Both executables under "Creator Tools" get flagged on virustotal. Steer clear of this project.
You must be registered to see the links
You must be registered to see the links
False positive. These EXEs are built with Python + PyInstaller (one-file, unsigned) — the exact combo that trips generic ML/heuristic rules on VirusTotal. The hits you cited are all the usual suspects: Wacatac.B!ml / Yomal!rfn / Win64:Malware-gen / “Static AI – Suspicious PE” / “BehavesLike.Generic”. That’s reputation/packing, not malware behavior.
Receipts (source code):
chpack_builder:
You must be registered to see the links
media_tagger:
You must be registered to see the links
If you actually want to verify, do any of these in 2 minutes:
VirusTotal the source zips (not just the PyInstaller stubs).
Hash check: Get-FileHash .\*.exe -Algorithm SHA256 and post the SHA-256 so others can compare.
Rebuild from source: PyInstaller (onedir, no UPX), then scan your build. You’ll see the same behavior vanish when it’s not a packed one-file.
Why this happens (and how we’ll reduce it):
Unsigned + new file + packed stub ⇒ low reputation ⇒ ML engines bark.
Switching to signed builds and onedir packaging dramatically cuts false flags. Submitting the signed hash to Microsoft also clears SmartScreen/Defender within a day or two.
If you still don’t trust it: run it through Malwarebytes/Bitdefender/Kaspersky or just build from source and use your own binaries. VT is an aggregator, not an oracle — “AI/Generic/BehavesLike” ≠ confirmed malware.
Also, for anyone that downloads the source code - feel free to iterate on it and share < 3