I would like to report a similar issue with a file Zotero-6.0.20_setup.exe for windows. Using VirusTotal (https://www.virustotal.com/gui/home/upload), it says that "2 security vendors and no sandboxes flagged this file as malicious." for the file. Unfortunately, IT department of my conpany does not allow to use Zotero because of this...(of cource, I really want to use!)
It's a false positive. We documented all the ways a VirusTotal result was false last year. It looks like it's still the same thing here, with the same two vendors — they're misinterpreting Windows Error Reporting network requests to Microsoft IP addresses as being suspicious connections. You can send your IT department that thread, but there's nothing else we can do. Zotero's distribution chain is secure, and Zotero has never in its entire 16-year existence contained malware.
I will discuss with the IT team.