Opening the blackbox of virustotal