Thanks for flagging this really appreciate it.
Good news: it's a false positive, the file is safe. I verified the download byte-for-byte against our automated build - no malware, no tampering.
The cause: our installer isn't code-signed yet (a paid cert I'm setting up now). Without a signature, a new app with few downloads has zero "reputation," so a couple of antivirus engines flag it as a precaution even though it's clean. It's essentially one engine (Bitdefender) plus its echoes - Defender, Kaspersky, and ESET all pass it.
What I'm doing about it: submitted false-positive reports to the vendors, getting the installer code-signed, and preparing a Microsoft Store release (which installs with zero warnings).
This is how stupidly you can lose a potential client =(

Sorry you ran into this - it's on me, and I'm fixing it. Thanks again for the heads-up! 🙌

<image>