umbrella12[.]dmg | Triage™

umbrella12.dmg

SHA256 65c3e931f6e3a5979811a60691f705784e6984e6d2825c1539c601ea5dba633d
MD5 949f76b0daad36895b11d66a8c345fd2
SHA1 8096252c78932680ae317539529979392e4dd0d9
SHA512 a94605a8a0c4a71e4df7712646b695cdd08bb68358809a68ef7dd9f694bd5344f90fa42b4d6cba4eab334a31b54cbc79dcc71f0f6e7fd95f39287bbf1fd92c3d
SSDEEP 49152:X2sSux/y/6SNQbu+/0PEv3luFKI8kqHDrdJFu:BdaQbD/luFKDJJF
TLSH
T16A8523FEB6F8B455B9CCBA2811775F9C2C99169330DB0A1DC927E8B728495B3B121133
MD5 SHA1 SHA512 SSDEEP TLSH

macos

Umbrella 1.2/.DS_Store

SHA256 f9c4255604d2d1e200772feecd5403a1bc1247b8b017b75c31ad3ed61f47e10b
MD5 bbfc65767a1660ce0d9244b8f2210620
SHA1 70f65dcef0a6c23715ff9226398173144ecfced1
SHA512 04236b22f46c08b4f26da9fe05a737b209457c0d2917dafbe834a9c79b318e8f2abc6cd81da1e380195ad169bc438a5562de0539293ed22124812b135d906dae
SSDEEP 24:RfnVfYfXh0HZ81JtyIWn+vvZyGRclRIDXHcliQNocVQelRIDXHcliQ:M5UYJtzW+vZyGRu8XFU8X
TLSH
T1E642470A33A6D228F27A157B3D3BE3AC0B51FC60B4508B0FBA98735F1C325091D22E80
MD5 SHA1 SHA512 SSDEEP TLSH

Umbrella 1.2/.fseventsd/00000000367e3c4c

SHA256 bd00845acf20ed4b54fce54583963217c259d533cece422c4d9df7662183dc40
MD5 5c95a7862e3a5268b8139671ae0364e0
SHA1 867f04d747a8d24212d15d21390809b5532d4b81
SHA512 28d4b72f05036a840644cad265e05060b938692afe047ac0e40cea72826e01ff063b92291f6bdb4908861967a5f79f4ef6592b2849e8ab8c1f3f4fa74a68c099
TLSH
T1DED02B2C33EB1DFFCA34BE7411F19B84420D405059D4C831F647D58D0E1E0042D8C208
MD5 SHA1 SHA512 TLSH

00000000367e3c4c

SHA256 38f3363280569e53bf2f63391399b2ae05a6a426d30f8a746406985c35638cf6
MD5 7fe17a29582a6e86250c23c41b3fc34e
SHA1 64b5e44beece31f2d0ef661dce34af542a6460d3
SHA512 737b890f36e4adb405e5c495666030e3d13f7df33957a6351e07c058e81111112e6d19183ae60fd7fdae927058670b5e6af9fb9d12e135757c5bf8c55b435176
SSDEEP 3:xhsoe5lJKW0sJlllulllFX/QQVltk8/vlD3eW0pxl+lt1r/uksZVllvltbZbTllS:xhRXWVx8l/FYQPWyeWJlHK5iV/
TLSH
T11E5392452B0B8022DB0C097C32061B2D202387D4A9CF6BB646902C6A08638E43D36DE0
MD5 SHA1 SHA512 SSDEEP TLSH

Umbrella 1.2/.fseventsd/00000000367e3e14

SHA256 856817121df829e417cb505aeebf175b7279278a9ccc0fd4f867ab8115fae1a3
MD5 4033c8388fe0a1694cbe2880823e6615
SHA1 5bab0d610d6c9d1f8dcce42c021313147275aab7
SHA512 45568d4437ae120c76a07cfb1c41739745b85a7e196be5bb983850a4dca7ca3b8f6fde7df5626f55d9881b9ada2905de7f292dee377e4295463f9f9176275115
TLSH
T1D4C01211A3005405C4C340FC8E4A4FC823CC85009F91C50064500C1B15628F10ACA105
MD5 SHA1 SHA512 TLSH

00000000367e3e14

SHA256 5d00e4b81fe05da7518892b18d44271e91e05c15d9cc3d87cd8b6fde3087d004
MD5 e9b3b210ca0170f5cf24a740b5dadcd1
SHA1 0307c77658f2771064a57fecd00702cbcb2fc143
SHA512 5365b47e5675efa7094a59ace31ca27e8545ee33fd72c6cd4f9aae7fac82acc6a6282fc3549ec683dcc20d67fe53a59e5540b0f6ac6ce0732f84eb039c9170f0
SSDEEP 3:xh8DmoKF2T/tl/oUl//k1:xhCu2cUl/s1
TLSH
T13E530403570F1447C71011FD4C34477D4303D74CC44F0107131C55111C5CC0444C04F4
MD5 SHA1 SHA512 SSDEEP TLSH

Umbrella 1.2/.fseventsd/00000000367e4bee

SHA256 46ca8d15a1bfc4a990d22e481775fc719d1da00df199ec4d9643ae604842d29f
MD5 0817af971785ae70b0c5c3d53c81201b
SHA1 226e2b9dc7a0f150f7a11a0a531de8a43fedca0e
SHA512 e8ecd92c4b7befc7c3fedd0731d599ac4c5efd2b2cbc1d82c820ebe7593e456f32a050dd766911781856bda3c335a4d5a1a47dd2090c775652dd070ae860c5b0
TLSH
T101E07D50470AA8FCF541E17BAADC83A1E174D2706D7AB6F0196DC350400F82E1DD4891
MD5 SHA1 SHA512 TLSH

