f7a041d57608c1`
SHA256	`b7b00f03809391f4614222aefe5ec5e237758af0dd8a57677ae4a5c10b37c85a`
CRC32	`C667C57D`
ssdeep	`12:U3HEyiGxXcDXxDXW/7tg8HUKoenl/s/8StwUBomBo+0HjID:U3pMwbUKNUzBa+n`
Yara	None matched
VirusTotal	Search for analysis

Name	3ad36668485e2a65_LL12_Vendor.idx Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Vendor.idx
Size	56.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`fe852c0495c3a69593577e94078a2eb5`
SHA1	`b406f1abcf794336d0624b85e812f27a8f398598`
SHA256	`3ad36668485e2a6551ed64774ade2b5fa15e37276f5af52f62acc4d002455265`
CRC32	`20728E1F`
ssdeep	`48:1txMGRCsAMF2NfT+oX/ytgm0lIqLifw1iXw1:3wVMFGfaovyB0lBawQXw`
Yara	None matched
VirusTotal	Search for analysis

Name	33610948cc563251_ll12_stmt.dat Submit file
Filepath	C:\RPromas\LL12_Training\LL12_STMt.dat
Size	18.8KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`cb001be409f4cb29b68e16cd0c09f905`
SHA1	`cef388f2edce61d3ff01c77911e737845a69057e`
SHA256	`33610948cc5632515a4bee2866b6e3e4a6b0d66162bb168b1bb7d14d08a85a43`
CRC32	`C71F9699`
ssdeep	`24:uomXzalUhOwTXz1R/I31fxcrnwX6gkWSAewxmhkZWEXP/gczOR0n:uoGzalLkXzjkpdkiewxmhkcEXwcHn`
Yara	None matched
VirusTotal	Search for analysis

Name	40011680f2268421_LL12_ZRLIC.blb Submit file
Filepath	C:\ProgramData\mia796F.tmp\data\The Professional Landlord\A056D2F4\3F943650\LL12_ZRLIC.blb
Size	6.5KB
Processes	1052 (Install_Rental_LL12_2018_4.exe)
Type	data
MD5	`b002b33184c1f5dbdd82ab8042377892`
SHA1	`c046399e4f8451090bc588e3fad6b926ec8ea0bc`
SHA256	`40011680f2268421a2976aca5bb06a571bd47af4e4c0afd0e7c7d6fcdb686e1c`
CRC32	`3A27E7B1`
ssdeep	`96:bTY9NjF9p+S+HSWJ4ki2+1iTwy9/jF9+uLzI9:HYNmTiP8rPouvI`
Yara	None matched
VirusTotal	Search for analysis

Name	eb7359ba9b50c9c9_ll12_cxeline.dat Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Cxeline.dat
Size	12.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`14943d92db4b5a5830676f183dc0a5c9`
SHA1	`50d9d1d6fa37cfd016177a857893c3b0ec3aa872`
SHA256	`eb7359ba9b50c9c9da1affbf0be1ccc277be68128f86e2b4598b587a2436e3ed`
CRC32	`4B54A518`
ssdeep	`6:68G/ut6e0U38X2AY/nC8teXAU0tQlAK1sapq/zOlI5IptlU7jHptly7lYSC0HeP:6Phe0UMX2AYJoD1sapqyGAlY30He`
Yara	None matched
VirusTotal	Search for analysis

Name	387e7099a03af0ed_LL12_MXWO.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_MXWO.ibk
Size	36.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`fb6e8bc5319a65624e470eb6e162d2f5`
SHA1	`7bf892fd4c86886aee58dabe8a2f290c041da0f6`
SHA256	`387e7099a03af0ed511f65b3dd39dee7df3af876b4e7dc34fd367993f41bad98`
CRC32	`1C1665AA`
ssdeep	`6:g8G/utqn/OFiGxX5/7IGzGzCSDlMqO0EU3RtlOD:qHyiGxX5/7tymozqUBe`
Yara	None matched
VirusTotal	Search for analysis

Name	01b3052b054101cb_LL12_CATGLINE.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_CATGLINE.ibk
Size	48.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`77e507d363377e2d1a201a0da7df095f`
SHA1	`a034865aaffe2ef956351440947b80e87c4c3954`
SHA256	`01b3052b054101cb596e11355caa0da8df030432b629af7a92db768f33059e04`
CRC32	`45105128`
ssdeep	`96:u5HNfd2r3vsrLmLNQ4Ii66XoKu2ai66XoKu29/Wue7Pmt5M:u5HxM3vsrLmLNQxiZoKGiZoKp/WuerM`
Yara	None matched
VirusTotal	Search for analysis

Name	5cc3d374955e6b03_ll12_property.dat Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Property.dat
Size	18.2KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`8eef7f8116838de43fd975a9b5a8e0c4`
SHA1	`f42e19c18458bb7565cc7c06b83788d366fe0313`
SHA256	`5cc3d374955e6b03d87d5f61d517d87ac2ffe1aaeb5e0832c4cd7cf9ef22262f`
CRC32	`B774F5A3`
ssdeep	`24:zMmXzEZqLIVzoHBXvLRs5IknjguEHANVFSSoLk:zMGzE4LIVUxFWnjghaVkLk`
Yara	None matched
VirusTotal	Search for analysis

Name	b190a13ef629ef4f_LL12_Unittype.idx Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Unittype.idx
Size	48.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`37ea10ee9763a3a1369518592edeaa95`
SHA1	`4c20cf860d2bf243afd7f203a8350c1b1436c350`
SHA256	`b190a13ef629ef4f07cc3d01de85bc70fb77cfb9e4f24175064d5d0daa97ce3b`
CRC32	`769F9C20`
ssdeep	`24:XxjMOnRMP264stoh/NeoltyQ0X4aRex/WgDUJx8iCZbfpfh6:XxjMq0T4sYNeozyQm4W4+eUxK+`
Yara	None matched
VirusTotal	Search for analysis

Name	626513c5b4c00cde_ll12_bxcopy.dat Submit file
Filepath	C:\Users\test22\AppData\Local\PROMAS\LandlordForWindows\Instance1\LL12_BXCOPY.dat
Size	14.0KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`96e7f713e9d7686f56deb05c16f9aeab`
SHA1	`c088a875b38993e89700775f770489eebb6e22c5`
SHA256	`626513c5b4c00cdeb7053ea0fcdf563eea51ed90ba21b5dc8832844911b0c5ba`
CRC32	`1552C1BA`
ssdeep	`12:9hO0UMseAYAJAhaty89b6rdWtj64/tV/H8l:9D3WLy0b60r1dcl`
Yara	None matched
VirusTotal	Search for analysis

Name	95195f2033c74765_LL12_CATGLINE.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_CATGLINE.ibk
Size	28.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`30c96d5b1ebd08ef82c75f59ca05ef9c`
SHA1	`c4ad615c1b5bd6eb920ba7ef752ac3ee98f710b3`
SHA256	`95195f2033c747651c8299539ddd29f1e5f3a7725582abcbca41e054109a1d6f`
CRC32	`912DF969`
ssdeep	`12:ALky1z/7y2dlRR1lxp9lBFH3llv3XHZtn3llXfXnpFHXll:AznRf5HB9tJRd`
Yara	None matched
VirusTotal	Search for analysis

Name	620b0154c0a1d704_LL12_OWNER.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_OWNER.ibk
Size	40.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`cdd2a7d57d35c73e09b2c76cd325e289`
SHA1	`fd146809995f9be613376e357be59648e3a01ac9`
SHA256	`620b0154c0a1d704fee7073f38dbab69ac4cbbfbd0c32835133fb9c3a7d0092b`
CRC32	`B7057281`
ssdeep	`12:9ZyiGxXcDXw/7zdlRClht0AZwuCP31XMwSVllWWWDZIWPIuoOl0gpX+gR:9mHnRGt6uw8H0ZgreL`
Yara	None matched
VirusTotal	Search for analysis

Name	c3884ec674608bcf_LL12_OWNER.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_OWNER.ibk
Size	32.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`3de9d9658c2afc68d80818b698259fb9`
SHA1	`bd4dc657fd542aedd0dd7d6a37ff12ebd76ca906`
SHA256	`c3884ec674608bcfe5b700ca56f163d2ea1fa22272145568d86ca3143d8df889`
CRC32	`599C31A8`
ssdeep	`3:xllxQCuGZBul/lwlUl6ltFlWlzVllzlHlmlltl+dl+84l+llKOlM+lslkN/shqlU:YG/utlOFih/7mGdl9plzuLlhh7lJ/8`
Yara	None matched
VirusTotal	Search for analysis

Name	15e6bae8fcb1ce38_LL12_MXWO.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_MXWO.ibk
Size	60.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`7f1e0ca330b602ad4f66acd15fc7ba92`
SHA1	`42a8c582758f4cc45909acfb4d9a8b72afafb53d`
SHA256	`15e6bae8fcb1ce3821dc2e58d178ef4fe3c969507b7d2d46fd983ac21ff763f4`
CRC32	`57A6BE2B`
ssdeep	`24:6PHPplb8jtXAymozqv0IT56fuZyu2xUb:Yvp5gO0P`
Yara	None matched
VirusTotal	Search for analysis

Name	6f93026065b42bff_ll12_xgl.idx Submit file
Filepath	C:\RPromas\LL12_Training\LL12_XGL.idx
Size	508.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`5d05c62b80966eb9ae9c3acce9db099e`
SHA1	`58e43d20fe2ea382a4cc0a42c43ec009c03748f7`
SHA256	`6f93026065b42bff3f49356945d9e431dfbed7597c072820fe04641d005791c5`
CRC32	`1AF44BC0`
ssdeep	`3072:u2HfXpPR3J/BXPRbMs9VQO9XwEOuoXldWEjbWxe+WXkEjq1AzEOfwdB+RIGVfokf:u2H/1J+1wyWo+a0tiGzYyWK`
Yara	None matched
VirusTotal	Search for analysis

Name	01db80a9f39f61db_LL12_VENDOR.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_VENDOR.ibk
Size	40.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`7527006e12f1c882179eadec0eb0a959`
SHA1	`bd7fbd58e5bcb38937a675bf5d223f05c6bf7a95`
SHA256	`01db80a9f39f61dbe3fff70aeb86117f21d3a9ffe7a9b2cee7bbc5eaf58a66f8`
CRC32	`DBBECACE`
ssdeep	`12:9ZyiGxXcDXw/7kedl3qogRzky5l/exSfTPmX49fs4+ky9Kj0+aCL:9m4en3FgRxteSfTPmots8L`
Yara	None matched
VirusTotal	Search for analysis

