Virustotal tests

a few tests working but some TODOs that need work.