See: https://www.virustotal.com/nl/url/d383497f3838faf127b531ee7695f577234e0eb974623b8327fed5b758bc4667/analysis/
&
https://www.virustotal.com/nl/file/704b7e5140721206a318d609b2d020f4692ec99d298edc1cc893e10b60a61329/analysis/1371402575/
Across all ThreatExpert reports, the file “ff.exe” was mostly identified as a threat.
polonus