urlquery alerts executable but VT says possibly harmless...

See: https://urlquery.net/report.php?id=1446731418260
and https://www.virustotal.com/nl/url/9e26f6d03d238b3ddf7a281686b8c8bcaf9ce9e44f40b16c4251d73c62d652bf/analysis/1446731328/
and https://www.virustotal.com/nl/file/e032383bcfecd134c056f67a05d2a2dcf7bee76fc5b23a96f520ee518a73ccd6/analysis/1445925457/
Scripts OK: Script loaded: https://www.google.nl/xjs/_/js/k=xjs.qd.nl.lRGShhkeUf4.O/m=sx,c,sb,cdos,cr,elog,jsa,r,hsm,qsm,j,p,d,csi/am=ICkQABBEfOeDQFhhjAlTE4iwHA/rt=j/d=1/t=zcms/rs=ACT90oFVnUEqqSaAcYi9IHTxEPry0vVgVA
Script loaded: https://www.google.nl/xjs/_/js/k=xjs.qd.nl.lRGShhkeUf4.O/m=csies,abd,sy99,sy98,sy97,sy100,async,erh,sy101,foot,fpe,idck,ipv6,lc,sy70,sy158,lu,m,sf,sy26,sy33,sy34,sy90,sy27,sy37,sy35,sy91,sy56,sy145,sy28,sy46,sy157,sy151,sy153,sy251,sy36,sy258,sy252,sy39,sy265,sy280,em5,sy89,sy130,em15,em14,em12,sy281,skp,sy166,sy88,sy148,sy207,sy208,sy230,sy176,sy233,sy175,sy149,sy206,sy231,sy234,sy236,sy228,spch,vm,sy134,sy29,sy86,sy133,sy135,cbin,dgm,cbhb/am=ICkQABBEfOeDQFhhjAlTE4iwHA/rt=j/d=0/t=zcms/rs=ACT90oFVnUEqqSaAcYi9IHTxEPry0vVgVA
Script loaded: https://www.gstatic.com/og/_/js/k=og.og2.en_US.jhbP94cEAmM.O/rt=j/t=zcms/m=sy7,sy6,sy24,sy25,sy30,sy26,sy28,def/rs=AA2YrTsaT5-8BXsdsw5mGQC2PBCLsuukKg
Script loaded: https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.xjOqtrB8Fx8.O/m=gapi_iframes,googleapis_client,plusone/rt=j/sv=1/d=1/ed=1/am=AAQ/rs=AItRSTOblpNtoWHpPOhBTtm7mc3TCZFA0g/cb=gapi.loaded_0

False positive detection on Suricata IDS?

polonus