{ "llm": { "conf": 0.99436224, "grade": "hostile", "model": "Qwen/Qwen3.8-27B", "before": { "lvl": -1, "prob": 0.99158543, "class": "benign" }, "outcome": "hostile", "interpretation": "Minecraft credential theft and C2" }, "ml": { "v": "7", "eng": "2.12.0-beta.1", "lvl": 25, "conf": 92, "mods": [ { "cls": 0, "raw": 0.99158543, "rte": "az", "prob": 0.99158543 }, { "cls": 0, "raw": 0.99506456, "rte": "az/jar", "prob": 0.99506456 } ], "prob": 0.99436224, "files": [ { "id": 0, "lvl": 25, "conf": 92, "prob": 0.9943622350692749, "type": "jar" }, { "id": 1, "lvl": -1, "conf": 0, "prob": 0.00003273288530181162, "type": "java_class" }, { "id": 2, "lvl": -1, "conf": 0, "prob": 0.000006407499313354492, "type": "java_class" }, { "id": 3, "lvl": -1, "conf": 0, "prob": 0.000009715557098388672, "type": "java_class" }, { "id": 4, "lvl": -1, "conf": 0, "prob": 0.000013281901374284644, "type": "java_class" }, { "id": 5, "lvl": -1, "conf": 0, "prob": 0.00003566344457794912, "type": "java_class" }, { "id": 6, "lvl": -1, "conf": 0, "prob": 0.001096238731406629, "type": "java_class" }, { "id": 7, "lvl": -1, "conf": 0, "prob": 0.000034888584195869043, "type": "java_class" }, { "id": 11, "lvl": -1, "conf": 0, "prob": 0.000009636084541853052, "type": "java_class" }, { "id": 13, "lvl": -1, "conf": 0, "prob": 0.000010182459845964331, "type": "java_class" }, { "id": 14, "lvl": -1, "conf": 0, "prob": 0.000009636084541853052, "type": "java_class" }, { "id": 17, "lvl": -1, "conf": 0, "prob": 0.000009685754776000977, "type": "json" } ], "version": "v18.18", "analyzed_at": "2026-09-28T21:27:27Z" }, "path": "lrkeedupe-1.0.0(1).jar", "raw": { "files": [ { "id": 0, "ctx": [ { "b": "p!H([6Awak2MO*=cTAZT2w0Z\u003c007yX0SS]m003IEz7/KoBzb/afj!Wde[nZaB92NrxlWXkC}MVk0%*aSwzDi8VxDn{q1nKotxY6y:0xg-qkayzT2MI$1w1aF08.x@Lfsui7FI31?z8YNdKJgZKZ=v5()f2XephNeDNyf*:W@\u0026c8C)Z+tK}DJ\u003eL\u00260?.3vsuW]-KV}[qCF}{f-z?gD\u003cl[mke[9x.2.(cuR[(/Qf3?mkkOi1nC8^3@tbu75s@\u0026[R#nj5qwcZI[HE8J)Z=uW!p4]+iXG{R=k\u003cuBYKz\u0026q", "ln": 0 } ], "mol": "K₂(McGa)O₆(CaEuAlAs₃ErI)H₆(Cm₅Db₅F₃Os₂Po₅Ti)Md₂(Pa)", "sha": "15e221b5dda439f6d4ba1f68e27575fed69847ca56a56b9d8af2e98cec643c12", "path": "lrkeedupe-1.0.0(1).jar", "risk": 300, "size": 87400, "type": "jar", "facts": { "metrics": { "jar": { "class_count": 14, "entry_count": 21, "index_count": 0, "service_count": 0, "signature_count": 0, "native_lib_count": 0, "embedded_jar_count": 0, "manifest.entry_count": 0, "manifest.digest_count": 0, "signature_block_count": 0, "versioned_class_count": 0, "manifest.section_count": 0, "manifest.attribute_count": 13, "manifest.class_path_count": 0, "manifest.boot_class_path_count": 0 }, "file": { "size": 87400, "entropy": 7.98 }, "binary": { "peak_region_bytes": 84992, "peak_region_entropy": 7.82 }, "archive": { "file_count": 21, "member_count": 30, "script_count": 0, "zip_bomb_ratio": 3.78, "compressed_size": 83584, "directory_count": 9, "executable_count": 0, "extra_field_size": 0, "noise_file_count": 0, "compression.ratio": 0.34, "hidden_file_count": 0, "uncompressed_size": 247509, "crc_collision_count": 0, "entry_comment_count": 0, "max_filename_length": 51, "rtlo_filename_count": 0, "format.regular_count": 21, "nested_archive_count": 0, "path_traversal_count": 0, "symlink_escape_count": 0, "security.setgid_count": 0, "security.setuid_count": 0, "security.sticky_count": 0, "double_extension_count": 0, "duplicate_member_count": 0, "format.directory_count": 9, "security.symlink_count": 0, "unicode_filename_count": 0, "homoglyph_filename_count": 0, "security.encrypted_count": 0, "timing.mtime_unique_count": 2, "timing.mtime_unique_ratio": 0.07, "misplaced_executable_count": 0, "timing.mtime_outlier_count": 8, "timing.mtime_dominant_count": 22, "timing.mtime_spread_seconds": 1473258932, "timing.sentinel_mtime_count": 0, "security.world_writable_count": 0, "timing.mtime_dominant_fraction": 0.73, "compression.method_counts.deflate": 30 } } }, "traits": [ { "id": "micro-behaviors/os/env/gate::jvm-string-equals-import", "conf": 0.94, "crit": 1, "desc": "JVM class imports String equals", "from": [ { "file": 1 } ] }, { "id": "well-known/game/mod::minecraft-client-class-ref", "conf": 0.9, "crit": 3, "desc": "Minecraft client singleton class reference", "from": [ { "file": 6 } ] }, { "id": "micro-behaviors/os/env/gate::jvm-opaque-secret-environment-gate", "conf": 0.97, "crit": 3, "desc": "JVM compares opaque environment gate", "from": [ { "off": 14277, "file": 1 }, { "file": 2 }, { "file": 3 }, { "file": 4 }, { "off": 2077, "file": 7 } ], "uses": [ 0, 38, 58 ] }, { "id": "objectives/anti-static/obfuscation/reflection/class::java-protectiondomain", "conf": 1.0, "crit": 3, "desc": "Java ProtectionDomain", "from": [ { "file": 6 } ] }, { "id": "objectives/anti-analysis/timing/evasion::kotlin-thread-sleep-check", "atk": "T1497.003", "conf": 0.94, "crit": 3, "desc": "Kotlin Thread.sleep call", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/fs/read/file/handle::jvm-io-file-class-ref", "conf": 0.86, "crit": 3, "desc": "JVM File API class reference" }, { "id": "micro-behaviors/time/sleep/interval::java-thread-sleep-bytecode", "conf": 0.9, "crit": 3, "desc": "Java bytecode thread sleep", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/process/info/current::touri-ref", "conf": 0.82, "crit": 3, "desc": "Java toURI call reference" }, { "id": "micro-behaviors/process/thread/lifecycle::jvm-thread-start-bytecode", "conf": 0.94, "crit": 3, "desc": "JVM starts a thread", "from": [ { "file": 6 } ] }, { "id": "micro-behaviors/communications/socket/framing::bytebuffer-transport", "atk": "T1573", "conf": 1.0, "crit": 3, "desc": "Java byte-buffer transport type", "from": [ { "file": 5 } ] }, { "id": "well-known/game/mod::minecraft-session-ref", "conf": 0.9, "crit": 3, "desc": "Minecraft session object reference", "from": [ { "file": 6 } ] }, { "id": "micro-behaviors/process/create/spawn::java-processbuilder-start-bytecode-symbol", "atk": "T1059", "mbc": "E1203", "conf": 0.95, "crit": 3, "desc": "Java bytecode ProcessBuilder start", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/process/io/stream::java-processbuilder-redirect-errors", "conf": 0.92, "crit": 3, "desc": "Java ProcessBuilder merges standard error", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/process/create/spawn::child-process-creation-api", "atk": "T1106", "conf": 0.92, "crit": 3, "desc": "Starts a child process through a platform API", "from": [ { "off": 698, "file": 1 }, { "file": 6 }, { "off": 296, "file": 7 } ], "uses": [ 70 ] }, { "id": "micro-behaviors/communications/socket/ssl::jvm-x509trustmanager-server-callback", "conf": 0.94, "crit": 3, "desc": "JVM checkServerTrusted callback defined" }, { "id": "well-known/game/mod::minecraft-name-getter-ref", "conf": 0.9, "crit": 3, "desc": "Minecraft profile name getter reference", "from": [ { "file": 6 } ] }, { "id": "micro-behaviors/fs/write/file/full::jvm-files-writestring-bytecode", "conf": 0.9, "crit": 3, "desc": "JVM bytecode Files.writeString", "from": [ { "file": 6 } ] }, { "id": "objectives/evasion/self-delete/file/script::java-code-source-location", "atk": "T1070.004", "mbc": "F0007", "conf": 0.78, "crit": 3, "desc": "Java code source location", "from": [ { "file": 6 } ] }, { "id": "micro-behaviors/data/string/conversion::tostring-token", "conf": 1.0, "crit": 3, "desc": "References the toString conversion method", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/data/archive/extract/zip::jvm-zip-entry-read-bytecode", "conf": 0.9, "crit": 3, "desc": "JVM reads ZIP archive entry data", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/communications/socket/framing::data-stream-transport", "atk": "T1573", "conf": 1.0, "crit": 3, "desc": "Java data-stream transport type", "from": [ { "file": 5 } ] }, { "id": "micro-behaviors/communications/socket/ssl::jvm-custom-x509trustmanager", "conf": 0.95, "crit": 3, "desc": "Class implements a custom X509 trust manager", "from": [ { "file": 4 } ], "uses": [ 14, 52, 53 ] }, { "id": "micro-behaviors/communications/socket/ssl::jvm-sslcontext-trustmanager-init-call", "conf": 0.94, "crit": 3, "desc": "JVM SSLContext.init trust-manager call", "from": [ { "file": 5 } ] }, { "id": "micro-behaviors/data/decode/base64::java-base64-decoder-bytecode-call", "conf": 0.94, "crit": 3, "desc": "Java Base64 decoder accessor call", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/communications/socket/create::java-socket-class-import", "atk": "T1071", "mbc": "C0001", "conf": 0.9, "crit": 3, "desc": "Java imports the network socket class", "from": [ { "file": 5 } ] }, { "id": "micro-behaviors/process/info/current::getpath-ref", "conf": 0.8, "crit": 3, "desc": "Java getPath call reference" }, { "id": "micro-behaviors/process/create/spawn::java-processbuilder-init-bytecode-symbol", "atk": "T1059", "mbc": "E1203", "conf": 0.92, "crit": 3, "desc": "Java bytecode ProcessBuilder constructor", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/fs/read/file/handle::jvm-nio-file-class-ref", "conf": 0.86, "crit": 3, "desc": "JVM NIO file API reference" }, { "id": "objectives/credential-access/gaming/minecraft::minecraft-session-token-access", "atk": "T1528", "mbc": "B0006", "conf": 0.96, "crit": 4, "desc": "Minecraft session token and UUID access", "from": [ { "off": 2092, "file": 6 } ], "uses": [ 29, 37, 60 ] }, { "id": "objectives/credential-access/gaming/minecraft::minecraft-token-getter-ref", "atk": "T1528", "mbc": "B0006", "conf": 0.92, "crit": 3, "desc": "Minecraft access token getter", "from": [ { "file": 6 } ] }, { "id": "micro-behaviors/data/archive/extract/zip::jvm-zip-entry-iteration-bytecode", "conf": 0.92, "crit": 3, "desc": "JVM iterates ZIP archive entries", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/communications/proxy/tunnel::byte-output-stream", "atk": "T1090", "mbc": "C0003", "conf": 0.5, "crit": 3, "desc": "Java ByteArrayOutputStream usage", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/communications/socket/ssl::jvm-trustmanager-class-ref", "conf": 0.9, "crit": 3, "desc": "JVM TrustManager interface reference", "from": [ { "file": 5 } ] }, { "id": "micro-behaviors/data/encode/base64::jvm-base64-encode-bytecode", "conf": 0.94, "crit": 3, "desc": "JVM Base64 encodeToString call", "from": [ { "file": 5 } ] }, { "id": "objectives/impact/dos/disk::jvm-megabyte-byte-array-constant", "atk": "T1499.001", "conf": 0.94, "crit": 3, "desc": "JVM one-megabyte allocation constant", "from": [ { "file": 5 } ] }, { "id": "micro-behaviors/communications/socket/ssl::jvm-sslsocket-handshake-call", "conf": 0.94, "crit": 3, "desc": "JVM SSLSocket.startHandshake call", "from": [ { "file": 5 } ] }, { "id": "micro-behaviors/communications/proxy/tunnel::inet-socket-address", "atk": "T1090", "mbc": "C0003", "conf": 0.6, "crit": 3, "desc": "Java InetSocketAddress reference", "from": [ { "file": 5 } ] }, { "id": "well-known/game/mod::minecraft-uuid-getter-ref", "conf": 0.9, "crit": 3, "desc": "Minecraft profile UUID getter reference", "from": [ { "file": 6 } ] }, { "id": "micro-behaviors/os/env/gate::jvm-system-getenv-import", "conf": 0.94, "crit": 1, "desc": "JVM class imports System getenv", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/communications/http/lib/urlconnection::jvm-url-class-ref", "atk": "T1071.001", "mbc": "C0002", "conf": 0.9, "crit": 3, "desc": "JVM URL class reference" }, { "id": "objectives/anti-static/obfuscation/string/crypto::java-byte-range-copy", "atk": "T1027", "mbc": "F0001", "conf": 0.7, "crit": 3, "desc": "Java byte range copy", "from": [ { "file": 1 } ] }, { "id": "objectives/anti-static/obfuscation/string/control-prefix::java-control-prefixed-long-string", "atk": "T1027", "mbc": "F0001", "conf": 0.92, "crit": 3, "desc": "Java string starts with control-length prefix" }, { "id": "micro-behaviors/process/info/selfpath::java-protection-domain", "conf": 0.82, "crit": 3, "desc": "Java getProtectionDomain self-path lookup" }, { "id": "micro-behaviors/process/create/spawn::java-runtime-class", "atk": "T1059", "mbc": "E1203", "conf": 0.86, "crit": 3, "desc": "Java Runtime class reference", "from": [ { "file": 5 } ] }, { "id": "micro-behaviors/process/info/current::protection-domain-class", "conf": 0.85, "crit": 3, "desc": "Java ProtectionDomain class reference" }, { "id": "micro-behaviors/data/buffer/transfer::bytearrayinputstream-ref", "conf": 0.88, "crit": 3, "desc": "Java ByteArrayInputStream class" }, { "id": "micro-behaviors/process/io/stream::java-processbuilder-redirected-stdio", "conf": 0.96, "crit": 3, "desc": "Java ProcessBuilder redirects all standard streams", "from": [ { "off": 15135, "file": 1 }, { "off": 5832, "file": 6 }, { "off": 3044, "file": 7 } ], "uses": [ 12, 65, 69 ] }, { "id": "micro-behaviors/data/buffer/transfer::bytearrayoutputstream-ref", "conf": 0.88, "crit": 3, "desc": "Java ByteArrayOutputStream class", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/data/decode/base64::java-base64-decoder-class", "conf": 0.92, "crit": 3, "desc": "JVM Base64 decoder class reference", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/data/archive/extract/zip::jvm-zip-entry-extraction-to-file", "conf": 0.96, "crit": 3, "desc": "JVM extracts ZIP entries to files", "from": [ { "off": 12646, "file": 1 } ], "uses": [ 19, 30, 51 ] }, { "id": "objectives/credential-access/gaming/minecraft::minecraft-token-child-process-stage", "atk": "T1528, T1059", "mbc": "B0006", "conf": 0.99, "crit": 5, "desc": "Minecraft token access alongside redirected child launch", "from": [ { "off": 698, "file": 1 }, { "off": 10234, "file": 5 }, { "off": 1955, "file": 6 }, { "off": 4083, "file": 7 } ], "uses": [ 28, 33, 46, 70 ] }, { "id": "micro-behaviors/fs/write/file/handle::jvm-fileoutputstream-bytecode", "conf": 0.86, "crit": 3, "desc": "JVM imports FileOutputStream class", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/communications/socket/ssl::jvm-x509trustmanager-class-ref", "conf": 0.94, "crit": 3, "desc": "JVM X509 trust-manager interface reference" }, { "id": "micro-behaviors/communications/socket/ssl::jvm-x509trustmanager-issuer-callback", "conf": 0.94, "crit": 3, "desc": "JVM getAcceptedIssuers callback defined" }, { "id": "micro-behaviors/process/info/current::codesource-class", "conf": 0.85, "crit": 3, "desc": "Java CodeSource class reference" }, { "id": "objectives/anti-static/obfuscation/string/control-prefix::java-character-digit-bytecode", "atk": "T1027", "mbc": "F0001", "conf": 0.9, "crit": 3, "desc": "Java bytecode calls Character.digit", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/communications/socket/send::java-dataoutputstream-class", "atk": "T1071", "mbc": "C0001", "conf": 0.9, "crit": 3, "desc": "Java DataOutputStream class reference", "from": [ { "file": 5 } ] }, { "id": "micro-behaviors/communications/socket/ssl::jvm-sslparameters-set-server-names", "conf": 0.93, "crit": 3, "desc": "JVM sets TLS SNI server name", "from": [ { "file": 5 } ] }, { "id": "micro-behaviors/os/env/gate::jvm-opaque-environment-key", "conf": 0.94, "crit": 1, "desc": "JVM class has generated gate value" }, { "id": "micro-behaviors/communications/socket/send::java-raw-socket-client-write", "atk": "T1071", "mbc": "C0001", "conf": 0.94, "crit": 3, "desc": "Java socket client writes request bytes through DataOutputStream", "from": [ { "off": 3216, "file": 5 } ], "uses": [ 24, 56, 71 ] }, { "id": "well-known/game/mod::minecraft-session-access", "conf": 0.91, "crit": 3, "desc": "Minecraft session profile access", "from": [ { "file": 6 }, { "off": 2936, "file": 11 }, { "off": 293, "file": 13 }, { "off": 1860, "file": 14 } ], "uses": [ 1, 10, 15 ] }, { "id": "micro-behaviors/communications/socket/create::java-socket-bytecode-reference", "atk": "T1071", "mbc": "C0001", "conf": 0.86, "crit": 3, "desc": "Java bytecode socket reference", "from": [ { "file": 5 } ] }, { "id": "micro-behaviors/communications/socket/create::java-socket-slash-reference", "atk": "T1071", "mbc": "C0001", "conf": 0.9, "crit": 3, "desc": "Java slash-form socket reference", "from": [ { "file": 5 } ] }, { "id": "micro-behaviors/data/decode/base64::java-base64-decode-bytecode-call", "conf": 0.96, "crit": 3, "desc": "Java Base64 decode call", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/os/sysinfo/hostname::jvm-hostname-command-literal", "atk": "T1082", "mbc": "E1082", "conf": 0.9, "crit": 3, "desc": "JVM hostname command literal" }, { "id": "micro-behaviors/process/io/stream::java-processbuilder-redirect-input", "conf": 0.92, "crit": 3, "desc": "Java ProcessBuilder redirects standard input", "from": [ { "file": 1 } ] }, { "id": "metadata/package/config::fabric-mod-metadata", "conf": 0.9, "crit": 3, "desc": "Fabric mod metadata resource", "from": [ { "file": 17 } ] }, { "id": "objectives/impact/dos/disk::jvm-two-backward-goto-branches", "atk": "T1499.001", "conf": 0.9, "crit": 3, "desc": "JVM repeated counter backedges", "from": [ { "file": 1 } ] }, { "id": "well-known/malware/stealer/prefire-shard::prefire-family-literal", "atk": "T1528", "mbc": "B0006", "conf": 0.9, "crit": 1, "desc": "Prefire family name literal", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/process/io/stream::java-processbuilder-redirect-output", "conf": 0.92, "crit": 3, "desc": "Java ProcessBuilder redirects standard output", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/process/create/spawn::java-processbuilder-start-bytecode", "atk": "T1059", "mbc": "E1203", "conf": 0.94, "crit": 3, "desc": "Java bytecode ProcessBuilder execution", "from": [ { "off": 15199, "file": 1 }, { "off": 872, "file": 6 }, { "off": 3175, "file": 7 } ], "uses": [ 11, 26 ] }, { "id": "micro-behaviors/data/buffer/transfer::jvm-outputstream-write", "conf": 0.96, "crit": 2, "desc": "JVM writes bytes to output stream", "from": [ { "file": 5 } ] }, { "id": "micro-behaviors/data/decode/base64::java-base64-decoding-bytecode", "conf": 0.94, "crit": 3, "desc": "Java bytecode Base64 decoding", "from": [ { "off": 19188, "file": 1 } ], "uses": [ 23, 63 ] }, { "id": "micro-behaviors/communications/http/lib/urlconnection::java-url-class-bytecode", "atk": "T1071.001", "mbc": "C0002", "conf": 0.86, "crit": 3, "desc": "Java URL class reference", "from": [ { "file": 5 } ] }, { "id": "micro-behaviors/process/info/current::getlocation-ref", "conf": 0.82, "crit": 3, "desc": "Java getLocation call reference" }, { "id": "micro-behaviors/process/create/spawn::java-processbuilder-bytecode", "atk": "T1059", "mbc": "E1203", "conf": 0.88, "crit": 3, "desc": "Java bytecode ProcessBuilder reference", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/communications/socket/create::jvm-socket-class-ref", "atk": "T1071", "mbc": "C0001", "conf": 0.9, "crit": 3, "desc": "JVM socket class reference" }, { "id": "metadata/file/archive::archive-at-least-10-members", "conf": 0.9, "crit": 3, "desc": "Archive contains at least ten members" }, { "id": "metadata/package/entrypoint::jar-main-class", "conf": 0.95, "crit": 2, "desc": "JAR manifest declares an executable Main-Class" }, { "id": "metadata/file/naming::archive-member-under-10kb", "conf": 0.9, "crit": 3, "desc": "Archive has a sub-10KB member" }, { "id": "metadata/package/config::fabric-runnable-mod-archive", "conf": 0.9, "crit": 3, "desc": "Fabric mod JAR is directly runnable", "from": [ { "file": 17 } ], "uses": [ 66, 78 ], "spans": [ [ 0, 15 ] ] }, { "id": "objectives/exfiltration/stealer/credential/token::minecraft-token-http-body-exfil", "atk": "T1041", "mbc": "E1041", "conf": 0.98, "crit": 4, "desc": "Minecraft token access paired with raw socket request write", "from": [ { "off": 6255, "file": 5 }, { "off": 1955, "file": 6 } ], "uses": [ 28, 59 ], "spans": [ [ 0, 41 ] ] }, { "id": "well-known/malware/stealer/prefire-shard::prefire-packed-runtime-stealer", "atk": "T1528", "mbc": "B0006", "conf": 0.99, "crit": 5, "desc": "Prefire packed runtime Minecraft stealer", "from": [ { "off": 20749, "file": 1 }, { "file": 5 }, { "off": 1955, "file": 6 }, { "file": 7 } ], "uses": [ 19, 28, 30, 41, 51, 55, 68 ] } ] }, { "ctx": [ { "b": "+kO#^0000+1HXsh4R6A]fk20vxMW=qwN]GW009925nCS%vj#C9zF7Q#vRPE:Bo.^F0rs6Gz/4dux([3hvLr15z6S4Yrbl!Ul1\u003eHim[i^:1PXPkv@Diqxk8E3BZ^1HpI*sp2ls/kq==}lDq^ayCTUa)0rsoTvrM6jy*?i]fhMXcv}x.5luN0UwmY^bqE%xMA+e:52lk8i02PDVC404uvqYZhp\u0026ZF:wPI]VB.LV5wPw1Q3\u0026{tlqE%xMA+e:50rr%KvrM6jB-.tlfg68*wI#v\u003cl$G\u003eDwmY=^01P8g5nCS%vj#+Bx(2B?vrl0rgZs0)0rru)wN/T?wPv!Kc2c\u003eivj#C9zF7RpzGY@lwIl+?BzbP6nmuyDy?mVkoMa\u0026+B-mM=6AFgPygho]fkL6mxd)$pC5Iecfhl21xM4ALvqYQ(wPF7R76aytoMa\u0026+B-muY7hmK", "ln": 0 }, { "b": "oLO0Vvj#Ijz.CZpy?km@vrufA0rrEHzG]JlwNO}(ASDdToLO0Vvj#C9zF7R3BAh8kxf{-Py?d9$i@]r=jzwXEBuPZ911kQ03\u0026?)Wfa4WZ05aAN5nCS%vj#C9zF7R3BAh8kx9Oz(0rr{JvrM6jy*?i]fh($kx(mMIB.LV5wPw1QgZTju05aANoBHrZNDg\u0026o)6rnBROg@}Y6V2t\u003cFwa5M9xU!GxOXT\u0026HmjzQjIyoFB6Ub\u003c/2ruWYO}!YYt@x\u003c^8LaYr*Z?W=9:J[1M0aXu\u003eLeJTbQ", "ln": 634 }, { "b": "P6\u0026RZ)XVxiV8c(^Jo^%h(9cGxQ]rEuU\u003cm:.)YJ?ROpPW\u0026G6][K)t!vqTbMFzW=sPH)XW.:WYx-mm/-O}Bz\u003e91A+PA70rr/ZdnjF+C404uvqYZhq/)4]zF83t07^e.3ih{-o922T\u003eENkFXp-n9(Y)!1FRJG!MG\u003eP^\u003eEWhDXqeLy(Y)v\u003eFSe]\u003cI%vyT\u003eENeCYs3\u003ekX6*SeL=0U{WD\u003cV\u003c(AcfN2MNN104[ApLdf+qV*B3t)Um}cLa7Y$K)OyF", "ln": 1003 }, { "b": "CX?OruRKu\u003elTK[jvp]Pv1.IKSz+Qlj1AF6}gYWNYAb]J4x(W+=07[Ukygho]fkL6mxd)h9A+PA7j4%x$C404uvqYZhq/)4]zF848ygho]fkL6mxd)h9A+PA7j1i\u003crvrM5", "ln": 4024 }, { "b": ")2Na]ZMW=HLJ)^O\u0026Fje(MxgD^Tltd%)68]qV.(YUTM^9B)VL0zHnTy1OfNc^M*flU\u0026Fs@bMYIENdGGINxjVf@zGVA?ecarf0l1%\u003c0rtE@\u003e!hVmL=S\u00265QWL^=\u003ey*e7N4%2eGYv=@\u003ec/)8Kf^/oITOrC\u0026GYbXYOU{sH2F2w[4kW:G}my{KNe1d\u003caK2^X3=Lyf985l4c9X9\u003e7/X)FV4UgJP3zv\u0026\u0026F7bOv^^NT(t5B\u003cc#H%YmGj7ND6Q0\u003e7S", "ln": 5584 }, { "b": "RS9=9(Y/3/0W4NBf)Jc?0geWH0#:g9{YzH}X(5Xi0000000*\u003cK01-)NC404uvqYZhra{q-vpPPAc\u0026\u003cqKB8kA0z#/}wc}U{?3\u003c4)Wd*=tb0XsuL40+VfzFy[0wh=\u00260xAn8tv@Dl%x\u003eHEPyYKIynMfH{uTEety^Oj66hqnGlTJJ8q+*W*C$So!rCVwB0rrNsDnWJoq=v4gB.K)40rr:UA6!+!z!.:QC5?s^z*DwwCMv^Kv}ORKDu@}2uO?=-6ky%0vj#tkfg!@dCW*", "ln": 11881 }, { "b": "wNPAX0Z)4?1T)Owdol\u0026Se=[GH0.0eX0rr@+oLO0Vvj#tkfg*52B-ZM7A+eV@j1jhs04[sA3iAM@n=X]2xjVfWwQ5q=zGG]A0rs2^dnjF+C404DBzkLADtdsKt4}}AzGG]Ai$8f:0.\u003c16lJQ0-02xrTC404DBzkLADtdsKt4}}AzGG]A2lEZ500^dFBwumYwEFSr07)O1q36U%01iHZl${WMv@#TfC)\u003c:O0nE[.q36=0010pHBwMy^wO#O\u003c02u$ioLO0Vvj#Ijz.CZpy?km@vrufA3\u003c6JjsQLl*0:kQ89bn]9vj#tkfg6![w[u0]wkvt\u0026Acln3BAg@3z3HbE0rr%KvrM6jx(tT]x(4uRB-.OBBw)p4wNPAX0:U)c26s=Mx(4tY01ZLcoLO0Vvj#tkfgGU(wJHq4u\u0026\u003c:A0x70*0rrYWoLO0Vvj#tkfgGU(wJItw3\u0026?)Ywc@xB0+zxj8yOo]vrM6jx(tU2B-.OBBw)p4wNPBqnHWWG04[s=3iBGmxAn8oA+eV\u00263\u003c7eB6aa!d0=4/p1:t03By+EM2pJ!ynL7vi3\u003c7nEzvcCJ0=F8t1.hv!B7C:YAr4T00:L\u003eF0rrNqwmORYAbY\u0026eB8$]60rr@+oLO0Vvj#C9zF7R4xMw3nvpB4:j1jhs0^1G^3iAi?B{mFCD#OtJEYrH2%5F:{@Hdw+1[A5mBNAdVg6K:]VuCiiwJQd4*.L.JojlxM019jLz/YFUzGG]A3\u003c3", "ln": 12238 }, { "b": "BytofKx2V({eKcPk/ndt1^[^a-WD8b[cbFt4+TTayfgM:bqU.*01-)NC404DBzkLAl2}0OD2\u003ch(N/JG%v@DsipI9HkzF9IY00\u003c#Slp\u003c-$ts5-1ODtw\u00260?os:0rrmAp\u003cvo{0?/U#3igbeQ5+l7CvU-qB-6#{v%HQVD2%5!1B1Y[CMv^Tvo3]JuU@+!w)Y!2AcCV8q/bIn01sc@s8Sa/yeO}Us-BDx1ZjI[h!A6\u003c2s%bEA+]w=0rr^5s4l4]wnLo", "ln": 13035 }, { "b": "to%wo^![p\u002602xrTC404DBzkLADtdsKnP5cRvru732lIyx0\u003ewp+0rryDwPQHYAclmh0\u003eOI63iE:tYA50Mygho]fkktTlv0V:l2}0OC#5N8Acln3BAg@3z3HcR3iE%xu\u0026Zlkw[=c%B7/b}3\u003calB*Zja[0(s%r2wF6/y*?A%3\u003cauG6aa/K0(Ufu3t%A^wogsWAclmh0(\u003eq@3iE:t:o\u00260-0=F8t17=vX3\u003caPLfa4=\u003e0)yVB3V{qND30Q-A=LPl0rrlJdo/aE0)Q\u003e[3iE%z=\u0026Ba.BZY2#v}/pVwnDj2v{:p\u0026C5g#4x(Op%01\u0026)RCva)5CXg.#z!9A^Ac2H\u002602OyAvrM6jB-.tlfm4tKfg*4[y*?A%AYTp44S=w[B.sAYyH.Q8lT:{m03s)HvrM6jx(tT\u003eD30Q-A=LPlpJZ+#B-ZM7A+eV@i@]r{C#4KouUACMo\u003c.yet3to5zdk^i026r\u003cvRGgnnOZU1t19K7uUrkNk(*%0q^1fkuWcTly*QvSsXh$0r76K-01Bf?k$(n#w].ljCU-L^}}9Xx1hOt!)Gj/(saZQ0E:FM804[DqI?pz%N=.2J\u0026Hls%K^b0!VHs\u0026T", "ln": 13334 }, { "b": "Qo9ZjIS7Q%\u003c!5d9Pr5q1]:y*C02#pB0S@8%03770GYmY+\u003e9@:xPSm7KS]wY4\u003e9?X4P[.QdR3dba}2HE1wPq\u003c3y\u0026Z0^}Vul]05BYO0rt7ETe$YQHV$j)\u0026GYO=U=Ww{F:F\u00268(6Oj7L^xwOIS6nJ\u003e:Em[M-PFzQ3XRT\u003c^iysUaU3hNHGJ7@Tn=I02#pB0S@A604WJmT)IH?\u003ccMy@Y$:3iGyb7.\u003ccE4fYP.=nYw{kZ)w3@NL:HKvZ2UMt3j3", "ln": 14213 }, { "b": "c}[w:C404rz.BN]y?kWSoLO0Vvj#C9zF7R0A=kD0B8%V\u003cx(4r\u003eAWjK]wnc6}v@%^v10W)[3igCob()#PA+e=}A+e:5nP5G\u0026Bo8wac}[w:C404uvqYZhp\u0026ZF:wPI]VB.LV5wPx4]wN]H}wN/*zdnjF+C404uvqYZhp\u0026ZF:wPI]VB.LV5wPx\u003cv11ag03igIqdffA61Mtu1\u003c!dd^XSL%+L\u0026mN:\u003c!o3yXtwn$VeHUy\u003c!n^rXu$tdRS0Jf\u003c!n^rXw44nVJ{T-0rrylAbYxawk)EQ11:Q23igCoe=+}ZA+e=}A+e:5pJZ+#B-X2]fASZg01x2+0rr^NwN]H}wN/*JA=M8sq/)4\u003evqM2B9vL8uoLO0Vvj#C9zF7R0A=kD0B8%V\u003cx(4r\u003eAYTWigxPDv01x2/0rrpAByxii0rr\u0026.dnjF+C404uvqYZhp\u0026ZF:wPI]O3\u003ceA\u003ci0]S{133wZ5O+-$vj#C9zF7R0A=kD0B8}M*i@]r-Aa@?-00sR#n^\u003e!+13N4]joE!G0br28TbDwrG6Q4l\u003e=PE6V5m\u003ekG6eo7\u003e8c.jN3c(/R%oFu(Z\u0026{[UA!g1WDauP)v*#OY0gz4Q3Y7Y(ZaKjKCz$QNDH0i)F", "ln": 14876 }, { "b": "uS.COt3\u003e=fvNyd@1z7IOz2\u003cRuyhWD}CMv^NvQTs?hz^^tzGGDmBozLHhV\u003cftW?hdkmC7G:16cR$7xBHyxjVfMwN/T?wPv!K94imfygho]flIwJy+Fa-B7El^bT=iNz!9B1i$8k!1nSu85^e1i00V$Bv@C)?0rr(-oLO0Vvj#C9zF7R3BAh8kxfdLDljr${1o5Sc5cI}k03M8=C404wx(tUmxKL}5wPPO7Byx5$vrb)CxKL}5wPR$#1owJ61YXI\u003euPn5^8CB)OC404wx(tUmxKL}5wPPN)xKL}5wPQ0x1oO=f2)pqj1PXPBc%G2iygho]fk+GxfjOW7A=U/lfgfzYA=U/li@", "ln": 19070 }, { "b": "09[Nv0%0:1?31eGtB6QsAmj$s+pSEY9Sg\u003c1(*Q8Ep:AEh0rr^FvrM6jy*?i]fgfzYA:-E1wPw1Ux-OhqwnbW\u003cBo8vBc{{MPnEL-q1z!zFy6nwO00^vZxgV#MzVG?KBza\u0026FuQ[o%B6?EXBWGIavn5@/00^4yByv)Tzuf.ynj2%{B1*0\u003e0rrvmB-IH*B:9]!18zE[1/v)sNn^cB(JncB(KB38r3Y0P037oZV*9Eh\u003e:[*uW#P)MQ34AG\u003e8+zVVW?g}YA!=CC(W)\u003e\u0026?\u0026pfM\u0026", "ln": 20685 }, { "b": "hcEx*hCtRlijn/Ho!lx6j$KzJwf2hs1qI6L1V=!?hu\u003c)26:glhaq\u003es$1$P($u\u003e\u0026(Ng+n+A1%4U\u003cg?q+HGA.EP%kgA*gG+O0W/w+607H3u5\u003eGChjur=^2)i1x3k\u003ce:1y@kOwhT/g3+MT73(6cMwhT(i4vWty84mk?83{AX3sBOTu]e-c1qIvX3ufxfF%6b!4GAva?mAUysS4TS07a9]mPRaG08cr]1IjT\u003es*[w?iUieu5(b\u003enjus5(5XXxU84*jjhwc(tZ7?n\u003e1y%z76+!j-iURVO6+}C#6qtEH859/284^O#g-l(u6bqk%5].knF%6b!6-\u003elj?[5\u003eAsS4{.07a9]mPQDs5(u1pjusq%7Y#PM85Tp96=yJ+whUtv8Oukm8V}#r6=W@bQ5VCR8X\u003ctg7.)[\u003eu\u003e\u003cU?g-mbk6=W@aA9$IOL2WeP0Jk$LY8TS\u002685{3+lBD\u003e-r#zLZqNMM/iV/jY12I[U86uM}wecj$hx-!UYAHtu12.wsbnzw@03\u0026Ba6^BOr1qJ4!6^E9y86n$@bnztuu]iE#rFhN$R#LI-05E:}bdvLsWG5=#84:jRoJb6$5(=ptjus/bciD7.cManB1y@k{whU?Jd7/ZAdfzET87upI872F3cTWVsu]e-F1qJy3cVADIF%6b!dGHnl6!2^Q?N-+zsS5V$076Q!2d\u003c\u003c)s*[w?iXqj35(}4C87(3109Rol87@t$uiB^NfjV%{Y8TY\u003e6!)8%vlcaBhzM156!(uZdh:\u0026Te^8[xu\u003e\u003eC8WG6FGe^8[A6!:JlWG6G.Lc$v3sa\u0026sfR#Lr=f$46QWG5=#87=FkWG5AJh5OmNg=vlfhnfi76/GOXhX!o:1V!QBhAqHj6/R\u0026!bPeMRit\u003cWS6/GCmiBBVYh3sTO6/H2sg?q+HGGf7h%j+c=gG+OPW/w+607H3ceFq.Tjq*l-WG6F?jScw\u003c0a2!s6*l7=kdZ!LsRTcf0av]M12-yVkOVFS04w^I89w3pjZY0\u0026v735s89w3pkOVC3v735sF%9LxwljBH0Jk$G89+LfoTT{\u003cr#AP#08cr]2Ff%[s*[w?iZT=L5]a\u0026Pjut\u003eFl\u003c2n7mhXIc1y@lowhV)(m.w)=m/$Uu6?x6eQ5VCRm?[Mjl\u003cak[u\u003e(jug-nW:6?x6dA9$IkL2Wfa0Jk$LY8TS\u00268aRdolBD\u003e-r#Bvry=Uibo9qQ5s#G4(oss?b1y@lvwhWe]05W)]o$7ahi./=npzDUuo}?Rp8bq5x1qKQr6\u0026ekC09Qmk1qKYEoMjyF09S]@WG6\u0026tGIISD%je5.WG61f07H3clLspB06Aqu8bZL[hD7F\u003eZ64%Yq!b", "ln": 21934 }, { "b": "Ne^WDWG6RC0d{{B1P+?T1?1IIo!l\u0026v5DEu\u002618pN.5d(tOq-j:[1EPk$6:b9@5tPpf0Ka9!0dUTYFe5g\u003cxKFmJyb#IF83NCKrYQC%05E:}2c[voW/^2wo-.D#0SXqZWG", "ln": 132517 }, { "b": "1Um1YuoGniy}H3G12Zn%1rscod\u003eIFs1-bX71HXql5d(tOzu\u003ezp6:aUEWG6Fx5v.\u003cXv3aAw1oLI3!H!0900066U(B+7df6IJ02+?w2lj/g05BPP00961@@sFF0TwYb2l", "ln": 133003 } ], "depth": 1, "facts": { "imp": [ [ "", "java/io/ByteArrayOutputStream" ], [ "", "java/util/Arrays" ], [ "", "java/lang/ProcessBuilder$Redirect" ], [ "", "java/util/Base64" ], [ "", "java/nio/file/Path" ], [ "", "java/lang/Thread" ], [ "", "java/lang/Class" ], [ "", "java/util/zip/ZipEntry" ], [ "", "java/util/zip/Inflater" ], [ "", "java/util/Base64$Decoder" ], [ "", "java/io/PrintStream" ], [ "", "java/lang/InterruptedException" ], [ "", "java/util/ArrayList" ], [ "", "com/github/yOm" ], [ "", "java/io/ByteArrayInputStream" ], [ "", "java/lang/Process" ], [ "", "java/lang/Throwable" ], [ "", "java/lang/String" ], [ "", "java/lang/System" ], [ "", "java/lang/Integer" ], [ "", "[B" ], [ "", "java/io/BufferedOutputStream" ], [ "", "java/io/FileOutputStream" ], [ "", "java/util/List" ], [ "", "java/util/Map" ], [ "", "java/lang/StringBuilder" ], [ "", "java/lang/invoke/MethodHandles" ], [ "", "java/lang/invoke/MethodHandles$Lookup" ], [ "", "java/io/IOException" ], [ "", "[C" ], [ "", "com/github/yOm$SWTkzSAhxEGG" ], [ "", "java/nio/file/attribute/FileAttribute" ], [ "", "java/util/zip/ZipInputStream" ], [ "", "java/nio/file/LinkOption" ], [ "", "java/lang/Character" ], [ "", "java/lang/Exception" ], [ "", "[Ljava/lang/String;" ], [ "", "java/lang/ProcessBuilder" ], [ "", "java/nio/charset/StandardCharsets" ], [ "", "java/lang/Object" ], [ "", "java/io/File" ], [ "", "java/nio/file/Files" ], [ "java/lang/String", "java/lang/String.length" ], [ "java/lang/String", "length" ], [ "com/github/edi", "com/github/edi.\u003cinit\u003e" ], [ "com/github/edi", "\u003cinit\u003e" ], [ "java/io/File", "java/io/File.\u003cinit\u003e" ], [ "java/io/File", "\u003cinit\u003e" ], [ "java/lang/System", "java/lang/System.getenv" ], [ "java/lang/System", "getenv" ], [ "java/lang/String", "java/lang/String.equals" ], [ "java/lang/String", "equals" ], [ "com/github/edi", "com/github/edi.minHcpwz" ], [ "com/github/edi", "minHcpwz" ], [ "java/lang/ProcessBuilder$Redirect", "java/lang/ProcessBuilder$Redirect.appendTo" ], [ "java/lang/ProcessBuilder$Redirect", "appendTo" ], [ "com/github/edi", "com/github/edi.tuzpfKo" ], [ "com/github/edi", "tuzpfKo" ], [ "java/util/Base64$Decoder", "java/util/Base64$Decoder.decode" ], [ "java/util/Base64$Decoder", "decode" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.toString" ], [ "java/lang/StringBuilder", "toString" ], [ "java/lang/String", "java/lang/String.substring" ], [ "java/lang/String", "substring" ], [ "java/util/zip/Inflater", "java/util/zip/Inflater.needsInput" ], [ "java/util/zip/Inflater", "needsInput" ], [ "java/lang/String", "java/lang/String.substring" ], [ "java/lang/String", "substring" ], [ "java/io/PrintStream", "java/io/PrintStream.println" ], [ "java/io/PrintStream", "println" ], [ "java/lang/Object", "java/lang/Object.\u003cinit\u003e" ], [ "java/lang/Object", "\u003cinit\u003e" ], [ "java/lang/String", "java/lang/String.toCharArray" ], [ "java/lang/String", "toCharArray" ], [ "com/github/edi", "com/github/edi.yjjNsbdqaDv" ], [ "com/github/edi", "yjjNsbdqaDv" ], [ "com/github/edi", "com/github/edi.tiapoUs" ], [ "com/github/edi", "tiapoUs" ], [ "java/lang/Throwable", "java/lang/Throwable.addSuppressed" ], [ "java/lang/Throwable", "addSuppressed" ], [ "com/github/edi", "com/github/edi.cJpZu" ], [ "com/github/edi", "cJpZu" ], [ "com/github/edi", "com/github/edi.lc_oktzll_mzul_zyje" ], [ "com/github/edi", "lc_oktzll_mzul_zyje" ], [ "java/lang/Thread", "java/lang/Thread.sleep" ], [ "java/lang/Thread", "sleep" ], [ "java/lang/String", "java/lang/String.\u003cinit\u003e" ], [ "java/lang/String", "\u003cinit\u003e" ], [ "com/github/edi", "com/github/edi.gvgrXbdAgcfiiFcm" ], [ "com/github/edi", "gvgrXbdAgcfiiFcm" ], [ "java/util/zip/Inflater", "java/util/zip/Inflater.inflate" ], [ "java/util/zip/Inflater", "inflate" ], [ "com/github/edi", "com/github/edi.kvgkpness" ], [ "com/github/edi", "kvgkpness" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.append" ], [ "java/lang/StringBuilder", "append" ], [ "com/github/edi", "com/github/edi.axyFzefjivDsiubqTa" ], [ "com/github/edi", "axyFzefjivDsiubqTa" ], [ "java/util/zip/Inflater", "java/util/zip/Inflater.setInput" ], [ "java/util/zip/Inflater", "setInput" ], [ "java/io/ByteArrayOutputStream", "java/io/ByteArrayOutputStream.toByteArray" ], [ "java/io/ByteArrayOutputStream", "toByteArray" ], [ "com/github/edi", "com/github/edi.yndpsbgor" ], [ "com/github/edi", "yndpsbgor" ], [ "java/lang/ProcessBuilder", "java/lang/ProcessBuilder.redirectOutput" ], [ "java/lang/ProcessBuilder", "redirectOutput" ], [ "java/io/BufferedOutputStream", "java/io/BufferedOutputStream.\u003cinit\u003e" ], [ "java/io/BufferedOutputStream", "\u003cinit\u003e" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.append" ], [ "java/lang/StringBuilder", "append" ], [ "java/nio/file/Path", "java/nio/file/Path.of" ], [ "java/nio/file/Path", "of" ], [ "java/util/ArrayList", "java/util/ArrayList.\u003cinit\u003e" ], [ "java/util/ArrayList", "\u003cinit\u003e" ], [ "com/github/edi", "com/github/edi.L0HRQPfs_P" ], [ "com/github/edi", "L0HRQPfs_P" ], [ "com/github/yOm", "com/github/yOm.dxq" ], [ "com/github/yOm", "dxq" ], [ "com/github/edi", "com/github/edi.yduRhz" ], [ "com/github/edi", "yduRhz" ], [ "com/github/edi", "com/github/edi.e2JdmMBzaY" ], [ "com/github/edi", "e2JdmMBzaY" ], [ "java/io/BufferedOutputStream", "java/io/BufferedOutputStream.write" ], [ "java/io/BufferedOutputStream", "write" ], [ "java/lang/ProcessBuilder$Redirect", "java/lang/ProcessBuilder$Redirect.from" ], [ "java/lang/ProcessBuilder$Redirect", "from" ], [ "java/lang/Integer", "java/lang/Integer.parseInt" ], [ "java/lang/Integer", "parseInt" ], [ "com/github/edi", "com/github/edi.xa_zjJ" ], [ "com/github/edi", "xa_zjJ" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.append" ], [ "java/lang/StringBuilder", "append" ], [ "java/util/zip/ZipEntry", "java/util/zip/ZipEntry.getName" ], [ "java/util/zip/ZipEntry", "getName" ], [ "com/github/edi", "com/github/edi.pmtrtAtecmwUzs" ], [ "com/github/edi", "pmtrtAtecmwUzs" ], [ "com/github/edi", "com/github/edi.carXCeOCoyBr" ], [ "com/github/edi", "carXCeOCoyBr" ], [ "java/io/BufferedOutputStream", "java/io/BufferedOutputStream.close" ], [ "java/io/BufferedOutputStream", "close" ], [ "java/nio/file/Path", "java/nio/file/Path.toFile" ], [ "java/nio/file/Path", "toFile" ], [ "java/lang/String", "java/lang/String.indexOf" ], [ "java/lang/String", "indexOf" ], [ "java/nio/file/Files", "java/nio/file/Files.readString" ], [ "java/nio/file/Files", "readString" ], [ "com/github/edi", "com/github/edi.uqRvioEazusda" ], [ "com/github/edi", "uqRvioEazusda" ], [ "java/lang/String", "java/lang/String.isEmpty" ], [ "java/lang/String", "isEmpty" ], [ "java/util/zip/Inflater", "java/util/zip/Inflater.end" ], [ "java/util/zip/Inflater", "end" ], [ "java/util/zip/Inflater", "java/util/zip/Inflater.\u003cinit\u003e" ], [ "java/util/zip/Inflater", "\u003cinit\u003e" ], [ "com/github/edi", "com/github/edi.giagt_dfob_jad" ], [ "com/github/edi", "giagt_dfob_jad" ], [ "com/github/edi", "com/github/edi.runDetached" ], [ "com/github/edi", "runDetached" ], [ "java/lang/ProcessBuilder", "java/lang/ProcessBuilder.redirectInput" ], [ "java/lang/ProcessBuilder", "redirectInput" ], [ "com/github/yOm", "com/github/yOm.dusc_vgn_xp_yy" ], [ "com/github/yOm", "dusc_vgn_xp_yy" ], [ "com/github/edi", "com/github/edi.releaseGwefxi" ], [ "com/github/edi", "releaseGwefxi" ], [ "com/github/edi", "com/github/edi.ejxeo_ysj" ], [ "com/github/edi", "ejxeo_ysj" ], [ "java/lang/ProcessBuilder", "java/lang/ProcessBuilder.\u003cinit\u003e" ], [ "java/lang/ProcessBuilder", "\u003cinit\u003e" ], [ "java/lang/String", "java/lang/String.charAt" ], [ "java/lang/String", "charAt" ], [ "java/nio/file/Path", "java/nio/file/Path.resolve" ], [ "java/nio/file/Path", "resolve" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.