That innocent ZIP is detected by 12 tools on VirusTotal.
https://files.mastodon.social/media_attachments/files/113/157/576/859/868/109/original/5d1ad0266a70abf9.png
Some even detect a CRC-colliding file if there's no password.
GNU social JP is a social network, courtesy of GNU social JP管理人. It runs on GNU social, version 2.0.2-dev, available under the GNU Affero General Public License.
All GNU social JP content and data are available under the Creative Commons Attribution 3.0 license.