I found old wallet installation file, it's downloaded 01.08.2019 and it definitely legit signed installation of Electrum. So it's not possible i got bad version that was fake or hacked.
Now the question is what happened and how. With mostly offline disconnected from internet PC.