00000000367e4bee

SHA256 84daadc944385e2337563fc5e87bd6c1716afa40176477519c5069aada2861fa
MD5 8673d991b83f64b60b8bf2332527495d
SHA1 bae8e1ab38b87fb87468911a20b110492adf3acb
SHA512 fe25dd9e9795c5adaba2c90f53e1857c59f99af5be2240df263a2a2d4f7900420e7b9b2c804b6fe20cc846f37a9a619bfbef84336cefdfc4de8a40fb60c187be
SSDEEP 24:xhwQlVIglSdYlslCKl0lpIblzlbYl5AlmlYAlml4:nlDIg0dY68KajIb5FYnA0aAQa
TLSH
T1C5535422B7AE5455E23C847975C9F27D601AE2CD4034E069AB21638B1EF9BA0C6728F5
MD5 SHA1 SHA512 SSDEEP TLSH

Umbrella 1.2/.fseventsd/00000000367e5d14

SHA256 f7532ecfebb4c3ab4a1e9d330ca19f0223584dfccf75aeb316a573c1dc50ea5c
MD5 6cd499a3d4b6edf0917d61495cbf0447
SHA1 6dc81d03f33952bc6276ac8c13d5b33a237e9e01
SHA512 4d9074314f037775d1ee0a2a10b7fa300087c7403713cfa9b21c9a60c1a770e4d34bfb4c48e9160cd8ac92871e5de7d9ae139fe0f5d2ce4f49c933eb616ad67d
TLSH
T10DE0EB69422C5DF5FECCE4712DCFDAB8B02408C02C840F8A8CE0AD08785A4C80CB9B8F
MD5 SHA1 SHA512 TLSH

00000000367e5d14

SHA256 e3fdfd6d9689ca2ffbd700b62c89ddadb90ddade9cb2afa340ef84912cb77a4f
MD5 48c230e7ab28fb04f2df2a4bd53cdf79
SHA1 13628ed1a1e532b8e2527b6393a9e98410ead599
SHA512 28f0a82422651717f17fc9c40e53f38732e586939668a6f1d0c7915fc634a1e6a8355098f903b0315370b13aaeba0538d15f7a3662af606cdd2d4e8846a35232
SSDEEP 24:xhUhlVIlglSNKl2lClKl+lpIY8lFlylnAlIl2AlQlGJs:nMDIi0NKo8lK4jIY8HkRA60AGAJ
TLSH
T1C8534611B7BD5056F27C847934C9B26D6119F28D4034E07A9F21238B2EF9B6087A3CF9
MD5 SHA1 SHA512 SSDEEP TLSH

Umbrella 1.2/.fseventsd/00000000379f232d

SHA256 772a288c064db5061b1a35332dfbbb0ff629335305000d681502229fc8009872
MD5 20bf4bd242392666cb6ab1d42e408171
SHA1 572d756aba8a6007a1684cdae7a8af251494fd1e
SHA512 a6ad6a0af51cbb8ec28be1ad2be47a28b358b44fe511f9dca98e43572cb307c579cac9266c7c4d575be57edd2b5016177bc8ef885829ab6aaffd6b1240b65ae3
TLSH
T1D6F054F722EA8E29C560BAFEE3BC2D94846BC4D09EC350EEF2450816058E65025FC34D
MD5 SHA1 SHA512 TLSH

00000000379f232d

SHA256 96447cc603186b180f211105e37730602006ad924537002e32f50f36d0a4235c
MD5 75a689a712bab8f8eb5bd74b509b48a4
SHA1 c80c040caefe8085576f88d6f45dfa14b72ed50b
SHA512 475dceea63fd9d00b81909a6efe389736355db7dbd988a15057fc57febb2c0b73390635c597dd88eb2b019ae1c183716356ea6f7fa965187ea40d2cfd851f142
SSDEEP 96:nZd9Yjvbf8jw0y51MDEIDh0XN8IqjALS+gLLs+:YgBVju6Tf
TLSH
T191536412A76C4012F63C457D7CE976752118E68D4072D5BFBB24134B1FE7B2446628FA
MD5 SHA1 SHA512 SSDEEP TLSH

Umbrella 1.2/.fseventsd/00000000379f2e63

SHA256 24239034cf9a0ce08cc51e9da606e12b080271a8eeb744b154f5725376a6a9e8
MD5 ddeb4bd93d2a0aa040e7f427b7f5bf97
SHA1 28272e2081b034f725509cd284629ebe65e2f640
SHA512 5f78c7cfebf5fc2931004c7a002799027a9f0b391b55e5328312be96bb02d82df246f5d494b81086b68f6e7d387666fa48cd480c71b4af85fe1d3287c1ea7e79
TLSH
T119C012D707E0EF63EBE2CD3B990551B00649DA8001E0C81131E922846DA4CB51C62014
MD5 SHA1 SHA512 TLSH

00000000379f2e63

SHA256 8808b47c23249643418c468577323b97e3c2ace00f8c27e9ba8ed1b10844a108
MD5 8f363b9bd941081b83bb4b0a4231f52a
SHA1 529aa0197fb7a3dca8ab12e1ccda14a8043d3065
SHA512 f85efec57efead47177ef1391dbe42f2d89d72c63dabf555f642d24e6f840e0f37a32859a1a8767fa62b008a7da9ddb15b4403df304ccf5b109196ed04fdb289
SSDEEP 3:xhh+2txQHzGlR3eW0ymll:xhhOqlR3eWL
TLSH
T12B530241144E9117E63C963CBD621D322510576055A356BFF9453E58509240D4893461
MD5 SHA1 SHA512 SSDEEP TLSH

