Hi, I checked krita-3.0-x64-setup.exe with virustotal.com and got (just) one positive.

krita-3.0-x64-setup.exe
SHA-256: 914A40A1FF8AA08805D2CFDF32F9D46B793510BB97C1888887538AA7F82D7085
Bkav [found] HW32.Packed.345F [on] 20160604
Positives: 1 of 56

https://virustotal.com/de/file/914A40A1 ... /analysis/

This seems to be the same false positive case as with the shell extension issue (https://forum.kde.org/viewtopic.php?f=281&t=132835&p=356679&hilit=+krita+windows+shell#p356679). This time it's only Bkav.

So I won't care about this.

Probably because, like the shell extension installer, this installer is made with nsis.