Cyber Scarecrow

I would assume there would be a small intersection of people that would download and install a windows program from an unknown web page and those that are worried about malware.

But perhaps I'm wrong

I know people /plural/ that will happily download cracked antivirus software from a torrent site.

Agree, you should get yourself backdoored by a trustworthy company like Sony. /s

Author of cyber scarecrow here. You are right, its a trust thing. Completly understand if people wouldnt want to install it and thats fine. It's the same for any software really. We just havent built up any confidence or trust like a big established company will have.

But why not make it open source? Why not identify who you are as humans?

There are ways to establish trust, you aren’t doing any of them.

That made sense before cryptocurrency, not after.

At this point, the simplest explanation is that it actually is malware. A more credible explanation than security researchers making something that looks this much like malware, but actually isn't.

Many torrent sites have stronger reputation vetting than Microsoft code signing certs.

because they know how to sell software. cloused source. for windows. things gov mandate allows plenty of budget. etc.

I mean you can look at the comments and check the vibe.

Even the WHOIS response gives "Privacy service provided by Withheld for Privacy ehf" under the contact field. The developers claim to be living in the UK, but don't provide any legal identity - and it's not hard; you don't even need to be a British resident to start a shell company in Britain.