

A torrent software that breaks your big/video file sharing while calling it complete seems somewhat questionable, not following a good practice, for the reasons you said.
qBittorrent stores the partial file data of deselected files as generic files. Given that only with it the download and a recheck marks the big file complete, without it a recheck considers the big file unfinished (and if partial files are renamed it is despite being complete as a file), I presume it will also send out the block that is partially that file and another to other peers too.
If the other file is fully in the partial block qBittorrent even creates the files despite not having been selected for downloading.
Note that sophisticated malware [attempts to] identify whether it is running in a VM / testbed / analysis scenario and may behave and look different between that runtime scenario and “normal use”.
Analysis in a VM may not be sufficient to determine whether it is safe outside of it.