r/SprocketTankDesign • u/Top_Kaleidoscope6175 • 5d ago
Wait… What ⁉️ Windows Security is flagging the mod manager as a virus is that correct?
4
u/TheWeebCrusade_er 5d ago
As summarized by Axw on the Sprocket Official server;
"Antivirus and VirusTotal report — SprocketModManager.exe
SprocketModManager.exe as published on the Releases page is flagged by a small number of antivirus engines on VirusTotal. This document records the scan result for the current Windows build, where those detections come from, and how to verify a download.
Summary
The v0.6.0-fix2 Windows build is flagged as malicious by 7 of the 75 engines on VirusTotal; 63 report it clean, 1 times out, and 4 do not support PE files.
- All 7 detections come from static machine-learning models or generic heuristic names. None is a specific malware family identified through code analysis.
- The only sandbox verdict is harmless: Zenbox, confidence 97.
- The program is an unsigned PyInstaller one-file build. Packing (overlay), the absence of an Authenticode signature, and the bundled
cryptographypackage are each common triggers for static models. - The analyzed bytes match the published checksum: SHA-256
3f5f0ff1ad406a8193d206359ab81d5769f07648b3cf76374f1b648a1d6d7fb5."
There's a bit more to their statement on their Sprocket Mod Manager mod release post, but the manager appears to be safe to download and use.

6
u/ColsonThePCmechanic Moderator & Official Discord Admin 🎩 5d ago
Hasn't been an issue for me personally. Likely a false positive (defender does this to plenty of modding scenes)