1-10-2013[.]dmg | Triage™

1-10-2013.dmg

SHA256 5497ed957bd93292d2befb2880c9859a05bee72f7ddb1a78130c2dc95d069b39
MD5 d0e9a9d5f531838f676669442d585cdf
SHA1 23583665ef81974de18ad58e7205409b92533f2f
SHA512 7cca1cb5b95bfa667fd4f8274e92eb77cc98fe64396be6f3c0bb523b6444e93a94989d24ada5c02d1a4ea78bf807ff358fc0137dcdb00295494c80ba3c7900e0
SSDEEP 3072:CJpkms9N3oteshmOaEceyJFdGbBVLICI9UP6Qi6d:upkJ/YeshmCyJDGbjL3696
TLSH
T173D30278AA0D28A4ED4253F400A0629C5DEEAACB59B400BDE473494EF5C9FD37BF4617
MD5 SHA1 SHA512 SSDEEP TLSH

macos

RobloxPlayer/.DS_Store

SHA256 77fe7d4046778aed7b434e891b1cab268ab25a534ac1e8a2ae8ad3b893b2d502
MD5 3387d503c93420f201992c6f21615e21
SHA1 e28fdae1f2acc2a66c4e1377042ba883d2cce21c
SHA512 267659b818925e9a634bc364665681a98119eb467cf23fc4107d8bd999b62e40742cf16507288124fdfbfa235e519eceff3cb4e81f4d599a6a93840dbbff8bf0
SSDEEP 96:rmu3SFM+syYGifZTr5CWfkOaiM42PwELfnwZ5Pa/xfZTr5:rP3ShsfGipb2xP/7
TLSH
T181622252F7C46E0EF9620B3485936370BBB9F4A1A3C15B03D29A76BD1D432991F72A81
MD5 SHA1 SHA512 SSDEEP TLSH

RobloxPlayer/.background/background.jpg

SHA256 5882240ffd3104e79d4a01547747c15245bbc3c7a2b008a60035813b907295eb
MD5 69001869fee2a2fa1fcc1db9edce72ef
SHA1 11fc81449f7549416618ecd258050e8b260cec37
SHA512 a9267b45c9974ee6eb4649c7f76110728e69365f2d65f6b69909cdc2e4197a69ac4a25e17d66531e8a512a80af5357b612aadb528dc2ff4d2d1ecc927600a141
SSDEEP 768:/eUJxPGVmYpAP9NHUuzTg8SssDkNej9PSlybm8my+dIKwZXwGJYW:/JrPtL0uXK+eAFnKKwZAGJYW
TLSH
T15623F17C95634F2F560F0126ADFFF528AC27258B1EE720D1F9BF45150087A90517A3C8
MD5 SHA1 SHA512 SSDEEP TLSH

RobloxPlayer/.fseventsd/0000000011247f60

SHA256 c330989563692915931797606367ae705d54291175147d5e89081efbb566d20e
MD5 40533b4ad74bfe59926f8e2563cb68b0
SHA1 a6cb6db9e2c1b1c4524d5f0541158fe4cbf5c0cd
SHA512 eb351e6e6b3bbd9e585ee4457a805750dda0213ccdf3a40b5efe7e9d516fc85436e65f213416a5d9a52b3f9c2171b0ed0f0fa9a42d16238469891ae8f1e1a34a
TLSH
T1B7B092A2AB51D0A8F65600315D59E4A9A22E256E2996F4ABA21C2A0E900069AA1B4961
MD5 SHA1 SHA512 TLSH

0000000011247f60

SHA256 9ad1e8cbb4a90a96a57e59324bb402967e77deb455bce5c1483628ab321b03b0
MD5 3da714f9f921564a64d6d657acabdc65
SHA1 cf5ba445e11f1a02f0391f2b4205877abd1ceb47
SHA512 f830baff11abcd33ec11f75c1c1fdb2defb4f64e1fbea612e685b994698a0f811b10923250571346ee0bfd39f52f8f8e7115568885476d91a6ef1c745da870fe
TLSH
T1D8C04828F98BD07AF952013403217BAE101E524080CAAA4BB2BD38A126200800ABB12D
MD5 SHA1 SHA512 TLSH

