It s basically a crypto miner, not some magic software which brings money. It uses your GPU and CPU to mine crypto. Is it legit? Well, Nicehash was legit, offered the same service and yet they got hacked for 4700 BTC.
The first thing I d ask myself if how can I be sure to be able to remove that miner 100% when I decide to do so.