This is very suspicious. The detections usually come when it's packed so the fact that this is not packed and have this much AV-positives is quite sus.
I've coded a multiclient before (and it's still active now btw) but never got this insane amount of detections because a multiclient, supposing it's not doing some dark shit behind the scenes, would never get this much cuz it only touches a few apis.
[Only registered and activated users can see links. Click Here To Register...]
GoogleUpdate? Svchost? That's a classic malware strat. Pretending to be an OS while recording key inputs from behind the scenes. Or if this guy was an asshole enough, probably a RAT which can control your PC, record inputs, listen to your mic, and watch you using your camera.
[Only registered and activated users can see links. Click Here To Register...]
Oh wow, powershell. Another classic malware strat. Also another another classic malware strat, The Scheduler. This guy's virus needs to run when restarted and there's three ways to do that. The Move-to-Startup folder technique, the Add-To-Registry technique, and the Task Scheduler technique.
[Only registered and activated users can see links. Click Here To Register...]
So uhh, you said it WASN'T packed right? Oh yeah what a great file, it has no .text section (which for the people who don't know coding, it's where the assembly code is)... which compiler did you build this on, MSVC 2089?
[Only registered and activated users can see links. Click Here To Register...]
So uhh the verdict..... this is definitely a
malware.
100%. I recommend people who used this to open your task scheduler, remove this guy's scheduled task, and then run a full scan of antivirus.
By the way I also sell a multiclient, it's 100% safe (because i need money). It's $7.56 a month and it's not just multiclient, you can also get cheats for both official cabal and private server cabal while supporting our lord and savior Yukikaze-sama.
Download Link for my app:
[Only registered and activated users can see links. Click Here To Register...]
Buy a license here:
[Only registered and activated users can see links. Click Here To Register...]