Skip to content

Instantly share code, notes, and snippets.

@adeii
Created June 26, 2024 20:42
Show Gist options
  • Save adeii/89c1a6aff82120d2691cfb2a77b6ae79 to your computer and use it in GitHub Desktop.
Save adeii/89c1a6aff82120d2691cfb2a77b6ae79 to your computer and use it in GitHub Desktop.
Vivaldi 6.8.3381.44 x86 on Win7+
vivaldi.exe (chromium 126.0.6478.119)
===========
b8: 06
C0: 05
C2: 03
110-Security Directory RVA / Size --> 00000000
55 89 E5 53 57 56 83 EC 18 89 D6 89 CF A1 10 30 -- 55 89 E5 53 57 56 83 EC 48 89 D6 89 CF A1 10 30
5B 00 31 E8 89 45 F0 66 0F 76 C0 8D 45 E0 F3 0F -- 5B 00 31 E8 89 45 F0 66 0F 76 C0 8D 45 B0 F3 0F
7F 00 8D 5D DC C7 03 FF FF FF FF 53 6A 10 50 FF -- 7F 00 8D 5D DC C7 03 FF FF FF FF 53 6A 20 50 FF
..
83 3B 10 0F 94 C3 20 C3 80 FB 01 75 27 80 7D E0 -- 83 3B 20 0F 94 C3 20 C3 80 FB 01 75 27 80 7D B0
E9 75 18 8B 45 08 8B 4D E1 8B 57 04 29 C1 01 D1 -- E9 75 18 8B 45 08 8B 4D B1 8B 57 04 29 C1 01 D1
89 4D E1 29 D0 83 C0 13 89 47 18 F3 0F 6F 45 E0 -- 89 4D B1 29 D0 83 C0 13 89 47 18 E9 97 9B 05 00
F3 0F 7F 06 8B 4D F0 31 E9 E8 B7 0A FD FF 89 D8 -- 90 90 90 90 8B 4D F0 31 E9 E8 B7 0A FD FF 89 D8
83 C4 18 5E 5F 5B 5D C3 CC CC CC CC CC CC CC CC -- 83 C4 48 5E 5F 5B 5D C3 CC CC CC CC CC CC CC CC
E8 72 BE 00 00 FF 75 E0 E8 80 BE 00 00 CC CC CC -> E8 92 BE 00 00 FF 75 E0 E8 A0 BE 00 00 CC CC CC
F9 E8 F5 E4 00 00 8D 8D 44 FF FF FF 84 C0 74 0A -- F9 E8 F5 E4 00 00 8D 8D 44 FF FF FF 90 90 90 90
E0 CC CC CC CC CC CC F3 0F 6F 45 A0 F3 0F 7F 06 -> E0 CC CC CC CC CC CC F3 0F 6F 45 B0 F3 0F 7F 06
F3 0F 6F 45 B0 F3 0F 7F 46 10 E9 8C 7F F9 FF CC -- F3 0F 6F 45 C0 F3 0F 7F 46 10 E9 55 64 FA FF CC
00 E8 75 67 F7 FF 5A 59 FF E0 CC CC CC CC CC CC
CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC -- F3 0F 6F 45 A0 F3 0F 7F 06 F3 0F 6F 45 B0 F3 0F
CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC -- 7F 46 10 E9 8C 7F F9 FF CC CC CC CC CC CC CC CC
b.c.r.y.p.t... -> x.c.r.y.p.t... (hidden) 62 00 63 00 72 00 79 00 70 00 74 00 70 00 -> 78 00 63 00 72 00 79 00 70 00 74 00 70 00 (62->78)
USERENV.dll -> USERENX.dll (hidden)
KERNEL32.dll -> KERNEL64.dll (CFF explorer-Import directory)
-------------------------------------------------------------------------
vivaldi_proxy.exe
================
b8: 06
C0: 05
C2: 03
110-Security Directory RVA / Size --> 00000000
b.c.r.y.p.t... -> x.c.r.y.p.t... (hidden) 62 00 63 00 72 00 79 00 70 00 74 00 70 00 -> 78 00 63 00 72 00 79 00 70 00 74 00 70 00 (62->78) 620063007200790070
KERNEL32.dll -> KERNEL64.dll
-------------------------------------------------------------------------
vivaldi_elf.dll
==============
b8: 06
C0: 05
C2: 03
110-Security Directory RVA / Size --> 00000000
b.c.r.y.p.t... -> x.c.r.y.p.t... (hidden) 62 00 63 00 72 00 79 00 70 00 74 00 70 00 -> 78 00 63 00 72 00 79 00 70 00 74 00 70 00 (62->78) x2
