{ "llm": { "conf": 0.9949757, "grade": "hostile", "model": "Qwen/Qwen3.8-27B", "before": { "lvl": 1, "prob": 0.992501, "class": "hostile" }, "outcome": "hostile", "interpretation": "Minecraft credential stealer with C2" }, "ml": { "v": "7", "eng": "2.12.0-beta.0", "lvl": 0, "conf": 100, "mods": [ { "cls": 2, "raw": 0.992501, "rte": "az", "prob": 0.992501 }, { "cls": 0, "raw": 0.99410826, "rte": "az/jar", "prob": 0.99410826 } ], "prob": 0.992501, "files": [ { "id": 0, "lvl": 0, "conf": 100, "prob": 0.9925010204315186, "type": "jar" }, { "id": 1, "lvl": -1, "conf": 0, "prob": 0.00002794464489852544, "type": "java_class" }, { "id": 4, "lvl": -1, "conf": 0, "prob": 0.000014980633750383276, "type": "java_class" }, { "id": 5, "lvl": -1, "conf": 0, "prob": 0.000024358430891879834, "type": "java_class" }, { "id": 6, "lvl": -1, "conf": 0, "prob": 0.0009528796072117984, "type": "java_class" }, { "id": 7, "lvl": -1, "conf": 0, "prob": 0.00002450744250381831, "type": "java_class" }, { "id": 8, "lvl": -1, "conf": 0, "prob": 0.00002794464489852544, "type": "java_class" }, { "id": 11, "lvl": -1, "conf": 0, "prob": 0.000014980633750383276, "type": "java_class" }, { "id": 12, "lvl": -1, "conf": 0, "prob": 0.000024358430891879834, "type": "java_class" }, { "id": 13, "lvl": -1, "conf": 0, "prob": 0.0009528796072117984, "type": "java_class" }, { "id": 14, "lvl": -1, "conf": 0, "prob": 0.000024338563889614306, "type": "java_class" }, { "id": 15, "lvl": -1, "conf": 0, "prob": 0.00002794464489852544, "type": "java_class" }, { "id": 18, "lvl": -1, "conf": 0, "prob": 0.000014980633750383276, "type": "java_class" }, { "id": 19, "lvl": -1, "conf": 0, "prob": 0.000024358430891879834, "type": "java_class" }, { "id": 20, "lvl": -1, "conf": 0, "prob": 0.0009113947744481266, "type": "java_class" }, { "id": 21, "lvl": -1, "conf": 0, "prob": 0.000025937953978427686, "type": "java_class" }, { "id": 24, "lvl": -1, "conf": 0, "prob": 0.000012566645636979956, "type": "png" }, { "id": 25, "lvl": -1, "conf": 0, "prob": 0.000012854735359724145, "type": "png" }, { "id": 40, "lvl": -1, "conf": 0, "prob": 0.000014066696166992188, "type": "java_class" }, { "id": 41, "lvl": -1, "conf": 0, "prob": 0.00016724069428164512, "type": "java_class" }, { "id": 42, "lvl": -1, "conf": 0, "prob": 0.0001461605279473588, "type": "java_class" }, { "id": 45, "lvl": -1, "conf": 0, "prob": 0.000018546978026279248, "type": "java_class" }, { "id": 46, "lvl": -1, "conf": 0, "prob": 0.000014444191947404761, "type": "java_class" }, { "id": 51, "lvl": -1, "conf": 0, "prob": 0.000018378099412075244, "type": "java_class" }, { "id": 52, "lvl": -1, "conf": 0, "prob": 0.00001687804797256831, "type": "java_class" }, { "id": 54, "lvl": -1, "conf": 0, "prob": 0.00001687804797256831, "type": "java_class" }, { "id": 55, "lvl": -1, "conf": 0, "prob": 0.000017195940017700195, "type": "java_class" }, { "id": 56, "lvl": -1, "conf": 0, "prob": 0.000013808409676130395, "type": "java_class" }, { "id": 57, "lvl": -1, "conf": 0, "prob": 0.00001687804797256831, "type": "java_class" }, { "id": 59, "lvl": -1, "conf": 0, "prob": 0.000014930963516235352, "type": "java_class" }, { "id": 64, "lvl": -1, "conf": 0, "prob": 0.000014126300811767578, "type": "java_class" }, { "id": 66, "lvl": -1, "conf": 0, "prob": 0.00001687804797256831, "type": "java_class" }, { "id": 67, "lvl": -1, "conf": 0, "prob": 0.000021666288375854492, "type": "java_class" }, { "id": 70, "lvl": -1, "conf": 0, "prob": 0.000013758738532487769, "type": "java_class" }, { "id": 71, "lvl": -1, "conf": 0, "prob": 0.000014235575690690894, "type": "java_class" }, { "id": 74, "lvl": -1, "conf": 0, "prob": 0.000014235575690690894, "type": "java_class" }, { "id": 76, "lvl": -1, "conf": 0, "prob": 0.00001710653305053711, "type": "java_class" }, { "id": 78, "lvl": -1, "conf": 0, "prob": 0.000013629595741804224, "type": "java_class" }, { "id": 79, "lvl": -1, "conf": 0, "prob": 0.000018388032913208008, "type": "java_class" }, { "id": 81, "lvl": -1, "conf": 0, "prob": 0.00001722574234008789, "type": "java_class" }, { "id": 82, "lvl": -1, "conf": 0, "prob": 0.00015622377395629883, "type": "java_class" }, { "id": 83, "lvl": -1, "conf": 0, "prob": 0.00001722574234008789, "type": "java_class" }, { "id": 84, "lvl": -1, "conf": 0, "prob": 0.00001710653305053711, "type": "java_class" }, { "id": 87, "lvl": -1, "conf": 0, "prob": 0.00001710653305053711, "type": "java_class" }, { "id": 88, "lvl": -1, "conf": 0, "prob": 0.000018388032913208008, "type": "java_class" }, { "id": 89, "lvl": -1, "conf": 0, "prob": 0.00001704692840576172, "type": "java_class" }, { "id": 90, "lvl": -1, "conf": 0, "prob": 0.00001393755246681394, "type": "java_class" }, { "id": 91, "lvl": -1, "conf": 0, "prob": 0.000013758738532487769, "type": "java_class" }, { "id": 92, "lvl": -1, "conf": 0, "prob": 0.000013758738532487769, "type": "java_class" }, { "id": 93, "lvl": -1, "conf": 0, "prob": 0.000013758738532487769, "type": "java_class" }, { "id": 94, "lvl": -1, "conf": 0, "prob": 0.00001710653305053711, "type": "java_class" }, { "id": 95, "lvl": -1, "conf": 0, "prob": 0.000028133392333984375, "type": "java_class" }, { "id": 96, "lvl": -1, "conf": 0, "prob": 0.000021557012587436475, "type": "java_class" }, { "id": 98, "lvl": -1, "conf": 0, "prob": 0.000013758738532487769, "type": "java_class" }, { "id": 99, "lvl": -1, "conf": 0, "prob": 0.000014026959433977026, "type": "java_class" }, { "id": 100, "lvl": -1, "conf": 0, "prob": 0.00015622377395629883, "type": "java_class" }, { "id": 101, "lvl": -1, "conf": 0, "prob": 0.00001722574234008789, "type": "java_class" }, { "id": 102, "lvl": -1, "conf": 0, "prob": 0.00001718600651656743, "type": "java_class" }, { "id": 103, "lvl": -1, "conf": 0, "prob": 0.000017195940017700195, "type": "java_class" }, { "id": 104, "lvl": -1, "conf": 0, "prob": 0.00015980005264282227, "type": "java_class" }, { "id": 105, "lvl": -1, "conf": 0, "prob": 0.000022679567337036133, "type": "java_class" }, { "id": 107, "lvl": -1, "conf": 0, "prob": 0.00001393755246681394, "type": "java_class" }, { "id": 108, "lvl": -1, "conf": 0, "prob": 0.00001722574234008789, "type": "java_class" }, { "id": 109, "lvl": -1, "conf": 0, "prob": 0.000017195940017700195, "type": "java_class" }, { "id": 110, "lvl": -1, "conf": 0, "prob": 0.000028133392333984375, "type": "java_class" }, { "id": 112, "lvl": -1, "conf": 0, "prob": 0.000024547180146328174, "type": "java_class" }, { "id": 113, "lvl": -1, "conf": 0, "prob": 0.00001393755246681394, "type": "java_class" }, { "id": 114, "lvl": -1, "conf": 0, "prob": 0.00001371900270896731, "type": "java_class" }, { "id": 115, "lvl": -1, "conf": 0, "prob": 0.00002440810203552246, "type": "java_class" }, { "id": 116, "lvl": -1, "conf": 0, "prob": 0.000013758738532487769, "type": "java_class" }, { "id": 117, "lvl": -1, "conf": 0, "prob": 0.000013758738532487769, "type": "java_class" }, { "id": 118, "lvl": -1, "conf": 0, "prob": 0.000013758738532487769, "type": "java_class" }, { "id": 119, "lvl": -1, "conf": 0, "prob": 0.000021696090698242188, "type": "java_class" }, { "id": 121, "lvl": -1, "conf": 0, "prob": 0.00001710653305053711, "type": "java_class" }, { "id": 122, "lvl": -1, "conf": 0, "prob": 0.00001722574234008789, "type": "java_class" }, { "id": 123, "lvl": -1, "conf": 0, "prob": 0.00001710653305053711, "type": "java_class" }, { "id": 124, "lvl": -1, "conf": 0, "prob": 0.000027348598450771533, "type": "java_class" }, { "id": 125, "lvl": -1, "conf": 0, "prob": 0.00001710653305053711, "type": "java_class" }, { "id": 126, "lvl": -1, "conf": 0, "prob": 0.00001704692840576172, "type": "java_class" }, { "id": 128, "lvl": -1, "conf": 0, "prob": 0.00001728534698486328, "type": "java_class" }, { "id": 129, "lvl": -1, "conf": 0, "prob": 0.000173022344824858, "type": "java_class" }, { "id": 130, "lvl": -1, "conf": 0, "prob": 0.00001710653305053711, "type": "java_class" }, { "id": 131, "lvl": -1, "conf": 0, "prob": 0.00002300739288330078, "type": "java_class" }, { "id": 134, "lvl": -1, "conf": 0, "prob": 0.00001710653305053711, "type": "java_class" }, { "id": 136, "lvl": -1, "conf": 0, "prob": 0.00001710653305053711, "type": "java_class" }, { "id": 138, "lvl": -1, "conf": 0, "prob": 0.00001710653305053711, "type": "java_class" }, { "id": 140, "lvl": -1, "conf": 0, "prob": 0.00001687804797256831, "type": "java_class" }, { "id": 141, "lvl": -1, "conf": 0, "prob": 0.00002215305903519038, "type": "java_class" }, { "id": 143, "lvl": -1, "conf": 0, "prob": 0.00001710653305053711, "type": "java_class" }, { "id": 144, "lvl": -1, "conf": 0, "prob": 0.00001710653305053711, "type": "java_class" }, { "id": 145, "lvl": -1, "conf": 0, "prob": 0.00001710653305053711, "type": "java_class" }, { "id": 146, "lvl": -1, "conf": 0, "prob": 0.000018129745512851514, "type": "java_class" }, { "id": 148, "lvl": -1, "conf": 0, "prob": 0.000013758738532487769, "type": "java_class" }, { "id": 149, "lvl": -1, "conf": 0, "prob": 0.000022719303160556592, "type": "java_class" }, { "id": 150, "lvl": -1, "conf": 0, "prob": 0.000018129745512851514, "type": "java_class" }, { "id": 151, "lvl": -1, "conf": 0, "prob": 0.000013758738532487769, "type": "java_class" }, { "id": 153, "lvl": -1, "conf": 0, "prob": 0.000013758738532487769, "type": "java_class" }, { "id": 154, "lvl": -1, "conf": 0, "prob": 0.000018964210539706983, "type": "java_class" }, { "id": 155, "lvl": -1, "conf": 0, "prob": 0.000022361675291904248, "type": "java_class" }, { "id": 159, "lvl": -1, "conf": 0, "prob": 0.00001710653305053711, "type": "java_class" }, { "id": 160, "lvl": -1, "conf": 0, "prob": 0.000021537145585170947, "type": "java_class" }, { "id": 162, "lvl": -1, "conf": 0, "prob": 0.000016520420103915967, "type": "java_class" }, { "id": 165, "lvl": -1, "conf": 0, "prob": 0.000016957521438598633, "type": "java_class" }, { "id": 166, "lvl": -1, "conf": 0, "prob": 0.00001687804797256831, "type": "java_class" }, { "id": 168, "lvl": -1, "conf": 0, "prob": 0.000016321739167324267, "type": "java_class" }, { "id": 169, "lvl": -1, "conf": 0, "prob": 0.00001710653305053711, "type": "java_class" }, { "id": 170, "lvl": -1, "conf": 0, "prob": 0.00001710653305053711, "type": "java_class" }, { "id": 171, "lvl": -1, "conf": 0, "prob": 0.000018656253814697266, "type": "java_class" }, { "id": 174, "lvl": -1, "conf": 0, "prob": 0.000018656253814697266, "type": "java_class" }, { "id": 175, "lvl": -1, "conf": 0, "prob": 0.00035640597343444824, "type": "java_class" }, { "id": 176, "lvl": -1, "conf": 0, "prob": 0.000018656253814697266, "type": "java_class" }, { "id": 178, "lvl": -1, "conf": 0, "prob": 0.000018487373381503858, "type": "java_class" }, { "id": 179, "lvl": -1, "conf": 0, "prob": 0.0002774496970232576, "type": "java_class" }, { "id": 180, "lvl": -1, "conf": 0, "prob": 0.00003549456596374512, "type": "java_class" }, { "id": 182, "lvl": -1, "conf": 0, "prob": 0.00001710653305053711, "type": "java_class" }, { "id": 183, "lvl": -1, "conf": 0, "prob": 0.000022838512450107373, "type": "java_class" }, { "id": 185, "lvl": -1, "conf": 0, "prob": 0.00001710653305053711, "type": "java_class" }, { "id": 186, "lvl": -1, "conf": 0, "prob": 0.00001710653305053711, "type": "java_class" }, { "id": 187, "lvl": -1, "conf": 0, "prob": 0.000016927719116210938, "type": "java_class" }, { "id": 188, "lvl": -1, "conf": 0, "prob": 0.00001710653305053711, "type": "java_class" }, { "id": 189, "lvl": -1, "conf": 0, "prob": 0.00001687804797256831, "type": "java_class" }, { "id": 190, "lvl": -1, "conf": 0, "prob": 0.00001710653305053711, "type": "java_class" }, { "id": 192, "lvl": -1, "conf": 0, "prob": 0.000016490617781528272, "type": "java_class" }, { "id": 193, "lvl": -1, "conf": 0, "prob": 0.000017195940017700195, "type": "java_class" }, { "id": 194, "lvl": -1, "conf": 0, "prob": 0.000017245611161342822, "type": "java_class" }, { "id": 197, "lvl": -1, "conf": 0, "prob": 0.000011434157386247534, "type": "json" }, { "id": 199, "lvl": -1, "conf": 0, "prob": 0.00001952052116394043, "type": "java_class" }, { "id": 201, "lvl": -1, "conf": 0, "prob": 0.00001710653305053711, "type": "java_class" }, { "id": 203, "lvl": -1, "conf": 0, "prob": 0.00001710653305053711, "type": "java_class" }, { "id": 209, "lvl": -1, "conf": 0, "prob": 0.00002000729182327632, "type": "java_class" }, { "id": 210, "lvl": -1, "conf": 0, "prob": 0.000013758738532487769, "type": "java_class" }, { "id": 213, "lvl": -1, "conf": 0, "prob": 0.000013758738532487769, "type": "java_class" }, { "id": 215, "lvl": -1, "conf": 0, "prob": 0.000345379114151001, "type": "java_class" }, { "id": 216, "lvl": -1, "conf": 0, "prob": 0.00001687804797256831, "type": "java_class" }, { "id": 217, "lvl": -1, "conf": 0, "prob": 0.00028221806860528886, "type": "java_class" }, { "id": 218, "lvl": -1, "conf": 0, "prob": 0.000021288791685947217, "type": "java_class" }, { "id": 220, "lvl": -1, "conf": 0, "prob": 0.00002195437809859868, "type": "java_class" }, { "id": 222, "lvl": -1, "conf": 0, "prob": 0.00002576907536422368, "type": "java_class" }, { "id": 223, "lvl": -1, "conf": 0, "prob": 0.000022192796677700244, "type": "java_class" }, { "id": 224, "lvl": -1, "conf": 0, "prob": 0.00003768007081816904, "type": "java_class" }, { "id": 227, "lvl": -1, "conf": 0, "prob": 0.00013383229088503867, "type": "java_class" }, { "id": 228, "lvl": -1, "conf": 0, "prob": 0.00021393100905697793, "type": "java_class" } ], "version": "v18.18", "analyzed_at": "2026-09-16T20:34:17Z" }, "path": "krypton-1.21.11.jar", "raw": { "files": [ { "id": 0, "ctx": [ { "b": "p!H([6Awak2MQ907f%)Tvrs.(005P*0STzA003IEz7/KoBzb/afk1)cvp9[?w)YU8uW3javqNSby*?ya+!edAb?Ee^tgFPI]K6{lp]kKwMEYkh9:b}IOm(R94+3Ib4X]y(zEXh31#uJv0493Vmf^]oi{cYd\u003ezWY%DU(AYr$l-h*h1?$rAAg4f2a)M)PV\u003e@{tb\u0026/eMeTU?$#DUadhtupU*ov)$u49EFYS$0%\u003cIDNB)d={SY\u0026[?)GX#APciUYb6L(x5\u003eF=]yv\u003eW]6qhMgS$%[3}1%Fice%0UbdLKG-", "ln": 0 }, { "b": "=PH5[elY=a\u003evoSs*gq*tgwAyej:)h#/z*p2fz*A8GF=/SwC@04l[u5v27jzl6[SxYnQA5wr^{\u003cD@#^r\u00262y#\u0026[zB-8N(kJi!9C02)Z8C@2crf30Es4uUhpzhefTbxcg^NM(S3$q:^{e.yt6A!:HX8s\u003eymR:bqfdY*caEYLV]0pasQ4821zRv/v%]bEE^bb3UDHWrpR][:gw-](nK:Sc[L6*.4ghNSXk%\u0026.y/GlcH7ijL8cu9+OjMoj:nEZ5M80Q\u003chLIC9\u003cm)jb::]MQh#8:7^2sWWj\u003cm^3HbM6tpDk.qcp}]}KKh\u003c.N?(#8\u003eZAZb]TNnEyu(gM1\u003c}0jt(+lEn1BH\u003c\u0026yrN+M)Zh?He.w4GmSAj)aO=y-}s6v1U*upFNnL:[A!w!c*)tAag}7jttjpny542-)$*4BqkFp5hRR5qdi*S+vFYEVn5WHxH+uN\u003eDtI5Ycb4J}I5v=FOFHzTa\u003e^M}[uQp}Mp%5^0a(kGM\u0026N\u003e:5T-W?n%$cHOyAWTfYgcq:V=PB5T:+FU}(", "ln": 4774 } ], "mol": "K₂(McGa)O₇(CaEu₂As₃I₂Al₂C₄Er)H₇(Cm₁₃CrDb₁₀F₇Os₂Po₇Ti)Md₂(Pa₃)", "sha": "1e8668a783aa82c45f2a70599f9576dec1b774a1d0ce0127a97f1af08b0cdb83", "path": "krypton-1.21.11.jar", "risk": 468, "size": 868527, "type": "jar", "facts": { "metrics": { "jar": { "class_count": 206, "entry_count": 265, "signature_count": 0, "embedded_jar_count": 0 }, "file": { "size": 868527, "entropy": 7.99 }, "binary": { "peak_region_bytes": 849920, "peak_region_entropy": 7.83 }, "archive": { "file_count": 265, "member_count": 265, "script_count": 0, "zip_bomb_ratio": 9.49, "compressed_size": 835507, "directory_count": 0, "executable_count": 0, "extra_field_size": 4, "noise_file_count": 1, "compression.ratio": 0.41, "hidden_file_count": 0, "uncompressed_size": 2052924, "crc_collision_count": 1, "entry_comment_count": 0, "max_filename_length": 62, "rtlo_filename_count": 0, "format.regular_count": 265, "nested_archive_count": 0, "path_traversal_count": 0, "symlink_escape_count": 0, "security.setgid_count": 0, "security.setuid_count": 0, "security.sticky_count": 0, "double_extension_count": 0, "duplicate_member_count": 0, "security.symlink_count": 0, "unicode_filename_count": 0, "homoglyph_filename_count": 0, "security.encrypted_count": 0, "timing.mtime_unique_count": 12, "timing.mtime_unique_ratio": 0.05, "misplaced_executable_count": 0, "timing.mtime_outlier_count": 42, "timing.mtime_dominant_count": 223, "timing.mtime_spread_seconds": 1471868920, "timing.sentinel_mtime_count": 0, "security.world_writable_count": 0, "timing.mtime_dominant_fraction": 0.84, "compression.method_counts.deflate": 265 } } }, "traits": [ { "id": "micro-behaviors/fs/read/file/handle::jvm-nio-file-class-ref", "conf": 0.86, "crit": 3, "desc": "JVM NIO file API reference" }, { "id": "net/url", "conf": 0.85, "crit": 3, "desc": "URL reference", "from": [ { "file": 79 } ] }, { "id": "micro-behaviors/communications/http/url/endpoint::accounts-endpoint-path", "atk": "T1071.001", "mbc": "C0002", "conf": 0.75, "crit": 3, "desc": "Accounts endpoint path", "from": [ { "file": 124 } ] }, { "id": "well-known/game/mod::minecraft-session-access", "conf": 0.91, "crit": 3, "desc": "Minecraft session profile access", "from": [ { "file": 6 } ], "uses": [ 24, 112, 151 ] }, { "id": "micro-behaviors/process/io/stream::java-processbuilder-redirect-output", "conf": 0.92, "crit": 3, "desc": "Java ProcessBuilder redirects standard output", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/communications/socket/framing::data-stream-transport", "atk": "T1573", "conf": 1.0, "crit": 3, "desc": "Java data-stream transport type", "from": [ { "file": 5 } ] }, { "id": "micro-behaviors/communications/http/lib/urlconnection::request-java-bytecode", "atk": "T1071.001", "mbc": "C0002", "conf": 0.82, "crit": 3, "desc": "Java bytecode HTTP connection", "from": [ { "file": 79 } ] }, { "id": "micro-behaviors/crypto/library/provider::dofinal-method", "conf": 0.9, "crit": 3, "desc": "JVM doFinal method reference", "from": [ { "file": 183 } ] }, { "id": "micro-behaviors/communications/socket/create::java-socket-class-import", "atk": "T1071", "mbc": "C0001", "conf": 0.9, "crit": 3, "desc": "Java imports the network socket class", "from": [ { "file": 5 } ] }, { "id": "micro-behaviors/process/io/stream::jvm-process-input-stream", "conf": 0.94, "crit": 3, "desc": "JVM process output stream access", "from": [ { "file": 215 } ] }, { "id": "micro-behaviors/process/io/stream::java-processbuilder-redirect-errors", "conf": 0.92, "crit": 3, "desc": "Java ProcessBuilder merges standard error", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/time/sleep/interval::java-thread-sleep-bytecode", "conf": 0.9, "crit": 3, "desc": "Java bytecode thread sleep", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/communications/socket/ssl::jvm-custom-x509trustmanager", "conf": 0.95, "crit": 3, "desc": "Class implements a custom X509 trust manager", "from": [ { "file": 4 }, { "file": 11 }, { "file": 18 } ], "uses": [ 48, 63, 140 ] }, { "id": "micro-behaviors/fs/read/file/full::java-readallbytes", "conf": 0.9, "crit": 3, "desc": "Java reads whole file bytes", "from": [ { "file": 175 } ] }, { "id": "micro-behaviors/communications/http/services/entra-directory::user-collection-path-token", "conf": 0.92, "crit": 3, "desc": "Microsoft Graph user collection endpoint", "from": [ { "file": 115 } ] }, { "id": "objectives/impact/system/rce::disconnect-string", "mbc": "B0030", "conf": 0.8, "crit": 4, "desc": "Disconnect from C2 command", "from": [ { "file": 175 } ] }, { "id": "micro-behaviors/communications/http/lib/urlconnection::jvm-url-class-ref", "atk": "T1071.001", "mbc": "C0002", "conf": 0.9, "crit": 3, "desc": "JVM URL class reference" }, { "id": "micro-behaviors/communications/socket/ssl::jvm-sslparameters-set-server-names", "conf": 0.93, "crit": 3, "desc": "JVM sets TLS SNI server name", "from": [ { "file": 5 } ] }, { "id": "objectives/anti-static/obfuscation/reflection/class::dalvik-get-declared-field", "atk": "T1406", "mbc": "F0006", "conf": 1.0, "crit": 3, "desc": "Dalvik getDeclaredField reflection", "from": [ { "file": 217 } ] }, { "id": "micro-behaviors/data/source/dynamic/reflect::java-method-invoke-bytecode", "conf": 1.0, "crit": 3, "desc": "JVM reflective method invocation", "from": [ { "file": 41 } ] }, { "id": "objectives/anti-static/obfuscation/reflection/class::java-protectiondomain", "conf": 1.0, "crit": 3, "desc": "Java ProtectionDomain", "from": [ { "file": 6 } ] }, { "id": "micro-behaviors/process/info/selfpath::java-protection-domain", "conf": 0.82, "crit": 3, "desc": "Java getProtectionDomain self-path lookup" }, { "id": "metadata/lang/natural::lang-english--atom-6", "conf": 0.8, "crit": 1, "desc": "English function-word token \"with\"", "from": [ { "file": 96 } ] }, { "id": "micro-behaviors/fs/delete/file/library::java-nio-file-delete-if-exists-bytecode", "atk": "T1070.004", "conf": 0.94, "crit": 3, "desc": "Java bytecode conditional NIO deletion", "from": [ { "file": 124 } ] }, { "id": "well-known/game/mod::minecraft-session-ref", "conf": 0.9, "crit": 3, "desc": "Minecraft session object reference", "from": [ { "file": 6 } ] }, { "id": "micro-behaviors/communications/http/url/domain::http-url-binary", "atk": "T1071.001", "mbc": "C0002", "conf": 0.7, "crit": 3, "desc": "Embedded HTTP or WebSocket URL", "from": [ { "file": 79 } ] }, { "id": "micro-behaviors/communications/http/lib/urlconnection::jvm-http-urlconnection-inputstream", "atk": "T1071.001", "mbc": "C0002", "conf": 0.95, "crit": 3, "desc": "JVM reads an HTTP response body", "from": [ { "file": 79 } ] }, { "id": "micro-behaviors/data/decode/base64::java-base64-decoder-class", "conf": 0.92, "crit": 3, "desc": "JVM Base64 decoder class reference", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/communications/http/oauth::oauth-pkce-code-challenge", "conf": 0.8, "crit": 3, "desc": "OAuth PKCE code-challenge field", "from": [ { "file": 124 } ] }, { "id": "micro-behaviors/communications/http/lib/urlconnection::jvm-http-urlconnection-class-ref", "atk": "T1071.001", "mbc": "C0002", "conf": 0.9, "crit": 3, "desc": "JVM HttpURLConnection class ref" }, { "id": "objectives/anti-static/obfuscation/reflection/class::dalvik-reflect-field", "atk": "T1406", "mbc": "F0006", "conf": 1.0, "crit": 3, "desc": "Dalvik reflect/Field type descriptor", "from": [ { "file": 42 } ] }, { "id": "micro-behaviors/data/compress/gzip::gzip-outputstream", "conf": 0.86, "crit": 3, "desc": "Java GZIPOutputStream class", "from": [ { "file": 175 } ] }, { "id": "micro-behaviors/communications/socket/framing::server-socket-class-reference", "atk": "T1573", "conf": 1.0, "crit": 3, "desc": "Server socket class reference", "from": [ { "file": 124 } ] }, { "id": "objectives/credential-access/gaming/minecraft::minecraft-session-token-access", "atk": "T1528", "mbc": "B0006", "conf": 0.96, "crit": 4, "desc": "Minecraft session token and UUID access", "from": [ { "file": 6 } ], "uses": [ 3, 94, 147 ] }, { "id": "micro-behaviors/process/create/spawn::java-processbuilder-start-bytecode-symbol", "atk": "T1059", "mbc": "E1203", "conf": 0.95, "crit": 3, "desc": "Java bytecode ProcessBuilder start", "from": [ { "file": 1 } ] }, { "id": "privilege-escalation/indicator", "conf": 0.85, "crit": 3, "desc": "Privilege escalation indicator", "from": [ { "file": 21 } ] }, { "id": "micro-behaviors/communications/http/post::java-post-method", "atk": "T1071.001", "mbc": "C0002", "conf": 0.8, "crit": 1, "desc": "Java HTTP POST method", "from": [ { "file": 79 } ] }, { "id": "micro-behaviors/os/sysinfo/hostname::jvm-hostname-command-literal", "atk": "T1082", "mbc": "E1082", "conf": 0.9, "crit": 3, "desc": "JVM hostname command literal" }, { "id": "micro-behaviors/communications/http/lib/httpclient::java-httpclient-send", "atk": "T1071.001", "conf": 0.94, "crit": 3, "desc": "Java HttpClient sends an HTTP request", "from": [ { "file": 96 } ] }, { "id": "objectives/anti-analysis/timing/evasion::kotlin-thread-sleep-check", "atk": "T1497.003", "conf": 0.94, "crit": 3, "desc": "Kotlin Thread.sleep call", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/communications/http/post::jvm-urlconnection-post-bytecode", "atk": "T1071.001", "mbc": "C0002", "conf": 0.92, "crit": 3, "desc": "Java bytecode URLConnection POST request", "from": [ { "off": 3249, "file": 79 }, { "file": 96 }, { "file": 105 }, { "off": 3841, "file": 124 }, { "off": 6167, "file": 175 }, { "file": 183 }, { "file": 224 } ], "uses": [ 6, 72, 131 ] }, { "id": "micro-behaviors/communications/http/lib/urlconnection::jvm-http-urlconnection-response-code", "atk": "T1071.001", "mbc": "C0002", "conf": 0.94, "crit": 3, "desc": "JVM reads an HTTP response status", "from": [ { "file": 79 } ] }, { "id": "micro-behaviors/communications/http/oauth::oauth-authorization-code-grant", "conf": 0.8, "crit": 3, "desc": "OAuth authorization-code grant field", "from": [ { "file": 124 } ] }, { "id": "micro-behaviors/data/source/dynamic/reflect::java-getdeclaredconstructor", "conf": 0.9, "crit": 3, "desc": "Java reflective constructor lookup", "from": [ { "file": 112 } ] }, { "id": "micro-behaviors/communications/socket/framing::bytebuffer-transport", "atk": "T1573", "conf": 1.0, "crit": 3, "desc": "Java byte-buffer transport type", "from": [ { "file": 5 } ] }, { "id": "micro-behaviors/data/source/dynamic/reflect::java-constructor-newinstance-bytecode", "conf": 1.0, "crit": 3, "desc": "JVM reflective constructor invocation", "from": [ { "file": 112 } ] }, { "id": "micro-behaviors/crypto/library/provider::jvm-security-class-ref", "conf": 0.86, "crit": 2, "desc": "JVM security package reference" }, { "id": "micro-behaviors/communications/http/lib/httpclient::java-url-constructor-bytecode", "conf": 0.9, "crit": 3, "desc": "Java bytecode URL construction", "from": [ { "file": 79 } ] }, { "id": "micro-behaviors/communications/socket/ssl::jvm-x509trustmanager-server-callback", "conf": 0.94, "crit": 3, "desc": "JVM checkServerTrusted callback defined" }, { "id": "exfiltration/av-capture", "conf": 0.85, "crit": 3, "desc": "Audio/video capture capability", "from": [ { "file": 40 } ] }, { "id": "metadata/lang/natural::lang-english--atom-7", "conf": 0.8, "crit": 1, "desc": "English function-word token \"this\"", "from": [ { "file": 124 } ] }, { "id": "micro-behaviors/data/archive/extract/zip::jvm-zip-entry-read-bytecode", "conf": 0.9, "crit": 3, "desc": "JVM reads ZIP archive entry data", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/data/encode/base64::jvm-base64-encode-bytecode", "conf": 0.94, "crit": 3, "desc": "JVM Base64 encodeToString call", "from": [ { "file": 5 } ] }, { "id": "micro-behaviors/data/decompress/gzip::gzip-inputstream", "conf": 1.0, "crit": 3, "desc": "Java GZIPInputStream class", "from": [ { "file": 175 } ] }, { "id": "objectives/anti-static/obfuscation/reflection/class::dalvik-reflect-constructor", "atk": "T1406", "mbc": "F0006", "conf": 1.0, "crit": 3, "desc": "Dalvik reflect/Constructor type descriptor", "from": [ { "file": 112 } ] }, { "id": "micro-behaviors/process/create/spawn::child-process-creation-api", "atk": "T1106", "conf": 0.92, "crit": 3, "desc": "Starts a child process through a platform API", "from": [ { "file": 1 } ], "uses": [ 67 ] }, { "id": "micro-behaviors/communications/http/lib/urlconnection::jvm-urlconnection-open-connection", "atk": "T1071.001", "mbc": "C0002", "conf": 0.92, "crit": 3, "desc": "JVM opens a URL connection", "from": [ { "file": 79 } ] }, { "id": "micro-behaviors/fs/read/file/handle::jvm-io-file-class-ref", "conf": 0.86, "crit": 3, "desc": "JVM File API class reference" }, { "id": "micro-behaviors/process/info/current::getlocation-ref", "conf": 0.82, "crit": 3, "desc": "Java getLocation call reference" }, { "id": "micro-behaviors/communications/http/post::java-json-post", "atk": "T1071.001", "mbc": "C0002", "conf": 0.86, "crit": 3, "desc": "Java JSON POST request", "from": [ { "file": 79 }, { "file": 96 }, { "file": 105 }, { "file": 115 }, { "file": 124 }, { "off": 4264, "file": 175 }, { "file": 183 }, { "file": 224 } ], "uses": [ 36, 114 ] }, { "id": "micro-behaviors/communications/proxy/tunnel::byte-output-stream", "atk": "T1090", "mbc": "C0003", "conf": 0.5, "crit": 3, "desc": "Java ByteArrayOutputStream usage", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/os/clipboard/reference::clipboard-keyword", "conf": 0.7, "crit": 3, "desc": "Clipboard keyword", "from": [ { "file": 209 } ] }, { "id": "micro-behaviors/communications/socket/listen::java-socket-accept-bytecode", "atk": "T1071", "mbc": "C0001", "conf": 0.9, "crit": 3, "desc": "Java socket accept descriptor in bytecode", "from": [ { "file": 124 } ] }, { "id": "micro-behaviors/communications/socket/ssl::jvm-x509trustmanager-issuer-callback", "conf": 0.94, "crit": 3, "desc": "JVM getAcceptedIssuers callback defined" }, { "id": "objectives/anti-static/obfuscation/string/control-prefix::java-control-prefixed-long-string", "atk": "T1027", "mbc": "F0001", "conf": 0.92, "crit": 3, "desc": "Java string starts with control-length prefix" }, { "id": "objectives/command-and-control/dns/tunneling::jvm-dns-tunnel-label", "atk": "T1071.004", "conf": 0.9, "crit": 3, "desc": "JVM tunnel label", "from": [ { "file": 218 } ] }, { "id": "micro-behaviors/data/source/dynamic/reflect::java-class-getmethod-bytecode", "conf": 1.0, "crit": 3, "desc": "JVM reflective method lookup", "from": [ { "file": 119 } ] }, { "id": "micro-behaviors/process/create/spawn::java-processbuilder-start-bytecode", "atk": "T1059", "mbc": "E1203", "conf": 0.94, "crit": 3, "desc": "Java bytecode ProcessBuilder execution", "from": [ { "file": 1 } ], "uses": [ 34, 111 ] }, { "id": "micro-behaviors/process/control/wait::java-process-waitfor-bytecode", "conf": 0.9, "crit": 3, "desc": "Java bytecode process wait", "from": [ { "file": 215 } ] }, { "id": "micro-behaviors/process/info/current::protection-domain-class", "conf": 0.85, "crit": 3, "desc": "Java ProtectionDomain class reference" }, { "id": "micro-behaviors/data/source/dynamic/reflect::java-newinstance", "conf": 1.0, "crit": 3, "desc": "Java newInstance reference", "from": [ { "file": 112 } ] }, { "id": "micro-behaviors/data/decode/base64::java-base64-decoding-bytecode", "conf": 0.94, "crit": 3, "desc": "Java bytecode Base64 decoding", "from": [ { "off": 19151, "file": 1 }, { "off": 19267, "file": 8 }, { "off": 19379, "file": 15 }, { "off": 8247, "file": 67 }, { "off": 8207, "file": 115 }, { "off": 4902, "file": 175 } ], "uses": [ 83, 98, 141 ] }, { "id": "metadata/file/string/identity::jvm-post-token", "conf": 0.9, "crit": 3, "desc": "JVM constant-pool POST token" }, { "id": "micro-behaviors/communications/http/lib/httpclient::java-httpclient-api", "conf": 0.9, "crit": 3, "desc": "Java HttpClient API reference", "from": [ { "file": 96 } ] }, { "id": "micro-behaviors/fs/delete/file/library::java-file-delete-bytecode", "atk": "T1070.004", "conf": 0.94, "crit": 3, "desc": "Java bytecode file deletion", "from": [ { "file": 154 } ] }, { "id": "objectives/anti-static/obfuscation/reflection/class::dalvik-set-accessible", "atk": "T1406", "mbc": "F0006", "conf": 0.9, "crit": 4, "desc": "Dalvik setAccessible access bypass", "from": [ { "file": 41 } ] }, { "id": "objectives/command-and-control/remote-command/control::java-nio-input-stream", "atk": "T1059", "mbc": "B0022", "conf": 0.72, "crit": 3, "desc": "Java NIO input stream", "from": [ { "file": 215 } ] }, { "id": "objectives/credential-access/gaming/minecraft::minecraft-token-child-process-stage", "atk": "T1528, T1059", "mbc": "B0006", "conf": 0.99, "crit": 5, "desc": "Minecraft token access alongside redirected child launch", "from": [ { "file": 6 } ], "uses": [ 33, 52, 67, 132 ] }, { "id": "objectives/evasion/self-delete/file/script::java-code-source-location", "atk": "T1070.004", "mbc": "F0007", "conf": 0.78, "crit": 3, "desc": "Java code source location", "from": [ { "file": 6 } ] }, { "id": "micro-behaviors/process/io/stream::java-processbuilder-redirect-input", "conf": 0.92, "crit": 3, "desc": "Java ProcessBuilder redirects standard input", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/communications/socket/create::java-socket-bytecode-reference", "atk": "T1071", "mbc": "C0001", "conf": 0.86, "crit": 3, "desc": "Java bytecode socket reference", "from": [ { "file": 5 } ] }, { "id": "micro-behaviors/communications/socket/create::java-socket-slash-reference", "atk": "T1071", "mbc": "C0001", "conf": 0.9, "crit": 3, "desc": "Java slash-form socket reference", "from": [ { "file": 5 } ] }, { "id": "objectives/anti-static/obfuscation/reflection/class::dalvik-get-declared-method", "atk": "T1406", "mbc": "F0006", "conf": 1.0, "crit": 3, "desc": "Dalvik getDeclaredMethod reflection", "from": [ { "file": 112 } ] }, { "id": "micro-behaviors/data/decode/base64::java-base64-decoder-bytecode-call", "conf": 0.94, "crit": 3, "desc": "Java Base64 decoder accessor call", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/data/source/dynamic/reflect::java-class-getconstructor-bytecode", "conf": 1.0, "crit": 3, "desc": "JVM reflective constructor lookup", "from": [ { "file": 199 } ] }, { "id": "micro-behaviors/data/buffer::bytearrayinputstream-ref", "conf": 0.88, "crit": 3, "desc": "Java ByteArrayInputStream class" }, { "id": "metadata/package/config::fabric-mod-metadata", "conf": 0.9, "crit": 3, "desc": "Fabric mod metadata resource", "from": [ { "file": 197 } ] }, { "id": "metadata/lang/natural::lang-english--atom-4", "conf": 0.8, "crit": 1, "desc": "English function-word token \"have\"", "from": [ { "file": 96 } ] }, { "id": "well-known/malware/stealer/prefire-shard::prefire-family-literal", "atk": "T1528", "mbc": "B0006", "conf": 0.9, "crit": 1, "desc": "Prefire family name literal", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/process/create/spawn::java-runtime-class", "atk": "T1059", "mbc": "E1203", "conf": 0.86, "crit": 3, "desc": "Java Runtime class reference", "from": [ { "file": 5 } ] }, { "id": "micro-behaviors/crypto/library/provider::secretkeyspec", "atk": "T1573.001", "mbc": "C0015", "conf": 0.9, "crit": 3, "desc": "Java SecretKeySpec symmetric key construction", "from": [ { "file": 183 } ] }, { "id": "metadata/lang/natural::lang-english--atom-2", "conf": 0.8, "crit": 1, "desc": "English function-word token \"and\"", "from": [ { "file": 96 } ] }, { "id": "micro-behaviors/communications/http/oauth::oauth-redirect-state-pair", "conf": 0.9, "crit": 3, "desc": "OAuth redirect and state parameters", "from": [ { "file": 124 } ] }, { "id": "micro-behaviors/data/source/dynamic/reflect::java-bytecode-reflective-method-invoke", "conf": 0.94, "crit": 3, "desc": "JVM resolves and invokes method reflectively", "from": [ { "file": 199 } ], "uses": [ 19, 66, 97 ] }, { "id": "objectives/credential-access/gaming/minecraft::minecraft-token-getter-ref", "atk": "T1528", "mbc": "B0006", "conf": 0.92, "crit": 3, "desc": "Minecraft access token getter", "from": [ { "file": 6 } ] }, { "id": "micro-behaviors/process/exit/terminate::jvm-system-exit-bytecode", "conf": 0.93, "crit": 3, "desc": "JVM invokes System.exit", "from": [ { "file": 112 } ] }, { "id": "micro-behaviors/fs/write/file/full::jvm-files-writestring-bytecode", "conf": 0.9, "crit": 3, "desc": "JVM bytecode Files.writeString", "from": [ { "file": 6 } ] }, { "id": "micro-behaviors/data/source/dynamic/reflect::java-class-forname-bytecode", "conf": 1.0, "crit": 3, "desc": "JVM Class.forName invocation", "from": [ { "file": 112 } ] }, { "id": "micro-behaviors/data/decode/base64::java-base64-url-decoder-bytecode-call", "conf": 0.94, "crit": 3, "desc": "Java URL-safe Base64 decoder accessor call", "from": [ { "file": 175 } ] }, { "id": "micro-behaviors/process/info/current::codesource-class", "conf": 0.85, "crit": 3, "desc": "Java CodeSource class reference" }, { "id": "micro-behaviors/communications/http/lib/urlconnection::java-url-class-bytecode", "atk": "T1071.001", "mbc": "C0002", "conf": 0.86, "crit": 3, "desc": "Java URL class reference", "from": [ { "file": 5 } ] }, { "id": "micro-behaviors/fs/path/extension::java-executable-reference", "conf": 0.92, "crit": 3, "desc": "Java bytecode references an executable path" }, { "id": "micro-behaviors/fs/directory/readdir::jvm-file-listfiles", "conf": 0.94, "crit": 3, "desc": "JVM File.listFiles directory enumeration", "from": [ { "file": 154 } ] }, { "id": "micro-behaviors/communications/socket/ssl::jvm-trustmanager-class-ref", "conf": 0.9, "crit": 3, "desc": "JVM TrustManager interface reference", "from": [ { "file": 5 } ] }, { "id": "micro-behaviors/process/thread/lifecycle::java-current-thread-reference", "conf": 0.9, "crit": 3, "desc": "Java current thread reference", "from": [ { "file": 115 } ] }, { "id": "metadata/lang/natural::lang-english--atom-5", "conf": 0.8, "crit": 1, "desc": "English function-word token \"for\"", "from": [ { "file": 105 } ] }, { "id": "objectives/command-and-control/dns/tunneling::java-dns-tunnel-label", "atk": "T1071.004", "conf": 0.9, "crit": 3, "desc": "Java tunnel label", "from": [ { "file": 218 } ] }, { "id": "objectives/anti-analysis/anti-tampering/integrity::java-own-class-sha256", "atk": "T1497", "conf": 0.88, "crit": 3, "desc": "Java SHA-256 class integrity hash", "from": [ { "file": 124 } ] }, { "id": "micro-behaviors/data/string/conversion::tostring-token", "conf": 1.0, "crit": 3, "desc": "References the toString conversion method", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/communications/proxy/tunnel::byte-buffer-allocate", "atk": "T1090", "mbc": "C0003", "conf": 0.5, "crit": 3, "desc": "Java ByteBuffer.allocate() usage", "from": [ { "file": 222 } ] }, { "id": "micro-behaviors/data/source/dynamic/reflect::java-bytecode-reflective-constructor-invoke", "conf": 0.94, "crit": 3, "desc": "JVM resolves and invokes constructor reflectively", "from": [ { "file": 199 } ], "uses": [ 45, 84, 97 ] }, { "id": "micro-behaviors/process/create/spawn::java-processbuilder-init-bytecode-symbol", "atk": "T1059", "mbc": "E1203", "conf": 0.92, "crit": 3, "desc": "Java bytecode ProcessBuilder constructor", "from": [ { "file": 1 } ] }, { "id": "well-known/game/mod::minecraft-name-getter-ref", "conf": 0.9, "crit": 3, "desc": "Minecraft profile name getter reference", "from": [ { "file": 6 } ] }, { "id": "objectives/command-and-control/backdoor/tasking/http::jvm-c2-command-path", "atk": "T1059", "mbc": "B0022", "conf": 0.94, "crit": 3, "desc": "JVM C2 command path", "from": [ { "file": 51 } ] }, { "id": "micro-behaviors/communications/http/post::java-json-content-type", "atk": "T1071.001", "mbc": "C0002", "conf": 0.78, "crit": 3, "desc": "Java JSON content type" }, { "id": "objectives/anti-static/obfuscation/reflection/class::jvm-reflection-command-exec", "atk": "T1027", "conf": 0.98, "crit": 4, "desc": "JVM reflection paired with command execution", "from": [ { "file": 215 } ], "uses": [ 34, 93 ] }, { "id": "objectives/command-and-control/infrastructure/paste::dpaste", "conf": 0.7, "crit": 3, "desc": "Dpaste reference", "from": [ { "file": 175 } ] }, { "id": "execution/shell", "conf": 0.85, "crit": 3, "desc": "Shell command string", "from": [ { "file": 215 } ] }, { "id": "micro-behaviors/communications/socket/create::jvm-socket-class-ref", "atk": "T1071", "mbc": "C0001", "conf": 0.9, "crit": 3, "desc": "JVM socket class reference" }, { "id": "micro-behaviors/communications/socket/ssl::jvm-sslsocket-handshake-call", "conf": 0.94, "crit": 3, "desc": "JVM SSLSocket.startHandshake call", "from": [ { "file": 5 } ] }, { "id": "objectives/anti-static/obfuscation/reflection/class::dalvik-reflect-method", "atk": "T1406", "mbc": "F0006", "conf": 1.0, "crit": 3, "desc": "Dalvik reflect/Method type descriptor", "from": [ { "file": 41 } ] }, { "id": "micro-behaviors/communications/http/oauth::oauth-client-id-field", "conf": 0.65, "crit": 3, "desc": "OAuth client_id field", "from": [ { "file": 124 } ] }, { "id": "micro-behaviors/process/create/spawn::java-getruntime-ref", "atk": "T1059", "mbc": "E1203", "conf": 0.84, "crit": 3, "desc": "Java getRuntime call reference", "from": [ { "file": 180 } ] }, { "id": "micro-behaviors/communications/proxy/tunnel::inet-socket-address", "atk": "T1090", "mbc": "C0003", "conf": 0.6, "crit": 3, "desc": "Java InetSocketAddress reference", "from": [ { "file": 5 } ] }, { "id": "micro-behaviors/communications/http/response::http-versions", "conf": 0.75, "crit": 3, "desc": "HTTP protocol version strings", "from": [ { "file": 124 } ] }, { "id": "micro-behaviors/communications/socket/send::java-raw-socket-client-write", "atk": "T1071", "mbc": "C0001", "conf": 0.94, "crit": 3, "desc": "Java socket client writes request bytes through DataOutputStream", "from": [ { "off": 3287, "file": 5 }, { "off": 3203, "file": 12 }, { "off": 3182, "file": 19 }, { "off": 3415, "file": 79 }, { "off": 1782, "file": 124 }, { "off": 6419, "file": 175 }, { "off": 3977, "file": 183 } ], "uses": [ 8, 136, 145 ] }, { "id": "objectives/anti-static/obfuscation/string/control-prefix::java-character-digit-bytecode", "atk": "T1027", "mbc": "F0001", "conf": 0.9, "crit": 3, "desc": "Java bytecode calls Character.digit", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/communications/http/oauth::oauth-pkce-code-verifier", "conf": 0.8, "crit": 3, "desc": "OAuth PKCE code-verifier field", "from": [ { "file": 124 } ] }, { "id": "objectives/impact/dos/resource::jvm-executors-threadpool-bytecode", "atk": "T1499", "conf": 0.9, "crit": 3, "desc": "JVM fixed threadpool bytecode", "from": [ { "file": 131 } ] }, { "id": "micro-behaviors/process/info/current::getpath-ref", "conf": 0.8, "crit": 3, "desc": "Java getPath call reference" }, { "id": "micro-behaviors/communications/http/oauth::oauth-refresh-grant-type", "conf": 0.9, "crit": 3, "desc": "OAuth refresh_token grant type", "from": [ { "file": 124 } ] }, { "id": "micro-behaviors/communications/http/post::jvm-bytecode-do-output", "atk": "T1071.001", "mbc": "C0002", "conf": 0.86, "crit": 3, "desc": "Java bytecode HTTP output body enabled", "from": [ { "file": 79 } ] }, { "id": "micro-behaviors/process/io/stream::java-processbuilder-redirected-stdio", "conf": 0.96, "crit": 3, "desc": "Java ProcessBuilder redirects all standard streams", "from": [ { "file": 1 } ], "uses": [ 4, 10, 79 ] }, { "id": "objectives/anti-static/obfuscation/string/crypto::java-byte-range-copy", "atk": "T1027", "mbc": "F0001", "conf": 0.7, "crit": 3, "desc": "Java byte range copy", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/process/info/current::touri-ref", "conf": 0.82, "crit": 3, "desc": "Java toURI call reference" }, { "id": "micro-behaviors/communications/http/header/content-type::content-type-header", "conf": 0.5, "crit": 3, "desc": "References an HTTP Content-Type header", "from": [ { "file": 124 } ] }, { "id": "micro-behaviors/communications/socket/send::java-dataoutputstream-class", "atk": "T1071", "mbc": "C0001", "conf": 0.9, "crit": 3, "desc": "Java DataOutputStream class reference", "from": [ { "file": 5 } ] }, { "id": "micro-behaviors/data/embedded/payload/resource::java-class-getresourceasstream", "conf": 0.9, "crit": 3, "desc": "Java class-relative resource stream lookup", "from": [ { "file": 160 } ] }, { "id": "micro-behaviors/data/decompress/gzip::gzip-decompress", "conf": 0.85, "crit": 3, "desc": "Java GZIP in-memory decompression", "from": [ { "file": 1 }, { "file": 8 }, { "file": 15 }, { "file": 160 }, { "off": 5803, "file": 175 }, { "file": 215 } ], "uses": [ 53, 85 ] }, { "id": "micro-behaviors/communications/http/lib/httpclient::java-http-request-post-bytecode", "atk": "T1071.001", "conf": 0.9, "crit": 3, "desc": "Java HttpRequest builds a POST", "from": [ { "file": 96 } ] }, { "id": "micro-behaviors/communications/socket/ssl::jvm-x509trustmanager-class-ref", "conf": 0.94, "crit": 3, "desc": "JVM X509 trust-manager interface reference" }, { "id": "micro-behaviors/data/decode/base64::java-base64-decode-bytecode-call", "conf": 0.96, "crit": 3, "desc": "Java Base64 decode call", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/data/archive/extract/zip::jvm-zip-entry-iteration-bytecode", "conf": 0.92, "crit": 3, "desc": "JVM iterates ZIP archive entries", "from": [ { "file": 1 } ] }, { "id": "objectives/exfiltration/messaging/discord::java-system-property-os", "atk": "T1567.002", "mbc": "E1041", "conf": 0.88, "crit": 3, "desc": "Java OS property collection", "from": [ { "file": 180 } ] }, { "id": "micro-behaviors/communications/socket/ssl::jvm-sslcontext-trustmanager-init-call", "conf": 0.94, "crit": 3, "desc": "JVM SSLContext.init trust-manager call", "from": [ { "file": 5 } ] }, { "id": "micro-behaviors/data/buffer::jvm-outputstream-write", "conf": 0.96, "crit": 2, "desc": "JVM writes bytes to output stream", "from": [ { "file": 5 } ] }, { "id": "micro-behaviors/data/archive/extract/zip::jvm-zip-entry-extraction-to-file", "conf": 0.96, "crit": 3, "desc": "JVM extracts ZIP entries to files", "from": [ { "off": 12754, "file": 1 }, { "off": 12931, "file": 8 }, { "off": 12854, "file": 15 } ], "uses": [ 51, 142, 150 ] }, { "id": "well-known/game/mod::minecraft-uuid-getter-ref", "conf": 0.9, "crit": 3, "desc": "Minecraft profile UUID getter reference", "from": [ { "file": 6 } ] }, { "id": "micro-behaviors/process/create/spawn::java-processbuilder-bytecode", "atk": "T1059", "mbc": "E1203", "conf": 0.88, "crit": 3, "desc": "Java bytecode ProcessBuilder reference", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/process/create/spawn::java-runtime-getruntime-bytecode-symbol", "atk": "T1059", "mbc": "E1203", "conf": 0.92, "crit": 3, "desc": "Java bytecode Runtime accessor", "from": [ { "file": 180 } ] }, { "id": "micro-behaviors/fs/write/file/handle::jvm-fileoutputstream-bytecode", "conf": 0.86, "crit": 3, "desc": "JVM imports FileOutputStream class", "from": [ { "file": 1 } ] }, { "id": "well-known/game/mod::minecraft-client-class-ref", "conf": 0.9, "crit": 3, "desc": "Minecraft client singleton class reference", "from": [ { "file": 6 } ] }, { "id": "micro-behaviors/data/db/schema/relational::account-handle-field", "conf": 0.8, "crit": 3, "desc": "Account handle field name", "from": [ { "file": 224 } ] }, { "id": "micro-behaviors/data/buffer::bytearrayoutputstream-ref", "conf": 0.88, "crit": 3, "desc": "Java ByteArrayOutputStream class", "from": [ { "file": 1 } ] }, { "id": "metadata/package/entrypoint::jar-main-class", "conf": 0.95, "crit": 2, "desc": "JAR manifest declares an executable Main-Class" }, { "id": "metadata/package/files/archive-shape::jar-many-members", "conf": 0.98, "crit": 3, "desc": "JAR has many archive members" }, { "id": "metadata/package/files/credentials::package-key-like-member", "conf": 0.92, "crit": 3, "desc": "Key-container-like archive member" }, { "id": "metadata/file/data-blob::near-maximum-entropy-file", "conf": 0.9, "crit": 3, "desc": "File has near-maximum entropy" }, { "id": "metadata/package/config::fabric-runnable-mod-archive", "conf": 0.9, "crit": 3, "desc": "Fabric mod JAR is directly runnable", "from": [ { "file": 197 } ], "uses": [ 86, 154 ], "spans": [ [ 0, 15 ] ] }, { "id": "objectives/exfiltration/stealer/credential/token::minecraft-token-encrypted-http-exfil-dropper", "atk": "T1528, T1027, T1041", "mbc": "E1041", "conf": 0.98, "crit": 5, "desc": "Minecraft token access with encrypted dropper and HTTP request-body write", "uses": [ 33, 67, 71, 90, 148, 150 ], "spans": [ [ 4902, 30 ] ] }, { "id": "objectives/exfiltration/stealer/credential/token::minecraft-token-http-body-exfil", "atk": "T1041", "mbc": "E1041", "conf": 0.98, "crit": 4, "desc": "Minecraft token access paired with raw socket request write", "from": [ { "off": 6239, "file": 5 }, { "off": 1947, "file": 6 }, { "off": 6098, "file": 12 }, { "off": 2015, "file": 13 }, { "off": 6395, "file": 19 }, { "off": 1963, "file": 20 } ], "uses": [ 33, 125 ], "spans": [ [ 0, 41 ] ] }, { "id": "well-known/malware/stealer/prefire-shard::prefire-packed-runtime-stealer", "atk": "T1528", "mbc": "B0006", "conf": 0.99, "crit": 5, "desc": "Prefire packed runtime Minecraft stealer", "uses": [ 33, 51, 64, 88, 126, 142, 150 ] } ] }, { "id": 1, "mol": "O₂(AlAs₂)H₄(Db₄F₂Po₂Ti)", "sha": "f61401dd29e3a57336b3fb02e465c502f282fe3d34848d5670fb03d13a38d410", "path": "krypton-1.21.11.jar!!com/github/gfda_nmf_tx_witam.class", "risk": 11, "size": 152222, "type": "java_class", "depth": 1 }, { "id": 4, "mol": "H(Cm)", "sha": "d890deea7416c4fa1d9cdcba9c31660d1577599f70a530ccc69ddc75cf386b9a", "path": "krypton-1.21.11.jar!!com/github/inzu_aicyqc_rxbfm$sAiy.class", "risk": 2, "size": 1279, "type": "java_class", "depth": 1 }, { "ctx": [ { "b": "+kO#^0000+1bW9V9aJ]7fk20vxMW=qx(nltuTWUUD2Wt3A^h59z3H4w0rrWCvrM6jy*?i]fhD4(wN//!00rl4a.bCcfk20vxMW=qx(nltuTWUUD2Wt3A^h59z6Tf*x)x{-1PXP", "ln": 0 }, { "b": "B7UHN0ziv)33o])nnJ9!vRC\u0026yawuJUC42RGzE)]yB8#dJq=uv*z!0M]BvGXGBz(hBi@]r=jzwXEBuPZ911kQ03\u0026?\u003cVe^.NY051uM3uPY%xjVfRzF0!/03j*zz/4dux([3hvLqCkDuAO6x\u003e8Bdv{:n3vRfEs0rrjmwPN}Mi4dEnvrM6jy*?i]fh($kx(mMBdnjk\u0026z7/KoBzb/afkkrIBZFM\u003ev%J67uVHy2w]e/bBZG8\u003ci@]r{ygho]fkktTnL.^1v}xR3x(v\u003e]00", "ln": 634 }, { "b": "nDw!}vq{f%zE-+F94jf6oLO0Vvj#C9zF7R3BAh8kxf{-Py?d9$i$89Z089.1m/Vl=e!7ZO0$MqT0%5xcBz\u003e91A+PA70rr/ZdnjF+C404uvqYZhq/)4]zF83t08S.]3iiM@qVM\u003e7z*cFFph$5:0rvJ@oLO0Vvj#C9zF7R3BAh8kxfe!4vrM6jy*?i]fh($kx(mMBoLO0Vvj#C9zF7R3BAh8kxfe!4vrM6jy*?i]fh($kx(mMBoLO0Vvj#+Bx(2B%vq[pSoK\u00260Tfk20vxMW=qx-", "ln": 1025 }, { "b": "v@=c?By+EMa$cc1vrM6jy*?i]fh($kx(mMBdnjF+C404wwPPO9qB@}U0i(Kf3impgVJg4fBz\u003eeSoAtb8c[d\u00268vrM6jzE)]yrz(HL3\u0026)WnWH92s0jI$e3#fi]vj#IfBt3S(oA$Nd0rrvqwPQEYB94/\u003cY8U.o0j\u0026fy0rrvqwPQ:!A=.Y\u0026Z5QIc0j\u0026fB0rrHuwPQ:?z//]cz!]*Z.2Nvu0j\u0026fE0rsqF)5EbGHN42lP6-}X\u003c=b+\u003eSI]f:Gxv]Z\u003edmOWW3fQgS0Ayw0rrWxADLYaB4H1Zz/PzRvrk#X00", "ln": 2719 }, { "b": "w]8^rB75P{mpVA0cmzM5vrM6jy*?i]fh($kx(mMBdnjF+C404uvqYZhq/)4]zF83t0n)\u003eo3igbc\u0026Sf2\u0026ygho]fk+uyfh(!0yH}O)0osE!\u003cP3}o00\u0026M80rr*PwPQ*Yv}xv$wKpJKw[u0Yx)Kt00o:zN3ioe/\u003e(y=5ygho]fk+uyfg*4)Bw)9/yH}PNwmPZ(B8}M^(J3#3c}[w:C404uvqYZhq/)4]zF845dol\u0026SeDCeB0pfZN3\u0026?KMaQFbI0pQ0?2v?W\u0026zE)s10rs8/oLO0Vvj#IfBt3Nhv@2T$l1BIDwPI]OnHWWG0p*cY3ioe/]B7ZC03ITG0S.]{01r{WBw)9Sx(dB1B-X2({Y9?(0oBjR3\u0026?^Tec#pT0q==%9+]bbvr:CywPPODB8iHdq+Qbdv@2T$mQY!Gz/Qad0q#]#3$Br?vru6Vz!0M]Bo8w3c}[w:C404wwPPO7z!0M]BurfhvrM6jy*?i]fh($kx(mMBnM)Mpygho]fk+uyfh(!0yH}PH3\u0026{qd015-90rAi37IWx4vr:CywPPODB8iHdq+Qbdv@2T$2ls]c01-^OBw(aip*[xMzdN*2A=RlYa1eNiygho]CRr@CBt4YRy+FZ=oI/ervqPN$wPz\u0026N3\u0026{Ij1{$wl0s5S98erP6vr:CywPPODB8iHdpdW#{B97e=", "ln": 3223 }, { "b": "j1i\u003crvrM6jB-.tlfhc83Buo)i5civJ0s]hz0rs6NvrM77fk+uyflqhJfh\u003e!yp*[xMzdN*2A=RD^6AFgzB7GC(wPz%9A.Z4WwPE\u003eL6duK?vrM6jB-.tlfhc83Bup{L3\u0026}aA7yyfT0t\u003e?q9o:@3\u0026K\u003e9kH\u003e$F}RrCEw\u003e^V=lY}sLCOBihX1pb2D0rsr+wPQvUwn(E3zGFDXwO#Q7w[+:-BzkVhl2pgLA+PSez43B+0sGkn6-/rQ01:i.Bw(aip*[xMzdN*2A=RlYasG]#vrM77fk+uyflqhJfh\u003e!yp*[xMzdN*2A=Tq\u003erTY0J0u.ZI1oxUD01K6(vrcDXvqYQ%xKLW/3\u0026}NMe^.QZ0vdWC4}/D}pJZ+#B-ZM7A+eV@0rr@+dnjF+C404rz.B[eBz#wAq/)4\u003evqO7m0vv*{3ioe*c\u0026\u003cqTxjVfRzG6-uq/)4\u003evqM2B7BQ.aygho]fkktTnP5G\u0026Bw)p4wNPBq3\u0026}*Ud*=pr0w1lK5cRi\u003cHuBqW\u0026HNNzUE9I!Ru^hP0rr*GvrM6jx(tU2", "ln": 3844 }, { "b": "\u003cF66zR?ae}M\u003cTf2Ko2s{1N-}n(aKy\u0026ImqY1UKo6d(aKOj0G)D-3q1e(uPp25iBsGH0H9Ro2)2IRL(Q\u003c*CxdztwDq=mc%G1!rTY1}0HKh{f-^Wy00M$JB-Rj80H\u003c6w3iq\u003cZOb\u0026P[C4CbKwb#V(c}[w:C404rz.BX1Acln3BAg@3z96guv@Diqxk8E3BZ^1rzHcCjvqfj%ABSu@CW+o4bXRscA9kmh0Ifs:3igbdPAb2@v@c78wEFQl04[PU\u003cPhaS0269QC404uvqYZhra{q\u003cCvs@%wD@mj0rr^8xI?udzBO.)uT^bkpHwuZoMp7k8ba^NC42RGzE)]yB8#dJq=uv*z!0M]BuoH65mYVQz!%rmBWQ4\u0026vn7YXw=R(LoLO0Vvr:CywPPODB8iHdq+Q1@A:-/@By/Gli@]r{Dso@#uU%H%zc}rPo(\u003cVevpKuV01?[tvrM6jzE)]yq/ueYwPQ0m01h\u003e3ok[rkB5M{}vf3ujAcca@B-WS:6?\u0026vJC404DBzkLAo\u003c}#^mq^i/C@(3b6gMCgDs6iUxL}f[pIr{sxjVy40rr)eygho]fkktTpJZ+#B-ZM7A+eV@i@]r:vPD]N0rr\u003cdygho]fkktTnP5G\u0026Bw)p4wNPBq0rr=", "ln": 6175 }, { "b": "B7]@ih30W-xkHHqvP+S%yYKIxo\u003c.yOmO(YFsoey8C28i{0rrvswoZW/wO?CF3$Ko@z!Tx4wQnldwDq=voLO0Vvj#IfBt3S(oGJmP24.W]A^oIy01isNn{kwEvSlp4BPzEOw[+Z%Cva)5AD+=3wPhH0w=R(BBY0B6uWtmRzEk?omT5iHy?ER^01hw4r4}W4xj%RsnDw/8qBU}NuVYvYrBo/.szInMm{oB700E4iB.}cV0+(JM03t@:C404uvqYZhpiu", "ln": 6762 }, { "b": "z.BC1w[CQ{wN[wIAcln3BAg@3z3H9\u00260rr@+oLO0Vvj#tkfg*52B-ZM7A+eV@j1jhs04!l33iwPR!D2T\u003cygho]fkktTlv0V:l2}0OC#5N8Acln3BAg@3z3H9[3iw=Vf984QA+eV\u00263\u003c25ZlKA\u003ey0OX1-MJfL-0OvCe0rrmzx)Kt00P9(A3iw=W?#J/=Bz\u003cG\u003eBy^:UA::j]00BY0ts5-0\u0026Sn6D0OvCl0rs-2oLO0Vvj#Ijz.CQlvrcB2Bt30{vrcB2Bup{Bygho]fkL6mxd)h9A+PA7i$89^0P\u003cZ\u0026/A7do02$r=R%p%\u0026)t!jiY@p1xOAMPL-/GIASp2LA2m7v{0rrpAAbolg0rsF}oLO0Vvj#C9zF7R3BAh8kxfdLDoLO0Vve", "ln": 7031 }, { "b": "01iBIl2Z\u003cVB5VNVx-OhtB97\u0026jwLNw+0rrBry**%$l$7gC0rrNHf\u0026qaAgiku@p?9aq0rsinygho]fkktTlv0V:l2}0OC#5N8Acln3BAg@3z94:#1BrySw=R(qwO#QgC#eB20rrEtw[U*:B8C/5vf3uhCxM]70rsclygho]fkktTluM)LwPzu)nP5G\u0026Bw)p4wNPBq0rrTsyiBU#v@kT]z9?VFD3Gz\u003c6jU#\u0026o\u003c.NTs6e*eBwkFpAAc\u003c/0rr^flW8aezC\u0026/yuSh2iw=", "ln": 8476 }, { "b": "Myl\u003c2Quekd(xl.SYpYAhRVu=8x\u003c$j^x)sh:zd9CB0yD\u003e/4o^sIAXR=iCw7t=uVb@B19!fG1ipeo=h^[Zygho]fkktTl$7gCpJZ+#B-ZM7A+eV@2lI4e02WgUygho]fkktTpJZ+#B-ZM7A+eV@j1jhs04!nR3iEyjU(K?gzEEB3rb3hX3\u003c9:pKo#1E0\u003c\u0026ah000000rr61019{\u003cx()]+xM4{k3\u003c9{snd2B40\u003ewsie!d35X9H6c(X.g]S!Y\u0026pQWi=o(+n+NVXW.vPynRS", "ln": 9588 }, { "b": "D30Qa0\u003e!O83iEyjZ5XivCxdztwKpV:wPFmYZYs/I0\u003cqWw0@%A9jP+XLrm.kP2@xc{:7fJX1kn\u003cKc\u0026\u003cq^ygho]fkL6mxd)e9zGGPfwKQ\u0026NwPh:9z/b^Y:n(nTc}[w:C404uvqYZhra{q\u003cCvs@%wJItw3\u0026?\u003cX:{Fi(0)pPA5ohh]xMOL!wk^h-vo3=JA@=mKxL?D$xg)wQAb!%6ra][B00c10010aEvQ%R2uUA\u003cG02ngxvrM6jx(tT@pEPIrwPh:9z/dSq00", "ln": 9831 }, { "b": "vrM6jB-.tlfg68*wI#v\u003cmq=QNwmY^y3\u003cbz\u0026\u0026%C=30]%vZ4ThSexM53np*))Bx(mL(0{fNA3ig.v\u003ek+L)wO#0@wmX.Uq/)4]zF6vV\u003e(M!J022C00ruji\u003cdz+5Y0yIjHWg$M\u0026\u003cV5LX0Dr)Y5y06)u$lzL+WV6Vf)Ea\u0026E)3MG[noRW=+n*\u003eE^!WTb(nHFABqr(B-hpVxjEvGxXU\u0026)UM$(H{2Y\u003cRT5]v\u003cdAaM0{/{/83GuoO:j4U\u003cEhd{V:o5eR0JS6\u003cEq}fW37:%)G0qS4d79[(7B%tQ{]^9Zu{W", "ln": 10198 }, { "b": "pJfb/yYKIwA+frhz/fSc1?rL$Lw6w\u003erS@E6001hGi0/-*00000004xI000005[:[30rr^FvrM6jzFs2xlv0V:luM)LwPw1T7xBHsCxdbh0rr#=ts6=jygho]fk+Gxfg6@awKpJKw[u0A3\u003cdvH8vuM-0#?mv2XNZ\u003cq!Q8\u0026Bo8vzc[e76104E+3iIaE9%hGyFb/VK0rr63PT0G.0#HSn:PEyFo3dn8eQ%V000(nnlrE[$oI\u003e/\u003c7:@6)vrM6jzFo", "ln": 11076 }, { "b": "v}tVve*%zdvrM6jy*?i]fh($kx(mMBdnjF+C42RGzE)]yB8#dJq=uvSz/fVdCYV1Q184^J3iK]yy5[qMygho]CRr@CBt4YRy+F+dB-RU0vqYH^wPw1TyZHdD051uM8FSY7vj#Xkv%8*aBA]JrwN/\u003e6wL#@Own=q\u002618!IGz#.J(00E1Nx(\u003cvQs14oDygho]CRr@CBt4YRy+FB)C$?Z+vp%d(j6Lx[vrM77fk+uyflqhJfh#$mB97b+zEEf?AYV%fvrM6jB7F\u003c7A+PSvfh(B(B-I4\u003evqYQ]z96gE3\u003cgILA%-1Z19sLz5nbM@q/ueYwPQyIv@#TfC(W)?c[d\u00268vrM77fk+uyflqhJfh\u003e!yq/ueYwPQyIv@#R", "ln": 12120 }, { "b": "1R?ig01x!G0#h0F0S\u003ey=83EwF!r{pvRVp6w1HXvq5d(tMwhTSb2atI@RVov82d$j52lM\u003c\u00266:LJUQ5VF?83Z(Z6:txUwvqLJhvg980?YI$RVmev2O^UNhvckX*aa3C0@", "ln": 35517 } ], "depth": 1, "facts": { "imp": [ [ "", "java/util/Map$Entry" ], [ "", "java/lang/invoke/MethodHandles" ], [ "", "javax/net/ssl/SSLSocket" ], [ "", "javax/net/ssl/SNIHostName" ], [ "", "[Ljava/lang/String;" ], [ "", "java/lang/StringBuilder" ], [ "", "java/lang/System" ], [ "", "java/lang/invoke/MethodHandles$Lookup" ], [ "", "java/util/Iterator" ], [ "", "java/io/DataOutputStream" ], [ "", "java/util/Base64$Encoder" ], [ "", "com/github/inzu_aicyqc_rxbfm$CjSwwwdLjz" ], [ "", "com/github/inzu_aicyqc_rxbfm$hu_pY" ], [ "", "java/util/Base64" ], [ "", "java/net/URL" ], [ "", "java/lang/Exception" ], [ "", "javax/net/ssl/SSLContext" ], [ "", "java/lang/NumberFormatException" ], [ "", "java/lang/String" ], [ "", "java/lang/Throwable" ], [ "", "java/util/Set" ], [ "", "javax/net/ssl/TrustManager" ], [ "", "javax/net/ssl/SSLSocketFactory" ], [ "", "javax/net/ssl/SSLParameters" ], [ "", "java/nio/charset/StandardCharsets" ], [ "", "java/lang/RuntimeException" ], [ "", "java/lang/Integer" ], [ "", "[B" ], [ "", "java/net/URI" ], [ "", "java/util/List" ], [ "", "[C" ], [ "", "java/security/SecureRandom" ], [ "", "java/net/InetSocketAddress" ], [ "", "java/nio/ByteBuffer" ], [ "", "java/util/concurrent/ConcurrentHashMap" ], [ "", "com/github/inzu_aicyqc_rxbfm$sAiy" ], [ "", "java/io/IOException" ], [ "", "java/util/Map" ], [ "", "java/net/Socket" ], [ "", "java/io/BufferedInputStream" ], [ "", "java/io/ByteArrayOutputStream" ], [ "", "java/util/LinkedHashMap" ], [ "", "java/io/OutputStream" ], [ "", "java/lang/Object" ], [ "", "java/io/InputStream" ], [ "java/lang/String", "java/lang/String.startsWith" ], [ "java/lang/String", "startsWith" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.setLength" ], [ "java/lang/StringBuilder", "setLength" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.\u003cinit\u003e" ], [ "java/lang/StringBuilder", "\u003cinit\u003e" ], [ "javax/net/ssl/SSLContext", "javax/net/ssl/SSLContext.getInstance" ], [ "javax/net/ssl/SSLContext", "getInstance" ], [ "java/net/Socket", "java/net/Socket.setSoTimeout" ], [ "java/net/Socket", "setSoTimeout" ], [ "java/lang/Object", "java/lang/Object.\u003cinit\u003e" ], [ "java/lang/Object", "\u003cinit\u003e" ], [ "java/lang/String", "java/lang/String.toLowerCase" ], [ "java/lang/String", "toLowerCase" ], [ "java/nio/ByteBuffer", "java/nio/ByteBuffer.wrap" ], [ "java/nio/ByteBuffer", "wrap" ], [ "java/util/Iterator", "java/util/Iterator.hasNext" ], [ "java/util/Iterator", "hasNext" ], [ "java/lang/String", "java/lang/String.equalsIgnoreCase" ], [ "java/lang/String", "equalsIgnoreCase" ], [ "java/security/SecureRandom", "java/security/SecureRandom.\u003cinit\u003e" ], [ "java/security/SecureRandom", "\u003cinit\u003e" ], [ "java/util/LinkedHashMap", "java/util/LinkedHashMap.\u003cinit\u003e" ], [ "java/util/LinkedHashMap", "\u003cinit\u003e" ], [ "java/util/Map$Entry", "java/util/Map$Entry.getKey" ], [ "java/util/Map$Entry", "getKey" ], [ "java/util/Map$Entry", "java/util/Map$Entry.getValue" ], [ "java/util/Map$Entry", "getValue" ], [ "java/io/BufferedInputStream", "java/io/BufferedInputStream.read" ], [ "java/io/BufferedInputStream", "read" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.toString" ], [ "java/lang/StringBuilder", "toString" ], [ "java/lang/String", "java/lang/String.substring" ], [ "java/lang/String", "substring" ], [ "java/util/Map", "java/util/Map.entrySet" ], [ "java/util/Map", "entrySet" ], [ "java/net/InetSocketAddress", "java/net/InetSocketAddress.\u003cinit\u003e" ], [ "java/net/InetSocketAddress", "\u003cinit\u003e" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.append" ], [ "java/lang/StringBuilder", "append" ], [ "com/github/inzu_aicyqc_rxbfm$CjSwwwdLjz", "com/github/inzu_aicyqc_rxbfm$CjSwwwdLjz.\u003cinit\u003e" ], [ "com/github/inzu_aicyqc_rxbfm$CjSwwwdLjz", "\u003cinit\u003e" ], [ "java/util/List", "java/util/List.of" ], [ "java/util/List", "of" ], [ "java/io/BufferedInputStream", "java/io/BufferedInputStream.read" ], [ "java/io/BufferedInputStream", "read" ], [ "com/github/inzu_aicyqc_rxbfm", "com/github/inzu_aicyqc_rxbfm.yEvpF" ], [ "com/github/inzu_aicyqc_rxbfm", "yEvpF" ], [ "java/net/URL", "java/net/URL.getProtocol" ], [ "java/net/URL", "getProtocol" ], [ "java/net/URL", "java/net/URL.getPort" ], [ "java/net/URL", "getPort" ], [ "java/io/ByteArrayOutputStream", "java/io/ByteArrayOutputStream.\u003cinit\u003e" ], [ "java/io/ByteArrayOutputStream", "\u003cinit\u003e" ], [ "java/lang/String", "java/lang/String.isEmpty" ], [ "java/lang/String", "isEmpty" ], [ "java/util/Base64$Encoder", "java/util/Base64$Encoder.withoutPadding" ], [ "java/util/Base64$Encoder", "withoutPadding" ], [ "java/io/ByteArrayOutputStream", "java/io/ByteArrayOutputStream.\u003cinit\u003e" ], [ "java/io/ByteArrayOutputStream", "\u003cinit\u003e" ], [ "java/io/BufferedInputStream", "java/io/BufferedInputStream.read" ], [ "java/io/BufferedInputStream", "read" ], [ "com/github/inzu_aicyqc_rxbfm", "com/github/inzu_aicyqc_rxbfm.jgqdYincnsArktgc" ], [ "com/github/inzu_aicyqc_rxbfm", "jgqdYincnsArktgc" ], [ "java/nio/ByteBuffer", "java/nio/ByteBuffer.getInt" ], [ "java/nio/ByteBuffer", "getInt" ], [ "java/net/Socket", "java/net/Socket.getInputStream" ], [ "java/net/Socket", "getInputStream" ], [ "java/io/ByteArrayOutputStream", "java/io/ByteArrayOutputStream.size" ], [ "java/io/ByteArrayOutputStream", "size" ], [ "java/lang/RuntimeException", "java/lang/RuntimeException.\u003cinit\u003e" ], [ "java/lang/RuntimeException", "\u003cinit\u003e" ], [ "com/github/inzu_aicyqc_rxbfm", "com/github/inzu_aicyqc_rxbfm.wPc" ], [ "com/github/inzu_aicyqc_rxbfm", "wPc" ], [ "java/lang/String", "java/lang/String.indexOf" ], [ "java/lang/String", "indexOf" ], [ "java/util/concurrent/ConcurrentHashMap", "java/util/concurrent/ConcurrentHashMap.\u003cinit\u003e" ], [ "java/util/concurrent/ConcurrentHashMap", "\u003cinit\u003e" ], [ "java/net/Socket", "java/net/Socket.\u003cinit\u003e" ], [ "java/net/Socket", "\u003cinit\u003e" ], [ "javax/net/ssl/SSLSocketFactory", "javax/net/ssl/SSLSocketFactory.getDefault" ], [ "javax/net/ssl/SSLSocketFactory", "getDefault" ], [ "java/lang/String", "java/lang/String.getBytes" ], [ "java/lang/String", "getBytes" ], [ "com/github/inzu_aicyqc_rxbfm$CjSwwwdLjz", "com/github/inzu_aicyqc_rxbfm$CjSwwwdLjz.isExpired" ], [ "com/github/inzu_aicyqc_rxbfm$CjSwwwdLjz", "isExpired" ], [ "javax/net/ssl/SSLContext", "javax/net/ssl/SSLContext.getSocketFactory" ], [ "javax/net/ssl/SSLContext", "getSocketFactory" ], [ "java/lang/String", "java/lang/String.indexOf" ], [ "java/lang/String", "indexOf" ], [ "javax/net/ssl/SSLSocket", "javax/net/ssl/SSLSocket.getInputStream" ], [ "javax/net/ssl/SSLSocket", "getInputStream" ], [ "java/nio/ByteBuffer", "java/nio/ByteBuffer.getShort" ], [ "java/nio/ByteBuffer", "getShort" ], [ "java/io/DataOutputStream", "java/io/DataOutputStream.writeByte" ], [ "java/io/DataOutputStream", "writeByte" ], [ "com/github/inzu_aicyqc_rxbfm", "com/github/inzu_aicyqc_rxbfm.LmBXhPLQ" ], [ "com/github/inzu_aicyqc_rxbfm", "LmBXhPLQ" ], [ "java/net/Socket", "java/net/Socket.close" ], [ "java/net/Socket", "close" ], [ "com/github/inzu_aicyqc_rxbfm", "com/github/inzu_aicyqc_rxbfm.jmnoHub" ], [ "com/github/inzu_aicyqc_rxbfm", "jmnoHub" ], [ "java/net/Socket", "java/net/Socket.setReceiveBufferSize" ], [ "java/net/Socket", "setReceiveBufferSize" ], [ "com/github/inzu_aicyqc_rxbfm", "com/github/inzu_aicyqc_rxbfm.eqkomwHs" ], [ "com/github/inzu_aicyqc_rxbfm", "eqkomwHs" ], [ "javax/net/ssl/SNIHostName", "javax/net/ssl/SNIHostName.\u003cinit\u003e" ], [ "javax/net/ssl/SNIHostName", "\u003cinit\u003e" ], [ "com/github/inzu_aicyqc_rxbfm", "com/github/inzu_aicyqc_rxbfm.vuzyApedt" ], [ "com/github/inzu_aicyqc_rxbfm", "vuzyApedt" ], [ "java/lang/String", "java/lang/String.length" ], [ "java/lang/String", "length" ], [ "java/net/URI", "java/net/URI.create" ], [ "java/net/URI", "create" ], [ "java/nio/charset/StandardCharsets", "java/nio/charset/StandardCharsets.ISO_8859_1" ], [ "java/nio/charset/StandardCharsets", "ISO_8859_1" ], [ "java/lang/System", "java/lang/System.arraycopy" ], [ "java/lang/System", "arraycopy" ], [ "java/lang/String", "java/lang/String.toCharArray" ], [ "java/lang/String", "toCharArray" ], [ "com/github/inzu_aicyqc_rxbfm$hu_pY", "com/github/inzu_aicyqc_rxbfm$hu_pY.\u003cinit\u003e" ], [ "com/github/inzu_aicyqc_rxbfm$hu_pY", "\u003cinit\u003e" ], [ "java/lang/System", "java/lang/System.nanoTime" ], [ "java/lang/System", "nanoTime" ], [ "java/io/OutputStream", "java/io/OutputStream.flush" ], [ "java/io/OutputStream", "flush" ], [ "com/github/inzu_aicyqc_rxbfm", "com/github/inzu_aicyqc_rxbfm.bj_fmnrtl" ], [ "com/github/inzu_aicyqc_rxbfm", "bj_fmnrtl" ], [ "com/github/inzu_aicyqc_rxbfm", "com/github/inzu_aicyqc_rxbfm.elwC" ], [ "com/github/inzu_aicyqc_rxbfm", "elwC" ], [ "javax/net/ssl/SSLSocket", "javax/net/ssl/SSLSocket.close" ], [ "javax/net/ssl/SSLSocket", "close" ], [ "javax/net/ssl/SSLSocketFactory", "javax/net/ssl/SSLSocketFactory.createSocket" ], [ "javax/net/ssl/SSLSocketFactory", "createSocket" ], [ "java/net/URL", "java/net/URL.getHost" ], [ "java/net/URL", "getHost" ], [ "javax/net/ssl/SSLSocket", "javax/net/ssl/SSLSocket.getSSLParameters" ], [ "javax/net/ssl/SSLSocket", "getSSLParameters" ], [ "com/github/inzu_aicyqc_rxbfm", "com/github/inzu_aicyqc_rxbfm.ncayrvlwPtr" ], [ "com/github/inzu_aicyqc_rxbfm", "ncayrvlwPtr" ], [ "java/net/URI", "java/net/URI.toURL" ], [ "java/net/URI", "toURL" ], [ "java/io/OutputStream", "java/io/OutputStream.write" ], [ "java/io/OutputStream", "write" ], [ "java/util/Iterator", "java/util/Iterator.next" ], [ "java/util/Iterator", "next" ], [ "java/lang/String", "java/lang/String.equals" ], [ "java/lang/String", "equals" ], [ "com/github/inzu_aicyqc_rxbfm", "com/github/inzu_aicyqc_rxbfm.evtInsg" ], [ "com/github/inzu_aicyqc_rxbfm", "evtInsg" ], [ "java/io/DataOutputStream", "java/io/DataOutputStream.writeBytes" ], [ "java/io/DataOutputStream", "writeBytes" ], [ "java/nio/ByteBuffer", "java/nio/ByteBuffer.get" ], [ "java/nio/ByteBuffer", "get" ], [ "java/lang/String", "java/lang/String.contains" ], [ "java/lang/String", "contains" ], [ "com/github/inzu_aicyqc_rxbfm", "com/github/inzu_aicyqc_rxbfm.uMzowptahw" ], [ "com/github/inzu_aicyqc_rxbfm", "uMzowptahw" ], [ "com/github/inzu_aicyqc_rxbfm", "com/github/inzu_aicyqc_rxbfm.tjdHllxbi" ], [ "com/github/inzu_aicyqc_rxbfm", "tjdHllxbi" ], [ "javax/net/ssl/SSLParameters", "javax/net/ssl/SSLParameters.setEndpointIdentificationAlgorithm" ], [ "javax/net/ssl/SSLParameters", "setEndpointIdentificationAlgorithm" ], [ "java/nio/ByteBuffer", "java/nio/ByteBuffer.position" ], [ "java/nio/ByteBuffer", "position" ], [ "java/nio/ByteBuffer", "java/nio/ByteBuffer.position" ], [ "java/nio/ByteBuffer", "position" ], [ "java/io/DataOutputStream", "java/io/DataOutputStream.writeShort" ], [ "java/io/DataOutputStream", "writeShort" ], [ "com/github/inzu_aicyqc_rxbfm", "com/github/inzu_aicyqc_rxbfm.flzxsadkEd" ], [ "com/github/inzu_aicyqc_rxbfm", "flzxsadkEd" ], [ "java/io/ByteArrayOutputStream", "java/io/ByteArrayOutputStream.write" ], [ "java/io/ByteArrayOutputStream", "write" ], [ "com/github/inzu_aicyqc_rxbfm", "com/github/inzu_aicyqc_rxbfm.omdbr_iwkg_nme" ], [ "com/github/inzu_aicyqc_rxbfm", "omdbr_iwkg_nme" ], [ "java/nio/ByteBuffer", "java/nio/ByteBuffer.get" ], [ "java/nio/ByteBuffer", "get" ], [ "java/lang/String", "java/lang/String.