VMware setup to work with compromised software - Need advice!

Blizzforte · January 23

I want to work with editing software in a VM that is potentially compromised. I want to edit and move the files to and from the potentially compromised VM.

My setup: Two dedicated PC's. PC 1 is my main personal PC with private files. On it installed is the VM with the editing software installed. The VM has installed latest updates of MS Defender and MalwareBytes. I have removed the clipboard, drag and drop and all of the networking adapters. Then I have PC 2, with the same setup but no compromised software.

My plan is to move images I want to edit from my personal host system to the software VM with read-only shared folder or .ISO file regularly. Then I edit the images on the compromised VM. When finished, I make a .ISO with the edited images. I then move the .ISO on a dedicated USB device and move them to the clean PC 2 VM. On that one I scan the images and the USB with defender and MalwareBytes and if safe, I move them to my personal host system.

Is this setup safe? The goal is to be able to use this compromised software to edit images safely. Does this setup work?

kuva · January 24

you could just pay for the software

Blizzforte · January 24

5 minutes ago, kuva said:

you could just pay for the software

I want to improve my setup and need to know how to optimize it for all different software that may be malicious. This is also about learning new skills and maximize cybersecurity.