Name	dcd2218388877917_LL12_COMPANY.blb Submit file
Filepath	C:\ProgramData\mia796F.tmp\data\The Professional Landlord\A056D2F4\3F943650\LL12_COMPANY.blb
Size	512.0B
Processes	1052 (Install_Rental_LL12_2018_4.exe)
Type	data
MD5	`7df3e7f582228a72ac26744c80fc5f90`
SHA1	`03b52cb4962e69c3fc0ad47db1a676d463ea090c`
SHA256	`dcd22183888779174553cdc257d24d6d9f354f8003ad6d064527faa2871db60c`
CRC32	`E78479F4`
ssdeep	`3:kl7QCuGZBul/llltl:sEG/utf1`
Yara	None matched
VirusTotal	Search for analysis

Name	1da080aaa0722884_ll12_acctline.dat Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Acctline.dat
Size	3.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`e0b8f9413a1928bdf748f8b0f9c8c925`
SHA1	`43b93a667737c1572a4b2bd0c1114ddce5d33da8`
SHA256	`1da080aaa072288482bb41e2bc582aba2fe0198079dec5982504df4b6a32b1e5`
CRC32	`C9002056`
ssdeep	`3:elDQCuGZBul/lklRnlllHIX8lUFt/tStl/psAY//nzlltzGKQlXvULl1znllN///:68G/ut6cX0U38X2AY/HpR`
Yara	None matched
VirusTotal	Search for analysis

Name	ae3d28cf269b4c19_Release 2018-1.pdf Submit file
Filepath	C:\ProgramData\mia796F.tmp\data\The Professional Landlord\A056D2F4\465BD09E\Release 2018-1.pdf
Size	268.2KB
Processes	1052 (Install_Rental_LL12_2018_4.exe)
Type	PDF document, version 1.5
MD5	`90758de0d409e7cd402004ec0a629e8c`
SHA1	`1ff84b016b08981fa14164340a8f68d420ed6289`
SHA256	`ae3d28cf269b4c19d998e0ab66ba96ab5bac968cc5c4f7774a88af11391747df`
CRC32	`E78E5D98`
ssdeep	`6144:yri2nflBtr+ggZ8A1AguEigo1x9URRfUSwWI03Rzgtz2Ve5Jot:+iUE2Xguo0+HUSBI03qhPot`
Yara	PDF_Format_Z - PDF Format
VirusTotal	Search for analysis

Name	a0e750466327e92e_componentstree.dfm.miaf Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\mia1\componentstree.dfm.miaf
Size	374.0B
Processes	2088 (Install_Rental_LL12_2018_4.exe)
Type	ASCII text, with CRLF line terminators
MD5	`8101e0cc3186c05f85b2cd484d26ae9d`
SHA1	`b3cf33e0784e3a6f3b3feb2b2501e0bda5932efa`
SHA256	`a0e750466327e92e2dcc96d72a19a7738a65ab765262df4801e6677528f14d6c`
CRC32	`B53F2EFF`
ssdeep	`6:aiN82du+wg4RBN82dukU3ekRBN+ukYRBN+u+wgAuN+ukU3ecuN82dukT:7INIkU3lkimkU3MIkT`
Yara	None matched
VirusTotal	Search for analysis

Name	e4cc0a82d9808028_LL12_RENTLINE.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_RENTLINE.ibk
Size	32.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`b2bff30ff387e47479703c3ca2aa8e3e`
SHA1	`5e87168482f6aec841a1ed603e97ccfadeaaaaff`
SHA256	`e4cc0a82d98080286ca5bac82be12114a942912007c6a01acf8208388a9ac635`
CRC32	`F516CA37`
ssdeep	`3:xllxQCuGZBul/lwlUl1llVllzlHl+lttl/Ql/s/AY:YG/utlT/7+I5s`
Yara	None matched
VirusTotal	Search for analysis

Name	3057ff2000f53185_LL12_CATGLINE.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_CATGLINE.ibk
Size	40.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`90036e7ace4a7c7430d385892356f2f4`
SHA1	`2131a0e227ea737ff09d33b1ce401db6a14b1833`
SHA256	`3057ff2000f53185cc4db90ffb4dfebea495d3e9da585cfe0f8cbb6a5329bcd0`
CRC32	`BD491B5C`
ssdeep	`48:9Ncf5HNfd2IhMhJvZZcFVLmeIq0MW8EQ4I7AL6JqbmEXLU10BNw2:m5HNfd2r3vsrLmLNQ4Ii66XoKu2`
Yara	None matched
VirusTotal	Search for analysis

Name	a38f1678d1d962e9_ll12_userreport.dat Submit file
Filepath	C:\RPromas\LL12_Training\LL12_UserReport.dat
Size	3.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`cda129aaf3f3ec09f436689720b334e2`
SHA1	`f6175d33b38326ed63943d2ed91cf4d773ec58b7`
SHA256	`a38f1678d1d962e9683f18bde50dd52fcd2e140750a25c190863f010bcd7d65f`
CRC32	`9EAF60BD`
ssdeep	`3:/xQCuGZBul/lklRlkFLZbqGk8lUFt/tStl9wVHjblxh/liMgQLQ/tklP/llll:GG/ut645wj0U38XqVv/hs5Qc/tk`
Yara	None matched
VirusTotal	Search for analysis

Name	ac4cbe3d60360055_ll12_logon.lcf Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Logon.LCF
Size	9.0B
Processes	1936 (Landlord12.exe)
Type	data
MD5	`a547478705dba2e7dd3768464fd1b57b`
SHA1	`d4c5855c3ae7bf33f210c48610c7bea05a616862`
SHA256	`ac4cbe3d603600559a9ad24d13b155e233a01bb438ef64077051e108408831a4`
CRC32	`996AC04B`
ssdeep	`3:Yn:Y`
Yara	None matched
VirusTotal	Search for analysis

Name	4042acc6a08796cb_ll12_molline.dat Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Molline.dat
Size	12.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`8e77d2b1680a98db008d562ac4e94407`
SHA1	`29f52d9a6cba806a5bc516b520a593a0db0b214e`
SHA256	`4042acc6a08796cb671c05d516cbc82142c6f3e4bb814657689c39a1e5d8dddd`
CRC32	`186A883D`
ssdeep	`12:6PhaU0UMX2AYhtlhMI6zZ3+NiJj7cglX3uW/:6PCm5tlhMPzN+NiJj7cgFD`
Yara	None matched
VirusTotal	Search for analysis

Name	c5ad14da04e22b3f_ll12_owner.idx Submit file
Filepath	C:\RPromas\LL12_Training\LL12_OWNER.idx
Size	48.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`29c219bc0e51caef64e64ccb317447b0`
SHA1	`f20ba13de8af21be95190e6f5de26d1385bffc86`
SHA256	`c5ad14da04e22b3f8a25c83ca83b5b6a6771b848975ea8254c7e407175892458`
CRC32	`392832A6`
ssdeep	`24:XxjMrnRGt6uw8H0ZgreLoMo7nemWZYWg7BFqOHtfR21h5:XxjM9GTAirTMo6Q3EKpa5`
Yara	None matched
VirusTotal	Search for analysis

Name	11285fd81a0eef25_LL12_Chkinfo.idx Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Chkinfo.idx
Size	24.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`9589dc0ede6a248a75ffd19b62724a01`
SHA1	`2f697d65c594f74097fb2462209aa4110a4af5fd`
SHA256	`11285fd81a0eef254bc454e609d9cffcbc831075c4ee35b055e8a3a668996f09`
CRC32	`233C7DD0`
ssdeep	`3:xllxQCuGZBul/lklGlFPl9VllzlHl:YG/ut6yL/7`
Yara	None matched
VirusTotal	Search for analysis

Name	a06a5b95a648f245_LL12_MGMTFEE.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_MGMTFEE.ibk
Size	28.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`8e6cc0b95bc2587f631cea4400b29739`
SHA1	`d06eb9193f7d77b18cb2c956b976d45cae0c97e7`
SHA256	`a06a5b95a648f2458dc69aefe8251297bd21867c11c5669c17bd2becbfe30a5f`
CRC32	`0C159397`
ssdeep	`3:qQCuGZBul/l/lelMl6ltFln/tNVllzlHlXtl+:hG/utikOF/tz/7e`
Yara	None matched
VirusTotal	Search for analysis

Name	e75843feeb33ae16_ll12_owner.dat Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Owner.dat
Size	99.3KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`2a0630877053c52c984855e6e387a9e6`
SHA1	`927df5ca0f925896f4cb32ec5721816b95a832fe`
SHA256	`e75843feeb33ae160c06eeba31f9673d1e6f39f74a3543590c4c1551f6e4f283`
CRC32	`D2B4D371`
ssdeep	`192:s1TvDcriAXkVZR3ZU+AZ5lN+Mjy2VDSfyqD:vmUk5oV+wy2VDSfv`
Yara	None matched
VirusTotal	Search for analysis

Name	fed5f7ee09739d1c_LL12_STMT.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_STMT.ibk
Size	28.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`ea2c2cb86a35142418d263a8c15569a3`
SHA1	`e24ee5b042e006b628815ad032fc1ecbd0f06591`
SHA256	`fed5f7ee09739d1cac5a6099f643ad988799618388d83b67651aeaa0c7daa351`
CRC32	`AA2286DC`
ssdeep	`3:qQCuGZBul/l/lelMl6ltFln/tNVllzlHlxltntl+dl//:hG/utikOF/tz/7xlkdl/`
Yara	None matched
VirusTotal	Search for analysis

Name	4bf69b536ec93cb1_ll12_mgroup.blb Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Mgroup.blb
Size	1.0KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`a31ca8107a6e5c12aa03e8a8ff2fa780`
SHA1	`f68e6c5f7baff5b1fa44d912cb937a8b09c5507d`
SHA256	`4bf69b536ec93cb1648e80859a3d52bc288a7ddcff9a4a33b60cfcf9955d6a0e`
CRC32	`EE15C754`
ssdeep	`6:hG/utkSfACoLLELL/MKv4RvEwYY9cvvvzPMKTm/SIwf9X:AbCpzLjv4RgoUHaKbfN`
Yara	None matched
VirusTotal	Search for analysis

