RobloxStudioModManager.exe

[foxtdev]

Malwarebytes
www.malwarebytes.com

-Log Details-
Protection Event Date: 1/24/22
Protection Event Time: 2:54 PM
Log File: 84147070-7d25-11ec-aad5-4cedfb663ab8.json

-Software Information-
Version: 4.5.0.152
Components Version: 1.0.1538
Update Package Version: 1.0.50227
License: Premium

-System Information-
OS: Windows 11 (Build 22000.434)
CPU: x64
File System: NTFS
User: System

-Blocked Malware Details-
File: 1
Malware.AI.3552051028, C:\Users\Taylor\Downloads\RobloxStudioModManager.exe, Quarantined, 1000000, 0, 1.0.50227, 28C3639C572A9467D3B7FF54, dds, 01612094, D192C562DB01FEAEED9AAFD6CAFB3A28, 338D2BFD0B7DE9057019FC9A2ADA8C2B6AC29DACB0168BF3006C57881980C38B


(end)

https://github.com/MaximumADHD/Roblox-Studio-Mod-Manage

 

RobloxStudioModManager.exe.zip

[shadowwar]

This contains adware called convertad

[foxtdev]

13 minutes ago, shadowwar said:

This contains adware called convertad

Is there any more details on how you found that? I'm not trying to say you're wrong, but the developer is a respected member of a pretty large community, and many people have used the program without issue.

 

I tried my hand at compiling the software manually, and while the files were the exact same size, I'm not skilled in doing proper executable analysis, and looking at the exe in a .net decompiler and nothing seemed too suspicious

[shadowwar]

I think this is a fp because of the reachout to aws which is similiar to what convertad does. 

I will get this fixed. 

Thanks for the followup.