I have two different brave installers

The truth is that it seems to me that it was downloaded directly from the official Brave page, only that at that moment the link marked “?ref=lsp744”.
The truth is that I think I’m just overthinking things. Since both domains are official from Brave, I did verify it in virus total and nothing suspicious has happened, only according to VirusTotal the BraveUpdate.exe process has a malicious warning, but according to the investigation it is normal and a false positive. I would appreciate if you have any ideas on this!