I think you're missing the point of "Trust no one". You don't scan it, just use it in a disposable environment (usually a VM, on a non-valuable machine) and se

I think you're missing the point of "Trust no one". You don't scan it, just use it in a disposable environment (usually a VM, on a non-valuable machine) and see what it does.