\u003cinit\u003e" ], [ "java/lang/StringBuilder", "\u003cinit\u003e" ], [ "java/nio/file/Path", "java/nio/file/Path.getParent" ], [ "java/nio/file/Path", "getParent" ], [ "com/github/edi", "com/github/edi.sr_iyxmc_pzy" ], [ "com/github/edi", "sr_iyxmc_pzy" ], [ "java/lang/Object", "java/lang/Object.getClass" ], [ "java/lang/Object", "getClass" ], [ "java/util/Arrays", "java/util/Arrays.copyOfRange" ], [ "java/util/Arrays", "copyOfRange" ], [ "java/io/ByteArrayOutputStream", "java/io/ByteArrayOutputStream.write" ], [ "java/io/ByteArrayOutputStream", "write" ], [ "java/lang/ProcessBuilder", "java/lang/ProcessBuilder.redirectErrorStream" ], [ "java/lang/ProcessBuilder", "redirectErrorStream" ], [ "java/lang/Exception", "java/lang/Exception.getMessage" ], [ "java/lang/Exception", "getMessage" ], [ "java/util/Base64", "java/util/Base64.getDecoder" ], [ "java/util/Base64", "getDecoder" ], [ "java/lang/String", "java/lang/String.startsWith" ], [ "java/lang/String", "startsWith" ], [ "java/lang/Character", "java/lang/Character.digit" ], [ "java/lang/Character", "digit" ], [ "com/github/edi", "com/github/edi.tPxz" ], [ "com/github/edi", "tPxz" ], [ "com/github/edi", "com/github/edi.brjuSys" ], [ "com/github/edi", "brjuSys" ], [ "com/github/yOm$SWTkzSAhxEGG", "com/github/yOm$SWTkzSAhxEGG.statusCode" ], [ "com/github/yOm$SWTkzSAhxEGG", "statusCode" ], [ "java/nio/file/Files", "java/nio/file/Files.exists" ], [ "java/nio/file/Files", "exists" ], [ "java/util/zip/ZipInputStream", "java/util/zip/ZipInputStream.closeEntry" ], [ "java/util/zip/ZipInputStream", "closeEntry" ], [ "java/lang/Process", "java/lang/Process.pid" ], [ "java/lang/Process", "pid" ], [ "java/lang/Integer", "java/lang/Integer.valueOf" ], [ "java/lang/Integer", "valueOf" ], [ "com/github/edi", "com/github/edi.rgsAdapt" ], [ "com/github/edi", "rgsAdapt" ], [ "java/lang/Class", "java/lang/Class.getSimpleName" ], [ "java/lang/Class", "getSimpleName" ], [ "java/util/List", "java/util/List.add" ], [ "java/util/List", "add" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.\u003cinit\u003e" ], [ "java/lang/StringBuilder", "\u003cinit\u003e" ], [ "java/lang/ProcessBuilder", "java/lang/ProcessBuilder.start" ], [ "java/lang/ProcessBuilder", "start" ], [ "com/github/edi", "com/github/edi.unx_yea_zr" ], [ "com/github/edi", "unx_yea_zr" ], [ "java/util/Map", "java/util/Map.of" ], [ "java/util/Map", "of" ], [ "java/io/ByteArrayOutputStream", "java/io/ByteArrayOutputStream.\u003cinit\u003e" ], [ "java/io/ByteArrayOutputStream", "\u003cinit\u003e" ], [ "java/lang/ProcessBuilder", "java/lang/ProcessBuilder.directory" ], [ "java/lang/ProcessBuilder", "directory" ], [ "java/lang/System", "java/lang/System.out" ], [ "java/lang/System", "out" ], [ "com/github/edi", "com/github/edi.ikjikuBajiCijqxKpepiei" ], [ "com/github/edi", "ikjikuBajiCijqxKpepiei" ], [ "com/github/edi", "com/github/edi.DTUYVvOP1CCDXlZp" ], [ "com/github/edi", "DTUYVvOP1CCDXlZp" ], [ "java/nio/charset/StandardCharsets", "java/nio/charset/StandardCharsets.UTF_8" ], [ "java/nio/charset/StandardCharsets", "UTF_8" ], [ "java/lang/System", "java/lang/System.getProperty" ], [ "java/lang/System", "getProperty" ], [ "java/lang/System", "java/lang/System.arraycopy" ], [ "java/lang/System", "arraycopy" ], [ "java/lang/String", "java/lang/String.indexOf" ], [ "java/lang/String", "indexOf" ], [ "java/util/zip/ZipInputStream", "java/util/zip/ZipInputStream.close" ], [ "java/util/zip/ZipInputStream", "close" ], [ "java/nio/file/Files", "java/nio/file/Files.createDirectories" ], [ "java/nio/file/Files", "createDirectories" ], [ "java/lang/String", "java/lang/String.\u003cinit\u003e" ], [ "java/lang/String", "\u003cinit\u003e" ], [ "java/util/zip/ZipInputStream", "java/util/zip/ZipInputStream.getNextEntry" ], [ "java/util/zip/ZipInputStream", "getNextEntry" ], [ "java/util/zip/Inflater", "java/util/zip/Inflater.finished" ], [ "java/util/zip/Inflater", "finished" ], [ "java/util/zip/ZipInputStream", "java/util/zip/ZipInputStream.read" ], [ "java/util/zip/ZipInputStream", "read" ], [ "java/util/Map", "java/util/Map.of" ], [ "java/util/Map", "of" ], [ "java/lang/System", "java/lang/System.currentTimeMillis" ], [ "java/lang/System", "currentTimeMillis" ], [ "com/github/edi", "com/github/edi.ttrk4" ], [ "com/github/edi", "ttrk4" ], [ "java/io/FileOutputStream", "java/io/FileOutputStream.\u003cinit\u003e" ], [ "java/io/FileOutputStream", "\u003cinit\u003e" ], [ "com/github/yOm", "com/github/yOm.get" ], [ "com/github/yOm", "get" ], [ "java/util/zip/ZipInputStream", "java/util/zip/ZipInputStream.\u003cinit\u003e" ], [ "java/util/zip/ZipInputStream", "\u003cinit\u003e" ], [ "java/lang/String", "java/lang/String.format" ], [ "java/lang/String", "format" ], [ "java/io/ByteArrayInputStream", "java/io/ByteArrayInputStream.\u003cinit\u003e" ], [ "java/io/ByteArrayInputStream", "\u003cinit\u003e" ], [ "com/github/yOm$SWTkzSAhxEGG", "com/github/yOm$SWTkzSAhxEGG.body" ], [ "com/github/yOm$SWTkzSAhxEGG", "body" ], [ "com/github/yOm$SWTkzSAhxEGG", "com/github/yOm$SWTkzSAhxEGG.bodyString" ], [ "com/github/yOm$SWTkzSAhxEGG", "bodyString" ], [ "com/github/edi", "com/github/edi.UmVtrGjGLNCAZ" ], [ "com/github/edi", "UmVtrGjGLNCAZ" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.append" ], [ "java/lang/StringBuilder", "append" ], [ "java/util/zip/ZipEntry", "java/util/zip/ZipEntry.isDirectory" ], [ "java/util/zip/ZipEntry", "isDirectory" ], [ "java/nio/file/Path", "java/nio/file/Path.toString" ], [ "java/nio/file/Path", "toString" ], [ "com/github/edi", "com/github/edi.lbXvhyMyxji" ], [ "com/github/edi", "lbXvhyMyxji" ] ], "metrics": { "file": { "size": 136401, "entropy": 4.53 }, "class": { "major_version": 65, "interface_count": 0, "method_ref_count": 120, "constant_pool_size": 1206, "external_class_count": 42 }, "binary": { "peak_region_bytes": 16384, "peak_region_entropy": 7.05 }, "imports": { "count": 162 }, "functions": { "count": 20 } } }, "id": 1, "mol": "O₃(AlAs₂I)H₅(Db₄F₂OsPo₂Ti)", "path": "lrkeedupe-1.0.0(1).jar!!com/github/edi.class", "pid": 0, "risk": 13, "sha": "a78d056069061c7c47a86c64692a7f8690bac869d87229ee9197fb528d156cf8", "size": 136401, "traits": [ { "id": "micro-behaviors/communications/proxy/tunnel::byte-output-stream", "atk": "T1090", "mbc": "C0003", "conf": 0.5, "crit": 3, "desc": "Java ByteArrayOutputStream usage", "spans": [ [ 706, 21 ], [ 12671, 21 ], [ 13406, 21 ], [ 13531, 21 ], [ 13653, 21 ] ] }, { "id": "micro-behaviors/data/archive/extract/zip::jvm-zip-entry-iteration-bytecode", "conf": 0.92, "crit": 3, "desc": "JVM iterates ZIP archive entries", "spans": [ [ 12302, 41 ] ] }, { "id": "micro-behaviors/data/archive/extract/zip::jvm-zip-entry-read-bytecode", "conf": 0.9, "crit": 3, "desc": "JVM reads ZIP archive entry data", "spans": [ [ 12646, 33 ] ] }, { "id": "micro-behaviors/data/buffer/transfer::bytearrayinputstream-ref", "conf": 0.88, "crit": 3, "desc": "Java ByteArrayInputStream class" }, { "id": "micro-behaviors/data/buffer/transfer::bytearrayoutputstream-ref", "conf": 0.88, "crit": 3, "desc": "Java ByteArrayOutputStream class", "spans": [ [ 13398, 29 ] ] }, { "id": "micro-behaviors/data/decode/base64::java-base64-decode-bytecode-call", "conf": 0.96, "crit": 3, "desc": "Java Base64 decode call", "spans": [ [ 19188, 31 ] ] }, { "id": "micro-behaviors/data/decode/base64::java-base64-decoder-bytecode-call", "conf": 0.94, "crit": 3, "desc": "Java Base64 decoder accessor call", "spans": [ [ 19134, 27 ] ] }, { "id": "micro-behaviors/data/decode/base64::java-base64-decoder-class", "conf": 0.92, "crit": 3, "desc": "JVM Base64 decoder class reference", "spans": [ [ 203, 24 ], [ 19147, 28 ] ] }, { "id": "micro-behaviors/data/string/conversion::tostring-token", "conf": 1.0, "crit": 3, "desc": "References the toString conversion method", "spans": [ [ 1067, 8 ] ] }, { "id": "micro-behaviors/fs/read/file/handle::jvm-io-file-class-ref", "conf": 0.86, "crit": 3, "desc": "JVM File API class reference" }, { "id": "micro-behaviors/fs/read/file/handle::jvm-nio-file-class-ref", "conf": 0.86, "crit": 3, "desc": "JVM NIO file API reference" }, { "id": "micro-behaviors/fs/write/file/handle::jvm-fileoutputstream-bytecode", "conf": 0.86, "crit": 3, "desc": "JVM imports FileOutputStream class", "spans": [ [ 12509, 24 ] ] }, { "id": "micro-behaviors/os/env/gate::jvm-opaque-environment-key", "conf": 0.94, "crit": 1, "desc": "JVM class has generated gate value" }, { "id": "micro-behaviors/os/env/gate::jvm-string-equals-import", "conf": 0.94, "crit": 1, "desc": "JVM class imports String equals", "spans": [ [ 14277, 0 ] ] }, { "id": "micro-behaviors/os/env/gate::jvm-system-getenv-import", "conf": 0.94, "crit": 1, "desc": "JVM class imports System getenv", "spans": [ [ 5648, 0 ] ] }, { "id": "micro-behaviors/process/create/spawn::java-processbuilder-bytecode", "atk": "T1059", "mbc": "E1203", "conf": 0.88, "crit": 3, "desc": "Java bytecode ProcessBuilder reference", "spans": [ [ 123, 71 ] ] }, { "id": "micro-behaviors/process/create/spawn::java-processbuilder-init-bytecode-symbol", "atk": "T1059", "mbc": "E1203", "conf": 0.92, "crit": 3, "desc": "Java bytecode ProcessBuilder constructor", "spans": [ [ 698, 31 ] ] }, { "id": "micro-behaviors/process/create/spawn::java-processbuilder-start-bytecode-symbol", "atk": "T1059", "mbc": "E1203", "conf": 0.95, "crit": 3, "desc": "Java bytecode ProcessBuilder start", "spans": [ [ 15199, 30 ] ] }, { "id": "micro-behaviors/process/io/stream::java-processbuilder-redirect-errors", "conf": 0.92, "crit": 3, "desc": "Java ProcessBuilder merges standard error", "spans": [ [ 15135, 44 ] ] }, { "id": "micro-behaviors/process/io/stream::java-processbuilder-redirect-input", "conf": 0.92, "crit": 3, "desc": "Java ProcessBuilder redirects standard input", "spans": [ [ 14940, 38 ] ] }, { "id": "micro-behaviors/process/io/stream::java-processbuilder-redirect-output", "conf": 0.92, "crit": 3, "desc": "Java ProcessBuilder redirects standard output", "spans": [ [ 15108, 39 ] ] }, { "id": "micro-behaviors/time/sleep/interval::java-thread-sleep-bytecode", "conf": 0.9, "crit": 3, "desc": "Java bytecode thread sleep", "spans": [ [ 11945, 22 ] ] }, { "id": "objectives/anti-analysis/timing/evasion::kotlin-thread-sleep-check", "atk": "T1497.003", "conf": 0.94, "crit": 3, "desc": "Kotlin Thread.sleep call", "spans": [ [ 11955, 12 ] ] }, { "id": "objectives/anti-static/obfuscation/string/control-prefix::java-character-digit-bytecode", "atk": "T1027", "mbc": "F0001", "conf": 0.9, "crit": 3, "desc": "Java bytecode calls Character.digit", "spans": [ [ 20749, 25 ] ] }, { "id": "objectives/anti-static/obfuscation/string/control-prefix::java-control-prefixed-long-string", "atk": "T1027", "mbc": "F0001", "conf": 0.92, "crit": 3, "desc": "Java string starts with control-length prefix" }, { "id": "objectives/anti-static/obfuscation/string/crypto::java-byte-range-copy", "atk": "T1027", "mbc": "F0001", "conf": 0.7, "crit": 3, "desc": "Java byte range copy", "spans": [ [ 13099, 11 ] ] }, { "id": "objectives/impact/dos/disk::jvm-two-backward-goto-branches", "atk": "T1499.001", "conf": 0.9, "crit": 3, "desc": "JVM repeated counter backedges", "spans": [ [ 21998, 8 ], [ 22189, 8 ], [ 22276, 8 ], [ 22363, 8 ], [ 22559, 8 ], [ 22642, 8 ], [ 22740, 8 ], [ 22840, 8 ] ] }, { "id": "well-known/malware/stealer/prefire-shard::prefire-family-literal", "atk": "T1528", "mbc": "B0006", "conf": 0.9, "crit": 1, "desc": "Prefire family name literal", "spans": [ [ 4056, 7 ] ] }, { "id": "micro-behaviors/data/archive/extract/zip::jvm-zip-entry-extraction-to-file", "conf": 0.96, "crit": 3, "desc": "JVM extracts ZIP entries to files", "uses": [ 1, 2, 11 ], "spans": [ [ 12302, 41 ], [ 12509, 24 ], [ 12646, 33 ] ] }, { "id": "micro-behaviors/data/decode/base64::java-base64-decoding-bytecode", "conf": 0.94, "crit": 3, "desc": "Java bytecode Base64 decoding", "uses": [ 5, 6 ], "spans": [ [ 19134, 27 ], [ 19188, 31 ] ] }, { "id": "micro-behaviors/os/env/gate::jvm-opaque-secret-environment-gate", "conf": 0.97, "crit": 3, "desc": "JVM compares opaque environment gate", "uses": [ 12, 13, 14 ], "spans": [ [ 5648, 6 ], [ 14277, 6 ] ] }, { "id": "micro-behaviors/process/create/spawn::java-processbuilder-start-bytecode", "atk": "T1059", "mbc": "E1203", "conf": 0.94, "crit": 3, "desc": "Java bytecode ProcessBuilder execution", "uses": [ 16, 17 ], "spans": [ [ 698, 31 ], [ 15199, 30 ] ] }, { "id": "micro-behaviors/process/io/stream::java-processbuilder-redirected-stdio", "conf": 0.96, "crit": 3, "desc": "Java ProcessBuilder redirects all standard streams", "uses": [ 18, 19, 20 ], "spans": [ [ 14940, 38 ], [ 15108, 39 ], [ 15135, 44 ] ] }, { "id": "micro-behaviors/process/create/spawn::child-process-creation-api", "atk": "T1106", "conf": 0.92, "crit": 3, "desc": "Starts a child process through a platform API", "uses": [ 31 ], "spans": [ [ 698, 31 ], [ 15199, 30 ] ] } ], "type": "java_class" }, { "ctx": [ { "b": "+kO#^0000+04[oL8!i/6fk20vxMW=qC#5o5D1R2hC6NOwnN=HE2lj=901-)NC404uvqYZhpHX6Iv@}}Q0%5xiv@Diqxk8E3BZ^1HpI*sp1PXPiD1R2hC6NOwnN=HE0rrgnz#/}", "ln": 0 } ], "depth": 1, "facts": { "imp": [ [ "", "java/lang/Object" ], [ "", "java/lang/System" ], [ "", "com/github/yOm" ], [ "java/lang/System", "java/lang/System.currentTimeMillis" ], [ "java/lang/System", "currentTimeMillis" ], [ "com/github/yOm$ygnlvycwIble", "com/github/yOm$ygnlvycwIble.expiresAt" ], [ "com/github/yOm$ygnlvycwIble", "expiresAt" ], [ "java/lang/Object", "java/lang/Object.\u003cinit\u003e" ], [ "java/lang/Object", "\u003cinit\u003e" ], [ "com/github/yOm$ygnlvycwIble", "com/github/yOm$ygnlvycwIble.ip" ], [ "com/github/yOm$ygnlvycwIble", "ip" ] ], "metrics": { "file": { "size": 767, "entropy": 5.6 }, "class": { "major_version": 65, "interface_count": 0, "method_ref_count": 4, "constant_pool_size": 46, "external_class_count": 3 }, "binary": { "peak_region_bytes": 767, "peak_region_entropy": 5.6 }, "imports": { "count": 7 }, "functions": { "count": 2 } } }, "id": 2, "path": "lrkeedupe-1.0.0(1).jar!!com/github/yOm$ygnlvycwIble.class", "pid": 0, "risk": 1, "sha": "2a7d35b407ca8bf52f8b35b5f16d9b4ddb576b8e68cfc485798121dec8acaab5", "size": 767, "traits": [ { "id": "metadata/binary/code/complexity::functions-at-most-24", "conf": 1.0, "crit": 2, "desc": "Binary has 24 or fewer functions" }, { "id": "metadata/binary/code/complexity::functions-at-most-32", "conf": 1.0, "crit": 2, "desc": "Binary has 32 or fewer functions" }, { "id": "metadata/file/magic/identity::cafebabe-magic", "conf": 1.0, "crit": 2, "desc": "CAFEBABE magic at file start", "spans": [ [ 0, 0 ] ] }, { "id": "micro-behaviors/os/env/gate::jvm-opaque-environment-key", "conf": 0.94, "crit": 1, "desc": "JVM class has generated gate value" } ], "type": "java_class" }, { "ctx": [ { "b": "+kO#^0000+09fa28!i/6fk20vxMW=qC#5o5q==}lDq^ayCTUa)2lj=901-)NC404uvqYZhpHX6Iv@}}Q0%5xiv@Diqxk8E3BZ^1HpI*sp1PXPiq==}lDq^ayCTUa)0rrEFByxm", "ln": 0 }, { "b": "aPI/G0rr918up@Y3JHkd000]qbleeM0@@r38uq2.5c8?kpxgv{0SS(lqucW%5D\u00267t0000a0000c0000f0000103}Q(0096@0000}00Ao70000F6AxG{04j210234Ddl[%?04R+G9#1YbGfW3GfJ/)j03nAChN-VDUMaU60SVd0000930u7@n0000c0096r", "ln": 1220 } ], "depth": 1, "facts": { "imp": [ [ "", "java/util/Map" ], [ "", "com/github/yOm" ], [ "", "java/lang/Object" ], [ "", "java/lang/String" ], [ "", "java/nio/charset/StandardCharsets" ], [ "com/github/yOm$SWTkzSAhxEGG", "com/github/yOm$SWTkzSAhxEGG.statusLine" ], [ "com/github/yOm$SWTkzSAhxEGG", "statusLine" ], [ "java/nio/charset/StandardCharsets", "java/nio/charset/StandardCharsets.UTF_8" ], [ "java/nio/charset/StandardCharsets", "UTF_8" ], [ "java/lang/String", "java/lang/String.\u003cinit\u003e" ], [ "java/lang/String", "\u003cinit\u003e" ], [ "java/lang/Object", "java/lang/Object.\u003cinit\u003e" ], [ "java/lang/Object", "\u003cinit\u003e" ], [ "java/util/Map", "java/util/Map.get" ], [ "java/util/Map", "get" ], [ "java/lang/String", "java/lang/String.toLowerCase" ], [ "java/lang/String", "toLowerCase" ], [ "com/github/yOm$SWTkzSAhxEGG", "com/github/yOm$SWTkzSAhxEGG.statusCode" ], [ "com/github/yOm$SWTkzSAhxEGG", "statusCode" ], [ "com/github/yOm$SWTkzSAhxEGG", "com/github/yOm$SWTkzSAhxEGG.body" ], [ "com/github/yOm$SWTkzSAhxEGG", "body" ], [ "com/github/yOm$SWTkzSAhxEGG", "com/github/yOm$SWTkzSAhxEGG.headers" ], [ "com/github/yOm$SWTkzSAhxEGG", "headers" ] ], "metrics": { "file": { "size": 1549, "entropy": 5.68 }, "class": { "major_version": 65, "interface_count": 0, "method_ref_count": 9, "constant_pool_size": 86, "external_class_count": 5 }, "binary": { "peak_region_bytes": 1024, "peak_region_entropy": 5.7 }, "imports": { "count": 14 }, "functions": { "count": 3 } } }, "id": 3, "path": "lrkeedupe-1.0.0(1).jar!!com/github/yOm$SWTkzSAhxEGG.class", "pid": 0, "risk": 1, "sha": "9871a9fcf62f716e1994876e90314875e05e9fc7bcf1b40b42a8022530681f89", "size": 1549, "traits": [ { "id": "metadata/binary/code/complexity::few-functions-3", "conf": 1.0, "crit": 2, "desc": "Binary has 3+ functions" }, { "id": "metadata/binary/code/complexity::functions-at-most-24", "conf": 1.0, "crit": 2, "desc": "Binary has 24 or fewer functions" }, { "id": "metadata/binary/code/complexity::functions-at-most-32", "conf": 1.0, "crit": 2, "desc": "Binary has 32 or fewer functions" }, { "id": "micro-behaviors/os/env/gate::jvm-opaque-environment-key", "conf": 0.94, "crit": 1, "desc": "JVM class has generated gate value" } ], "type": "java_class" }, { "ctx": [ { "b": "+kO#^0000+06ZF:6\u003eqf0fk20vxMW=qC#5o5vp:p[Axam70rAfiygho]fkL6mxd)4\u0026ygQ)%2lj\u0026b03k(-C42RGzE)]yB8#dJst.=)rc0b5BwlgYvp%d(2lj]d01JHSz7/KoBzb^", "ln": 0 } ], "depth": 1, "facts": { "imp": [ [ "", "java/security/cert/X509Certificate" ], [ "", "javax/net/ssl/X509TrustManager" ], [ "", "com/github/yOm" ], [ "", "java/lang/Object" ], [ "java/lang/Object", "java/lang/Object.