virustotal's antivirus scan report for the file with md5 d581a908bc93529adcf51d4e8e5f5624 at 2015-12-09 12:20:26 utc. 22 out of 55 antivirus detected the file as malicious. some of the detections were: risktool.win32.processpatcher.sml!cobra (v) (not malicious), riskware ( 0040eff71 ), riskware ( 0040eff71 ), trojan.atraps!/m8roik1oe0, w32/secrisk-processpatcher-sml-, troj_ge.379742c2, riskware.win32.procpatcher.dwwzqc, generic pua im (pua), backdoor.poison.win32.72269, troj_ge.379742c2, rdn/generic pup.z, w32/secrisk-processpatcher-sml-, trojandownloader.generic.axff, riskware[risktool]/win32.procpatcher.aat, hacktool.kmspico.12288[h], win32.application.agent.55nhfd, rdn/generic pup.z, pup/patcher, a variant of win32/hackkms.ab potentially unsafe, not-a-virus:hacktool.autokms, pa