Umbrella 1.2/.fseventsd/fseventsd-uuid

SHA256 34fa5859e64c9335fd0c0d8ac18f72e29a6b6b2d58ad0a25d0386dc88c212f18
MD5 c500c6a8ec95fbe38b4c4d234fdac75c
SHA1 0ae504a2b2c647c19c3b98359d9277c0e671e0e1
SHA512 47557c627ea23670c12805d08b4b164404cf4197a64d3122efc5d2a758ccdeed64b2d288de0ebcb56e9ed02a87a173e96494300cad7da3f7ea1c112e35cf9919
MD5 SHA1 SHA512

Umbrella 1.2/.journal

SHA256 412934fe9195d2e0283b373d190afef9344f8d6c15316f67a0f988f47bb9cee4
MD5 68b13db65dd7d16b57684dd402ab82f2
SHA1 ecd58c1f4354a5311bebaa741e81dc4d17c99ce3
SHA512 480187fbf8c47c8b6208f9d581d3ccff2711ab0a6f91556fd0be879c45c41df27aaf335c8fc9bf6e742bdc716571977a28b9c82ccd53dc11add12aed4c9cf98c
SSDEEP 1536:Rbd8Lgb9+rqQrnL+T6OkwlSI8b/UXALlF2Rt2gQUB+oxGd7bbDzpFdENVS/:/8LCQa8LUe0t1
TLSH
T18186564063F51B56F1BA5B3C69F79386BA39FC11EB03C70F814033685DB2A49AD25EA1
MD5 SHA1 SHA512 SSDEEP TLSH

Umbrella 1.2/.journal_info_block

SHA256 16d0dbd9385279fc4059925b1e768f8d1fe256a051c27cafa92e730be004841c
MD5 9d185f70e410122e702073d1c4957eb1
SHA1 0b6dff3f813af2944929029ea29a4ec33628af37
SHA512 a6f8d15f97fb91cbfed994316e17be244418608aff29168ac79a4801a3e452076d4bca2b96e8c71d7aa6b2c314b24fd444965b3a9090503074d028b6612694f6
MD5 SHA1 SHA512

Umbrella 1.2/Licence d'Umbrella (français).rtfd/TXT.rtf

SHA256 cc6b8b8b44251b515b85718dd96361d1fdc624ecf74285722bd9fd84189270e3
MD5 217cf58a3f3ac0b282b0e843ccb08c14
SHA1 2abec3cb2f4a5213bb1a2679e6788ff495ba1482
SHA512 490023556a69b1de9ff19312fb9e24563816170bdb60cc764810e2c8725b64ac646b2391dcc97b1e46ef20bfa8cea448969efbc4436bfd2f5a31aeb3e2473dd5
TLSH
T19A515F3FD9C021B3964241327A50CD2FA0158BD5E35CECDBECB673CA11161BCF228A8A
MD5 SHA1 SHA512 TLSH

Umbrella 1.2/Licence d'Umbrella (français).rtfd/Umbrella1.jpg

SHA256 21d111b2e52302a947b633b488e9b45c170e1305eec89679d39dcd0dec419bee
MD5 009de1dccfea1f4e932868ec0cc99cd5
SHA1 16d00ad95ee73762cc365f0cdfc174ed7552626e
SHA512 47227c2d0510f3dfee2d388f91c6c56ba47b17f45c231ec00eacab904033cf06b33718f88e51911be6efff739bbe51487ecd2f0c12e9223dffa9980e2c62a785
SSDEEP 192:5/ZRyyWUcK2sri6r2+/zQjkGTsi07PSMMT8BdQHxT:5CyWUcFsrR2+/zMkJbjnMl
TLSH
T19CF16D84B6295F42FD76623B4D7CCB0A89606BF70A31A13EB3799CD9A7D02D97E440C1
MD5 SHA1 SHA512 SSDEEP TLSH

Umbrella 1.2/Umbrella License (English).rtfd/TXT.rtf

SHA256 3a8287ea5fce5f6e245244da04bd0b84db0082e2ddd82d4e5eb7da18e81215df
MD5 835ddc33c862567d8316e4cdaa8e2135
SHA1 de30f734749f7dc40dfa4633581ee6406f7ec963
SHA512 cf8e3d7d691a1675a67d9fe8d29b3e54b706c9d0587f7e6db273a777a54d61dd07e90b716363c918b6d6b89050d0b279e43721953db60d6e2c0c45865df2e247
TLSH
T1F761533AF18003B3B6410273655D85E777171BB8F36A9CD6ACA8B2CD2202DB4B372A54
MD5 SHA1 SHA512 TLSH

Umbrella 1.2/Umbrella License (English).rtfd/Umbrella1.jpg

SHA256 21d111b2e52302a947b633b488e9b45c170e1305eec89679d39dcd0dec419bee
MD5 009de1dccfea1f4e932868ec0cc99cd5
SHA1 16d00ad95ee73762cc365f0cdfc174ed7552626e
SHA512 47227c2d0510f3dfee2d388f91c6c56ba47b17f45c231ec00eacab904033cf06b33718f88e51911be6efff739bbe51487ecd2f0c12e9223dffa9980e2c62a785
SSDEEP 192:5/ZRyyWUcK2sri6r2+/zQjkGTsi07PSMMT8BdQHxT:5CyWUcFsrR2+/zMkJbjnMl
TLSH
T19CF16D84B6295F42FD76623B4D7CCB0A89606BF70A31A13EB3799CD9A7D02D97E440C1
MD5 SHA1 SHA512 SSDEEP TLSH