Name	8e25726c55ee94dd_LL12_VENDOR.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_VENDOR.ibk
Size	52.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`5c7d3282987c92c82bb1de983b234c88`
SHA1	`66b2f19e0809f4aee78cb3f826a7aba72449344f`
SHA256	`8e25726c55ee94dd7280cdca4f7ddf321990e1c14f80baf63e40aeb4655a1d4b`
CRC32	`05B8311F`
ssdeep	`24:ePsMNUen3FgRxteSfTPmots8LbytgmuttbYAUFc/Lu1hfw1kRlY:ePsMa6F2NfT+oX/ytgm0lIqLifw1i`
Yara	None matched
VirusTotal	Search for analysis

Name	36f91e7793bef1d3_LL12_RECRXFER.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_RECRXFER.ibk
Size	36.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`d9503bdb87e23fa91a9f4e517f77d854`
SHA1	`e1ccfc3cdd7a339e8058ba61b35fc9fc37b8369c`
SHA256	`36f91e7793bef1d3b6706646d3b6a87c57f304c3d88bcf8c2587f6d849cdfec2`
CRC32	`9BBC41E7`
ssdeep	`3:gltxQCuGZBul/lwnll6ltFlWlG/lvtl9lrVllzlHldlSjlSjl6l/nks:g8G/utqn/OFiGxX5/7dlSjlSjlOss`
Yara	None matched
VirusTotal	Search for analysis

Name	daea749f0e2b18cb_LL12_XGL.idx Submit file
Filepath	C:\RPromas\LL12_Training\LL12_XGL.idx
Size	24.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`b407f8f5f908b5b673f8d39b02d5e711`
SHA1	`243a7b3b52f04028c56668608aa5c9d1e02d282a`
SHA256	`daea749f0e2b18cb02fefbeca3b0472a4060097338a11e48ed8fe6a336b87097`
CRC32	`B5FFD229`
ssdeep	`6:aG/ut8yOFiYmhe/uYG1lH/GXK8djL/nlXy/WJo/7:1myiYmMmxlR8NTRof/7`
Yara	None matched
VirusTotal	Search for analysis

Name	b37232837f87fc67_LL12_Noteitem.idx Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Noteitem.idx
Size	48.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`ef81a9a076311da575e2740eee9443f7`
SHA1	`db3661d24c276359f413d1bde3c9557e68f52a2e`
SHA256	`b37232837f87fc67901a7a4c5b505c0952564e67173cc8714dce8bb9ba565006`
CRC32	`5FBF39D9`
ssdeep	`96:w61fjWOdWO3QHlHE6l1roHZTbVl2clmJwl6CUYlhXRaPUoOalVfZ:w61f6AN3Ylk6lQTJAclTl6Cfl6PUoxl`
Yara	None matched
VirusTotal	Search for analysis

Name	dfc93eb4c1201072_ll12_rtable.dat Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Rtable.dat
Size	18.4KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`b6d86d01ca568a00f9a9dfe1335fb581`
SHA1	`85acbdbfb20c01f9535d4a7f178384860cb7b995`
SHA256	`dfc93eb4c1201072e8f9736f56cdf0e1f4a0b4116d1386a02d6cc1050f7f1df8`
CRC32	`E10CFBBB`
ssdeep	`24:kRmXzhssMi5nm8KERVe1aNPlip2b+QP8W:kRGzhbzkaVQaNd3b+QE`
Yara	None matched
VirusTotal	Search for analysis

Name	12e918702dcf9e12_LL12_SORT.dat Submit file
Filepath	C:\ProgramData\mia796F.tmp\data\The Professional Landlord\A056D2F4\3F943650\LL12_SORT.dat
Size	5.3KB
Processes	1052 (Install_Rental_LL12_2018_4.exe)
Type	data
MD5	`12162a2176a44cc75373845e1eae8916`
SHA1	`0cd59fe1299dc275e958c33276b044e019541782`
SHA256	`12e918702dcf9e127c5082c600db9683e05849cb7a8544bcaa8ab1a0cd55b0c2`
CRC32	`7ED8BAEB`
ssdeep	`24:J1R4iYcl4U0PUAuuzTAlaePUAHgzfcTRbk5uN94ks6Hc+0vNi9Ikz:JjVYcl4UEUt20aCURy59I`
Yara	None matched
VirusTotal	Search for analysis

Name	48f959ad5f37416a_Landlord12.chm Submit file
Filepath	C:\ProgramData\mia796F.tmp\data\The Professional Landlord\A056D2F4\B21C7FEA\Landlord12.chm
Size	1.9MB
Processes	1052 (Install_Rental_LL12_2018_4.exe)
Type	MS Windows HtmlHelp Data
MD5	`fcc4d072b568fc05257c3bdc9b681607`
SHA1	`25945521a552883e9c60082e00c1e0a31050d0e8`
SHA256	`48f959ad5f37416a5ce2769d6f9de5ca37fcef19e6dafb8fed3b6f424f3b253b`
CRC32	`5847C035`
ssdeep	`49152:hFtekx6SvogiScMR08sCxwD1RuJIjCLZo++nWYQEZD:JzogHcmvx6uO68nWx6`
Yara	None matched
VirusTotal	Search for analysis

Name	2dfb4db01249dfae_ll12_rjline.dat Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Rjline.dat
Size	5.0KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`04b8c2bbce3675496d4d45dd83290ec1`
SHA1	`7fd3110d4f33ae45481ece0248091046ec5b015c`
SHA256	`2dfb4db01249dfae1e817531450ac42a2d012f659a14fffdff2b23437c8c164e`
CRC32	`C49EB728`
ssdeep	`3:elDQCuGZBul/lklLlllllnst8lUFt/tStl/psAY//nzlltz51l//tUjxlXv1tllM:68G/ut6Jk0U38X2AY/l5v/qgtlS1w`
Yara	None matched
VirusTotal	Search for analysis

Name	e748ef827129ff52_LL12_XAR.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_XAR.ibk
Size	164.5KB
Processes	1936 (Landlord12.exe)
Type	AmigaOS bitmap font
MD5	`b9e5c03f04469b0ddc7dead2d05187bd`
SHA1	`ae00a8ebd52dd4d62875d11603f56d1455670a91`
SHA256	`e748ef827129ff5289813a2a25e29ff9278a4c8c96d66b71d450e4c7641dc115`
CRC32	`06952DA1`
ssdeep	`3072:IIH6AG4KIOg6gmo64+AGcHEUG+mmeOGuFUG+mmeOL09K:FDY`
Yara	None matched
VirusTotal	Search for analysis

Name	84bd26eee7933ac0_Release History 2016.pdf Submit file
Filepath	C:\ProgramData\mia796F.tmp\data\The Professional Landlord\A056D2F4\465BD09E\Release History 2016.pdf
Size	488.2KB
Processes	1052 (Install_Rental_LL12_2018_4.exe)
Type	PDF document, version 1.5
MD5	`00a3a5a1312d884f7e644b961f1138eb`
SHA1	`9ae43c068a19ad1775b1bd49bd662e081225c6a3`
SHA256	`84bd26eee7933ac01195639a539abc7420264e4b50b18e8404543311ec5b4272`
CRC32	`1320118B`
ssdeep	`12288:PpXjVVjREzQQAeCRUxnucbJ1c5kpq67oelkAfO2fc6zSdoIh:PVjrjR/FtBj6qElkq5moU`
Yara	anti_vm_detect - Possibly employs anti-virtualization techniques PDF_Format_Z - PDF Format
VirusTotal	Search for analysis

Name	d832f89eae70f0ab_LL12_COMPANY.idx Submit file
Filepath	C:\ProgramData\mia796F.tmp\data\The Professional Landlord\A056D2F4\3F943650\LL12_COMPANY.idx
Size	32.5KB
Processes	1052 (Install_Rental_LL12_2018_4.exe)
Type	data
MD5	`23e8ffdc74d65b106aef9a8804fdf27c`
SHA1	`4945dbd5d1bf795bbbfe7576fcf35234e1c9929c`
SHA256	`d832f89eae70f0ab55d152a937f9fd8b8e0fe06ff64119186ff0af263c2f2e0b`
CRC32	`988C6943`
ssdeep	`6:YG/utG1OF/tz/7ulsHWzJz/SQOQ/qkgieAxqiS58AKB7fpl8LRXTlS:Tby1z/7PcR/ZRqONqiorKHAl`
Yara	None matched
VirusTotal	Search for analysis

Name	8907ee24b4dfa9f2_LL12_SUBST.idx Submit file
Filepath	C:\ProgramData\mia796F.tmp\data\The Professional Landlord\A056D2F4\3F943650\LL12_SUBST.idx
Size	32.5KB
Processes	1052 (Install_Rental_LL12_2018_4.exe)
Type	data
MD5	`ccaa0e5f88cf77af32889dfdb868580a`
SHA1	`66d4edcce380b6402102f9d9c03b8ae836a46bae`
SHA256	`8907ee24b4dfa9f2e79f6ca1443c115cbe7236a6341b6e7cbe6b39762ae47a41`
CRC32	`0E6E461C`
ssdeep	`12:DYiih/7PcR/ZRqONqiorKHAls/MzpbF1g2tjt9tIsGfD4Rpggs+VBTim:DKyRq8qiorKHA2etR/6D44smm`
Yara	None matched
VirusTotal	Search for analysis

Name	cc06ec5d66644512_LL12_CHARGE.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_CHARGE.ibk
Size	32.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`a7513a1dc158bc29ca2346f2cabc0a2f`
SHA1	`72bfcb409e25b3b528ad26fa0bdd8a38c8dfcfe8`
SHA256	`cc06ec5d666445127703ae125d15650c98244952234e79d68840aa93e1a1a3fc`
CRC32	`57DB4DBE`
ssdeep	`6:YG/utlOFih/7Ldl9plPlP1lQOk+3ao/KkkGfH/Hk2f/:TIyih/7LdlRR1lQOHao/0G3v`
Yara	None matched
VirusTotal	Search for analysis

Name	0077c75416680fc1_LL12_TENANT.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_TENANT.ibk
Size	64.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`457663639e8e114298daf5b66238e81a`
SHA1	`f344b4e96a57a31b01542dd2941a7e3cc3626e92`
SHA256	`0077c75416680fc138f7480fc60e41deb78fc445b9535403e01774d232af355c`
CRC32	`40CAA0D9`
ssdeep	`48:rx/MBPO+6rYLsNJPyEy1B0xyv+RyljzwtbetBsw08q0/56lQNXv869OyW1GKqW:mG+sJPyEyTaC6ylw1ec98qFlQO1VOW`
Yara	None matched
VirusTotal	Search for analysis

