× Cookies are disabled! This site requires cookies to be enabled to work properly
SHA256: 7572983db3a0c6664b5353842446d37e7284ded0e281f9f57291d9add74c306e
File name: BraveSetup-x64.exe
Detection ratio: 1 / 56
Analysis date: 2016-11-20 05:06:59 UTC ( 2 years, 3 months ago ) View latest
Antivirus Result Update
Qihoo-360 HEUR/QVM41.1.0000.Malware.Gen 20161120
Ad-Aware 20161120
AegisLab 20161120
AhnLab-V3 20161119
Alibaba 20161118
ALYac 20161120
Antiy-AVL 20161120
Arcabit 20161120
Avast 20161120
AVG 20161120
Avira (no cloud) 20161119
AVware 20161120
Baidu 20161118
BitDefender 20161120
Bkav 20161119
CAT-QuickHeal 20161119
ClamAV 20161120
CMC 20161119
Comodo 20161120
CrowdStrike Falcon (ML) 20161024
Cyren 20161120
DrWeb 20161120
Emsisoft 20161120
ESET-NOD32 20161119
F-Prot 20161120
F-Secure 20161120
Fortinet 20161120
GData 20161120
Ikarus 20161119
Sophos ML 20161018
Jiangmin 20161120
K7AntiVirus 20161120
K7GW 20161120
Kaspersky 20161120
Kingsoft 20161120
Malwarebytes 20161120
McAfee 20161120
McAfee-GW-Edition 20161120
Microsoft 20161120
eScan 20161120
NANO-Antivirus 20161119
nProtect 20161120
Panda 20161119
Rising 20161120
Sophos AV 20161120
SUPERAntiSpyware 20161119
Symantec 20161120
Tencent 20161120
TheHacker 20161117
TrendMicro 20161120
TrendMicro-HouseCall 20161120
VBA32 20161118
VIPRE 20161120
ViRobot 20161119
Yandex 20161119
Zillya 20161118
Zoner 20161120
The file being studied is a Portable Executable file! More specifically, it is a Win32 EXE file for the Windows GUI subsystem.
Authenticode signature block and FileVersionInfo properties
Copyright
Copyright © 2016 Brave Software

Product Brave laptop and desktop browser
Original name Setup.exe
Internal name Setup.exe
File version 0.12.9
Description Brave laptop and desktop browser
Signature verification Signed file, verified signature
Signing date 9:19 AM 11/14/2016
Signers
[+] Brave Software
Status Valid
Issuer DigiCert SHA2 Assured ID Code Signing CA
Valid from 1:00 AM 1/5/2016
Valid to 1:00 PM 3/9/2018
Valid usage Code Signing
Algorithm sha256RSA
Thumbprint 4692F66DF95F2C684DBB9A0A1BE1E6049F57AB1E
Serial number 0F 78 BB A9 9E 61 B1 A4 B1 FE 0B E6 77 D6 93 E7
[+] DigiCert SHA2 Assured ID Code Signing CA
Status Valid
Issuer DigiCert Assured ID Root CA
Valid from 1:00 PM 10/22/2013
Valid to 1:00 PM 10/22/2028
Valid usage Code Signing
Algorithm sha256RSA
Thumbprint 92C1588E85AF2201CE7915E8538B492F605B80C6
Serial number 04 09 18 1B 5F D5 BB 66 75 53 43 B5 6F 95 50 08
[+] DigiCert
Status Valid
Issuer DigiCert Assured ID Root CA
Valid from 1:00 AM 11/10/2006
Valid to 1:00 AM 11/10/2031
Valid usage Server Auth, Client Auth, Email Protection, Code Signing, Timestamp Signing
Algorithm sha1RSA
Thumbprint 0563B8630D62D75ABBC8AB1E4BDFB5A899B24D43
Serial number 0C E7 E0 E5 17 D8 46 FE 8F E5 60 FC 1B F0 30 39
Counter signers
[+] Symantec Time Stamping Services Signer - G4
Status Valid
Issuer Symantec Time Stamping Services CA - G2
Valid from 1:00 AM 10/18/2012
Valid to 12:59 AM 12/30/2020
Valid usage Timestamp Signing
Algorithm sha1RSA
Thumbrint 65439929B67973EB192D6FF243E6767ADF0834E4
Serial number 0E CF F4 38 C8 FE BF 35 6E 04 D8 6A 98 1B 1A 50
[+] Symantec Time Stamping Services CA - G2
Status Valid
Issuer Thawte Timestamping CA
Valid from 1:00 AM 12/21/2012
Valid to 12:59 AM 12/31/2020
Valid usage Timestamp Signing
Algorithm sha1RSA
Thumbrint 6C07453FFDDA08B83707C09B82FB3D15F35336B1
Serial number 7E 93 EB FB 7C C6 4E 59 EA 4B 9A 77 D4 06 FC 3B
[+] Thawte Timestamping CA
Status Valid
Issuer Thawte Timestamping CA
Valid from 1:00 AM 1/1/1997
Valid to 12:59 AM 1/1/2021
Valid usage Timestamp Signing
Algorithm md5RSA
Thumbrint BE36A4562FB2EE05DBB3D32323ADF445084ED656
Serial number 00
PE header basic information
Target machine Intel 386 or later processors and compatible processors
Compilation timestamp 2016-08-10 18:14:50
Entry Point 0x0000A5F9
Number of sections 5
PE sections
Overlays
MD5 b09ab1d0f807ccd6fe26db142bd2c88e
File type data
Offset 93082112
Size 6144
Entropy 7.33
PE imports
RegCreateKeyExW
GetTokenInformation
RegDeleteValueW
RegCloseKey
OpenProcessToken
GetUserNameW
RegQueryInfoKeyW
RegSetValueExW
RegEnumKeyExW
RegOpenKeyExW
AdjustTokenPrivileges
LookupPrivilegeValueW
RegDeleteKeyW
RegQueryValueExW
InitCommonControlsEx
GetStdHandle
WaitForSingleObject
EncodePointer
GetFileAttributesW
VerifyVersionInfoW
DeleteCriticalSection
GetCurrentProcess
GetConsoleMode
FreeEnvironmentStringsW
SetStdHandle
GetCPInfo
WriteFile
GetSystemTimeAsFileTime
HeapReAlloc
GetStringTypeW
GetOEMCP
GetExitCodeProcess
OutputDebugStringW
TlsGetValue
MoveFileW
SetLastError
LoadResource
GetModuleFileNameW
IsDebuggerPresent
HeapAlloc
VerSetConditionMask
UnhandledExceptionFilter
LoadLibraryExW
MultiByteToWideChar
SetFilePointerEx
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
DecodePointer
TerminateProcess
GetModuleHandleExW
LocalFileTimeToFileTime
GetCurrentThreadId
WriteConsoleW
InitializeCriticalSectionAndSpinCount
HeapFree
EnterCriticalSection
LoadLibraryW
FreeLibrary
QueryPerformanceCounter
TlsAlloc
FlushFileBuffers
lstrcmpiW
RtlUnwind
GetStartupInfoW
CreateDirectoryW
DeleteFileW
GetProcAddress
GetProcessHeap
GetTempFileNameW
CreateFileW
GetFileType
TlsSetValue
ExitProcess
LeaveCriticalSection
GetLastError
SystemTimeToFileTime
LCMapStringW
GetConsoleCP
FindResourceW
GetEnvironmentStringsW
lstrlenW
SizeofResource
GetCurrentDirectoryW
GetCurrentProcessId
LockResource
SetFileTime
GetCommandLineW
WideCharToMultiByte
HeapSize
RaiseException
TlsFree
SetFilePointer
ReadFile
CloseHandle
GetACP
GetModuleHandleW
FreeResource
IsValidCodePage
GetTempPathW
CreateProcessW
Sleep
VarUI4FromStr
SysFreeString
VariantClear
VariantInit
SysAllocString
SHGetFolderPathW
ShellExecuteW
ShellExecuteExW
MessageBoxW
GetActiveWindow
LoadStringW
wsprintfW
CharNextW
ExitWindowsEx
DestroyWindow
CoUninitialize
CoInitialize
CoTaskMemAlloc
CoTaskMemRealloc
CoCreateInstance
CoTaskMemFree
URLDownloadToFileW
Number of PE resources by type
RT_ICON 5
RT_GROUP_ICON 3
RT_MANIFEST 1
RT_STRING 1
DATA 1
RT_VERSION 1
Number of PE resources by language
ENGLISH US 12
PE resources
Debug information
ExifTool file metadata
SubsystemVersion
5.1

