Trojan in 2.2.0 windows installer?

[petersasi]

After downloading deluge-2.2.0-win64-lt2.0-setup.exe from https://ftp.osuosl.org/pub/deluge/windows/
When trying to run:

Code: Select all

Get-FileHash -path .\deluge-2.2.0-win64-lt2.0-setup.exe -Algorithm SHA256

I get:
Get-FileHash : The file 'C:\Users\PeterSasi\Downloads\deluge-2.2.0-win64-lt2.0-setup.exe' cannot be read: Operation did not complete successfully because the file contains a virus or potentially unwanted software.

Opening Windows Virus and Threat Protection I can learn that it already quarantined the file because it has detected: Trojan:Win32/Pomal!rfn

Is this a false alarm or the publicly downloadable installer is indeed Trojan infected?

For the record, I tested the other three 2.2.0 downloads and they seem to be free of the Trojan (no alert from threat protection) and they match their SHA256 also downloaded from the site:
1. deluge-2.2.0-win64-setup.exe
2. deluge-2.2.0-win32-lt2.0-setup.exe
3. deluge-2.2.0-win32-setup.exe