I was told that the file is being detected on purpose, i.e. it’s not a false alarm (it’s some kind of process loader/patcher/crack).
I’m personally not very happy about the decision, but for now, it stays this way.