Skip to content

Instantly share code, notes, and snippets.

@adeii
Created January 22, 2024 12:49
Show Gist options
  • Save adeii/6fd8cd8c4693199b4ef930f03fbc3a70 to your computer and use it in GitHub Desktop.
Save adeii/6fd8cd8c4693199b4ef930f03fbc3a70 to your computer and use it in GitHub Desktop.
Brave 1.61.120 x64 on Win 7 SP1
copy to root
API-MS-WIN-CORE-HANDLE-L1-1-0.dll
API-MS-WIN-CORE-LIBRARYLOADER-L1-2-0.dll
API-MS-WIN-CORE-REALTIME-L1-1-1.dll
API-MS-WIN-CORE-WINRT-ERROR-L1-1-0.dll
API-MS-WIN-CORE-WINRT-L1-1-0.dll
API-MS-WIN-CORE-WINRT-STRING-L1-1-0.dll
API-MS-WIN-POWER-BASE-L1-1-0.dll
API-MS-WIN-SHCORE-SCALING-L1-1-1.dll
kernel64.dll
netapi64.dll
user64.dll
userenx.dll
WinXttp.dll
wldp.dll
xcryptprimitives.dll
Xfplat.dll
-----
copy inside 12x.x.x.x *-seems unnecessary
*API-MS-WIN-CORE-HANDLE-L1-1-0.dll
*API-MS-WIN-CORE-LIBRARYLOADER-L1-2-0.dll
*API-MS-WIN-CORE-REALTIME-L1-1-1.dll
*API-MS-WIN-CORE-WINRT-ERROR-L1-1-0.dll
*API-MS-WIN-CORE-WINRT-L1-1-0.dll
*API-MS-WIN-CORE-WINRT-STRING-L1-1-0.dll
*API-MS-WIN-POWER-BASE-L1-1-0.dll
*API-MS-WIN-SHCORE-SCALING-L1-1-1.dll
*kernel64.dll
*netapi64.dll
user64.dll
userenx.dll
WinXttp.dll
*wldp.dll
*xcryptprimitives.dll
*Xfplat.dll
-----
copy inside BraveVpnWireguardService
*API-MS-WIN-CORE-HANDLE-L1-1-0.dll
*API-MS-WIN-CORE-LIBRARYLOADER-L1-2-0.dll
*API-MS-WIN-CORE-REALTIME-L1-1-1.dll
*API-MS-WIN-CORE-WINRT-ERROR-L1-1-0.dll
*API-MS-WIN-CORE-WINRT-L1-1-0.dll
*API-MS-WIN-CORE-WINRT-STRING-L1-1-0.dll
*API-MS-WIN-POWER-BASE-L1-1-0.dll
*API-MS-WIN-SHCORE-SCALING-L1-1-1.dll
*kernel64.dll
*xcryptprimitives.dll
brave.exe
=========
120-Security Directory RVA / Size --> 00000000
1A0410:
00 84 DB 75 14 FF 15 AD D3 06 00 48 89 C1 BA 62 -> 00 84 DB EB 14 FF 15 AD D3 06 00 48 89 C1 BA 62 (75->EB)
b.c.r.y.p.t... -> x.c.r.y.p.t... (hidden) 62 00 63 00 72 00 79 00 70 00 74 00 70 00 -> 78 00 63 00 72 00 79 00 70 00 74 00 70 00 (62->78)
USERENV.dll -> USERENX.dll (hidden)
KERNEL32.dll -> KERNEL64.dll (CFF explorer-Import directory)
-------------------------------------------------------------------------
chrome_proxy.exe
================
120-Security Directory RVA / Size --> 00000000
b.c.r.y.p.t... -> x.c.r.y.p.t... (hidden) 62 00 63 00 72 00 79 00 70 00 74 00 70 00 -> 78 00 63 00 72 00 79 00 70 00 74 00 70 00 (62->78) x2
KERNEL32.dll -> KERNEL64.dll
USERENV.dll -> USERENX.dll
-------------------------------------------------------------------------
chrome_elf.dll
==============
120-Security Directory RVA / Size --> 00000000
b.c.r.y.p.t... -> x.c.r.y.p.t... (hidden) 62 00 63 00 72 00 79 00 70 00 74 00 70 00 -> 78 00 63 00 72 00 79 00 70 00 74 00 70 00 (62->78) x2
KERNEL32.dll -> KERNEL64.dll
-------------------------------------------------------------------------
chrome.dll
==========
120-Security Directory RVA / Size --> 00000000
5D9B900:
24 40 FF 15 E8 D1 80 08 45 85 F6 0F 94 C0 85 ED -> 24 40 FF 15 E8 D1 80 08 45 85 F6 0F 94 C0 90 90
0F 95 C1 30 C1 0F 84 E5 01 00 00 4C 8B 27 48 C7 -> 90 90 90 90 90 90 90 90 90 90 90 4C 8B 27 48 C7
9866550:
00 84 DB 75 14 FF 15 4D 28 D4 04 48 89 C1 BA 62 -> 00 84 DB EB 14 FF 15 4D 28 D4 04 48 89 C1 BA 62 (75->EB)
b.c.r.y.p.t... -> x.c.r.y.p.t... (hidden) 62 00 63 00 72 00 79 00 70 00 74 00 70 00 -> 78 00 63 00 72 00 79 00 70 00 74 00 70 00 (62->78)
D4343D8:
C3 41 1B 9A BB D3 6A 46 87 FC FE 67 55 6A 3B 65 -> 5A EE 59 B8 38 D8 5B 4B A2 E8 1A DC 7D 93 DB 48
b.c.r.y.p.t... -> x.c.r.y.p.t... (hidden)
user32 -> user64 (hidden)
mfplat -> xfplat (hidden)
netapi32 -> netapi64 (hidden)
kernel32 -> kernel64
userenv -> userenx
winhttp -> winxttp
-------------------------------------------------------------------------
notification_helper.exe
=======================
120-Security Directory RVA / Size --> 00000000
b.c.r.y.p.t... -> x.c.r.y.p.t... (hidden) 62 00 63 00 72 00 79 00 70 00 74 00 70 00 -> 78 00 63 00 72 00 79 00 70 00 74 00 70 00 (62->78) x2
KERNEL32.dll -> KERNEL64.dll
-------------------------------------------------------------------------
chrome_wer.exe
=======================
120-Security Directory RVA / Size --> 00000000
-------------------------------------------------------------------------
chrome_pwa_launcher.exe
=======================
120-Security Directory RVA / Size --> 00000000
KERNEL32.dll -> KERNEL64.dll
USERENV.dll -> USERENX.dll
-------------------------------------------------------------------------
brave_vpn_helper.exe
====================
120-Security Directory RVA / Size --> 00000000
b.c.r.y.p.t... -> x.c.r.y.p.t... (hidden) 62 00 63 00 72 00 79 00 70 00 74 00 70 00 -> 78 00 63 00 72 00 79 00 70 00 74 00 70 00 (62->78) x2
KERNEL32.dll -> KERNEL64.dll
USERENV.dll -> USERENX.dll
-------------------------------------------------------------------------
brave_vpn_wireguard_service.exe
===============================
120-Security Directory RVA / Size --> 00000000
b.c.r.y.p.t... -> x.c.r.y.p.t... (hidden) 62 00 63 00 72 00 79 00 70 00 74 00 70 00 -> 78 00 63 00 72 00 79 00 70 00 74 00 70 00 (62->78) x2
KERNEL32.dll -> KERNEL64.dll
-------------------------------------------------------------------------
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment