Ok, unpacking GZIP inside the exe file and doing some unknown things s kinda tricky.
From the first glance it seems that program is ok, but who knows. Maybe it patches claymore fee to your wallet, but also it can forward some portion of your own shares to another wallet as another fee for patcher - i wouldnt be a big surprise.
And then you can not say is it just a random spike/slide of current effective rate of your worker or it is "patch" working)
I dont have proper qualification to check except for basic diassembly until i see some unpacking of GZIP into unknown shit)
Anyway if this thing forces develper to reduce fees - i am ok with that.
I dont want it to be resold by other users thats why I packed it. As you see it took about 1 day to find somebody who tried unpack it. I think there was more people who tried that but they just didn't report back if they were successful or not.
If you are unsure that I am stealing your normal shares you can check your connection with wireshark for example. You will see to which wallet you send your shares. If you don't want to mess with wireshark or similar program which monitor your connections. You can just check your miner log. You can find my wallet in your log 0x951B737cc259f5d05286183b75eF8C544B4c3772 everytime it connect to pool and mines dev fee for me.