Reply to thread

Message: <blockquote data-quote="MacDefender" data-source="post: 977743" data-attributes="member: 83059">I don’t see anything too suspicious there. Writing to a software hive seems fine, and the second key is an ACPI check for the model of your computer (games sometimes do that). The fact that it’s an old game and has an expired certificate is likely making all the analysis tools treat it as unsigned and hence tipping towards more suspicious. Most of the VT engines marking it as suspicious are either pure AI engines or a sandbox analyzer. At least that means that zero malware analysts have marked your sample suspicious, which is a good sign.</blockquote>

Top