Usually .exe files false trigger an alarm, specially when it's a file with little samples in the database