I think that's a false positive -- I've seen that in other coins.

Your best bet is to check the download URL against https://virustotal.com