Update infostealer_browser.py

CAPESandbox · Sep 28, 2024 · 131d984 · 131d984
1 parent d16acf1
commit 131d984
Showing 1 changed file with 9 additions and 9 deletions.
diff --git a/modules/signatures/windows/infostealer_browser.py b/modules/signatures/windows/infostealer_browser.py
@@ -62,26 +62,26 @@ def __init__(self, *args, **kwargs):
             re.compile(r".*\\Microsoft\\Edge\\User\\ Data\\Default\\.*", re.I),
 
             # Google Chrome
-            re.compile(r".*\\Application\\ Data Data\\Google\\Chrome\\.*", re.I),
+            re.compile(r".*\\Application\\ Data\\Google\\Chrome\\.*", re.I),
             re.compile(r".*\\Local\\Google\\Chrome\\User\\ Data\\Default\\.*", re.I),
             re.compile(r".*\\AppData\\Local\\Google\\Chrome\\User\\ Data\\Default\\.*", re.I),
 
             # Chromium-based Browsers
-            re.compile(r".*\\Application\\ Data Data\\Chromium\\.*", re.I),
+            re.compile(r".*\\Application\\ Data\\Chromium\\.*", re.I),
             re.compile(r".*\\AppData\\Local\\Chromium\\.*", re.I),
-            re.compile(r".*\\Application\\ Data Data\\ChromePlus\\.*", re.I),
+            re.compile(r".*\\Application\\ Data\\ChromePlus\\.*", re.I),
             re.compile(r".*\\AppData\\Local\\MapleStudio\\ChromePlus\\.*", re.I),
-            re.compile(r".*\\Application\\ Data Data\\Nichrome\\.*", re.I),
-            re.compile(r".*\\Application\\ Data Data\\Bromium\\.*", re.I),
-            re.compile(r".*\\Application\\ Data Data\\RockMelt\\.*", re.I),
-            re.compile(r".*\\Application\\ Data Data\\Flock\\.*", re.I),
+            re.compile(r".*\\Application\\ Data\\Nichrome\\.*", re.I),
+            re.compile(r".*\\Application\\ Data\\Bromium\\.*", re.I),
+            re.compile(r".*\\Application\\ Data\\RockMelt\\.*", re.I),
+            re.compile(r".*\\Application\\ Data\\Flock\\.*", re.I),
             re.compile(r".*\\AppData\\Local\\Flock\\.*", re.I),
-            re.compile(r".*\\Application\\ Data Data\\Comodo\\Dragon\\.*", re.I),
+            re.compile(r".*\\Application\\ Data\\Comodo\\Dragon\\.*", re.I),
             re.compile(r".*\\AppData\\Local\\Comodo\\Dragon\\.*", re.I),
             re.compile(r".*\\BraveSoftware\\Brave-Browser\\User\\ Data\\Default\\.*", re.I),
 
             # Opera
-            re.compile(r".*\\Application\\ Data Data\\Opera\\.*", re.I),
+            re.compile(r".*\\Application\\ Data\\Opera\\.*", re.I),
             re.compile(r".*\\AppData\\Roaming\\Opera\\Opera\\.*", re.I),
             re.compile(r".*\\AppData\\Roaming\\Opera Software\\Opera Stable\\.*", re.I),