Qobalt.exe -

It is common for malware to use names that mimic legitimate software with a slight spelling change (e.g., "qobalt" instead of "cobalt").

Submit the file to VirusTotal to see if other security engines flag it as malicious. Quakbot Strikes with QuakNightmare Exploitation - Cynet qobalt.exe

The cobalt.tools project is a popular open-source media downloader. An unofficial or modified version might use a variations like qobalt.exe . It is common for malware to use names

A commercial penetration testing tool often abused by threat actors for post-exploitation and lateral movement . qobalt.exe

Check for registry entries in HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce . Malware often uses these to persist after a reboot.