Everything you need to know about GenP is already covered in the GenP Wiki, GenP Guides, and GenP Setup, Troubleshooting, and Best Practices Guide.

These resources thoroughly explain why false positives are common with GenP, which is simply just a patcher that modifies app files. It's important to understand that antivirus scans, such as VirusTotal, often flag such tools because they perform actions similar to malicious software, like altering files or bypassing protections. This behaviour is typical and expected for patchers and does not indicate that the tool is malicious.

Many detection engines used to simply label false positives for GenP as HackTool or Patcher. However, over time, started assigning a wider variety of names and classifications, often based on the behaviour of the tool rather than anything malicious. The source code for GenP is publicly available, allowing anyone concerned to review it directly. If you still have doubts, you can verify the code yourself or consult the official guides for detailed explanations.

It is worth noting too that VirusTotal aggregates results from many antivirus vendors, each using different detection methods. A high detection rate does not necessarily mean the file is harmful; many engines will simply flag GenP's patching activities due to their behavioural signatures. Repackaged versions from Monkrus, are still based on GenP and will typically trigger similar flags.

If you are genuinely concerned about safety, the best course is to avoid non-genuine methods altogether and obtain software directly from Adobe with a legitimate subscription.

In summary:

• GenP itself is not malicious.
• False positives are normal for patchers due to their nature.
• Detection rates can increase as the tool evolves.
• Always verify the source and consider whitelisting GenP in your antivirus if you trust it.
• Or use genuine software for peace of mind.

Everything you need to understand this situation is already explained in the guides.

I'm not familiar with GenP - but many antivirus providers state that things like key generators are "hacking tools" and flag them as malicious on that basis alone.