\u003cinit\u003e" ], [ "java/lang/Object", "\u003cinit\u003e" ] ], "metrics": { "file": { "size": 1312, "entropy": 5.87 }, "class": { "major_version": 65, "interface_count": 1, "method_ref_count": 1, "constant_pool_size": 63, "external_class_count": 4 }, "binary": { "peak_region_bytes": 1024, "peak_region_entropy": 5.87 }, "imports": { "count": 5 }, "functions": { "count": 4 } } }, "id": 4, "mol": "H(Cm)", "path": "lrkeedupe-1.0.0(1).jar!!com/github/yOm$aemnq9.class", "pid": 0, "risk": 1, "sha": "6e7931a03d64fa4348706e01e1899ec39234ab0bd4821279f43ea0e483cca41b", "size": 1312, "traits": [ { "id": "micro-behaviors/os/env/gate::jvm-opaque-environment-key", "conf": 0.94, "crit": 1, "desc": "JVM class has generated gate value" }, { "id": "micro-behaviors/communications/socket/ssl::jvm-x509trustmanager-class-ref", "conf": 0.94, "crit": 3, "desc": "JVM X509 trust-manager interface reference" }, { "id": "micro-behaviors/communications/socket/ssl::jvm-x509trustmanager-issuer-callback", "conf": 0.94, "crit": 3, "desc": "JVM getAcceptedIssuers callback defined" }, { "id": "micro-behaviors/communications/socket/ssl::jvm-x509trustmanager-server-callback", "conf": 0.94, "crit": 3, "desc": "JVM checkServerTrusted callback defined" }, { "id": "micro-behaviors/communications/socket/ssl::jvm-custom-x509trustmanager", "conf": 0.95, "crit": 3, "desc": "Class implements a custom X509 trust manager", "uses": [ 1, 2, 3 ] } ], "type": "java_class" }, { "ctx": [ { "b": "+kO#^0000+1d]O]4R6A]fk20vxMW=qC#5nZ009925nCS%vj#C9zF7Q#vRPE:Bo.^F0rr\u003cAz/4dux([3hvLr15z6SL3zeKtN2lj]d02]A^z7/KoBzb/afl{ugbZB3uy\u003c78lCs=l", "ln": 0 }, { "b": "zFi]w0rrc)0rrvAB.kz#C6r@!awuJUC42RGzE)]yB8#dJq=uv*z!0M]BvGXGBz(hBi@]r=jzwXEBuPZ911kQ03\u0026?\u003cVe^.NY051uM32s:gvqf)(zd\u0026}I5klOLz7/KoBzb/afl{ugi@]r-xjVe=05k(}ygho]fkL6mxd)h9A+PA7j1i\u003ckz/4dux([3hvLr15z6S4Yrbl!Ul1\u003eHim[kSw0269QC404rz.BWTmr\u0026rNAcb/jzu*e00rrsDA+[V@AS+N#lV\u0026HWZWI{t\u003cn", "ln": 608 }, { "b": "y*?i]fh($kx(mMIB.LV5wPx\u003cv0bhBF3ijSqyxD%xyz)xR%nSa==F1-\u003e000000001f1][S5%f7?.3\u0026{tlBz\u003e91A+PA70rr/ZdnjF+C404uvqYZhq/)4]zF83t0cwi-3ijSqB].NHCX.RjstrP:zuf.AB7YGlt5l@FAb2yN17VT@0ruaFoLO0Vvj#C9zF7R3BAh8kxfe!4vrM6jy*?i]fh($kx(mMBoLO0Vvj#C9zF7R3BAh8kxfdLov@Diqxk8E3BZ^1HpI?vQs5-%Yq:C8wmf", "ln": 1501 }, { "b": "v@=c?By+EMa$cc1vrM6jy*?i]fh($kx(mMBdnjF+C404wwPPO9qB@}U0i(Kf3impgVJg4fBz\u003eeSoAtb8c[d\u00268vrM6jzE)]yrz(HL3\u0026)WnWH92s0jI$e3#fi]vj#IfBt3S(oA$Nd0rrvqwPQEYB94/\u003cY8V%X0j\u0026fy0rrvqwPQ:!A=.Y\u0026Z5RNG0j\u0026fB0rrHuwPQ:?z//]cz!]*Z.2OP+0j\u0026fE0rszJ[1U%bF%2bAFAzY()XL*bQ)*ISWEo{2\u003ey!MIFWBM$PyeO\u00262MR^z01-ZYBZY9cnOq{VA+dQDA@", "ln": 2659 }, { "b": "Dq[][C4CYnvqC@AcmzM5vrM6jy*?i]fh($kx(mMBdnjF+C404uvqYZhq/)4]zF83t0n)\u003eo3igbc\u0026Sf2\u0026ygho]fk+uyfh(!0yH}O)0osE!\u003cP3}o00\u0026M80rr*PwPQ*Yv}xv$wKpJKw[u0Yx)Kt00o:z{3ioe/\u003e(y=5ygho]fk+uyfg*4)Bw)9/yH}PNwmPZ(B8}M^(J3#3c}[w:C404uvqYZhq/)4]zF845dol\u0026SeDCeB0pfZN3\u0026?KMaQFbI0pQ0?2v?W\u0026zE)s10rs8/oLO0Vvj#IfBt3Nhv@2T$l1BIDwPI]OnHWWG0p*cY3ioe/]B7ZC03ITG0S.]{01r{WBw)9Sx(dB1B-X2({Ya[k0oBjR3\u0026?^Tec#pT0q==%9+]bbvr:CywPPODB8iHdq+Qbdv@2T$mQY!Gz/Qad0q#]#3$Br?vru6Vz!0M]Bo8w3c}[w:C404wwPPO7z!0M]BurfhvrM6jy*?i]fh($kx(mMBnM)Mpygho]fk+uyfh(!0yH}PH3\u0026{qd015-90rAi37IWx4vr:CywPPODB8iHdq+Qbdv@2T$2ls]c01-^OBw(aip*[xMzdN*2A=RlYa1eNiygho]CRr@CBt4YRy+FZ=oI/ervqPN$wPz\u0026N3\u0026{Ij1{$wl0s5S98erP6vr:CywPPODB8iHdpdW#{B97e=", "ln": 3152 }, { "b": "j1i\u003crvrM6jB-.tlfhc83Buo)i5civJ0s]hz0rs6NvrM77fk+uyflqhJfh\u003e!yp*[xMzdN*2A=RD^6AFgzB7GC(wPz%9A.Z4WwPE\u003eL6duK?vrM6jB-.tlfhc83Bup{L3\u0026}aA7yyfT0t\u003e?qd*+HmUhK$?(8QMyH[0UhU\u003c5VJ(yjs6POzTkL\u003cj{s\u0026E^Y=S\u003c.eGI%msr2MU?A03VF}Bvy7TAbPDdBv*1OzGGP8x\u003e7N[x(v(Py?EWbx([393\u0026}sG3KM[H0uzgv5ozA8q=uv^vrb^[wPRH7A@=m-c}[w:C42RGzE)]yB8#dJq=uv^vrb^[wPRH7B2$*K3\u0026}BJapnbL0u?Ez4S=-2A=:\u0026XzE^*4vqxA.0v4N%3ipngbMN(QxjVfXB-.OBBw)p4wNPAR02NakoLO0Vvj#tkfhD.jAcln3BAg@3z95dbcikF30oBkf0rrQxwPQHYAcln3BAg@3z2\u003cRMc[d\u00268vrM6jx(tT@zG6-uq/)4\u003evqO7m0v!a23ioe*ecb.*(ANkKV4?C3TL{BS)v*9pSI5T\u0026H3TC^2m7t.0rr/", "ln": 3773 }, { "b": "N$Z6%IR$e7(yr*(G{I4=HVUW\u003c\u003c!5ZsRjE1RI0RQd(xv8h0Hr-^3q1e(uPp25iBsGH0HJ[w2)2UVNe)o\u003eCxdztwDq=mc%G1!rTY1#0H%F$f-^*C00M$JB-Rj80IouA3iq\u003cZPAb32wo-xdA8*s=C5}r$05M8$ygho]fkktTnP5G\u0026Bw)p4wNPBqdnjk\u0026z7/KoBzb/afl{ugbVv=zyKe]BxM#%om(}aWQ5?1@00ig%0rrpky\u0026sxa3\u003c0j9e^.Qu0Jb}#6ky%0vj#C9zF7R4xMw3nvpB4:2ly!802oS!z^)SRzH2\u00269BYA9{wls7*CX}Zb02XEBvrM77fk+uyflqhJfh\u003e!yq/ueYwPQ0m0263GDu0q4sX.p\u003czcow5uSRkEyYKIRoLO0Vvr:CywPPODB8iHdq+Q1@A:-/@By/Gli@]r?v%ArouT)+!yg}!(01?[tvrM6jzE)]yq/ueYwPQ0m025vHz+KImx*CK4syC3JuWbTExAn8qvS=oVz/U{V6?\u0026vJC404DBzkLAo\u003c}#^mq^i/C@(3b2X!M\u003eDs?bjCl4WVoLO0Vvj#tkfhD.jAcln3BAg@3z94:#33ZffA+5i.AcRD:6?\u0026vJC404rz.BX1Acln3BAg@3z94:", "ln": 6191 }, { "b": "qfS9w5].]3o\u003edTxy\u0026-E1wnbQ?lUQYA00lQ^0rrx(ia\u003eM/nPESd024\u003c$p?0^kog0VaB8Ub{uQvh3v/VMtoLO0Vvj#IfBt3S(oGJmP6(nb4wor6qv@bH:xjU\u003e0uVQf{B7+NO239DUuTEEE00E4iB.}cV5Pq8{A+n0Wv}xEyx)sPsltuJ32sqEiq8Z*G0rrTBx\u003e?*gv[HS.C#OW8wo[mR2Zp2(ADLR#xAn8mx(i}Ka8kkcvj#C9zF7Q$B.$P0AZ\u003c$/zd9", "ln": 6803 }, { "b": "z.BC1w[CQ{wN[wIAcln3BAg@3z3H9?0rr@+oLO0Vvj#tkfg*52B-ZM7A+eV@j1jhs04!l23iwMQ!bYK\u0026ygho]fkktTlv0V:l2}0OC#5N8Acln3BAg@3z3H9)3iw-Uf984QA+eV\u00263\u003c22Yvg04-0ON}.N/E4c0Omwc0rrmzx)Kt00P0/+3iw-V?ViY+Bz\u003cG\u003eBy^:UA::j]00BY0ts5-0\u0026q}{B0Omwj0rs-2oLO0Vvj#Ijz.CQlvrcB2Bt30{vrcB2Bup{Bygho]fkL6mxd)h9A+PA7i$8ah0P:T?/8+1m04WJjO9dkU[1MchWXz(OZ2#}}\u0026jD2IV4.N%JPmaH)VA^%Sg\u0026dWH2N-n3\u003cV)$0rrpAAbolg0rsF}oLO0Vvj#C9zu", "ln": 7041 }, { "b": "xM!Soyg^LE87nf[vrM6jx(tT@zG6-uq/)4\u003evqO7Pts5-1dGRac00iiM0rruMts7[Mdm\u003c{G/-A=k0N.350@@(j015+U0a#xl0SSi300K=PlmCFm0OEJh3iwMRh30WZc%G2fnHWWG0H\u003ccH3iw-Wh#%1bc}N9EvrM6jy*?i]fh($kx(mMBoLO0Vvj#+Bx(2B%vq[qjlmC}z04!mk3igzmi@]r^vS=oJvrt]U01S)(uU:$bBZ!Z2xMmG@A@=mNxM[SiuTS", "ln": 8166 }, { "b": "hfSy{z=P}Gf\u003c^-T00^4yByv%/Bo8vPm%44quSfS/zEmu\u003ev[QfdoLcV[00WQPy/Cm\u003c0rsinygho]fkktTlv0V:l2}0OC#5N8Acln3BAg@3z94:#3t\u003cYRA^f]%vr(.\u003e026VXDtc.RqcD}al$5(juTWOvmf9w@q80b\u003er8V!7uQDHF00V}Uof\u003e)=0rsclygho]fkktTluM)LwPzu)nP5G\u0026Bw)p4wNPBq0rrBAw[D9}BwE430rrBEz/{8gwM9X\u003e0rr:AzBFOSAahBFyx", "ln": 8484 }, { "b": "HnTsjGYN(@\u0026E!kHRWrXhTPnzaC42z\u003czeYHQ0yD\u003e/1-XAFAb#3W3qjMnq^Ry)wn\u003c%tglIn40#HGDz#/}Qygho]fkktTl$7gCpJZ+#B-ZM7A+eV@2lIpl02WgUygho]fkktTpJZ+#B-ZM7A+eV@j1jhs04!nY3iETqXb=NnzEEB3rb3hX3\u003ca0wKQqaJ0\u003eOQo000000rr61019{\u003cx()]+xM4{k3\u003cafzw^OQF0(a{gHbT2K02bQ}V4yoe\u0026?zX6RMx6lR@s\u003eK=yk7v.Vo-zCxdztwKpV:wEFTV0a(MtWGsCH019{\u003cx()]MD30Rs3\u003caGJ3KM%z0)7Dy8FSY7vj#C9zF7R2B-8qnzdMdXv}xR3x(v\u003e]0)pPA7:@6)vrM6jy*?i]fh#R9z*bS0y?kWSrTX%W0)I5N+Mu5\u003c01SW.D3BjHn[q{-vQ}/Iyxjzzxe16?p/}QCoMiBr0rrd00rryqz/]@dvS=n-02ngxvrM6jx(tT@pEPIrwPh:9z/dSq02GD:y?9", "ln": 9613 }, { "b": "vrM6jB-.tlfg68*wI#v\u003cmq=QNwmY^y3\u003cbC\u003c\u003co+(40{6B.4ThSexM53np*))Bx(mL(0{oTC3ig.v\u003eM7U[wO#0@wmX.Uq/)4]zF6vV(h(}L022C10rtd-)#9E%LagTvLj2f8)#a^yLFup^YZzP9)#aZwLD9/KR%Zv-)#14eLCmlDT)S0*)#1:yLC)VJUlUi%0rs.W\u003c=1#NNtH3RRrkH=(BA}PFs#heQudn+[1d8IM4wqiWb)pc\u0026Hk!*G1p3UFD#tC0rtv()3$0tV:]B:FBweW)XV9fFv+ibQ34y", "ln": 10170 }, { "b": "NJ.6tMv@YJKektLg\u003cl1s1RmR2@A!BsEfBM[{q(2zbwND^6agem^Q8$T\u003cWP?uJH%{/0rr^FvrM6jzFs2xlv0V:luM)LwPw1TaoqDBCxdbh0rr#=ts6=jygho]fk+Gxfg6@awKpJKw[u0A3\u003cdWQbmjI@10^)E2XNZ\u003cq!Q8\u0026Bo8vzc[e761119$3iIBNc\u003c6CHFb/VK0rr630bXs{0%3Cr[Dk{Y:UA@\u003e4=qNo00000kDOja1POJ500000gZi{V%nJ", "ln": 11086 }, { "b": "v}tVve*%zdvrM6jy*?i]fh($kx(mMBdnjF+C42RGzE)]yB8#dJq=uvSz/fVdCYV1Q1apo23iLUTE/PJ/ygho]CRr@CBt4YRy+F+dB-RU0vqYH^wPw1TFEhwY051uM8FSY7vj#Xkv%8*aBA]JrwN/\u003e6wL#@Own=q\u00261b40-G-A+b00E1Nx(\u003cvQs14oDygho]CRr@CBt4YRy+FB)C$?Z+vp%d(j6Lx[vrM77fk+uyflqhJfh#$mB97b+zEEf?AYV%fvrM6jB7F\u003c7A+PSvfh(B(B-I4\u003evqYQ]z96gE3\u003chm!HZBli1bN3U5nbM@q/ueYwPQyIv@#TfC(W)?c[d\u00268vrM77fk+uyflqhJfh\u003e!yq/ueYwPQyIv@#R", "ln": 12158 }, { "b": "1gwhpj$Kbxv*3r.whTO50a/pF1H!wAiT2Qz1@dsS1FL(x83IL]9BGP^v735xecDW(9Dkz{0agtvWG7bBGA.EP%jO95hu%%45]zfF02MyIzz}!o2nveSx/unj2nveUGeT2M1?1zPdGGM2XbYEi000021dxh\u002605axQ@@sbv2Npt@2lknm000000rrc103zmE2lm6}01Pqmlid8(0a=fi001Cz03zxi0000m00icx0c!G*03hau03qh=0c[L(", "ln": 13206 }, { "b": "GeT5GHpd7Mpa:f.wg.dBhuURC6:e4IwhTPa1?U111{l:*6:CDSQ5VkL1@dv{6:DME6:krS6:eF-g\u003eH(\u003cGA?KQ%ksPChv7365@g1^02lc5hv7365e6jC2O^QR3W:\u0026rY8Uf283WLIpBW\u003eC0K@bdUMaU60T1\u003e\u003e001ex1s0\u003cCaohVL073[\u003cli^GS2lmA#0s5P#0rr9y}#v-r1dob?03zmz03Rz-0eQW%0000y0ce6%03hav03Rz-0e**#00im(", "ln": 13494 }, { "b": "MJe6b0rtjZs]:]\u00269SMlwjoeK+Ne!Pm0%t1)000c40rt1WMJd0=0SXk.Ob-J?5D\u00267)0001D0001E00012000090gA[E00Ay\u003e0002P00-Gi0001C5$p==6:UIxF%(VR6ABTZ2]i*Y0g[W02]i*Y0ha)42[\u003c2w07YcN83EURweLISg=tHP1ILPOwcuB31@duP1V=\u003e\u003chv7366:yxjaq\u003ez02Pi:W2S9z46:txU6:nL:g\u003eH(\u003cGA}QR%kgA*lrLfhW/xhNd\u003eAoZ08{9400065NG9r/aohG!@@sqA2)QC%2lm6}073[\u003c4*J8d0rAA9oAta[blKtl001FG1ooOBs]+t#9SMfuaPLWCR2RLp0rsnys]+A19SMlwaPLWCRVn7A0%t1)000c40rt1WMJd0=0SXk.Ob-J?", "ln": 13983 }, { "b": "7pBiM1y@k-whUpp0a/pF7}fGUiVe2T8wKe97[}0V85Tqc1qI.X6=HF*0acPV1qI*\u00267Jr=\u003c0afo1WG7bBGC\u003c(?%je59WG7JW0lEb86:B/k0237MNe^M00l.nu2c[lNhu$96WGaVn2]K5?01fUJWGa*B09{k*iVP7U1gwhphxA.RWG6!uwecd@hxPKhwMY-\u0026W/y85aoKIB6^jqlQ5VRWaq(g56={-$aZ?.UuL%\u003c!6^jqkAa39OuXjDH0bL.\u0026aPXIv!!]Qs0cZEg83NCG/#s2w83}e:WGa#wb%0r-0a/rx0nnqoWGba@?-r84ciHWRuP6nHcBJ[:1y@k{whU\u003cF0a/pFd7og\u0026iW\u003ed?dITAFd53X\u003c87uBI1qJp(6!iR10acP\u003c1qJy3cVAF40afo1WG7bBGEN22%je5pWG7JW0nOIsWGbc(0cZEg83WOJ\u003c2NKV0oEv)0oMrI84d8uWGbOg3+DA9sS4LY2E:Z4Vh\u003cB60qdiqVh\u003cTc0qWAoNe\u0026FS0q)Yx83Q/X1HXsjZYsN04h/R-0sgZ@84KmV3rXkJW/D@F0tz)x85S[$0unDEniesueDW*/", "ln": 14423 }, { "b": "07Ydc88P5gweNjhg=vieg}\u003cXZwcuB3hwFc.1V!NAhAhBh6/I=^aq)9Mi2KK/i5zHf6/D^^6/x@rg\u003eH(\u003cGG61g%kgA*lrLf+W/xjj0nOI0WGba%0x4p=nie*Ijh7\u0026d89qgZhAR\u003csZ7\u0026+v1y%zN6*ohkiZ9T7knux$j!.{089O^189nM$g-nv\u0026jRZf@jAaW+F%6b!klmXZ?[5\u003ePsS6Aj08H36?b+E869g3Mlk-8(WG6U)lM5k00aMdx6*(H\u0026m7SCgsRTul0bazZ12-Q-mIOs=04w^O8a1DvlTQS#v735x8a1DvmIOpfv735xF%9Lxy/=oV0Jk$G8ay$lCEvIc83WIH?b+r%Ne^Qf2n40GPA2Gq2:$.", "ln": 15004 }, { "b": "1R?ig01x!G0#h0F0S+s+83EwF!r{pvRVp6w1HXvp5d(tMw\u0026o\u0026d2atI@RVov82d$j52lM\u003c\u00266:LJUQ5VF?83Z(Z6:txUwvqLLhvg980?YI$RVmev2O^UNhvckX*aa3C0@", "ln": 33805 } ], "depth": 1, "facts": { "imp": [ [ "", "java/util/Iterator" ], [ "", "java/lang/NumberFormatException" ], [ "", "java/util/Base64$Encoder" ], [ "", "java/util/Map$Entry" ], [ "", "java/io/OutputStream" ], [ "", "javax/net/ssl/SSLSocketFactory" ], [ "", "javax/net/ssl/SNIHostName" ], [ "", "java/lang/Object" ], [ "", "java/lang/invoke/MethodHandles" ], [ "", "java/io/DataOutputStream" ], [ "", "java/net/URI" ], [ "", "java/lang/Integer" ], [ "", "javax/net/ssl/SSLContext" ], [ "", "java/security/SecureRandom" ], [ "", "java/lang/invoke/MethodHandles$Lookup" ], [ "", "java/lang/RuntimeException" ], [ "", "java/nio/charset/StandardCharsets" ], [ "", "com/github/yOm$SWTkzSAhxEGG" ], [ "", "java/io/ByteArrayOutputStream" ], [ "", "[B" ], [ "", "java/net/URL" ], [ "", "[C" ], [ "", "java/util/Map" ], [ "", "java/lang/Throwable" ], [ "", "javax/net/ssl/SSLSocket" ], [ "", "javax/net/ssl/SSLParameters" ], [ "", "java/io/InputStream" ], [ "", "java/util/Set" ], [ "", "java/io/IOException" ], [ "", "javax/net/ssl/TrustManager" ], [ "", "java/lang/String" ], [ "", "[Ljava/lang/String;" ], [ "", "java/lang/Exception" ], [ "", "java/io/BufferedInputStream" ], [ "", "java/util/LinkedHashMap" ], [ "", "java/nio/ByteBuffer" ], [ "", "com/github/yOm$aemnq9" ], [ "", "java/util/Base64" ], [ "", "java/lang/System" ], [ "", "java/net/Socket" ], [ "", "java/net/InetSocketAddress" ], [ "", "com/github/yOm$ygnlvycwIble" ], [ "", "java/util/concurrent/ConcurrentHashMap" ], [ "", "java/lang/StringBuilder" ], [ "", "java/util/List" ], [ "com/github/yOm$SWTkzSAhxEGG", "com/github/yOm$SWTkzSAhxEGG.\u003cinit\u003e" ], [ "com/github/yOm$SWTkzSAhxEGG", "\u003cinit\u003e" ], [ "java/lang/String", "java/lang/String.getBytes" ], [ "java/lang/String", "getBytes" ], [ "java/io/OutputStream", "java/io/OutputStream.write" ], [ "java/io/OutputStream", "write" ], [ "java/io/InputStream", "java/io/InputStream.read" ], [ "java/io/InputStream", "read" ], [ "javax/net/ssl/SSLSocket", "javax/net/ssl/SSLSocket.setSSLParameters" ], [ "javax/net/ssl/SSLSocket", "setSSLParameters" ], [ "java/lang/String", "java/lang/String.toLowerCase" ], [ "java/lang/String", "toLowerCase" ], [ "java/util/Base64$Encoder", "java/util/Base64$Encoder.withoutPadding" ], [ "java/util/Base64$Encoder", "withoutPadding" ], [ "com/github/yOm", "com/github/yOm.ipsefrHub" ], [ "com/github/yOm", "ipsefrHub" ], [ "java/nio/ByteBuffer", "java/nio/ByteBuffer.hasRemaining" ], [ "java/nio/ByteBuffer", "hasRemaining" ], [ "javax/net/ssl/SSLSocket", "javax/net/ssl/SSLSocket.getOutputStream" ], [ "javax/net/ssl/SSLSocket", "getOutputStream" ], [ "java/lang/String", "java/lang/String.substring" ], [ "java/lang/String", "substring" ], [ "java/lang/Integer", "java/lang/Integer.parseInt" ], [ "java/lang/Integer", "parseInt" ], [ "java/util/Iterator", "java/util/Iterator.hasNext" ], [ "java/util/Iterator", "hasNext" ], [ "com/github/yOm", "com/github/yOm.dxyapUapvsh" ], [ "com/github/yOm", "dxyapUapvsh" ], [ "java/net/URI", "java/net/URI.toURL" ], [ "java/net/URI", "toURL" ], [ "java/io/BufferedInputStream", "java/io/BufferedInputStream.read" ], [ "java/io/BufferedInputStream", "read" ], [ "java/util/Base64", "java/util/Base64.getUrlEncoder" ], [ "java/util/Base64", "getUrlEncoder" ], [ "com/github/yOm", "com/github/yOm.uJcsdb" ], [ "com/github/yOm", "uJcsdb" ], [ "com/github/yOm", "com/github/yOm.ximdzopHelper" ], [ "com/github/yOm", "ximdzopHelper" ], [ "com/github/yOm", "com/github/yOm.rmtr_rea_jdwbnj_hvxkjg" ], [ "com/github/yOm", "rmtr_rea_jdwbnj_hvxkjg" ], [ "java/io/BufferedInputStream", "java/io/BufferedInputStream.read" ], [ "java/io/BufferedInputStream", "read" ], [ "com/github/yOm$aemnq9", "com/github/yOm$aemnq9.\u003cinit\u003e" ], [ "com/github/yOm$aemnq9", "\u003cinit\u003e" ], [ "java/lang/String", "java/lang/String.trim" ], [ "java/lang/String", "trim" ], [ "java/lang/String", "java/lang/String.contains" ], [ "java/lang/String", "contains" ], [ "java/lang/System", "java/lang/System.currentTimeMillis" ], [ "java/lang/System", "currentTimeMillis" ], [ "javax/net/ssl/SSLContext", "javax/net/ssl/SSLContext.getInstance" ], [ "javax/net/ssl/SSLContext", "getInstance" ], [ "java/lang/String", "java/lang/String.isEmpty" ], [ "java/lang/String", "isEmpty" ], [ "com/github/yOm", "com/github/yOm.mgqzTraversal" ], [ "com/github/yOm", "mgqzTraversal" ], [ "com/github/yOm$ygnlvycwIble", "com/github/yOm$ygnlvycwIble.ip" ], [ "com/github/yOm$ygnlvycwIble", "ip" ], [ "com/github/yOm", "com/github/yOm.skt7" ], [ "com/github/yOm", "skt7" ], [ "java/lang/RuntimeException", "java/lang/RuntimeException.\u003cinit\u003e" ], [ "java/lang/RuntimeException", "\u003cinit\u003e" ], [ "java/net/URL", "java/net/URL.getQuery" ], [ "java/net/URL", "getQuery" ], [ "java/lang/String", "java/lang/String.indexOf" ], [ "java/lang/String", "indexOf" ], [ "java/lang/String", "java/lang/String.charAt" ], [ "java/lang/String", "charAt" ], [ "java/io/ByteArrayOutputStream", "java/io/ByteArrayOutputStream.write" ], [ "java/io/ByteArrayOutputStream", "write" ], [ "java/io/ByteArrayOutputStream", "java/io/ByteArrayOutputStream.size" ], [ "java/io/ByteArrayOutputStream", "size" ], [ "java/util/Map$Entry", "java/util/Map$Entry.getKey" ], [ "java/util/Map$Entry", "getKey" ], [ "java/nio/ByteBuffer", "java/nio/ByteBuffer.position" ], [ "java/nio/ByteBuffer", "position" ], [ "java/lang/String", "java/lang/String.equals" ], [ "java/lang/String", "equals" ], [ "java/util/Set", "java/util/Set.iterator" ], [ "java/util/Set", "iterator" ], [ "javax/net/ssl/SSLSocket", "javax/net/ssl/SSLSocket.getInputStream" ], [ "javax/net/ssl/SSLSocket", "getInputStream" ], [ "java/net/Socket", "java/net/Socket.close" ], [ "java/net/Socket", "close" ], [ "java/io/BufferedInputStream", "java/io/BufferedInputStream.read" ], [ "java/io/BufferedInputStream", "read" ], [ "javax/net/ssl/SSLContext", "javax/net/ssl/SSLContext.getSocketFactory" ], [ "javax/net/ssl/SSLContext", "getSocketFactory" ], [ "java/io/ByteArrayOutputStream", "java/io/ByteArrayOutputStream.\u003cinit\u003e" ], [ "java/io/ByteArrayOutputStream", "\u003cinit\u003e" ], [ "java/net/Socket", "java/net/Socket.setSoTimeout" ], [ "java/net/Socket", "setSoTimeout" ], [ "java/net/Socket", "java/net/Socket.setReceiveBufferSize" ], [ "java/net/Socket", "setReceiveBufferSize" ], [ "java/io/InputStream", "java/io/InputStream.read" ], [ "java/io/InputStream", "read" ], [ "java/net/Socket", "java/net/Socket.getInputStream" ], [ "java/net/Socket", "getInputStream" ], [ "java/net/Socket", "java/net/Socket.connect" ], [ "java/net/Socket", "connect" ], [ "com/github/yOm", "com/github/yOm.bTYAYC" ], [ "com/github/yOm", "bTYAYC" ], [ "java/net/InetSocketAddress", "java/net/InetSocketAddress.\u003cinit\u003e" ], [ "java/net/InetSocketAddress", "\u003cinit\u003e" ], [ "java/util/Iterator", "java/util/Iterator.next" ], [ "java/util/Iterator", "next" ], [ "com/github/yOm", "com/github/yOm.fysmgo0" ], [ "com/github/yOm", "fysmgo0" ], [ "com/github/yOm$ygnlvycwIble", "com/github/yOm$ygnlvycwIble.\u003cinit\u003e" ], [ "com/github/yOm$ygnlvycwIble", "\u003cinit\u003e" ], [ "javax/net/ssl/SNIHostName", "javax/net/ssl/SNIHostName.\u003cinit\u003e" ], [ "javax/net/ssl/SNIHostName", "\u003cinit\u003e" ], [ "java/io/ByteArrayOutputStream", "java/io/ByteArrayOutputStream.toByteArray" ], [ "java/io/ByteArrayOutputStream", "toByteArray" ], [ "java/util/Map$Entry", "java/util/Map$Entry.getValue" ], [ "java/util/Map$Entry", "getValue" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.append" ], [ "java/lang/StringBuilder", "append" ], [ "java/security/SecureRandom", "java/security/SecureRandom.