I think this is a false positive, but I want to be sure.

[TW5788]

To the MalwareBytes Team:

Early this morning, my computer flagged a Malware.Sansbox.23 incident twice (one registry key change and the other was a file) related to the same program. I did some digging, and I think it's a false positive - but I want to be sure.

 

I've attached the scan report results. Any thoughts or guidance you have would be greatly appreciated!

 

Sincerely,

TW5788

MWBScanResults12312021.txt

[TW5788]

*Malware.Sandbox.23

[Maurice Naggar]

Hello  

What was flagged & removes seems to be some sort of uninstaller.  But what do you know, if anything, about CHOICESCRIPT IDE  ?

[TW5788]

Thank you, Maurice.

ChoiceScript IDE is a program I use to write interactive fiction. I think it's just the uninstaller. Most people that write ChoiceScript games use it, and I downloaded the program from the company's GitHub page.

Sincerely,

TW5788

 

 

[TW5788]

* from the developer's GitHub depository - which is linked through the ChoiceScript company website.

[Maurice Naggar]

Hi. Given what you have advised. I am moving this thread to the false positive section. A member of the Research team should follow up with you. Happy New Year. 

[shadowwar]

Can you please zip and attach this file here so i can analyze it. 

C:\USERS\GEARD\APPDATA\LOCAL\CHOICESCRIPT IDE\UNINS000.EXE

 

Thanks. 

 

[TW5788]

Here you go. Thank you!

unins000.zip

[sUBs]

This is a false positive. It shall be fixed shortly

[TW5788]

Happy New Year, sUBs. Thank you!