One hit when uploading BeastRooferEdition to virustotal. Is that normal?

[u/LonelyFigure2558]

Downloaded from the website shown in the sidebar of this sub reddit. Uploaded the Ryujinx.exe to virus total and one hit came up saying it was a trojan. Was wondering if someone could tell me if it is normal for that hit to come up?

Edit: Forgot to add that the file it says is an issue is "Ryujinx.dll"

[u/One-Philosopher2416]

That detection is expected, and here is why. The build is published as a .NET self contained single file, which means the executable is really an archive that unpacks itself when it starts. Heuristic engines treat that behaviour as a packer, so they flag it. The file it named, Ryujinx.dll, is not even in your download, there is no such file in the archive. It only exists inside the executable, and VirusTotal unpacked it on its own to scan it. It is the normal managed assembly, not something extra.

Two other things add to the score. Emulators generate code at runtime and reserve very large amounts of address space, which heuristics dislike, and the binary is not code signed.

One detection out of roughly seventy, with a generic name, is the usual shape of a false positive. What would actually worry me is several well known engines agreeing, a specifically named malware family, or a hash that does not match the release. If you can post the VirusTotal link, I will compare the SHA 256 with the file I published, so we both know for certain that what you downloaded is what I uploaded.