It’s a common issue with Unity and other indie games. The file isn’t malicious; it just trips defender’s automated machine-learning scan because it’s an unsigned executable (not verified by Microsoft) and packed in a ZIP file. The file is not malicious though I can verify.