\u003cinit\u003e" ], [ "java/lang/String", "\u003cinit\u003e" ], [ "java/net/URL", "java/net/URL.getPath" ], [ "java/net/URL", "getPath" ], [ "java/util/Base64", "java/util/Base64.getUrlEncoder" ], [ "java/util/Base64", "getUrlEncoder" ], [ "java/io/InputStream", "java/io/InputStream.read" ], [ "java/io/InputStream", "read" ], [ "java/util/Set", "java/util/Set.iterator" ], [ "java/util/Set", "iterator" ], [ "java/lang/String", "java/lang/String.substring" ], [ "java/lang/String", "substring" ], [ "java/nio/charset/StandardCharsets", "java/nio/charset/StandardCharsets.UTF_8" ], [ "java/nio/charset/StandardCharsets", "UTF_8" ], [ "com/github/inzu_aicyqc_rxbfm", "com/github/inzu_aicyqc_rxbfm.owysNqkj" ], [ "com/github/inzu_aicyqc_rxbfm", "owysNqkj" ], [ "java/io/BufferedInputStream", "java/io/BufferedInputStream.\u003cinit\u003e" ], [ "java/io/BufferedInputStream", "\u003cinit\u003e" ], [ "java/io/ByteArrayOutputStream", "java/io/ByteArrayOutputStream.toByteArray" ], [ "java/io/ByteArrayOutputStream", "toByteArray" ], [ "java/lang/Integer", "java/lang/Integer.parseInt" ], [ "java/lang/Integer", "parseInt" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.append" ], [ "java/lang/StringBuilder", "append" ], [ "java/nio/ByteBuffer", "java/nio/ByteBuffer.hasRemaining" ], [ "java/nio/ByteBuffer", "hasRemaining" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.append" ], [ "java/lang/StringBuilder", "append" ], [ "java/lang/System", "java/lang/System.currentTimeMillis" ], [ "java/lang/System", "currentTimeMillis" ], [ "javax/net/ssl/SSLSocket", "javax/net/ssl/SSLSocket.setSSLParameters" ], [ "javax/net/ssl/SSLSocket", "setSSLParameters" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.\u003cinit\u003e" ], [ "java/lang/StringBuilder", "\u003cinit\u003e" ], [ "com/github/inzu_aicyqc_rxbfm$CjSwwwdLjz", "com/github/inzu_aicyqc_rxbfm$CjSwwwdLjz.ip" ], [ "com/github/inzu_aicyqc_rxbfm$CjSwwwdLjz", "ip" ], [ "com/github/inzu_aicyqc_rxbfm", "com/github/inzu_aicyqc_rxbfm.vebEd" ], [ "com/github/inzu_aicyqc_rxbfm", "vebEd" ], [ "javax/net/ssl/SSLSocket", "javax/net/ssl/SSLSocket.startHandshake" ], [ "javax/net/ssl/SSLSocket", "startHandshake" ], [ "java/lang/String", "java/lang/String.trim" ], [ "java/lang/String", "trim" ], [ "java/io/InputStream", "java/io/InputStream.read" ], [ "java/io/InputStream", "read" ], [ "com/github/inzu_aicyqc_rxbfm", "com/github/inzu_aicyqc_rxbfm.twwDbWnn" ], [ "com/github/inzu_aicyqc_rxbfm", "twwDbWnn" ], [ "java/lang/Integer", "java/lang/Integer.parseInt" ], [ "java/lang/Integer", "parseInt" ], [ "java/io/DataOutputStream", "java/io/DataOutputStream.\u003cinit\u003e" ], [ "java/io/DataOutputStream", "\u003cinit\u003e" ], [ "java/lang/String", "java/lang/String.split" ], [ "java/lang/String", "split" ], [ "com/github/inzu_aicyqc_rxbfm", "com/github/inzu_aicyqc_rxbfm.oVjgom" ], [ "com/github/inzu_aicyqc_rxbfm", "oVjgom" ], [ "java/util/Map", "java/util/Map.get" ], [ "java/util/Map", "get" ], [ "javax/net/ssl/SSLParameters", "javax/net/ssl/SSLParameters.setServerNames" ], [ "javax/net/ssl/SSLParameters", "setServerNames" ], [ "java/util/Base64$Encoder", "java/util/Base64$Encoder.encodeToString" ], [ "java/util/Base64$Encoder", "encodeToString" ], [ "javax/net/ssl/SSLSocket", "javax/net/ssl/SSLSocket.getOutputStream" ], [ "javax/net/ssl/SSLSocket", "getOutputStream" ], [ "java/net/Socket", "java/net/Socket.getOutputStream" ], [ "java/net/Socket", "getOutputStream" ], [ "java/net/URL", "java/net/URL.getQuery" ], [ "java/net/URL", "getQuery" ], [ "java/io/ByteArrayOutputStream", "java/io/ByteArrayOutputStream.write" ], [ "java/io/ByteArrayOutputStream", "write" ], [ "java/util/Map", "java/util/Map.put" ], [ "java/util/Map", "put" ], [ "java/io/ByteArrayOutputStream", "java/io/ByteArrayOutputStream.toString" ], [ "java/io/ByteArrayOutputStream", "toString" ], [ "com/github/inzu_aicyqc_rxbfm$sAiy", "com/github/inzu_aicyqc_rxbfm$sAiy.\u003cinit\u003e" ], [ "com/github/inzu_aicyqc_rxbfm$sAiy", "\u003cinit\u003e" ], [ "java/net/Socket", "java/net/Socket.connect" ], [ "java/net/Socket", "connect" ], [ "javax/net/ssl/SSLContext", "javax/net/ssl/SSLContext.init" ], [ "javax/net/ssl/SSLContext", "init" ], [ "java/lang/String", "java/lang/String.charAt" ], [ "java/lang/String", "charAt" ], [ "com/github/inzu_aicyqc_rxbfm$hu_pY", "com/github/inzu_aicyqc_rxbfm$hu_pY.body" ], [ "com/github/inzu_aicyqc_rxbfm$hu_pY", "body" ] ], "metrics": { "file": { "size": 42745, "entropy": 5.26 }, "class": { "major_version": 65, "interface_count": 0, "method_ref_count": 129, "constant_pool_size": 906, "external_class_count": 45 }, "binary": { "peak_region_bytes": 4096, "peak_region_entropy": 6.99 }, "imports": { "count": 174 }, "functions": { "count": 16 } } }, "id": 5, "mol": "O(As)H₄(Cm₅Db₃OsPo₂)", "path": "krypton-1.21.11.jar!!com/github/inzu_aicyqc_rxbfm.class", "pid": 0, "risk": 9, "sha": "7688c136f9eb290710135745411f72ba55eae32b0d6e8f0c58fdd28675d3d8b7", "size": 42745, "traits": [ { "id": "micro-behaviors/communications/http/lib/urlconnection::java-url-class-bytecode", "atk": "T1071.001", "mbc": "C0002", "conf": 0.86, "crit": 3, "desc": "Java URL class reference", "spans": [ [ 2783, 16 ], [ 2812, 12 ], [ 6826, 14 ] ] }, { "id": "micro-behaviors/communications/http/lib/urlconnection::jvm-url-class-ref", "atk": "T1071.001", "mbc": "C0002", "conf": 0.9, "crit": 3, "desc": "JVM URL class reference" }, { "id": "micro-behaviors/communications/proxy/tunnel::byte-output-stream", "atk": "T1090", "mbc": "C0003", "conf": 0.5, "crit": 3, "desc": "Java ByteArrayOutputStream usage", "spans": [ [ 698, 21 ], [ 1097, 21 ], [ 6247, 21 ], [ 7103, 21 ], [ 7170, 21 ], [ 7187, 21 ], [ 8540, 21 ] ] }, { "id": "micro-behaviors/communications/proxy/tunnel::inet-socket-address", "atk": "T1090", "mbc": "C0003", "conf": 0.6, "crit": 3, "desc": "Java InetSocketAddress reference", "spans": [ [ 699, 17 ], [ 3360, 17 ] ] }, { "id": "micro-behaviors/communications/socket/create::java-socket-bytecode-reference", "atk": "T1071", "mbc": "C0001", "conf": 0.86, "crit": 3, "desc": "Java bytecode socket reference", "spans": [ [ 3575, 56 ], [ 6529, 17 ] ] }, { "id": "micro-behaviors/communications/socket/create::java-socket-class-import", "atk": "T1071", "mbc": "C0001", "conf": 0.9, "crit": 3, "desc": "Java imports the network socket class", "spans": [ [ 3287, 15 ] ] }, { "id": "micro-behaviors/communications/socket/create::java-socket-slash-reference", "atk": "T1071", "mbc": "C0001", "conf": 0.9, "crit": 3, "desc": "Java slash-form socket reference", "spans": [ [ 3287, 15 ], [ 3438, 28 ], [ 3575, 56 ], [ 6529, 17 ] ] }, { "id": "micro-behaviors/communications/socket/create::jvm-socket-class-ref", "atk": "T1071", "mbc": "C0001", "conf": 0.9, "crit": 3, "desc": "JVM socket class reference" }, { "id": "micro-behaviors/communications/socket/framing::bytebuffer-transport", "atk": "T1573", "conf": 1.0, "crit": 3, "desc": "Java byte-buffer transport type", "spans": [ [ 11140, 10 ] ] }, { "id": "micro-behaviors/communications/socket/framing::data-stream-transport", "atk": "T1573", "conf": 1.0, "crit": 3, "desc": "Java data-stream transport type", "spans": [ [ 9660, 16 ] ] }, { "id": "micro-behaviors/communications/socket/send::java-dataoutputstream-class", "atk": "T1071", "mbc": "C0001", "conf": 0.9, "crit": 3, "desc": "Java DataOutputStream class reference", "spans": [ [ 9652, 24 ] ] }, { "id": "micro-behaviors/communications/socket/ssl::jvm-sslcontext-trustmanager-init-call", "conf": 0.94, "crit": 3, "desc": "JVM SSLContext.init trust-manager call", "spans": [ [ 12258, 29 ] ] }, { "id": "micro-behaviors/communications/socket/ssl::jvm-sslparameters-set-server-names", "conf": 0.93, "crit": 3, "desc": "JVM sets TLS SNI server name", "spans": [ [ 3908, 42 ] ] }, { "id": "micro-behaviors/communications/socket/ssl::jvm-sslsocket-handshake-call", "conf": 0.94, "crit": 3, "desc": "JVM SSLSocket.startHandshake call", "spans": [ [ 4102, 38 ] ] }, { "id": "micro-behaviors/communications/socket/ssl::jvm-trustmanager-class-ref", "conf": 0.9, "crit": 3, "desc": "JVM TrustManager interface reference", "spans": [ [ 12184, 26 ] ] }, { "id": "micro-behaviors/crypto/library/provider::jvm-security-class-ref", "conf": 0.86, "crit": 2, "desc": "JVM security package reference" }, { "id": "micro-behaviors/data/buffer::bytearrayoutputstream-ref", "conf": 0.88, "crit": 3, "desc": "Java ByteArrayOutputStream class", "spans": [ [ 7095, 29 ] ] }, { "id": "micro-behaviors/data/buffer::jvm-outputstream-write", "conf": 0.96, "crit": 2, "desc": "JVM writes bytes to output stream", "spans": [ [ 6239, 0 ] ] }, { "id": "micro-behaviors/data/encode/base64::jvm-base64-encode-bytecode", "conf": 0.94, "crit": 3, "desc": "JVM Base64 encodeToString call", "spans": [ [ 10262, 39 ] ] }, { "id": "micro-behaviors/data/string/conversion::tostring-token", "conf": 1.0, "crit": 3, "desc": "References the toString conversion method", "spans": [ [ 1089, 8 ] ] }, { "id": "micro-behaviors/os/sysinfo/hostname::jvm-hostname-command-literal", "atk": "T1082", "mbc": "E1082", "conf": 0.9, "crit": 3, "desc": "JVM hostname command literal" }, { "id": "micro-behaviors/process/create/spawn::java-runtime-class", "atk": "T1059", "mbc": "E1203", "conf": 0.86, "crit": 3, "desc": "Java Runtime class reference", "spans": [ [ 9895, 17 ] ] }, { "id": "micro-behaviors/process/info/current::getpath-ref", "conf": 0.8, "crit": 3, "desc": "Java getPath call reference" }, { "id": "objectives/anti-static/obfuscation/string/control-prefix::java-control-prefixed-long-string", "atk": "T1027", "mbc": "F0001", "conf": 0.92, "crit": 3, "desc": "Java string starts with control-length prefix" }, { "id": "micro-behaviors/communications/socket/send::java-raw-socket-client-write", "atk": "T1071", "mbc": "C0001", "conf": 0.94, "crit": 3, "desc": "Java socket client writes request bytes through DataOutputStream", "uses": [ 5, 10, 17 ], "spans": [ [ 3287, 15 ], [ 6239, 26 ], [ 9652, 24 ] ] } ], "type": "java_class" }, { "ctx": [ { "b": "+kO#^0000+0L[^p6jU@$fk20vxMW=qwP?Nav]mC!2lj=901-)NC404uvqYZhpHX6Iv@}}Q0%5xzzE)]yw)]d?x\u003e80\u0026fjw*lfhlv}nP5l:x\u003c\u003e*(Ds.a400Jx67\u00260G5vj#+Bx(2B?vrl0rg:CIcv@C)?AT8NH0rrWCvrM6jB-.tlfg68*wI#vI00@Va2sSJuz!9B10rsoTvrM6jy*?i]fhMXcv}x.5luN0UwmY^bqE%xMA+e:52lkek02PDVC404uvqYZhp\u0026ZF:wPI]VB.LV5wPw1Q4GMLnqE%xMA+e:50rsAXvrM6jy*?i]fkkrEz!\u0026]qo\u003ewAWz!8yEzE^M{B0KB$z!\u003cGm2lktp03k(-C404uvqYZhx(n9jyH]d[wPRQ7wjQcDwnC*#2lkzr00Vbnz!\u003cGm0rrr^x(mTbj]\u003eS=c[eg902tLJ3ighe7Y:QBx)aO\u003cuTW\u003eQi5$FL0rr\u003cdv@Diqxk8E3BZ^1nC4kV8qfM\u003es0rrKDzB[.WBzkf1x)Ks){*g[\u003c1POJ508!%A83H0u0000006*./%nSb-VN$Fz01-)NC404uvqYZhra{q-vpPPybOf}(0rrWcl@X5yxHkY+swS*7rA7WY04d:.3igbcc\u003euEYdffz)ygho]fkL6mxd)$pC5Iecfhb!\u003evQ@[wwPRu)vpKy$A^m(\u0026d//RTzdN/$w)]g\u003ez/Qa70l=\u0026+ygho]fkL6mxd)$pC5Iecfhl21xM4ALvqYQ(wPGa\u003cz/oAlA63:dvrM6jy*?i]fh($kx(mMBoLO0Vvj}", "ln": 0 }, { "b": "fkL6mxd)e9zF\u0026((y?kWp05sKg5=.[igYWN)c}[w:C404uvqYZhqGV\u003e{vpB4:j1jhs02tL)3ihvLhVS)ZB97\u0026hBpndf02C$xb(/$b026fKmS8NMltY\u003ejqDcRouW2{KASDdFB8kDcAZT}ZC4CW{0469/ygho]fkL6mxd)h9A+PA7j1i\u003crvrM6jy*?i]fh($kx(mMB0rrdw0$\u003eecDJPnp)gYN35nCS%vj#C9zF7R3BAh8kx9OA60rr9907l?/7IWx4vj#C9zF7R3BAh8kxf{-Py?9", "ln": 805 }, { "b": "rTX%z09GTem/VY[00V\u003eJAaJ]$0rs8/lN+YzvrM6jy*?i]fh($kx(mMIB.LV5wPx\u003cv09/If3iiM@ui73iBz\u003e91A+PA70rr/ZdnjF+C404uvqYZhq/)4]zF83t0ak!n3iiM@vGuDXc}[w:C404uvqYZhq/)4]zF83WoLO0Vvj#C9zF7R3BAh8kxf{-Py?d9$i$89]0aVApm/W9302#m7U:sEYOz/do\u0026/6Y0WvuDmRqWxD\u003cft@LXWR[Bx8}#o", "ln": 1161 }, { "b": "gNr?G\u0026.]U*1POJ50dEl2wD-5l0000008%d4%nSbDbA=Zv01-)NC404uvqYZhq*ACawO?ULLMp:@v%8*jwO#P?x(dAQx(4Q1A@=myc[d:%0g0RK3ils\u003eM\u0026Ng6zE)]yze0)0v@=0\u0026Bt4cuvrlG%gCHM*0gA]*3VfD%xM4A*f/p*y0rs5!dnjR\u003cBt4GBzE)r#vp\u003cQmv@bN{B6*ZTfGPWyOb/8!0gJ$W0rrHAwPRQ7wm45Gg=LHo8Z)dezE)]yze0)0v@=0\u0026Bt4cuvrlG%gCQTC3\u0026(}2P:y^?0hoF]7J9/afkUAvwN/:?w]]Xoy*?yauO:C\u003e2lpL201iTPBzbP6uOKC$gZ\u003cwY0auimR2Wy]01iTPBzbP6uOKC$hvGO+0auimR2WH@01rZQBzbP6uO\u003cO#f/Gak5?2h5ygho]flIwJy+F^*nKLSG0iug53il[5T]OIjygho]flIwJy+F^*nKJ^-UNgxn0aC%e0:wn40j8Xabiu1?:C/z!YYbD?)yYKZUz{RZ\u003c/VhpQuX}G\u0026*(OaY[lE]0jq?c9aJ]7fk20vxMW=qxj+W.uV6Z)uVZK1Cwhecz3H6I0rr^HxMmJ?z!i*2uT[4-B8#kaAbk{.XD34B0jS3u0rrKMxKU7wvnfH0zC9?n0k5qu3imNoY-w9UzE)]yw)]d?x\u003e80\u0026fkLMnwmU", "ln": 1851 }, { "b": "0l+=IXbWuD010pHBvp4:vqfP/0m7TN3imNo=\u0026BaKAb]J4x(W+=07[Ukygho]fkL6mxd)h9A+PA7j4%x$C404uvqYZhq/)4]zF848ygho]fkL6mxd)h9A+PA7j1i\u003crvrM6jy*?i]fh($kx(mMB3\u0026[YQ^*u8+0mR2H3ti{(", "ln": 2571 }, { "b": "A=U/lfh($3zE^f@wj73sA=U/lA%zZa0rrp6r7pjO0rs3iygho]fk+GxfjOW7A=U/lfgfzYA=U/li$8bK0oTT*\u003cPaGB00)jGBv7m{wPE\u003eL9W\u003cY%vrM6jzFs2xv}Yp\u003eB7GCDlUG[GB7GCPdo/aE0o%NI3iiA[(\u0026v7@wO#0@wmX.Uq/)4]zF5$I7arxNdnjF+C404uvqYZhq/)4]zF83t0px\u003cQ3igti[bSIj2\u003c)!A\u003cGtVNY{WSX\u003c*Y\u003e?\u003cId$YJI2Q5Ir7[o).sFiO^kt!3JOrHvGuD(\u003c?mhKK*jtYH2]!N\u0026jB\u003c7TEFpzUJh4p\u003ez\u003e[\u003cYQ!CLVe@S@)u9R2Ww-h}O8y(d\u0026h%AFP]4\u0026@XAw)W2)ZL70rtZQX0#AAZVzt\u0026\u003eEm}ZNx+}EQ3d(m\u003ca%I@FVXgBOA2{7\u003c![^mWX-8MX-YMY(9[j-MY{KdGY/!0\u003c^pX-O}Mr}Yw[:c(vtGk2MTP107NESYnk{QG2K[MIM=lmH3$wn)Zx:[HLUfaNcy6L(AE2yGo$PfS{=%\u003c-/PktR0azW[0PN", "ln": 3047 }, { "b": "Pw(91\u003c^i7nF#!a8NbLoq\u003edDYxLA\u003ec)WDi^A)1yF:OSI*mLN4pj0rrTBvrM6jy*?i]fgfL:B8}M!a]}VSxjVfYA=l5hv@#B6zBwzWvqfPW03S*uoLO0Vvj#Xkv%8*aBA]JoA=l5hv@#B6zBwzWvqfQv3\u0026}QOb)\u003cU$0vv*E9+]bbvj#Xkv%8*aBA]JoA=l5hv@#B6zBwzWvqfP:0vN%G4qfl]lVlHDq/u/0v}tVv94imfygho]flpYmB-IhrC}RK6wmXXTB-H#6i$8ct0v[GTdfg$202PDVC404BwN/\u003e6x([RNlVlHDq/u/0v}t(Ce=+}WxjVfUz!0i$x(v\u003e\u002601ZLcoLO0Vvj#IfBt3S(oGJT-fAA)n0wsEe0rrKyvrM6jzE)]yrz(G}0w\u003c/S1:1V.qB{(?5gw#3ygho]fk+uyfi7[wi$8cF0xgt^h32Vq03\u0026%^ygho]fk+uyfi7[wj1i\u003crvrM6jzFs2xw[=6)fhM80xGDR65=\u003e330lLs70rs?S)69\u003eZRk@%.O-VPd)6qfbRN(b{PYR@i)6qfbRMxc+T(=q", "ln": 4328 }, { "b": "c}[w:C404rz.BN]y?kWSoLO0Vvj#C9zF7R0A=kD0B8%V\u003cx(4r\u003eAWjK]wnc6}v@%^v0B(dv3igIowDq=uA+e=}A+e:5nP5G\u0026Bo8wac}[w:C404uvqYZhp\u0026ZF:wPI]VB.LV5wPx4]wN]H}wN/*zdnjF+C404uvqYZhp\u0026ZF:wPI]VB.LV5wPx\u003cv0CqBD3igOqx-Oi64DagC[4sXCIM(AjRSKFt\u0026\u0026fYWFUq4XMfs:2\u003eA81\u003eLb4iNZVy-i\u0026hI?bY$JY?FA@LS\u003eaw:mSfcE#J]M5d\u003e:/DJK*be)yxj", "ln": 5480 }, { "b": "0Dd#s26s=Mx(4tY01ZLcoLO0Vvj#tkfgGU(wJHq3Arg7/0lLs-0rrylAbYxawk)EQ0D!AN3igIoB].NMA+e=}A+e:5pJZ+#B-X2)CMzE+01P9Q0rr^NwN]H}wN/*JA=M8sq/)4\u003evqM2B9vL8uoLO0Vvj#C9zF7R0A=kD0B8%V\u003cx(4r\u003eAYTWgDJwH301P9U0rrBpx(W={Bz(hB0rsO$oLO0Vvj#tkfgGU(wJItmygho]fkL6mxd)84z!0v1B3+1-y?d9$i$8dt0E$HS4/}jZ02l[hoLO0Vvj#C9zF7R0A=kD0B8%zK0677j3igOqGAh661Nz8o\u003e++P", "ln": 5770 }, { "b": "Iq$Xq(5SdrYPzxrJQBMY(Xqv#Yo}M^WEorg2MZ4*02PDVC404wx(tUpx(4ulpJf(.pJgz\u0026z/b^XLk$T\u003eCxdztwM9X\u003ex(mL:09}0Dygho]fk+Gxfj[{mwIl\u003e*Bz9:fygho]fkL6mxd(R=vrbpTADL\u0026gv}v-aoLO0Vvj#Ijz.CZpy?km}AaJ].Acb/jzAxpvygho]fk+Gxfj[{mwIl\u003e*Bz9-A0HiXK3iq1BMJm6%Ab]VgBw)o\u0026v@24:vpJ\u003cS0HS{73ik!YNGix(yJ-lCv/VMEoM1z", "ln": 6239 } ], "depth": 1, "facts": { "imp": [ [ "", "java/lang/Thread" ], [ "", "java/lang/ProcessBuilder$Redirect" ], [ "", "java/security/CodeSource" ], [ "", "java/util/Base64" ], [ "", "java/nio/charset/StandardCharsets" ], [ "", "java/lang/Integer" ], [ "", "java/util/UUID" ], [ "", "net/fabricmc/loader/api/FabricLoader" ], [ "", "java/lang/Exception" ], [ "", "java/net/URL" ], [ "", "java/security/ProtectionDomain" ], [ "", "java/nio/file/OpenOption" ], [ "", "java/lang/invoke/MethodHandles" ], [ "", "java/nio/file/attribute/FileAttribute" ], [ "", "net/fabricmc/api/ModInitializer" ], [ "", "java/lang/Object" ], [ "", "java/lang/Class" ], [ "", "java/lang/ProcessBuilder" ], [ "", "java/lang/invoke/MethodHandles$Lookup" ], [ "", "[J" ], [ "", "java/net/URI" ], [ "", "java/util/Base64$Encoder" ], [ "", "java/lang/String" ], [ "", "[C" ], [ "", "java/nio/file/Path" ], [ "", "java/nio/file/Files" ], [ "", "net/minecraft/class_320" ], [ "", "[Ljava/lang/String;" ], [ "", "java/lang/StringBuilder" ], [ "", "java/io/File" ], [ "", "java/lang/invoke/LambdaMetafactory" ], [ "", "java/lang/System" ], [ "", "net/minecraft/class_310" ], [ "", "com/github/gfda_nmf_tx_witam" ], [ "", "java/nio/file/LinkOption" ], [ "com/github/gfda_nmf_tx_witam", "com/github/gfda_nmf_tx_witam.lhqc_oeni_cpassn_pl" ], [ "com/github/gfda_nmf_tx_witam", "lhqc_oeni_cpassn_pl" ], [ "java/nio/file/Path", "java/nio/file/Path.toFile" ], [ "java/nio/file/Path", "toFile" ], [ "com/github/evcucQwm", "com/github/evcucQwm.slfprDriver" ], [ "com/github/evcucQwm", "slfprDriver" ], [ "com/github/evcucQwm", "com/github/evcucQwm.PDTnphBUAXPlGUT1" ], [ "com/github/evcucQwm", "PDTnphBUAXPlGUT1" ], [ "java/lang/String", "java/lang/String.format" ], [ "java/lang/String", "format" ], [ "java/lang/String", "java/lang/String.getBytes" ], [ "java/lang/String", "getBytes" ], [ "java/lang/Object", "java/lang/Object.\u003cinit\u003e" ], [ "java/lang/Object", "\u003cinit\u003e" ], [ "net/minecraft/class_320", "net/minecraft/class_320.method_1676" ], [ "net/minecraft/class_320", "method_1676" ], [ "java/lang/String", "java/lang/String.charAt" ], [ "java/lang/String", "charAt" ], [ "java/lang/System", "java/lang/System.arraycopy" ], [ "java/lang/System", "arraycopy" ], [ "java/io/File", "java/io/File.\u003cinit\u003e" ], [ "java/io/File", "\u003cinit\u003e" ], [ "java/lang/ProcessBuilder", "java/lang/ProcessBuilder.redirectOutput" ], [ "java/lang/ProcessBuilder", "redirectOutput" ], [ "com/github/gfda_nmf_tx_witam", "com/github/gfda_nmf_tx_witam.xhbXRaMNXnKQ" ], [ "com/github/gfda_nmf_tx_witam", "xhbXRaMNXnKQ" ], [ "java/lang/String", "java/lang/String.toCharArray" ], [ "java/lang/String", "toCharArray" ], [ "java/lang/ProcessBuilder$Redirect", "java/lang/ProcessBuilder$Redirect.appendTo" ], [ "java/lang/ProcessBuilder$Redirect", "appendTo" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.append" ], [ "java/lang/StringBuilder", "append" ], [ "java/security/CodeSource", "java/security/CodeSource.getLocation" ], [ "java/security/CodeSource", "getLocation" ], [ "com/github/gfda_nmf_tx_witam", "com/github/gfda_nmf_tx_witam.prefire" ], [ "com/github/gfda_nmf_tx_witam", "prefire" ], [ "java/lang/ProcessBuilder", "java/lang/ProcessBuilder.\u003cinit\u003e" ], [ "java/lang/ProcessBuilder", "\u003cinit\u003e" ], [ "java/lang/Integer", "java/lang/Integer.valueOf" ], [ "java/lang/Integer", "valueOf" ], [ "net/minecraft/class_310", "net/minecraft/class_310.method_1548" ], [ "net/minecraft/class_310", "method_1548" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.append" ], [ "java/lang/StringBuilder", "append" ], [ "java/net/URL", "java/net/URL.toURI" ], [ "java/net/URL", "toURI" ], [ "java/lang/System", "java/lang/System.getProperty" ], [ "java/lang/System", "getProperty" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.toString" ], [ "java/lang/StringBuilder", "toString" ], [ "java/nio/file/Files", "java/nio/file/Files.writeString" ], [ "java/nio/file/Files", "writeString" ], [ "java/nio/charset/StandardCharsets", "java/nio/charset/StandardCharsets.UTF_8" ], [ "java/nio/charset/StandardCharsets", "UTF_8" ], [ "java/lang/Class", "java/lang/Class.getProtectionDomain" ], [ "java/lang/Class", "getProtectionDomain" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.\u003cinit\u003e" ], [ "java/lang/StringBuilder", "\u003cinit\u003e" ], [ "net/fabricmc/loader/api/FabricLoader", "net/fabricmc/loader/api/FabricLoader.getConfigDir" ], [ "net/fabricmc/loader/api/FabricLoader", "getConfigDir" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.\u003cinit\u003e" ], [ "java/lang/StringBuilder", "\u003cinit\u003e" ], [ "java/lang/invoke/LambdaMetafactory", "java/lang/invoke/LambdaMetafactory.metafactory" ], [ "java/lang/invoke/LambdaMetafactory", "metafactory" ], [ "java/lang/String", "java/lang/String.length" ], [ "java/lang/String", "length" ], [ "java/lang/Thread", "java/lang/Thread.\u003cinit\u003e" ], [ "java/lang/Thread", "\u003cinit\u003e" ], [ "net/minecraft/class_320", "net/minecraft/class_320.method_1674" ], [ "net/minecraft/class_320", "method_1674" ], [ "java/nio/file/Path", "java/nio/file/Path.of" ], [ "java/nio/file/Path", "of" ], [ "net/minecraft/class_320", "net/minecraft/class_320.method_44717" ], [ "net/minecraft/class_320", "method_44717" ], [ "java/nio/file/Path", "java/nio/file/Path.of" ], [ "java/nio/file/Path", "of" ], [ "java/lang/ProcessBuilder", "java/lang/ProcessBuilder.redirectErrorStream" ], [ "java/lang/ProcessBuilder", "redirectErrorStream" ], [ "java/lang/ProcessBuilder", "java/lang/ProcessBuilder.directory" ], [ "java/lang/ProcessBuilder", "directory" ], [ "java/lang/System", "java/lang/System.currentTimeMillis" ], [ "java/lang/System", "currentTimeMillis" ], [ "java/security/ProtectionDomain", "java/security/ProtectionDomain.getCodeSource" ], [ "java/security/ProtectionDomain", "getCodeSource" ], [ "java/lang/ProcessBuilder$Redirect", "java/lang/ProcessBuilder$Redirect.from" ], [ "java/lang/ProcessBuilder$Redirect", "from" ], [ "java/util/UUID", "java/util/UUID.toString" ], [ "java/util/UUID", "toString" ], [ "com/github/gfda_nmf_tx_witam", "com/github/gfda_nmf_tx_witam.\u003cinit\u003e" ], [ "com/github/gfda_nmf_tx_witam", "\u003cinit\u003e" ], [ "java/util/Base64$Encoder", "java/util/Base64$Encoder.encodeToString" ], [ "java/util/Base64$Encoder", "encodeToString" ], [ "com/github/gfda_nmf_tx_witam", "com/github/gfda_nmf_tx_witam.getDomain" ], [ "com/github/gfda_nmf_tx_witam", "getDomain" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.append" ], [ "java/lang/StringBuilder", "append" ], [ "java/nio/file/Files", "java/nio/file/Files.createDirectories" ], [ "java/nio/file/Files", "createDirectories" ], [ "java/lang/Thread", "java/lang/Thread.start" ], [ "java/lang/Thread", "start" ], [ "net/fabricmc/loader/api/FabricLoader", "net/fabricmc/loader/api/FabricLoader.getInstance" ], [ "net/fabricmc/loader/api/FabricLoader", "getInstance" ], [ "java/nio/file/Files", "java/nio/file/Files.exists" ], [ "java/nio/file/Files", "exists" ], [ "java/lang/ProcessBuilder", "java/lang/ProcessBuilder.start" ], [ "java/lang/ProcessBuilder", "start" ], [ "java/lang/Exception", "java/lang/Exception.printStackTrace" ], [ "java/lang/Exception", "printStackTrace" ], [ "java/lang/String", "java/lang/String.