microsoft / microsoft/hidtools
Waratah v1.6.0 flagged as Trojan.Marsilla
Nobody has claimed this yet.
- Dominant language
- C#
- Stars
- 291
- Forks
- 39
- Avg merge
- 1h 54m
- Merged PRs (30d)
- 1
Description
Hello there,
Firefox blocked this download, and when allowed and scanned by Windows Defender, it came up clear. However, running through VirusTotal gives a number of hits against Trojan.Marsilia... I've checked the shasum across multiple machines and networks to ensure it wasn't something modifying in-flight
https://www.virustotal.com/gui/file/e7987ccb1859620039790f2b98399a1703d2c4be3ccd8b263426532c5d59822d/detection
Runs fine in a sandbox without anything weird, so seems like a false positive, but a pretty loud one that may need some clearing up.
Cheers,
Nick
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start with the VirusTotal report and the Waratah v1.6.0 download referenced in the issue. Compare the reported artifact and its shasum with the release, then determine whether the Trojan.Marsilia detections can be clarified or resolved; done means the false-positive status and any required release action are documented.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- csharp
- Domain
- release, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100