It is possible if Defender has got a signature of this password-protected archive. Yeah, probably. No other AV does this, so it's a unique behavior.