@DavidR,

Already done; see the first post. Avira also identifies it, but not the rest.

Either it is a FP, or it got recently hacked and the developer (roytam1) didn’t notice it.