Epic Privacy Browser Forums

Ran a scan on the install file via Virus Total  and it was flagged by a sandbox. Looks like dns.google gets contacted and OSX X Sandbox tags the file as MALWARE RANSOM SPREADER ADWARE EVADER. Plus according to the report a bunch of identifiable information is collected. Can a sha-256 sum or some other verified signature technique be used so users can verify they have the same file as what is hosted on the website?

Here are the results of the file scan: https://www.virustotal.com/gui/file/d3e … /relations