Wallet is suspiciously small.
Tested on fresh Virtual Machine.

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
c:\Users\User\AppData\Roaming\csrss.exe

So it is a malware.