Hello,
I am using latest Avast Free on Windows, and after installing the “Eclipse Community” Edition of firefox, called r3dfox, its r3dfox.exe was blocked as ransomware.
The message was like “r3dfox.exe tried to modify desktop.ini inside C:\users\username\documents, and was therefore blocked as ransomware.”
r3dfox.exe is hosted here on github: Releases · Eclipse-Community/r3dfox · GitHub
I think it is a false positive, but I am not sure. r3dfox seems like legit software.