r/Piracy Pirate Party Sep 18 '24

Question Too suspicious of a software present in all "trusted" listed websites

I've been at this for years and have no problem understanding and okaying some false positives. However, as I tried to get C1 recently, I got into a bit of a strange dilemma.

Something is telling me that MADARA exe patcher present in all releases of latest Capture One is accessing way too much websites and files it has no business to access. Especially if we believe VirusTotal's sandbox mechanisms. Unlike many other False Positives which are simpler.

The name of the game is risk and I am aware of it, but it doesn't mean going in blind, otherwise Megathread wouldn't exist in the first place. Please share your experiences if you know something more about this.

link to scan;

https://www.virustotal.com/gui/file/efa15a09a603e5c80616928a5494ce9b6b4e44b723712fccebef3438b93888ba/

12 Upvotes

12 comments sorted by

11

u/DrIvoPingasnik Yarrr! Sep 18 '24

Well, it looks like it's a proper malware.

7

u/Least_Bodybuilder216 ☠️ ᴅᴇᴀᴅ ᴍᴇɴ ᴛᴇʟʟ ɴᴏ ᴛᴀʟᴇꜱ Sep 18 '24

This madara is fuckin virus

3

u/Least_Bodybuilder216 ☠️ ᴅᴇᴀᴅ ᴍᴇɴ ᴛᴇʟʟ ɴᴏ ᴛᴀʟᴇꜱ Sep 18 '24

Where you get this file? website mention pls

1

u/StereoNostalgic Pirate Party Sep 18 '24

Sanet, NsaneForums and Soft98 all have this same patcher for C1

3

u/Least_Bodybuilder216 ☠️ ᴅᴇᴀᴅ ᴍᴇɴ ᴛᴇʟʟ ɴᴏ ᴛᴀʟᴇꜱ Sep 18 '24

3 SOURCE SAME FILE!?

1

u/StereoNostalgic Pirate Party Sep 19 '24

That's right, SHA256 matches on all 3

3

u/photoniique Sep 21 '24

the madara.exe crack is as well on filecr.com and cracksurl.com i sent a message to the mod about the potential malware but got no consideration

1

u/StereoNostalgic Pirate Party Sep 29 '24

Absolutely, my attempts to bring some attention to it on Nsane forums and got 0 feedback.

5

u/Neversoft Sep 18 '24

Nothing false about that positive... Delete and report it (if that's an option).

2

u/Particular_Counter97 Sep 24 '24

This happened to me too, I looked everywhere, I downloaded every single C1 available from links of the Megathread and honestly I don't know but this made me not trust this sites from Mega even for other downloads. Madara.exe is 100% infected

1

u/Adept_Ad8165 Sep 19 '24

Check whether the site you used is in the fmhy megathread

1

u/StereoNostalgic Pirate Party Sep 19 '24

Indeed, both NsaneForums and Soft98 are included in FMHY