>the 8/64 in VirusTotal hardly proves that

You're using VirusTotal wrong. That means 8 security scan tools out of the 64 in their suite hit on this. That's a pretty strong mal indication.