Yeah, exactly. This almost certainly isn't malicious, simply incompetence. I used to be work on a remote IT administration product. To be completely fair it

Yeah, exactly. This almost certainly isn't malicious, simply incompetence. I used to be work on a remote IT administration product. To be completely fair it is a foreign systems component that updated over the Internet with a goofy looking binary if you're expecting MSVC to build everything since that code was written in Go. On the other hand, it was signed properly, and the AV vendors couldn't give two shits about not flagging it despite their customers loudly complaining. It was really rough because when AV would flag this component, IT in a lot of cases couldn't get back in to mend the pieces left.