Found it: https://www.bleepingcomputer.com/news/security/keylogger-fou...
> This file is registered to start via a Scheduled Task every time the user logs into his computer. According to modzero researchers, the file "monitors all keystrokes made by the user to capture and react to functions such as microphone mute/unmute keys/hotkeys."
I was in support at the time and can confirm 1-2-1 recording of all keystrokes to the file mentioned, utterly baffling.