RobloxPlayer/.fseventsd/0000000011247f61

SHA256 9c84b4d1f30a564576173a5f63f3efea8d553399fdc743a2ba703923367ba549
MD5 42cce19cbcfb516682d6af5c79e108d5
SHA1 fda2ca8d65bf71e1e96c71e98ecfb1103a74c09a
SHA512 d488aa0268a00c8f67a6cde8e3adb29d84629c18db9816dfc236eed4f50c726016fd6ece9cbfd50ae77ba846a9e666abba129b16e8a666d05e1c37878b593a64
TLSH
T161A022ACB00C3FB0C2000038C80F2CF80202AC03030A80A8C2220C0ACB02AA00CA2020
MD5 SHA1 SHA512 TLSH

0000000011247f61

SHA256 b577077ba3f71a9b841bcdd9f01a4abe6c8029fd1e8c4a32ef72067102d95511
MD5 e2491160b1051b7cb2627aa4432980a2
SHA1 fce3ae8c84b4ea30ce1efc60c6d76990c3d0300d
SHA512 49e1ceb60ca358cd17089ffba300812f14b318b6ce41b7393ffadc686b59c95a6651d1361899f5b7306ff94dd58619507c44aaf831e7b2d9bc1b4b73e7f3e503
TLSH
T114A00261F110C260E10545B527192559253C4380D41D55596040ACB95400846140994D
MD5 SHA1 SHA512 TLSH

RobloxPlayer/.fseventsd/fseventsd-uuid

SHA256 a15dd7295d600502ea93ca92e4f9a8f309e130776a0b1a6e9a51f6ba5560ce56
MD5 b76682a38124e935a7147d7a62db9db7
SHA1 2c699760220a476c4fc82dc05bee4eaeebf7c753
SHA512 58033ee1aa32f2fc066d0e8c855a0cf4a2ad356c35faccc0b04f939eb8ca038d9b4ed4dc519e56509e70bbd5752d5b2477cf99cc03c86d7aea8bd8fb3140ca7e
MD5 SHA1 SHA512

RobloxPlayer/Roblox.app/Contents/Info.plist

SHA256 e682d16a37ba0fb4736c56890986e204d6ee5a698863e315784c4321fdc85084
MD5 8ed86a35b5e9d58b983675151069d683
SHA1 5b60d8f9495468d8f0e18a9252d73dab817bba69
SHA512 8c0dac7623dbba5dc1d55b4dffbb9e0595710c4c0ab6a54a71fee94e46a024ef6ef895d1d81e8cee52150ca9e43b7e32d9ecd0853ae0d60d67ccd60474323ed0
TLSH
T1A631E0F50E0936993CC216661BD6510E01D861CC5C3362FEFEC6BA2DED0EC06A375AE5
MD5 SHA1 SHA512 TLSH

RobloxPlayer/Roblox.app/Contents/MacOS/Roblox

SHA256 e8202975e1693b276a013a08dbe2bb4d0b423b8bd0a7935619894762b097fd49
MD5 e1780bdff8899b2a08258b3a85cb5d70
SHA1 06ff96f4cd106ab158bca331bcc685230335aa2a
SHA512 e691bc11b4a8813b6c47a61334dfc581d84494ab645390c78294b76d267c10fb4e66bcd6ac39bd077f879ec9657ea5a68d02618f724e7f37399d789ec1cd048b
SSDEEP 1536:2WGoM9q+aiaiz3IKHgHyFA7H6WIhvZE2:2WGopfizYKHgHfI8
TLSH
T11E83F85BEB0981F2D9890A32908FB27F8774C38DA8360256DF50595DCB733A5BA471CB
MD5 SHA1 SHA512 SSDEEP TLSH

macos arch:x86

RobloxPlayer/Roblox.app/Contents/PkgInfo

SHA256 82502191c9484b04d685374f9879a0066069c49b8acae7a04b01d38d07e8eca0
MD5 23b7d7d024abb0f558420e098800bf27
SHA1 9f9eea0cfe2d65f2c3d6b092e375b40782d08f31
SHA512 f77d501528dd0ced155c80406cfbee38d5d3649b64d2a9324f3d6cee39491eb8f54cdebae49c6e21a20d2309d8fae1b01c41631224811e73483db25a2695738c
MD5 SHA1 SHA512

