home

Roblox.exe

Roblox Bootstrapper

ROBLOX Corporation

This is the uninstaller utility registered in the Windows Control Panel for the program Roblox for Daniel Fairhurst by ROBLOX Corporation. The file has been seen being downloaded from www.tagbulkmega.com and multiple other hosts.
Publisher:
ROBLOX Corporation  (signed and verified)

Product:
Roblox Bootstrapper

Description:
Roblox

Version:
1, 0, 53, 0

MD5:
48c7cee87ef719e9e879d57191a319aa

SHA-1:
b83163540820dee440e8e572f829c1d90ece412f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 5:03:54 AM UTC  (today)

File size:
372.6 KB (381,544 bytes)

Product version:
1, 0, 0, 0

Copyright:
© 2008 Roblox Corporation

Original file name:
Roblox.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Documents and Settings\{user}\Application data\robloxversions\version-e23a215c1d294fea\roblox.exe

Digital Signature
Signed by:
ROBLOX Corporation

Authority:
VeriSign, Inc.

Valid from:
8/22/2008 1:00:00 AM

Valid to:
9/11/2009 12:59:59 AM

Subject:
CN=ROBLOX Corporation, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=ROBLOX Corporation, L=Menlo Park, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
3A638B027E5BE6BA25481732698F27C7

File PE Metadata
Compilation timestamp:
12/17/2008 5:19:53 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
6144:+4hKqJ/jhKxVz8jrUpJ7f+cr0eXL5dCm2szOvYTBPN9UAfzR19:+4htJ7hKxVGrMJ72Feb5dCbszOvYTJNz

Entry address:
0x25A45

Entry point:
E8, 2A, AC, 00, 00, E9, 78, FE, FF, FF, CC, 8B, 54, 24, 0C, 8B, 4C, 24, 04, 85, D2, 74, 69, 33, C0, 8A, 44, 24, 08, 84, C0, 75, 16, 81, FA, 00, 01, 00, 00, 72, 0E, 83, 3D, B4, 4B, 45, 00, 00, 74, 05, E9, E5, AC, 00, 00, 57, 8B, F9, 83, FA, 04, 72, 31, F7, D9, 83, E1, 03, 74, 0C, 2B, D1, 88, 07, 83, C7, 01, 83, E9, 01, 75, F6, 8B, C8, C1, E0, 08, 03, C1, 8B, C8, C1, E0, 10, 03, C1, 8B, CA, 83, E2, 03, C1, E9, 02, 74, 06, F3, AB, 85, D2, 74, 0A, 88, 07, 83, C7, 01, 83, EA, 01, 75, F6, 8B, 44, 24, 08, 5F, C3...
 
[+]

Entropy:
6.5338

Code size:
242.5 KB (248,320 bytes)

Program Uninstaller
Program name:
Roblox for Daniel Fairhurst

Display publisher:
ROBLOX Corporation

Uninstall string:
"C:\Documents and Settings\Daniel Fairhurst\Local Settings\Application Data\RobloxVersions\version-e23a215c1d294fea\Roblox.exe" -uninstall


The file Roblox.exe has been seen being distributed by the following 9 URLs.

http://www.tagbulkmega.com/yr 63maed7E8xEaDbMk0ss9eOPQ_nGQA1x2Xxj4Onasp87Ze2fl5Ba74OfP05etWuzn1s4jLntRNwczLhAu3OwQWB 7O5Rj5I9PWb2bacYKflQdI8JU7Kd8sZLx9SZlEHG7_wvDL1lZ2K2WE9CwW_zI1b9wc1Qr0YjCup knDAYwFCPeqIWTcNAqoEvbS6qHGHxe X7J-G00AAGRgnq0tSoziwSZElFlUktn2ubzf9yXgC67XdRuOoqXIoOetO25_cPyP0ustkD fqhQb 7zK22fuXrrZJrcZGAUEp1GSQTESBQ==

