You cannot tell a false positive from a real positive. It’s a gamble. You need to check for every AV what’s the results and do your own risk assessment. Do I really need this software given that XX Antivirus consider it to be a virus? New threats will have a low number of AV that will detect it.

I remember back in the windows 7 days I had discovered Sandboxie that helped me a great deal. At the time my concern was the browser as javascript was just picking up and the engines to run it were all focusing on performance only. I don’t remember having to compile it manually, but that might actually be the safest way to ensure you don’t get a compromised installer.

If it says cryptominer or rat then it is not a false positive