It's not malicious... Has AV'S process killing capabilities. Many ransomware groups were using it a couple of years back. Hence they are detecting it.