Because all scanners use sets of signatures to find malware which sometimes trigger on legitimate software as well.
It's good you're cautious, you should always upload executable files to https://www.virustotal.com before starting them (you don't even have to unpack an archive).
That's a google service using around 60 of the most common scanners to scan the file, you'll see it's safe for the majority of them.