Really? Is it not a virus?
Technically, it's a 4 or 5 year old exploit, that falls under the general moniker "Trojan".
It triggered a trojan virus detection, correct?
BUT, it's an exploit being used for a very specific reason - which virus checkers simply cannot differentiate between.
Many exploits can be used for malicious purposes, but that's just not the nature of the beast, by and large, here at XDA Forums!
As far as any antivirus software that I know about is concerned, they are very simple minded " If it walks like a duck, and quacks like a duck, it can only be a virus duck!"

analogy.
To gain elevated privileges, AKA root, an exploit is needed, either in the OS, or even deeper - firmware (about the time when the first of the Sony Z series launched, nearly all the root solutions for Sony smartphones where a firmware exploit.
I believe the thank you goes to 2 XDA OG's Doomlord & Androxyde <- & he STILL maintains the flashtool.net site!
Sony patched that exploit when lollipop made its debuted!), & unless, as I said in the last long winded message, it's like an 0day exploit - a previously unknown exploit, or one without a known patch - antivirus will always trigger a false positive.
A couple points in closing.
First is XDA and its users, but I believe mostly the Dev's & XDA employ, do a remarkable job cleaning out all the actual malicious links and software, as well as pay for use software.
I think I've been an active member here close to 8 years, rooted DOZENS of phones, tinkered with a lot of scripts, mods & custom ROMs, and have yet to come across an actual malicious virus with ANY linked downloads.
Nothing is perfect, of course, but I think it's safe to say it's a safe bet you will never come across one ... Specially on a thread so heavily used as Dirty Santa.
If something was amiss, it would have been excised and patched properly years ago I'm positive.
XDA truly is a community of like minded, right to repair/mod/update/upgrade folks that 9nkybwant to share their knowledge, and many want to better their knowledge in one manner or another.
I hope this shine some light on how rooting works, and why known exploits nearly exclusively pop false positives.

Any other questions, don't hesitate, ok?
Most of us are rather friendly... If not long winded

I promise you, with any credibility I've earned here over the years, this is a safe exploit, and not a malicious chunk of code, hungry for data or cash
Ive used this very method of achieving
root a few times...3? Possibly 4x.
It takes a while, but it works!
He'll, I never thought my DS990 would EVER gain root, untill this Dev dropped the Dirty Santa flavor a month after all the other most popular V20 varieties already had theirs!
Hats off to
@emdroidle !!
Cheers!