forge-1.12.2-14.23.5.2859-installer.jar is a VIRUS??!!

[Prinxino]

Hello, some minutes ago a friend downloaded forge installer and mccaffe blocked it aswell as norton from another friend. We looked into it and found out there is something not right.
Pls check if our suspicious are right or if it a false positive.

https://www.virustotal.com/gui/file/6d3755e87a4070f370c1e3491188d4f6785743e8d43d3d00be246b594fe8344f/behavior

This is the link to virustotal with the behaviour of the .jar after it gets opened.
And we check the file hosts in system32 and it added some lines.

Edited August 25, 2023 by Prinxino

[Prinxino]

The file that was put in the virustotal was the zip.

https://www.virustotal.com/gui/file/23f6d9fe6a58bff6607f4bc77e1f87f25baaf3612d23b9af3072dd36bec95c6d/behavior

This is what happens if you put the .exe inside the zip

[skelverious]

I am having similar issues over here and am worried for forge and its entirety. It also is every version of forge atm. Mass file corruption? 

[Prinxino]

could be