Widca5472 and vdfre27 belong to same person?

This topic isn’t about their connection but what they actually promote.
Can someone lecture me the possible reason why you should create a fork of an open source tool and then upload it to Mega.zn instead of GitHub after a modification?

vdfre27 replied to this thread with :

Hiding their modified tool under the legit tool name and details because this site : https://bitenttion.com/programs/btcrecover/
uses same details as the open source  tool , even the GitHub URL too , only to redirect victims  to the mega.zn upload after clicking the Download Button


widica5472 on the other hand, posted:
Atikmdag is on same bittention domain https://bittention.com , the embedded url https://bittention.com/programs/pixel-patcher-atikmdag/.

Now after it, was another post from vidfre27:

Unfortunately the thread itself is moderated and I couldn’t get the gist behind the particular post..

I did quick check,
1. For BTCRecover from that size give .zip that contain source code. But i don't have ability or time to check whether there's no malicious modification.
2. For pixel patcher, i uploaded the .exe inside .zip to VirusTotal. But it says 1/70 detection, https://www.virustotal.com/gui/file/f3b0e3ba3beb72ad455f478bca6347fbcabbce4ddfa2a6e34f72f11412502434.

However, i would recommend everyone to stay away from that website. I also reported those posts as SEO spam, since the post edited few days after it's created which is common way to perform SEO spam while evading moderation.

Edit: To OP, please edit your thread so none of the link is clickable. It's necessary to prevent the website have higher position on google search result.

Thanks for the link.

Got something similar  but related to Ransom/lockfile  on the btcrpass.py file  but the flag is loose:
https://www.virustotal.com/gui/file/3b64a71b52f6133771fb3799060a1995ca45b444f289afe029366976022fe0f3
Behaves like malware anyways:
https://vtbehaviour.commondatastorage.googleapis.com/3b64a71b52f6133771fb3799060a1995ca45b444f289afe029366976022fe0f3_Zenbox.html

Yeah, it's  the main reason I opened the thread , I didn't  want to just report the thread  as they would only get deleted. I don't have  any strong evidence  against them either but I know something can't  be right when you're  disguising your tool with every available  details of a legit tool .
It takes not more than a single to two line to explain  that it's  their tool and the reason why they made it non-open just as the original  tool.