Safe
Unsigned VS Code extension for Roblox scripting; 17 tier-1 engines and 66 total engines report clean; no malicious detections or behavioural signals.
82ac9c4b709e165ad9…9e48f514b7The verdict, reasoned out.
Not a rules engine. The MT AI Engine reads every signal we collected, weighs them against history, and commits to an answer.
The evidence strongly supports a benign classification. The file is a .vsix (ZIP-based VS Code extension) with a filename indicating a Roblox executor tool for the IDE — a legitimate developer use case. Critically, 17 tier-1 engines (Kaspersky, Microsoft, BitDefender, ESET-NOD32, Avira, Fortinet, Emsisoft, F-Secure, Ikarus, GData, DrWeb, AVG, Avast) all report it undetected, and no engine across the full 66-engine set flagged it malicious. External intelligence sources (CIRCL, YARAify, MalwareBazaar) returned no hits. The file is unsigned, which is expected for community extensions and does not elevate risk given the clean consensus. Prevalence is modest (2 submitters, 141 days) but consistent with a niche tool.
Each signal cites a concrete token from the evidence the arbiter saw — engine name, MITRE technique, signer string, or an exact count.
tier1Malicious=0; 17 tier-1 engines (Kaspersky, Microsoft, BitDefender, ESET-NOD32, Avira, Fortinet, Emsisoft, F-Secure, Ikarus, GData, DrWeb, AVG, Avast) all undetected
engines.malicious=0/66 reporting; no malicious labels across entire detection set
File type: ZIP (.vsix extension package); filename pattern consistent with VS Code Roblox executor tool
signing.verified=false but no signer-history red flags; unsigned status expected for community VS Code extensions
externalIntel: CIRCL.hit=false, yaraify.ruleCount=0, malwareBazaar.hit=false; no external researcher corroboration of malice
- 17 tier-1 engines all undetected (Kaspersky, Microsoft, BitDefender, ESET-NOD32, Avira, Fortinet, Emsisoft, F-Secure, Ikarus, GData, DrWeb, AVG, Avast)
- 0/66 engines report malicious or suspicious
- No external intelligence hits (CIRCL, YARAify, MalwareBazaar)
- No sandbox malicious verdicts or behavioural red flags
- Filename and file type consistent with legitimate VS Code extension
This file is safe. It is a legitimate Visual Studio Code extension for Roblox scripting with clean consensus from all major antivirus engines and no malicious indicators. You may use it without concern.
0 detections across 76 engines
How often this file shows up in the wild
Moderate prevalence — neither rare nor common. No strong prior applies.
Forensic fingerprint
- File name
- vsc-roblox-executor-1.0.0.vsix
- Size
- 21.0 KB
- MIME type
- (unknown)
- Detected type
- ZIP
- SHA-256
- 82ac9c4b709e165ad908a834fe62a80c67a7bb0ce82ae23de9e9b89e48f514b7
- MD5
- fa3f80e923cacdbadedb4bf36a84ec2b
- SHA-1
- de0ec4162618c78b94e1c0c6b0d8ed6ff669ef71
- First seen (VT)
- 2/6/2026, 9:30:19 AM
- Last analysis (VT)
- 2/6/2026, 9:30:19 AM
- First scan (MalwareTips)
- 6/27/2026, 8:49:26 PM
- Last scan (MalwareTips)
- 6/27/2026, 8:49:26 PM
Reviews & malware reports(0)
Tell the community what you saw. Tag the sample — Trojan, Adware, False Positive — and share what the file did on your system. Your report helps confirm or dispute the AV verdict.