Welcome to the community @squid_liver. 
This is called a āfalse positiveā. Trainers will trigger antivirus programs from time to time, no matter where on the internet you get it from.
This post has more information on why it happens and how to resolve it: Windows Defender marked WeMod as a Trojan.