Kaleson7000

100% wirus, ze względu na podejrzane komunikaty z windows defendera wrzuciłem w Hybrid Analysis i dostał score 100/100 malicious, 44/67 antywirusów wykrywa jako zagrożenie:
Spyware: Found a string that may be used as part of an injection method
Persistence: Installs hooks/patches the running process
Fingerprint: Queries process information
Evasive: Contains ability to check if a debugger is running, Input file contains API references not part of its Import Address Table (IAT), Possibly checks for the presence of a forensics/monitoring tool, Possibly tries to implement anti-virtualization techniques using MAC address detection

[link]