Why Norton, Google Play Protect, and Avast are flagging as malicious the app GameNative after V 8.1????

[Ach97-96]

Norton 360 has flagged the application GameNative as malicious software and displays the detection ID 2000ef260883, warning of privacy risks and potential financial loss. The alert recommends uninstalling the app and running a full scan. Detections like this can come from signature matches, heuristic/behavioral rules, suspicious permissions, or repackaged/obfuscated components within the APK.

Single question:
Why exactly does the detection ID 2000ef260883 appear and which specific components of the app (for example: requested permissions, included libraries, digital signature, or observed behaviors) are being marked as critical or dangerous — is this an expected heuristic detection or does it indicate that something is wrong with the APK files?

[xXJSONDeruloXx]

@utkarshdalal I think building the bins from source in pipeline rather than bundling them in-repo would help immensely here

[utkarshdalal]

You think so? I don't think it's connected. Usually it's the tzst files and windows exes specifically that are flagged. We can try to narrow it down.

Also again I'm not against doing this at all just that we don't have the winlator code for vortek