It's the auto-update functionality from a now-suspect URL. The repo has since been taken down, but here's the suspect file:
https://github.com/dbgsymbol/getsymbol/blob/cb4bdedc1a85c308...
https://github.com/dbgsymbol/getsymbol/blob/cb4bdedc1a85c308...
https://github.com/bb33bb/getsymbol
https://github.com/clayne/win-getsymbol
here is the same link as in the comment above from one of the forks:
https://github.com/bb33bb/getsymbol/blob/main/GetSymbol/CMai...
the code fetches from `UPDATE_CHECK_URL`, which is hardcoded as:
which as of the time of this posting, returns:
"GetSymbol 2.0.3|https://dbgsymbol.com/downloads/2.0.3/GetSymbol.exe"
the GetSymbol.exe file (which is downloadable right now) being presumably the infected file being discussed..!
you can still see cached bits of the code via github search -> https://github.com/search?q=path%3AGetSymbol%2FCMainDlg.cpp+...
and a tiny bit of the repo's main page in google's cache: http://webcache.googleusercontent.com/search?q=cache%3Ahttps...
and the user's github profile, again from google's cache: https://webcache.googleusercontent.com/search?q=cache:JXXyoV...
the dbgsymbol.com links above still work, obviously.