Well the reason the VM is isolated is probably 2 fold,

1. prevent a spread of whatever caused the issue in the first place
2. protect any data on the isolated device for being manipulated and corrupting any forensic evidence that might be on the VM/machine

so if things are done correctly you shouldn’t copy any file to or from the isolated machine

Create an ISO and mount that.

But really, it doesn't matter how you get the file in before you open it. It's extremely unlikely that it malware could be executed just by putting a file on disk.

Start off with a clean slate. Windows, freshly installed from a Microsoft provided ISO (Assuming you're looking at a Windows executable). Try to follow a guide on bypassing the MS account requirement (AtlasOS has a section of their guide telling you how to do this).

When you're setting things up, there's no restrictions to internet access, sharing, etc. You just have to be careful not to open/view the files you want to isolate, which is easy enough by for example putting the files in a password protected zip. You can also install any required tools now (like maybe 7zip).

At this stage, there's a few options:
- The easiest is to put your files into a separate folder, then run a simple webserver, like with python3 -m http.server on your host. Then download it on the VM.
- Another option is to mount the VMs disk, then copy the files directly. Turn off the VM, mount the disk, copy the files, unmount, then turn it back on.
- You could create a disk image that contains your files, readable by the VM.

When you're ready to actually open the file, close off all access from the VM to the host. No networking, clipboard sharing, etc. Do this on the hosts VM settings, not inside the VM. Also note that without further tooling, it's extemely difficult to tell if there's any advanced malware present.

As soon as you view the potentially malicious files, consider anything coming from that VM as malicious. Don't try to view/open files on your host, do not give it network access.

Malware can be (but often isn't) incredibly advanced, and even an isolated VM isn't a 100% guaranteed method of keeping it contained.

The point is that you isolate the VM after you get the file onto it but before running the potential malware. It's not going to auto-execute, not if your Windows is patched and modern and up to date, we don't live in the bad old days of floppy disks and CDs and USBs autorunning anymore (and for good reason).

If you are running a version of Windows (or anything) that is even capable of auto-executing code as it downloads, the malware you're trying to test is the least of your worries because you'll already have about a thousand other malware already running.

Based on our recent interactions, I would say you probably don't have the expertise necessary to evaluate whether the file's safe. I very much doubt you're gonna gain any new knowledge from doing this.

This isn't a slight against you. I don't have the expertise, either.

if it is depraved and you can imagine it, Israel is doing it. What a curse its existence is.

On these trips, sex between local (Jews) and visitors is, according to staffers, actively “encouraged.” Birthright organizers facilitate what they call “hormonal encounters” by employing good-looking IDF soldiers to accompany the groups wherever they go. These soldiers understand their role very well. Many groups do not stay in hotels, but together in Bedouin-style tents, “a setup conducive to first kisses,” one report notes. Many visitors report feeling pressured into fornication on what is commonly described as a free, ten-day “sex vacation.”

For the government, the utility of all this is clear. It has calculated that impressionable teens who lose their virginity in Israel are much more likely to develop a deeper, emotional connection to the State of Israel. Birthright alumni move to Israel in greater numbers than those who did not receive a free trip, and are 160% more likely to marry a Jewish spouse. This helps alleviate the country’s demographic problem, i.e., building a Jewish supremacist state in a region where they are still a minority. To that end, then, Birthright employs open-minded individuals whose services allow the job to be done.

You guys are still using google??

But seriously, Holy shit I just ~~signed~~ GOT INTO/OPENED UP/JUMPED on to DDG on PC after forever and had to opt out of a bunch of AI shit. We are so fucked.

They telling you nothing that's legally binding.

It is a trust me bro. You shouldn't trust a known stalker sundar the creep.

Remove it from view, lol.

Everything on the Internet is permanent. If not by the company then by the NSA. Regardless of where you reside.

what card are you running that linux has problems with?

I would still keep 11 for work if it truly needs to be 11 and dual boot 10 IoT LTSC for games. it sounds like you're already doing everything I would suggest to harden it besides only running a local user account.

If you haven't already, I would try a different distribution and desktop environment. In my experience this made significant a difference. If privacy is important to you I would not give up on Linux.

Other than that. Do not login with a MS account, debloat the heck out of it, etc. I can't help you for any advanced configurations, however, with some basic searching on the internet I found some articles that gave good tips. Do some research on that, you might learn a few things.

If you want to take things a step further you might also look into changing browser, search engine etc. But that's a whole different topic.

My advice (even if you do decide to use a separate device for gaming) is to get rid of anything that does telemetry, tracking, ad service, or AI. If you have a pro version or enterprise version of windows 11 you can use Group Policy Editor to remove or disable a lot of stuff and what is left is usually taken care of by Registry Editor in the command line. You can find many guides online that will walk you through how to debloat and remove a lot of the stuff MS uses to track you. I recommend this for anyone who uses windows.

There's also a lot of stuff you can turn off from the setting menu that may help if you're privacy conscious. It also might not hurt to make your account local rather that one attached to outlook or MS services (I recognize this may not be possible depending on what you use for work).

You may also want to try a different distribution of Linux that's specifically made for gaming. I don't know what kind of graphics card you have but the proton compatibility layer has been getting better overtime and so you might give that a shot.

Good starting point would be looking through privacy.sexy

I have Windows for work stuff on a separate, weaker laptop so there's no temptation to game on it. In your case, would you consider a more gaming-focused distro like Bazzite? If not, using Windows LTSC might help since the semi-annual major updates on Home/Pro tend to undo your hard work with debloat tools and scripts.

You can use an XML file with the Windows installer to disable/uninstall most of the bloat and spyware. It'll also automatically configure local accounts for you so you don't have to manually bypass the Windows account install step.

This site will generate the file you need based on the options you select: schneegans.de/windows/unattend…

And this video might help you if you get stuck: youtu.be/h9SpKVEc_Yo

The problem with using those debloat tools is that Windows will quietly re-enable things with Windows Update.

Nuke windows, use Linux, post your problems in the Linux community and we'll get you operational.