Defender didn't pick malware

Defender scan didn't pick up the malware in the system. WordFence was able to pick it up. However, Sucuri failed to detect it too.

WordFence scan:

The Defender Scan was taking too much resources in the CPU in live site, and the host shut it down. The above scan was re-run in the cloned version on a localhost to bring this into our attention, hence no access to live site at the moment.

If needed, infected Visual Composer plugin is attached via the chat notes.