Concat 0.2.5 flagged by DeepInstinct on VirusTotal (1/67) – False positive?

[MrKnight-XD]

I downloaded the Concat 0.2.5 Windows installer (Concat-0.2.5-windows-x86_64-setup.exe) from the official website and uploaded the .exe directly to VirusTotal before running it.

VirusTotal results:

• Detection: 1/67
• Antivirus engine: DeepInstinct
• Detection: MALICIOUS
• File: Concat-0.2.5-windows-x86_64-setup.exe
• SHA-256: 233091cb532165b5888457dc496347508b01b995add6155e2569f53005622255
• Digital signature: Unsigned

I also noticed some concerning sandbox findings:

• Process Injection (MITRE T1055)
• A Sigma rule concerning unsigned images loaded into LSASS
• Behaviour tags including crypto, obfuscation and self-delete
• Some sandbox classifications related to data destruction and encryption

However:

• The other 66 antivirus engines did not flag the installer.
• Windows Defender does not detect it.
• The installer hash matches the official published checksum.
• I have only uploaded the installer to VirusTotal and have not executed it on my computer.

My questions:

1. Is the DeepInstinct detection a known false positive?
2. Are the LSASS and process injection findings expected behaviour, or should they be investigated?
3. Has anyone independently verified the safety of this particular Windows installer?
4. Is it safe to install Concat 0.2.5, or should I wait for a newer release?

I'd appreciate an explanation from the developer or anyone familiar with Concat's Windows installer.

[jub0t]

False Positive, probably flagging some ML-runtime or unsigned DLL.