Name	a9237df61b5f669f_LL12_ZIPCODE.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_ZIPCODE.ibk
Size	36.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`6c1794d936200df70d8c101c9bbb7049`
SHA1	`d36c7ef93278cd2aadc073e2205895554b94eb15`
SHA256	`a9237df61b5f669f55bf523630464af697986de8db496c40e4bfe21669c0fbaa`
CRC32	`09599D28`
ssdeep	`48:q5IsBfERgst3/380yZ6ul3luzTX1/ze/QY:Y9ERD5eZDizs/`
Yara	None matched
VirusTotal	Search for analysis

Name	265f7cbe912450a1_LL12_UNITTYPE.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_UNITTYPE.ibk
Size	32.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`ab7bd2c12bc5a96135e90ca02c4638b2`
SHA1	`49ba36d266e9151b2af6631709396aa53e2ff86c`
SHA256	`265f7cbe912450a1809723747694d712254f8b5f78c8995219f0e4b9d948804f`
CRC32	`8EB0279B`
ssdeep	`3:xllxQCuGZBul/lwlUl6ltFlWlzVllzlHldtl+dl+84l+llC/Fjlkl8/bI+Klf:YG/utlOFih/7Udl9plM/3k9/x`
Yara	None matched
VirusTotal	Search for analysis

Name	1727591aed82e669_ll12_mxwo.blb Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Mxwo.blb
Size	3.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`03de6e546c4083069dafe52d4e6cd3b2`
SHA1	`694592a87dde976ecf3d8b59151f7d847a2fed7a`
SHA256	`1727591aed82e669b3ceea81c1953879a84a73393fe0e8b28486a20890cc846b`
CRC32	`63C1961E`
ssdeep	`6:CG/ut51uzCCj46HAz7qEMiAOEEdJX+XL39UOjPpctH/pMNMN8iMNM:9U2C6gAEdJiv0H/pWa8iW`
Yara	None matched
VirusTotal	Search for analysis

Name	9002cf2178e68d93_ll12_mgmtfee.dat Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Mgmtfee.dat
Size	13.1KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`c20488341e12c1c5ee4675928c7ee7ea`
SHA1	`d62606cd441f325b775e02506969da19782969e0`
SHA256	`9002cf2178e68d9378c8642539b75a310e139d40060de4f768e240fedf69706e`
CRC32	`EF7AE6B1`
ssdeep	`24:9f4mXzGXcajf51Bmknli87BpgWcBwO1iE:9f4GzGsErBmH4CwMi`
Yara	None matched
VirusTotal	Search for analysis

Name	15f5ad031f9d86f2_Landlord12.license Submit file
Filepath	C:\ProgramData\mia796F.tmp\data\The Professional Landlord\A056D2F4\B21C7FEA\Landlord12.license
Size	36.0B
Processes	1052 (Install_Rental_LL12_2018_4.exe)
Type	ASCII text, with no line terminators
MD5	`ca110119c9a347e72bd6508db7178e2f`
SHA1	`85e73834aac1aae4d16f57f40afc494e89021619`
SHA256	`15f5ad031f9d86f2b5d923f22a7f849fca311bd8042a86e59fd0d81505d350fe`
CRC32	`87E94CB5`
ssdeep	`3:kTxts6qKn:4bn`
Yara	None matched
VirusTotal	Search for analysis

Name	799b7f02ba036f90_destination.dfm Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\mia1\destination.dfm
Size	32.4KB
Processes	2088 (Install_Rental_LL12_2018_4.exe)
Type	data
MD5	`c92448db4098f4a3095c0bf94500d2d6`
SHA1	`d5f0aaa3c7e55b085d0d57c13499e07af30354cf`
SHA256	`799b7f02ba036f90052545da51d2807a0cb65b657c36fb26113bde086e40d929`
CRC32	`0393F793`
ssdeep	`768:BxHXQ1NmO7ZDrkqzM+KGlm1ccHq7kBTT5Dmoibfh:BpXQ1NmO7ZDrkqzM+KGk1ccHq7kJT5Ds`
Yara	None matched
VirusTotal	Search for analysis

Name	c408e686ae94db38_LL12_XBL.idx Submit file
Filepath	C:\RPromas\LL12_Training\LL12_XBL.idx
Size	24.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`87e4a25ab9c850dcfac77832cdf5f627`
SHA1	`67cfba265dadf13ff9c33513ab4b0d935b159d88`
SHA256	`c408e686ae94db387c606b6ea17bdf4d80e76bb70900e65fe371db1551403bf3`
CRC32	`B7AA061C`
ssdeep	`3:gltxQCuGZBul/llltlWlali51l//jlFlFlzVllzlHl:g8G/utf1iN5v/3/7`
Yara	None matched
VirusTotal	Search for analysis

Name	e90255451718be64_LL12_Integration.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Integration.ibk
Size	24.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`5f094bda0304568ba071811fb982e363`
SHA1	`5c789630384e025e088742b3d5be8b514d95d2c7`
SHA256	`e90255451718be643c22e1b459509e3249da430e96cbe28e07d04d8d4fe77780`
CRC32	`78C3CEB4`
ssdeep	`3:gltxQCuGZBul/llltlWlNlE//lWl1Gm/E/SllllllFVllzlHl:g8G/utf1i0tismZl//J/7`
Yara	None matched
VirusTotal	Search for analysis

Name	c3d19750a03b2272_ll12_rentline.dat Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Rentline.dat
Size	3.6KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`8d125c8276fff08f09ca4a64e924d771`
SHA1	`336e1d52bea7b774355fee90d0f6a5a917fd6e27`
SHA256	`c3d19750a03b2272b3c29bba9390a372ce8eb3f88fa8d292cdab7d8f34cf8c7b`
CRC32	`113A35AF`
ssdeep	`6:oG/utgq0U38X2AY/WI0atlFJhflRAtILbhXy:jnq0UMX2AYePW3RAgxy`
Yara	None matched
VirusTotal	Search for analysis

Name	2ed8f2dfd7b6656a_LL12_Acctlist.idx Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Acctlist.idx
Size	24.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`3820802c70df2cc8cbf037c9f8dfd667`
SHA1	`9af836c1d825f5bc67cfa39f67966ea455f2db02`
SHA256	`2ed8f2dfd7b6656a2d2830b9f184d60ee3bb3528a46e01a4647b16fbfc37dee5`
CRC32	`A0E6CBB8`
ssdeep	`3:LxQCuGZBul/lmlllul6ltFlWlG/lvtl9l8IAtlzlntlEVllzlHl:CG/utUyOFiGxXcFtzXw/7`
Yara	None matched
VirusTotal	Search for analysis

Name	e3cda0c8b92a959b_ll12_catgcopy.dat Submit file
Filepath	C:\Users\test22\AppData\Local\PROMAS\LandlordForWindows\Instance1\LL12_CATGCOPY.dat
Size	5.8KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`f29cb61fa90eaf309ae7cac90318be6a`
SHA1	`af534079c9a566cb7f072bd4c718612ee11f243f`
SHA256	`e3cda0c8b92a959b3f420f9a6f8d7619f8d704644f66044fd5f83f3a3681fc73`
CRC32	`C4C17E26`
ssdeep	`6:g8G/ut6V0U38seAY/IlX9kELCFllPNDuCy:qhV0UMseAYA9LC7S`
Yara	None matched
VirusTotal	Search for analysis

Name	df5594293fb1216e_LL12_PARTNER.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_PARTNER.ibk
Size	40.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`9aa4c740b12e1dccc90691e768d3d752`
SHA1	`4b56b8023872b73ed5814dac2de0d09474969974`
SHA256	`df5594293fb1216efddf07488f7fa19a089a73a8b809b3d0a69286469975f89e`
CRC32	`A312BC40`
ssdeep	`6:CG/ut+UWOFiGxXcFtzXw/7dlSjlplb8sNlbkds:9ZyiGxXcDXw/73`
Yara	None matched
VirusTotal	Search for analysis

Name	6404f7eb08eef097_LL12_CATGLINE.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_CATGLINE.ibk
Size	44.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`29f21e5d648eac9653c55edd56263aed`
SHA1	`0a6a57a24d519174a5d9c80f91837b5a72ec52f8`
SHA256	`6404f7eb08eef09799d11415b381ef2c2468bf6aecf34f331e746362f9208b55`
CRC32	`A9777FFC`
ssdeep	`96:x5HNfd2r3vsrLmLNQ4Ii66XoKu2ai66XoKu2:x5HxM3vsrLmLNQxiZoKGiZoK`
Yara	None matched
VirusTotal	Search for analysis

Name	f4921de3d6fecda6_LL12_XGL.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_XGL.ibk
Size	64.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`cd546d969b7a65169efe4333401725ac`
SHA1	`a8eafc269c0fc7b47ff5d1dd40f1404e69509a20`
SHA256	`f4921de3d6fecda674bbeb27dfdb30e6c6a4a60dc3b5a65417aac565f5bd42dc`
CRC32	`BCE0DB12`
ssdeep	`384:o/hCkMSLLHbztd5Lz3lMRC7/h8kMS5Hbztd5Mz3lMRC:yrMAL7zlzyCtpM27zezyC`
Yara	None matched
VirusTotal	Search for analysis

Name	7ecacdbeda7c93de_LL12_PROLIST.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_PROLIST.ibk
Size	28.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`c58fae6ca4228f80f63d0e119b39426b`
SHA1	`f6eaa12be019dac3da37bf040d6a56154929a31c`
SHA256	`7ecacdbeda7c93de851658984b8729162fadd02067db6c7e964e3bda54ffa3f8`
CRC32	`FB32A092`
ssdeep	`3:qQCuGZBul/l/lelMl6ltFln/tNVllzlHlIllntl+q:hG/utikOF/tz/7IG`
Yara	None matched
VirusTotal	Search for analysis

Name	c9f8ec091f7c0ac2_ll12_mxmtype.dat Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Mxmtype.dat
Size	4.6KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`33ab6eccc4d115c67f3c8b4b9e49971c`
SHA1	`6b4c3c81f28811e0a04f4e805d3fb4ab200f7cb6`
SHA256	`c9f8ec091f7c0ac296db26eda7ec2862d81f5628b09c666666ed24cb0ff2ad3f`
CRC32	`2D0BCCF2`
ssdeep	`6:m8G/utoljlp9kX0U38XWXzIAtXDeSYbq/fum+qB9ow/DCSBtkZaaOA/b+l:mPtJlpm0UMXWXzje7b6gQowLXtkne`
Yara	None matched
VirusTotal	Search for analysis

