The file is marked as a virus by both Chrome and Windows
That sounds strange. That one time Chrome warned me about a virus, it was a virus.
That being said, the usual warning users get is that the file was downloaded from the internet. And was not "signed".
The funny part is, that having a signed exe is actually a bad sign for a game downloaded on Itch (one does not sign a ever changing exe for a hobby project or even as a small time developer). That one time I found such a thing, it was a virus with a faked signage. Yes, it was faked, that system is compromised. As I understand they hacked or faked a company in that signage-system.
Godot is infamous for triggering false positives. But that the threat was named specifically is concerning. Although it seems kinda a generic name for a downloader and data stealer family of malware that might get false positives because of that.