Piracy: ꜱᴀɪʟ ᴛʜᴇ ʜɪɢʜ ꜱᴇᴀꜱ

54500 readers

385 users here now

⚓ Dedicated to the discussion of digital piracy, including ethical problems and legal advancements.

Rules • Full Version

1. Posts must be related to the discussion of digital piracy

2. Don't request invites, trade, sell, or self-promote

3. Don't request or link to specific pirated titles, including DMs

4. Don't submit low-quality posts, be entitled, or harass others

Loot, Pillage, & Plunder

📜 c/Piracy Wiki (Community Edition):

💰 Please help cover server costs.


Ko-fi	Liberapay

founded 1 year ago

MODERATORS

[email protected]

This file has 16 detections, is it safe to install it? (reddthat.com)

submitted 1 year ago* (last edited 1 year ago) by [email protected] to c/[email protected]

16 comments fedilink hide all child comments

https://www.virustotal.com/gui/file/a64ef85085e7db98244dd2128b2674f02e7fd0dff3ba393525edeedcb5ad6044/detection

I downloaded it from androeed.ru, which is in the megathread. However, it has 16 detections, and it's labled trojan, and I never used androeed.ru before, so idk how trustable it is.

Still I'm tempted to install it since sandbox found no Network comms. But I'm new to piracy so I think I should ask here first.

Thanks for replying! Edit to provide a bit more info:

This is a mod apk file for a paid game called sproggiwood, so I thought it would be normal to drop files like /libandroeedru.so, you know, to unlock game or something.
The site androeed.ru is in the 2nd place in "Android Cracked/Modded App Markets & Repos" list, right after mobilism, so I thought it was a famous piracy site as well. (I'm new to piracy, so idk. Is it famous?)
This file was uploaded to androeed at 2020, which means if it is indeed malicious, the site is unsafe since 2020, so it should be removed from megathread long time ago. Is the megathread that outdated?
Trojan means it steals info via internet. And virustotal said it only contacted 5 domains: 1: clientservices.googleapis.com 2: connectivitycheck.gstatic.com 3: gmscompliance-pa.googleapis.com 4: gstatic.com 5: infinitedata-pa.googleapis.com Does this mean the detections are false positives or am I missing something?

I'm at a loss. Please help! Thank you very much.

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 3 points 1 year ago (1 children)

Malicious files can still be uploaded to trusted sites, but in general apks are well sendboxed so it's difficult to get a trojan on a non-rooted, up to date Android phone.

What is the apk supposed to be for?

[–] [email protected] 1 points 1 year ago

It's a mod apk file for the game sproggiwood 1.3.2. The file seems to be modded by the site itself though, so if it's malicious I guess the site is not trustable.