It’s a common issue with Unity and other indie games. The file isn’t malicious; it just trips defender’s automated machine-learning scan because it’s an unsigned executable (not verified by Microsoft) and packed in a ZIP file. The file is not malicious though I can verify.
Windows has built in stuff to flag any download that has too few otherpeople downloading the same thing. Yes they know this by stealing your data but that's another subject xd