In future, assume everything is a hostile payload until scanned.
Microsoft provides free VM images of various versions for developers to test with, use one of them, install whatever scanning tool you want, then install your suspicious payload.
Rinse repeat.
I just tried googling this and found nothing useful. I did find some gatekeeping on ar15.com though.