Hi,
Just to be sure, I downloaded the install package of HikaShop Starter 3.2.2 from our website a few minutes ago, extracted it and looked at that file and I can confirm that it doesn't have any trojan. It's the normal checkout.js file.
So either you downloaded the package from somewhere else than our website and the file has been modified by the person providing the file, or it's a false positive of your antivirus software.
I would also add that I'm also on windows 10 with the built-in antivirus software up and running and it didn't detect anything for me.
So try redownloading it from
www.hikashop.com/download.html