AMD/ATI Pixel Clock Patcher

[ToastyX]

(11-11-2019 01:12 PM)board-temp Wrote:  Hello,
i uploaded the 95k sized file (md5: d61992cbdda1a789a9d5f597fd0de125): it is malicious!

https://www.joesandbox.com/analysis/188887/0/html

timestamp: 11.11.2019 - 14:03:54
File size: 95744
MD5: d61992cbdda1a789a9d5f597fd0de125

what is happening? how did you verify on your end that this is not malicious? can you post a scan result link please?

I wrote the software, and the source code is available for download. I verified that the file in the first post is still the same file that I produced and was not tampered with.

Look at the analysis reports that you linked for the two files. They are nothing alike. The first file you linked is definitely a trojan. It bundles my software and installs malware. My file doesn't do any of the things you described, and you can verify this yourself.

The "malicious" detection for my file is bogus. What exactly is malicious about it? It doesn't bundle any software, doesn't make any network connections, and doesn't add any startup items, so how can it be malicious?

"Detects as malicious" is not the same as "infected with a trojan." Malware scanners that try to be "smart" by using heuristics and machine learning often detect random files as malicious when they're not.

By the way, I tried to join Joe Sandbox, but they rejected my registration and deleted my account. I hate services like this that incorrectly detect files as malicious and then make it difficult to report false positives.