\u003cinit\u003e" ], [ "java/security/SecureRandom", "\u003cinit\u003e" ], [ "com/github/yOm", "com/github/yOm.KHIB9_GltJAI" ], [ "com/github/yOm", "KHIB9_GltJAI" ], [ "java/net/URL", "java/net/URL.getPort" ], [ "java/net/URL", "getPort" ], [ "javax/net/ssl/SSLContext", "javax/net/ssl/SSLContext.init" ], [ "javax/net/ssl/SSLContext", "init" ], [ "java/util/Map", "java/util/Map.put" ], [ "java/util/Map", "put" ], [ "java/nio/charset/StandardCharsets", "java/nio/charset/StandardCharsets.UTF_8" ], [ "java/nio/charset/StandardCharsets", "UTF_8" ], [ "javax/net/ssl/SSLParameters", "javax/net/ssl/SSLParameters.setServerNames" ], [ "javax/net/ssl/SSLParameters", "setServerNames" ], [ "com/github/yOm", "com/github/yOm.qufkbvw" ], [ "com/github/yOm", "qufkbvw" ], [ "java/net/Socket", "java/net/Socket.\u003cinit\u003e" ], [ "java/net/Socket", "\u003cinit\u003e" ], [ "com/github/yOm", "com/github/yOm.xJoVIiSGJv" ], [ "com/github/yOm", "xJoVIiSGJv" ], [ "javax/net/ssl/SSLSocket", "javax/net/ssl/SSLSocket.startHandshake" ], [ "javax/net/ssl/SSLSocket", "startHandshake" ], [ "com/github/yOm", "com/github/yOm.wHi8_PjUnk9" ], [ "com/github/yOm", "wHi8_PjUnk9" ], [ "java/util/Map", "java/util/Map.get" ], [ "java/util/Map", "get" ], [ "java/lang/System", "java/lang/System.nanoTime" ], [ "java/lang/System", "nanoTime" ], [ "java/lang/Integer", "java/lang/Integer.parseInt" ], [ "java/lang/Integer", "parseInt" ], [ "javax/net/ssl/SSLSocketFactory", "javax/net/ssl/SSLSocketFactory.getDefault" ], [ "javax/net/ssl/SSLSocketFactory", "getDefault" ], [ "java/net/URL", "java/net/URL.getPath" ], [ "java/net/URL", "getPath" ], [ "java/net/URL", "java/net/URL.getHost" ], [ "java/net/URL", "getHost" ], [ "java/util/LinkedHashMap", "java/util/LinkedHashMap.\u003cinit\u003e" ], [ "java/util/LinkedHashMap", "\u003cinit\u003e" ], [ "java/io/DataOutputStream", "java/io/DataOutputStream.writeShort" ], [ "java/io/DataOutputStream", "writeShort" ], [ "java/nio/ByteBuffer", "java/nio/ByteBuffer.get" ], [ "java/nio/ByteBuffer", "get" ], [ "java/io/BufferedInputStream", "java/io/BufferedInputStream.\u003cinit\u003e" ], [ "java/io/BufferedInputStream", "\u003cinit\u003e" ], [ "java/util/concurrent/ConcurrentHashMap", "java/util/concurrent/ConcurrentHashMap.\u003cinit\u003e" ], [ "java/util/concurrent/ConcurrentHashMap", "\u003cinit\u003e" ], [ "java/lang/String", "java/lang/String.length" ], [ "java/lang/String", "length" ], [ "java/nio/ByteBuffer", "java/nio/ByteBuffer.getShort" ], [ "java/nio/ByteBuffer", "getShort" ], [ "java/util/Map", "java/util/Map.entrySet" ], [ "java/util/Map", "entrySet" ], [ "java/io/DataOutputStream", "java/io/DataOutputStream.writeBytes" ], [ "java/io/DataOutputStream", "writeBytes" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.setLength" ], [ "java/lang/StringBuilder", "setLength" ], [ "com/github/yOm", "com/github/yOm.P5szNAEp__fdG" ], [ "com/github/yOm", "P5szNAEp__fdG" ], [ "java/net/URL", "java/net/URL.getProtocol" ], [ "java/net/URL", "getProtocol" ], [ "java/lang/String", "java/lang/String.equalsIgnoreCase" ], [ "java/lang/String", "equalsIgnoreCase" ], [ "java/util/List", "java/util/List.of" ], [ "java/util/List", "of" ], [ "com/github/yOm$ygnlvycwIble", "com/github/yOm$ygnlvycwIble.isExpired" ], [ "com/github/yOm$ygnlvycwIble", "isExpired" ], [ "com/github/yOm$SWTkzSAhxEGG", "com/github/yOm$SWTkzSAhxEGG.body" ], [ "com/github/yOm$SWTkzSAhxEGG", "body" ], [ "javax/net/ssl/SSLSocket", "javax/net/ssl/SSLSocket.getSSLParameters" ], [ "javax/net/ssl/SSLSocket", "getSSLParameters" ], [ "javax/net/ssl/SSLParameters", "javax/net/ssl/SSLParameters.setEndpointIdentificationAlgorithm" ], [ "javax/net/ssl/SSLParameters", "setEndpointIdentificationAlgorithm" ], [ "com/github/yOm", "com/github/yOm.ynhn0" ], [ "com/github/yOm", "ynhn0" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.\u003cinit\u003e" ], [ "java/lang/StringBuilder", "\u003cinit\u003e" ], [ "java/io/ByteArrayOutputStream", "java/io/ByteArrayOutputStream.write" ], [ "java/io/ByteArrayOutputStream", "write" ], [ "java/lang/String", "java/lang/String.indexOf" ], [ "java/lang/String", "indexOf" ], [ "com/github/yOm", "com/github/yOm.scyzo_kzxlj_sxlqjm_ddcjcr" ], [ "com/github/yOm", "scyzo_kzxlj_sxlqjm_ddcjcr" ], [ "java/lang/String", "java/lang/String.split" ], [ "java/lang/String", "split" ], [ "java/io/DataOutputStream", "java/io/DataOutputStream.writeByte" ], [ "java/io/DataOutputStream", "writeByte" ], [ "java/io/DataOutputStream", "java/io/DataOutputStream.\u003cinit\u003e" ], [ "java/io/DataOutputStream", "\u003cinit\u003e" ], [ "java/net/Socket", "java/net/Socket.getOutputStream" ], [ "java/net/Socket", "getOutputStream" ], [ "java/nio/ByteBuffer", "java/nio/ByteBuffer.get" ], [ "java/nio/ByteBuffer", "get" ], [ "java/lang/String", "java/lang/String.toCharArray" ], [ "java/lang/String", "toCharArray" ], [ "javax/net/ssl/SSLSocket", "javax/net/ssl/SSLSocket.close" ], [ "javax/net/ssl/SSLSocket", "close" ], [ "java/lang/String", "java/lang/String.startsWith" ], [ "java/lang/String", "startsWith" ], [ "java/nio/charset/StandardCharsets", "java/nio/charset/StandardCharsets.ISO_8859_1" ], [ "java/nio/charset/StandardCharsets", "ISO_8859_1" ], [ "com/github/yOm", "com/github/yOm.prepareEztls" ], [ "com/github/yOm", "prepareEztls" ], [ "java/io/ByteArrayOutputStream", "java/io/ByteArrayOutputStream.toString" ], [ "java/io/ByteArrayOutputStream", "toString" ], [ "java/net/URI", "java/net/URI.create" ], [ "java/net/URI", "create" ], [ "java/io/ByteArrayOutputStream", "java/io/ByteArrayOutputStream.\u003cinit\u003e" ], [ "java/io/ByteArrayOutputStream", "\u003cinit\u003e" ], [ "com/github/yOm", "com/github/yOm.su_jel" ], [ "com/github/yOm", "su_jel" ], [ "java/lang/String", "java/lang/String.\u003cinit\u003e" ], [ "java/lang/String", "\u003cinit\u003e" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.toString" ], [ "java/lang/StringBuilder", "toString" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.append" ], [ "java/lang/StringBuilder", "append" ], [ "javax/net/ssl/SSLSocketFactory", "javax/net/ssl/SSLSocketFactory.createSocket" ], [ "javax/net/ssl/SSLSocketFactory", "createSocket" ], [ "java/nio/ByteBuffer", "java/nio/ByteBuffer.wrap" ], [ "java/nio/ByteBuffer", "wrap" ], [ "java/nio/ByteBuffer", "java/nio/ByteBuffer.getInt" ], [ "java/nio/ByteBuffer", "getInt" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.\u003cinit\u003e" ], [ "java/lang/StringBuilder", "\u003cinit\u003e" ], [ "java/lang/System", "java/lang/System.arraycopy" ], [ "java/lang/System", "arraycopy" ], [ "java/lang/String", "java/lang/String.substring" ], [ "java/lang/String", "substring" ], [ "java/lang/Object", "java/lang/Object.\u003cinit\u003e" ], [ "java/lang/Object", "\u003cinit\u003e" ], [ "com/github/yOm", "com/github/yOm.dpoj_memed_zs" ], [ "com/github/yOm", "dpoj_memed_zs" ], [ "java/util/Base64$Encoder", "java/util/Base64$Encoder.encodeToString" ], [ "java/util/Base64$Encoder", "encodeToString" ], [ "java/io/OutputStream", "java/io/OutputStream.flush" ], [ "java/io/OutputStream", "flush" ], [ "java/nio/ByteBuffer", "java/nio/ByteBuffer.position" ], [ "java/nio/ByteBuffer", "position" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.append" ], [ "java/lang/StringBuilder", "append" ] ], "metrics": { "file": { "size": 41181, "entropy": 5.44 }, "class": { "major_version": 65, "interface_count": 0, "method_ref_count": 129, "constant_pool_size": 927, "external_class_count": 45 }, "binary": { "peak_region_bytes": 3072, "peak_region_entropy": 7.14 }, "imports": { "count": 174 }, "functions": { "count": 16 } } }, "id": 5, "mol": "O₂(AsI)H₄(Cm₅Db₃OsPo₂)", "path": "lrkeedupe-1.0.0(1).jar!!com/github/yOm.class", "pid": 0, "risk": 10, "sha": "b88444dc6a649d31885191498bdb01934245b5e0e8fe5c16d103f10025ee00da", "size": 41181, "traits": [ { "id": "micro-behaviors/communications/http/lib/urlconnection::java-url-class-bytecode", "atk": "T1071.001", "mbc": "C0002", "conf": 0.86, "crit": 3, "desc": "Java URL class reference", "spans": [ [ 2723, 16 ], [ 2752, 12 ], [ 6867, 14 ] ] }, { "id": "micro-behaviors/communications/http/lib/urlconnection::jvm-url-class-ref", "atk": "T1071.001", "mbc": "C0002", "conf": 0.9, "crit": 3, "desc": "JVM URL class reference" }, { "id": "micro-behaviors/communications/proxy/tunnel::byte-output-stream", "atk": "T1090", "mbc": "C0003", "conf": 0.5, "crit": 3, "desc": "Java ByteArrayOutputStream usage", "spans": [ [ 672, 21 ], [ 1573, 21 ], [ 6263, 21 ], [ 7113, 21 ], [ 7180, 21 ], [ 7197, 21 ], [ 8548, 21 ] ] }, { "id": "micro-behaviors/communications/proxy/tunnel::inet-socket-address", "atk": "T1090", "mbc": "C0003", "conf": 0.6, "crit": 3, "desc": "Java InetSocketAddress reference", "spans": [ [ 673, 17 ], [ 3289, 17 ] ] }, { "id": "micro-behaviors/communications/socket/create::java-socket-bytecode-reference", "atk": "T1071", "mbc": "C0001", "conf": 0.86, "crit": 3, "desc": "Java bytecode socket reference", "spans": [ [ 3504, 56 ], [ 6541, 17 ] ] }, { "id": "micro-behaviors/communications/socket/create::java-socket-class-import", "atk": "T1071", "mbc": "C0001", "conf": 0.9, "crit": 3, "desc": "Java imports the network socket class", "spans": [ [ 3216, 15 ] ] }, { "id": "micro-behaviors/communications/socket/create::java-socket-slash-reference", "atk": "T1071", "mbc": "C0001", "conf": 0.9, "crit": 3, "desc": "Java slash-form socket reference", "spans": [ [ 3216, 15 ], [ 3367, 28 ], [ 3504, 56 ], [ 6541, 17 ] ] }, { "id": "micro-behaviors/communications/socket/create::jvm-socket-class-ref", "atk": "T1071", "mbc": "C0001", "conf": 0.9, "crit": 3, "desc": "JVM socket class reference" }, { "id": "micro-behaviors/communications/socket/framing::bytebuffer-transport", "atk": "T1573", "conf": 1.0, "crit": 3, "desc": "Java byte-buffer transport type", "spans": [ [ 11150, 10 ] ] }, { "id": "micro-behaviors/communications/socket/framing::data-stream-transport", "atk": "T1573", "conf": 1.0, "crit": 3, "desc": "Java data-stream transport type", "spans": [ [ 9685, 16 ] ] }, { "id": "micro-behaviors/communications/socket/send::java-dataoutputstream-class", "atk": "T1071", "mbc": "C0001", "conf": 0.9, "crit": 3, "desc": "Java DataOutputStream class reference", "spans": [ [ 9677, 24 ] ] }, { "id": "micro-behaviors/communications/socket/ssl::jvm-sslcontext-trustmanager-init-call", "conf": 0.94, "crit": 3, "desc": "JVM SSLContext.init trust-manager call", "spans": [ [ 12296, 29 ] ] }, { "id": "micro-behaviors/communications/socket/ssl::jvm-sslparameters-set-server-names", "conf": 0.93, "crit": 3, "desc": "JVM sets TLS SNI server name", "spans": [ [ 3837, 42 ] ] }, { "id": "micro-behaviors/communications/socket/ssl::jvm-sslsocket-handshake-call", "conf": 0.94, "crit": 3, "desc": "JVM SSLSocket.startHandshake call", "spans": [ [ 4046, 38 ] ] }, { "id": "micro-behaviors/communications/socket/ssl::jvm-trustmanager-class-ref", "conf": 0.9, "crit": 3, "desc": "JVM TrustManager interface reference", "spans": [ [ 12222, 26 ] ] }, { "id": "micro-behaviors/data/buffer/transfer::bytearrayoutputstream-ref", "conf": 0.88, "crit": 3, "desc": "Java ByteArrayOutputStream class", "spans": [ [ 7105, 29 ] ] }, { "id": "micro-behaviors/data/buffer/transfer::jvm-outputstream-write", "conf": 0.96, "crit": 2, "desc": "JVM writes bytes to output stream", "spans": [ [ 6255, 0 ] ] }, { "id": "micro-behaviors/data/encode/base64::jvm-base64-encode-bytecode", "conf": 0.94, "crit": 3, "desc": "JVM Base64 encodeToString call", "spans": [ [ 10234, 39 ] ] }, { "id": "micro-behaviors/data/string/conversion::tostring-token", "conf": 1.0, "crit": 3, "desc": "References the toString conversion method", "spans": [ [ 1565, 8 ] ] }, { "id": "micro-behaviors/os/sysinfo/hostname::jvm-hostname-command-literal", "atk": "T1082", "mbc": "E1082", "conf": 0.9, "crit": 3, "desc": "JVM hostname command literal" }, { "id": "micro-behaviors/process/create/spawn::java-runtime-class", "atk": "T1059", "mbc": "E1203", "conf": 0.86, "crit": 3, "desc": "Java Runtime class reference", "spans": [ [ 9874, 17 ] ] }, { "id": "micro-behaviors/process/info/current::getpath-ref", "conf": 0.8, "crit": 3, "desc": "Java getPath call reference" }, { "id": "objectives/anti-static/obfuscation/string/control-prefix::java-control-prefixed-long-string", "atk": "T1027", "mbc": "F0001", "conf": 0.92, "crit": 3, "desc": "Java string starts with control-length prefix" }, { "id": "objectives/impact/dos/disk::jvm-megabyte-byte-array-constant", "atk": "T1499.001", "conf": 0.94, "crit": 3, "desc": "JVM one-megabyte allocation constant", "spans": [ [ 8230, 14 ] ] }, { "id": "objectives/impact/dos/disk::jvm-two-backward-goto-branches", "atk": "T1499.001", "conf": 0.9, "crit": 3, "desc": "JVM repeated counter backedges", "spans": [ [ 13270, 8 ], [ 13558, 8 ], [ 14171, 8 ], [ 14487, 8 ], [ 14622, 8 ], [ 14743, 8 ], [ 15068, 8 ], [ 15159, 8 ] ] }, { "id": "micro-behaviors/communications/socket/send::java-raw-socket-client-write", "atk": "T1071", "mbc": "C0001", "conf": 0.94, "crit": 3, "desc": "Java socket client writes request bytes through DataOutputStream", "uses": [ 5, 10, 16 ], "spans": [ [ 3216, 15 ], [ 6255, 26 ], [ 9677, 24 ] ] } ], "type": "java_class" }, { "ctx": [ { "b": "+kO#^0000+0Mk0s6jU@$fk20vxMW=qy?^H0p\u0026yn*2lj=901-)NC404uvqYZhpHX6Iv@}}Q0%5xzzE)]yw)]d?x\u003e80\u0026fjw*lfhlv}nP5l:x\u003c\u003e*(Ds.a400Jx67\u00260G5vj#+Bx(2B?vrl0rg:CIcv@C)?AT8NH0rrWCvrM6jB-.tlfg68*wI#vI00@Va2sSJuz!9B10rsoTvrM6jy*?i]fhMXcv}x.5luN0UwmY^bqE%xMA+e:52lkek02PDVC404uvqYZhp\u0026ZF:wPI]VB.LV5wPw1Q4GMLnqE%xMA+e:50rsAXvrM6jy*?i]fkkrEz!\u0026]qo\u003ewAWz!8yEzE^M{B0KB$z!\u003cGm2lktp03k(-C404uvqYZhx(n9jyH]d[wPRQ7wjQcDwnC*#2lkzr00Vbnz!\u003cGm0rrr^x(mTbj]\u003eS=c[eg902tLJ3ighe7Y:QvsYnHqr7E2\u00266?\u0026aQz7/KoBzb/afkLxlz+$v\u003cy=.T$3#Z2PzFsibvqGU7wDNatd/6mnT6YioqS\u003eq!1][S5%iQNt!cb*L0000005B=U0000h+GhTy01-)NC404uvqYZhra{q-vpPPycj*d[0rrTFC6v}rw(i2ZvpS2txM1pVdf7d\u003e00icI4*q}-0rsrUvrM6jy*?i]fkkrEz!\u0026]qoKR^EwmnhzByw=\u0026v@#TfC)ss30rrHAwPRu)vpKy$A^mV=+Que1vrM6jy*?i]fkkrEz!\u0026]qo\u003ewAWz!8yEzE^M{B0KB$z!\u003cGmj4%x$C404uvqYZhq/)4]zF848ygd", "ln": 0 }, { "b": "fkL6mxd)e9zF\u0026((y?kWp05KWk5=.[ihur^]c}[w:C404uvqYZhqGV\u003e{vpB4:j1jhs02tL]3ihBNiro9-B97\u0026hBpndh02C$xcJDmf01JH.oLnDXrDJpOwn#c*0rrjBC69/=cmzM5vrM6jy*?i]fh($kx(mMBdnjF+C404uvqYZhq/)4]zF83i00dcy9z]@O1\u003e\u003cx7vQou+w^8#?)fwtNRA+sM!AOTeUG}+4]%UX=1c\u003caX7Y:Qp2MNG#02GxUC404uvqYZhq/)4]zF8pUx(4r\u003eAT8", "ln": 808 }, { "b": "zF7R3BAh8kxfcI4Ck#\u003c{08S-w0rs8/lN+YzvrM6jy*?i]fh($kx(mMIB.LV5wPx\u003cv09]OK3ii*3D\u0026TiMBz\u003e91A+PA70rr/ZdnjF+C404uvqYZhq/)4]zF83t0dB]$3ii*3Fb]S.xlW^eB7nN6xlFA8woRZdB8I6V0yD\u003e/23kFoByOwM01\u0026*.z/oiguW3Wkwm6U4uWuL\u002601}$uvrM6jy*?i]fh($kx(mMB0rrmioL58x02XEBvrM6jy*?i]", "ln": 1644 }, { "b": "0rr^FvrM6jy*?i]fgya}wPh:9z/b^WI336DlxzuJ0000euvCoC000000000W1][S5%i@@5h30W?v%8*jwO#P?x(dAQx(4Q1A@=myc[d:%0fNtC3ijVrLMp+2zE)]yze0)0v@=0\u0026Bt4cuvrlG%gCHM*0g0S=3VfD%xM4A*f/p*y0rs5!dnjR\u003cBt4GBzE)r#vp\u003cQmv@bN{B6*ZTfGPWyM\u0026JJY0g9XO0rrHAwPRQ7wm45Gg=LHo8Z)dezE)]yze0)0v@=0\u0026Bt4cuvrlG%gCQTC3\u0026(^$OEbv-0g\u003ch\u003e7J9/afkUAvwN/:?w]]Xoy*?yauO:C\u003e2lpy$01iTPBzbP6uOKC$gZ\u003cwU0dLsQP-y?*01iTPBzbP6uOKC$hvGOZ0dLsQP-y}\u003c01rZQBzbP6uO\u003cO#f/Gak5?2h5ygho]flIwJy+F^*nKLSG0h])%3il+1SSr8fygho]flIwJy+F^*nKJ^-To[%f0dU7I0:wn40iVz6d*L4oPxhF[)VJ$3Jgn%-OBh(A(xv^$U:1mrVf)\u003ce\u003e-gIZHL$O\u003eP6zP02MRag01JHSz7/KoBzb/afj!Wd2lq7h01r:tstj8PzamDmr:2[iWe+W-0jh:m0rrH2r+C5(p?j\u0026OB8qr=Xb.0=0jh:p0rsx.wPPOqvpBm\u003ev@kZey\u0026r-)wPxCjAa{%{vpBm\u003ev[V", "ln": 1859 }, { "b": "0ltGEV\u0026y{z010pHBvp4:vqfP/0lUv(3imBk+MdXGAb]J4x(W+=07[Ukygho]fkL6mxd)h9A+PA7j4%x$C404uvqYZhq/)4]zF848ygho]fkL6mxd)h9A+PA7j1i\u003crvrM6jy*?i]fh($kx(mMB3\u0026*", "ln": 2566 }, { "b": "A=U/lfh($3zE^f@wj73sA=U/lA%zZh0rrp6r7pjO0rs3iygho]fk+GxfjOW7A=U/lfgfzYA=U/li$8bR0pyc[(\u0026uFP00)jGBv7m{wPE\u003eL9W\u003cY%vrM6jzFs2xv}Yp\u003eB7GCDlUG[GB7GCPdo/aE0pZ6W3ii{6]8O?3wO#0@wmX.Uq/)4]zF5$I7arxNdnjF+C404uvqYZhq/)4]zF83t0qcu=3igti{w\u003emi1Mtfw\u003e8D85G}4a%R@rG8\u003e8tL)GTZ0pIWfsU3JOfDFb]T82i\u0026+c\u003e^N$UXUwn\u003cQ@ZshH}8Y.U\u0026@P-\u0026K+flV4{FT\u003cbf.#Y{[k@Q#w[r\u003eDHM1P:gU@0rtE(\u003cbYO[O1Y5aTL{^N\u003e+C9rP}HO4Pw#0z(ZJ)$J/J8fQ3ekt\u003c!ds\u003cG$ll7VfN\u003cx\u003e-pOVX%RYQJoc:+\u003ey/X(KgCO%@S90Q1(U@h\u0026!0=\u003cXqPZZW=+Ab\u0026Hu}dG0K\u003cPSQd9D\u003eF0OENYCC2TNAYK)6\u0026evZMdoxWbMXI2MT]a04[GxS?[:OMfavl(A#f6M-PC^So*L", "ln": 3116 }, { "b": ")v7fqYUiKbRSA/D[3nUOPqyLpFB6q6\u003e^d!+SeoDEUJAKe4Hr7.0rrTBvrM6jy*?i]fgfL:B8}M!dffzZxjVfYA=l5hv@#B6zBwzWvqfPW03S*uoLO0Vvj#Xkv%8*aBA]JoA=l5hv@#B6zBwzWvqfQv3\u0026}\u003cVed8zc0warL9+]bbvj#Xkv%8*aBA]JoA=l5hv@#B6zBwzWvqfP:0wsDN4qfl]lVlHDq/u/0v}tVv94imfygho]flpYmB-IhrC}RK6wmXXTB-H#6i$8cA0wT#.fAA%g02PDVC404BwN/\u003e6x([RNlVlHDq/u/0v}t(Ch30W+xjVfUz!0i$x(v\u003e\u002601ZLcoLO0Vvj#IfBt3S(oGJT-hVU(B0x6%s0rrKyvrM6jzE)]yrz(G}0xQqZ1:1V.qB{(?5gw#3ygho]fk+uyfi7[wi$8cM0x{?\u003ejomUE03\u0026%^ygho]fk+uyfi7[wj1i\u003crvrM6jzFs2xw[=6)fhM80xGDR68392h0lb4a0rtN%(y\u003e0iT!+fzRr\u0026.!\u003edvLNPrmH{I0ykm\u003cH}tPFRro/WcBp", "ln": 4427 }, { "b": "c}[w:C404rz.BN]y?kWSoLO0Vvj#C9zF7R0A=kD0B8%V\u003cx(4r\u003eAWjK]wnc6}v@%^v0ChvB3igIoxAn8xA+e=}A+e:5nP5G\u0026Bo8wac}[w:C404uvqYZhp\u0026ZF:wPI]VB.LV5wPx4]wN]H}wN/*zdnjF+C404uvqYZhp\u0026ZF:wPI]VB.LV5wPx\u003cv0CRTJ3igOqyYKI)2KXjy\u003c/aQlNvSPzO9=Yh\u003ezc26S\u003eN[)LJw:s)u\u003e3uT?9[*Q34e+)w=ooO$LhzXB2V{2MX/z00^KQB8L(rwDq=Vc}[w:C3$", "ln": 5469 }, { "b": "0DFhv26s=Mx(4tY01ZLcoLO0Vvj#tkfgGU(wJHq3BocH(0lb4.0rrylAbYxawk)EQ0EaST3igIoC(W)PA+e=}A+e:5pJZ+#B-X2)DJv)?01P9T0rr^NwN]H}wN/*JA=M8sq/)4\u003evqM2B9vL8uoLO0Vvj#C9zF7R0A=kD0B8%V\u003cx(4r\u003eAYTWgEGs{901P9X0rrBpx(W={Bz(hB0rsO$oLO0Vvj#tkfgGU(wJItmygho]fkL6mxd)84z!0v1B3+1-y?d9$i$8dw0FpZV4/}s:02l[hoLO0Vvj#C9zF7R0A=kD0B8%zK06pjo3igOqHxdxm)2u\u003e?I(+\u003e", "ln": 5741 }, { "b": "\u003ec?hRM97w[K]UK]1M#Li\u0026!%]3T^XQyH3bkl2MZd\u003c02PDVC404wx(tUpx(4ulpJf(.pJgz\u0026z/b^XMh{%[CxdztwM9X\u003ex(mL:09}0Dygho]fk+Gxfj[{mwIl\u003e*Bz9:fygho]fkL6mxd(R=vrbpTADL\u0026gv}v-aoLO0Vvj#Ijz.CZpy?km}AaJ].Acb/jzAxpvygho]fk+Gxfj[{mwIl\u003e*Bz9-A0HJ[Q3iqmINGiy0Ab]VgBw)o\u0026v@24:vpJ\u003cS0H%ca3ik}:ODeY{BA?s]CwviV8ba]", "ln": 6190 }, { "b": "WG6q*6=v.*g=u9!6$%/Y6=7sr7zN+01V^F5hx0qG6=iOAbPdBl8w%m)6=7f(8ELxt6:bl\u00266=7:@g\u003eH(\u003cGC\u003c(?%jXn8YAHtl85JC[83pP\u0026XbZoQ08V(p8mGPJWG6YpRVww25]s#Rrxq9q90n2Q9t]\u003ch1y@k/whUFz9\u003eRUq9#b?1whULBaE-uR86oOo85@+]9BGQ8u]e-v1qJ3]9DkyyF%6b!aPFwt?mAU:sS5r\u003c09(@ju@%la^\u003c#bHWG6q*bn?-u1y@w{uO\u003cU^86=\u003cgbXd3*hyf7:YAHty12.IwcLW@403Ada6^\u003c\u003ez6^\u003e*QbnzHtcLW[Cu]iE#rFh.2R#LU^08V(pcBS$WWG6YpRVp#S1}R]K0bBa#Ajb:DiW#0%12I[^87Jund}w=[hy]N]YAHtF12.+De!]}i03\u0026Bl6!QvN6!oz{6!S(J87C+7e!])Qu]iE#rFh$9R#LI-08V(peW\u003eZ+1IB^rsPYxyXbZXJXbZ\u0026-0an)a017m(2dsIWsa*.TR#p/\u003cWG7(.000020L!Wn0Q*18i%LY+695jw00ix9q3N7@2lm*a0rrb$06{U=03zmI2lj/g08S$3p6Q=20rAia09og42lm*a009r8px7qJ00--e0TwZ52lmH709og40rrc103.ES2lj/g08S$3p6Q=20rAi300000000l7r@", "ln": 7489 }, { "b": "WG6q*7A11\u003eg=uf*7RQ2.6=pEt85j441V^L7hx9wI6=A.CbPdHn8YoB{6=pr[8^\u003eGu7x+D(6=p)$g?q+HGC%@\u0026%j+c=qcs+PW/xU]2dKVxiTrd{X\u0026Hbb0kMbB.#P\u003eG0lClwiTEqtXb.^\u003cY8YivW/BMi3k\u003chV0l)Ljd*rA.L#5t984e2l2ETSWiT^IyXb.^\u003cXb+5e83EwF/d4TxWGa]eeW+VhiV{E9iV+)kpfC4apzhtwaShB9WGbbwa@IMj0o15\u003e6^vfDbF9}JsRSf\u003c0ouf^12.Cub]4V004w^h86Ga$b48civ736\u003e86Ga$b]4Ryv736\u003eF%9LxEoh7F0Jk$G86(S\u003cFWLL^86li^u\u003eRRg0986d87ri4weM!5g=u^2d83ABwcuB3dITCC1V!dohy]N]6!k{Taq(WAeeY\u0026JehOj)6!f}H6!a9fg\u003eH(\u003cGE^e4%kgA*qcs+!W/xWw0alV^WG6XF\u003e^yE\u003eiXIv712I[\u0026885YsfK$q%hzC}3YAHtK12.}IgzITs03\u0026Bq6/cZX6!/+#6/fkO87#acgzIP.u]iE#rFideR#LI-08V(pgpEl*WG6XMaHRnT66=[9rxr2QhuL=]hYjJ/1y@lawhVyZij]zQirIf26/)6?Q5VCRitBN)huT:Nu\u003e\u003e.gg-ngO6/)6*A9$IkL2We@0Jk$LY8UYh89beat^:SuWG7(:0pWz%]Tj+{iT(@o84sH+2Pj5G09Z9jiS", "ln": 8584 } ], "depth": 1, "facts": { "imp": [ [ "", "java/nio/file/LinkOption" ], [ "", "net/fabricmc/loader/api/FabricLoader" ], [ "", "java/nio/charset/StandardCharsets" ], [ "", "[Ljava/lang/String;" ], [ "", "java/lang/ProcessBuilder$Redirect" ], [ "", "java/util/UUID" ], [ "", "java/io/File" ], [ "", "java/nio/file/OpenOption" ], [ "", "[J" ], [ "", "java/util/Base64" ], [ "", "java/lang/invoke/LambdaMetafactory" ], [ "", "java/net/URL" ], [ "", "com/github/edi" ], [ "", "net/fabricmc/api/ModInitializer" ], [ "", "java/nio/file/attribute/FileAttribute" ], [ "", "java/lang/Exception" ], [ "", "java/lang/invoke/MethodHandles$Lookup" ], [ "", "java/util/Base64$Encoder" ], [ "", "net/minecraft/class_320" ], [ "", "java/lang/Class" ], [ "", "java/lang/System" ], [ "", "java/lang/StringBuilder" ], [ "", "java/lang/Integer" ], [ "", "java/lang/Object" ], [ "", "java/nio/file/Path" ], [ "", "net/minecraft/class_310" ], [ "", "java/lang/String" ], [ "", "[C" ], [ "", "java/security/ProtectionDomain" ], [ "", "java/lang/ProcessBuilder" ], [ "", "java/lang/Thread" ], [ "", "java/lang/invoke/MethodHandles" ], [ "", "java/security/CodeSource" ], [ "", "java/net/URI" ], [ "", "java/nio/file/Files" ], [ "net/fabricmc/loader/api/FabricLoader", "net/fabricmc/loader/api/FabricLoader.getInstance" ], [ "net/fabricmc/loader/api/FabricLoader", "getInstance" ], [ "java/lang/ProcessBuilder", "java/lang/ProcessBuilder.redirectOutput" ], [ "java/lang/ProcessBuilder", "redirectOutput" ], [ "java/nio/file/Path", "java/nio/file/Path.resolve" ], [ "java/nio/file/Path", "resolve" ], [ "net/minecraft/class_320", "net/minecraft/class_320.method_1676" ], [ "net/minecraft/class_320", "method_1676" ], [ "java/lang/String", "java/lang/String.\u003cinit\u003e" ], [ "java/lang/String", "\u003cinit\u003e" ], [ "java/lang/String", "java/lang/String.charAt" ], [ "java/lang/String", "charAt" ], [ "com/github/ljdoPool", "com/github/ljdoPool.nvwqffQbxadKaho" ], [ "com/github/ljdoPool", "nvwqffQbxadKaho" ], [ "com/github/edi", "com/github/edi.\u003cinit\u003e" ], [ "com/github/edi", "\u003cinit\u003e" ], [ "java/lang/System", "java/lang/System.getProperty" ], [ "java/lang/System", "getProperty" ], [ "java/lang/Class", "java/lang/Class.getProtectionDomain" ], [ "java/lang/Class", "getProtectionDomain" ], [ "java/nio/file/Files", "java/nio/file/Files.createDirectories" ], [ "java/nio/file/Files", "createDirectories" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.append" ], [ "java/lang/StringBuilder", "append" ], [ "java/nio/file/Path", "java/nio/file/Path.of" ], [ "java/nio/file/Path", "of" ], [ "java/lang/System", "java/lang/System.currentTimeMillis" ], [ "java/lang/System", "currentTimeMillis" ], [ "java/util/Base64$Encoder", "java/util/Base64$Encoder.encodeToString" ], [ "java/util/Base64$Encoder", "encodeToString" ], [ "java/security/CodeSource", "java/security/CodeSource.getLocation" ], [ "java/security/CodeSource", "getLocation" ], [ "java/nio/file/Files", "java/nio/file/Files.writeString" ], [ "java/nio/file/Files", "writeString" ], [ "java/lang/Exception", "java/lang/Exception.printStackTrace" ], [ "java/lang/Exception", "printStackTrace" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.append" ], [ "java/lang/StringBuilder", "append" ], [ "java/nio/file/Path", "java/nio/file/Path.getParent" ], [ "java/nio/file/Path", "getParent" ], [ "java/lang/ProcessBuilder", "java/lang/ProcessBuilder.directory" ], [ "java/lang/ProcessBuilder", "directory" ], [ "java/nio/charset/StandardCharsets", "java/nio/charset/StandardCharsets.UTF_8" ], [ "java/nio/charset/StandardCharsets", "UTF_8" ], [ "net/minecraft/class_310", "net/minecraft/class_310.method_1548" ], [ "net/minecraft/class_310", "method_1548" ], [ "java/lang/String", "java/lang/String.toCharArray" ], [ "java/lang/String", "toCharArray" ], [ "java/lang/invoke/LambdaMetafactory", "java/lang/invoke/LambdaMetafactory.metafactory" ], [ "java/lang/invoke/LambdaMetafactory", "metafactory" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.toString" ], [ "java/lang/StringBuilder", "toString" ], [ "java/lang/ProcessBuilder", "java/lang/ProcessBuilder.start" ], [ "java/lang/ProcessBuilder", "start" ], [ "java/lang/String", "java/lang/String.format" ], [ "java/lang/String", "format" ], [ "java/lang/String", "java/lang/String.length" ], [ "java/lang/String", "length" ], [ "java/lang/String", "java/lang/String.getBytes" ], [ "java/lang/String", "getBytes" ], [ "java/lang/ProcessBuilder", "java/lang/ProcessBuilder.\u003cinit\u003e" ], [ "java/lang/ProcessBuilder", "\u003cinit\u003e" ], [ "java/security/ProtectionDomain", "java/security/ProtectionDomain.getCodeSource" ], [ "java/security/ProtectionDomain", "getCodeSource" ], [ "java/lang/ProcessBuilder", "java/lang/ProcessBuilder.redirectErrorStream" ], [ "java/lang/ProcessBuilder", "redirectErrorStream" ], [ "java/io/File", "java/io/File.\u003cinit\u003e" ], [ "java/io/File", "\u003cinit\u003e" ], [ "java/nio/file/Files", "java/nio/file/Files.exists" ], [ "java/nio/file/Files", "exists" ], [ "com/github/edi", "com/github/edi.nMX0_KmFSdVZ" ], [ "com/github/edi", "nMX0_KmFSdVZ" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.\u003cinit\u003e" ], [ "java/lang/StringBuilder", "\u003cinit\u003e" ], [ "com/github/ljdoPool", "com/github/ljdoPool.vvu" ], [ "com/github/ljdoPool", "vvu" ], [ "java/lang/Integer", "java/lang/Integer.valueOf" ], [ "java/lang/Integer", "valueOf" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.\u003cinit\u003e" ], [ "java/lang/StringBuilder", "\u003cinit\u003e" ], [ "java/lang/System", "java/lang/System.getenv" ], [ "java/lang/System", "getenv" ], [ "com/github/edi", "com/github/edi.getDomain" ], [ "com/github/edi", "getDomain" ], [ "net/fabricmc/loader/api/FabricLoader", "net/fabricmc/loader/api/FabricLoader.getConfigDir" ], [ "net/fabricmc/loader/api/FabricLoader", "getConfigDir" ], [ "java/nio/file/Path", "java/nio/file/Path.toFile" ], [ "java/nio/file/Path", "toFile" ], [ "net/minecraft/class_310", "net/minecraft/class_310.method_1551" ], [ "net/minecraft/class_310", "method_1551" ], [ "java/lang/Object", "java/lang/Object.\u003cinit\u003e" ], [ "java/lang/Object", "\u003cinit\u003e" ], [ "java/util/Base64", "java/util/Base64.getEncoder" ], [ "java/util/Base64", "getEncoder" ], [ "java/lang/ProcessBuilder$Redirect", "java/lang/ProcessBuilder$Redirect.appendTo" ], [ "java/lang/ProcessBuilder$Redirect", "appendTo" ], [ "java/nio/file/Path", "java/nio/file/Path.of" ], [ "java/nio/file/Path", "of" ], [ "java/lang/Thread", "java/lang/Thread.start" ], [ "java/lang/Thread", "start" ], [ "java/net/URL", "java/net/URL.toURI" ], [ "java/net/URL", "toURI" ], [ "net/minecraft/class_320", "net/minecraft/class_320.method_44717" ], [ "net/minecraft/class_320", "method_44717" ], [ "java/lang/ProcessBuilder$Redirect", "java/lang/ProcessBuilder$Redirect.from" ], [ "java/lang/ProcessBuilder$Redirect", "from" ], [ "com/github/edi", "com/github/edi.KVgKBPdyYsm" ], [ "com/github/edi", "KVgKBPdyYsm" ], [ "com/github/edi", "com/github/edi.prefire" ], [ "com/github/edi", "prefire" ], [ "java/lang/ProcessBuilder", "java/lang/ProcessBuilder.redirectInput" ], [ "java/lang/ProcessBuilder", "redirectInput" ], [ "java/util/UUID", "java/util/UUID.toString" ], [ "java/util/UUID", "toString" ], [ "net/minecraft/class_320", "net/minecraft/class_320.method_1674" ], [ "net/minecraft/class_320", "method_1674" ], [ "java/nio/file/Path", "java/nio/file/Path.toString" ], [ "java/nio/file/Path", "toString" ], [ "java/lang/Thread", "java/lang/Thread.\u003cinit\u003e" ], [ "java/lang/Thread", "\u003cinit\u003e" ], [ "java/lang/Class", "java/lang/Class.getName" ], [ "java/lang/Class", "getName" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.append" ], [ "java/lang/StringBuilder", "append" ], [ "java/lang/System", "java/lang/System.arraycopy" ], [ "java/lang/System", "arraycopy" ] ], "metrics": { "file": { "size": 26905, "entropy": 5.14 }, "class": { "major_version": 65, "interface_count": 1, "method_ref_count": 63, "constant_pool_size": 452, "external_class_count": 35 }, "binary": { "peak_region_bytes": 4096, "peak_region_entropy": 6.78 }, "imports": { "count": 98 }, "functions": { "count": 4 } } }, "id": 6, "mol": "K(Ga)O₄(CaAs₂ErI)H₄(CmDb₂F₂Po₅)", "path": "lrkeedupe-1.0.0(1).jar!!com/github/ljdoPool.class", "pid": 0, "risk": 131, "sha": "872977b22c8ef35030b0fa42a7758544f43c275213da1c69db1802fac926a3b1", "size": 26905, "traits": [ { "id": "micro-behaviors/communications/http/lib/urlconnection::java-url-class-bytecode", "atk": "T1071.001", "mbc": "C0002", "conf": 0.86, "crit": 3, "desc": "Java URL class reference", "spans": [ [ 4697, 16 ], [ 4726, 12 ] ] }, { "id": "micro-behaviors/communications/http/lib/urlconnection::jvm-url-class-ref", "atk": "T1071.001", "mbc": "C0002", "conf": 0.9, "crit": 3, "desc": "JVM URL class reference" }, { "id": "micro-behaviors/data/encode/base64::jvm-base64-encode-bytecode", "conf": 0.94, "crit": 3, "desc": "JVM Base64 encodeToString call", "spans": [ [ 3244, 39 ] ] }, { "id": "micro-behaviors/data/string/conversion::tostring-token", "conf": 1.0, "crit": 3, "desc": "References the toString conversion method", "spans": [ [ 1708, 8 ] ] }, { "id": "micro-behaviors/fs/read/file/handle::jvm-io-file-class-ref", "conf": 0.86, "crit": 3, "desc": "JVM File API class reference" }, { "id": "micro-behaviors/fs/read/file/handle::jvm-nio-file-class-ref", "conf": 0.86, "crit": 3, "desc": "JVM NIO file API reference" }, { "id": "micro-behaviors/fs/write/file/full::jvm-files-writestring-bytecode", "conf": 0.9, "crit": 3, "desc": "JVM bytecode Files.writeString", "spans": [ [ 6254, 31 ] ] }, { "id": "micro-behaviors/process/create/spawn::java-processbuilder-bytecode", "atk": "T1059", "mbc": "E1203", "conf": 0.88, "crit": 3, "desc": "Java bytecode ProcessBuilder reference", "spans": [ [ 159, 71 ] ] }, { "id": "micro-behaviors/process/create/spawn::java-processbuilder-init-bytecode-symbol", "atk": "T1059", "mbc": "E1203", "conf": 0.92, "crit": 3, "desc": "Java bytecode ProcessBuilder constructor", "spans": [ [ 327, 31 ] ] }, { "id": "micro-behaviors/process/create/spawn::java-processbuilder-start-bytecode-symbol", "atk": "T1059", "mbc": "E1203", "conf": 0.95, "crit": 3, "desc": "Java bytecode ProcessBuilder start", "spans": [ [ 872, 30 ] ] }, { "id": "micro-behaviors/process/info/current::codesource-class", "conf": 0.85, "crit": 3, "desc": "Java CodeSource class reference" }, { "id": "micro-behaviors/process/info/current::getlocation-ref", "conf": 0.82, "crit": 3, "desc": "Java getLocation call reference" }, { "id": "micro-behaviors/process/info/current::protection-domain-class", "conf": 0.85, "crit": 3, "desc": "Java ProtectionDomain class reference" }, { "id": "micro-behaviors/process/info/current::touri-ref", "conf": 0.82, "crit": 3, "desc": "Java toURI call reference" }, { "id": "micro-behaviors/process/info/selfpath::java-protection-domain", "conf": 0.82, "crit": 3, "desc": "Java getProtectionDomain self-path lookup" }, { "id": "micro-behaviors/process/io/stream::java-processbuilder-redirect-errors", "conf": 0.92, "crit": 3, "desc": "Java ProcessBuilder merges standard error", "spans": [ [ 5832, 44 ] ] }, { "id": "micro-behaviors/process/io/stream::java-processbuilder-redirect-input", "conf": 0.92, "crit": 3, "desc": "Java ProcessBuilder redirects standard input", "spans": [ [ 5533, 38 ] ] }, { "id": "micro-behaviors/process/io/stream::java-processbuilder-redirect-output", "conf": 0.92, "crit": 3, "desc": "Java ProcessBuilder redirects standard output", "spans": [ [ 5805, 39 ] ] }, { "id": "micro-behaviors/process/thread/lifecycle::jvm-thread-start-bytecode", "conf": 0.94, "crit": 3, "desc": "JVM starts a thread", "spans": [ [ 872, 22 ] ] }, { "id": "objectives/anti-static/obfuscation/reflection/class::java-protectiondomain", "conf": 1.0, "crit": 3, "desc": "Java ProtectionDomain", "spans": [ [ 4491, 19 ], [ 4513, 34 ], [ 4560, 30 ] ] }, { "id": "objectives/anti-static/obfuscation/string/control-prefix::java-control-prefixed-long-string", "atk": "T1027", "mbc": "F0001", "conf": 0.92, "crit": 3, "desc": "Java string starts with control-length prefix" }, { "id": "objectives/credential-access/gaming/minecraft::minecraft-token-getter-ref", "atk": "T1528", "mbc": "B0006", "conf": 0.92, "crit": 3, "desc": "Minecraft access token getter", "spans": [ [ 2121, 35 ] ] }, { "id": "objectives/evasion/self-delete/file/script::java-code-source-location", "atk": "T1070.004", "mbc": "F0007", "conf": 0.78, "crit": 3, "desc": "Java code source location", "spans": [ [ 4596, 13 ] ] }, { "id": "objectives/impact/dos/disk::jvm-two-backward-goto-branches", "atk": "T1499.001", "conf": 0.9, "crit": 3, "desc": "JVM repeated counter backedges", "spans": [ [ 7553, 8 ], [ 7750, 8 ], [ 7846, 8 ], [ 7890, 8 ], [ 8648, 8 ], [ 8846, 8 ], [ 8932, 8 ], [ 9021, 8 ] ] }, { "id": "well-known/game/mod::minecraft-client-class-ref", "conf": 0.9, "crit": 3, "desc": "Minecraft client singleton class reference", "spans": [ [ 1955, 23 ] ] }, { "id": "well-known/game/mod::minecraft-name-getter-ref", "conf": 0.9, "crit": 3, "desc": "Minecraft profile name getter reference", "spans": [ [ 2145, 35 ] ] }, { "id": "well-known/game/mod::minecraft-session-ref", "conf": 0.9, "crit": 3, "desc": "Minecraft session object reference", "spans": [ [ 2092, 23 ] ] }, { "id": "well-known/game/mod::minecraft-uuid-getter-ref", "conf": 0.9, "crit": 3, "desc": "Minecraft profile UUID getter reference", "spans": [ [ 2169, 36 ] ] }, { "id": "well-known/malware/stealer/prefire-shard::prefire-family-literal", "atk": "T1528", "mbc": "B0006", "conf": 0.9, "crit": 1, "desc": "Prefire family name literal", "spans": [ [ 2598, 7 ] ] }, { "id": "micro-behaviors/process/create/spawn::java-processbuilder-start-bytecode", "atk": "T1059", "mbc": "E1203", "conf": 0.94, "crit": 3, "desc": "Java bytecode ProcessBuilder execution", "uses": [ 8, 9 ], "spans": [ [ 327, 31 ], [ 872, 30 ] ] }, { "id": "micro-behaviors/process/io/stream::java-processbuilder-redirected-stdio", "conf": 0.96, "crit": 3, "desc": "Java ProcessBuilder redirects all standard streams", "uses": [ 15, 16, 17 ], "spans": [ [ 5533, 38 ], [ 5805, 39 ], [ 5832, 44 ] ] }, { "id": "well-known/game/mod::minecraft-session-access", "conf": 0.91, "crit": 3, "desc": "Minecraft session profile access", "uses": [ 24, 25, 26 ], "spans": [ [ 1955, 23 ], [ 2092, 23 ], [ 2145, 35 ] ] }, { "id": "objectives/credential-access/gaming/minecraft::minecraft-session-token-access", "atk": "T1528", "mbc": "B0006", "conf": 0.96, "crit": 4, "desc": "Minecraft session token and UUID access", "uses": [ 21, 27, 31 ], "spans": [ [ 1955, 23 ], [ 2092, 23 ], [ 2121, 35 ], [ 2145, 35 ], [ 2169, 36 ] ] }, { "id": "objectives/credential-access/gaming/minecraft::minecraft-token-child-process-stage", "atk": "T1528, T1059", "mbc": "B0006", "conf": 0.99, "crit": 5, "desc": "Minecraft token access alongside redirected child launch", "uses": [ 2, 29, 30, 32 ], "spans": [ [ 327, 31 ], [ 872, 30 ], [ 1955, 23 ], [ 2092, 23 ], [ 2121, 35 ], [ 2145, 35 ], [ 2169, 36 ], [ 3244, 39 ] ] }, { "id": "micro-behaviors/process/create/spawn::child-process-creation-api", "atk": "T1106", "conf": 0.92, "crit": 3, "desc": "Starts a child process through a platform API", "uses": [ 29 ], "spans": [ [ 327, 31 ], [ 872, 30 ] ] } ], "type": "java_class" }, { "ctx": [ { "b": "+kO#^0000+0APp48dNP4fk20vxMW=qrCDt}xMNf\u0026k#RGfo)3Wv0rAfiygho]fkL6mxd)4\u0026ygQ)%2lj\u0026b03M8=C404uvqYZhp\u0026ZF:wPI]VB.LV5wPx4]wN]H}wN//!00Jx67\u00260G5vj#C9zF7R0A=kD0B8%V\u003cx(4r\u003eAT8NH0rry6wN]H}wN//.02PDVC404DBzkLAlsB}Dhz=WFzEWP}wPw1Q3ipbrygho]flIwJy+Fa-B7El^2lkek00+@gv@C)?ASDd^ygho]fkL6mxd)$pC5Iecfhl21xM4ALvqYQ(wPGa\u003cz/oAlA0DvN0rsfQvrM6jy*?i]fkkrEz!\u0026]qo\u003ewAWz!8yEzE^M{A%zWS0rrr$z/oAlz#/}yjzwXEBuPZ911kQ03\u0026*$w6::{z02tOn26qK^uOMK302[Qwz/4dux([3hvLp.@y\u003cxYoq/a*0x\u003ey7Zi@]r:zddc@0rr(-tte^uC404uvqYZhq/)4]zF83WrSJg6vrc140rr^FvrM6jy*?i]fgya}wPh:9z/b^W9rP8p\u0026vLiytHK-7\u003eG@-5ddbFKW53Io1QL0z85a05RVu+", "ln": 0 }, { "b": "3\u0026?:Sd*=n904XcJ6i!dBvrM6jy*?i]fh($kx(mMB2llvS00lv(2llBU00K=PlN=4A02bz*3ihHPgxvEWwPq\u003c3y\u0026YQS6^#:\u003cvrM6jy*?i]fhD4(wN/*zdoWbWh2]Jw04v[b0rrQtz/4dux([3hvLqq6x:jR#3\u0026?gC8WVNa06ppAGycqP%nSc0V%=4^1POJ5000006A[Ep002c-j5M7Vd*kskU\u003cOA}[2iCQV7puQO:Jwa[2qigU=^C^GZF", "ln": 569 }, { "b": "rTX%x09]{itMw7h00V\u003eJAaJ]$0rs8/lN+YzvrM6jy*?i]fh($kx(mMIB.LV5wPx\u003cv0ak!n3ijrhvGuDmBz\u003e91A+PA70rr/ZdnjF+C404uvqYZhq/)4]zF83t0aV7v3ijrhw=R(Z1)?[n\u003cDt+\u003cL=r/cY63UU)4HPyLEoOsPxql8\u003eEX4^PSm7pVfdym\u003e8=hv0b8xk31m\u003c{vr(v3AcRD:dKW#9vrM6jy*?i]fhD4(wN/*znLA(cC404uvqYZh", "ln": 1082 }, { "b": "Tk/IC\u0026g)1dOs/83UJ7}A\u0026g)aO0dB}G3#fi]vj#tkfgGU(wD@i=0rrTBvrM6jy*?i]fgfL:B8}M^F=L\u0026+xjVfYA=l5hv@#B6zBwzWvqfPW03S*uoLO0Vvj#Xkv%8*aBA]JoA=l5hv@#B6zBwzWvqfQv3\u0026\u003e}XG:E*j0epHO9+]bbvj#Xkv%8*aBA]JoA=l5hv@#B6zBwzWvqfP:0eHTQ4qfl]lVlHDq/u/0v}tVv94imfygho]flpYmB-IhrC}RK6wmXXTB-H#6i$8aD0e?f:I2-Fn02PDVC404BwN/\u003e6x([RNlVlHDq/u/0v}t(BJSxa/xjVfUz!0i$x(v\u003e\u002601ZLcoLO0Vvj#IfBt3S(oGJT.Kn$yI0fmby0rrKyvrM6jzE)]yrz(G}0f^G:1:1V.qB{(?5gw#3ygho]fk+uyfi7[wi$8aP0ga2)L(NfL01*RMygho]fk+uyfi7[wj1jhs02bB43ikRSN/JH1xjVfJvSME7B-.g\u003evrue\u003e0g:a33ikRSO=F*R[3!kyQpxD#YwQ8:)x\u00265sX}]HdZu}@l\u003e.#52W$:sBQV]t1[3X2tQQPG$XzT-Z)x@LFYntWeUi\u0026o(\u003e-7@o2MQH#00W7EBy/uk3\u0026)14p6{${0hxL{h0zrH\u003eE)byJ*o70Tl#y.\u003edX7^L^6LDI%dKm\u003e^vhGYUiG?W^PMJ)WfHaZK$)rPy5nM2NyBb0rs\u003eZ)XlurRjcOxNbTd7\u003c+]CAYxC=o(zItRU=Wb-Wc\u003cYB(7\u003eVGQpf6xGxn03:bGkMViQDd0ruaf", "ln": 1595 }, { "b": "c}[w:C404rz.BN]y?kWSoLO0Vvj#C9zF7R0A=kD0B8%V\u003cx(4r\u003eAWjK]wnc6}v@%^v0kFPJ3igng.t%SCA+e=}A+e:5nP5G\u0026Bo8wac}[w:C404uvqYZhp\u0026ZF:wPI]VB.LV5wPx4]wN]H}wN/*zdnjF+C404uvqYZhp\u0026ZF:wPI]VB.LV5wPx\u003cv0k[(R3igti-Sl5#2\u0026\u0026K\u003c(vUU/UBT).YwPSH)vfWaS\u003cR8=MGbVe(v\u003etWV5N$OOzZA5)vxf{Te1{PG5:La(v\u003c(%0ltfv2xBx%z!%Pd0rsI@oLK", "ln": 2678 }, { "b": "0l+Dz26s=Mx(4tY01ZLcoLO0Vvj#tkfgGU(wJHq2=h=e#0b?\u003e:0rrylAbYxawk)EQ0my\u003e-3igng^/xBUA+e=}A+e:5pJZ+#B-X2(!D0L}00\u0026OQ0rr^NwN]H}wN/*JA=M8sq/)4\u003evqM2B9vL8uoLO0Vvj#C9zF7R0A=kD0B8%V\u003cx(4r\u003eAYTWf/z%Oi00\u0026OU0rrBpx(W={Bz(hB0rsO$oLO0Vvj#tkfgGU(wJItmygho]fkL6mxd)84z!0v1B3+1-y?d9$i$8bA0nN$Z2MSYZ00NB=vrcC\u003c02l[hoLO0Vvj#C9zF7R0A=kD0B8%zK0n)\u003eo3igti\u0026Sf2:yiau9uVQ2:01}$uvrM6jy*?i]fh($kx(mMB0rr^iqfb/CDp7n5uWtBwpg56tqEY.c5]}Mdzd)uMy!]m[C6N{$CXQ%]02eawvrM6jzFs2xw[=6)fhM80xGDj{40=R(A^q[fv}etQC(W)HA+fq-", "ln": 2953 }, { "b": "0tU$x6AG0J00)jGBv7m{wPE\u003eL9W\u003cY%vrM6jzFs2xv}Yp\u003eB7GCDlUG[GB7GCPdo/aE0t$[R3ihHQ8VY{GwO#0@wmX.Uq/)4]zF5$I7arxNdnjF+C404uvqYZhq/)4]zF83t0uzgZ3igCm9@#uBoH-w.o-Uk9oK\u00260Tfk20vxMW=qwN]Hp0rryEzaO.yDpqPI026o)qexPHnOq{Fog8YGuW36%BPzEKBAItjuVgm8Aa\u0026Q0yxjztx\u003ehD^wO7@y1zHOsCMv^BA%4.3G+T^\u003e%nSbtQhBYH000000000", "ln": 4019 }, { "b": "04*kp83^\u003eUweLRVg=tQS2FH]UwcuB32]9=V1V=$)hvylc6:ZPmaq\u003eI33Mff:3P5.a6:UP.6:O+^g\u003eH(\u003cGBm*U%kgA*doNI}W/wm[063zE2R9s:jH3wfe51dVjVmf)zw2a902MyIj#Wu{zwi7ox/x]Bzwi7qGeWVIj@\u003eSq0b9(6gcbKQ1qjei04*kw84D:9hv*VnZ64%Y4}ENf6+F1YiUqDL5/zn@5/zeZ6+sW!5[0Kl4G)HV6+tm\u003eg\u003eH(\u003cGC1q25!$$K%k7u/doNJ2W/wm[063wD2E\u003c+8V4JhWR#Jd$o11ZKiU-IE12I[K85o\u003e27gWLUhwW8AYAHtk12.2i85i%Z03\u0026B06=v(76=3{W6=yyo85in?85i{au]iE#rFhj\u003cR#LI-04z4*7}fG4XbYu0d*rP^doM-=qAt^n90rRHrYg%o9jt\u0026J1y@k/whUHv09\u0026Uw9\u003e8bRiV!CZaqD1l9?\u0026S-86o.o1qI}+6^c[)09f%S1qJ3]9Dkz{09iS[WG6/sGDHq[%je5fWG6@ssP/vKWG4)ubn?Zdg=uP%bFBp\u003e6^NrFb]4-s1V^$jhyGp*6^YNObPd{zc(Blj6^Nf4c$1\u003eHblO-f6^N:ag\u003eH(\u003cGEu(0%jXnmYAHtz872C6cJ+8fXbZxT04z4*c:%7jq[8*Go!lyW0cL^KDZT@td*rP^doM-=EyobciW#0%12I[^87Ju6wecR9hy]N]YAHtF12.+HeFP(QdG*Fpu\u003e\u003eq4g-m+C6!QjKA9$IOL2We/0tNj4etra2Y8To.87\u0026q$g/EJW", "ln": 4982 }, { "b": "WG4)uf=qXFg=v9bf$[wTwcuB3gzIZU1V!Exhz(jb6/hM:bPeANh5Oa-g6y#1hdelUf:5jG6/6-og\u003eH(\u003cGF-!d%j+c=doNJBW/wl-XbZOAY8Wy+5^2GwHQEhxWG8J10gyp@OveA\u0026p7\u003cne04*k\u003e892tkweNvlg=vuiikca/wcuB3iU:Y*1V!ZEhARZp6/@5?aq)lQjq*9[jtW{n6/)6(6/*kvg\u003eH(\u003cGGGpk%kgA*doNJIW/wm{0hG?j04z4M5#J8qeJM9lkFvnh89.E+hB5cAZ7\u0026[z1y%zR6*YFoiZJ{blLR%6l81u48a26989X\u003c6g-nH)k[#:4kYy9/F%6b!lJKa+?[5\u003eqsS6Mn05NRS1qmVw04*l38aBY+hB!SOZ7\u003cdG1y%zY6?C$vi.oAin!\u003c@kntl8f8a+Mn8aCuh1yI%pu]e-\u003c1qKJzm@R\u0026)F%6b!n=+\u003c\u0026*Q^CmsS6/u05NRS1RN*@o=lUcWG6t^p8M^m09PIo6\u00265o$pRcQisRT-w0ad+", "ln": 5604 } ], "depth": 1, "facts": { "imp": [ [ "", "java/io/File" ], [ "", "java/security/CodeSource" ], [ "", "java/nio/file/Path" ], [ "", "java/net/URL" ], [ "", "java/lang/Exception" ], [ "", "[C" ], [ "", "java/nio/charset/StandardCharsets" ], [ "", "java/lang/invoke/MethodHandles" ], [ "", "java/lang/Class" ], [ "", "java/util/Base64$Encoder" ], [ "", "java/lang/Integer" ], [ "", "java/lang/String" ], [ "", "java/security/ProtectionDomain" ], [ "", "java/nio/file/LinkOption" ], [ "", "java/lang/ProcessBuilder" ], [ "", "java/lang/StringBuilder" ], [ "", "java/lang/invoke/MethodHandles$Lookup" ], [ "", "java/nio/file/attribute/FileAttribute" ], [ "", "java/util/Base64" ], [ "", "java/lang/System" ], [ "", "com/github/edi" ], [ "", "[Ljava/lang/String;" ], [ "", "java/lang/Object" ], [ "", "java/nio/file/Files" ], [ "", "java/lang/ProcessBuilder$Redirect" ], [ "java/lang/Class", "java/lang/Class.getProtectionDomain" ], [ "java/lang/Class", "getProtectionDomain" ], [ "java/util/Base64", "java/util/Base64.getEncoder" ], [ "java/util/Base64", "getEncoder" ], [ "java/util/Base64$Encoder", "java/util/Base64$Encoder.encodeToString" ], [ "java/util/Base64$Encoder", "encodeToString" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.append" ], [ "java/lang/StringBuilder", "append" ], [ "java/lang/ProcessBuilder", "java/lang/ProcessBuilder.\u003cinit\u003e" ], [ "java/lang/ProcessBuilder", "\u003cinit\u003e" ], [ "java/lang/Integer", "java/lang/Integer.valueOf" ], [ "java/lang/Integer", "valueOf" ], [ "com/github/edi", "com/github/edi.nMX0_KmFSdVZ" ], [ "com/github/edi", "nMX0_KmFSdVZ" ], [ "java/io/File", "java/io/File.\u003cinit\u003e" ], [ "java/io/File", "\u003cinit\u003e" ], [ "java/nio/file/Path", "java/nio/file/Path.of" ], [ "java/nio/file/Path", "of" ], [ "java/lang/ProcessBuilder$Redirect", "java/lang/ProcessBuilder$Redirect.from" ], [ "java/lang/ProcessBuilder$Redirect", "from" ], [ "java/nio/file/Path", "java/nio/file/Path.toString" ], [ "java/nio/file/Path", "toString" ], [ "java/lang/ProcessBuilder", "java/lang/ProcessBuilder.start" ], [ "java/lang/ProcessBuilder", "start" ], [ "com/github/UjlyhtSmASifMu", "com/github/UjlyhtSmASifMu.IZFtgThMB" ], [ "com/github/UjlyhtSmASifMu", "IZFtgThMB" ], [ "java/lang/String", "java/lang/String.charAt" ], [ "java/lang/String", "charAt" ], [ "java/lang/Object", "java/lang/Object.\u003cinit\u003e" ], [ "java/lang/Object", "\u003cinit\u003e" ], [ "java/io/File", "java/io/File.getAbsolutePath" ], [ "java/io/File", "getAbsolutePath" ], [ "java/lang/String", "java/lang/String.toCharArray" ], [ "java/lang/String", "toCharArray" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.toString" ], [ "java/lang/StringBuilder", "toString" ], [ "java/nio/file/Files", "java/nio/file/Files.createDirectories" ], [ "java/nio/file/Files", "createDirectories" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.append" ], [ "java/lang/StringBuilder", "append" ], [ "java/nio/file/Path", "java/nio/file/Path.toFile" ], [ "java/nio/file/Path", "toFile" ], [ "java/lang/ProcessBuilder", "java/lang/ProcessBuilder.redirectOutput" ], [ "java/lang/ProcessBuilder", "redirectOutput" ], [ "com/github/edi", "com/github/edi.\u003cinit\u003e" ], [ "com/github/edi", "\u003cinit\u003e" ], [ "com/github/UjlyhtSmASifMu", "com/github/UjlyhtSmASifMu.run" ], [ "com/github/UjlyhtSmASifMu", "run" ], [ "java/lang/System", "java/lang/System.getProperty" ], [ "java/lang/System", "getProperty" ], [ "java/lang/System", "java/lang/System.arraycopy" ], [ "java/lang/System", "arraycopy" ], [ "java/nio/file/Path", "java/nio/file/Path.resolve" ], [ "java/nio/file/Path", "resolve" ], [ "java/security/CodeSource", "java/security/CodeSource.getLocation" ], [ "java/security/CodeSource", "getLocation" ], [ "java/lang/ProcessBuilder", "java/lang/ProcessBuilder.redirectInput" ], [ "java/lang/ProcessBuilder", "redirectInput" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.\u003cinit\u003e" ], [ "java/lang/StringBuilder", "\u003cinit\u003e" ], [ "java/lang/String", "java/lang/String.getBytes" ], [ "java/lang/String", "getBytes" ], [ "java/io/File", "java/io/File.\u003cinit\u003e" ], [ "java/io/File", "\u003cinit\u003e" ], [ "java/security/ProtectionDomain", "java/security/ProtectionDomain.getCodeSource" ], [ "java/security/ProtectionDomain", "getCodeSource" ], [ "java/net/URL", "java/net/URL.toURI" ], [ "java/net/URL", "toURI" ], [ "java/lang/ProcessBuilder", "java/lang/ProcessBuilder.directory" ], [ "java/lang/ProcessBuilder", "directory" ], [ "com/github/edi", "com/github/edi.main" ], [ "com/github/edi", "main" ], [ "java/lang/String", "java/lang/String.length" ], [ "java/lang/String", "length" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.\u003cinit\u003e" ], [ "java/lang/StringBuilder", "\u003cinit\u003e" ], [ "java/lang/String", "java/lang/String.\u003cinit\u003e" ], [ "java/lang/String", "\u003cinit\u003e" ], [ "java/nio/file/Files", "java/nio/file/Files.exists" ], [ "java/nio/file/Files", "exists" ], [ "java/lang/Class", "java/lang/Class.getName" ], [ "java/lang/Class", "getName" ], [ "com/github/edi", "com/github/edi.getDomain" ], [ "com/github/edi", "getDomain" ], [ "java/lang/System", "java/lang/System.getenv" ], [ "java/lang/System", "getenv" ], [ "java/lang/ProcessBuilder$Redirect", "java/lang/ProcessBuilder$Redirect.appendTo" ], [ "java/lang/ProcessBuilder$Redirect", "appendTo" ], [ "com/github/edi", "com/github/edi.KVgKBPdyYsm" ], [ "com/github/edi", "KVgKBPdyYsm" ], [ "java/lang/String", "java/lang/String.format" ], [ "java/lang/String", "format" ], [ "java/lang/ProcessBuilder", "java/lang/ProcessBuilder.redirectErrorStream" ], [ "java/lang/ProcessBuilder", "redirectErrorStream" ], [ "java/lang/String", "java/lang/String.equals" ], [ "java/lang/String", "equals" ], [ "java/nio/charset/StandardCharsets", "java/nio/charset/StandardCharsets.UTF_8" ], [ "java/nio/charset/StandardCharsets", "UTF_8" ] ], "metrics": { "file": { "size": 11950, "entropy": 5.98 }, "class": { "major_version": 65, "interface_count": 0, "method_ref_count": 49, "constant_pool_size": 343, "external_class_count": 25 }, "binary": { "peak_region_bytes": 4096, "peak_region_entropy": 6.69 }, "imports": { "count": 74 }, "functions": { "count": 4 } } }, "id": 7, "mol": "O₃(As₂ErI)H₅(CmDb₂FOsPo₄)", "path": "lrkeedupe-1.0.0(1).jar!!com/github/UjlyhtSmASifMu.class", "pid": 0, "risk": 11, "sha": "0dfcce2c740d8e0527b9e016b1576defee145e5e72e1a0a4f6fbc081f513bb4e", "size": 11950, "traits": [ { "id": "micro-behaviors/communications/http/lib/urlconnection::java-url-class-bytecode", "atk": "T1071.001", "mbc": "C0002", "conf": 0.86, "crit": 3, "desc": "Java URL class reference", "spans": [ [ 1865, 16 ], [ 1894, 12 ] ] }, { "id": "micro-behaviors/communications/http/lib/urlconnection::jvm-url-class-ref", "atk": "T1071.001", "mbc": "C0002", "conf": 0.9, "crit": 3, "desc": "JVM URL class reference" }, { "id": "micro-behaviors/data/encode/base64::jvm-base64-encode-bytecode", "conf": 0.94, "crit": 3, "desc": "JVM Base64 encodeToString call", "spans": [ [ 4083, 39 ] ] }, { "id": "micro-behaviors/data/string/conversion::tostring-token", "conf": 1.0, "crit": 3, "desc": "References the toString conversion method", "spans": [ [ 1146, 8 ] ] }, { "id": "micro-behaviors/fs/read/file/handle::jvm-io-file-class-ref", "conf": 0.86, "crit": 3, "desc": "JVM File API class reference" }, { "id": "micro-behaviors/fs/read/file/handle::jvm-nio-file-class-ref", "conf": 0.86, "crit": 3, "desc": "JVM NIO file API reference" }, { "id": "micro-behaviors/os/env/gate::jvm-opaque-environment-key", "conf": 0.94, "crit": 1, "desc": "JVM class has generated gate value" }, { "id": "micro-behaviors/os/env/gate::jvm-string-equals-import", "conf": 0.94, "crit": 1, "desc": "JVM class imports String equals", "spans": [ [ 633, 0 ] ] }, { "id": "micro-behaviors/os/env/gate::jvm-system-getenv-import", "conf": 0.94, "crit": 1, "desc": "JVM class imports System getenv", "spans": [ [ 2077, 0 ] ] }, { "id": "micro-behaviors/process/create/spawn::java-processbuilder-bytecode", "atk": "T1059", "mbc": "E1203", "conf": 0.88, "crit": 3, "desc": "Java bytecode ProcessBuilder reference", "spans": [ [ 66, 71 ] ] }, { "id": "micro-behaviors/process/create/spawn::java-processbuilder-init-bytecode-symbol", "atk": "T1059", "mbc": "E1203", "conf": 0.92, "crit": 3, "desc": "Java bytecode ProcessBuilder constructor", "spans": [ [ 296, 31 ] ] }, { "id": "micro-behaviors/process/create/spawn::java-processbuilder-start-bytecode-symbol", "atk": "T1059", "mbc": "E1203", "conf": 0.95, "crit": 3, "desc": "Java bytecode ProcessBuilder start", "spans": [ [ 3175, 30 ] ] }, { "id": "micro-behaviors/process/info/current::codesource-class", "conf": 0.85, "crit": 3, "desc": "Java CodeSource class reference" }, { "id": "micro-behaviors/process/info/current::getlocation-ref", "conf": 0.82, "crit": 3, "desc": "Java getLocation call reference" }, { "id": "micro-behaviors/process/info/current::protection-domain-class", "conf": 0.85, "crit": 3, "desc": "Java ProtectionDomain class reference" }, { "id": "micro-behaviors/process/info/current::touri-ref", "conf": 0.82, "crit": 3, "desc": "Java toURI call reference" }, { "id": "micro-behaviors/process/info/selfpath::java-protection-domain", "conf": 0.82, "crit": 3, "desc": "Java getProtectionDomain self-path lookup" }, { "id": "micro-behaviors/process/io/stream::java-processbuilder-redirect-errors", "conf": 0.92, "crit": 3, "desc": "Java ProcessBuilder merges standard error", "spans": [ [ 3044, 44 ] ] }, { "id": "micro-behaviors/process/io/stream::java-processbuilder-redirect-input", "conf": 0.92, "crit": 3, "desc": "Java ProcessBuilder redirects standard input", "spans": [ [ 2742, 38 ] ] }, { "id": "micro-behaviors/process/io/stream::java-processbuilder-redirect-output", "conf": 0.92, "crit": 3, "desc": "Java ProcessBuilder redirects standard output", "spans": [ [ 3017, 39 ] ] }, { "id": "objectives/anti-static/obfuscation/reflection/class::java-protectiondomain", "conf": 1.0, "crit": 3, "desc": "Java ProtectionDomain", "spans": [ [ 1659, 19 ], [ 1681, 34 ], [ 1728, 30 ] ] }, { "id": "objectives/anti-static/obfuscation/string/control-prefix::java-control-prefixed-long-string", "atk": "T1027", "mbc": "F0001", "conf": 0.92, "crit": 3, "desc": "Java string starts with control-length prefix" }, { "id": "objectives/evasion/self-delete/file/script::java-code-source-location", "atk": "T1070.004", "mbc": "F0007", "conf": 0.78, "crit": 3, "desc": "Java code source location", "spans": [ [ 1764, 13 ] ] }, { "id": "objectives/impact/dos/disk::jvm-two-backward-goto-branches", "atk": "T1499.001", "conf": 0.9, "crit": 3, "desc": "JVM repeated counter backedges", "spans": [ [ 5046, 8 ], [ 5211, 8 ], [ 5283, 8 ], [ 5386, 8 ], [ 5466, 8 ], [ 5668, 8 ], [ 5780, 8 ], [ 5871, 8 ] ] }, { "id": "micro-behaviors/os/env/gate::jvm-opaque-secret-environment-gate", "conf": 0.97, "crit": 3, "desc": "JVM compares opaque environment gate", "uses": [ 6, 7, 8 ], "spans": [ [ 633, 6 ], [ 2077, 6 ] ] }, { "id": "micro-behaviors/process/create/spawn::java-processbuilder-start-bytecode", "atk": "T1059", "mbc": "E1203", "conf": 0.94, "crit": 3, "desc": "Java bytecode ProcessBuilder execution", "uses": [ 10, 11 ], "spans": [ [ 296, 31 ], [ 3175, 30 ] ] }, { "id": "micro-behaviors/process/io/stream::java-processbuilder-redirected-stdio", "conf": 0.96, "crit": 3, "desc": "Java ProcessBuilder redirects all standard streams", "uses": [ 17, 18, 19 ], "spans": [ [ 2742, 38 ], [ 3017, 39 ], [ 3044, 44 ] ] }, { "id": "micro-behaviors/process/create/spawn::child-process-creation-api", "atk": "T1106", "conf": 0.92, "crit": 3, "desc": "Starts a child process through a platform API", "uses": [ 25 ], "spans": [ [ 296, 31 ], [ 3175, 30 ] ] } ], "type": "java_class" }, { "ctx": [ { "b": "+kO#^0000+0po^!a7GkafkLVAwO2y{AaHXjy?WD#Bt348AaI%TA+e*12lj=902GJ:Bt4GBzE)r#vp\u003cQmv@bN{B6*:WhWor+0rrS#B-p[\u003cv@=c(zz2WjC3$yKbw}7mfkUAvwN/-", "ln": 0 }, { "b": "gbQ\u003cBh4fGd038yD2(@fI01ipZv@bZQvrc0(Bpne{02b+up5@Pv010dXv@bZJz!9z/0mp=X3ii*3^G6s:zE)]yze0)0v@=0\u0026Bt4cuvrlG%gCHM*0mR2H3VfD%xM4A*f/p*y0rs5!dnjR\u003cBt4GBzE)r#vp\u003cQmv@bN{B6*ZTfGPWy!