http://www.conceptssafepresent.com/I0e8c3svEKbeH8SD43NZCTMi7gAoA_oyzJF5ruy3pMCS9SoxTWBKBf pXfgX7yz coMtcyoB8ind3gj6sxzlgtsc8rXmXHpNd_79dowzrLC6c33LnIALf52yW1AbG8EOAaUIaKCVqcFnxvwGcTZN5TP 8T2WWVY_vjJposhfvUbbG9cVUPCxLLP1c9J2 2UHAkSeE3cy-G00AAGRwXmuLuFzJCqgJEWUWlWS2ffb3vS8BXzis61bPRUsSoXMr5 2Hzd9o163kGRUcM6NPXMF81tklcWrfH2gUguYpkuRImgA=

https://s3.amazonaws.com/Minecraft.Download/.../Minecraft.exe

https://s3.amazonaws.com/MinecraftDownload/.../Minecraft.exe

http://cdn.captaindownloadfiles.com/?data=OwLqMhShlhU98JlmTyagcRWUUsSGYKMui/VBGwZzAlZt94qjMhh0gkY1JW9MgVDUfVQ8HMwry57J9M7IrSCLsn4otkU6ALHHFXp lshTgCo/r9XfnL5gzeTCE9E5raCw3PVrDNK3mSMcNWEAadvhbSCltSl1hyz5jvw891pdfd9GXrjji4TWa4hI5N4LBIaVrCJNvCasQqHyM96Lg u86jZ3iyBZTDKTg0j2IOgXWwarfyA4Fjb2Cqfl rGbwTFyjv/gHD47su573vm0lmM5S QMLr7Lpk3RL44fbN4SuKGyaLehvWy6GZLD0LkOn1mFUruekf1PesPzBbXEMK1FNgHupj XuheaoMuxGu140r9TfJZlA2r0AoBqSsLndwHt/YIpT2KZDEpac7wZaidQ9D0H4I9Eyxyn3dCvUaspViq3BGRL/I rlrFtwJ3qIt1eX0HO4T1YwVA3O9V9a1SKwI2r9geQoMDDCb4f75Ayewq/kBSBVkuw4ubjVEWabq1Y/LGqt1pITvdQTTmGeG3Nk0dhvKeRoXGn8xDT vnnT h7Bz1Zga /6BNhOuOy33bfqvce50CWONjY5QtNQxTYOSRQ27JEdPglDf0f 3ukVo/6DuU8MgTbxNzWNBLjF1liUMXnitIayhdhxA3fU9316BgYoVesQRuGI9gqBLKHGyzaWHVl3wHmvc7E9FZQAIwYT9dnpUim6ETpBETDGSwXSJvlOJa 8KCVYAIAvdHAki60tKYLNhWVD5K dOcLzKhhW tgCi7whifRmoqh7tydASy1SMB0U235155YLijqmxZt4aTs EA3denZreH2xunq Jsfld2I1Eqk2rcqxK8KiwG 9x3RJxCWsU8EXvxMC/.../UTUGika7UGOqPnzqDBTV 4VANcv8mgeAhSWkWRvGUSiHnZ7PVQQCuCxDg

http://www.safevaultsoftware.com/c?x=Bc8JuInJp1hDbvvi4zDUBw/eEmSWAUiL8nkIRJ9F42Q=&c=7YcMqCV1fqSul2VbeyVtppYUBEEY3gp3dGXC7PPoL3vEvk8mNDn91rpMYTxRheS5ZmTUUWArFk8Pe7z6VEg9TwR1sNlBj8sTBbmsDbU7azQ=&downloadAs=TomsInstaller.exe&fallback_url=https://s3.amazonaws.com/Minecraft.Download/.../Minecraft.exe

http://download737.mediafire.com/dwpylqfa66zg/.../Minecraft.exe

https://launcher.mojang.com/.../Minecraft.exe

http://setup.roblox.com/Roblox.exe

Scan Roblox.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.