

You haven’t specified whether you’re using the GenP or Monkrus method, but in this case, the outcome is the same. What you’re seeing is a false positive, as the file has been modified during the patching process.
Windows Defender, along with most other antivirus programs, will flag the file as HackTool:Win64/Crack!MTB, which is a common detection name for software patching/cracking tools.
These types of files are often flagged even when they’re functioning as intended, simply because they’ve been altered from their original state. Antivirus software detects this modification and associates it with potentially malicious behavior. This is expected when using patching tools.
All of this is already covered in either the GenP or Monkrus Setup, Troubleshooting, and Best Practices Guide.
You can’t have looked that hard then… GenP Guides / Downloads