Umbrella 1.2/Umbrella Web Site.webloc

SHA256 84483af18fb3cee7ee51eaaf69cdcd9f2667d7be4a2721d3d95df2ca241fbe47
MD5 90377837138c4531f3d5bdfe42c068c6
SHA1 6f3c12ce784c03028c720e00f2bf269b57372dc5
SHA512 5f447d18245ee6b14ff18af99dc5f82e13f52939d4fe6fc53bb97d2bda5977d92823f574e61384738a2a03251ee468ce54326f8b28d391a544d0a323e599c3bf
TLSH
T1BED02BC91A04E81604C0AA96177DE60952A0E399ACF114FDE0E11E86CA071A573282FE
MD5 SHA1 SHA512 TLSH

Umbrella 1.2/Umbrella Web Site.webloc:rsrc

SHA256 a57a1b900fa9b84c2d8bf171bfcf8ba8751fe0dcdadb08a10ca6642241ea4337
MD5 97a1c38d200d7dffad1f3fc340fe2586
SHA1 757bd32604550f50a88366d7e6ea8780aa1c106f
SHA512 9100a743f4b6235cc41bf6e7ed27056f458763421cd6be1fc5e834f233edb91344e0679c54f53ad87ec9d8c219e486fe29e3cf05ec178c31e79a436a69f10347
TLSH
T10FF0C98EB301DA06D818FF30A3A8CB819626B654A2A086D1E571370E5D49575B9B5A88
MD5 SHA1 SHA512 TLSH

Umbrella 1.2/Umbrella.rwplugin/Contents/Info.plist

SHA256 7d7b2ae0c0d4d7a20d8aaab51cee25bf0d784b5169fbad809d8472fd260f5681
MD5 03377c2f222d9feee55cddc978f74b20
SHA1 0dac740123041134dc9642c13830128e43511be0
SHA512 078af90f38e9c704488cd61c1d6c7f7a882c8d6dcaf41e28d14b4eedc634bdf17584bd66b2d16c629f84cb7d03a8db0809fb42a5a52cbb944c0967f8f1bda757
TLSH
T1F1117BF41B0874893DC617A226D6A20D01C961CCCCB231FDF5C5A759AC0EC0663B5ED0
MD5 SHA1 SHA512 TLSH

Umbrella 1.2/Umbrella.rwplugin/Contents/MacOS/Umbrella

SHA256 83c95dc528075cd5c6abb66cbc373cd155772c2614dd57d8e00ee3302f3c1790
MD5 66dbcab14e418580c6bdc1012de1c78d
SHA1 29b0a974a3944ac978917da0a718447852b45e61
SHA512 3724673752546afa0d564fabcb358ad95bcc9c2f0fc0f1e2925bdab337f7a3f61aa86a7706a71bb98ce99f7cb73bf66478035b8bfd5188fbda41d75be4f89b40
SSDEEP 6144:XxDBAhknT/tQUCz7lB1fVv1X99oUk6TBxVO7Xs:hDBLnT/t8/lTfVH9nk6TbVOzs
TLSH
T1E3446D02FB0745F3D8951AF062DB63DF432DF290A8758B85FE8CAB484E7319129493E6
MD5 SHA1 SHA512 SSDEEP TLSH

macos arch:ppc arch:x86

Umbrella 1.2/Umbrella.rwplugin/Contents/Resources/EWSMacCompress.tar.gz

SHA256 cecff464e3375dc75c2dbeb60dac7e11c707fbe52bbe8f5e7fb035e7979c038e
MD5 d1ca5e43b4b0cdfacd3216bbaf805f89
SHA1 4e64b8419ea1f3c1f00b802f215ec4c4d460cbc5
SHA512 c7dabf4cfb12724c4786f3c3290b917eb639f611d75fe31bcfdbec242a47c5ee2144a009fbc0c31a6740094b155e2e9fe985569fdf351b8ea7e8744286c3118c
SSDEEP 3072:GAx7frNrx64ndy+FBqUeLVOp6ihtKpcfigayIk8GWj51rI+iBlAV:VxDrFDdy+/8VO8StKpUigapFpXEg
TLSH
T159F312F8DCE63A97170064B54CF8675E33F8DBBC129022DA5F29C1D2685D5F8AC65B08
MD5 SHA1 SHA512 SSDEEP TLSH

EWSMacCompress.tar

SHA256 5d33e7f9e2667ea6dcf6d25e2df84cd96dde9cf83ed15c66c4adfd548813f1ed
MD5 d54e028d67b12638062bcd6ab25389f1
SHA1 564a222b66ea344db6d97c7d0e7ef27d766213a6
SHA512 9cd6dbe11a82919bed032822eb5508501023396b5a5c791ad6237fcf0413b602f402fd5b0eddff83c15f7fd96523792106e720a35d2a488e763df7c1251958d8
SSDEEP 6144:7YmFyFqfouHZt10valkefkh+a/QPDwFKE3b/nwN+OJTyNPOWTApC0iOGXmRy78FR:7TFyFqfouHvMDe9aVior2x
TLSH
T10A945B81FA1B02B1C8860AB86257536F4307B595D5B0D783FF4DAE488FF3981694E3E6
MD5 SHA1 SHA512 SSDEEP TLSH

Umbrella 1.2/Umbrella.rwplugin/Contents/Resources/English.lproj/Localizable.strings

SHA256 0466c346cee429f0170ddf47af83db789458f6e8486683663389d1157fd0ebbb
MD5 6ae433fbd505be4a95df4c17b4a9e9c3
SHA1 efff74c701dd99820315637776c21f4a5c319230
SHA512 3878ce9a78d7b1cdce38f6a0f80ca284c1d2ec58faf2d1e5d9db97320ec7f6742cc3d13768c9e758fee05b85c2d4e0998e6d5b25c4d20b35506c2c2b5933fbb1
TLSH
T19451CF49EB451A32348A4352350E3AEE675163F4573D602E181873A75B9CCCCFFA7691
MD5 SHA1 SHA512 TLSH

Umbrella 1.2/Umbrella.rwplugin/Contents/Resources/English.lproj/Umbrella.nib/classes.nib

SHA256 d2d7b11f71a500a201ab2589efe6f81cfbcc10790cf5f5ffc59f001d6ba45371
MD5 c8a9f19251296d2223432e916d58a9f9
SHA1 9d9ffbf4fd01365210fe66e5dcc1f3bd863c3e1c
SHA512 d62f2148d07d768cfbc7c69a4bfc232df737deb6aeb2303b9b6ee546b5eebcf05219a7720e16df3e73fa2bece78faa90fe5faf3e0a3e2bee781eed905b305427
TLSH
T1BB511BF06E2C3CD94DC116161AE6054E25DF7CCD4C7050FAFEFB44ADB85AA0212B5A9D
MD5 SHA1 SHA512 TLSH

Umbrella 1.2/Umbrella.rwplugin/Contents/Resources/English.lproj/Umbrella.nib/info.nib

SHA256 57ee506b4db2747dee0cce502ea3299966df15407f68eb14cb171281dc9f9eac
MD5 210b253b56370cdbf5f3d2650778be0b
SHA1 8fe78c6c7d7c5580ce71d000553a61db778eacf1
SHA512 4dcd9ecd204af34949701bf05efbd95cd41213c1e3618c50e11b7b2f3bfacbc814f3bda6431810edb4f156a727b5f767584e8d9270dba3d97abb4becc51ef5d8
TLSH
T1CBF050B04708A1AB14D01A815285C16A12D5F1FC5CF160FFACE1587DAD56C4193747EB
MD5 SHA1 SHA512 TLSH

Umbrella 1.2/Umbrella.rwplugin/Contents/Resources/English.lproj/Umbrella.nib/keyedobjects.nib

SHA256 f19c424580544f4c93e20f767ba14e33b81bb9a81f3ceb5712f134060c221878
MD5 09a109de15102029664eda9463381099
SHA1 cacddfb12f6e89d9abc0964ba4b1af89cc617fc1
SHA512 9ec135960e0eb4dcc339fa70caa08776ff21c33177dab79afa2d16171c8a866b68836bee560401c20faf4aa087f0413bbce0cf7ddc69384e0a1a362d41ff1a1e
SSDEEP 768:F0LnV8qR+V6fOFI2uyspBlKEUeL1/BrDSQSSCTrI1Sj/:KLn+qMkBlTFgQSS0rI18/
TLSH
T1ACD25BB96B93C920F77B4CB4B4735AC3D907392681B4D7570CD4E8C546B460DE8E278A
MD5 SHA1 SHA512 SSDEEP TLSH

Umbrella 1.2/Umbrella.rwplugin/Contents/Resources/French.lproj/Localizable.strings

SHA256 2a2a2304950374b874cf12d31f78c7dc0ea9882922bd927e4133f9c4ebc10b0f
MD5 c9ed9d706ec6eb6bfeb64b43a6eb159b
SHA1 8970918188e376e9a33343556721939ecf973541
SHA512 db8a5a396953bcfa0fd12efcbb7fd37d0bd4ea8bb9a884ac2e6f88e370c296904ee6d7ef644d6603922bd7c4ad77211d256168a9cfb2d204f39198d719dd30b0
TLSH
T19751E24EAB45056225CF87537509B7EF915193A1E66DC0EA5C3A73830156CCCFAC72D3
MD5 SHA1 SHA512 TLSH

Umbrella 1.2/Umbrella.rwplugin/Contents/Resources/French.lproj/Umbrella.nib/classes.nib

SHA256 d2d7b11f71a500a201ab2589efe6f81cfbcc10790cf5f5ffc59f001d6ba45371
MD5 c8a9f19251296d2223432e916d58a9f9
SHA1 9d9ffbf4fd01365210fe66e5dcc1f3bd863c3e1c
SHA512 d62f2148d07d768cfbc7c69a4bfc232df737deb6aeb2303b9b6ee546b5eebcf05219a7720e16df3e73fa2bece78faa90fe5faf3e0a3e2bee781eed905b305427
TLSH
T1BB511BF06E2C3CD94DC116161AE6054E25DF7CCD4C7050FAFEFB44ADB85AA0212B5A9D
MD5 SHA1 SHA512 TLSH

Umbrella 1.2/Umbrella.rwplugin/Contents/Resources/French.lproj/Umbrella.nib/info.nib

SHA256 7c6e33fe7546b6357ee5ce01173011e105667a7558ec7dda2c2767d65a84bb12
MD5 3f614a00ea2db067a1addf3bf1850d65
SHA1 32ba8696d100d3b459e9708ebd09b7da2843c908
SHA512 93e4d0325becf413a52d086412ad4e88c8ac56e20723492d8f4024aae53266c841ad62f134ec7d73586e384a1fc083e6446c7d2dd8509a2d353d2d0784161ae6
TLSH
T145F08BA04A0861AA14C40A815285C12A22D4E1FC1CF120FFA9E29C7DAD82C41A3B8BEB
MD5 SHA1 SHA512 TLSH

Umbrella 1.2/Umbrella.rwplugin/Contents/Resources/French.lproj/Umbrella.nib/keyedobjects.nib

SHA256 662a6f36646d18991503868d0926e9fe7cd7ae876f8dc507f16b59748674afba
MD5 126057b9c936119cd85721849f0b6826
SHA1 cddbef9855ccc9e5ddb505d1e735056eb2264c0c
SHA512 f9b8c4f590d8e8c6a3264ec769229001056be0ef8075643505330d5b03df6c0fc7e37a6820fe7f4e8bbf893bbbe15a7bb13cccc46888804f9f6427b1ed6884b5
SSDEEP 384:dVwV8oJk+W5w65WYwmq7GAAeoTahkz6gypIPwTQ1/hB78nKh6YvrMeonRg2DIK2G:dVwV8o6+RYoJh46fC97xhaegnsK2jJ9C
TLSH
T104D25C6A77D6C108F7E34C30F4B54692DA333957CEB0EA8E0980E8C544BA91DE8E6747
MD5 SHA1 SHA512 SSDEEP TLSH

Umbrella 1.2/Umbrella.rwplugin/Contents/Resources/InfoPlist.strings

SHA256 ceb5c470b401735eef2b85eca1495f545c346ffbb17f129b52f14e86eb44cd50
MD5 b654cf5543ac9192534321800d7d6cb5
SHA1 e105de90543b6c6328decabb002aa54da106e6f5
SHA512 d89de24ec3a0dfe7ff8311a1f3039299c9639f9e3031b944b2e9350e5172ea92f8e5c70ebcb59ae2a01371d44e4da4e1f3757b6c916fc6c985b0b6bc6dd61b3e
TLSH
T1A4E0464487E82518F2F35F00BCBB8495AA36BC167E70A72E41890C1E26705449AA2737
MD5 SHA1 SHA512 TLSH

Umbrella 1.2/Umbrella.rwplugin/Contents/Resources/Umbrella-title.tif

SHA256 6a73d54661428af32d853112bc154fc92e7d4cefaf15e9d11f8bcb16cd32bdcb
MD5 317c62a6ffff4bd1c945369a2d86c273
SHA1 68076f5226977bcf3cb9dd9fb4cf48f046355651
SHA512 b98ef646e1fb48dc467ba3a3a4d0dc480854f22d1cc4ef4c72f33ee96d44e508e0a5247b463b0629e790c1290032b27717f3394fb056a79b281aec197d96afa0
SSDEEP 3072:xyEpMnRPnLmEpMLRPnL3EpMoRPnL8EpMFRPnLVEpMGRPnL5j9EX/imDMC9EXMimO:BpYDX753hhuslmSsGWLjAPY+UhCkBc
TLSH
T15FB44B06EBA44F23C16657BBCAEB070573798580AF031B1F725DE1783F827986B9619C
MD5 SHA1 SHA512 SSDEEP TLSH

Umbrella 1.2/Umbrella.rwplugin/Contents/Resources/Umbrella.icns

SHA256 802ace2135ad7c25ac2b91c821dae3610ecab2fe11ec06b09588abf528dc6ddd
MD5 300bad93d9d8de1e67004b2b7edbc8a9
SHA1 dd9dbc1b138d831c0bb762e898af917b1a2be553
SHA512 41533ef00d2d13959bee73f99ad5e1a36f416427a9d7948179971229eb36087e68adb1ff17534f72e5e62d41477ee8a255ad1f662cf946064b762a406cb84e82
SSDEEP 6144:pRknkdNnspngPg6Gkyc83Ajy9p2YsSpRwtMXC:IuNnsNgoPkD8zrnwtMS
TLSH
T11C440105DA957650EC311E76F2C65FCB6226DCC22FE556DA0CE4B08FEE751E8380E158
MD5 SHA1 SHA512 SSDEEP TLSH

Umbrella 1.2/Umbrella.rwplugin/Contents/Resources/Umbrella1.tif

SHA256 26a4b860f1fe53e20fdc3fddfcb5de40c7f307fb429e39022a361ad2bd8981e4
MD5 e80b78718a689ac8401c2c770fb441e5
SHA1 6f8ffa334b75607d6df703d7d0f7614bf20c01c7
SHA512 2394c2ce3c1ef470685275362608675b30c49af7e5fc5f429b7bc4f44eb9d3bd8a42e509565640024ffbc6ddbba8845d9d8500232043c3f818a6497479abab8e
SSDEEP 24576:y/EbOc6wSjL0RlrdSNeoTp/OLLZ+HcMHb+nn5fEGgwjg9:kEbOc6wSjL0DrdSN/9/OLLZQcMEn5fEV
TLSH
T18F55DF336E9A21D5D085C5F62A2D63AB9FD987D42A923773B01DC23EF7184B89F01724
MD5 SHA1 SHA512 SSDEEP TLSH

Umbrella 1.2/Umbrella.rwplugin/Contents/Resources/UmbrellaJob.app/Contents/Info.plist

SHA256 0f577d69da9b1acb2c05eae7877836387332db0497ebad52b5c8f37f6a316ae8
MD5 69e35e66864b4128970d4a9c339e3255
SHA1 bf176d9534000661687b4a069364cf5c693b86ea
SHA512 e6f4e4ef9a3468554abf11e1af5b2622d0e95cbf19c3e88fd481162ce2a7c888b8e67170b9b8a1fd6cf76f6c261a099b23de0353e3d0666d4fe24340cbcedbfd
TLSH
T1BB0126F01B18759D2DC227671AD6624E01D8B1CC9C7371FEF9C66B28AC0E80663B5ED4
MD5 SHA1 SHA512 TLSH

Umbrella 1.2/Umbrella.rwplugin/Contents/Resources/UmbrellaJob.app/Contents/MacOS/UmbrellaJob

SHA256 d0d5a8ecd2b59d14b91e18967482eb658d1e437549e72f356a6c1f3eaffbfb2e
MD5 1c02e6a52c49d11551c90061c676f6a4
SHA1 70d03c3531eb1d5ef4fa6785e5390d87f0ca73a1
SHA512 d12fad6111695ff3d82948f1f2198fcacce0f047deb78250c9c13cf7b662eb1ef6de4aee4c00d829449b7c66b0f61059da7431d996c7c48564d9f10f1aa21d3d
SSDEEP 384:jrzihKljxsogk480IH0QwYxCpsFt2LnKWCD75ftZU8zv0c:jKhcj59Cp7oD75Vzsc
TLSH
T11523FA0F370E437BC49D07F18C9E12DF6276613CAA63A705CAC8E27C6763598906672B
MD5 SHA1 SHA512 SSDEEP TLSH

macos arch:ppc arch:x86

Umbrella 1.2/Umbrella.rwplugin/Contents/Resources/UmbrellaJob.app/Contents/PkgInfo

