Are there things that can be undetected/hidden from system explorer - where you’d have to use terminal/powershell to view that it exists (hidden malware)?

the nfo file showed system info

Would you trust it if the detection is 0, but there are network connections? (contacted domains and contacted IP addresses)

Oh okay, thanks. I don’t know how it compares with Eset for example. My antivirus said the files were clean, but the virustotal results are really sketchy.

Thank you for the advice. Is clamav just another antivirus software?

I ran my antivirus on the plugins.zip folder and it didn’t detect anything. Then I ran it on the master collection folder, and it also didn’t detect anything, but it suspiciously finished almost immediately although it does only contain the iso (37.5GB), .info file (2.46KB), .sha (85B), .md5 (77B), so I’m not sure. Also, I just posted the virustotal results in this thread.

Honestly, I’m not really sure - I am using Proton VPN and qbittorrent.

I meant that if I was unable to figure out a solution, at least I would be able to transfer it to a VM (which apparently Windows Sandbox isnt really)

Oh wow, I didn’t realize it isn’t a VM… Thank you for the in depth response.

I’m not sure what you mean by bare metal. Yeah mostly the avoiding malware, but I think I can just download it via torrent and VPN > upload to my email > open the VM > download from email > check with virustotal > try running the exe if it seems normal

I haven’t purchased the VPN yet, and I’ve only downloaded and ran the qbittorrent setup file. (then that window appeared (image above). The VM should be set up correctly (all I had to do is just enable the feature - Windows Sandbox).

is it rsload (dot) net, org, etc.? I couldn’t find it on the megathread or from other treasures links. However, I did see this on Wiki Index’s list of unsafe sites

RSLOAD - Uploaded the same version of malwarebytes that got FileCR in trouble / Utorrent malware