Name	d779d85d06f75ea1_ll12_xar.idx Submit file
Filepath	C:\RPromas\LL12_Training\LL12_XAR.idx
Size	208.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`1279fb678bcbff5bc4d50ce34f1fc73f`
SHA1	`691213e8d0776dc43a36615c4fb0eab7a46fb514`
SHA256	`d779d85d06f75ea118469de360fc2b9192fe90bbf108ddffe877acc74d734c05`
CRC32	`86E4D725`
ssdeep	`3072:rIH6AG4KIOg6gmo64+AGcHEUG+mmeOGuFUG+mmeOL09KFNwmMocQc4+W:cDY`
Yara	None matched
VirusTotal	Search for analysis

Name	23d6d6041b3025a8_maintenance.dfm Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\mia1\maintenance.dfm
Size	156.9KB
Processes	2088 (Install_Rental_LL12_2018_4.exe)
Type	data
MD5	`b3c9c9ee0c9c2dcb15cf24d5df20f4f3`
SHA1	`3b1660eb617cb2751d9ccc79b8c025bd5a7b153b`
SHA256	`23d6d6041b3025a8b1817b5fc455067b534ad91dcb19a1d09509a3ae55065ced`
CRC32	`3C559A50`
ssdeep	`192:tdMMfzvu9vJSm3IZ8Zgspkk4B9heXItzNGzOiOWEpap5PKo6Mmp4Cwtq69wWnUgK:tfI/kwAgK`
Yara	None matched
VirusTotal	Search for analysis

Name	196354d5cc26aed8_LL12_ZRREL.dat Submit file
Filepath	C:\ProgramData\mia796F.tmp\data\The Professional Landlord\A056D2F4\3F943650\LL12_ZRREL.dat
Size	4.4KB
Processes	1052 (Install_Rental_LL12_2018_4.exe)
Type	data
MD5	`4638734e7fb15c8bb188b9fa98ec5931`
SHA1	`f12cf475ab0cbe5714c21415f76f0c57a6a67b40`
SHA256	`196354d5cc26aed8316b1d3a1018a45cf57c2c35c1464db189e43d0a3e9b5202`
CRC32	`FCDCA80D`
ssdeep	`6:YG/utkMglblIp91xiXWycWtlHlXVb1s01owVibCfL6:TbMglBI5xiXVnzHllb14w0b46`
Yara	None matched
VirusTotal	Search for analysis

Name	af3457ec3f623cd9_LL12_MESSAGE.idx Submit file
Filepath	C:\ProgramData\mia796F.tmp\data\The Professional Landlord\A056D2F4\3F943650\LL12_MESSAGE.idx
Size	32.5KB
Processes	1052 (Install_Rental_LL12_2018_4.exe)
Type	data
MD5	`1628f3091e91371011ee86bda2c40eb9`
SHA1	`16b2be59153b2a063eb1ff0b470a6947c09d09e7`
SHA256	`af3457ec3f623cd9efcce1121803a2091e79aea811c8e042dfcfde5a7a2c1c8f`
CRC32	`2EECC9B5`
ssdeep	`24:BHyRq8qiorKHACnRf5HWejaXvxEY+Uvelsx/PFCjAttTl9ZR7DaL6VJYb:BSRCsA2f5HDOXvv+Me4XFG2thNWOVmb`
Yara	None matched
VirusTotal	Search for analysis

Name	411751b576ae3e3b_LL12_UNIT.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_UNIT.ibk
Size	44.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`772113f6e5e8c292b16f2143307997e2`
SHA1	`c13bd32ce9374d88666e055769e767bfb48534a2`
SHA256	`411751b576ae3e3b30047a3a65901e429d2a722586a4787a0636afc59b59d843`
CRC32	`E509D869`
ssdeep	`24:U3pMFnRSeEIgTua6w5X78kVu+RXRgikEJ2/EgB77fcLxaFQurqFUWQ1H:U3pMDSagTn64IguWTkEJ2sgBwamurz`
Yara	None matched
VirusTotal	Search for analysis

Name	e60e5d6c536e85e1_LL12_XAR.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_XAR.ibk
Size	116.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`fccecaf170cec0928933c7db27ea02f7`
SHA1	`1fc7bb8ebdef126fc363018216ca48110f215ebb`
SHA256	`e60e5d6c536e85e1385418dceecb5426907bdefd698e2d5d657be0fdc5734015`
CRC32	`220921A9`
ssdeep	`1536:efvLZDWDH6AG4KIOg6gmo64+AaAOZZBVkygVhMh:0IH6AG4KIOg6gmo64+AGcH`
Yara	None matched
VirusTotal	Search for analysis

Name	f929bfb51354d33a_LL12_SORT.idx Submit file
Filepath	C:\ProgramData\mia796F.tmp\data\The Professional Landlord\A056D2F4\3F943650\LL12_SORT.idx
Size	32.5KB
Processes	1052 (Install_Rental_LL12_2018_4.exe)
Type	data
MD5	`1d651d1a7dba994d14c1c48e1da49db8`
SHA1	`d1d64fd1b0e7f2c1f6dbc49d1d85cfbed3c6addc`
SHA256	`f929bfb51354d33a40b295fbbb55f8e64e4d19a0547383c336e336e0348cf2f3`
CRC32	`D7760AC0`
ssdeep	`12:JbS/7PcR/ZRqONqiorKHAlwKrddW/wt3Mwll:J4yRq8qiorKHAWQqwll`
Yara	None matched
VirusTotal	Search for analysis

Name	093cdd58e20de57b_LL12_Xarbl.idx Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Xarbl.idx
Size	28.5KB
Processes	1936 (Landlord12.exe)
Type	AmigaOS bitmap font
MD5	`37bed05ff26a275f56eb777aa4b74dc2`
SHA1	`245258ae07f045ae2837140846ccef027a06a689`
SHA256	`093cdd58e20de57b418b290541c3a8d1734a06b96b0cfb1f27969556e9767d9d`
CRC32	`E204C4C1`
ssdeep	`3:OQCuGZBul/l/lelMl6ltFlWlzVllzlHlmln/O3aPK+lrl:VG/utikOFih/7mx/OKya`
Yara	None matched
VirusTotal	Search for analysis

Name	401850c6fc51d079_LL12_MXWO.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_MXWO.ibk
Size	44.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`8162801573e9b43283e5f67aee1e61e8`
SHA1	`b72adacf63777ed1c7755476880749d1e07cfab8`
SHA256	`401850c6fc51d079d4262f86af0f6e4d25def6b7d8283d0fa6ec5efa8338651a`
CRC32	`BB7BB8BA`
ssdeep	`12:U3HEyiGxXcDX6K/7tymozqUBef08kTt8UlnKp5:U3pOymozqv0IT5`
Yara	None matched
VirusTotal	Search for analysis

Name	f818a98a7eaf5906_LL12_XBL.dat Submit file
Filepath	C:\RPromas\LL12_Training\LL12_XBL.dat
Size	5.0KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`10952f58404dfe133311d679db6d50bd`
SHA1	`c2bcef7107abde87ce2a71682f2fba34ca63e45c`
SHA256	`f818a98a7eaf59062706dd91539fa11d185b67748cf6aed08eeedfc8c5204baf`
CRC32	`ADC0D4C6`
ssdeep	`6:CG/ut6fm0Yze/MXw1HEJxtll3htlOt/1Mtl:9h+0YiEXw1H63o`
Yara	None matched
VirusTotal	Search for analysis

Name	43b37554095f93f5_LL12_XGL.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_XGL.ibk
Size	248.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`c86e8483f9963f2cf77b531bbac41d10`
SHA1	`71352302bc27f0db3d241b131224f4c3c3d5de63`
SHA256	`43b37554095f93f587fe7ac6121c2099cb1c9cd6821aaed2ff2ef63e652494f2`
CRC32	`9990A4C3`
ssdeep	`3072:F2HfXpPR3J/BXPRbMs9VQO9XwEOuoXldWEjbWxe+:F2H/1J+1wyWo+`
Yara	None matched
VirusTotal	Search for analysis

Name	38c9c424cb65f4b6_LL12_VENDOR.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_VENDOR.ibk
Size	44.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`9756fdd5047d2ecf73054a94d1d26b12`
SHA1	`fba035302178119a919c8a28f173dec17a60d216`
SHA256	`38c9c424cb65f4b6d797bc95daee3c7e60abe939891cd43b2facc7e81da1c1b2`
CRC32	`42AA3926`
ssdeep	`24:U3pMGen3FgRxteSfTPmots8LbytgmuttbYAUFc/:U3pMG6F2NfT+oX/ytgm0lIq`
Yara	None matched
VirusTotal	Search for analysis

Name	b8521abda09ec17d_7z.dll Submit file
Filepath	C:\Users\test22\AppData\Local\IIIQF\7z.dll
Size	170.0KB
Processes	2088 (Install_Rental_LL12_2018_4.exe)
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`31cad6a3edd1c32981ad6b565cbeac94`
SHA1	`9338978c85a9423ee2a38cba027f79192d684f1b`
SHA256	`b8521abda09ec17ddad36528c1bc50395dc8c5f7c11c026a5b3ff23110c54182`
CRC32	`DE28A1EB`
ssdeep	`3072:xyljBP/VZjAISqyTFjoZAO1h7BTF1rJa//diUTTBXJxO8hlIhb0:xeBnVZ8w4toZAcLrJa/liSVHU`
Yara	PE_Header_Zero - PE File Signature Win32_Trojan_Emotet_2_Zero - Win32 Trojan Emotet IsDLL - (no description) Malicious_Library_Zero - Malicious_Library IsPE32 - (no description)
VirusTotal	Search for analysis

Name	35dbf31ef7ccf3bf_LL12_ACCTSEC.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_ACCTSEC.ibk
Size	40.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`f86171c01b64263e40e13390d64c5b0a`
SHA1	`0f7d2c3b5f935ab9c783944638b4a501d5c8e8a1`
SHA256	`35dbf31ef7ccf3bf3729d99f781ba20dacd3edf04ed9875272117098810d4911`
CRC32	`71602CF1`
ssdeep	`24:9mBnRQnu3UNdjzLSrXwvKZKj6+KXyyFZ:9mHWdjzJUKW+K3FZ`
Yara	None matched
VirusTotal	Search for analysis

