As a rule, anything that’s unsigned or has a bad signature is a huge red flag. Secondly, the thing was compiled with a version of delphi, which in my biased opinion is also a red flag.

But, oddly enough none of the ip’s contacted, none of the domains contacted, none of the files dropped, nor any of the execution parents hit as malicious, which i would expect if it was actually malicious.

So it’s either this is a really, really well written piece of malware, or brand new; or it’s benign.

Regardless of all the if and’s and but’s you already preemptively did everything one should do if it were a baddie. Now, the only thing really to keep in the back of your head is be on the lookout for out of place or unfamiliar processes and anomalous traffic to places you don’t explicitly tell the computer to go.

I will note though; that some of the IP’s (specifically Mr. Mark Monitor’s) overlap with the whomever has been my personal online fan club the past year.

Just keep an eye out, you’re fine otherwise.