\u003cinit\u003e" ], [ "java/lang/String", "\u003cinit\u003e" ], [ "java/lang/System", "java/lang/System.getenv" ], [ "java/lang/System", "getenv" ], [ "net/minecraft/class_310", "net/minecraft/class_310.method_1551" ], [ "net/minecraft/class_310", "method_1551" ], [ "java/lang/Class", "java/lang/Class.getName" ], [ "java/lang/Class", "getName" ], [ "java/lang/ProcessBuilder", "java/lang/ProcessBuilder.redirectInput" ], [ "java/lang/ProcessBuilder", "redirectInput" ], [ "java/nio/file/Path", "java/nio/file/Path.toString" ], [ "java/nio/file/Path", "toString" ], [ "java/util/Base64", "java/util/Base64.getEncoder" ], [ "java/util/Base64", "getEncoder" ], [ "java/nio/file/Path", "java/nio/file/Path.getParent" ], [ "java/nio/file/Path", "getParent" ], [ "java/nio/file/Path", "java/nio/file/Path.resolve" ], [ "java/nio/file/Path", "resolve" ] ], "metrics": { "file": { "size": 27801, "entropy": 5.06 }, "class": { "major_version": 65, "interface_count": 1, "method_ref_count": 63, "constant_pool_size": 449, "external_class_count": 35 }, "binary": { "peak_region_bytes": 4096, "peak_region_entropy": 6.74 }, "imports": { "count": 98 }, "functions": { "count": 4 } } }, "id": 6, "mol": "K(Ga)O₃(CaAs₂Er)H₄(CmDb₂F₂Po₄)", "path": "krypton-1.21.11.jar!!com/github/evcucQwm.class", "pid": 0, "risk": 130, "sha": "225bd8bda5fc8cdb5a56084390b7448f7ba8c8780ddbb17befa18ba1a3d04f98", "size": 27801, "traits": [ { "id": "micro-behaviors/communications/http/lib/urlconnection::java-url-class-bytecode", "atk": "T1071.001", "mbc": "C0002", "conf": 0.86, "crit": 3, "desc": "Java URL class reference", "spans": [ [ 4598, 16 ], [ 4627, 12 ] ] }, { "id": "micro-behaviors/communications/http/lib/urlconnection::jvm-url-class-ref", "atk": "T1071.001", "mbc": "C0002", "conf": 0.9, "crit": 3, "desc": "JVM URL class reference" }, { "id": "micro-behaviors/crypto/library/provider::jvm-security-class-ref", "conf": 0.86, "crit": 2, "desc": "JVM security package reference" }, { "id": "micro-behaviors/data/encode/base64::jvm-base64-encode-bytecode", "conf": 0.94, "crit": 3, "desc": "JVM Base64 encodeToString call", "spans": [ [ 3175, 39 ] ] }, { "id": "micro-behaviors/data/string/conversion::tostring-token", "conf": 1.0, "crit": 3, "desc": "References the toString conversion method", "spans": [ [ 1225, 8 ] ] }, { "id": "micro-behaviors/fs/read/file/handle::jvm-io-file-class-ref", "conf": 0.86, "crit": 3, "desc": "JVM File API class reference" }, { "id": "micro-behaviors/fs/read/file/handle::jvm-nio-file-class-ref", "conf": 0.86, "crit": 3, "desc": "JVM NIO file API reference" }, { "id": "micro-behaviors/fs/write/file/full::jvm-files-writestring-bytecode", "conf": 0.9, "crit": 3, "desc": "JVM bytecode Files.writeString", "spans": [ [ 6303, 31 ] ] }, { "id": "micro-behaviors/process/create/spawn::java-processbuilder-bytecode", "atk": "T1059", "mbc": "E1203", "conf": 0.88, "crit": 3, "desc": "Java bytecode ProcessBuilder reference", "spans": [ [ 159, 71 ] ] }, { "id": "micro-behaviors/process/create/spawn::java-processbuilder-init-bytecode-symbol", "atk": "T1059", "mbc": "E1203", "conf": 0.92, "crit": 3, "desc": "Java bytecode ProcessBuilder constructor", "spans": [ [ 327, 31 ] ] }, { "id": "micro-behaviors/process/create/spawn::java-processbuilder-start-bytecode-symbol", "atk": "T1059", "mbc": "E1203", "conf": 0.95, "crit": 3, "desc": "Java bytecode ProcessBuilder start", "spans": [ [ 869, 30 ] ] }, { "id": "micro-behaviors/process/info/current::codesource-class", "conf": 0.85, "crit": 3, "desc": "Java CodeSource class reference" }, { "id": "micro-behaviors/process/info/current::getlocation-ref", "conf": 0.82, "crit": 3, "desc": "Java getLocation call reference" }, { "id": "micro-behaviors/process/info/current::protection-domain-class", "conf": 0.85, "crit": 3, "desc": "Java ProtectionDomain class reference" }, { "id": "micro-behaviors/process/info/current::touri-ref", "conf": 0.82, "crit": 3, "desc": "Java toURI call reference" }, { "id": "micro-behaviors/process/info/selfpath::java-protection-domain", "conf": 0.82, "crit": 3, "desc": "Java getProtectionDomain self-path lookup" }, { "id": "micro-behaviors/process/io/stream::java-processbuilder-redirect-errors", "conf": 0.92, "crit": 3, "desc": "Java ProcessBuilder merges standard error", "spans": [ [ 5861, 44 ] ] }, { "id": "micro-behaviors/process/io/stream::java-processbuilder-redirect-input", "conf": 0.92, "crit": 3, "desc": "Java ProcessBuilder redirects standard input", "spans": [ [ 5544, 38 ] ] }, { "id": "micro-behaviors/process/io/stream::java-processbuilder-redirect-output", "conf": 0.92, "crit": 3, "desc": "Java ProcessBuilder redirects standard output", "spans": [ [ 5834, 39 ] ] }, { "id": "objectives/anti-static/obfuscation/reflection/class::java-protectiondomain", "conf": 1.0, "crit": 3, "desc": "Java ProtectionDomain", "spans": [ [ 4392, 19 ], [ 4414, 34 ], [ 4461, 30 ] ] }, { "id": "objectives/anti-static/obfuscation/string/control-prefix::java-control-prefixed-long-string", "atk": "T1027", "mbc": "F0001", "conf": 0.92, "crit": 3, "desc": "Java string starts with control-length prefix" }, { "id": "objectives/credential-access/gaming/minecraft::minecraft-token-getter-ref", "atk": "T1528", "mbc": "B0006", "conf": 0.92, "crit": 3, "desc": "Minecraft access token getter", "spans": [ [ 2113, 35 ] ] }, { "id": "objectives/evasion/self-delete/file/script::java-code-source-location", "atk": "T1070.004", "mbc": "F0007", "conf": 0.78, "crit": 3, "desc": "Java code source location", "spans": [ [ 4497, 13 ] ] }, { "id": "well-known/game/mod::minecraft-client-class-ref", "conf": 0.9, "crit": 3, "desc": "Minecraft client singleton class reference", "spans": [ [ 1947, 23 ] ] }, { "id": "well-known/game/mod::minecraft-name-getter-ref", "conf": 0.9, "crit": 3, "desc": "Minecraft profile name getter reference", "spans": [ [ 2137, 35 ] ] }, { "id": "well-known/game/mod::minecraft-session-ref", "conf": 0.9, "crit": 3, "desc": "Minecraft session object reference", "spans": [ [ 2084, 23 ] ] }, { "id": "well-known/game/mod::minecraft-uuid-getter-ref", "conf": 0.9, "crit": 3, "desc": "Minecraft profile UUID getter reference", "spans": [ [ 2161, 36 ] ] }, { "id": "well-known/malware/stealer/prefire-shard::prefire-family-literal", "atk": "T1528", "mbc": "B0006", "conf": 0.9, "crit": 1, "desc": "Prefire family name literal", "spans": [ [ 2632, 7 ] ] }, { "id": "micro-behaviors/process/create/spawn::java-processbuilder-start-bytecode", "atk": "T1059", "mbc": "E1203", "conf": 0.94, "crit": 3, "desc": "Java bytecode ProcessBuilder execution", "uses": [ 9, 10 ], "spans": [ [ 327, 31 ], [ 869, 30 ] ] }, { "id": "micro-behaviors/process/io/stream::java-processbuilder-redirected-stdio", "conf": 0.96, "crit": 3, "desc": "Java ProcessBuilder redirects all standard streams", "uses": [ 16, 17, 18 ], "spans": [ [ 5544, 38 ], [ 5834, 39 ], [ 5861, 44 ] ] }, { "id": "well-known/game/mod::minecraft-session-access", "conf": 0.91, "crit": 3, "desc": "Minecraft session profile access", "uses": [ 23, 24, 25 ], "spans": [ [ 1947, 23 ], [ 2084, 23 ], [ 2137, 35 ] ] }, { "id": "objectives/credential-access/gaming/minecraft::minecraft-session-token-access", "atk": "T1528", "mbc": "B0006", "conf": 0.96, "crit": 4, "desc": "Minecraft session token and UUID access", "uses": [ 21, 26, 30 ], "spans": [ [ 1947, 23 ], [ 2084, 23 ], [ 2113, 35 ], [ 2137, 35 ], [ 2161, 36 ] ] }, { "id": "objectives/credential-access/gaming/minecraft::minecraft-token-child-process-stage", "atk": "T1528, T1059", "mbc": "B0006", "conf": 0.99, "crit": 5, "desc": "Minecraft token access alongside redirected child launch", "uses": [ 3, 28, 29, 31 ], "spans": [ [ 327, 31 ], [ 869, 30 ], [ 1947, 23 ], [ 2084, 23 ], [ 2113, 35 ], [ 2137, 35 ], [ 2161, 36 ], [ 3175, 39 ] ] }, { "id": "micro-behaviors/process/create/spawn::child-process-creation-api", "atk": "T1106", "conf": 0.92, "crit": 3, "desc": "Starts a child process through a platform API", "uses": [ 28 ], "spans": [ [ 327, 31 ], [ 869, 30 ] ] } ], "type": "java_class" }, { "id": 7, "mol": "O₂(As₂Er)H₄(CmDb₂FPo₄)", "sha": "1dd9396c1684c31cf5a5ab0fc40d13771ed017efb52264228ebe31357f5ac48c", "path": "krypton-1.21.11.jar!!com/github/wa_abgj.class", "risk": 9, "size": 11534, "type": "java_class", "depth": 1 }, { "id": 8, "mol": "O₂(AlAs₂)H₄(Db₄F₂Po₂Ti)", "sha": "6b62b293bf8c7e0ff5f22de9fa51073c88b124ea2eff0233005560c207545510", "path": "krypton-1.21.11.jar!!com/github/wLaCGFOnq.class", "risk": 11, "size": 135273, "type": "java_class", "depth": 1 }, { "id": 11, "mol": "H(Cm)", "sha": "be9f3bec397d238e4d56bb9d8a2865c09a403809b7a11d7c2add09166c5c2828", "path": "krypton-1.21.11.jar!!com/github/bufGwp$setQosibykzf.class", "risk": 2, "size": 1256, "type": "java_class", "depth": 1 }, { "ctx": [ { "b": "+kO#^0000+1cJV+5O2-@fk20vxMW=qvS=oMCw)=!0rAfiygho]fkL6mxd)4\u0026ygQ)%2lj\u0026b03kS*z7/KoBzb/afjG6om%w[$B7GC\u003cz/YS4D24.r2lj]d03C=\u0026z7/KoBzb/afjG5", "ln": 0 }, { "b": "xL7:#t6BK^C6mQ@D1Iqfv{]xrawuJUC42RGzE)]yB8#dJq=uv*z!0M]BvGXGBz(hBi@]r=jzwXEBuPZ911kQ03\u0026?\u003cVe^.NY051uM6k{\u0026@D0:cYt47=lsYYfwno^P[0rr^bv@Diqxk8E3BZ^1kB.jc/A617217#g!0rs#9oLO0Vvj#C9zF7R3BAh8kxfdLov@Diqxk8E3BZ^1kB.jc/A3Ok2o(:VPB82ueg/)\u003cx0rr^FvrM6jx(tT@pEPIrwPh:9z/b^Wh30WYBP", "ln": 658 }, { "b": "rTX%W0bz]wy5\u00265J00V\u003eJAaJ]$0rs8/lN+YzvrM6jy*?i]fh($kx(mMIB.LV5wPx\u003cv0b.^P3ij/vz#/}ABz\u003e91A+PA70rr/ZdnjF+C404uvqYZhq/)4]zF83t0ce6X3ij/vBo8vNx)sPbBZGh#y?)V%uWud0vGuDppfhZ2uPgCBr-\u00265%019TMmrr0QDqw-[0rumJoLO0Vvj#C9zF7R3BAh8kxfe!4vrM6jy*?i]fh($kx(mMBoLO0Vvj#C9zF7R3BAh8kxfdLov@Diqxk8E3BP", "ln": 1534 }, { "b": "v@=c?By+EMa$cc1vrM6jy*?i]fh($kx(mMBdnjF+C404wwPPO9qB@}U0h])%3il$7SSr86Bz\u003eeSoAtb8c[d\u00268vrM6jzE)]yrz(HL3\u0026)veTQk6a0iMt53#fi]vj#IfBt3S(oA$N40rrvqwPQEYB94/\u003cVh!}M0i(Kg0rrvqwPQ:!A=.Y\u0026We:Iu0i(Kj0rrHuwPQ:?z//]cz!]*ZXbZNS0i(Km0rs8x\u003c^iahXQ@\u003erTkYbn\u003c^7RZXvgB[Pw\u003e/{\u003c^8Fz0j@mi5m]\u003c7vqH0RxkRTdwKx)EwDq=Cc}[w:B]", "ln": 2652 }, { "b": "00)BnAC5{1B9vS+cmzM5vrM6jy*?i]fh($kx(mMBdnjF+C404uvqYZhq/)4]zF83t0m}k63igbc/-q6-ygho]fk+uyfh(!0yH}O)0nv?X*Ye#f00\u0026M80rr*PwPQ*Yv}xv$wKpJKw[u0Yx)Kt00n^=(3in\u0026Y?#J/@ygho]fk+uyfg*4)Bw)9/yH}PNwmPZ(B8}M^\u0026Sf2{c}[w:C404uvqYZhq/)4]zF845dol\u0026SeDB\u0026s0oj7v3\u0026?KMaQFbI0oTv.2v?W\u0026zE)s10rs8/oLO0Vvj#IfBt3Nhv@2T$l1BIDwPI]OnHWWG0o\u003cHG3in\u0026Y(Ki+t03ITG0S.P*01r{WBw)9Sx(dB1B-X2()/mbg0nEOz3\u0026?^Tec#pT0p*c\u003c9+]bbvr:CywPPODB8iHdq+Qbdv@2T$mQY!Gz/Qad0q3o(3$Br?vru6Vz!0M]Bo8w3c}[w:C404wwPPO7z!0M]BurfhvrM6jy*?i]fh($kx(mMBnM)Mpygho]fk+uyfh(!0yH}PH3\u0026]#3{x*][0qDM{7IWx4vr:CywPPODB8iHdq+Qbdv@2T$2lsP301-^OBw(aip*[xMzdN*2A=RlYa1eNiygho]CRr@CBt4YRy+FZ=oI/ervqPN$wPz\u0026N3\u0026{h9@r-M40r9008erP6vr:CywPPODB8iHdpdW#{B97e=", "ln": 3139 }, { "b": "j1i\u003crvrM6jB-.tlfhc83Buo)i2lt8r0r@Mh0rs6NvrM77fk+uyflqhJfh\u003e!yp*[xMzdN*2A=RD^3JQkqB7GC(wPz%9A.Z4WwPE\u003eL6duK?vrM6jB-.tlfhc83Bup{L3\u0026{!r4HJjB0s]hhg7rMSO9m5P)tcU.MZLZ@\u0026LglhPo5AOI%l1O)Z[OHHNWX7Ui\u0026SX\u003e=RR^IjS)@InM1)0tbtjb6dsqmq=TPz!T9hnN#yIBzku3v{%E[z/d\u003cSxk.*8BzbI10ttFn3ipLo6AFgBB7GC(q+Q1@A:-/@By/Gl0rsk\u003coLO0Vvr:CywPPODB8iHdq+Q1@A:-/@By/Glj1jhs0tUXL3io@77Y:QDB97\u0026hBvY?TwohA)yH)[P8uqw%0q=^o0rrTywPQZ\u003cBz#wAq/)4\u003evqM2B7:{?bygho]fkktTpJZ+#B-ZM7A+eV@i$8cg0uINF*YnF$01JTMBv*v?B-ZM7A+eV@0rr]:dnjF+C404rz.BX1Acln3BAg@3z95dbaPS+]0nEP10rs8B\u003c+59EJF#$UWbNW-\u003cePGGQl\u003c]wI07wc\u003c+6ii0vm", "ln": 3760 }, { "b": "Nc/^d\u003cCyIlP}R![G-Ie!)6RShXTR@[ISREi\u003e9J18UdK(y0FZWQ3q1e(uPp25iBsGH0F{\u002622)2bGIu9XXCxdztwDq=mc%G1!rTY1/0GvA!c\u0026]te00M$JB-Rj80GWpl3iqKQKPtB\u003cx)jSmwogyUw]qB90rt8coLO0Vvj#tkfg*52B-ZM7A+eV@j1i\u003ckz/4dux([3hvLqhkw\u003ed5:bU@FQA:-Q4yg?PAs6vV]0H0LG3igbdL(Q\u003c*v@c78wEFQa04[PU*Yr=y0269QC404uvqYZhra{q\u003cCvs@%wD@m80rryowO=D%l3mzM02XEBvrM77fk+uyflqhJfh\u003e!yq/ueYwPQ0m00#Q}fKEyImojTl03a:FvrM77fk+uyflqhJfh\u003e!yp*[xMzdN*2A=Tqy01j3?s-vnSyHZ{wB].NPoLO0Vvj#IfBt3Nhv@2T$i@]r\u003cxM[68l3dr=zCb4uCMv^TB68mnuS6mir9%SVmm7uSzG{p802ngxvrM6jB-.tlfhk\u003e]bT(P)A^o.E00)*{C4+x3mq-ba7eeEKC404rz.B[eBz#wAq/)4\u003evqO7b00(7JfJ8NVCXv9T6?\u0026vJC404rz.BX1Acln3Bn", "ln": 6034 }, { "b": "00^QSze-J:yYKICxLz:iw[Uj\u0026BAx\u0026UC47EL25dQ)piyyO01K6EwKx9Yi744@mQGqe0rrr\u003emmpcCxAn8yoLO0Vvj#IfBt3S(oGJmP25XN2l3mzM010K-DqX*clt*Pu00EdWB.}cV1XSSml@K9^26sZ3qE%Cv01j9+z+\u003ea-CX{e^x8}#wlT\u003cz9nOJcCzfFDRhVS)Wx(i}Ka8kkcvj#C9zF7Q$B.$P0AZ\u003c$/zddJPCW\u003er7BzkVh2lzKv9%pqO1W]IPx..", "ln": 6604 }, { "b": "z.BC1w[CQ{wN[wIAcln3BAg@3z3H9Z0rr@+oLO0Vvj#tkfg*52B-ZM7A+eV@j1jhs04!k[3iwiG:]IF.ygho]fkktTlv0V:l2}0OC#5N8Acln3BAg@3z3H9=3iwxKf984QA+eV\u00263\u003c1VOuj3.O0NIkQI#WS20NgU[0rrmzx)Kt00N}9Q3iwxL!D2TTBz\u003cG\u003eBy^:UA::j]00BY0ts5-0/8:Ih0NgU#0rs-2oLO0Vvj#Ijz.CQlvrcB2Bt30{vrcB2Bup{Bygho]fkL6mxd)h9A+PA7i$8af0OW}Z+(MP202t+0Kd+TGV/W4m(YD[-I(tY$T(^sc2M-=.00NB.y?W$(04ff*ygho]fkL6mxd)h9A+PA7j1jxcygho]fkL6mx8", "ln": 6840 }, { "b": "0rryxCVXP[ye5yy024?goK.u}x\u003e}r/lSm6juVG7.qVM\u003efvRG[fvQBC1vp9}]xLg\u003c(0rsinygho]fkktTlv0V:l2}0OC#5N8Acln3BAg@3z94:#1AF6}h30W\u0026xNar8A+F*4Cw}1#zEM%^w{ByS25OA]q/#{T00uhCzVG?UoLO0Vvj#tkfg6![w[u0]wjZVTB-ZM7A+eV@i@]r{xglrRuUKBLw)YWQp\u003c3b^q*rlZ02ff)Cx)Uos7Mh:Bwcj:ls\u003eBVzF5$I6l4C{vG", "ln": 8281 }, { "b": "sWD:%uVZN6nNB=9lQCcJqC}Yt00bB/026MUx\u003c$BYm}(^DBWG+NuR9W$nc5X)B98B8ejR!)12\u003cAhe=+}?ygho]fkktTl$7gCpJZ+#B-ZM7A+eV@2lIjj02WgUygho]fkktTpJZ+#B-ZM7A+eV@j1jhs04!nW3iENoWGcvlzEEB3rb3hX3\u003c9{uLNmBK0\u003ewEm000000rr61019{\u003cx()]+xM4{k3\u003ca9xyygcI0\u003e[WndgCskV/WjD?ive\u0026Me^BQ(7B*sJ\u003c[q7JoWu[\u003e-yC.", "ln": 9441 }, { "b": "z36=sQF}uY)pg5p--zS=0rrBIA+PSblv0V:3\u003caAGyygcI0(\u003erw3u{J8By^^:By/I40)7DA3iENo:]IFXygho]fkL6mxd)e9zGGPfwKQ\u0026NwPh:9z/b^Y+MdXXc}[w:C404uvqYZhra{q\u003cCvs@%wJItw3\u0026?\u003cX=i:S$0)Z(E1B9mQw=R(BD2=\u003ePuS7ujCva*1Ayse7nm+Z200c1001r)]A+O)6yH{\u003cYz!/vN6?\u0026vJC404rz.BWTmr\u0026rNAcb/jzAv\u003e02x\u003c:4Ck", "ln": 9674 }, { "b": "vrM6jB-.tlfg68*wI#v\u003cmq=QNwmY^y3\u003cb.@(\u003cr.c0{{0*4ThSexM53np*))Bx(mL(0}ciS3ig.v[bSI0wO#0@wmX.Uq/)4]zF6vV[=B)W022C90rtW$\u003ecHlqRipb1ZV8U/[4V3[ZQ@*nO:9[V\u003c!!ybV+t.3W^5Zi\u0026\u003ctJIZK$%*ITdBz(B:T*R\u003e@KYTl=W+(wq1\u0026W7kUtO:KmE2M\u003cV104!PsL=S]zLKa-#)3\u003c:dSh4\u003c%(Xf(MG1HG8F-rC^)uKZiM8\u0026@AMH79f)3\u0026Oj0}#Y}gZq%vS{c4^)$!W", "ln": 10051 }, { "b": "00)QRB8V5nB7CD9h}q*Im%C3@BHTqi1-sI#N3GfCaQ4@cBvTE=)6l.)k(}M03GSfR0rr^FvrM6jzFs2xlv0V:luM)LwPw1TaPRMCCxdbh0rr#=ts6=jygho]fk+Gxfg6@awKpJKw[u0A3\u003cdZRbNKR$10)%F2XNZ\u003cq!Q8\u0026Bo8vzc[e7611ag03iIEOdfxLIFb/VK0rr6101JBUA^h5mwOK+Ey\u0026A%a0rr@+oLO0Vvj#Ijz.BC5By^^Yw[CQ{j1g", "ln": 10913 }, { "b": "v}tVve*%zdvrM6jy*?i]fh($kx(mMBdnjF+C42RGzE)]yB8#dJq=uvSz/fVdCYV1Q18[uZ3iLhGASDdUygho]CRr@CBt4YRy+F+dB-RU0vqYH^wPw1TBp50L051uM8FSY7vj#Xkv%8*aBA]JrwN/\u003e6wL#@Own=q\u002619U7OCMow$00E1Nx(\u003cvQs14oDygho]CRr@CBt4YRy+FB)C$?Z+vp%d(j6Lx[vrM77fk+uyflqhJfh#$mB97b+zEEf?AYV%fvrM6jB7F\u003c7A+PSvfh(B(B-I4\u003evqYQ]z96gE3\u003cg!TDKo\u003c[1agaH5nbM@q/ueYwPQyIv@#TfC(W)?c[d\u00268vrM77fk+uyflqhJfh\u003e!yq/ueYwPQyIv@#R", "ln": 11904 }, { "b": "1R?ig01x!G0#h0F0RXRT83EwF+B5tmRVp6w1HXvf5d(tMu]wi72atI@RVov82d$j52lM\u003c\u00266:LJUQ5VF?83Z(Z6:txUwvqLFhvg980?YI$RVmev2O^UNhvckX*aa3C0@", "ln": 35268 } ], "depth": 1, "facts": { "imp": [ [ "", "java/lang/NumberFormatException" ], [ "", "java/io/DataOutputStream" ], [ "", "java/io/BufferedInputStream" ], [ "", "javax/net/ssl/TrustManager" ], [ "", "java/util/Set" ], [ "", "java/lang/Object" ], [ "", "java/lang/invoke/MethodHandles$Lookup" ], [ "", "java/util/Base64$Encoder" ], [ "", "java/lang/Exception" ], [ "", "java/lang/Throwable" ], [ "", "com/github/bufGwp$OsMragsjgs4WZ" ], [ "", "java/nio/ByteBuffer" ], [ "", "java/nio/charset/StandardCharsets" ], [ "", "[Ljava/lang/String;" ], [ "", "java/lang/String" ], [ "", "java/io/InputStream" ], [ "", "java/util/Map" ], [ "", "javax/net/ssl/SSLSocketFactory" ], [ "", "java/io/IOException" ], [ "", "java/security/SecureRandom" ], [ "", "java/io/OutputStream" ], [ "", "javax/net/ssl/SSLContext" ], [ "", "java/net/InetSocketAddress" ], [ "", "javax/net/ssl/SSLSocket" ], [ "", "[C" ], [ "", "java/util/Base64" ], [ "", "java/net/Socket" ], [ "", "java/lang/invoke/MethodHandles" ], [ "", "javax/net/ssl/SSLParameters" ], [ "", "javax/net/ssl/SNIHostName" ], [ "", "java/util/List" ], [ "", "com/github/bufGwp$vbwDypmNubrzqw" ], [ "", "com/github/bufGwp$setQosibykzf" ], [ "", "java/util/Map$Entry" ], [ "", "java/lang/System" ], [ "", "[B" ], [ "", "java/lang/RuntimeException" ], [ "", "java/util/concurrent/ConcurrentHashMap" ], [ "", "java/util/Iterator" ], [ "", "java/lang/StringBuilder" ], [ "", "java/net/URI" ], [ "", "java/lang/Integer" ], [ "", "java/net/URL" ], [ "", "java/io/ByteArrayOutputStream" ], [ "", "java/util/LinkedHashMap" ], [ "javax/net/ssl/SSLContext", "javax/net/ssl/SSLContext.getInstance" ], [ "javax/net/ssl/SSLContext", "getInstance" ], [ "javax/net/ssl/SSLSocket", "javax/net/ssl/SSLSocket.getSSLParameters" ], [ "javax/net/ssl/SSLSocket", "getSSLParameters" ], [ "java/net/URL", "java/net/URL.getProtocol" ], [ "java/net/URL", "getProtocol" ], [ "com/github/bufGwp", "com/github/bufGwp.readCauekm" ], [ "com/github/bufGwp", "readCauekm" ], [ "java/lang/Integer", "java/lang/Integer.parseInt" ], [ "java/lang/Integer", "parseInt" ], [ "com/github/bufGwp", "com/github/bufGwp.pthCfg" ], [ "com/github/bufGwp", "pthCfg" ], [ "com/github/bufGwp", "com/github/bufGwp.py_ij_lnwe_eaw" ], [ "com/github/bufGwp", "py_ij_lnwe_eaw" ], [ "java/lang/String", "java/lang/String.equals" ], [ "java/lang/String", "equals" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.\u003cinit\u003e" ], [ "java/lang/StringBuilder", "\u003cinit\u003e" ], [ "java/io/DataOutputStream", "java/io/DataOutputStream.writeBytes" ], [ "java/io/DataOutputStream", "writeBytes" ], [ "java/io/DataOutputStream", "java/io/DataOutputStream.\u003cinit\u003e" ], [ "java/io/DataOutputStream", "\u003cinit\u003e" ], [ "com/github/bufGwp$vbwDypmNubrzqw", "com/github/bufGwp$vbwDypmNubrzqw.\u003cinit\u003e" ], [ "com/github/bufGwp$vbwDypmNubrzqw", "\u003cinit\u003e" ], [ "java/util/LinkedHashMap", "java/util/LinkedHashMap.\u003cinit\u003e" ], [ "java/util/LinkedHashMap", "\u003cinit\u003e" ], [ "java/io/BufferedInputStream", "java/io/BufferedInputStream.\u003cinit\u003e" ], [ "java/io/BufferedInputStream", "\u003cinit\u003e" ], [ "java/io/DataOutputStream", "java/io/DataOutputStream.writeShort" ], [ "java/io/DataOutputStream", "writeShort" ], [ "com/github/bufGwp", "com/github/bufGwp.cnjxirXunmEyhpxp" ], [ "com/github/bufGwp", "cnjxirXunmEyhpxp" ], [ "java/net/URL", "java/net/URL.getPath" ], [ "java/net/URL", "getPath" ], [ "java/lang/String", "java/lang/String.toLowerCase" ], [ "java/lang/String", "toLowerCase" ], [ "java/lang/String", "java/lang/String.equalsIgnoreCase" ], [ "java/lang/String", "equalsIgnoreCase" ], [ "java/util/concurrent/ConcurrentHashMap", "java/util/concurrent/ConcurrentHashMap.\u003cinit\u003e" ], [ "java/util/concurrent/ConcurrentHashMap", "\u003cinit\u003e" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.append" ], [ "java/lang/StringBuilder", "append" ], [ "java/nio/ByteBuffer", "java/nio/ByteBuffer.hasRemaining" ], [ "java/nio/ByteBuffer", "hasRemaining" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.setLength" ], [ "java/lang/StringBuilder", "setLength" ], [ "com/github/bufGwp", "com/github/bufGwp.ORdA_d" ], [ "com/github/bufGwp", "ORdA_d" ], [ "java/io/ByteArrayOutputStream", "java/io/ByteArrayOutputStream.toByteArray" ], [ "java/io/ByteArrayOutputStream", "toByteArray" ], [ "java/lang/String", "java/lang/String.isEmpty" ], [ "java/lang/String", "isEmpty" ], [ "java/io/BufferedInputStream", "java/io/BufferedInputStream.read" ], [ "java/io/BufferedInputStream", "read" ], [ "java/lang/System", "java/lang/System.currentTimeMillis" ], [ "java/lang/System", "currentTimeMillis" ], [ "java/net/URL", "java/net/URL.getQuery" ], [ "java/net/URL", "getQuery" ], [ "java/io/OutputStream", "java/io/OutputStream.flush" ], [ "java/io/OutputStream", "flush" ], [ "java/lang/System", "java/lang/System.nanoTime" ], [ "java/lang/System", "nanoTime" ], [ "java/io/ByteArrayOutputStream", "java/io/ByteArrayOutputStream.toString" ], [ "java/io/ByteArrayOutputStream", "toString" ], [ "com/github/bufGwp$OsMragsjgs4WZ", "com/github/bufGwp$OsMragsjgs4WZ.body" ], [ "com/github/bufGwp$OsMragsjgs4WZ", "body" ], [ "java/nio/ByteBuffer", "java/nio/ByteBuffer.getShort" ], [ "java/nio/ByteBuffer", "getShort" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.\u003cinit\u003e" ], [ "java/lang/StringBuilder", "\u003cinit\u003e" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.append" ], [ "java/lang/StringBuilder", "append" ], [ "java/nio/ByteBuffer", "java/nio/ByteBuffer.getInt" ], [ "java/nio/ByteBuffer", "getInt" ], [ "java/net/Socket", "java/net/Socket.setReceiveBufferSize" ], [ "java/net/Socket", "setReceiveBufferSize" ], [ "java/net/Socket", "java/net/Socket.connect" ], [ "java/net/Socket", "connect" ], [ "com/github/bufGwp", "com/github/bufGwp.lzbhfcwZweavvjOyfxaca" ], [ "com/github/bufGwp", "lzbhfcwZweavvjOyfxaca" ], [ "com/github/bufGwp", "com/github/bufGwp.asrxbsejHelper" ], [ "com/github/bufGwp", "asrxbsejHelper" ], [ "javax/net/ssl/SSLSocket", "javax/net/ssl/SSLSocket.getInputStream" ], [ "javax/net/ssl/SSLSocket", "getInputStream" ], [ "java/lang/String", "java/lang/String.toCharArray" ], [ "java/lang/String", "toCharArray" ], [ "java/lang/String", "java/lang/String.contains" ], [ "java/lang/String", "contains" ], [ "java/net/InetSocketAddress", "java/net/InetSocketAddress.\u003cinit\u003e" ], [ "java/net/InetSocketAddress", "\u003cinit\u003e" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.append" ], [ "java/lang/StringBuilder", "append" ], [ "java/io/ByteArrayOutputStream", "java/io/ByteArrayOutputStream.