To solve this, we select a test set of
malware samples that are manually verified to belong to
a malware family and compare the detection rates and
names of all vendors in the VirusTotal scanning service.
The AV engine with the best identification results is selected
as the reference detection for the malware download
process.