8

The VT Results reflect an on-demand scan - this doesn’t include elements that are checked during an on-access scan such as checking against the avast cloud, nor does it do the deep screen check, etc. etc. I also believe that would also include its location on the system and given what is shown on your image that could well be a consideration in the Evo-Gen [Susp] alert (Suspicious, not necessarily a positive malware detection).

Avast has long since opted not to make things easy to exclude (single click action) to prevent accidentally allowing malware to run. That is why the exclusion requires a deliberate act.