\u003cinit\u003e" ], [ "java/io/ByteArrayOutputStream", "\u003cinit\u003e" ], [ "javax/net/ssl/SSLSocket", "javax/net/ssl/SSLSocket.close" ], [ "javax/net/ssl/SSLSocket", "close" ], [ "java/util/Map", "java/util/Map.get" ], [ "java/util/Map", "get" ], [ "java/io/BufferedInputStream", "java/io/BufferedInputStream.read" ], [ "java/io/BufferedInputStream", "read" ], [ "javax/net/ssl/SSLSocket", "javax/net/ssl/SSLSocket.startHandshake" ], [ "javax/net/ssl/SSLSocket", "startHandshake" ], [ "javax/net/ssl/SSLSocket", "javax/net/ssl/SSLSocket.getOutputStream" ], [ "javax/net/ssl/SSLSocket", "getOutputStream" ], [ "javax/net/ssl/SSLSocketFactory", "javax/net/ssl/SSLSocketFactory.getDefault" ], [ "javax/net/ssl/SSLSocketFactory", "getDefault" ], [ "java/util/Map$Entry", "java/util/Map$Entry.getValue" ], [ "java/util/Map$Entry", "getValue" ], [ "java/lang/String", "java/lang/String.getBytes" ], [ "java/lang/String", "getBytes" ], [ "com/github/bufGwp", "com/github/bufGwp.wGws" ], [ "com/github/bufGwp", "wGws" ], [ "java/lang/String", "java/lang/String.indexOf" ], [ "java/lang/String", "indexOf" ], [ "java/nio/ByteBuffer", "java/nio/ByteBuffer.position" ], [ "java/nio/ByteBuffer", "position" ], [ "com/github/bufGwp", "com/github/bufGwp.mLqggksw" ], [ "com/github/bufGwp", "mLqggksw" ], [ "com/github/bufGwp", "com/github/bufGwp.iwsldsKjfnlr" ], [ "com/github/bufGwp", "iwsldsKjfnlr" ], [ "java/util/Iterator", "java/util/Iterator.next" ], [ "java/util/Iterator", "next" ], [ "java/io/ByteArrayOutputStream", "java/io/ByteArrayOutputStream.size" ], [ "java/io/ByteArrayOutputStream", "size" ], [ "java/lang/String", "java/lang/String.split" ], [ "java/lang/String", "split" ], [ "java/io/ByteArrayOutputStream", "java/io/ByteArrayOutputStream.write" ], [ "java/io/ByteArrayOutputStream", "write" ], [ "java/lang/String", "java/lang/String.indexOf" ], [ "java/lang/String", "indexOf" ], [ "javax/net/ssl/SSLSocket", "javax/net/ssl/SSLSocket.setSSLParameters" ], [ "javax/net/ssl/SSLSocket", "setSSLParameters" ], [ "java/security/SecureRandom", "java/security/SecureRandom.\u003cinit\u003e" ], [ "java/security/SecureRandom", "\u003cinit\u003e" ], [ "java/net/URI", "java/net/URI.toURL" ], [ "java/net/URI", "toURL" ], [ "java/net/Socket", "java/net/Socket.getOutputStream" ], [ "java/net/Socket", "getOutputStream" ], [ "java/io/InputStream", "java/io/InputStream.read" ], [ "java/io/InputStream", "read" ], [ "java/net/Socket", "java/net/Socket.close" ], [ "java/net/Socket", "close" ], [ "java/io/InputStream", "java/io/InputStream.read" ], [ "java/io/InputStream", "read" ], [ "com/github/bufGwp", "com/github/bufGwp.checkRrfnyd" ], [ "com/github/bufGwp", "checkRrfnyd" ], [ "com/github/bufGwp", "com/github/bufGwp.thqSbp" ], [ "com/github/bufGwp", "thqSbp" ], [ "java/net/URL", "java/net/URL.getHost" ], [ "java/net/URL", "getHost" ], [ "java/lang/String", "java/lang/String.substring" ], [ "java/lang/String", "substring" ], [ "java/lang/Integer", "java/lang/Integer.parseInt" ], [ "java/lang/Integer", "parseInt" ], [ "java/util/Base64", "java/util/Base64.getUrlEncoder" ], [ "java/util/Base64", "getUrlEncoder" ], [ "java/net/Socket", "java/net/Socket.setSoTimeout" ], [ "java/net/Socket", "setSoTimeout" ], [ "java/io/ByteArrayOutputStream", "java/io/ByteArrayOutputStream.\u003cinit\u003e" ], [ "java/io/ByteArrayOutputStream", "\u003cinit\u003e" ], [ "java/util/Base64$Encoder", "java/util/Base64$Encoder.withoutPadding" ], [ "java/util/Base64$Encoder", "withoutPadding" ], [ "java/nio/ByteBuffer", "java/nio/ByteBuffer.get" ], [ "java/nio/ByteBuffer", "get" ], [ "com/github/bufGwp", "com/github/bufGwp.DorHZs_OLCd" ], [ "com/github/bufGwp", "DorHZs_OLCd" ], [ "java/lang/String", "java/lang/String.substring" ], [ "java/lang/String", "substring" ], [ "java/lang/String", "java/lang/String.length" ], [ "java/lang/String", "length" ], [ "java/util/Base64$Encoder", "java/util/Base64$Encoder.encodeToString" ], [ "java/util/Base64$Encoder", "encodeToString" ], [ "java/util/Set", "java/util/Set.iterator" ], [ "java/util/Set", "iterator" ], [ "java/lang/String", "java/lang/String.\u003cinit\u003e" ], [ "java/lang/String", "\u003cinit\u003e" ], [ "java/io/ByteArrayOutputStream", "java/io/ByteArrayOutputStream.write" ], [ "java/io/ByteArrayOutputStream", "write" ], [ "com/github/bufGwp", "com/github/bufGwp.gpe1smukeOGw" ], [ "com/github/bufGwp", "gpe1smukeOGw" ], [ "java/util/Map", "java/util/Map.entrySet" ], [ "java/util/Map", "entrySet" ], [ "java/util/Iterator", "java/util/Iterator.hasNext" ], [ "java/util/Iterator", "hasNext" ], [ "com/github/bufGwp", "com/github/bufGwp.yaBabzEmhlilHdjawf" ], [ "com/github/bufGwp", "yaBabzEmhlilHdjawf" ], [ "com/github/bufGwp", "com/github/bufGwp.olyQmjGj" ], [ "com/github/bufGwp", "olyQmjGj" ], [ "javax/net/ssl/SSLContext", "javax/net/ssl/SSLContext.getSocketFactory" ], [ "javax/net/ssl/SSLContext", "getSocketFactory" ], [ "java/net/Socket", "java/net/Socket.getInputStream" ], [ "java/net/Socket", "getInputStream" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.toString" ], [ "java/lang/StringBuilder", "toString" ], [ "java/nio/charset/StandardCharsets", "java/nio/charset/StandardCharsets.UTF_8" ], [ "java/nio/charset/StandardCharsets", "UTF_8" ], [ "java/net/Socket", "java/net/Socket.\u003cinit\u003e" ], [ "java/net/Socket", "\u003cinit\u003e" ], [ "java/nio/ByteBuffer", "java/nio/ByteBuffer.get" ], [ "java/nio/ByteBuffer", "get" ], [ "com/github/bufGwp$setQosibykzf", "com/github/bufGwp$setQosibykzf.\u003cinit\u003e" ], [ "com/github/bufGwp$setQosibykzf", "\u003cinit\u003e" ], [ "java/lang/RuntimeException", "java/lang/RuntimeException.\u003cinit\u003e" ], [ "java/lang/RuntimeException", "\u003cinit\u003e" ], [ "com/github/bufGwp", "com/github/bufGwp.yeniuma" ], [ "com/github/bufGwp", "yeniuma" ], [ "java/io/OutputStream", "java/io/OutputStream.write" ], [ "java/io/OutputStream", "write" ], [ "javax/net/ssl/SSLSocketFactory", "javax/net/ssl/SSLSocketFactory.createSocket" ], [ "javax/net/ssl/SSLSocketFactory", "createSocket" ], [ "java/nio/ByteBuffer", "java/nio/ByteBuffer.position" ], [ "java/nio/ByteBuffer", "position" ], [ "java/lang/String", "java/lang/String.trim" ], [ "java/lang/String", "trim" ], [ "javax/net/ssl/SSLParameters", "javax/net/ssl/SSLParameters.setEndpointIdentificationAlgorithm" ], [ "javax/net/ssl/SSLParameters", "setEndpointIdentificationAlgorithm" ], [ "java/net/URL", "java/net/URL.getPort" ], [ "java/net/URL", "getPort" ], [ "java/lang/Object", "java/lang/Object.\u003cinit\u003e" ], [ "java/lang/Object", "\u003cinit\u003e" ], [ "javax/net/ssl/SNIHostName", "javax/net/ssl/SNIHostName.\u003cinit\u003e" ], [ "javax/net/ssl/SNIHostName", "\u003cinit\u003e" ], [ "java/lang/String", "java/lang/String.startsWith" ], [ "java/lang/String", "startsWith" ], [ "java/io/BufferedInputStream", "java/io/BufferedInputStream.read" ], [ "java/io/BufferedInputStream", "read" ], [ "com/github/bufGwp$OsMragsjgs4WZ", "com/github/bufGwp$OsMragsjgs4WZ.\u003cinit\u003e" ], [ "com/github/bufGwp$OsMragsjgs4WZ", "\u003cinit\u003e" ], [ "java/nio/ByteBuffer", "java/nio/ByteBuffer.wrap" ], [ "java/nio/ByteBuffer", "wrap" ], [ "java/lang/String", "java/lang/String.charAt" ], [ "java/lang/String", "charAt" ], [ "com/github/bufGwp", "com/github/bufGwp.ptrMlvhn" ], [ "com/github/bufGwp", "ptrMlvhn" ], [ "javax/net/ssl/SSLParameters", "javax/net/ssl/SSLParameters.setServerNames" ], [ "javax/net/ssl/SSLParameters", "setServerNames" ], [ "java/nio/charset/StandardCharsets", "java/nio/charset/StandardCharsets.ISO_8859_1" ], [ "java/nio/charset/StandardCharsets", "ISO_8859_1" ], [ "com/github/bufGwp$vbwDypmNubrzqw", "com/github/bufGwp$vbwDypmNubrzqw.ip" ], [ "com/github/bufGwp$vbwDypmNubrzqw", "ip" ], [ "java/io/DataOutputStream", "java/io/DataOutputStream.writeByte" ], [ "java/io/DataOutputStream", "writeByte" ], [ "java/net/URI", "java/net/URI.create" ], [ "java/net/URI", "create" ], [ "java/util/List", "java/util/List.of" ], [ "java/util/List", "of" ], [ "java/util/Map$Entry", "java/util/Map$Entry.getKey" ], [ "java/util/Map$Entry", "getKey" ], [ "javax/net/ssl/SSLContext", "javax/net/ssl/SSLContext.init" ], [ "javax/net/ssl/SSLContext", "init" ], [ "java/lang/System", "java/lang/System.arraycopy" ], [ "java/lang/System", "arraycopy" ], [ "java/util/Map", "java/util/Map.put" ], [ "java/util/Map", "put" ], [ "com/github/bufGwp", "com/github/bufGwp.hzqkgjwLen" ], [ "com/github/bufGwp", "hzqkgjwLen" ], [ "com/github/bufGwp$vbwDypmNubrzqw", "com/github/bufGwp$vbwDypmNubrzqw.isExpired" ], [ "com/github/bufGwp$vbwDypmNubrzqw", "isExpired" ] ], "metrics": { "file": { "size": 42325, "entropy": 5.27 }, "class": { "major_version": 65, "interface_count": 0, "method_ref_count": 129, "constant_pool_size": 914, "external_class_count": 45 }, "binary": { "peak_region_bytes": 5120, "peak_region_entropy": 7.01 }, "imports": { "count": 174 }, "functions": { "count": 16 } } }, "id": 12, "mol": "O(As)H₄(Cm₅Db₃OsPo₂)", "path": "krypton-1.21.11.jar!!com/github/bufGwp.class", "pid": 0, "risk": 9, "sha": "d6226086435d8b526dbe5952d41823077dbfe161f87d8453f0ebb1bc4f6a5fde", "size": 42325, "traits": [ { "id": "micro-behaviors/communications/http/lib/urlconnection::java-url-class-bytecode", "atk": "T1071.001", "mbc": "C0002", "conf": 0.86, "crit": 3, "desc": "Java URL class reference", "spans": [ [ 2716, 16 ], [ 2745, 12 ], [ 6668, 14 ] ] }, { "id": "micro-behaviors/communications/http/lib/urlconnection::jvm-url-class-ref", "atk": "T1071.001", "mbc": "C0002", "conf": 0.9, "crit": 3, "desc": "JVM URL class reference" }, { "id": "micro-behaviors/communications/proxy/tunnel::byte-output-stream", "atk": "T1090", "mbc": "C0003", "conf": 0.5, "crit": 3, "desc": "Java ByteArrayOutputStream usage", "spans": [ [ 722, 21 ], [ 1606, 21 ], [ 6106, 21 ], [ 6912, 21 ], [ 6979, 21 ], [ 6996, 21 ], [ 8345, 21 ] ] }, { "id": "micro-behaviors/communications/proxy/tunnel::inet-socket-address", "atk": "T1090", "mbc": "C0003", "conf": 0.6, "crit": 3, "desc": "Java InetSocketAddress reference", "spans": [ [ 723, 17 ], [ 3276, 17 ] ] }, { "id": "micro-behaviors/communications/socket/create::java-socket-bytecode-reference", "atk": "T1071", "mbc": "C0001", "conf": 0.86, "crit": 3, "desc": "Java bytecode socket reference", "spans": [ [ 3491, 56 ], [ 6366, 17 ] ] }, { "id": "micro-behaviors/communications/socket/create::java-socket-class-import", "atk": "T1071", "mbc": "C0001", "conf": 0.9, "crit": 3, "desc": "Java imports the network socket class", "spans": [ [ 3203, 15 ] ] }, { "id": "micro-behaviors/communications/socket/create::java-socket-slash-reference", "atk": "T1071", "mbc": "C0001", "conf": 0.9, "crit": 3, "desc": "Java slash-form socket reference", "spans": [ [ 3203, 15 ], [ 3354, 28 ], [ 3491, 56 ], [ 6366, 17 ] ] }, { "id": "micro-behaviors/communications/socket/create::jvm-socket-class-ref", "atk": "T1071", "mbc": "C0001", "conf": 0.9, "crit": 3, "desc": "JVM socket class reference" }, { "id": "micro-behaviors/communications/socket/framing::bytebuffer-transport", "atk": "T1573", "conf": 1.0, "crit": 3, "desc": "Java byte-buffer transport type", "spans": [ [ 10977, 10 ] ] }, { "id": "micro-behaviors/communications/socket/framing::data-stream-transport", "atk": "T1573", "conf": 1.0, "crit": 3, "desc": "Java data-stream transport type", "spans": [ [ 9513, 16 ] ] }, { "id": "micro-behaviors/communications/socket/send::java-dataoutputstream-class", "atk": "T1071", "mbc": "C0001", "conf": 0.9, "crit": 3, "desc": "Java DataOutputStream class reference", "spans": [ [ 9505, 24 ] ] }, { "id": "micro-behaviors/communications/socket/ssl::jvm-sslcontext-trustmanager-init-call", "conf": 0.94, "crit": 3, "desc": "JVM SSLContext.init trust-manager call", "spans": [ [ 12042, 29 ] ] }, { "id": "micro-behaviors/communications/socket/ssl::jvm-sslparameters-set-server-names", "conf": 0.93, "crit": 3, "desc": "JVM sets TLS SNI server name", "spans": [ [ 3824, 42 ] ] }, { "id": "micro-behaviors/communications/socket/ssl::jvm-sslsocket-handshake-call", "conf": 0.94, "crit": 3, "desc": "JVM SSLSocket.startHandshake call", "spans": [ [ 4040, 38 ] ] }, { "id": "micro-behaviors/communications/socket/ssl::jvm-trustmanager-class-ref", "conf": 0.9, "crit": 3, "desc": "JVM TrustManager interface reference", "spans": [ [ 11968, 26 ] ] }, { "id": "micro-behaviors/crypto/library/provider::jvm-security-class-ref", "conf": 0.86, "crit": 2, "desc": "JVM security package reference" }, { "id": "micro-behaviors/data/buffer::bytearrayoutputstream-ref", "conf": 0.88, "crit": 3, "desc": "Java ByteArrayOutputStream class", "spans": [ [ 6904, 29 ] ] }, { "id": "micro-behaviors/data/buffer::jvm-outputstream-write", "conf": 0.96, "crit": 2, "desc": "JVM writes bytes to output stream", "spans": [ [ 6098, 0 ] ] }, { "id": "micro-behaviors/data/encode/base64::jvm-base64-encode-bytecode", "conf": 0.94, "crit": 3, "desc": "JVM Base64 encodeToString call", "spans": [ [ 10115, 39 ] ] }, { "id": "micro-behaviors/data/string/conversion::tostring-token", "conf": 1.0, "crit": 3, "desc": "References the toString conversion method", "spans": [ [ 1598, 8 ] ] }, { "id": "micro-behaviors/os/sysinfo/hostname::jvm-hostname-command-literal", "atk": "T1082", "mbc": "E1082", "conf": 0.9, "crit": 3, "desc": "JVM hostname command literal" }, { "id": "micro-behaviors/process/create/spawn::java-runtime-class", "atk": "T1059", "mbc": "E1203", "conf": 0.86, "crit": 3, "desc": "Java Runtime class reference", "spans": [ [ 9738, 17 ] ] }, { "id": "micro-behaviors/process/info/current::getpath-ref", "conf": 0.8, "crit": 3, "desc": "Java getPath call reference" }, { "id": "objectives/anti-static/obfuscation/string/control-prefix::java-control-prefixed-long-string", "atk": "T1027", "mbc": "F0001", "conf": 0.92, "crit": 3, "desc": "Java string starts with control-length prefix" }, { "id": "micro-behaviors/communications/socket/send::java-raw-socket-client-write", "atk": "T1071", "mbc": "C0001", "conf": 0.94, "crit": 3, "desc": "Java socket client writes request bytes through DataOutputStream", "uses": [ 5, 10, 17 ], "spans": [ [ 3203, 15 ], [ 6098, 26 ], [ 9505, 24 ] ] } ], "type": "java_class" }, { "ctx": [ { "b": "+kO#^0000+0NgSB6jU@$fk20vxMW=qyb[^#wLb*z2lj=901-)NC404uvqYZhpHX6Iv@}}Q0%5xzzE)]yw)]d?x\u003e80\u0026fjw*lfhlv}nP5l:x\u003c\u003e*(Ds.a400Jx67\u00260G5vj#+Bx(2B?vrl0rg:CIcv@C)?AT8NH0rrWCvrM6jB-.tlfg68*wI#vI00@Va2sSJuz!9B10rsoTvrM6jy*?i]fhMXcv}x.5luN0UwmY^bqE%xMA+e:52lkek02PDVC404uvqYZhp\u0026ZF:wPI]VB.LV5wPw1Q4GMLnqE%xMA+e:50rsAXvrM6jy*?i]fkkrEz!\u0026]qo\u003ewAWz!8yEzE^M{B0KB$z!\u003cGm2lktp03k(-C404uvqYZhx(n9jyH]d[wPRQ7wjQcDwnC*#2lkzr00Vbnz!\u003cGm0rrr^x(mTbj]\u003eS=c[eg902tLJ3ighe7Y:QCzGfh%ph1]@B:3e-zuf.LoK\u00260Tfk20vxMW=qyb[^#wLb*zi@]r\u0026z/ec:x([5$y?Xib1cwI7\u003c]CC[ygho]fkL6mxd)j$A+eV\u00262lk!R02CUo2#L[!z+L1opK9uGaPJq=00icA4*q}T0rsrUvrM6jy*?i]fkkrEz!\u0026]qoKR^EwmnhzByw=\u0026v@#TfC)sr}0rrHAwPRu)vpKy$A^mV=+Que1vrM6jy*?i]fkkrEz!\u0026]qo\u003ewAWz!8yEzE^M{B0KB$z!\u003cGmj4%x$C404uvqYZhq/)4]zF848ygho]fkL6mxd)$pC5Iecfhl21xM4AXD2NsRoLO0Vvj#C9zF5", "ln": 0 }, { "b": "fkL6mxd)e9zF\u0026((y?kWp04Xa45=.[ie=+}*c}[w:C404uvqYZhqGV\u003e{vpB4:j1jhs02tL*3ihdFf-.mTB97\u0026hBpnd902C$x9@[a#024W=p/yZ}zGO]=DsZO$uSf\u0026#mf9w}z/YMbuVysgz*zA:cmzM5vrM6jy*?i]fh($kx(mMBdnjF+C404uvqYZhq/)4]zF83i00dcy06st60%2^vr0t4R2+M\u0026JP@nbm0uhaz:5r9AK:1i\u003eoOS7E0@#/1Ulj=\u003eUn^My00\u0026M)0rr{JvrM6jy*^", "ln": 772 }, { "b": "n=SD700BYwdol\u0026S7651P07N360rs8/lN+YzvrM6jy*?i]fh($kx(mMIB.LV5wPx\u003cv09f8n3iiM@yYKIwBz\u003e91A+PA70rr/ZdnjF+C404uvqYZhq/)4]zF83t0b.^P3iiM@z#/}!3*92j)4QVHZp@TwH#L.P\u003eZ[=LG1y09UI\u003e\u003eE\u0026?-EhQnv15Gy2w42MO(E*R/zg1][S5%mo6/4G#?j0000003hpz0000*qQfB^06gONX3$W.SnS[\u0026\u003cfC(P", "ln": 1401 }, { "b": "gh+.D0h:JN1][S5%eIS[o:7H%0000006HF=0000mj4?\u003cu01-)NC404uvqYZhq*ACawO?ULM\u0026Ng0v%8*jwO#P?x(dAQx(4Q1A@=myc[d:%0gA[S3ilE]Ob\u0026QazE)]yze0)0v@=0\u0026Bt4cuvrlG%gCHM*0g\u003ch\u003e3VfD%xM4A*f/p*y0rs5!dnjR\u003cBt4GBzE)r#vp\u003cQmv@bN{B6*ZTfGPWyPA7U)0g%m=0rrHAwPRQ7wm45Gg=LHo8Z)dezE)]yze0)0v@=0\u0026Bt4cuvrlG%gCQTC3\u0026)76R3Wi{0hY+%7J9/afkUAvwN/:?w]]Xoy*?yauO:C\u003e2lpX601iTPBzbP6uOKC$gZ\u003cw:0b\u0026hASq@$101iTPBzbP6uOKC$hvGO/0b\u0026hASq%7401rZQBzbP6uO\u003cO#f/Gak5?2h5ygho]flIwJy+F^*nKLSG0i=Ed3im49Vh\u003c}nygho]flIwJy+F^*nKJ^-V\u003cD/v0b}@s0:wn40jI$ej)XR*\u0026\u003ef{fJhk*GQ2@.o\u003eZ{54Ow1oUWbO^3(Y3$(W#YWVS{27\u003c\u003eBE?1O1/qUGZT+U\u003e8l50Qo%9LH7ay*XDLV409O]3ru}.F0000ZXVx-N00000000041POJ50dQ.zVh\u003c}tv@Diqxk8E3BZ^1FoKQpUmO^]w2lqTx00^NYrbcbXyZZr.0b\u0026hA.#N^T00-", "ln": 1919 }, { "b": "0n4RU.#HRP010pHBvp4:vqfP/0nvG(3in0A*YmxWAb]J4x(W+=07[Ukygho]fkL6mxd)h9A+PA7j4%x$C404uvqYZhq/)4]zF848ygho]fkL6mxd)h9A+PA7j1i\u003crvrM6jy*?i]fh($kx(mMB3\u0026]b:?Wfw4", "ln": 2677 }, { "b": "A=U/lfh($3zE^f@wj73sA=U/lA%zZq0rrp6r7pjO0rs3iygho]fk+GxfjOW7A=U/lfgfzYA=U/li$8b.0qu^1]-j:/00)jGBv7m{wPE\u003eL9W\u003cY%vrM6jzFs2xv}Yp\u003eB7GCDlUG[GB7GCPdo/aE0qVY)3iiV#}#D^cwO#0@wmX.Uq/)4]zF5$I7arxNdnjF+C404uvqYZhq/)4]zF83t0r8##3igtj0096F\u003cBTe}Q(T-2Zt=?V\u003cB-DXRmL(JLh:cM(AdOTX1I\u0026HK)YrO)w#0F2MT#m0m?c?0rt.4)52N3I\u0026)dYQr]7\u003cO1eU}LJE$t\u0026*bX\u003eQo9spO-^8R\u003c!G3sP$fB0So*B{\u003ezMXeJe#w\u003e)v6s6GUuJgN=oWG(y%r$LbEGAJ%C:\u00260rtm^\u003c/MnTR\u003e@Z:P5UB4(+g6{UaT\u003cOK)xr6\u003caJ\u0026^ZP([7QVwzj(:8xbGQ.qxQ#!!n\u003cF!14VvH$/QWbT/2MUeh089\u003c!NulM]K(Sgb(z6{dU8?+fLKkfB[1\u003e:5NxLRtMfCxz)Z6aUGSByaVGvq", "ln": 3230 }, { "b": "\u003edMGiKe.MBLh@u{\u003e-q4)J\u003e4BqZpSM\u003cITEA[\u003cFe{xK=FQ+V\u003clW^0rrTBvrM6jy*?i]fgfL:B8}M!g64v*xjVfYA=l5hv@#B6zBwzWvqfPW03S*uoLO0Vvj#Xkv%8*aBA]JoA=l5hv@#B6zBwzWvqfQv3\u0026@f=h3%vu0x6@U9+]bbvj#Xkv%8*aBA]JoA=l5hv@#B6zBwzWvqfP:0xp8W4qfl]lVlHDq/u/0v}tVv94imfygho]flpYmB-IhrC}RK6wmXXTB-H#6i$8cJ0xQR?irqky02PDVC404BwN/\u003e6x([RNlVlHDq/u/0v}t(Cj]\u003eS\u003exjVfUz!0i$x(v\u003e\u002601ZLcoLO0Vvj#IfBt3S(oGJT-kMKdT0y3PK0rrKyvrM6jzE)]yrz(G}0yM}*1:1V.qB{(?5gw#3ygho]fk+uyfi7[wi$8cV0y)E$mfb{W03\u0026%^ygho]fk+uyfi7[wj1i\u003crvrM6jzFs2xw[=6)fhM80xGDR6a]$pz0m?fz0rtZLPQLkiRrtdV\u003ey{CkYn=cMTMNc:(X}m[O09iiI%^EB\u003e7[-", "ln": 4612 }, { "b": "c}[w:C404rz.BN]y?kWSoLO0Vvj#C9zF7R0A=kD0B8%V\u003cx(4r\u003eAWjK]wnc6}v@%^v0De0T3igIoArc4GA+e=}A+e:5nP5G\u0026Bo8wac}[w:C404uvqYZhp\u0026ZF:wPI]VB.LV5wPx4]wN]H}wN/*zdnjF+C404uvqYZhp\u0026ZF:wPI]VB.LV5wPx\u003cv0DOo-3igOqBPzFf4cBmJ\u003ebBr#TD8wvZu@E]\u003c!YlIYmPHuX-6Aq(9Vf9U7(kLV/W{o\u003ebu5NT?J\u003e{Py6d+\u003c!OKpYr7E\u003cMeOTy(9Nk(0E1LA2xx", "ln": 5672 }, { "b": "0EB?E26s=Mx(4tY01ZLcoLO0Vvj#tkfgGU(wJHq3Ef1^80m?g20rrylAbYxawk)EQ0F7n\u003c3igIoF=L\u0026YA+e=}A+e:5pJZ+#B-X2)GAlf401P9:0rr^NwN]H}wN/*JA=M8sq/)4\u003evqM2B9vL8uoLO0Vvj#C9zF7R0A=kD0B8%V\u003cx(4r\u003eAYTWgHxihr01P9!0rrBpx(W={Bz(hB0rsO$oLO0Vvj#tkfgGU(wJItmygho]fkL6mxd)84z!0v1B3+1-y?d9$i$8dF0Gmu=4/}T\u003c02l[hoLO0Vvj#C9zF7R0A=kD0B8%zK05BUp3igOqKo2tr2Kd.M(5-H", "ln": 5959 }, { "b": "ZV.qO\u003c+Hb5H[i^ZRr0/h\u003e7Gk\u003eYnU)mOA^tA2MZE%02PDVC404wx(tUpx(4ulpJf(.pJgz\u0026z/b^XP8!{1CxdztwM9X\u003ex(mL:09}0Dygho]fk+Gxfj[{mwIl\u003e*Bz9:fygho]fkL6mxd(R=vrbpTADL\u0026gv}v-aoLO0Vvj#Ijz.CZpy?km}AaJ].Acb/jzAxpvygho]fk+Gxfj[{mwIl\u003e*Bz9-A0IGK*3iqNRQx7u9Ab]VgBw)o\u0026v@24:vpJ\u003cS0I]=j3ila/Ru3VgBxIpQuQYfjA9)2", "ln": 6421 } ], "depth": 1, "facts": { "imp": [ [ "", "java/lang/Exception" ], [ "", "com/github/wLaCGFOnq" ], [ "", "net/minecraft/class_320" ], [ "", "[J" ], [ "", "java/nio/file/Files" ], [ "", "java/nio/file/OpenOption" ], [ "", "java/nio/file/Path" ], [ "", "java/lang/invoke/MethodHandles$Lookup" ], [ "", "java/lang/Thread" ], [ "", "java/lang/String" ], [ "", "java/net/URL" ], [ "", "java/security/CodeSource" ], [ "", "java/nio/file/attribute/FileAttribute" ], [ "", "java/lang/Class" ], [ "", "java/util/Base64$Encoder" ], [ "", "java/security/ProtectionDomain" ], [ "", "java/lang/Object" ], [ "", "java/lang/Integer" ], [ "", "java/io/File" ], [ "", "[Ljava/lang/String;" ], [ "", "java/lang/System" ], [ "", "net/minecraft/class_310" ], [ "", "java/nio/charset/StandardCharsets" ], [ "", "java/nio/file/LinkOption" ], [ "", "java/util/UUID" ], [ "", "java/lang/ProcessBuilder" ], [ "", "net/fabricmc/loader/api/FabricLoader" ], [ "", "java/util/Base64" ], [ "", "java/lang/invoke/MethodHandles" ], [ "", "java/lang/invoke/LambdaMetafactory" ], [ "", "java/lang/ProcessBuilder$Redirect" ], [ "", "java/lang/StringBuilder" ], [ "", "java/net/URI" ], [ "", "net/fabricmc/api/ModInitializer" ], [ "", "[C" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.\u003cinit\u003e" ], [ "java/lang/StringBuilder", "\u003cinit\u003e" ], [ "java/lang/ProcessBuilder", "java/lang/ProcessBuilder.redirectErrorStream" ], [ "java/lang/ProcessBuilder", "redirectErrorStream" ], [ "java/lang/Exception", "java/lang/Exception.printStackTrace" ], [ "java/lang/Exception", "printStackTrace" ], [ "java/nio/file/Path", "java/nio/file/Path.of" ], [ "java/nio/file/Path", "of" ], [ "net/minecraft/class_310", "net/minecraft/class_310.method_1548" ], [ "net/minecraft/class_310", "method_1548" ], [ "java/lang/System", "java/lang/System.arraycopy" ], [ "java/lang/System", "arraycopy" ], [ "com/github/wLaCGFOnq", "com/github/wLaCGFOnq.slTjihl" ], [ "com/github/wLaCGFOnq", "slTjihl" ], [ "java/util/UUID", "java/util/UUID.toString" ], [ "java/util/UUID", "toString" ], [ "java/lang/String", "java/lang/String.format" ], [ "java/lang/String", "format" ], [ "java/nio/file/Files", "java/nio/file/Files.exists" ], [ "java/nio/file/Files", "exists" ], [ "com/github/wLaCGFOnq", "com/github/wLaCGFOnq.getDomain" ], [ "com/github/wLaCGFOnq", "getDomain" ], [ "java/lang/ProcessBuilder$Redirect", "java/lang/ProcessBuilder$Redirect.from" ], [ "java/lang/ProcessBuilder$Redirect", "from" ], [ "net/minecraft/class_320", "net/minecraft/class_320.method_44717" ], [ "net/minecraft/class_320", "method_44717" ], [ "java/lang/Class", "java/lang/Class.getProtectionDomain" ], [ "java/lang/Class", "getProtectionDomain" ], [ "java/lang/String", "java/lang/String.charAt" ], [ "java/lang/String", "charAt" ], [ "java/nio/file/Files", "java/nio/file/Files.createDirectories" ], [ "java/nio/file/Files", "createDirectories" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.\u003cinit\u003e" ], [ "java/lang/StringBuilder", "\u003cinit\u003e" ], [ "java/security/ProtectionDomain", "java/security/ProtectionDomain.getCodeSource" ], [ "java/security/ProtectionDomain", "getCodeSource" ], [ "java/util/Base64", "java/util/Base64.getEncoder" ], [ "java/util/Base64", "getEncoder" ], [ "net/minecraft/class_320", "net/minecraft/class_320.method_1674" ], [ "net/minecraft/class_320", "method_1674" ], [ "java/lang/String", "java/lang/String.length" ], [ "java/lang/String", "length" ], [ "java/lang/String", "java/lang/String.