I have found some software on 1337 that a friend was asking for. It’s for Windows and I’m on Linux. Is test running the software inside a VM the only way to securely vet it (to see what connections it tries to make and what processes it starts)? On VirusTotal, I get one positive and 66 negatives. Preferably, I’d like to hand over the software without worrying about giving them malicious code…


In theory I agree, but other than buying the original executable from a reputable vendor, I have no way of verifying the integrity and authenticity of the EXE.
ask someone that bought the executable to lend you theirs.