I wouldn’t worry much about 2/39 on VT … because the various scanners they use have different sets of definitions, and/or heuristic detection, it’s not often that you submit a file or site that at least one of their scanners doesn’t flag it. (Sorry, the two negatives might be a little confusing, I meant that quite often at least one scanner tags it as malware even it’s totally clean.)
I’d be more concerned if significantly more of the scanners, even a sizable minority of them, flagged it.