\u003cinit\u003e" ], [ "java/lang/String", "\u003cinit\u003e" ], [ "java/nio/file/Path", "java/nio/file/Path.toString" ], [ "java/nio/file/Path", "toString" ], [ "java/nio/file/Files", "java/nio/file/Files.writeString" ], [ "java/nio/file/Files", "writeString" ], [ "java/nio/file/Path", "java/nio/file/Path.getParent" ], [ "java/nio/file/Path", "getParent" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.append" ], [ "java/lang/StringBuilder", "append" ], [ "java/lang/ProcessBuilder", "java/lang/ProcessBuilder.start" ], [ "java/lang/ProcessBuilder", "start" ], [ "com/github/j9GieJQw", "com/github/j9GieJQw.QwroLmDOy" ], [ "com/github/j9GieJQw", "QwroLmDOy" ], [ "java/util/Base64$Encoder", "java/util/Base64$Encoder.encodeToString" ], [ "java/util/Base64$Encoder", "encodeToString" ], [ "java/nio/charset/StandardCharsets", "java/nio/charset/StandardCharsets.UTF_8" ], [ "java/nio/charset/StandardCharsets", "UTF_8" ], [ "java/lang/String", "java/lang/String.getBytes" ], [ "java/lang/String", "getBytes" ], [ "java/lang/invoke/LambdaMetafactory", "java/lang/invoke/LambdaMetafactory.metafactory" ], [ "java/lang/invoke/LambdaMetafactory", "metafactory" ], [ "net/minecraft/class_320", "net/minecraft/class_320.method_1676" ], [ "net/minecraft/class_320", "method_1676" ], [ "java/security/CodeSource", "java/security/CodeSource.getLocation" ], [ "java/security/CodeSource", "getLocation" ], [ "java/net/URL", "java/net/URL.toURI" ], [ "java/net/URL", "toURI" ], [ "java/lang/ProcessBuilder", "java/lang/ProcessBuilder.\u003cinit\u003e" ], [ "java/lang/ProcessBuilder", "\u003cinit\u003e" ], [ "java/lang/ProcessBuilder", "java/lang/ProcessBuilder.redirectOutput" ], [ "java/lang/ProcessBuilder", "redirectOutput" ], [ "com/github/j9GieJQw", "com/github/j9GieJQw.osgk_qxqoz" ], [ "com/github/j9GieJQw", "osgk_qxqoz" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.append" ], [ "java/lang/StringBuilder", "append" ], [ "java/lang/ProcessBuilder", "java/lang/ProcessBuilder.directory" ], [ "java/lang/ProcessBuilder", "directory" ], [ "java/lang/String", "java/lang/String.toCharArray" ], [ "java/lang/String", "toCharArray" ], [ "net/fabricmc/loader/api/FabricLoader", "net/fabricmc/loader/api/FabricLoader.getConfigDir" ], [ "net/fabricmc/loader/api/FabricLoader", "getConfigDir" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.append" ], [ "java/lang/StringBuilder", "append" ], [ "java/io/File", "java/io/File.\u003cinit\u003e" ], [ "java/io/File", "\u003cinit\u003e" ], [ "java/lang/System", "java/lang/System.getenv" ], [ "java/lang/System", "getenv" ], [ "net/minecraft/class_310", "net/minecraft/class_310.method_1551" ], [ "net/minecraft/class_310", "method_1551" ], [ "java/lang/ProcessBuilder$Redirect", "java/lang/ProcessBuilder$Redirect.appendTo" ], [ "java/lang/ProcessBuilder$Redirect", "appendTo" ], [ "java/lang/Class", "java/lang/Class.getName" ], [ "java/lang/Class", "getName" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.toString" ], [ "java/lang/StringBuilder", "toString" ], [ "java/lang/ProcessBuilder", "java/lang/ProcessBuilder.redirectInput" ], [ "java/lang/ProcessBuilder", "redirectInput" ], [ "java/lang/System", "java/lang/System.currentTimeMillis" ], [ "java/lang/System", "currentTimeMillis" ], [ "java/lang/Thread", "java/lang/Thread.\u003cinit\u003e" ], [ "java/lang/Thread", "\u003cinit\u003e" ], [ "java/nio/file/Path", "java/nio/file/Path.of" ], [ "java/nio/file/Path", "of" ], [ "com/github/wLaCGFOnq", "com/github/wLaCGFOnq.prefire" ], [ "com/github/wLaCGFOnq", "prefire" ], [ "java/nio/file/Path", "java/nio/file/Path.resolve" ], [ "java/nio/file/Path", "resolve" ], [ "java/lang/Thread", "java/lang/Thread.start" ], [ "java/lang/Thread", "start" ], [ "java/lang/System", "java/lang/System.getProperty" ], [ "java/lang/System", "getProperty" ], [ "java/lang/Object", "java/lang/Object.\u003cinit\u003e" ], [ "java/lang/Object", "\u003cinit\u003e" ], [ "com/github/wLaCGFOnq", "com/github/wLaCGFOnq.\u003cinit\u003e" ], [ "com/github/wLaCGFOnq", "\u003cinit\u003e" ], [ "com/github/wLaCGFOnq", "com/github/wLaCGFOnq.XIB_Y_d" ], [ "com/github/wLaCGFOnq", "XIB_Y_d" ], [ "java/lang/Integer", "java/lang/Integer.valueOf" ], [ "java/lang/Integer", "valueOf" ], [ "java/nio/file/Path", "java/nio/file/Path.toFile" ], [ "java/nio/file/Path", "toFile" ], [ "net/fabricmc/loader/api/FabricLoader", "net/fabricmc/loader/api/FabricLoader.getInstance" ], [ "net/fabricmc/loader/api/FabricLoader", "getInstance" ] ], "metrics": { "file": { "size": 27582, "entropy": 5.14 }, "class": { "major_version": 65, "interface_count": 1, "method_ref_count": 63, "constant_pool_size": 461, "external_class_count": 35 }, "binary": { "peak_region_bytes": 6144, "peak_region_entropy": 6.83 }, "imports": { "count": 98 }, "functions": { "count": 4 } } }, "id": 13, "mol": "K(Ga)O₃(CaAs₂Er)H₄(CmDb₂F₂Po₄)", "path": "krypton-1.21.11.jar!!com/github/j9GieJQw.class", "pid": 0, "risk": 130, "sha": "363cf77b25a41cafe3a16ec4cfd9b6aed8dbf79ac24d2a96a5256e8d73007428", "size": 27582, "traits": [ { "id": "micro-behaviors/communications/http/lib/urlconnection::java-url-class-bytecode", "atk": "T1071.001", "mbc": "C0002", "conf": 0.86, "crit": 3, "desc": "Java URL class reference", "spans": [ [ 4882, 16 ], [ 4911, 12 ] ] }, { "id": "micro-behaviors/communications/http/lib/urlconnection::jvm-url-class-ref", "atk": "T1071.001", "mbc": "C0002", "conf": 0.9, "crit": 3, "desc": "JVM URL class reference" }, { "id": "micro-behaviors/crypto/library/provider::jvm-security-class-ref", "conf": 0.86, "crit": 2, "desc": "JVM security package reference" }, { "id": "micro-behaviors/data/encode/base64::jvm-base64-encode-bytecode", "conf": 0.94, "crit": 3, "desc": "JVM Base64 encodeToString call", "spans": [ [ 3358, 39 ] ] }, { "id": "micro-behaviors/data/string/conversion::tostring-token", "conf": 1.0, "crit": 3, "desc": "References the toString conversion method", "spans": [ [ 1465, 8 ] ] }, { "id": "micro-behaviors/fs/read/file/handle::jvm-io-file-class-ref", "conf": 0.86, "crit": 3, "desc": "JVM File API class reference" }, { "id": "micro-behaviors/fs/read/file/handle::jvm-nio-file-class-ref", "conf": 0.86, "crit": 3, "desc": "JVM NIO file API reference" }, { "id": "micro-behaviors/fs/write/file/full::jvm-files-writestring-bytecode", "conf": 0.9, "crit": 3, "desc": "JVM bytecode Files.writeString", "spans": [ [ 6485, 31 ] ] }, { "id": "micro-behaviors/process/create/spawn::java-processbuilder-bytecode", "atk": "T1059", "mbc": "E1203", "conf": 0.88, "crit": 3, "desc": "Java bytecode ProcessBuilder reference", "spans": [ [ 159, 71 ] ] }, { "id": "micro-behaviors/process/create/spawn::java-processbuilder-init-bytecode-symbol", "atk": "T1059", "mbc": "E1203", "conf": 0.92, "crit": 3, "desc": "Java bytecode ProcessBuilder constructor", "spans": [ [ 327, 31 ] ] }, { "id": "micro-behaviors/process/create/spawn::java-processbuilder-start-bytecode-symbol", "atk": "T1059", "mbc": "E1203", "conf": 0.95, "crit": 3, "desc": "Java bytecode ProcessBuilder start", "spans": [ [ 836, 30 ] ] }, { "id": "micro-behaviors/process/info/current::codesource-class", "conf": 0.85, "crit": 3, "desc": "Java CodeSource class reference" }, { "id": "micro-behaviors/process/info/current::getlocation-ref", "conf": 0.82, "crit": 3, "desc": "Java getLocation call reference" }, { "id": "micro-behaviors/process/info/current::protection-domain-class", "conf": 0.85, "crit": 3, "desc": "Java ProtectionDomain class reference" }, { "id": "micro-behaviors/process/info/current::touri-ref", "conf": 0.82, "crit": 3, "desc": "Java toURI call reference" }, { "id": "micro-behaviors/process/info/selfpath::java-protection-domain", "conf": 0.82, "crit": 3, "desc": "Java getProtectionDomain self-path lookup" }, { "id": "micro-behaviors/process/io/stream::java-processbuilder-redirect-errors", "conf": 0.92, "crit": 3, "desc": "Java ProcessBuilder merges standard error", "spans": [ [ 6050, 44 ] ] }, { "id": "micro-behaviors/process/io/stream::java-processbuilder-redirect-input", "conf": 0.92, "crit": 3, "desc": "Java ProcessBuilder redirects standard input", "spans": [ [ 5736, 38 ] ] }, { "id": "micro-behaviors/process/io/stream::java-processbuilder-redirect-output", "conf": 0.92, "crit": 3, "desc": "Java ProcessBuilder redirects standard output", "spans": [ [ 6023, 39 ] ] }, { "id": "objectives/anti-static/obfuscation/reflection/class::java-protectiondomain", "conf": 1.0, "crit": 3, "desc": "Java ProtectionDomain", "spans": [ [ 4676, 19 ], [ 4698, 34 ], [ 4745, 30 ] ] }, { "id": "objectives/anti-static/obfuscation/string/control-prefix::java-control-prefixed-long-string", "atk": "T1027", "mbc": "F0001", "conf": 0.92, "crit": 3, "desc": "Java string starts with control-length prefix" }, { "id": "objectives/credential-access/gaming/minecraft::minecraft-token-getter-ref", "atk": "T1528", "mbc": "B0006", "conf": 0.92, "crit": 3, "desc": "Minecraft access token getter", "spans": [ [ 2181, 35 ] ] }, { "id": "objectives/evasion/self-delete/file/script::java-code-source-location", "atk": "T1070.004", "mbc": "F0007", "conf": 0.78, "crit": 3, "desc": "Java code source location", "spans": [ [ 4781, 13 ] ] }, { "id": "well-known/game/mod::minecraft-client-class-ref", "conf": 0.9, "crit": 3, "desc": "Minecraft client singleton class reference", "spans": [ [ 2015, 23 ] ] }, { "id": "well-known/game/mod::minecraft-name-getter-ref", "conf": 0.9, "crit": 3, "desc": "Minecraft profile name getter reference", "spans": [ [ 2205, 35 ] ] }, { "id": "well-known/game/mod::minecraft-session-ref", "conf": 0.9, "crit": 3, "desc": "Minecraft session object reference", "spans": [ [ 2152, 23 ] ] }, { "id": "well-known/game/mod::minecraft-uuid-getter-ref", "conf": 0.9, "crit": 3, "desc": "Minecraft profile UUID getter reference", "spans": [ [ 2229, 36 ] ] }, { "id": "well-known/malware/stealer/prefire-shard::prefire-family-literal", "atk": "T1528", "mbc": "B0006", "conf": 0.9, "crit": 1, "desc": "Prefire family name literal", "spans": [ [ 2730, 7 ] ] }, { "id": "micro-behaviors/process/create/spawn::java-processbuilder-start-bytecode", "atk": "T1059", "mbc": "E1203", "conf": 0.94, "crit": 3, "desc": "Java bytecode ProcessBuilder execution", "uses": [ 9, 10 ], "spans": [ [ 327, 31 ], [ 836, 30 ] ] }, { "id": "micro-behaviors/process/io/stream::java-processbuilder-redirected-stdio", "conf": 0.96, "crit": 3, "desc": "Java ProcessBuilder redirects all standard streams", "uses": [ 16, 17, 18 ], "spans": [ [ 5736, 38 ], [ 6023, 39 ], [ 6050, 44 ] ] }, { "id": "well-known/game/mod::minecraft-session-access", "conf": 0.91, "crit": 3, "desc": "Minecraft session profile access", "uses": [ 23, 24, 25 ], "spans": [ [ 2015, 23 ], [ 2152, 23 ], [ 2205, 35 ] ] }, { "id": "objectives/credential-access/gaming/minecraft::minecraft-session-token-access", "atk": "T1528", "mbc": "B0006", "conf": 0.96, "crit": 4, "desc": "Minecraft session token and UUID access", "uses": [ 21, 26, 30 ], "spans": [ [ 2015, 23 ], [ 2152, 23 ], [ 2181, 35 ], [ 2205, 35 ], [ 2229, 36 ] ] }, { "id": "objectives/credential-access/gaming/minecraft::minecraft-token-child-process-stage", "atk": "T1528, T1059", "mbc": "B0006", "conf": 0.99, "crit": 5, "desc": "Minecraft token access alongside redirected child launch", "uses": [ 3, 28, 29, 31 ], "spans": [ [ 327, 31 ], [ 836, 30 ], [ 2015, 23 ], [ 2152, 23 ], [ 2181, 35 ], [ 2205, 35 ], [ 2229, 36 ], [ 3358, 39 ] ] }, { "id": "micro-behaviors/process/create/spawn::child-process-creation-api", "atk": "T1106", "conf": 0.92, "crit": 3, "desc": "Starts a child process through a platform API", "uses": [ 28 ], "spans": [ [ 327, 31 ], [ 836, 30 ] ] } ], "type": "java_class" }, { "id": 14, "mol": "O₂(As₂Er)H₄(CmDb₂FPo₄)", "sha": "ea5ab0aee98e75e26c9849eb1aa48cb8ab00955a7682f15be8e000a054348df2", "path": "krypton-1.21.11.jar!!com/github/valBohbsb.class", "risk": 9, "size": 14294, "type": "java_class", "depth": 1 }, { "id": 15, "mol": "O₂(AlAs₂)H₄(Db₄F₂Po₂Ti)", "sha": "920af246e7532859b6ea383e4d5190758f43dd94c612caa84a620e9a3a7f1077", "path": "krypton-1.21.11.jar!!com/github/awtxfa.class", "risk": 11, "size": 143893, "type": "java_class", "depth": 1 }, { "id": 18, "mol": "H(Cm)", "sha": "1b556ab2eb8b67bb1ac4ff55ba96362d128a78dbf717cc6e9af8685f4b33a1b4", "path": "krypton-1.21.11.jar!!com/github/jLGRYxy$duH.class", "risk": 2, "size": 1248, "type": "java_class", "depth": 1 }, { "ctx": [ { "b": "+kO#^0000+1aZEM5[t\u0026%fk20vxMW=qyd}b}s:kh%009925nCS%vj#C9zF7Q#vRPE:Bo.^F0rr)Bz/4dux([3hvLqE\u0026m]AGmC{D{yncYa#0rsMUz/4dux([3hvLqE\u0026m]AGmC{Eh", "ln": 0 }, { "b": "x\u003c\u003eBSCY4OAz^Ni%w{E\u0026)Duf8!awuJUC42RGzE)]yB8#dJq=uv*z!0M]BvGXGBz(hBi@]r=jzwXEBuPZ911kQ03\u0026?\u003cVe^.NY051uM4qPxjB9xz}qFpnRh^VN=6IJ1Pz7/KoBzb/afksfJqDXl\u0026i@]r-xjVe=06I-7ygho]fkL6mxd)h9A+PA7j1i\u003ckz/4dux([3hvLqE\u0026m]AGmC{EMxmR2}Lv}FqADsR5gp*[cSD0@=n0269QC404rz.BWTmr\u0026rNAcb/jzu*e00r", "ln": 668 }, { "b": "v@=c?By+EMa$cc1vrM6jy*?i]fh($kx(mMBdnjF+C404wwPPO9qB@}U0fmbw3il7^KPtB=Bz\u003eeSoAtb8c[d\u00268vrM6jzE)]yrz(HL3\u0026(E\u003eLNmzJ0f)M+3#fi]vj#IfBt3S(oA$M:0rrvqwPQEYB94A.6EUz7ygho]fkL6mxd)h9A+PA7i$8aS0gBk{M\u0026JPR00^dFBwM)@Bo8vzc[dZ@0g:aY3ilB[P8!{1xjVfYA=l5rv@De(0hfyY3ilB[Q5+lI4c:{J[4kETZmBV1UiyZ$(.fA!Hu$Fa\u003c:-Y:FD", "ln": 2547 }, { "b": "fkL6mxd)h9A+PA7luN0UwmY^y3\u0026)%vZ6T\u003eL0kwKm8ru\u003cB\u003cD3n3W5@tAMf%N5\u003eA@46XQ@!fPA+-5.2TJwBz\u003e91A+PA73\u0026[fBNHf5b0k[)r1:KK0nOd#6cmzM5vrM6jy*?i]fh($kx(mMBdnjF+C404uvqYZhq/)4]zF83t0lb2V3igbc:n(nKygho]fk+uyfh(!0yH}O)0lLSG+k:f$00\u0026M80rr*PwPQ*Yv}xv$wKpJKw[u0Yx)Ks\u003e00BYwdol\u0026S=h=e$0lUw?0rs3MvrM6jzE)]ynP59Yq/ueYwPQjGwo8m5A%zY[0rr(-oLO0Vvj#C9zF7R3BAh8kxfeWlrTX%W0mRtQ^/v]b03?K/2(\u003e2b/8U\u003cRv@Dm5wN//.030yXygho]fk+uyfh(!0yH}PNwmPZ(B8%Amdol\u0026S/-o.k0lUw%3\u0026?NNaQFbI0nNUQ40c04q/tSHzdNTdBpnfb0m7#L+k*De04O422(\u003e2b\u0026Sf32ygho]CRr@CBt4YRy+FZ=oJb\u003etyH}PSvpKy$A^m(\u0026\u003cn/k?v@=c?By!x?v@2T$0rt8coLO0Vvj#IfBt3Nhv@2T$j4%x$C404uvqYZhq/)4]zF845s$9cWvrM6jzE)]yq/ueYwPQ0x0oKpA3ioe/\u003eM7V1ygho]CRr@CBt4YRy+FZ=oJb\u003etyH}O)0o%N+5nbM@q=uv^vrb^[wPRH7A@=m.c[d\u00268vrM77fk+uyflqhJfh\u003e!yp*[xMzdN*2A=TqJ0pfZM3iow()G0q9ygho]CRr@CBt4YRy+FZZnL0=vBwul", "ln": 3038 }, { "b": "j1i\u003crvrM6jB-.tlfhc83Buo)h{w\u003c%@0qlA*0rs6NvrM77fk+uyflqhJfh\u003e!yp*[xMzdN*2A=RD=}VcWbB7GC(wPz%9A.Z4WwPE\u003eL6duK?vrM6jB-.tlfhc83Bup{L3\u0026{ka@T5V60ri619%HUZU\u0026.WU\u003e8Ma{RjW4TVeQUJ\u003ea/PKKf)@yKlS%z2MT@b03VF}Bvy7TAbPDdBv*1OzGGP8x\u003e7N[x(v(Py?EWbx([393\u0026{Cg[^kx{0r-A65ozA8q=uv^vrb^[wPRH7A@=m-c}[w:C42RGzE)]yB8#dJq=uv^vrb^[wPRH7B2$*K3\u0026{Lk2mpE%0se!ME%KiVBzT:t0%V8R^G6sTB97\u0026hBvY?TwohA)yH)[P4fe0/0p6T}0rrTywPQZ\u003cBz#wAq/)4\u003evqM2B7:{?bygho]fkktTpJZ+#B-ZM7A+eV@i$8c30tbUs+k\u0026jR01JTMBv*v?B-ZM7A+eV@0rr]:dnjF+C404rz.BX1Acln3BAg@3z95db6AF{Q0lUxU0rr#x(4MqaJI(iBMG:M{\u0026*3UdX$OO}XAOZc2MU+y00S", "ln": 3746 }, { "b": "H5?n@2\u003e1WE)5^kCSi+]!KkWpN)7v#fVXEONY6=LP)5=#/0F*:R3q1e(uPp25iBsGH0G3]42)2eHIVA!YCxdztwDq=mc%G1!rTY1*0GEG/bMS@b00M$JB-Rj80G^vm3iqyMK]UK(BX2Ilp=z\u0026Wp!%2YvGuD]c}[w:C404rz.BX1Acln3BAg@3z96guv@Diqxk8E3BZ^1soH?#-CZgMTvN:)pCW\u003etSw{O0dx\u00265kNzH2UL3\u0026#N[L)NG)0Hr-^1.hv!B7C:XM\u0026F-C0lUzh0rr^FvrM6jy*?i]fh#R9z*bS0y?i?LN/JH0uUqiauTC/:Cx#UNrC.:p8ba^NC42RGzE)]yB8#dJq=uv*z!0M]BuoH66kRVenNB[\u0026zG/Dkt61*[p*[Vz0rsclygho]CRr@CBt4YRy+FZ=oI/ervqPN$wPz\u0026N0rrsIAyj}=x-OhCoLO0Vvj#IfBt3Nhv@2T$i@]r-A7q[?00WyXB7o9f0rr\u003cdygho]flIwJy+FH\u003eA3N\u003e\u0026BAhT*0rryIxgWb?v%i4%02wmyvrM6jx(tU2B-.OBBw)p4wNPBq0rrQwD2k]\u003eD3hU)A=2O-yYKIJoLO0Vvj#tkfg*52B-ZM7A+eV@i@]r{Dt#zLuWllOq#", "ln": 6331 }, { "b": "wmYuN00)BSxL.)7AX)^%3u6:7CUJg1wnMe:00^1xA7K}VzVG?xAC/M0xl:HT3#P\u003c1v}!RYpIs=\u003cv/VMtoLO0Vvj#IfBt3S(oGJmP2XF0$zE=N=ASDdMzGoVkqeyw\u003evRFquyH}Y-Bzp*R2uJ\u0026WfM*eE0rrmEl1sy901iHHsXpR{t3\u003e2.uJycuwjx-(uS?XKo\u003c.1ynOhsIs8A3W00Nvjq+Y*:00l\u003eL0rsiRvrM6jy*?i]fhuUbvR6NHz/PY6BvyB:wPd", "ln": 6904 }, { "b": "z.BC1w[CQ{wN[wIAcln3BAg@3z3H9Y0rr@+oLO0Vvj#tkfg*52B-ZM7A+eV@j1jhs04!k)3iwfF:PhwZygho]fkktTlv0V:l2}0OC#5N8Acln3BAg@3z3H9+3iwuJf984QA+eV\u00263\u003c1SNO^CIs0NzePJr4oi0N7O(0rrmzx)Kt00N?4u3iwuK!bYKSBz\u003cG\u003eBy^:UA::j]00BY0ts5-0!=Bwf0N7O%0rs-2oLO0Vvj#Ijz.CQlvrcB2Bt30{vrcB2Bup{Bygho]fkL6mxd)h9A+PA7i$8bb0ON\u003eY+MlD002kXaV6TQaZqM\u0026mP@Ej-IsmZB\u003e7OP%0O)+R1-[T0x(\u003cvQcN.V6vrM6jy*?i]fh($kx(mMBdo/FXvrM6jy*?i]f8", "ln": 7151 }, { "b": "uT^!)0rrTMzEl\u003c@CXIqyuWcZ2w[p#y6)jLoxk?-Ovrlm7xhinYv}odFvR(bC15-]y0rsinygho]fkktTlv0V:l2}0OC#5N8Acln3BAg@3z94:#32aPTC20i%ABY7I4P#txnL?oBmQYUswjPq[00WEPw]\u00266m0rrynACG/aw]qU\u003c03a:FvrM6jx(tT\u003eB.kk%A+e=MzG6-uq/)4\u003evqO7b00^jWwO\u003ev*z2\u003cRwx(MN2wj7Uz010:QA+w%9qE%Cv02fY)vTh]ZvQTa?nb", "ln": 8525 }, { "b": "zE[6ml3u(w010NQw]?K9o\u003e!FEWdRt{1POJ506C^)P-\u003ez@0000005jVS%nSbbUQmZ0Yg%{]0#q.:\u0026Sf2@ygho]fkktTl$7gCpJZ+#B-ZM7A+eV@2lH$c02WgUygho]fkktTpJZ+#B-ZM7A+eV@j1jhs04!nP3iEshUk[RezEEB3rb3hX3\u003c9WnIWxF(0\u003cR$f000000rr61019{\u003cx()]+xM4{k3\u003c9\u003cq=K6-Q0\u003eegg90+\u0026bO9vq/\u0026H#R2GT6%RN^3(!)U3qXRNL/$Qx*}i0rrBIA+PSblv0V:3\u003ca3v=K6-Q0\u003eXKl3u{J8By^^:By/I40\u003e[W93iEshZx1rMygho]fkL6mxd)e9zGGPfwKQ\u0026NwPh:9z/b^Y.2TJMc}[w:C404uvqYZhra{q\u003cCvs@%wJItw3\u0026?\u003cX.WlEZ0(L9t6iGJ?lTK+dlS^YuwlACIlVlTK0rrvBwOaIQwO?CF0Af101zH[ByYKIJoLO0Vvj#tkfg!@dCW\u003er7BzkVhi@]r{ACGn=uS7ABv/", "ln": 9649 }, { "b": "vrM6jB-.tlfg68*wI#v\u003cmq=QNwmY^y3\u003cb8-*6N/{0]0.Q4ThSexM53np*))Bx(mL(0]i}i3ig.v?t)P^wO#0@wmX.Uq/)4]zF6vV?#XVv022B)0rt[7)v5%LLJXdb\u0026I0%ARN\u003e\u0026\u003cN=*P3\u003eDY\u003c8R[RtBNC+lm)wvwWNXW)h\u003e-yUWPPn3eM/LlG\u003eCCYJV.MVWJot.:\u0026i63CR\u003c3IqRnP4\u003cK^VKS\u0026@Gb$\u003eyY[@JE{MfS]*TU\u003eyP.[Jec/iZuh=n1pb7\u003c0rs.Q\u0026i[N4X#-=K\u003ccM$gNsKk7TkHQ%-dE1", "ln": 10206 }, { "b": "B7CEcfX{BD000003MOUx1POJ500000v*8\u0026j002)5?-g(u%nSbpBl5I*00000lLo2/0rr^FvrM6jzFs2xlv0V:luM)LwPw1T5DI\u003emCxdbh0rr#=ts6=jygho]fk+Gxfg6@awKpJKw[u0A3\u003cddB6BB{P0#g?p2XNZ\u003cq!Q8\u0026Bo8vzc[e760#z4R3iH[y83o\u003csFb/VK0rr6100^jFv%pEToAtbgc}[w:C404wx(tT\u003eD30Q:B.kk%AYUZJ3\u003cdHL9TR", "ln": 11072 }, { "b": "v}tVve*%zdvrM6jy*?i]fh($kx(mMBdnjF+C42RGzE)]yB8#dJq=uvSz/fVdCYV1Q178dr3iKPpvf3uDygho]CRr@CBt4YRy+F+dB-RU0vqYH^wPw1Tv*Shu051uM8FSY7vj#Xkv%8*aBA]JrwN/\u003e6wL#@Own=q\u002617?(xx8\u003cN=00E1Nx(\u003cvQs14oDygho]CRr@CBt4YRy+FB)C$?Z+vp%d(j6Lx[vrM77fk+uyflqhJfh#$mB97b+zEEf?AYV%fvrM6jB7F\u003c7A+PSvfh(B(B-I4\u003evqYQ]z96gE3\u003cghCy6\u003e5H18v]q5nbM@q/ueYwPQyIv@#TfC(W)?c[d\u00268vrM77fk+uyflqhJfh\u003e!yq/ueYwPQyIv@#R", "ln": 12132 }, { "b": "1R?ig01x!G0#h0F0ROLS83EwFW3Z)#RVp#W1HXve5d(tMrw\u003e3@2atI@RVpoy2d$j52lM\u003c\u002669qh)3kA)Y0-\u003c]w01PV6JY4jV3j}V1hvpf86:yxjb}o=q6:LJU6:OuU0S", "ln": 30838 } ], "depth": 1, "facts": { "imp": [ [ "", "java/net/URL" ], [ "", "com/github/jLGRYxy$lhdei_ob_rzyhnx_blpjiy" ], [ "", "java/lang/Throwable" ], [ "", "javax/net/ssl/SSLContext" ], [ "", "java/util/Map$Entry" ], [ "", "java/nio/charset/StandardCharsets" ], [ "", "java/lang/StringBuilder" ], [ "", "java/nio/ByteBuffer" ], [ "", "[B" ], [ "", "java/io/ByteArrayOutputStream" ], [ "", "java/util/LinkedHashMap" ], [ "", "java/lang/Integer" ], [ "", "[C" ], [ "", "java/lang/Object" ], [ "", "java/util/Base64$Encoder" ], [ "", "java/lang/RuntimeException" ], [ "", "java/io/InputStream" ], [ "", "java/util/Base64" ], [ "", "java/lang/invoke/MethodHandles$Lookup" ], [ "", "java/io/IOException" ], [ "", "java/net/Socket" ], [ "", "java/util/Set" ], [ "", "javax/net/ssl/SSLSocket" ], [ "", "java/security/SecureRandom" ], [ "", "com/github/jLGRYxy$duH" ], [ "", "java/util/Map" ], [ "", "java/lang/Exception" ], [ "", "com/github/jLGRYxy$vbFdaxcfIfzdriPaknya" ], [ "", "java/lang/String" ], [ "", "javax/net/ssl/SNIHostName" ], [ "", "javax/net/ssl/SSLParameters" ], [ "", "java/lang/invoke/MethodHandles" ], [ "", "java/io/OutputStream" ], [ "", "java/util/concurrent/ConcurrentHashMap" ], [ "", "java/io/DataOutputStream" ], [ "", "[Ljava/lang/String;" ], [ "", "java/io/BufferedInputStream" ], [ "", "java/util/List" ], [ "", "javax/net/ssl/SSLSocketFactory" ], [ "", "javax/net/ssl/TrustManager" ], [ "", "java/lang/System" ], [ "", "java/net/InetSocketAddress" ], [ "", "java/net/URI" ], [ "", "java/util/Iterator" ], [ "", "java/lang/NumberFormatException" ], [ "com/github/jLGRYxy", "com/github/jLGRYxy.MrLvel8" ], [ "com/github/jLGRYxy", "MrLvel8" ], [ "java/io/DataOutputStream", "java/io/DataOutputStream.\u003cinit\u003e" ], [ "java/io/DataOutputStream", "\u003cinit\u003e" ], [ "java/util/Map$Entry", "java/util/Map$Entry.getValue" ], [ "java/util/Map$Entry", "getValue" ], [ "com/github/jLGRYxy", "com/github/jLGRYxy.procGuwqav" ], [ "com/github/jLGRYxy", "procGuwqav" ], [ "java/util/Base64$Encoder", "java/util/Base64$Encoder.encodeToString" ], [ "java/util/Base64$Encoder", "encodeToString" ], [ "java/io/BufferedInputStream", "java/io/BufferedInputStream.read" ], [ "java/io/BufferedInputStream", "read" ], [ "java/io/ByteArrayOutputStream", "java/io/ByteArrayOutputStream.\u003cinit\u003e" ], [ "java/io/ByteArrayOutputStream", "\u003cinit\u003e" ], [ "com/github/jLGRYxy", "com/github/jLGRYxy.XWYfFPzON" ], [ "com/github/jLGRYxy", "XWYfFPzON" ], [ "java/lang/String", "java/lang/String.charAt" ], [ "java/lang/String", "charAt" ], [ "com/github/jLGRYxy", "com/github/jLGRYxy.yauIf" ], [ "com/github/jLGRYxy", "yauIf" ], [ "com/github/jLGRYxy", "com/github/jLGRYxy.yX_nHI__U" ], [ "com/github/jLGRYxy", "yX_nHI__U" ], [ "java/nio/ByteBuffer", "java/nio/ByteBuffer.get" ], [ "java/nio/ByteBuffer", "get" ], [ "java/util/Base64", "java/util/Base64.getUrlEncoder" ], [ "java/util/Base64", "getUrlEncoder" ], [ "java/lang/String", "java/lang/String.getBytes" ], [ "java/lang/String", "getBytes" ], [ "java/lang/String", "java/lang/String.trim" ], [ "java/lang/String", "trim" ], [ "java/util/Base64$Encoder", "java/util/Base64$Encoder.withoutPadding" ], [ "java/util/Base64$Encoder", "withoutPadding" ], [ "java/io/ByteArrayOutputStream", "java/io/ByteArrayOutputStream.toString" ], [ "java/io/ByteArrayOutputStream", "toString" ], [ "java/lang/System", "java/lang/System.arraycopy" ], [ "java/lang/System", "arraycopy" ], [ "java/io/BufferedInputStream", "java/io/BufferedInputStream.read" ], [ "java/io/BufferedInputStream", "read" ], [ "java/util/Map", "java/util/Map.entrySet" ], [ "java/util/Map", "entrySet" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.toString" ], [ "java/lang/StringBuilder", "toString" ], [ "java/nio/ByteBuffer", "java/nio/ByteBuffer.wrap" ], [ "java/nio/ByteBuffer", "wrap" ], [ "com/github/jLGRYxy", "com/github/jLGRYxy.fxunFnepfqp" ], [ "com/github/jLGRYxy", "fxunFnepfqp" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.