RobloxPlayer/Roblox.app/Contents/PlugIns/NPRoblox.plugin/Contents/Info.plist

SHA256 e624ee0c1e437fa1762655cd255427ee91efa7ea7815f8732a9cc2aea4b5801b
MD5 1163c5a3341055eadb151651fc5ab2bb
SHA1 b7e1481cfed7fa788315343c8ea1fb49c646a0a8
SHA512 5f7107a67bb61d39279239d46215928500ff6cc6f05c1545a3a46d70f1096c10e4bc62ca9b677534b85438cf6b53042c963c33105c664d7f810c865cbcf21d15
TLSH
T14D2167F14A083A982CD117760BDA614D00DD62CC4C3261FEFED2B22DAD0EC06A379AE4
MD5 SHA1 SHA512 TLSH

RobloxPlayer/Roblox.app/Contents/PlugIns/NPRoblox.plugin/Contents/MacOS/NPRoblox

SHA256 fe0b1d6a96fd91f51fa41a207d7da4a2eec91bfd3451530e415ab8d066fddf40
MD5 50c2c29e5046fda62be0c4df3421af49
SHA1 2601ae78c2a187c112c690f3a846f37693231fd4
SHA512 b88649b72e8959514addd73431eb1ad03385ee9dae6777613b792501b87d393485fe510eec714c4653a41abc631a543d668d7087db63e72ea8c87628c1632ad7
SSDEEP 768:+/Q/5XR04Ly3T/hdKFZ8gKiH+ogwtfUjnL+:kQ/t3e7IZ5eogw5uK
TLSH
T1F0132C0BDF1A82F2CDC51E31145FA23F8A20A5699CB64349DB415E289F73BE57E0634B
MD5 SHA1 SHA512 SSDEEP TLSH

macos arch:x86

RobloxPlayer/Roblox.app/Contents/Resources/English.lproj/InfoPlist.strings

SHA256 39cf2ee07b7b333e7c179d0bf4d798a5b72af6a4e584f51e642703bbfa4fc828
MD5 51ef59b60e5b41b91519cc662a9fe886
SHA1 3222ca0c39eb50aaf8126baf852e55430c4718af
SHA512 3952a908b72d44040f5072f6344f6327fc78981c3aa55e931acae84c0c9bcc0d148991cd564af4803765c328cbf5f7efe9eb558fc56e47e8206b7b706026f30a
TLSH
T129B0120052F83800F1F24F2428B450506EB83C001C70229D225050290460A00C270733
MD5 SHA1 SHA512 TLSH

RobloxPlayer/Roblox.app/Contents/Resources/English.lproj/MainMenu.nib

SHA256 15dd8d1245a8203020309871967c327684a3cbf9e0201751d04a7bcf41421248
MD5 03b72545d1933b7ae7048f5aecc7fb75
SHA1 3cab18d825a6c7a9734e453b5faedf3850e64f2a
SHA512 015638d9b43bd7bea30f676a8af115f252549266ad1afdec8d235d75e4d11bdd7d3f882fafbfe0f32005f1a0973fb7451f5e54149ebe44d5ddb9822b49c59c34
SSDEEP 96:iGJYQl4xP2EbIlaYHPMKtEbn3YdhHDgQhiCTV63maEIhbDTw:iGJYQlnEslaYHPMbbwgQpTxZqbPw
TLSH
T185B10A635233C354CBD3D535F1827E3377197020C62AA28F5626BD81F9F1902666A7E7
MD5 SHA1 SHA512 SSDEEP TLSH

RobloxPlayer/Roblox.app/Contents/Resources/ReLaunchApplication

SHA256 58e47928c2c574bd5b73a190144c59222668ccf520e1f1d1c70d87b703885dbe
MD5 dcc82dda5aec57d860b0fd80acf4f401
SHA1 15717c95635253e71c8dab86ea8fc9ff4a1b7d79
SHA512 2f93f44b77f955b3eb492a03d7db351879d6fb71935a2aad7a45e3c31b80eae191518002a562dfca22ab51abae4e84d99d00823cdb8d2bda1382efcf21a00e3b
SSDEEP 48:ESM1beWObmL1hCFem51x/6gem0gr2EVjk4UNe13fwT+EVSJOrJF:vRCvwt1x/6tfuhd13IKS
TLSH
T1D1429596AF0D16B6D08D1378A4C603A7A171E3581DE3832ACAC9C438D7733A854F5F5B
MD5 SHA1 SHA512 SSDEEP TLSH

macos arch:x86

RobloxPlayer/Roblox.app/Contents/Resources/Roblox.icns

SHA256 4b7d41d10e099fbd03f55372ee304f34ea27b006e9039c564385a0844010cd1e
MD5 c445145f4071638eb48d8895f60ca4a7
SHA1 68d60a5be066a81605b55319346d85a4f9e039cb
SHA512 f6c0c5541386b50fe96ad3e856a035c6a303f08eef679c1049587f4137779a9a1603304c951a0ce33e64daa887e085ae958c0472c98dd9f9260edc7fbb6aac9b
SSDEEP 384:wwV7AusdkclZ7Bl05JHTbHWY79JVNxW05ScDnUxVd6WvZbxjG0sV+511xVv:wwVPsdksZrgpb2SP7nsj6upFQU5fLv
TLSH
T1E003C07B36349B52F2DC9A3857F9D4344AF4AEB0EE5B4D8770E47B4C667F2060260099
MD5 SHA1 SHA512 SSDEEP TLSH

RobloxPlayer/Roblox.app/Contents/_CodeSignature/CodeResources

SHA256 384fd92c61f0491fadbe69b599c08cba11df4ee962aff4f9ca9bb0153668300d
MD5 2ac68bde049cabf603a71e57ceec786e
SHA1 f6d9cdb49e5cfb4b20782e75277f3a46084bc9d6
SHA512 2d4ef567c15a2f64af7b48f6516ec9c246d070da31c71e7a80a0a301984aefd7908c5be05fd332507666e4d7ce9aff3977bea7058be3fe7f97d12b4717fbb124
TLSH
T11121FFF25E4C2EBA08882B270751100F41FBFAC08CB150339D5364B2FAA2B57A7A09CD
MD5 SHA1 SHA512 TLSH

Sharing

General

Malware Config

Signatures

File Explorer

1-10-2013.dmg

RobloxPlayer/.DS_Store

RobloxPlayer/.background/background.jpg

RobloxPlayer/.fseventsd/0000000011247f60

0000000011247f60

RobloxPlayer/.fseventsd/0000000011247f61

0000000011247f61

RobloxPlayer/.fseventsd/fseventsd-uuid

RobloxPlayer/Roblox.app/Contents/Info.plist

RobloxPlayer/Roblox.app/Contents/MacOS/Roblox

RobloxPlayer/Roblox.app/Contents/PkgInfo

RobloxPlayer/Roblox.app/Contents/PlugIns/NPRoblox.plugin/Contents/Info.plist

RobloxPlayer/Roblox.app/Contents/PlugIns/NPRoblox.plugin/Contents/MacOS/NPRoblox

RobloxPlayer/Roblox.app/Contents/Resources/English.lproj/InfoPlist.strings

RobloxPlayer/Roblox.app/Contents/Resources/English.lproj/MainMenu.nib

RobloxPlayer/Roblox.app/Contents/Resources/ReLaunchApplication

RobloxPlayer/Roblox.app/Contents/Resources/Roblox.icns

RobloxPlayer/Roblox.app/Contents/_CodeSignature/CodeResources