Of course it is! Thank you! And hence mentioned it in the comment, too!

Oh… I see… Thank you!
I could not even imagine such a rule when I noticed the post at home page of LemmyWorld instance, and commented on it… ^^"

Wonderful day!

Depending on the anti-malware, it may be either a known signature, or heuristics.
- In case of the former, the signature may be a just a single use of function inside the safe program that matches with a malware that uses the same (e.g., in a thread or memory range the anti-malware probed);
- Heuristics - May just be too restrictive local security settings;

Yet, if you don’t have enough time to investigate it locally in isolated environments as virtual machines/containers, debugging syscalls and activities in file-system, memory, network etc., there are less manual or outsources, options, including the common know ones:
- https://opentip.kaspersky.com/
- https://opentip.kaspersky.com/requests
- https://www.virustotal.com/gui/
- https://any.run/

Please stay safe!