is this a virus?

[peio2]

i scanned it in virustotal and 14 antiviruses detect it as a virus

[mortalis13]

See #45
Unpack and check what files are exactly suspicious

[TMang0]

See #45 Unpack and check what files are exactly suspicious

English translation:

[mortalis13]

The answer is the same )
A zip archive contains multiple files inside, some can be clean, some not

[jtbiddle]

https://www.virustotal.com/gui/file/1abf2999149755cb34e08bc084f6cb770f212dd80ef1c78d62cc440c4b4d9c8f

bnkextr.exe is the file getting flagged as malicious, but it's only flagged with things like "suspicious" and "possible threat" so it doesn't contain a known virus but there's some part of the exe that isn't passing their smell test

[mortalis13]

I believe it's taken from here: https://github.com/eXpl0it3r/bnkextr
Who wants can compile and scan the resulting executable, doesn't seem to require any 3rd-party libraries

[jtbiddle]

Ah that whole library is only like 400 lines long, it's easy to see that it doesn't contain any malicious code (and comes up clean on virustotal).

You're running a 9 year old version of bnkextr, and while the source code looks similar it pops up as infected on virustotal. I'd say just update bnkextr so you don't have to deal with the false positive. Or maybe a guy named eXpl0it3r actually did sneak something in, the exe went from 189kb in 2015 to 50kb.

[ghotiPhoti]

was looking for an issue like this but couldn't find it because i searched the wrong repo 😭 thanks for this
update: i downloaded it again and this time it didn't even care