An independent researcher has analyzed for years the metadata on submissions to VirusTotal service identifying patterns related to many bad actors.