SHA256 82502191c9484b04d685374f9879a0066069c49b8acae7a04b01d38d07e8eca0
MD5 23b7d7d024abb0f558420e098800bf27
SHA1 9f9eea0cfe2d65f2c3d6b092e375b40782d08f31
SHA512 f77d501528dd0ced155c80406cfbee38d5d3649b64d2a9324f3d6cee39491eb8f54cdebae49c6e21a20d2309d8fae1b01c41631224811e73483db25a2695738c
MD5 SHA1 SHA512

Umbrella 1.2/Umbrella.rwplugin/Contents/Resources/UmbrellaJob.app/Contents/Resources/English.lproj/InfoPlist.strings

SHA256 286133bd50e8aabec8cc84993218f34f9d7f231c2849d14fdc2531fe8734976a
MD5 7360300e9df1815d34b10bc3f93ba062
SHA1 30d8b000a476123a00b942d4965f0f9f5f6b75eb
SHA512 e90ce592d90be5ab3838e3f3a6714d10084087bb48698ccf2960e4ecd50d91c55bcc5a7a94e6332894179ce35302214ab94d6a144bdcc7bd4d5f00e217cedc8c
TLSH
T117D0128096E46414F2B75F1468F290525D7ABC116D71575D1194062A57309509560733
MD5 SHA1 SHA512 TLSH

Umbrella 1.2/Umbrella.rwplugin/Contents/Resources/UmbrellaJob.app/Contents/Resources/English.lproj/MainMenu.nib/classes.nib

SHA256 e5f615a384c0771d3b0701e8e5d6fe1cc690fd6c697841467375a15948074926
MD5 114c0db4de015dc2229c3ebac2248264
SHA1 1f9ae847714540e421a066b6901e351646c51a37
SHA512 883621aeb647a360418eb0524d87cb2d074bc971e47caedac50eb21c6ca37c068dc397e74f7ac620bba20220e68d0102c3cdd86dc338bc950015391896e196fa
TLSH
T134D01262A0240B43D571A2FA3727CDF4401081B68D80C5047E4D80946B80DD5427D00B
MD5 SHA1 SHA512 TLSH

Umbrella 1.2/Umbrella.rwplugin/Contents/Resources/UmbrellaJob.app/Contents/Resources/English.lproj/MainMenu.nib/info.nib

SHA256 29a8f5d1ecee43a37759217936afbec43460f1c6d62db997a948b7d7327bf4e5
MD5 373a125f468628df29c2d5f6268f9e10
SHA1 70563bcd5da99599259f0987f190be88f831d10d
SHA512 e8ac57be15edca9c4effd575d26de0c363fdd42c7a94ada7d2e1fd067553f4ec531a1154cf353ea47ddfa1eabdfba5d1f72b2911db1e0d17d438468fceb8f6c0
TLSH
T1C5F059F84B04683E08C062C607A2900E03D4E2EC6C7110BEB8D1587AAD07546A3A9FEB
MD5 SHA1 SHA512 TLSH

Umbrella 1.2/Umbrella.rwplugin/Contents/Resources/UmbrellaJob.app/Contents/Resources/English.lproj/MainMenu.nib/keyedobjects.nib

SHA256 2f754cbee8c6cdb9f11fa9b1243c7422d040bd7db38da594d2e11b150c86ede3
MD5 8de31d591e1345d2eef13b7598d9334e
SHA1 4950856a033233eea7b93b608085a0da0ed6b532
SHA512 d7a38a9a677b9bed543e2be6dda8ddbba3de64e1d7cd220b583a99434076ea269134e3282db8e834eb414798962258ea03a10da929a6018a4b44280b93288e62
SSDEEP 192:aIbZYHa4cDK8x3mP0Fhzcy4ed4bKkKgJv7zeyWSs2JVxZEHU9WjPQKD1:aI9YHwx3mP2th44RgJ2yXVxS0szQKB
TLSH
T15C522AF17CB7B625B79E3EA191E6B513E01640C5E8D9668383CC92D3B8A190C84CEE47
MD5 SHA1 SHA512 SSDEEP TLSH

Umbrella 1.2/Umbrella.rwplugin/Contents/Resources/plugin_icon.png

SHA256 0b6dc534fffefb9116a580fa6e588f7229aa2a03e6eb5537561ecf50672e2395
MD5 2568fc21558ce7e5ba753312a365c475
SHA1 59327fa8fc6501e3bdc73e1cdcb3075611019c92
SHA512 11c03706fa1f899335096211407eff1068c59ac31ed5f7c26c956ed66fb32fe219bbf73b72e1d5cf14f5f4f6401ffce90e11e8162e16d95a17893b38d74236ae
TLSH
T12321B7C553923966CD4A8EBF5806470CCC63E577A47732963B0A3CC81D015DE856C5EC
MD5 SHA1 SHA512 TLSH

