@Pondus: the virustotal report is at https://www.virustotal.com/en/file/c9202b4a066e9f29fc7be7d6ce36f1323c417753d148edae70b543b49e439f17/analysis/1376037614/