Skip to content

Instantly share code, notes, and snippets.

@adeii
Created February 13, 2024 13:09
Show Gist options
  • Save adeii/557d54f09416ac24acfab2fee8b8f743 to your computer and use it in GitHub Desktop.
Save adeii/557d54f09416ac24acfab2fee8b8f743 to your computer and use it in GitHub Desktop.
Brave Nightly 1.64.68 x64 on Win 8.1
copy to root
API-MS-WIN-CORE-HANDLE-L1-1-0.dll
API-MS-WIN-CORE-LIBRARYLOADER-L1-2-0.dll
API-MS-WIN-CORE-REALTIME-L1-1-1.dll
API-MS-WIN-CORE-WINRT-ERROR-L1-1-0.dll
API-MS-WIN-CORE-WINRT-L1-1-0.dll
API-MS-WIN-CORE-WINRT-STRING-L1-1-0.dll
API-MS-WIN-POWER-BASE-L1-1-0.dll
API-MS-WIN-SHCORE-SCALING-L1-1-1.dll
kernel64.dll
netapi64.dll
user64.dll
userenx.dll
WinXttp.dll
wldp.dll
xcryptprimitives.dll
Xfplat.dll
-----
copy inside 12x.x.x.x *-seems unnecessary
*API-MS-WIN-CORE-HANDLE-L1-1-0.dll
*API-MS-WIN-CORE-LIBRARYLOADER-L1-2-0.dll
*API-MS-WIN-CORE-REALTIME-L1-1-1.dll
*API-MS-WIN-CORE-WINRT-ERROR-L1-1-0.dll
*API-MS-WIN-CORE-WINRT-L1-1-0.dll
*API-MS-WIN-CORE-WINRT-STRING-L1-1-0.dll
*API-MS-WIN-POWER-BASE-L1-1-0.dll
*API-MS-WIN-SHCORE-SCALING-L1-1-1.dll
*kernel64.dll
*netapi64.dll
user64.dll
userenx.dll
WinXttp.dll
*wldp.dll
*xcryptprimitives.dll
*Xfplat.dll
-----
copy inside BraveVpnWireguardService
*API-MS-WIN-CORE-HANDLE-L1-1-0.dll
*API-MS-WIN-CORE-LIBRARYLOADER-L1-2-0.dll
*API-MS-WIN-CORE-REALTIME-L1-1-1.dll
*API-MS-WIN-CORE-WINRT-ERROR-L1-1-0.dll
*API-MS-WIN-CORE-WINRT-L1-1-0.dll
*API-MS-WIN-CORE-WINRT-STRING-L1-1-0.dll
*API-MS-WIN-POWER-BASE-L1-1-0.dll
*API-MS-WIN-SHCORE-SCALING-L1-1-1.dll
*kernel64.dll
*xcryptprimitives.dll
brave.exe
=========
120-Security Directory RVA / Size --> 00000000
00 84 DB 75 14 FF 15 AD D3 06 00 48 89 C1 BA 62 -> 00 84 DB EB 14 FF 15 AD D3 06 00 48 89 C1 BA 62 (75->EB) brave120
00 84 DB 75 14 FF 15 85 92 07 00 48 89 C1 BA 62 -- 00 84 DB EB 14 FF 15 85 92 07 00 48 89 C1 BA 62 brave121
00 84 DB 75 14 FF 15 5D 5A 07 00 48 89 C1 BA 62 -- 00 84 DB EB 14 FF 15 5D 5A 07 00 48 89 C1 BA 62 brave122
b.c.r.y.p.t... -> x.c.r.y.p.t... (hidden) 62 00 63 00 72 00 79 00 70 00 74 00 70 00 -> 78 00 63 00 72 00 79 00 70 00 74 00 70 00 (62->78)
USERENV.dll -> USERENX.dll (hidden)
KERNEL32.dll -> KERNEL64.dll (CFF explorer-Import directory)
-------------------------------------------------------------------------
chrome_proxy.exe
================
120-Security Directory RVA / Size --> 00000000
b.c.r.y.p.t... -> x.c.r.y.p.t... (hidden) 62 00 63 00 72 00 79 00 70 00 74 00 70 00 -> 78 00 63 00 72 00 79 00 70 00 74 00 70 00 (62->78)
KERNEL32.dll -> KERNEL64.dll
USERENV.dll -> USERENX.dll
-------------------------------------------------------------------------
chrome_elf.dll
==============
120-Security Directory RVA / Size --> 00000000
b.c.r.y.p.t... -> x.c.r.y.p.t... (hidden) 62 00 63 00 72 00 79 00 70 00 74 00 70 00 -> 78 00 63 00 72 00 79 00 70 00 74 00 70 00 (62->78) x2
KERNEL32.dll -> KERNEL64.dll
-------------------------------------------------------------------------
chrome.dll
==========
120-Security Directory RVA / Size --> 00000000
