kc-gui

SUSPICIOUS. The stated purpose is plausible, but the core functionality depends on an unverifiable bundled kc.exe, uses PowerShell with ExecutionPolicy Bypass, implies credentialed network access to unspecified endpoints, and contains major internal inconsistencies around whitelist scope. This is not confirmed malware, but it is a high-risk skill with weak install/data-flow transparency.