LinkerVersion
12.0

ImageVersion
0.0

FileSubtype
0

FileVersionNumber
0.12.9.0

UninitializedDataSize
0

LanguageCode
English (U.S.)

FileFlagsMask
0x003f

CharacterSet
Unicode

InitializedDataSize
92974080

SquirrelAwareVersion
1

EntryPoint
0xa5f9

OriginalFileName
Setup.exe

MIMEType
application/octet-stream

LegalCopyright
Copyright 2016 Brave Software

FileVersion
0.12.9

TimeStamp
2016:08:10 19:14:50+01:00

FileType
Win32 EXE

PEType
PE32

InternalName
Setup.exe

ProductVersion
0.12.9

FileDescription
Brave laptop and desktop browser

OSVersion
5.1

FileOS
Windows NT 32-bit

Subsystem
Windows GUI

MachineType
Intel 386 or later, and compatibles

CompanyName
Brave Software

CodeSize
107008

ProductName
Brave laptop and desktop browser

ProductVersionNumber
0.12.9.0

FileTypeExtension
exe

ObjectFileType
Executable application

File identification
MD5 623b957e786f849ca6054e16353ca467
SHA1 2fdfeef09ad0d0310bef56577e8bcfd62186919f
SHA256 7572983db3a0c6664b5353842446d37e7284ded0e281f9f57291d9add74c306e
ssdeep
1572864:4cRAt5755bl4nyFHdYHv2gHHGHyt69zHC8+1q28sVHStqbz6Z+dda1JuO+RdEUWY:44Atp59FHdYP2gH89zHCT8sVytqbVdaW

authentihash 68189ab018b505c872c2c16b4ab0d8b23c99b26f4e5c893acc5d49a901aadb21
imphash e859dd0409c406b4558a8d7b196d17f1
File size 88.8 MB ( 93088256 bytes )
File type Win32 EXE
Magic literal
PE32 executable for MS Windows (GUI) Intel 80386 32-bit

TrID InstallShield setup (83.4%)
Win32 Executable (generic) (8.7%)
Generic Win/DOS Executable (3.8%)
DOS Executable Generic (3.8%)
Tags
peexe signed overlay

VirusTotal metadata
First submission 2016-11-18 22:17:05 UTC ( 2 years, 3 months ago )
Last submission 2016-11-20 05:06:59 UTC ( 2 years, 3 months ago )
File names Setup.exe
BraveSetup-x64.exe
BraveSetup-x64.exe
7572983DB3A0C6664B5353842446D37E7284DED0E281F9F57291D9ADD74C306E
No comments. No VirusTotal Community member has commented on this item yet, be the first one to do so!

Leave your comment...

?
Post comment

You have not signed in. Only registered users can leave comments, sign in and have a voice!

No votes. No one has voted on this item yet, be the first one to do so!