Name	c50bf82f86b720da_LL12_XGL.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_XGL.ibk
Size	212.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`c0addbadb9b80ab552a43ba9839b786a`
SHA1	`687adcba55c848c3172a49e0b5cbf6dcd132b684`
SHA256	`c50bf82f86b720dad2f6ce61d3105a5e572093ab269c407950128968dfc3302c`
CRC32	`0E6FA3A4`
ssdeep	`3072:n2HfXpPR3J/BXPRbMs9VQO9XwEOuoXldWEjbW:n2H/1J+1wyW`
Yara	None matched
VirusTotal	Search for analysis

Name	44e46752ad0a5e9c_LL12_BILL.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_BILL.ibk
Size	32.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`e6be5c9cfa9105a0efadf1c7bd8b0d2c`
SHA1	`7749f79f1bbd30fa8f97983493358a55b1e4e275`
SHA256	`44e46752ad0a5e9c3b9c9afc2a0b3056450c387db559e1162c2da712f3a1f5f7`
CRC32	`EF8A125A`
ssdeep	`6:YG/utlOFih/7Zdl9plPlP1l1xlXledl9plPlP1l1xlXl:TIyih/7ZdlRR1lxEdlRR1lx`
Yara	None matched
VirusTotal	Search for analysis

Name	a7d449772ade9928_ll12_procopy.dat Submit file
Filepath	C:\Users\test22\AppData\Local\PROMAS\LandlordForWindows\Instance1\LL12_PROCOPY.dat
Size	3.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`ca60f1e933b69cf846146941d27b854e`
SHA1	`ef2dfc0aa44b3659f0aa513ed8c8168b7dee1f33`
SHA256	`a7d449772ade99288e660812c6017ed95d5a60644e5a9db60667b164ad13a8e2`
CRC32	`BE8FC359`
ssdeep	`3:gltxQCuGZBul/lklRnlllKjZKlt8lUFt/tSklnpsAY//nzklXB51l//tULl1znlf:g8G/ut6ujI0U38seAY/IlXB5v/qR`
Yara	None matched
VirusTotal	Search for analysis

Name	c0e01d4f0d3fedf2_LL12_Recrxfer.idx Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Recrxfer.idx
Size	40.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`e6b644e73a103c1a4e398861662ac520`
SHA1	`f618f46a198a3d6f02a33e10e5ec1d4dd123c833`
SHA256	`c0e01d4f0d3fedf20cb0b9399ef725834de67ac999029d47cf9460d59add7d08`
CRC32	`A3F57966`
ssdeep	`6:CG/ut+UWOFiGxXcFtzXw/7dlSjlSjlOssNlFus:9ZyiGxXcDXw/7C`
Yara	None matched
VirusTotal	Search for analysis

Name	afae5a97b43e37f3_LL12_PROPERTY.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_PROPERTY.ibk
Size	36.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`6c860752f706cce4b2d3c01925ba534a`
SHA1	`c68e9f3f3a8733e3acbdc11094e24a1288eff99f`
SHA256	`afae5a97b43e37f3ed7b72effcddb3f5f71897d6998c609b210dac22ce5753da`
CRC32	`601D9A9B`
ssdeep	`3:gltxQCuGZBul/lwnll6ltFlWlG/lvtl9lrVllzlHldlSjlp//jlb1lnks:g8G/utqn/OFiGxX5/7dlSjlp//jlb8s`
Yara	None matched
VirusTotal	Search for analysis

Name	a85e7b55006f5b82_LL12_Rjourn.idx Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Rjourn.idx
Size	24.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`d6c433d8e40a88977c1d975499783331`
SHA1	`46b3258ecb953aeeb3f889f65ec7e2af2f28d593`
SHA256	`a85e7b55006f5b824a9276e71e14306db2ec99cef96d0bcfd620d52a3928ae45`
CRC32	`7B6EC8CE`
ssdeep	`3:gltxQCuGZBul/llltlWl6ltFlWlo51l//Vl9lrVllzlHl:g8G/utf1iOFio5v/H5/7`
Yara	None matched
VirusTotal	Search for analysis

Name	00e8704497fc55ab_LL12_BXBudg.idx Submit file
Filepath	C:\RPromas\LL12_Training\LL12_BXBudg.idx
Size	24.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`8002a22b617fa4466f72d6356953933a`
SHA1	`e3d87865e3a54cd80790a4fe5462a6422996bf88`
SHA256	`00e8704497fc55ab36549137ee3b4e5ff4c1915a2014cdca27b8a452f8688687`
CRC32	`2C23647F`
ssdeep	`3:CllxQCuGZBul/lnlGl6ltFlWlG/lvtl9l8IAtlzlntlj51l//jlFlNll/FVllzlF:mEG/utdsOFiGxXcFtzXj5v/v/7`
Yara	None matched
VirusTotal	Search for analysis

Name	69e669d10d0801cb_ll12_docline.dat Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Docline.dat
Size	3.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`c1c7e21cfea252bbbddbc6d937698bbc`
SHA1	`141f10f409c972c1206cdd1387616265fa16b2e2`
SHA256	`69e669d10d0801cbd5b8e64d93a042347678d1457f6d8899ac9ee729ea6adb22`
CRC32	`3DFDC973`
ssdeep	`3:elDQCuGZBul/lklRlkFvwm8lUFt/tStl/psAY//nzllt9IAlltlym+/ClK:68G/ut6450U38X2AY/DHltcQY`
Yara	None matched
VirusTotal	Search for analysis

Name	867a47021a51399b_ll12_mxwo.dat Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Mxwo.dat
Size	27.7KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`c4766702d4f989ebccf75744914961ae`
SHA1	`a02a6cee54a721e1bfe205c8c623c72480b1b0e4`
SHA256	`867a47021a51399b819e840ee266558e847bb1cefd5e40825054938639437f84`
CRC32	`E235A7DB`
ssdeep	`24:PVmXzetqLIbLS3glAWuWXOYPdDjqz5Tmvux2w8C6LX2Fnq0/y5q:PVGzu+glAolD7mxKtJ0/yY`
Yara	None matched
VirusTotal	Search for analysis

Name	e58c5e102b99c2c2_LL12_CATGCODE.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_CATGCODE.ibk
Size	32.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`5f5ebc60d1f74d1bfe5b3a395246d34e`
SHA1	`153bd46f0f046f771baa8c8b07227fafb6beb4aa`
SHA256	`e58c5e102b99c2c22d7c94dac22b7ef64b493979f1c553a3408316fa29bd0e9a`
CRC32	`B5537C06`
ssdeep	`12:TIyih/7i2dlRR1lxp9lBFH3llv3XHZtt2dlRR1lxMuu0AxuOkKq:TMnRf5HB9knRfA0LO`
Yara	None matched
VirusTotal	Search for analysis

Name	4fbec72c2ee369ea_ll12_rjourn.dat Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Rjourn.dat
Size	10.2KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`4f36145a389564ee2b03ae35b2b8b77e`
SHA1	`c592393e8e183f196987090a31a9b8b2eed402af`
SHA256	`4fbec72c2ee369ea4129e0958f087170f228ec01a5772063b2e4507b646b1534`
CRC32	`71D3E427`
ssdeep	`6:aG/ut6Q9Mb0U38XsDv/nlA8tqaIX3wxtl9ntlGKf+OWFBOtflXU:1h9b0UMXsDtHzqwvdfN9fl`
Yara	None matched
VirusTotal	Search for analysis

Name	706eff8d948dc5a6_ll12_manager.dat Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Manager.dat
Size	16.1KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`25fe27d2ea296a0f6c072253324e2494`
SHA1	`c4dcc4a9ce845a9593312d8be2ccb076045f8b18`
SHA256	`706eff8d948dc5a677c66738a44113520879fa512ff3cea701b5fb6744dae88e`
CRC32	`D8DF57DE`
ssdeep	`24:1KPmXzuxrTIFl+KVdBJFluej+60a+HpqXK8h:1KPGzSHIfZvJfuejg3QLh`
Yara	None matched
VirusTotal	Search for analysis

Name	89788f2f21f912c4_LL12_UNITTYPE.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_UNITTYPE.ibk
Size	28.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`f23eb90f1ffdbf2116be3531e1c9b77e`
SHA1	`b6224bb91f292353f9ece7f23914a00f6fb08e8a`
SHA256	`89788f2f21f912c4d77e49acee59b27033367d3c8a989be548c38d54525149e9`
CRC32	`E26EEDC3`
ssdeep	`3:qQCuGZBul/l/lelMl6ltFln/tNVllzlHldtl+dl+84l+ll:hG/utikOF/tz/7Udl9pl`
Yara	None matched
VirusTotal	Search for analysis

Name	d89998006d6319e8_LL12_ENTITY.dat Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Entity.dat
Size	22.2KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`cb550d01bc23d1bfce051e1647c12491`
SHA1	`617f7db933da19d667de74dd03a1f5281086de01`
SHA256	`d89998006d6319e80a773e38799876fe9a898cb34faf1da387dd9cd466a8c393`
CRC32	`9340D0A0`
ssdeep	`192:cYcRMT3+70WqDJjuEdec9UZJq9J1lSHI53+pOHKgclXiBt:IU3+70/juEdeUU+XT53+pOHKgcRiL`
Yara	None matched
VirusTotal	Search for analysis

Name	c4fb8e353c7b4936_LL12_Stmtten.idx Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Stmtten.idx
Size	40.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`d17a23a1b34fd36be9cfc3b4131257f0`
SHA1	`6367cf48de9fc04960cf04f314a831e8cd19cc22`
SHA256	`c4fb8e353c7b4936100b64cf0d25163e6cc31257fc5a611a5652a15d8dbfd2d2`
CRC32	`7666565D`
ssdeep	`6:CG/ut+UWOFiGxXcFtzXw/7dlSjlSjlD2csNlDRScOs:9ZyiGxXcDXw/7Gd`
Yara	None matched
VirusTotal	Search for analysis

Name	5f3b90fde48b564d_ll12_catgcode.dat Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Catgcode.dat
Size	20.0KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`4637e5df3e0a9b634e5b58d1be02e6f1`
SHA1	`b2986c9c34f25a0c09029049e90b7b10fb16974d`
SHA256	`5f3b90fde48b564d7524d6c084b4b2306205ab7489d64ec9a6981a08754ed4ad`
CRC32	`46D02540`
ssdeep	`48:83bILKraEbsNHiEo9XUQm8Un2Q6HMC/ceupQ+:QbILObsdL+X0l6KK+`
Yara	None matched
VirusTotal	Search for analysis

