Ok I finally managed to hit that warning yesterday and sent everything again to Microsoft. It seems the warning has been fixed on their part in newest threat definitions:

Please let me know if the issue persists in the newest version with cache cleared. Thank you all for your help!