[flagged]
(The stuff I work on, which is all open source and doesn't even try anything silly, routinely but randomly gets flagged for some reason.)
https://www.virustotal.com/gui/url/51acfb2159936a06bb31bdb9f...
https://www.virustotal.com/gui/file/038421636df34fbfc25cdb92...
it's got strings in the exe from RTPatch, it might be a generic match for that?