After a friendo had a look-see, they didn't see any network calls, concerning file writes, or anything definitely out of the ordinary. He was confused as to why it was making calls to the Windows crypto API, though.
So... potentially a false positive?