Uploading UnitySpy.dll to https://www.virustotal.com results in some engines flagging the DLL as malware:
I wanted to know what piece of code was raising the flag, so I've started removing some code from the DLL and submitting it to the scan until I had a full green result.
I did two tests, removing the code in a different order:
-
In https://github.com/hackf5/unityspy/tree/investigate_antivurs_scan, I started to remove the Util package, then slowly removed some code from the Detail package. The code present in the branch still fails the 9 antivirus checks.
However, if I remove any line from ITypeDefinition or IFieldDefinition (and their corresponding implementation), the test is suddenly green, even though the methods do nothing and are never called.
-
In https://github.com/hackf5/unityspy/tree/test2_antivirus I then did it the other way around: start by removing code from the interfaces (and the implementations), then from the classes in Detail. The code present in the branch fails the 9 engines.
However, if I remove any line from what's left of TypeCode, the result is suddenly full green.
(maybe worth noting: if I remove one line, and replace it with a random value, it still fails)
In short, I have no clue as to what's going on :/
Uploading UnitySpy.dll to https://www.virustotal.com results in some engines flagging the DLL as malware:
I wanted to know what piece of code was raising the flag, so I've started removing some code from the DLL and submitting it to the scan until I had a full green result.
I did two tests, removing the code in a different order:
In https://github.com/hackf5/unityspy/tree/investigate_antivurs_scan, I started to remove the Util package, then slowly removed some code from the Detail package. The code present in the branch still fails the 9 antivirus checks.
However, if I remove any line from ITypeDefinition or IFieldDefinition (and their corresponding implementation), the test is suddenly green, even though the methods do nothing and are never called.
In https://github.com/hackf5/unityspy/tree/test2_antivirus I then did it the other way around: start by removing code from the interfaces (and the implementations), then from the classes in Detail. The code present in the branch fails the 9 engines.
However, if I remove any line from what's left of TypeCode, the result is suddenly full green.
(maybe worth noting: if I remove one line, and replace it with a random value, it still fails)
In short, I have no clue as to what's going on :/