if you could read names in the AV, its says "ML, artemis (Heuristic), PUA and Generic", in most AV companies its comes with 2 engines (or more), it detect by (1) signature and (2) behavior.. machine learning, generic, artemis or potential unwanted program are under behavior engine because it doesn't have an exact match to become signature detection and having an IRC protocol for most crypto wallets confuses the behavior engine even the file is clean because of its activity (a chat protocol for wallet?? its very confusing for AV and IPS). if in doubt you may also run basic sandbox