Not sure if this subforum is the proper place to post it, but yesterday thx to one article on a blog, one guy posted that paint.net ships 3rd party applications, i asked him from where he downloaded it and he said https://paintnet.es/
idk if you can sue owner or mail a CAD to stop the malicious activity.