A fair bet that it's false positive. I used Avira for a few years, and it had a nasty habit of reporting many false positives. It would even block Micrsoft's media creation tool for making a Windows 10 bootable usb drive. I'd like to hope they fixed that, and I'm sure they did, but that was the last straw for me. Several years ago, Avira was consistently reporting more false positives than competitors on AV-Comparatives as well. I'm not sure about recently, but false positives have been a traditional weakness of Avira for a long time.