After taking a closer look at the VirusTotal page, it creates a file "c:\windows\microsoft.net\framework\v4.0.30319\addinprocess.exe" that has the Publisher set to "microsoft corporation", which there is literally no legitimate reason to do for any non-malicious program, so I can confirm that this is a virus with 100% confidence.
All the proof of what I'm saying can be found at https://www.virustotal.com/gui/file/0f15e776ac9ef8cd97bf3031dd5dd99325209e144754...