Name	a3b93bbc7f0a7d23_LL12_XAP.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_XAP.ibk
Size	32.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`cb8488e10f0f8a5fd4a303aa76e4ab82`
SHA1	`07e4bd82c78c3171d574449149369eb37ed565a3`
SHA256	`a3b93bbc7f0a7d230ae5fabc2034a6eb8c64a666e234819244662e7a6ee939e1`
CRC32	`79D98267`
ssdeep	`48:T9f5HNfdt/tFP/RHHHF3yf5HNfdt/tFP/RHHHF3:V5HNfdFNFc5HNfdFNF`
Yara	None matched
VirusTotal	Search for analysis

Name	659d36ca563ba462_ll12_version.lcf Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Version.LCF
Size	26.0B
Processes	1936 (Landlord12.exe)
Type	data
MD5	`a396c59a96af3b36d364448c7b687fb1`
SHA1	`0db2a00e53ccf8ef330179835091f6b070c1ef52`
SHA256	`659d36ca563ba4622daabb36a71dafaf6060cdcbf89bb12e75426198496d272c`
CRC32	`AFECBE32`
ssdeep	`3::`
Yara	None matched
VirusTotal	Search for analysis

Name	896fa79ac00db140_ll12_cxecopy.dat Submit file
Filepath	C:\Users\test22\AppData\Local\PROMAS\LandlordForWindows\Instance1\LL12_CXECOPY.dat
Size	12.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`1b5cbb2360b814ead8034ffdf081b0ff`
SHA1	`68ee68b6a93e8a0e5f70af7fb5887c88742f8724`
SHA256	`896fa79ac00db1409f4da5b8270ed911721d886ec25f12cb88e1f494a7ff5b5f`
CRC32	`E267468E`
ssdeep	`6:g8G/ut6L0U38seAY/IlXju2XAOGIlI/oapWXbOlINIptlQ7jHptlO7lc//CCQHSl:qhL0UMseAYAGYIoapWXiuclcXnQHSl`
Yara	None matched
VirusTotal	Search for analysis

Name	53cfd88efb5caa33_LL12_LETTER.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_LETTER.ibk
Size	32.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`7ba4452fc3ed7d33db38e7b367d7a4ef`
SHA1	`0a16ca8bd563446890763ebb1059f2415b6abcfb`
SHA256	`53cfd88efb5caa33dff6467c1ea597bee85ca8183db8e863dd812c11649b562d`
CRC32	`9B82A3C5`
ssdeep	`3:xllxQCuGZBul/lwlUl6ltFlWlzVllzlHlIllntl+qGllntl+q:YG/utlOFih/7IGzG`
Yara	None matched
VirusTotal	Search for analysis

Name	d4c68787caa2b098_LL12_Latefee.idx Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Latefee.idx
Size	40.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`35d1db135c8d67b85dd50162393bf055`
SHA1	`6fee54baa53869fbc7473cb99a1ee3f24059f500`
SHA256	`d4c68787caa2b09837fb9bf0406e3495f682a0c702ac9d0b37e06bdd161554b1`
CRC32	`FD39D990`
ssdeep	`6:CG/ut+UWOFiGxXcFtzXw/7+IIIQ8N5G1EQChUss:9ZyiGxXcDXw/7+IIe5VD`
Yara	None matched
VirusTotal	Search for analysis

Name	34bd71f21bed03f5_LL12_XARBL.dat Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Xarbl.dat
Size	5.0KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`789892bd82f1d72d5cbbd263e4ead2fc`
SHA1	`5ec3f56efdb378981aab29272e5e46cf8d1a1448`
SHA256	`34bd71f21bed03f53ebde75aa4ba77814745b5ef934687009221c31c07fed618`
CRC32	`0277A507`
ssdeep	`12:M3Lkzk0MTiXbCXXDo6CCChFXCCCCuHOC62nikMCM26wCHCCr6PCOAH9tWtKC0FJh:mLk9LCXXDotRp2uLRLqtohw/`
Yara	None matched
VirusTotal	Search for analysis

Name	7c793b5f2f37a3a8_LL12_REPORT.idx Submit file
Filepath	C:\ProgramData\mia796F.tmp\data\The Professional Landlord\A056D2F4\3F943650\LL12_REPORT.idx
Size	44.5KB
Processes	1052 (Install_Rental_LL12_2018_4.exe)
Type	data
MD5	`f4cbf54d0a871467389cd5b286e88d14`
SHA1	`cfd78469f3c2bda1c183172326726d1697c4298d`
SHA256	`7c793b5f2f37a3a8bcaf0fead75ff1b6f32062cefdc3a2ff6bb93a92613101e8`
CRC32	`D3C07D39`
ssdeep	`96:awVz5WsTrg1/GarUd2X9oxI0VgKh9em5OzJZQ95TSzGF:awVZ/gdGaH2xI7gF5OzJi5TSzG`
Yara	None matched
VirusTotal	Search for analysis

Name	967d712b91a0cda2_LL12_MESSAGE.dat Submit file
Filepath	C:\ProgramData\mia796F.tmp\data\The Professional Landlord\A056D2F4\3F943650\LL12_MESSAGE.dat
Size	57.1KB
Processes	1052 (Install_Rental_LL12_2018_4.exe)
Type	data
MD5	`44ec15d26d3817f940484f26067823f5`
SHA1	`5058e4f215351dc0f79a405fd0ac97851af43473`
SHA256	`967d712b91a0cda2a733f4c06aaa24365cac8750b91cf7adc749428f765d8e93`
CRC32	`9C7350E7`
ssdeep	`768:Lh2iNVXc9G6shr0tI0Z5OWtTOJN2F1igzMeqxqj:A43dg4eq`
Yara	Malicious_Packer_Zero - Malicious Packer
VirusTotal	Search for analysis

Name	3aa7cf0f355acbeb_Release 2018-4.pdf Submit file
Filepath	C:\ProgramData\mia796F.tmp\data\The Professional Landlord\A056D2F4\465BD09E\Release 2018-4.pdf
Size	212.2KB
Processes	1052 (Install_Rental_LL12_2018_4.exe)
Type	PDF document, version 1.7
MD5	`cccadaee91e695049cea0d394b26a4f2`
SHA1	`9a1f0b5254f6d720c64f4f3b6a44a29198577182`
SHA256	`3aa7cf0f355acbeb8a3d560b714b9cbab2b15c2b43d7a9a1393a0f2a31665423`
CRC32	`49F9C60C`
ssdeep	`6144:MbZyYkygOpLCDd23HFlu+ZtFaqvRIBYonxj5NiqEZNaPXsd:Mbhky1C4bu+ZtFaqvRIBYonxjzFEQsd`
Yara	PDF_Format_Z - PDF Format
VirusTotal	Search for analysis

Name	70aab3f809e8e5aa_ll12_mxasset.blb Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Mxasset.blb
Size	1.0KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`00711ceb77ac542d3e17bb37f91e184c`
SHA1	`4aad1b0e1864e7a44ca11456485e5307753f4870`
SHA256	`70aab3f809e8e5aa28ea50af8097bb64e39c2f0dac562b538f539bc24b3c0ef7`
CRC32	`69951FBB`
ssdeep	`3:qQCuGZBul/l/lklul5H0WAta4mOXycs5Azp6KEP:hG/utkuj01U4mOXy3AdG`
Yara	None matched
VirusTotal	Search for analysis

Name	22c0488e4d026460_ll12_applicant.dat Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Applicant.dat
Size	23.0KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`ba1d37c960fb41b6cf71d04421f15a40`
SHA1	`abd67bd5deac95f210bad545c803cbf13b4d6ee1`
SHA256	`22c0488e4d026460f6cc75532e30124ccbc296fab81d0139fbf6811d8b909ab7`
CRC32	`548A6AE6`
ssdeep	`12:WhWk0UMXWXzj+LAQse/ZTSDNIhDIhnIhiq/GIoE8GZZ7MsluKjemYk:WIrmXzCLAyZG6hMhIhdpobC7MQJY`
Yara	None matched
VirusTotal	Search for analysis

Name	d7d6266261777a66_LL12_XAP.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_XAP.ibk
Size	60.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`32f4638bbbba41bf0c65141f5466d49e`
SHA1	`1d921eb355fa895095f3d6749f577480a12e97ae`
SHA256	`d7d6266261777a6661c6f4c565cba13ed5f14a28c92fa6bc663ab5915279f14a`
CRC32	`050B1696`
ssdeep	`192:n5HxXNG5HxXNYSTSJAoS5S3Y4r8Z4hPr5rvamTGhv7Ngb0cqf3N6c9vm:n/c/gbFrHDEzTiNyd6`
Yara	None matched
VirusTotal	Search for analysis

Name	fd9182d9ed5abf38_LL12_OWNER.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_OWNER.ibk
Size	44.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`98fc2e51b2958a6f3df54c3dbfade6c5`
SHA1	`207c3da3c6224cea815c5967e7a637209d156116`
SHA256	`fd9182d9ed5abf389d2e8da4f8ae39a77ae378339212efd1f68fb5e3bedf91ee`
CRC32	`B41D5DA3`
ssdeep	`24:U3pMPnRGt6uw8H0ZgreLoMo7nemWZYWg7BFqOHtfR:U3pMpGTAirTMo6Q3EKp`
Yara	None matched
VirusTotal	Search for analysis

Name	475aa1ad73ba7fdf_LL12_RECLOCK.dat Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Reclock.dat
Size	1.2KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`5c6c969194a809576628c504fbddb5e0`
SHA1	`efa77a7d2b03b6a068512903e8768e0debc62eb3`
SHA256	`475aa1ad73ba7fdf1f91fe0a4a6ae0c0b09d597702f41874c3bfe1c3741883d7`
CRC32	`FB5FFB52`
ssdeep	`3:1lDQCuGZBul/lkl0lll9/l3W9kX8lUFt/tSkl:kG/ut60l/9w9kX0U38s`
Yara	None matched
VirusTotal	Search for analysis

Name	9d8a00ccfb7ddcba_LL12_Reclock.idx Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Reclock.idx
Size	24.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`b4aa05518937ea602f606986b17ac767`
SHA1	`d009c7cbb1e1d92d68b63918d7e577bdff77c456`
SHA256	`9d8a00ccfb7ddcba868a0e1626b93b62327e61bfee23683918319c9c7291170e`
CRC32	`3F4DB3FC`
ssdeep	`3:xllxQCuGZBul/lklGl6ltFlWlzVllzlHl:YG/ut6yOFih/7`
Yara	None matched
VirusTotal	Search for analysis

