This has happened several times by several AV companies. They use special algorithms to assess threat, and they occasionally get it wrong! Even the big ones like Kaspersky, Norton, AVG and VirusTotal have all flagged it before, wrongly. Whenever I have approached them about it, they apologise and say they fix it, which they do, but a year or so later it pops up their radar again.
There are several bug reports (like this one) and this has always been (so far) a false alarm. If your AV software flags QuickHash, please don’t just abandon the program. Instead e-mail me a screenshot of the AV software so I can tell them about it and get in touch….I will help by either verifying your download via hash values or, if you have got a dodgy version of it from somewhere by accident or in error, use this website to download the valid version.
Remember the program is open-source. So if you do ever end up with an exe that is genuinely a virus, its because someone else has engineered it and distributed it illegally (or against the GPL2).