KERNEL32.dll -> KERNEL64.dll
-------------------------------------------------------------------------
vivaldi.dll
==========
b8: 06
C0: 05
110-Security Directory RVA / Size --> 00000000
8D 51 01 89 10 85 C9 0F 85 A8 00 00 00 89 65 D8 -> 8D 51 01 89 10 90 90 90 90 90 90 90 90 89 65 D8
53 01 00 00 83 F8 02 0F 85 E4 01 00 00 83 7B 04 -> 53 01 00 00 90 90 90 90 90 90 90 90 90 83 7B 04
F4 5E 5F 5B 5D C3 E8 55 9C C8 06 EB E3 83 7F 34 -> F4 5E 5F 5B 5D C3 E8 55 9C C8 06 EB E3 90 90 90
00 E9 FF FE FF FF 90 CC 0F 0B FF 36 E8 AF E7 A6 -- 90 E9 FF FE FF FF 90 CC 0F 0B FF 36 E8 AF E7 A6
00 31 C0 40 50 53 68 0F 00 00 10 50 FF 75 C8 FF -> 00 31 C0 40 50 53 68 0F 00 00 00 50 FF 75 C8 FF
00 0F 85 FE FE FF FF CC 0F 0B FF 36 E8 AF E7 A6 -> 00 E9 FF FE FF FF 90 CC 0F 0B FF 36 E8 AF E7 A6
24 20 FF 15 2C C2 CF 1B 85 FF 0F 94 C0 83 7C 24 -> 24 20 FF 15 2C C2 CF 1B 90 90 90 90 90 90 90 90
04 00 0F 95 C1 30 C1 0F 84 2E 02 00 00 89 64 24 -> 90 90 90 90 90 90 90 90 90 90 90 90 90 89 64 24
04 8D
F9 E8 D5 66 88 00 8D 8D 44 FF FF FF 84 C0 74 0A -> F9 E8 D5 66 88 00 8D 8D 44 FF FF FF 90 90 90 90 (84C0740A -- nop)
84 C0 B8 02 08 00 00 B9 00 09 00 00 0F 45 C8 89 -> 84 C0 B8 02 08 00 00 B9 00 00 00 00 0F 45 C8 89 (09 -- 00)
40 D0 1B 31 E8 89 44 24 28 E8 02 CE 5B 00 83 F8 -> 40 D0 1B 31 E8 89 44 24 28 E8 02 CE 5B 00 90 90
02 0F 85 28 01 00 00 8D 7C 24 24 C7 07 04 00 00 -- 90 90 90 90 90 90 90 8D 7C 24 24 C7 07 04 00 00
83 F8 02 0F 85 AC 00 00 00 89 F1 BA FF FF 00 80 -> 90 90 90 90 90 90 90 90 90 89 F1 BA FF FF 00 80
D0 1B 31 E8 89 45 F0 E8 54 CA 5B 00 83 F8 02 0F -> D0 1B 31 E8 89 45 F0 E8 54 CA 5B 00 90 90 90 90
85 2B 01 00 00 89 75 C8 8B 77 48 85 F6 74 15 C7 -- 90 90 90 90 90 89 75 C8 8B 77 48 85 F6 74 15 C7
01 00 00 E8 E8 C8 5B 00 83 F8 02 0F 85 7F 03 00 -> 01 00 00 E8 E8 C8 5B 00 90 90 90 90 90 90 90 90
00 31 C0 48 8D BC 24 30 01 00 00 89 47 04 89 07 -- 90 31 C0 48 8D BC 24 30 01 00 00 89 47 04 89 07
D0 1B 31 E8 89 45 F0 E8 34 C5 5B 00 83 F8 02 0F -> D0 1B 31 E8 89 45 F0 E8 34 C5 5B 00 90 90 90 90
85 D3 00 00 00 89 D9 E8 C4 05 00 00 8D 55 EC C7 -- 90 90 90 90 90 89 D9 E8 C4 05 00 00 8D 55 EC C7
55 89 E5 56 89 CE E8 45 C4 5B 00 83 F8 02 75 12 -> B8 01 00 00 00 C2 04 00 90 81 EC C0 00 00 00 89
E8 89 45 F4 E8 07 C4 5B 00 83 F8 02 75 37 8D 55 -> E8 89 45 F4 E8 07 C4 5B 00 90 90 90 90 90 8D 55
55 89 E5 53 56 89 CE E8 B4 C3 5B 00 83 F8 02 75 -> 55 89 E5 53 56 89 CE E8 B4 C3 5B 00 90 90 90 90
21 89 F1 E8 C8 03 00 00 89 C3 84 C0 75 06 89 D8 -- 90 89 F1 E8 C8 03 00 00 89 C3 84 C0 75 06 89 D8
E8 89 45 F4 E8 67 C3 5B 00 83 F8 02 75 6B 8D 55 -> E8 89 45 F4 E8 67 C3 5B 00 90 90 90 90 90 8D 55
55 89 E5 53 57 56 83 E4 F8 81 EC C0 00 00 00 89 -> B8 01 00 00 00 C2 04 00 90 81 EC C0 00 00 00 89