=sqe0m.840rsfJz/4dzA+/k$woz\u003c5fjO*jwO#Pym}=*ZBvpm\u003cwD@j?0rrvzwPzy3A+$*S94jG#wPPOxx(mG(A:-N4fjO*bB8$W", "ln": 2872 }, { "b": "bME#F69bMyZYkRW1]].BTPlfqbMF5Hcif[y.t\u003e?Y2MMBRP8=+ebMFbJ\u003eL$O.5D\u00269a0001(0001)0001[000010k[(R0098X0000I00962000021fqF500ieZ000060096109f9Z0000c0096100icy03Isx5cq\u0026]04X9K0osaW06Hq.00ic200K\u003cX0lIFC", "ln": 4381 } ], "depth": 1, "facts": { "imp": [ [ "", "net/minecraft/class_4185$class_7840" ], [ "", "java/lang/invoke/MethodHandles" ], [ "", "net/minecraft/class_4185" ], [ "", "net/minecraft/class_437" ], [ "", "com/lrkeedupe/client/DupeState" ], [ "", "java/lang/invoke/MethodHandles$Lookup" ], [ "", "java/lang/String" ], [ "", "com/lrkeedupe/client/GhostDupe" ], [ "", "net/minecraft/class_4185$class_4241" ], [ "", "java/lang/invoke/StringConcatFactory" ], [ "", "net/minecraft/class_2561" ], [ "", "net/minecraft/class_310" ], [ "", "java/lang/invoke/LambdaMetafactory" ], [ "", "net/minecraft/class_332" ], [ "com/lrkeedupe/client/DupeState", "com/lrkeedupe/client/DupeState.cycleTarget" ], [ "com/lrkeedupe/client/DupeState", "cycleTarget" ], [ "com/lrkeedupe/client/DupeScreen", "com/lrkeedupe/client/DupeScreen.field_22789" ], [ "com/lrkeedupe/client/DupeScreen", "field_22789" ], [ "com/lrkeedupe/client/DupeScreen", "com/lrkeedupe/client/DupeScreen.method_25419" ], [ "com/lrkeedupe/client/DupeScreen", "method_25419" ], [ "com/lrkeedupe/client/GhostDupe", "com/lrkeedupe/client/GhostDupe.perform" ], [ "com/lrkeedupe/client/GhostDupe", "perform" ], [ "com/lrkeedupe/client/DupeState", "com/lrkeedupe/client/DupeState.cycleMode" ], [ "com/lrkeedupe/client/DupeState", "cycleMode" ], [ "net/minecraft/class_4185$class_7840", "net/minecraft/class_4185$class_7840.method_46431" ], [ "net/minecraft/class_4185$class_7840", "method_46431" ], [ "net/minecraft/class_2561", "net/minecraft/class_2561.method_43470" ], [ "net/minecraft/class_2561", "method_43470" ], [ "net/minecraft/class_437", "net/minecraft/class_437.\u003cinit\u003e" ], [ "net/minecraft/class_437", "\u003cinit\u003e" ], [ "net/minecraft/class_4185", "net/minecraft/class_4185.method_25355" ], [ "net/minecraft/class_4185", "method_25355" ], [ "com/lrkeedupe/client/DupeScreen", "com/lrkeedupe/client/DupeScreen.lambda$init$4" ], [ "com/lrkeedupe/client/DupeScreen", "lambda$init$4" ], [ "java/lang/invoke/StringConcatFactory", "java/lang/invoke/StringConcatFactory.makeConcatWithConstants" ], [ "java/lang/invoke/StringConcatFactory", "makeConcatWithConstants" ], [ "com/lrkeedupe/client/DupeScreen", "com/lrkeedupe/client/DupeScreen.field_22790" ], [ "com/lrkeedupe/client/DupeScreen", "field_22790" ], [ "net/minecraft/class_4185$class_7840", "net/minecraft/class_4185$class_7840.method_46434" ], [ "net/minecraft/class_4185$class_7840", "method_46434" ], [ "com/lrkeedupe/client/DupeScreen", "com/lrkeedupe/client/DupeScreen.lambda$init$1" ], [ "com/lrkeedupe/client/DupeScreen", "lambda$init$1" ], [ "com/lrkeedupe/client/DupeScreen", "com/lrkeedupe/client/DupeScreen.lambda$init$0" ], [ "com/lrkeedupe/client/DupeScreen", "lambda$init$0" ], [ "java/lang/invoke/LambdaMetafactory", "java/lang/invoke/LambdaMetafactory.metafactory" ], [ "java/lang/invoke/LambdaMetafactory", "metafactory" ], [ "net/minecraft/class_332", "net/minecraft/class_332.method_25294" ], [ "net/minecraft/class_332", "method_25294" ], [ "net/minecraft/class_310", "net/minecraft/class_310.method_1551" ], [ "net/minecraft/class_310", "method_1551" ], [ "com/lrkeedupe/client/DupeState", "com/lrkeedupe/client/DupeState.getTarget" ], [ "com/lrkeedupe/client/DupeState", "getTarget" ], [ "com/lrkeedupe/client/DupeScreen", "com/lrkeedupe/client/DupeScreen.lambda$init$2" ], [ "com/lrkeedupe/client/DupeScreen", "lambda$init$2" ], [ "com/lrkeedupe/client/DupeScreen", "com/lrkeedupe/client/DupeScreen.lambda$init$3" ], [ "com/lrkeedupe/client/DupeScreen", "lambda$init$3" ], [ "com/lrkeedupe/client/DupeState", "com/lrkeedupe/client/DupeState.particlesAndSound" ], [ "com/lrkeedupe/client/DupeState", "particlesAndSound" ], [ "com/lrkeedupe/client/DupeState", "com/lrkeedupe/client/DupeState.getMode" ], [ "com/lrkeedupe/client/DupeState", "getMode" ], [ "com/lrkeedupe/client/DupeScreen", "com/lrkeedupe/client/DupeScreen.lambda$init$5" ], [ "com/lrkeedupe/client/DupeScreen", "lambda$init$5" ], [ "com/lrkeedupe/client/DupeScreen", "com/lrkeedupe/client/DupeScreen.field_22793" ], [ "com/lrkeedupe/client/DupeScreen", "field_22793" ], [ "com/lrkeedupe/client/DupeState", "com/lrkeedupe/client/DupeState.chatMessage" ], [ "com/lrkeedupe/client/DupeState", "chatMessage" ], [ "com/lrkeedupe/client/DupeScreen", "com/lrkeedupe/client/DupeScreen.method_37063" ], [ "com/lrkeedupe/client/DupeScreen", "method_37063" ], [ "net/minecraft/class_437", "net/minecraft/class_437.method_25394" ], [ "net/minecraft/class_437", "method_25394" ], [ "net/minecraft/class_4185", "net/minecraft/class_4185.method_46430" ], [ "net/minecraft/class_4185", "method_46430" ], [ "net/minecraft/class_332", "net/minecraft/class_332.method_25300" ], [ "net/minecraft/class_332", "method_25300" ] ], "metrics": { "file": { "size": 5302, "entropy": 5.8 }, "class": { "major_version": 65, "interface_count": 0, "method_ref_count": 30, "constant_pool_size": 237, "external_class_count": 14 }, "binary": { "peak_region_bytes": 4096, "peak_region_entropy": 5.74 }, "imports": { "count": 44 }, "functions": { "count": 10 } } }, "id": 11, "mol": "K(Ga)", "path": "lrkeedupe-1.0.0(1).jar!!com/lrkeedupe/client/DupeScreen.class", "pid": 0, "risk": 1, "sha": "ed33f37b6e97330ad97fa2ed238cc920b57856cf4f70331f6ad3c283bead3545", "size": 5302, "traits": [ { "id": "well-known/game/mod::minecraft-client-class-ref", "conf": 0.9, "crit": 3, "desc": "Minecraft client singleton class reference", "spans": [ [ 2936, 23 ] ] } ], "type": "java_class" }, { "ctx": [ { "b": "+kO#^0000+0p{i\u003e9+fb9fkLVAwO2y{AaHXjy?WD#Bt3c$z/Z1*B-p)%009925nCS%vj#C9zF7Q#vRPE:Bo.^F0rrQ1xM4%lm0iDWe]1*rvf3uOygho]fkL6mxd)$pC5Iecfhl0", "ln": 0 }, { "b": "fgPX]B96/)AaI9i00^EOA+olgz2\u003cRRc}[I\u0026Bt4GBzE)r#vp\u003cQmv@bN{B6*ZTfGQZ:0rrsly?WD#Bo8vTzE)]yze0)0v@=0\u0026Bt4cuvrlG%gCHM*02bCl3ta0-y?c)ch.)h\u003c02XEFwPPOxx(mG(A:-N4fjO*bB8$XEg=vA702tLJ2(\u003eXu7Y:Qzw[+*)wm45Hi5Z\u003cr8ba{VBt4GBzE)r#vp\u003cQmv@bN{B6**Yi6dJG8upY.02kFN0rr{NwPPOxx(mG(A:-N4fjO*bB8$W", "ln": 229 }, { "b": "03+jF04yaw04!*pWG5gM07l]E1qI4J38dzKeenq@06rjB83NCGl7d=\u002683H(YWG5Yk1?1z39BMwSo%$40GAIsN%i-wqX=u1o0jS2qRVsN:WG6(11q}uJ0701M3mVW3XbY%x12Zq+hu\u003c)2evCK[Q5Z5=1S:rqGE^\u0026xWG5xI2n)=P0701Mf=pb50bT+583EwFl(^0CwvIRlhvglb6:.qGq7JB^83)UJAtnS(31bT{RVn$12n)VO0cKXfhw(+d07N[iWG5Z\u002604w=\u003cWG5Yk2ETR5whTYd2PTS-wvIRlhvgla6:.qGCOHw%31bT{GA.EP%8PUg83EwFE7old0rxXhH5.j-0aAekIKsDHdZPf@e4bCre4bCue4bCxVh*u00h6-e1gwib12Zn%1p#9r05=sl03euBTsHZVJ\u003c]7)6ACvIv\u003ej$/KQ\u003e}LWG8M40iW7pUXdCQ6ACAGWG9^\u00261oCC2:/$*C00rk*0000T01O]b5c\u0026gS0r8%l2llW-0v){C1Q$qe6BaR3@qW040Sh{\u003e2ll{-06H8T1]eci}#v#y}t-IQ(I{[+Q5VOw000Jf1PP8l5DABz7620F8upGLb(!XXf8#^*hVKV{kl8M3qVENksPxAww=J\u003eLyYCKSBo0A", "ln": 3374 } ], "depth": 1, "facts": { "imp": [ [ "", "net/minecraft/class_338" ], [ "", "java/lang/Object" ], [ "", "net/minecraft/class_329" ], [ "", "java/lang/invoke/MethodHandles" ], [ "", "net/minecraft/class_746" ], [ "", "com/lrkeedupe/client/DupeState" ], [ "", "net/minecraft/class_2561" ], [ "", "net/minecraft/class_1661" ], [ "", "java/lang/invoke/StringConcatFactory" ], [ "", "net/minecraft/class_1799" ], [ "", "java/lang/Math" ], [ "", "net/minecraft/class_3419" ], [ "", "net/minecraft/class_310" ], [ "", "net/minecraft/class_638" ], [ "", "java/lang/invoke/MethodHandles$Lookup" ], [ "", "net/minecraft/class_3417" ], [ "", "java/lang/String" ], [ "", "net/minecraft/class_2398" ], [ "java/lang/Math", "java/lang/Math.random" ], [ "java/lang/Math", "random" ], [ "net/minecraft/class_2561", "net/minecraft/class_2561.method_43470" ], [ "net/minecraft/class_2561", "method_43470" ], [ "net/minecraft/class_310", "net/minecraft/class_310.field_1705" ], [ "net/minecraft/class_310", "field_1705" ], [ "java/lang/Object", "java/lang/Object.\u003cinit\u003e" ], [ "java/lang/Object", "\u003cinit\u003e" ], [ "net/minecraft/class_1799", "net/minecraft/class_1799.method_7914" ], [ "net/minecraft/class_1799", "method_7914" ], [ "net/minecraft/class_1661", "net/minecraft/class_1661.method_5439" ], [ "net/minecraft/class_1661", "method_5439" ], [ "net/minecraft/class_1799", "net/minecraft/class_1799.method_7939" ], [ "net/minecraft/class_1799", "method_7939" ], [ "net/minecraft/class_3417", "net/minecraft/class_3417.field_15197" ], [ "net/minecraft/class_3417", "field_15197" ], [ "net/minecraft/class_2561", "net/minecraft/class_2561.getString" ], [ "net/minecraft/class_2561", "getString" ], [ "com/lrkeedupe/client/DupeState", "com/lrkeedupe/client/DupeState.getTarget" ], [ "com/lrkeedupe/client/DupeState", "getTarget" ], [ "java/lang/String", "java/lang/String.equals" ], [ "java/lang/String", "equals" ], [ "com/lrkeedupe/client/GhostDupe", "com/lrkeedupe/client/GhostDupe.announce" ], [ "com/lrkeedupe/client/GhostDupe", "announce" ], [ "net/minecraft/class_2398", "net/minecraft/class_2398.field_11211" ], [ "net/minecraft/class_2398", "field_11211" ], [ "net/minecraft/class_746", "net/minecraft/class_746.method_6047" ], [ "net/minecraft/class_746", "method_6047" ], [ "net/minecraft/class_638", "net/minecraft/class_638.method_8406" ], [ "net/minecraft/class_638", "method_8406" ], [ "net/minecraft/class_329", "net/minecraft/class_329.method_1743" ], [ "net/minecraft/class_329", "method_1743" ], [ "net/minecraft/class_1799", "net/minecraft/class_1799.method_7960" ], [ "net/minecraft/class_1799", "method_7960" ], [ "net/minecraft/class_1799", "net/minecraft/class_1799.method_7972" ], [ "net/minecraft/class_1799", "method_7972" ], [ "net/minecraft/class_746", "net/minecraft/class_746.method_23321" ], [ "net/minecraft/class_746", "method_23321" ], [ "net/minecraft/class_338", "net/minecraft/class_338.method_1812" ], [ "net/minecraft/class_338", "method_1812" ], [ "net/minecraft/class_310", "net/minecraft/class_310.field_1724" ], [ "net/minecraft/class_310", "field_1724" ], [ "net/minecraft/class_1661", "net/minecraft/class_1661.method_5438" ], [ "net/minecraft/class_1661", "method_5438" ], [ "net/minecraft/class_638", "net/minecraft/class_638.method_8486" ], [ "net/minecraft/class_638", "method_8486" ], [ "net/minecraft/class_1799", "net/minecraft/class_1799.method_7933" ], [ "net/minecraft/class_1799", "method_7933" ], [ "net/minecraft/class_746", "net/minecraft/class_746.method_23317" ], [ "net/minecraft/class_746", "method_23317" ], [ "net/minecraft/class_746", "net/minecraft/class_746.method_31548" ], [ "net/minecraft/class_746", "method_31548" ], [ "java/lang/Math", "java/lang/Math.min" ], [ "java/lang/Math", "min" ], [ "net/minecraft/class_1799", "net/minecraft/class_1799.method_7964" ], [ "net/minecraft/class_1799", "method_7964" ], [ "net/minecraft/class_746", "net/minecraft/class_746.method_23318" ], [ "net/minecraft/class_746", "method_23318" ], [ "net/minecraft/class_1799", "net/minecraft/class_1799.method_31577" ], [ "net/minecraft/class_1799", "method_31577" ], [ "com/lrkeedupe/client/DupeState", "com/lrkeedupe/client/DupeState.getMode" ], [ "com/lrkeedupe/client/DupeState", "getMode" ], [ "com/lrkeedupe/client/DupeState", "com/lrkeedupe/client/DupeState.particlesAndSound" ], [ "com/lrkeedupe/client/DupeState", "particlesAndSound" ], [ "net/minecraft/class_1661", "net/minecraft/class_1661.method_5447" ], [ "net/minecraft/class_1661", "method_5447" ], [ "net/minecraft/class_3419", "net/minecraft/class_3419.field_15248" ], [ "net/minecraft/class_3419", "field_15248" ], [ "com/lrkeedupe/client/DupeState", "com/lrkeedupe/client/DupeState.chatMessage" ], [ "com/lrkeedupe/client/DupeState", "chatMessage" ], [ "java/lang/invoke/StringConcatFactory", "java/lang/invoke/StringConcatFactory.makeConcatWithConstants" ], [ "java/lang/invoke/StringConcatFactory", "makeConcatWithConstants" ], [ "net/minecraft/class_1799", "net/minecraft/class_1799.method_7947" ], [ "net/minecraft/class_1799", "method_7947" ], [ "net/minecraft/class_310", "net/minecraft/class_310.field_1687" ], [ "net/minecraft/class_310", "field_1687" ] ], "metrics": { "file": { "size": 4341, "entropy": 5.91 }, "class": { "major_version": 65, "interface_count": 0, "method_ref_count": 38, "constant_pool_size": 243, "external_class_count": 18 }, "binary": { "peak_region_bytes": 4096, "peak_region_entropy": 5.61 }, "imports": { "count": 56 }, "functions": { "count": 3 } } }, "id": 13, "mol": "K(Ga)O(I)", "path": "lrkeedupe-1.0.0(1).jar!!com/lrkeedupe/client/GhostDupe.class", "pid": 0, "risk": 2, "sha": "f41d208fc666d627b5f40fca99ed719c600b6d9667388156b3d1ac0c46a333a1", "size": 4341, "traits": [ { "id": "objectives/impact/dos/disk::jvm-two-backward-goto-branches", "atk": "T1499.001", "conf": 0.9, "crit": 3, "desc": "JVM repeated counter backedges", "spans": [ [ 3438, 8 ], [ 3622, 8 ], [ 3737, 8 ] ] }, { "id": "well-known/game/mod::minecraft-client-class-ref", "conf": 0.9, "crit": 3, "desc": "Minecraft client singleton class reference", "spans": [ [ 293, 23 ] ] } ], "type": "java_class" }, { "ctx": [ { "b": "+kO#^0000+0eZ^SbX7+ffkLVAwO2y{AaHXjy?WD#Bt3sdyH}6/B-p[Vy?WD#Bo.^D0rrWCvrM6jy*?i]fhD4(wN//!00rl4c2Npofj[T4A+P32v\u003eRnfx!I?\u0026x\u003eqg7o(BMlzFsg", "ln": 0 }, { "b": "g=42\u003c00sR#s{$yn09/\u003ch5cb#p03tY?z7/ZCyH}6/B-p[Bv@b\u003c\u003czGEK1B-p[\u003cv@=c(zu*eG3ijDlblm=XzE)]yze0)0v@=0\u0026Bt4cuvrlG%gCHM*0aC%e3VfD%xM4A*f/pTz0rs8/oM1A-fkUAvwN/:?w]]Xoy*?yauO\u003cL$j1jhs0aV7v3ijMow=R(Mv@Diqy\u0026Tr5wN]}5wImLfx\u003eqg7fgPX]B96/)AaGmOxAn8rAaK64z/PX60bqH33ij=uyxjzMoM1A-fkUAvwN/-", "ln": 1796 } ], "depth": 1, "facts": { "imp": [ [ "", "net/minecraft/class_310" ], [ "", "net/minecraft/class_2960" ], [ "", "java/lang/invoke/MethodHandles" ], [ "", "net/minecraft/class_304" ], [ "", "net/minecraft/class_3675$class_307" ], [ "", "net/fabricmc/fabric/api/client/event/lifecycle/v1/ClientTickEvents$EndTick" ], [ "", "java/lang/invoke/LambdaMetafactory" ], [ "", "net/fabricmc/fabric/api/client/event/lifecycle/v1/ClientTickEvents" ], [ "", "com/lrkeedupe/client/GhostDupe" ], [ "", "java/lang/invoke/MethodHandles$Lookup" ], [ "", "java/lang/Object" ], [ "", "net/minecraft/class_304$class_11900" ], [ "", "com/lrkeedupe/client/DupeScreen" ], [ "", "net/fabricmc/api/ClientModInitializer" ], [ "", "net/fabricmc/fabric/api/event/Event" ], [ "", "net/minecraft/class_3675" ], [ "", "net/fabricmc/fabric/api/client/keybinding/v1/KeyBindingHelper" ], [ "net/minecraft/class_304", "net/minecraft/class_304.\u003cinit\u003e" ], [ "net/minecraft/class_304", "\u003cinit\u003e" ], [ "com/lrkeedupe/client/LrkeedupeClient", "com/lrkeedupe/client/LrkeedupeClient.quickDupeKey" ], [ "com/lrkeedupe/client/LrkeedupeClient", "quickDupeKey" ], [ "net/minecraft/class_3675$class_307", "net/minecraft/class_3675$class_307.field_1668" ], [ "net/minecraft/class_3675$class_307", "field_1668" ], [ "com/lrkeedupe/client/LrkeedupeClient", "com/lrkeedupe/client/LrkeedupeClient.CATEGORY" ], [ "com/lrkeedupe/client/LrkeedupeClient", "CATEGORY" ], [ "net/fabricmc/fabric/api/client/event/lifecycle/v1/ClientTickEvents", "net/fabricmc/fabric/api/client/event/lifecycle/v1/ClientTickEvents.END_CLIENT_TICK" ], [ "net/fabricmc/fabric/api/client/event/lifecycle/v1/ClientTickEvents", "END_CLIENT_TICK" ], [ "com/lrkeedupe/client/LrkeedupeClient", "com/lrkeedupe/client/LrkeedupeClient.lambda$onInitializeClient$0" ], [ "com/lrkeedupe/client/LrkeedupeClient", "lambda$onInitializeClient$0" ], [ "net/minecraft/class_304$class_11900", "net/minecraft/class_304$class_11900.method_74698" ], [ "net/minecraft/class_304$class_11900", "method_74698" ], [ "com/lrkeedupe/client/GhostDupe", "com/lrkeedupe/client/GhostDupe.perform" ], [ "com/lrkeedupe/client/GhostDupe", "perform" ], [ "net/minecraft/class_2960", "net/minecraft/class_2960.method_60655" ], [ "net/minecraft/class_2960", "method_60655" ], [ "net/fabricmc/fabric/api/client/keybinding/v1/KeyBindingHelper", "net/fabricmc/fabric/api/client/keybinding/v1/KeyBindingHelper.registerKeyBinding" ], [ "net/fabricmc/fabric/api/client/keybinding/v1/KeyBindingHelper", "registerKeyBinding" ], [ "com/lrkeedupe/client/LrkeedupeClient", "com/lrkeedupe/client/LrkeedupeClient.openGuiKey" ], [ "com/lrkeedupe/client/LrkeedupeClient", "openGuiKey" ], [ "java/lang/Object", "java/lang/Object.\u003cinit\u003e" ], [ "java/lang/Object", "\u003cinit\u003e" ], [ "net/minecraft/class_304", "net/minecraft/class_304.method_1436" ], [ "net/minecraft/class_304", "method_1436" ], [ "java/lang/invoke/LambdaMetafactory", "java/lang/invoke/LambdaMetafactory.metafactory" ], [ "java/lang/invoke/LambdaMetafactory", "metafactory" ], [ "com/lrkeedupe/client/DupeScreen", "com/lrkeedupe/client/DupeScreen.\u003cinit\u003e" ], [ "com/lrkeedupe/client/DupeScreen", "\u003cinit\u003e" ], [ "net/minecraft/class_310", "net/minecraft/class_310.method_1507" ], [ "net/minecraft/class_310", "method_1507" ], [ "net/fabricmc/fabric/api/event/Event", "net/fabricmc/fabric/api/event/Event.register" ], [ "net/fabricmc/fabric/api/event/Event", "register" ] ], "metrics": { "file": { "size": 3017, "entropy": 5.58 }, "class": { "major_version": 65, "interface_count": 1, "method_ref_count": 17, "constant_pool_size": 138, "external_class_count": 17 }, "binary": { "peak_region_bytes": 3017, "peak_region_entropy": 5.44 }, "imports": { "count": 34 }, "functions": { "count": 4 } } }, "id": 14, "mol": "K(Ga)", "path": "lrkeedupe-1.0.0(1).jar!!com/lrkeedupe/client/LrkeedupeClient.class", "pid": 0, "risk": 1, "sha": "58aea857b32c71bc2aa925d1967a0823cdc7b6bd66edfa81b37ec23fdb64d41c", "size": 3017, "traits": [ { "id": "well-known/game/mod::minecraft-client-class-ref", "conf": 0.9, "crit": 3, "desc": "Minecraft client singleton class reference", "spans": [ [ 1860, 23 ] ] } ], "type": "java_class" }, { "ctx": [ { "b": "DKp(rb6dmcwO\u003e\u003cRwPz\u003caz/c:WatCzOarR\u003exwfK5Sb5zpnwO2y{AaHjA3lQDnC4CYnx(v(kiV]R3e?![ia$K6zar\u003eYizdK[Lar\u003eSxyH}6/B-p[oed9Hxb4Lnav/", "ln": 0, "col": 1, "line": 1 } ], "depth": 1, "facts": { "metrics": { "file": { "size": 854, "entropy": 4.67 }, "json": { "parsed_bytes": 854, "parse_limit_bytes": 76800 }, "binary": { "peak_region_bytes": 854, "peak_region_entropy": 4.67 } } }, "id": 17, "mol": "Md(Pa)", "path": "lrkeedupe-1.0.0(1).jar!!fabric.mod.json", "pid": 0, "risk": 1, "sha": "8d21ba5723abe798e10333997ecbc6a87ad21f2ca341d83a4cbb7df8e58620f9", "size": 854, "traits": [ { "id": "metadata/package/config::fabric-mod-metadata", "conf": 0.9, "crit": 3, "desc": "Fabric mod metadata resource" } ], "type": "json" } ], "rev": "c1ea9", "v": "8" } }