He also might have a virustotal account