Not sure which package OP found it in, but my system ( win 10 ) flagged it in 'PreSonus Studio One 5 Professional v5.4.0 Incl Patched and Keygen-R2R' / 197586.rar . I don't rememember if I pulled this down from the UL or from RG source. Haven't seen it in any other R2R releases I've been feasting on these last few days.
If you check the thread on sister site, you'll see this is reported there and dismissed as a false positive. Quelle surprise!