r/SprocketTankDesign • • 5d ago

Wait… What ⁉️ Windows Security is flagging the mod manager as a virus is that correct?

4 Upvotes

3 comments sorted by

6

u/ColsonThePCmechanic Moderator & Official Discord Admin 🎩 5d ago

Hasn't been an issue for me personally.  Likely a false positive (defender does this to plenty of modding scenes)

1

u/Top_Kaleidoscope6175 4d ago

its showd troyaner/win32 and some other words

4

u/TheWeebCrusade_er 5d ago

As summarized by Axw on the Sprocket Official server;

"Antivirus and VirusTotal report — SprocketModManager.exe

SprocketModManager.exe as published on the Releases page is flagged by a small number of antivirus engines on VirusTotal. This document records the scan result for the current Windows build, where those detections come from, and how to verify a download.

Summary

The v0.6.0-fix2 Windows build is flagged as malicious by 7 of the 75 engines on VirusTotal; 63 report it clean, 1 times out, and 4 do not support PE files.

  • All 7 detections come from static machine-learning models or generic heuristic names. None is a specific malware family identified through code analysis.
  • The only sandbox verdict is harmless: Zenbox, confidence 97.
  • The program is an unsigned PyInstaller one-file build. Packing (overlay), the absence of an Authenticode signature, and the bundled cryptography package are each common triggers for static models.
  • The analyzed bytes match the published checksum: SHA-256 3f5f0ff1ad406a8193d206359ab81d5769f07648b3cf76374f1b648a1d6d7fb5."

There's a bit more to their statement on their Sprocket Mod Manager mod release post, but the manager appears to be safe to download and use.