MLVScan.Core 1.2.4

.NET Standard 2.1 This package targets .NET Standard 2.1. The package is compatible with this framework or higher. 
dotnet add package MLVScan.Core --version 1.2.4
                    


                    

                
NuGet\Install-Package MLVScan.Core -Version 1.2.4
This command is intended to be used within the Package Manager Console in Visual Studio, as it uses the NuGet module's version of Install-Package. 
<PackageReference Include="MLVScan.Core" Version="1.2.4" />
For projects that support PackageReference, copy this XML node into the project file to reference the package. 
<PackageVersion Include="MLVScan.Core" Version="1.2.4" />
                    


                            Directory.Packages.props
                        

                    

                
<PackageReference Include="MLVScan.Core" />
                    


                            Project file
For projects that support Central Package Management (CPM), copy this XML node into the solution Directory.Packages.props file to version the package. 
paket add MLVScan.Core --version 1.2.4
                    


                    

                
#r "nuget: MLVScan.Core, 1.2.4"
#r directive can be used in F# Interactive and Polyglot Notebooks. Copy this into the interactive tool or source code of the script to reference the package. 
#:package MLVScan.Core@1.2.4
#:package directive can be used in C# file-based apps starting in .NET 10 preview 4. Copy this into a .cs file before any lines of code to reference the package. 
#addin nuget:?package=MLVScan.Core&version=1.2.4
                    


                            Install as a Cake Addin
                        

                    

                
#tool nuget:?package=MLVScan.Core&version=1.2.4
                    


                            Install as a Cake Tool

MLVScan.Core

Tests codecov NuGet npm

MLVScan.Core is a cross-platform malware detection engine for .NET assemblies, powered by IL analysis (Mono.Cecil). It serves as the scanning backbone for MLVScan (MelonLoader, BepInEx 5.x, and BepInEx 6.x Mono/Il2Cpp) and MLVScan.Web (Blazor).

🛡️ Why MLVScan?

Most modders download mods from trusted sites like Thunderstore or NexusMods, where files are typically already scanned by VirusTotal. This catches most plain viruses—but sophisticated threats often slip through.

MLVScan acts as your second line of defense. It specifically targets:

  • Virus Loaders: Malicious DLLs designed to download additional payloads
  • Obfuscation Techniques: Code that hides its true purpose from standard AV
  • Stealthy Payloads: Threats that don't match known signatures

Think of it as the checkpoint after VirusTotal—catching what traditional scanners miss.

📦 Installation

dotnet add package MLVScan.Core

🚀 Quick Usage

var rules = RuleFactory.CreateDefaultRules();
var scanner = new AssemblyScanner(rules);
var findings = scanner.Scan("path/to/suspicious.dll");

if (findings.Any(f => f.Severity == Severity.Critical))
{
    Console.WriteLine("Malware detected!");
}

📚 Documentation

Complete documentation is available in the MLVScan.Core Wiki:

✨ Features

  • Platform Agnostic: Works on Windows, Linux, Web (WASM).
  • Multi-Signal Detection: Context-aware analysis reduces false positives.
  • Stream Support: Scan files from memory without writing to disk.
  • Deep Behavior Analysis: Correlates practical decode/load/execute behavior chains in compiled code.

🧪 Testing

Run all tests:

dotnet test MLVScan.Core.sln

Note: Some tests are designed to fail locally to document features that need implementation, but pass in CI. To run tests with CI behavior locally:

CI=true dotnet test MLVScan.Core.sln

Licensed under GPL-3.0

Product Compatible and additional computed target framework versions.
.NET net5.0 was computed.  net5.0-windows was computed.  net6.0 was computed.  net6.0-android was computed.  net6.0-ios was computed.  net6.0-maccatalyst was computed.  net6.0-macos was computed.  net6.0-tvos was computed.  net6.0-windows was computed.  net7.0 was computed.  net7.0-android was computed.  net7.0-ios was computed.  net7.0-maccatalyst was computed.  net7.0-macos was computed.  net7.0-tvos was computed.  net7.0-windows was computed.  net8.0 was computed.  net8.0-android was computed.  net8.0-browser was computed.  net8.0-ios was computed.  net8.0-maccatalyst was computed.  net8.0-macos was computed.  net8.0-tvos was computed.  net8.0-windows was computed.  net9.0 was computed.  net9.0-android was computed.  net9.0-browser was computed.  net9.0-ios was computed.  net9.0-maccatalyst was computed.  net9.0-macos was computed.  net9.0-tvos was computed.  net9.0-windows was computed.  net10.0 was computed.  net10.0-android was computed.  net10.0-browser was computed.  net10.0-ios was computed.  net10.0-maccatalyst was computed.  net10.0-macos was computed.  net10.0-tvos was computed.  net10.0-windows was computed. 
.NET Core netcoreapp3.0 was computed.  netcoreapp3.1 was computed. 
.NET Standard netstandard2.1 is compatible. 
MonoAndroid monoandroid was computed. 
MonoMac monomac was computed. 
MonoTouch monotouch was computed. 
Tizen tizen60 was computed. 
Xamarin.iOS xamarinios was computed. 
Xamarin.Mac xamarinmac was computed. 
Xamarin.TVOS xamarintvos was computed. 
Xamarin.WatchOS xamarinwatchos was computed. 
Compatible target framework(s)
Included target framework(s) (in package)
Learn more about Target Frameworks and .NET Standard.

NuGet packages

This package is not used by any NuGet packages.

GitHub repositories

This package is not used by any popular GitHub repositories.

Version Downloads Last Updated
1.2.4 0 3/5/2026
1.2.3 43 3/2/2026
1.2.2 42 3/1/2026
1.2.1 93 2/23/2026
1.2.0 84 2/23/2026
1.1.9 83 2/21/2026
1.1.8 84 2/20/2026
1.1.7 93 2/16/2026
1.1.6 102 2/13/2026
1.1.5 103 2/1/2026
1.1.4 110 1/24/2026
1.1.3 101 1/22/2026
1.1.2 95 1/13/2026
1.1.1 107 1/4/2026
1.1.0 99 1/4/2026
1.0.0 122 12/13/2025