CC CB 5B 00 83 F8 02 0F 85 45 01 00 00 8B 7D 08 -> CC CB 5B 00 90 90 90 90 90 90 90 90 90 8B 7D 08
40 D0 1B 31 E8 89 44 24 18 E8 42 BF 5B 00 83 F8 -> 40 D0 1B 31 E8 89 44 24 18 E8 42 BF 5B 00 90 90
02 0F 85 03 01 00 00 89 34 24 83 7E 48 00 0F 84 -- 90 90 90 90 90 90 90 89 34 24 83 7E 48 00 0F 84
D0 1B 31 E8 89 45 F0 E8 04 BE 5B 00 83 F8 02 0F -> D0 1B 31 E8 89 45 F0 E8 04 BE 5B 00 90 90 90 90
85 DA 01 00 00 89 75 C4 8B 77 48 85 F6 0F 84 CF -- 90 90 90 90 90 89 75 C4 8B 77 48 85 F6 0F 84 CF
40 D0 1B 31 E8 89 44 24 38 E8 D2 C2 5B 00 83 F8 -> 40 D0 1B 31 E8 89 44 24 38 E8 D2 C2 5B 00 90 90
02 0F 85 1F 01 00 00 8B 0D 10 A4 D4 1B FF 15 EC -- 90 90 90 90 90 90 90 8B 0D 10 A4 D4 1B FF 15 EC
40 D0 1B 31 E8 89 44 24 48 E8 82 C1 5B 00 83 F8 -> 40 D0 1B 31 E8 89 44 24 48 E8 82 C1 5B 00 90 90
02 0F 85 80 01 00 00 8B 77 4C 8B 06 8B 48 24 FF -- 90 90 90 90 90 90 90 8B 77 4C 8B 06 8B 48 24 FF
40 D0 1B 31 E8 89 44 24 08 E8 C2 BF 5B 00 83 F8 -> 40 D0 1B 31 E8 89 44 24 08 E8 C2 BF 5B 00 90 90
02 75 4D 8B 0D 10 A4 D4 1B FF 15 EC 6D CF 1B 89 -- 90 90 90 8B 0D 10 A4 D4 1B FF 15 EC 6D CF 1B 89
D0 1B 31 E8 89 45 F0 E8 F4 BB 5B 00 83 F8 02 0F -> D0 1B 31 E8 89 45 F0 E8 F4 BB 5B 00 90 90 90 90
85 A9 01 00 00 31 FF 8D 45 D4 89 38 89 78 04 89 -- 90 90 90 90 90 31 FF 8D 45 D4 89 38 89 78 04 89
20 40 D0 1B 31 E8 89 45 F0 E8 12 BA 5B 00 83 F8 -> 20 40 D0 1B 31 E8 89 45 F0 E8 12 BA 5B 00 90 90
02 0F 85 11 02 00 00 31 C0 48 8D 75 E4 89 06 89 -- 90 90 90 90 90 90 90 31 C0 48 8D 75 E4 89 06 89
C3 41 1B 9A BB D3 6A 46 87 FC FE 67 55 6A 3B 65 -> 5A EE 59 B8 38 D8 5B 4B A2 E8 1A DC 7D 93 DB 48
b.c.r.y.p.t... -> x.c.r.y.p.t... (hidden) 62 00 63 00 72 00 79 00 70 00 74 00 -> 78 00 63 00 72 00 79 00 70 00 74 00 (62->78)
b.c.r.y.p.t... -> x.c.r.y.p.t... (hidden)
bcryptprimitives.dll -> xcryptprimitives.dll (hidden)
user32.dll -> user64.dll (hidden)
mfplat.dll -> xfplat.dll (hidden)
netapi32.dll -> netapi64.dll (hidden)
kernel32.dll -> kernel64.dll
userenv.dll -> userenx.dll
winhttp.dll -> winxttp.dll
-------------------------------------------------------------------------
notification_helper.exe
=======================
b8: 06
C0: 05
C2: 03
110-Security Directory RVA / Size --> 00000000
b.c.r.y.p.t... -> x.c.r.y.p.t... (hidden) 62 00 63 00 72 00 79 00 70 00 74 00 70 00 -> 78 00 63 00 72 00 79 00 70 00 74 00 70 00 (62->78) x2
KERNEL32.dll -> KERNEL64.dll
-------------------------------------------------------------------------
mojo_core.dll
=============
b8: 06
C0: 06
110-Security Directory RVA / Size --> 00000000
b.c.r.y.p.t... -> x.c.r.y.p.t... (hidden) 62 00 63 00 72 00 79 00 70 00 74 00 70 00 -> 78 00 63 00 72 00 79 00 70 00 74 00 70 00 (62->78) x2
KERNEL32.dll -> KERNEL64.dll
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment