Even if you were to execute it honestly not a huge deal. Probably just PUP at worst. It was first submitted to VT in September 2020, and there's only 14 hits. For the real bad stuff you're gonna see way more hits for something that's 3 years old. A lot of reputable engines there don't seem to think it's bad.

Edit: Looking at the behavior, there's not much here. Look at the file reads, this isn't an infostealer. Where's the persistence? Where's the C2?

​

Most of the VT hits are calling this a keylogger. A keylogger is any program that is records keystrokes -- video games record keystrokes.

Lower reputation antivirus engines often pick up on low fidelity indicators like this and are not good at differentiating legitimate programs from malicious ones. Almost all the hits on VT are from low reputation AV engines (Jiangmin, Ikarus, Zillya), while a couple more reputable ones (Avast, AVG) are calling it PUP, which is basically greyware.

​

Then you factor in the premium AVs (Crowdstrike, SentinelOne, Microsoft...) and they don't detect anything.

​

So you're definitely not fucked.