5D9B900:
24 40 FF 15 E8 D1 80 08 45 85 F6 0F 94 C0 85 ED -> 24 40 FF 15 E8 D1 80 08 45 85 F6 0F 94 C0 90 90 brave120
0F 95 C1 30 C1 0F 84 E5 01 00 00 4C 8B 27 48 C7 -> 90 90 90 90 90 90 90 90 90 90 90 4C 8B 27 48 C7
3d8a89:
24 40 FF 15 A7 0E 2D 0E 45 85 F6 0F 94 C0 85 ED -- 24 40 FF 15 A7 0E 2D 0E 45 85 F6 0F 94 C0 90 90 brave121
0F 95 C1 30 C1 0F 84 E7 00 00 00 4C 8B BC 24 C0 -- 90 90 90 90 90 90 90 90 90 90 90 4C 8B BC 24 C0
5f5bc00b:
24 48 FF 15 B5 DB 4A 08 45 85 F6 0F 94 C0 85 ED -- 24 48 FF 15 B5 DB 4A 08 45 85 F6 0F 94 C0 90 90 brave122
0F 95 C1 30 C1 0F 84 AC 01 00 00 4C 8B 27 48 C7 -- 90 90 90 90 90 90 90 90 90 90 90 4C 8B 27 48 C7
9866550: 9A3C9C0!
00 84 DB 75 14 FF 15 4D 28 D4 04 48 89 C1 BA 62 -> 00 84 DB EB 14 FF 15 4D 28 D4 04 48 89 C1 BA 62 (75->EB)
00 84 DB 75 14 FF 15 1D D2 C6 04 48 89 C1 BA 62 -- 00 84 DB EB 14 FF 15 1D D2 C6 04 48 89 C1 BA 62 brave121
00 84 DB 75 14 FF 15 65 75 A5 04 48 89 C1 BA 62 -- 00 84 DB EB 14 FF 15 65 75 A5 04 48 89 C1 BA 62 brave122
b.c.r.y.p.t... -> x.c.r.y.p.t... (hidden) 62 00 63 00 72 00 79 00 70 00 74 00 70 00 -> 78 00 63 00 72 00 79 00 70 00 74 00 70 00 (62->78)
D4343D8:
C3 41 1B 9A BB D3 6A 46 87 FC FE 67 55 6A 3B 65 -> 5A EE 59 B8 38 D8 5B 4B A2 E8 1A DC 7D 93 DB 48
b.c.r.y.p.t... -> x.c.r.y.p.t... (hidden)
user32 -> user64 (hidden)
mfplat -> xfplat (hidden)
netapi32 -> netapi64 (hidden)
kernel32 -> kernel64
userenv -> userenx
winhttp -> winxttp
-------------------------------------------------------------------------
notification_helper.exe
=======================
120-Security Directory RVA / Size --> 00000000
b.c.r.y.p.t... -> x.c.r.y.p.t... (hidden) 62 00 63 00 72 00 79 00 70 00 74 00 70 00 -> 78 00 63 00 72 00 79 00 70 00 74 00 70 00 (62->78) x2
KERNEL32.dll -> KERNEL64.dll
-------------------------------------------------------------------------
chrome_wer.exe
=======================
120-Security Directory RVA / Size --> 00000000
-------------------------------------------------------------------------
chrome_pwa_launcher.exe
=======================
120-Security Directory RVA / Size --> 00000000
KERNEL32.dll -> KERNEL64.dll
USERENV.dll -> USERENX.dll
-------------------------------------------------------------------------
brave_vpn_helper.exe
====================
120-Security Directory RVA / Size --> 00000000
b.c.r.y.p.t... -> x.c.r.y.p.t... (hidden) 62 00 63 00 72 00 79 00 70 00 74 00 70 00 -> 78 00 63 00 72 00 79 00 70 00 74 00 70 00 (62->78) x2
KERNEL32.dll -> KERNEL64.dll
USERENV.dll -> USERENX.dll
-------------------------------------------------------------------------
brave_vpn_wireguard_service.exe
===============================
120-Security Directory RVA / Size --> 00000000
b.c.r.y.p.t... -> x.c.r.y.p.t... (hidden) 62 00 63 00 72 00 79 00 70 00 74 00 70 00 -> 78 00 63 00 72 00 79 00 70 00 74 00 70 00 (62->78) x2
KERNEL32.dll -> KERNEL64.dll
-------------------------------------------------------------------------
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment