Question for those who use TorChat under windows (backdoor)?

Question

Malware

Hello, I want to understand one difficult situation, and I hope for your help.
Recently I needed to install the torchat client on windows, the first links in Google led to the project pages in the github and the forge (sourceforge), actually from the last one:
sourceforge.net/projects/torchat/files/latest/download
I leaked the latest version a week ago: torchat -windows-0.9.9.553.zip md5 torchat.exe binary hash - af9a116cf91e8fa504dc1683253573b9
Installed, everything works... But a couple of days ago I noticed strange network activity, started to find out what was wrong.
Locations:
C:\Users\%username%\AppData\Roaming\Adobe\AdobeUpdate.exe
C:\Users\%username%\AppData\Roaming\Adobe\srvchost.exe
These two executables were running in processes, both hidden in the system. I began to analyze them. The executable srvchost.exe is the most common tor client tor.exe opened on the default port 9050
But AdobeUpdate.exe is an incomprehensible backdoor, a link to the virustotal report: https://www.virustotal.com/ru/file/e5e8c45440f762c...
More I began to dig how these ekzeshniki got to my computer, and even started and AdobeUpdate.exe registered in the registry. Since lately I have not installed anything from the Internet except for this sticking out, I began to monitor its activity.
Indeed, when running the torchat.exe binary, the md5 checksum of which is af9a116cf91e8fa504dc1683253573b9, it created these two files at C:\Users\%username%\AppData\Roaming\Adobe\, hid them, registered AdobeUpdate.exe in the registry and started AdobeUpdate.exe
Where the application broke, what it did, and what it transmitted, unfortunately I can’t find out, since I am not a reverser. Only through Process Explorer I saw how AdobeUpdate.exe after some time still starts the cmd.exe process (apparently bind cmd backdoor through the tor)
But most importantly, there is no information on the Internet about this incident, probably compiled executables on github -they can be together with the backdoor, they hang, judging by the date, for more than a year.
An interesting messenger is sticking out, no less interesting than the TOX messenger, but if it has been delivered openly like this for more than a year with an outright backdoor, why is everyone silent?
Now, in parallel, I wrote my question to the github support and sourceforge, but your opinion on this issue is also very interesting.

Answer 1

I have not seen this, but there is something from Skribler

Answer 2

This is a decorative font.
Do you want to be more precise? Ugly decorative font.

Answer 3

Try changing the color in Photoshop (let the white text be black and the background white). Then search for pictures on google. In general, the question is meaningless.

Answer 4

I don’t think there is such a font, rather, someone photoshopped it