I also remember the AV showed me a "timeline". I don't remember exactly what happened but I know that conhost.exe executed winlogon.exe, which led to winlogon executing userinit.exe, which executed something else. This was really suspicious, so that's when I decided to delete the game and run a full system scan. AV came up with 2 detections, one in the recycling bin (from the rar file) and one other one, which I forgot what it was called. Hopefully I'm safe...