Maybr it is nulled and it is free but installing a nulled plugin provided by new users is a bit sketchy. I am not saying this user put any random code in it to infect my site but instead of trusting virustotal i would prefer if any forum admin can confirm that the file is clean.