Name	29a1ae186cb8bf8e_LL12_XGL.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_XGL.ibk
Size	24.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`1cb9fe18ea04621dabfbca27f6dfd6fd`
SHA1	`cad66028165d0f693959a09062644428859305a7`
SHA256	`29a1ae186cb8bf8e05cdc84f54bcdfc9cb820313be84245983ba40537d112b2a`
CRC32	`2230F99B`
ssdeep	`3:1lDQCuGZBul/lgltllMl6ltFlWlYzi/lX3lvlppL2l//SlYlmk/l/l0llzl9lllb:kG/utuyOFiYmhe/uYG1lH/v/7`
Yara	None matched
VirusTotal	Search for analysis

Name	4b9560a333d0169c_ll12_bxcopy.idx Submit file
Filepath	C:\Users\test22\AppData\Local\PROMAS\LandlordForWindows\Instance1\LL12_BXCOPY.idx
Size	24.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`c0ddbbf92b4df73ac11aa1279a0dc597`
SHA1	`c61b74358b6fda771b50d9a7328359d27adaeda3`
SHA256	`4b9560a333d0169c6b26802335de4738b88856bfe5400ea764b8d6e48b544fac`
CRC32	`213FE06E`
ssdeep	`3:gltxQCuGZBul/llltlWl1lwK5dlVlX/9VllzlHl:g8G/utf1i4wVl7/7`
Yara	None matched
VirusTotal	Search for analysis

Name	1aee1ba4b83e9868_LL12_XAP.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_XAP.ibk
Size	64.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`db24ea099364555af590462d5f0f39be`
SHA1	`ada14984f3111989b0063bcee459206373f05dc2`
SHA256	`1aee1ba4b83e986896bb8d2e16bbdb2901fffecf3e1887de21c8891b2996a176`
CRC32	`E4D33897`
ssdeep	`192:D5HxXNG5HxXNYSTSJAoS5S3Y4r8Z4hPr5rvamTGhv7Ngb0cqf3N6c9vmPOXqcEpP:D/c/gbFrHDEzTiNyd6jrL`
Yara	None matched
VirusTotal	Search for analysis

Name	b427890c49e737be_ll12_molcopy.dat Submit file
Filepath	C:\Users\test22\AppData\Local\PROMAS\LandlordForWindows\Instance1\LL12_MOLCOPY.dat
Size	12.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`223614a691e28ca4968694cf4e691741`
SHA1	`70b57609e47bfcc03da52256e1d92a1127fc2c55`
SHA256	`b427890c49e737bedf78466b95e04221927f037a8c52cb9c85d4b516e23a47ea`
CRC32	`F0985C65`
ssdeep	`12:qh8I0UMseAYAdtlhMI6zZ3+NiJj7cglX3uW/:qO/3otlhMPzN+NiJj7cgFD`
Yara	None matched
VirusTotal	Search for analysis

Name	8a2caecbc7732e03_ll12_chkinfo.dat Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Chkinfo.dat
Size	4.2KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`3ba143285ac2afe62cae845ccc42b479`
SHA1	`04bb3631fbb57e4b6cb45a5ce5e2581d863f0701`
SHA256	`8a2caecbc7732e030cd15c621cd000dd0fd6ec04df0121187b3f7b364dd92861`
CRC32	`FB6CB056`
ssdeep	`3:elDQCuGZBul/lkloltlllV4bm8l4V/Xyllw1QlXg81/ivstllew4hdNll:68G/ut6olOq04dC/w1/81/lX+`
Yara	None matched
VirusTotal	Search for analysis

Name	f02a4d31cc7dde50_LL12_Mxatype.idx Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Mxatype.idx
Size	40.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`e533c4e30a6e7a861149343bbb102145`
SHA1	`a80925c18c0b1104f94e4f7a07784027b054fb0c`
SHA256	`f02a4d31cc7dde505ebae502001eb9ee2e85fd3e9456d7a6432331289884046e`
CRC32	`6EB28CF1`
ssdeep	`6:CG/ut+UWOFiGxXcFtzXw/7+IIuZUQnks2uZkQYo2s:9ZyiGxXcDXw/7+IIuqcWuaS`
Yara	None matched
VirusTotal	Search for analysis

Name	005829185ac1a563_registration.dfm Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\mia1\registration.dfm
Size	31.8KB
Processes	2088 (Install_Rental_LL12_2018_4.exe)
Type	data
MD5	`357dc1a87b637a95c2255c15abdb9765`
SHA1	`b41dbe26db3c8f489e32096535e7df8af5f7859c`
SHA256	`005829185ac1a56337d40d515c7e8da84b06a8e7b7487477de521861248645d0`
CRC32	`8D27E691`
ssdeep	`768:ewVHXQ1NmO7ZDrkqzM+KGlm1ccHq7kBTT5Dmoibfg:ewdXQ1NmO7ZDrkqzM+KGk1ccHq7kJT5v`
Yara	None matched
VirusTotal	Search for analysis

Name	ec97c8cb46f2d14c_LL12_CATGLINE.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_CATGLINE.ibk
Size	32.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`24011ba9918390fa0c5203ed516b4765`
SHA1	`8c6f89dcc99c270503827d665f941c90109d72bc`
SHA256	`ec97c8cb46f2d14c438960d7f8da0e14ac83a3a8e5adcba23a417284bbbd1976`
CRC32	`D0152A7F`
ssdeep	`24:TUnRf5HB9tJRdWjNIhaFvhJ1R+O7Z4zR7DSqP:TMf5HNfd2IhMhJvZZcF`
Yara	None matched
VirusTotal	Search for analysis

Name	ceadda75e40b604b_ll12_advsched.idx Submit file
Filepath	C:\RPromas\LL12_Training\LL12_ADVSCHED.idx
Size	32.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`a4e1d69de87ae5718184d9897409398c`
SHA1	`b21dd675d611aca3851011c41f6a65fc2e22e512`
SHA256	`ceadda75e40b604b203f9d17bacafc72df561e0495bc4c8971988da0ac642e2c`
CRC32	`F62C3F2A`
ssdeep	`6:4EG/utG1OFih/7ulsHWzJz/SQOQ/qkgieAxqiS58AKB7fpl8LRXouykRUs2:43byih/7PcR/ZRqONqiorKHAlykL`
Yara	None matched
VirusTotal	Search for analysis

Name	ea627b95d478c6cd_license.rtf Submit file
Filepath	C:\Users\test22\AppData\Local\Temp\mia1\license.rtf
Size	9.6KB
Processes	2088 (Install_Rental_LL12_2018_4.exe)
Type	Rich Text Format data, version 1, unknown character set
MD5	`6f1b191a6158d0d61616703c19f1f212`
SHA1	`d8bb6a4e8f3920dea3115a4458a90e2ab889fc47`
SHA256	`ea627b95d478c6cd74e92eb6274c5c4f78b8cbe006acaf5c157f6c4c0405fae4`
CRC32	`43C6FB0C`
ssdeep	`192:dfIVfNr6S5JzU/+YRcZCVLPRr8VxWz0JsE5ZH9hEeCojc5K2:8fNr6S7MBcZCVLPRr8Wz0JsySucw2`
Yara	None matched
VirusTotal	Search for analysis

Name	5a169eb59e947ab7_PublishingManager6_20154.exe Submit file
Filepath	C:\ProgramData\mia796F.tmp\data\The Professional Landlord\A056D2F4\B21C7FEA\PublishingManager6_20154.exe
Size	702.5KB
Processes	1052 (Install_Rental_LL12_2018_4.exe)
Type	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
MD5	`f5cb77413b894a5bec956ac939a1dd0d`
SHA1	`9f424865fa08de4d19b352eaa94966045cffd8b9`
SHA256	`5a169eb59e947ab7f37a9e42cd4c1ae1d6c5ebe80f7b41e92fe92486015434f0`
CRC32	`B877805F`
ssdeep	`12288:SWuxmLNWw9caAJyfRvuKc42Ob4Ftejbc+9M4emk:S7cSyugb4Ftejbc+9ym`
Yara	PE_Header_Zero - PE File Signature Generic_Malware_Zero - Generic Malware Is_DotNET_EXE - (no description) IsPE32 - (no description) Win_Backdoor_AsyncRAT_Zero - Win Backdoor AsyncRAT Win32_Trojan_PWS_Net_1_Zero - Win32 Trojan PWS .NET Azorult
VirusTotal	Search for analysis

Name	1c3376bf99fef9b9_LL12_PROLIST.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_PROLIST.ibk
Size	36.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`42ed245576081ddef33193988e90a930`
SHA1	`61a9811642019db7a88c2711c0a254619331bd8e`
SHA256	`1c3376bf99fef9b9d86be6fe1e4ed96cea30ec6c6d0efde722492da2ca9a34c6`
CRC32	`85F6D80B`
ssdeep	`6:g8G/utqn/OFiGxX5/7IGzOY/ds8rrUKous:qHyiGxX5/7tg8HUKo`
Yara	None matched
VirusTotal	Search for analysis

Name	e390e16f3a722fc5_LL12_TENANT.ibk Submit file
Filepath	C:\RPromas\LL12_Training\LL12_TENANT.ibk
Size	44.5KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`8b8fac16298c77ccb234cd8c72658729`
SHA1	`f8b93e7a1467c8954810c331993b6202a7cb965f`
SHA256	`e390e16f3a722fc541b2e047e947e0a00ca1665d89f70ad913763ab345d91b33`
CRC32	`88D45707`
ssdeep	`48:U3pMiO+6rYLsNJPyEy1B0xyv+RyljzwtbetBsw08q0:h+sJPyEyTaC6ylw1ec98q`
Yara	None matched
VirusTotal	Search for analysis

Name	ebec338bee79b7d3_ll12_rcheck.dat Submit file
Filepath	C:\RPromas\LL12_Training\LL12_Rcheck.dat
Size	15.6KB
Processes	1936 (Landlord12.exe)
Type	data
MD5	`9429979c294951b1b8c9af83cd755c3d`
SHA1	`86cab7dcfce75db91f9a06a7f2b2bf72068db6b1`
SHA256	`ebec338bee79b7d321bb5815873bb1fe7e69fbf05e94d9c72c22b2681b71ab0a`
CRC32	`8BDF1D79`
ssdeep	`12:Ntk/Z0UMXsDWlI/CtIxXJ/h28bO6Ds6LzT3LhJcVC9hh04HDlOMZBKLgb1NPcKXM:NzmWlIKtIxFdDLT0Sn5DQgRNEAGplS`
Yara	None matched
VirusTotal	Search for analysis