I did both a system scan and directed scan at the game files with Windows Defender and it came up with nothing — I think yours might just be more sensitive about running files from having downloaded them from the internet. I need to eventually pay Microsoft’s fee and set up app registration/code signing but it’s a huge chore so haven’t yet. Until then, you may have more luck if you download the game through the itch.io app.
