Xeno
A public GitHub repository describes a manual-map loader and a separate injector. Bitdefender documented fake installers that recreated the directory structure and replaced the loader.
Rscripts tracks what works today. ScriptBlox logs what changed yesterday. Bitdefender documents what attackers do with the names in between. This page compares all 19 by the one attribute the trackers do not map: what kind of source exists behind each listing.
If a claim cannot be traced to a public record, it appears as Unknown. That is not a weakness. It is the only honest way to describe software that modifies the Roblox client.
Rscripts lists executors and says a subset is currently updated. ScriptBlox records sUNC scores and marks some builds "could be detected." Those are two different kinds of statement. This site keeps the caveats attached.
Xeno: a public GitHub repository describes a manual-map loader. Bitdefender documented fake installers copying the structure.
Wave: ScriptBlox records 100% sUNC and notes the team changed from 2025. ScriptBunker marks it Detected.
Volt: ScriptBlox records 100% sUNC and a rebrand from AWP.GG.
Potassium: NamuWiki records 100% sUNC and Discord-gated delivery.
Synapse Z: ScriptBunker records 98% sUNC and Detected.
SirHurt: ScriptBunker records 100% sUNC, V5.473, Detected.
Real: ScriptBunker records 100% sUNC, 99% UNC, 2.7.6, free, Detected.
Cosmic: ScriptBunker records 100% sUNC, 1.733, Detected. A DevForum post documents a detection method.
I have not executed any of these files. I have not submitted them to a sandbox. I have not audited their binaries. This page compares public records. That comparison is useful because it shows a pattern. It is not a substitute for malware analysis.
Each row is a live snapshot: version, sUNC compatibility, source type. Click through to a full breakdown.
* marked values come from project-controlled descriptions, not tracker measurements. A dash means no traceable value was found.
Each card links to a full profile. The label reflects what a traceable source says, not a safety guarantee.
Try a different name or .
A public GitHub repository describes a manual-map loader and a separate injector. Bitdefender documented fake installers that recreated the directory structure and replaced the loader.
ScriptBlox records a version history with entries like "vuln patches" and "fixed an execution breaking bug." A changelog is evidence of activity. It is not evidence of a developer-controlled source.
ScriptBlox records 100% sUNC and notes the team changed from 2025. Rscripts lists it among Windows executors. The profile asks what a function score and a tracker listing can actually prove.
No traceable official source, version record, or tracker listing was found at review time. The profile documents that absence rather than filling it with speculation.
Named in community lists, but no confirmed developer source, release history, or current status. The profile explains why an empty evidence panel is more useful than a fabricated one.
ScriptBlox records 100% sUNC, version 1.3.17.2, and a note that the project was previously AWP.GG with a long downtime before rebranding. The listing carries a "Could be detected" caveat.
NamuWiki records sUNC 100%, UNC 99%, and a lifetime license model. Download requires purchase and is delivered through the official Discord. A distribution channel is not a verified download source.
No traceable third-party status data, version record, or confirmed official source was found at review time. The profile documents that gap.
ScriptBunker records version 1.0.3.7, 98% sUNC, and a Detected status. ScriptBlox notes it was detected on August 20, 2026, then recovered. A coverage score and a detection history measure different things.
ScriptBunker records 100% sUNC, version V5.473, and Detected. Triage scores two samples 3/10. Gridinsoft flags the domain with a 12/100 trust score. Four measurements, four different questions.
ScriptBunker records 100% sUNC, 99% UNC, version 2.7.6, free, and Detected. Rscripts lists it among free Windows executors. The profile records three facts and several explicit unknowns.
ScriptBunker records 100% sUNC, 1.733, Detected. A GitBook documents the /download command. A Roblox DevForum post documents a detection method using debug.traceback.
No traceable third-party status data was confirmed at review time. The profile documents that absence, not unverified claims from clone sites.
No traceable tracker listing or developer-controlled source was found at review time. The profile documents that absence rather than repeating unverified blog claims.
No traceable tracker listing or developer-controlled source was found at review time. The profile documents that absence rather than repeating unverified feature lists.
No traceable official source, version record, or status data was found at review time. The profile documents that absence rather than repeating unverified return claims.
No traceable third-party status data was confirmed at review time. The profile documents the gap and explains why an explicit Unknown is more useful than a fabricated version number.
No traceable official source, version record, or status data was found. The profile documents the evidence gap and why it matters for anyone evaluating the name.
No traceable official source, version record, or status data was found. The profile exists to document that absence, not to fill it with speculation.
Because no traceable version record was found at review time. Inventing a number would make the page look complete and the research less honest. An explicit Unknown tells you exactly where the evidence stops.
It means the public record for that executor is a third-party listing — ScriptBlox, Rscripts, ScriptBunker, or similar. That listing may include version, sUNC score, and detection status. It does not mean the developer confirmed the listing, and it does not mean the file has been audited.
No. sUNC measures how many standard functions an executor implements. Volt, Potassium, SirHurt, Real, and Cosmic all score 100% on trackers. SirHurt, Real, and Cosmic are also marked Detected. Those numbers are not contradictory — they measure different things. None of them measures whether the executable contains malware.
No. The research describes fake Xeno installers. It documents what was distributed under the name, not what the public GitHub repository contains. That distinction is the entire point of the Xeno profile.
No. Roblox states that exploiting violates its Terms of Use and can lead to account deletion. No executor on this site is approved, endorsed, or verified by Roblox.
No. roblox-executors.com is an independent reference resource. It is not affiliated with, endorsed by, or sponsored by Roblox Corporation or any executor developer. Trademarks are referenced for identification only.
The homepage and profile pages carry a last-checked date. Third-party data changes frequently. A version that was current on the check date may be outdated by the time you read it. The date exists so you can judge the gap.