MSI587F.tmp flagged as IDP.HEUR.26

This looks like it’s a Windows Update file, but I don’t know for sure. I wish there was more info i could look up about why Avast blocked it.

9f7dec9f7932/2023-11-07T15:21:05.289Z

Have you tried submitting a Suspected False Positive form to Avast.
https://forum.avast.com/index.php?topic=14433.msg1289438#msg1289438

FYI. I had a similar Behaviour Shield actiivation with a Opera update. I submitted my screenshot and a link to my post here on the Forum. I got a acknowledgement from Avast in a day or so.