TL;DR

It’s not malware. The sandboxes flagging this as malware are doing it because the dongle is installing a driver. Like it should do.

Erik Parker did a vidoe reverse engineering the installer and shows the driver doing what it should.
www.youtube.com/watch?v=GY87l_uSIuA