Not for the first time[1], my virus scanner (Windows Defender this time, Sophos previously) flags the downloaded executable, in this case for "Trojan:Win32/Wacatac.B!ml" Which given how it analyzes memory may make sense as a false positive.

1) Justine's blinkenlights and one other I can't remember at the moment have done so previously as well.