Umbrella 1.2/Umbrella.rwplugin/Icon :rsrc

SHA256 8ac4e7876adbfeef4661d7db7b705b14222fa3e35079776f643c28429cec78e0
MD5 39f77d2b73569412f1438a02848e5264
SHA1 ac96232380a7aaf35067072f81bbcfebd4ed170e
SHA512 f98b5f283ffed281c6edf3edaeb5358554aebee243bf1dc2805e6a2442eb1b7d10d560772ec7ba2643e50ee8678de37c5f94f810a957a2ae8668f83bcfbde610
SSDEEP 768:dapN5BPVkGiUk0JYN9ggMznnWvXpy9svssKZlP:dapvBPTiUIOnnWRYsUs6P
TLSH
T12D23CF6441D49310CE1F77B6B21EB94D0785AD9CD9DDF989CE81F92A33325FA08F80A8
MD5 SHA1 SHA512 SSDEEP TLSH

Umbrella 1.2/Umbrella512.jpg

SHA256 b3c7f2cf328e063f4e09450d4d7f264af59e7e4721e7cb088e4081bb6a431f4d
MD5 6acba0c4925402456590caec84209edb
SHA1 fa44c2af55cffbc8753d7e9f51ce6998591a00c2
SHA512 d1724cb64c61a5b425f6e2f6052fa1a799d55ce5ede7c71a188e283df8015a1cbee9d1b1337d2f7c025b92c0d9d365700cbff69ef4213b1b77d3313c5b4b68a5
SSDEEP 384:pBGizOzY17ApvnH5EPFZ5p1ZAtUWPmU4hcpWA:b1UF+VpVWeh4WA
TLSH
T1E682CF2368E8071BD4C0A37157F38BA55E2AE2731512BA1B467E3CBE98123885D5457C
MD5 SHA1 SHA512 SSDEEP TLSH

Sharing

General

Malware Config

Signatures

File Explorer

umbrella12.dmg

Umbrella 1.2/.DS_Store

Umbrella 1.2/.fseventsd/00000000367e3c4c

00000000367e3c4c

Umbrella 1.2/.fseventsd/00000000367e3e14

00000000367e3e14

Umbrella 1.2/.fseventsd/00000000367e4bee

00000000367e4bee

Umbrella 1.2/.fseventsd/00000000367e5d14

00000000367e5d14

Umbrella 1.2/.fseventsd/00000000379f232d

00000000379f232d

Umbrella 1.2/.fseventsd/00000000379f2e63

00000000379f2e63

Umbrella 1.2/.fseventsd/fseventsd-uuid

Umbrella 1.2/.journal

Umbrella 1.2/.journal_info_block

Umbrella 1.2/Licence d'Umbrella (français).rtfd/TXT.rtf

Umbrella 1.2/Licence d'Umbrella (français).rtfd/Umbrella1.jpg

Umbrella 1.2/Umbrella License (English).rtfd/TXT.rtf

Umbrella 1.2/Umbrella License (English).rtfd/Umbrella1.jpg

Umbrella 1.2/Umbrella Web Site.webloc

Umbrella 1.2/Umbrella Web Site.webloc:rsrc

Umbrella 1.2/Umbrella.rwplugin/Contents/Info.plist

Umbrella 1.2/Umbrella.rwplugin/Contents/MacOS/Umbrella

Umbrella 1.2/Umbrella.rwplugin/Contents/Resources/EWSMacCompress.tar.gz

EWSMacCompress.tar

Umbrella 1.2/Umbrella.rwplugin/Contents/Resources/English.lproj/Localizable.strings

Umbrella 1.2/Umbrella.rwplugin/Contents/Resources/English.lproj/Umbrella.nib/classes.nib

Umbrella 1.2/Umbrella.rwplugin/Contents/Resources/English.lproj/Umbrella.nib/info.nib

Umbrella 1.2/Umbrella.rwplugin/Contents/Resources/English.lproj/Umbrella.nib/keyedobjects.nib

Umbrella 1.2/Umbrella.rwplugin/Contents/Resources/French.lproj/Localizable.strings

Umbrella 1.2/Umbrella.rwplugin/Contents/Resources/French.lproj/Umbrella.nib/classes.nib

Umbrella 1.2/Umbrella.rwplugin/Contents/Resources/French.lproj/Umbrella.nib/info.nib

Umbrella 1.2/Umbrella.rwplugin/Contents/Resources/French.lproj/Umbrella.nib/keyedobjects.nib

Umbrella 1.2/Umbrella.rwplugin/Contents/Resources/InfoPlist.strings

Umbrella 1.2/Umbrella.rwplugin/Contents/Resources/Umbrella-title.tif

Umbrella 1.2/Umbrella.rwplugin/Contents/Resources/Umbrella.icns

Umbrella 1.2/Umbrella.rwplugin/Contents/Resources/Umbrella1.tif

Umbrella 1.2/Umbrella.rwplugin/Contents/Resources/UmbrellaJob.app/Contents/Info.plist

Umbrella 1.2/Umbrella.rwplugin/Contents/Resources/UmbrellaJob.app/Contents/MacOS/UmbrellaJob

Umbrella 1.2/Umbrella.rwplugin/Contents/Resources/UmbrellaJob.app/Contents/PkgInfo

Umbrella 1.2/Umbrella.rwplugin/Contents/Resources/UmbrellaJob.app/Contents/Resources/English.lproj/InfoPlist.strings

Umbrella 1.2/Umbrella.rwplugin/Contents/Resources/UmbrellaJob.app/Contents/Resources/English.lproj/MainMenu.nib/classes.nib

Umbrella 1.2/Umbrella.rwplugin/Contents/Resources/UmbrellaJob.app/Contents/Resources/English.lproj/MainMenu.nib/info.nib

Umbrella 1.2/Umbrella.rwplugin/Contents/Resources/UmbrellaJob.app/Contents/Resources/English.lproj/MainMenu.nib/keyedobjects.nib

Umbrella 1.2/Umbrella.rwplugin/Contents/Resources/plugin_icon.png

Umbrella 1.2/Umbrella.rwplugin/Icon :rsrc

Umbrella 1.2/Umbrella512.jpg