\u003cinit\u003e" ], [ "java/lang/StringBuilder", "\u003cinit\u003e" ], [ "com/github/jLGRYxy$duH", "com/github/jLGRYxy$duH.\u003cinit\u003e" ], [ "com/github/jLGRYxy$duH", "\u003cinit\u003e" ], [ "com/github/jLGRYxy", "com/github/jLGRYxy.ivy_oyps_wvtq" ], [ "com/github/jLGRYxy", "ivy_oyps_wvtq" ], [ "java/util/Iterator", "java/util/Iterator.next" ], [ "java/util/Iterator", "next" ], [ "com/github/jLGRYxy", "com/github/jLGRYxy.hGyquwsvsc" ], [ "com/github/jLGRYxy", "hGyquwsvsc" ], [ "javax/net/ssl/SSLSocketFactory", "javax/net/ssl/SSLSocketFactory.createSocket" ], [ "javax/net/ssl/SSLSocketFactory", "createSocket" ], [ "java/lang/String", "java/lang/String.split" ], [ "java/lang/String", "split" ], [ "java/io/BufferedInputStream", "java/io/BufferedInputStream.read" ], [ "java/io/BufferedInputStream", "read" ], [ "java/util/Set", "java/util/Set.iterator" ], [ "java/util/Set", "iterator" ], [ "com/github/jLGRYxy", "com/github/jLGRYxy.afulcWycp" ], [ "com/github/jLGRYxy", "afulcWycp" ], [ "com/github/jLGRYxy", "com/github/jLGRYxy.cnYeQzyj" ], [ "com/github/jLGRYxy", "cnYeQzyj" ], [ "java/nio/ByteBuffer", "java/nio/ByteBuffer.hasRemaining" ], [ "java/nio/ByteBuffer", "hasRemaining" ], [ "java/util/concurrent/ConcurrentHashMap", "java/util/concurrent/ConcurrentHashMap.\u003cinit\u003e" ], [ "java/util/concurrent/ConcurrentHashMap", "\u003cinit\u003e" ], [ "javax/net/ssl/SSLContext", "javax/net/ssl/SSLContext.getInstance" ], [ "javax/net/ssl/SSLContext", "getInstance" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.append" ], [ "java/lang/StringBuilder", "append" ], [ "java/net/URI", "java/net/URI.create" ], [ "java/net/URI", "create" ], [ "java/util/Map$Entry", "java/util/Map$Entry.getKey" ], [ "java/util/Map$Entry", "getKey" ], [ "com/github/jLGRYxy$lhdei_ob_rzyhnx_blpjiy", "com/github/jLGRYxy$lhdei_ob_rzyhnx_blpjiy.isExpired" ], [ "com/github/jLGRYxy$lhdei_ob_rzyhnx_blpjiy", "isExpired" ], [ "javax/net/ssl/SSLContext", "javax/net/ssl/SSLContext.init" ], [ "javax/net/ssl/SSLContext", "init" ], [ "java/lang/String", "java/lang/String.indexOf" ], [ "java/lang/String", "indexOf" ], [ "java/lang/String", "java/lang/String.contains" ], [ "java/lang/String", "contains" ], [ "com/github/jLGRYxy", "com/github/jLGRYxy.WcQZUOBC" ], [ "com/github/jLGRYxy", "WcQZUOBC" ], [ "java/net/Socket", "java/net/Socket.getInputStream" ], [ "java/net/Socket", "getInputStream" ], [ "java/nio/charset/StandardCharsets", "java/nio/charset/StandardCharsets.UTF_8" ], [ "java/nio/charset/StandardCharsets", "UTF_8" ], [ "com/github/jLGRYxy$vbFdaxcfIfzdriPaknya", "com/github/jLGRYxy$vbFdaxcfIfzdriPaknya.body" ], [ "com/github/jLGRYxy$vbFdaxcfIfzdriPaknya", "body" ], [ "java/util/Iterator", "java/util/Iterator.hasNext" ], [ "java/util/Iterator", "hasNext" ], [ "java/net/Socket", "java/net/Socket.close" ], [ "java/net/Socket", "close" ], [ "java/lang/Integer", "java/lang/Integer.parseInt" ], [ "java/lang/Integer", "parseInt" ], [ "com/github/jLGRYxy", "com/github/jLGRYxy.kwSx" ], [ "com/github/jLGRYxy", "kwSx" ], [ "java/net/Socket", "java/net/Socket.setReceiveBufferSize" ], [ "java/net/Socket", "setReceiveBufferSize" ], [ "com/github/jLGRYxy", "com/github/jLGRYxy.Qp8Vw" ], [ "com/github/jLGRYxy", "Qp8Vw" ], [ "java/net/Socket", "java/net/Socket.\u003cinit\u003e" ], [ "java/net/Socket", "\u003cinit\u003e" ], [ "java/io/ByteArrayOutputStream", "java/io/ByteArrayOutputStream.size" ], [ "java/io/ByteArrayOutputStream", "size" ], [ "java/lang/Object", "java/lang/Object.\u003cinit\u003e" ], [ "java/lang/Object", "\u003cinit\u003e" ], [ "com/github/jLGRYxy$lhdei_ob_rzyhnx_blpjiy", "com/github/jLGRYxy$lhdei_ob_rzyhnx_blpjiy.ip" ], [ "com/github/jLGRYxy$lhdei_ob_rzyhnx_blpjiy", "ip" ], [ "java/nio/ByteBuffer", "java/nio/ByteBuffer.position" ], [ "java/nio/ByteBuffer", "position" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.\u003cinit\u003e" ], [ "java/lang/StringBuilder", "\u003cinit\u003e" ], [ "com/github/jLGRYxy$vbFdaxcfIfzdriPaknya", "com/github/jLGRYxy$vbFdaxcfIfzdriPaknya.\u003cinit\u003e" ], [ "com/github/jLGRYxy$vbFdaxcfIfzdriPaknya", "\u003cinit\u003e" ], [ "javax/net/ssl/SNIHostName", "javax/net/ssl/SNIHostName.\u003cinit\u003e" ], [ "javax/net/ssl/SNIHostName", "\u003cinit\u003e" ], [ "java/lang/String", "java/lang/String.\u003cinit\u003e" ], [ "java/lang/String", "\u003cinit\u003e" ], [ "java/lang/String", "java/lang/String.equals" ], [ "java/lang/String", "equals" ], [ "java/lang/String", "java/lang/String.length" ], [ "java/lang/String", "length" ], [ "javax/net/ssl/SSLContext", "javax/net/ssl/SSLContext.getSocketFactory" ], [ "javax/net/ssl/SSLContext", "getSocketFactory" ], [ "java/nio/ByteBuffer", "java/nio/ByteBuffer.position" ], [ "java/nio/ByteBuffer", "position" ], [ "java/io/BufferedInputStream", "java/io/BufferedInputStream.\u003cinit\u003e" ], [ "java/io/BufferedInputStream", "\u003cinit\u003e" ], [ "java/lang/String", "java/lang/String.toCharArray" ], [ "java/lang/String", "toCharArray" ], [ "java/io/DataOutputStream", "java/io/DataOutputStream.writeShort" ], [ "java/io/DataOutputStream", "writeShort" ], [ "java/io/OutputStream", "java/io/OutputStream.flush" ], [ "java/io/OutputStream", "flush" ], [ "java/io/InputStream", "java/io/InputStream.read" ], [ "java/io/InputStream", "read" ], [ "java/lang/String", "java/lang/String.equalsIgnoreCase" ], [ "java/lang/String", "equalsIgnoreCase" ], [ "com/github/jLGRYxy", "com/github/jLGRYxy.nXjhochsj" ], [ "com/github/jLGRYxy", "nXjhochsj" ], [ "com/github/jLGRYxy", "com/github/jLGRYxy.pKbycpmjer" ], [ "com/github/jLGRYxy", "pKbycpmjer" ], [ "java/lang/System", "java/lang/System.currentTimeMillis" ], [ "java/lang/System", "currentTimeMillis" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.setLength" ], [ "java/lang/StringBuilder", "setLength" ], [ "java/net/URL", "java/net/URL.getQuery" ], [ "java/net/URL", "getQuery" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.append" ], [ "java/lang/StringBuilder", "append" ], [ "java/lang/String", "java/lang/String.toLowerCase" ], [ "java/lang/String", "toLowerCase" ], [ "java/lang/String", "java/lang/String.substring" ], [ "java/lang/String", "substring" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.append" ], [ "java/lang/StringBuilder", "append" ], [ "java/util/Map", "java/util/Map.put" ], [ "java/util/Map", "put" ], [ "javax/net/ssl/SSLSocket", "javax/net/ssl/SSLSocket.getInputStream" ], [ "javax/net/ssl/SSLSocket", "getInputStream" ], [ "java/net/URL", "java/net/URL.getProtocol" ], [ "java/net/URL", "getProtocol" ], [ "java/nio/ByteBuffer", "java/nio/ByteBuffer.get" ], [ "java/nio/ByteBuffer", "get" ], [ "java/lang/String", "java/lang/String.startsWith" ], [ "java/lang/String", "startsWith" ], [ "java/io/ByteArrayOutputStream", "java/io/ByteArrayOutputStream.\u003cinit\u003e" ], [ "java/io/ByteArrayOutputStream", "\u003cinit\u003e" ], [ "java/net/URL", "java/net/URL.getPort" ], [ "java/net/URL", "getPort" ], [ "com/github/jLGRYxy", "com/github/jLGRYxy.uHUWP7bPPO7eb" ], [ "com/github/jLGRYxy", "uHUWP7bPPO7eb" ], [ "com/github/jLGRYxy$lhdei_ob_rzyhnx_blpjiy", "com/github/jLGRYxy$lhdei_ob_rzyhnx_blpjiy.\u003cinit\u003e" ], [ "com/github/jLGRYxy$lhdei_ob_rzyhnx_blpjiy", "\u003cinit\u003e" ], [ "java/net/URL", "java/net/URL.getHost" ], [ "java/net/URL", "getHost" ], [ "java/util/List", "java/util/List.of" ], [ "java/util/List", "of" ], [ "java/nio/ByteBuffer", "java/nio/ByteBuffer.getInt" ], [ "java/nio/ByteBuffer", "getInt" ], [ "java/io/DataOutputStream", "java/io/DataOutputStream.writeByte" ], [ "java/io/DataOutputStream", "writeByte" ], [ "javax/net/ssl/SSLSocket", "javax/net/ssl/SSLSocket.getOutputStream" ], [ "javax/net/ssl/SSLSocket", "getOutputStream" ], [ "javax/net/ssl/SSLParameters", "javax/net/ssl/SSLParameters.setServerNames" ], [ "javax/net/ssl/SSLParameters", "setServerNames" ], [ "com/github/jLGRYxy", "com/github/jLGRYxy.avv" ], [ "com/github/jLGRYxy", "avv" ], [ "java/io/DataOutputStream", "java/io/DataOutputStream.writeBytes" ], [ "java/io/DataOutputStream", "writeBytes" ], [ "javax/net/ssl/SSLSocket", "javax/net/ssl/SSLSocket.startHandshake" ], [ "javax/net/ssl/SSLSocket", "startHandshake" ], [ "java/net/Socket", "java/net/Socket.getOutputStream" ], [ "java/net/Socket", "getOutputStream" ], [ "java/util/LinkedHashMap", "java/util/LinkedHashMap.\u003cinit\u003e" ], [ "java/util/LinkedHashMap", "\u003cinit\u003e" ], [ "java/io/InputStream", "java/io/InputStream.read" ], [ "java/io/InputStream", "read" ], [ "java/net/Socket", "java/net/Socket.connect" ], [ "java/net/Socket", "connect" ], [ "java/net/Socket", "java/net/Socket.setSoTimeout" ], [ "java/net/Socket", "setSoTimeout" ], [ "javax/net/ssl/SSLParameters", "javax/net/ssl/SSLParameters.setEndpointIdentificationAlgorithm" ], [ "javax/net/ssl/SSLParameters", "setEndpointIdentificationAlgorithm" ], [ "java/io/ByteArrayOutputStream", "java/io/ByteArrayOutputStream.write" ], [ "java/io/ByteArrayOutputStream", "write" ], [ "java/net/InetSocketAddress", "java/net/InetSocketAddress.\u003cinit\u003e" ], [ "java/net/InetSocketAddress", "\u003cinit\u003e" ], [ "java/lang/String", "java/lang/String.isEmpty" ], [ "java/lang/String", "isEmpty" ], [ "java/lang/Integer", "java/lang/Integer.parseInt" ], [ "java/lang/Integer", "parseInt" ], [ "java/nio/charset/StandardCharsets", "java/nio/charset/StandardCharsets.ISO_8859_1" ], [ "java/nio/charset/StandardCharsets", "ISO_8859_1" ], [ "java/io/OutputStream", "java/io/OutputStream.write" ], [ "java/io/OutputStream", "write" ], [ "com/github/jLGRYxy", "com/github/jLGRYxy.biaa_xnsto_iofyb_zs" ], [ "com/github/jLGRYxy", "biaa_xnsto_iofyb_zs" ], [ "java/lang/System", "java/lang/System.nanoTime" ], [ "java/lang/System", "nanoTime" ], [ "java/lang/RuntimeException", "java/lang/RuntimeException.\u003cinit\u003e" ], [ "java/lang/RuntimeException", "\u003cinit\u003e" ], [ "javax/net/ssl/SSLSocket", "javax/net/ssl/SSLSocket.close" ], [ "javax/net/ssl/SSLSocket", "close" ], [ "java/security/SecureRandom", "java/security/SecureRandom.\u003cinit\u003e" ], [ "java/security/SecureRandom", "\u003cinit\u003e" ], [ "com/github/jLGRYxy", "com/github/jLGRYxy.iccwHiL" ], [ "com/github/jLGRYxy", "iccwHiL" ], [ "java/io/ByteArrayOutputStream", "java/io/ByteArrayOutputStream.write" ], [ "java/io/ByteArrayOutputStream", "write" ], [ "java/net/URI", "java/net/URI.toURL" ], [ "java/net/URI", "toURL" ], [ "javax/net/ssl/SSLSocket", "javax/net/ssl/SSLSocket.setSSLParameters" ], [ "javax/net/ssl/SSLSocket", "setSSLParameters" ], [ "java/util/Map", "java/util/Map.get" ], [ "java/util/Map", "get" ], [ "javax/net/ssl/SSLSocketFactory", "javax/net/ssl/SSLSocketFactory.getDefault" ], [ "javax/net/ssl/SSLSocketFactory", "getDefault" ], [ "java/lang/String", "java/lang/String.substring" ], [ "java/lang/String", "substring" ], [ "java/nio/ByteBuffer", "java/nio/ByteBuffer.getShort" ], [ "java/nio/ByteBuffer", "getShort" ], [ "java/lang/String", "java/lang/String.indexOf" ], [ "java/lang/String", "indexOf" ], [ "javax/net/ssl/SSLSocket", "javax/net/ssl/SSLSocket.getSSLParameters" ], [ "javax/net/ssl/SSLSocket", "getSSLParameters" ], [ "java/io/ByteArrayOutputStream", "java/io/ByteArrayOutputStream.toByteArray" ], [ "java/io/ByteArrayOutputStream", "toByteArray" ], [ "java/net/URL", "java/net/URL.getPath" ], [ "java/net/URL", "getPath" ] ], "metrics": { "file": { "size": 37632, "entropy": 5.76 }, "class": { "major_version": 65, "interface_count": 0, "method_ref_count": 129, "constant_pool_size": 897, "external_class_count": 45 }, "binary": { "peak_region_bytes": 5120, "peak_region_entropy": 6.98 }, "imports": { "count": 174 }, "functions": { "count": 16 } } }, "id": 19, "mol": "O(As)H₄(Cm₅Db₃OsPo₂)", "path": "krypton-1.21.11.jar!!com/github/jLGRYxy.class", "pid": 0, "risk": 9, "sha": "7a4dc57e32329cd63704cb5efab293c1363da6f3dae74707a7332916e0e363df", "size": 37632, "traits": [ { "id": "micro-behaviors/communications/http/lib/urlconnection::java-url-class-bytecode", "atk": "T1071.001", "mbc": "C0002", "conf": 0.86, "crit": 3, "desc": "Java URL class reference", "spans": [ [ 2611, 16 ], [ 2640, 12 ], [ 6968, 14 ] ] }, { "id": "micro-behaviors/communications/http/lib/urlconnection::jvm-url-class-ref", "atk": "T1071.001", "mbc": "C0002", "conf": 0.9, "crit": 3, "desc": "JVM URL class reference" }, { "id": "micro-behaviors/communications/proxy/tunnel::byte-output-stream", "atk": "T1090", "mbc": "C0003", "conf": 0.5, "crit": 3, "desc": "Java ByteArrayOutputStream usage", "spans": [ [ 732, 21 ], [ 3110, 21 ], [ 6403, 21 ], [ 7223, 21 ], [ 7290, 21 ], [ 7307, 21 ], [ 8589, 21 ] ] }, { "id": "micro-behaviors/communications/proxy/tunnel::inet-socket-address", "atk": "T1090", "mbc": "C0003", "conf": 0.6, "crit": 3, "desc": "Java InetSocketAddress reference", "spans": [ [ 733, 17 ], [ 3262, 17 ] ] }, { "id": "micro-behaviors/communications/socket/create::java-socket-bytecode-reference", "atk": "T1071", "mbc": "C0001", "conf": 0.86, "crit": 3, "desc": "Java bytecode socket reference", "spans": [ [ 3477, 56 ], [ 6683, 17 ] ] }, { "id": "micro-behaviors/communications/socket/create::java-socket-class-import", "atk": "T1071", "mbc": "C0001", "conf": 0.9, "crit": 3, "desc": "Java imports the network socket class", "spans": [ [ 3182, 15 ] ] }, { "id": "micro-behaviors/communications/socket/create::java-socket-slash-reference", "atk": "T1071", "mbc": "C0001", "conf": 0.9, "crit": 3, "desc": "Java slash-form socket reference", "spans": [ [ 3182, 15 ], [ 3340, 28 ], [ 3477, 56 ], [ 6683, 17 ] ] }, { "id": "micro-behaviors/communications/socket/create::jvm-socket-class-ref", "atk": "T1071", "mbc": "C0001", "conf": 0.9, "crit": 3, "desc": "JVM socket class reference" }, { "id": "micro-behaviors/communications/socket/framing::bytebuffer-transport", "atk": "T1573", "conf": 1.0, "crit": 3, "desc": "Java byte-buffer transport type", "spans": [ [ 11136, 10 ] ] }, { "id": "micro-behaviors/communications/socket/framing::data-stream-transport", "atk": "T1573", "conf": 1.0, "crit": 3, "desc": "Java data-stream transport type", "spans": [ [ 9721, 16 ] ] }, { "id": "micro-behaviors/communications/socket/send::java-dataoutputstream-class", "atk": "T1071", "mbc": "C0001", "conf": 0.9, "crit": 3, "desc": "Java DataOutputStream class reference", "spans": [ [ 9713, 24 ] ] }, { "id": "micro-behaviors/communications/socket/ssl::jvm-sslcontext-trustmanager-init-call", "conf": 0.94, "crit": 3, "desc": "JVM SSLContext.init trust-manager call", "spans": [ [ 12270, 29 ] ] }, { "id": "micro-behaviors/communications/socket/ssl::jvm-sslparameters-set-server-names", "conf": 0.93, "crit": 3, "desc": "JVM sets TLS SNI server name", "spans": [ [ 3810, 42 ] ] }, { "id": "micro-behaviors/communications/socket/ssl::jvm-sslsocket-handshake-call", "conf": 0.94, "crit": 3, "desc": "JVM SSLSocket.startHandshake call", "spans": [ [ 4022, 38 ] ] }, { "id": "micro-behaviors/communications/socket/ssl::jvm-trustmanager-class-ref", "conf": 0.9, "crit": 3, "desc": "JVM TrustManager interface reference", "spans": [ [ 12196, 26 ] ] }, { "id": "micro-behaviors/crypto/library/provider::jvm-security-class-ref", "conf": 0.86, "crit": 2, "desc": "JVM security package reference" }, { "id": "micro-behaviors/data/buffer::bytearrayoutputstream-ref", "conf": 0.88, "crit": 3, "desc": "Java ByteArrayOutputStream class", "spans": [ [ 7215, 29 ] ] }, { "id": "micro-behaviors/data/buffer::jvm-outputstream-write", "conf": 0.96, "crit": 2, "desc": "JVM writes bytes to output stream", "spans": [ [ 6395, 0 ] ] }, { "id": "micro-behaviors/data/encode/base64::jvm-base64-encode-bytecode", "conf": 0.94, "crit": 3, "desc": "JVM Base64 encodeToString call", "spans": [ [ 10270, 39 ] ] }, { "id": "micro-behaviors/data/string/conversion::tostring-token", "conf": 1.0, "crit": 3, "desc": "References the toString conversion method", "spans": [ [ 3102, 8 ] ] }, { "id": "micro-behaviors/os/sysinfo/hostname::jvm-hostname-command-literal", "atk": "T1082", "mbc": "E1082", "conf": 0.9, "crit": 3, "desc": "JVM hostname command literal" }, { "id": "micro-behaviors/process/create/spawn::java-runtime-class", "atk": "T1059", "mbc": "E1203", "conf": 0.86, "crit": 3, "desc": "Java Runtime class reference", "spans": [ [ 9913, 17 ] ] }, { "id": "micro-behaviors/process/info/current::getpath-ref", "conf": 0.8, "crit": 3, "desc": "Java getPath call reference" }, { "id": "objectives/anti-static/obfuscation/string/control-prefix::java-control-prefixed-long-string", "atk": "T1027", "mbc": "F0001", "conf": 0.92, "crit": 3, "desc": "Java string starts with control-length prefix" }, { "id": "micro-behaviors/communications/socket/send::java-raw-socket-client-write", "atk": "T1071", "mbc": "C0001", "conf": 0.94, "crit": 3, "desc": "Java socket client writes request bytes through DataOutputStream", "uses": [ 5, 10, 17 ], "spans": [ [ 3182, 15 ], [ 6395, 26 ], [ 9713, 24 ] ] } ], "type": "java_class" }, { "ctx": [ { "b": "+kO#^0000+0Ma{r6K#5#fk20vxMW=qwQ4=@t4qR)wD@ho0rrWCvrM6jy*?i]fhD4(wN//!00rl4a8UUifj[T4A+P32v\u003eRnfx!Jh0wjZVMBzkf1x)Kuh2lj]d02PDVC404DBzkLAlsB}Dhz=WFzEWP}wPw1Q2ls/oygho]flIwJy+Fa-B7El^2lk5h00+@gv@C)?ASDd-ygho]fkL6mxd)84z!0v1B3+1-y?d9$bVnh:x(W={Bo.^O0rr%KvrM6jy*?i]fhMXcv}x.5luN0UwmY=^01G2f2VtkAx(W={Bo8v/ygho]fkL6mxd)$pC5Iecfhl21xM4ALvqYQ(wPGa\u003cz/oAlA0DvP0rsfQvrM6jy*?i]fkkrEz!\u0026]qo\u003ewAWz!8yEzE^M{A%zWU0rrr$z/oAlz#/}yjzwXEBuPZ911kQ03\u0026?4y7yycB02L.p1.*LIwO?CF7eejRz7/KoBzb/afj/xtv{iw-AaI9i01r^-nP5l:x\u003c\u003e*(DsWhw[=oNfOv)=e1gHrQOc9fnjKjb]F[TxJiNYMU0$L4WDJs9Tygho]fkL6mxd)j$A+eV\u00262ll1X02CUo5{OXEyEzYPolL8\u003csA![9yK6O404d:.3igbcc\u003euEYdffz)ygho]fkL6mxd)$pC5Iecfhb!\u003evQ@[wwPRu)vpKy$A^m(\u0026d//RTzdN/$w)]g\u003ez/Qa70l=\u0026+ygho]fkL6mxd)$pC5Iecfhl21xM4ALvqYQ(wPGa\u003cz/oAlA63:dvrM6jy*?i]fh($kx(mMBoLO0Vvj#A", "ln": 0 }, { "b": "fkL6mxd)e9zF\u0026((y?kWp05sKg5=.[igYWN)c}[w:C404uvqYZhqGV\u003e{vpB4:j1jhs02tL)3ihvLhVS)ZB97\u0026hBpndf02C$xb(/$b00)7MB-8p}vr.!M4ruI%xl)#[C6mq3Du62^cmzM5vrM6jy*?i]fh($kx(mMBdnjF+C404uvqYZhq/)4]zF83i00dcym-s*K0%Ct]r@\u0026pjygho]fkL6mxd)h9A+PA72lm6\u003e000o8l\u0026^o7ygho]fkL6mxd)h9A+PA7luN0UwmY=^07Ep}m/S", "ln": 806 }, { "b": "lJz9b00BYwdol\u0026S765y.07N3h0rs8/lN+YzvrM6jy*?i]fh($kx(mMIB.LV5wPx\u003cv0at\u003eJ3iiM@Cl4WHBz\u003e91A+PA70rr/ZdnjF+C404uvqYZhq/)4]zF83t0c[M\u003c3iiM@DJs9^\u003eEmXNSeG\u0026ETL*7)(zH(FFR@SUR%GT#(.Pap2MPnN03qv5U8znnT(lE\u0026)7Q3?UCZuSQt-tz)7YKUUd@}[R3E6J0rrZDvrM6jy*?i]fg*56wOkN{2loqQ", "ln": 1423 }, { "b": "0rr^FvrM6jy*?i]fgya}wPh:9z/b^WK]]@LZ@csES4LEU01-)NC404uvqYZhq*ACawO?ULMh{%$v%8*jwO#P?x(dAQx(4Q1A@=myc[d:%0gi+O3ily)NGiy8zE)]yze0)0v@=0\u0026Bt4cuvrlG%gCHM*0gT5\u00263VfD%xM4A*f/p*y0rs5!dnjR\u003cBt4GBzE)r#vp\u003cQmv@bN{B6*ZTfGPWyO=Cw\u00260g:a.0rrHAwPRQ7wm45Gg=LHo8Z)dezE)]yze0)0v@=0\u0026Bt4cuvrlG%gCQTC3\u0026)14Qy40(0hGR}7J9/afkUAvwN/:?w]]Xoy*?yauO:C\u003e2lpR401iTPBzbP6uOKC$gZ\u003cw.0d1$LRVrW%01iTPBzbP6uOKC$hvGO^0d1$LRVr!001rZQBzbP6uO\u003cO#f/Gak5?2h5ygho]flIwJy+F^*nKLSG0iMs93il$7UMj.lygho]flIwJy+F^*nKJ^-Vi*Pr0da.D0:wn40jq?c9%xS{(X*.^S\u003cg]ZVb%fmJjOnPOA#]v:/aJ+GxYFf2MRsm01\u0026ZVz7/KoBzb/afjx6DCXgv?0j-ag2v?)zw\u003eNhB3\u0026))tDi%U-0k5sj4qP:7zEND@zBm\u0026xxK}OLZ5SD^0j\u0026fB0rsx.wPPOqvpBm\u003ev@kZey\u0026r-)wPxCjAa{%{vpBm\u003ev[Z/HwmY=^0kOWo3UG", "ln": 1867 }, { "b": "0l$]KX=rMF010pHBvp4:vqfP/0mp^)3imTq^G6sMAb]J4x(W+=07[Ukygho]fkL6mxd)h9A+PA7j4%x$C404uvqYZhq/)4]zF848ygho]fkL6mxd)h9A+PA7j1i\u003crvrM6jy*?i]fh($kx(mMB3\u0026[=S!C", "ln": 2562 }, { "b": "A=U/lfh($3zE^f@wj73sA=U/lA%zZc0rrp6r7pjO0rs3iygho]fk+GxfjOW7A=U/lfgfzYA=U/li$8bM0o\u003c^\u0026\u003ek:=F00)jGBv7m{wPE\u003eL9W\u003cY%vrM6jzFs2xv}Yp\u003eB7GCDlUG[GB7GCPdo/aE0pfZM3iiA[)G0p$wO#0@wmX.Uq/)4]zF5$I7arxNdnjF+C404uvqYZhq/)4]zF83t0pQ0U3igti[=n.B4cKQ])yn[LV.u\u0026zTludv(ZLVRM5$psV*jGO)VsZkTfg=-PY-wE)yFUCWt\u003cTjMK0P-3JOxJDJsau4=Uj2\u003cf%:cO$ULvL\u0026)$o)U3..SKR5GO-$%h\u0026!Bt}RN(eZO-bJU\u003e9rEpFth8kR%o}n)vpVGJF3UMZVhw^\u003c=kq:Ih*IIPZ5CB2MTP108i{NTJ)70W7tC8HVs?N*{=QvRST[y(vU+\u003cP]d%4M*70r(a:yMJ)AmAWvDA+X8S%-?KJ]8JovgO(v\u003ezZQoAWHPY@2a(vs#FRP#QQ0qMS}kND[KNc7o0).l6\u0026Rj(\u003edR0jJ", "ln": 3055 }, { "b": ")#@}1L:P)L\u003e+TKiPnhTpSPGH%\u0026Izv}V9J?.FA\u0026Al^y[+vXD\u0026iW0rrTBvrM6jy*?i]fgfL:B8}M!bMN(UxjVfYA=l5hv@#B6zBwzWvqfPW03S*uoLO0Vvj#Xkv%8*aBA]JoA=l5hv@#B6zBwzWvqfQv3\u0026}WQcKG(20vN%G9+]bbvj#Xkv%8*aBA]JoA=l5hv@#B6zBwzWvqfP:0v!9I4qfl]lVlHDq/u/0v}tVv94imfygho]flpYmB-IhrC}RK6wmXXTB-H#6i$8cv0waSVd/?m602PDVC404BwN/\u003e6x([RNlVlHDq/u/0v}t(CfAzdYxjVfUz!0i$x(v\u003e\u002601ZLcoLO0Vvj#IfBt3S(oGJT-g66fr0wKQi0rrKyvrM6jzE)]yrz(G}0x6@U1:1V.qB{(?5gw#3ygho]fk+uyfi7[wi$8cH0xyF/hVU@u03\u0026%^ygho]fk+uyfi7[wj1i\u003crvrM6jzFs2xw[=6)fhM80xGDR66AHr70l+Eb0rtv\u003e\u003c?DJlG1{ltUKvpf\u003ezD$tGQq7TY6kYY\u003e=o^aZkq9bU\u00268t", "ln": 4416 }, { "b": "c}[w:C404rz.BN]y?kWSoLO0Vvj#C9zF7R0A=kD0B8%V\u003cx(4r\u003eAWjK]wnc6}v@%^v0C8pz3igIox8}#wA+e=}A+e:5nP5G\u0026Bo8wac}[w:C404uvqYZhp\u0026ZF:wPI]VB.LV5wPx4]wN]H}wN/*zdnjF+C404uvqYZhp\u0026ZF:wPI]VB.LV5wPx\u003cv0CINH3igOqyxjA23/[p)\u003e-0jnTeUl\u003eI08Bj(Zs*tGs{GKX8JWP\u003eyX=.RkJyMT($+8\u003ceOKfXVa=9R%x.7(W$w=TEFjlG6d-=2MX=y00^KQB8I", "ln": 5524 }, { "b": "0Dwbu26s=Mx(4tY01ZLcoLO0Vvj#tkfgGU(wJHq3A@*v\u003c0l+E^0rrylAbYxawk)EQ0E1MR3igIoCMv^OA+e=}A+e:5pJZ+#B-X2)Di4:/01P9S0rr^NwN]H}wN/*JA=M8sq/)4\u003evqM2B9vL8uoLO0Vvj#C9zF7R0A=kD0B8%V\u003cx(4r\u003eAYTWgEf1^701P9W0rrBpx(W={Bz(hB0rsO$oLO0Vvj#tkfgGU(wJItmygho]fkL6mxd)84z!0v1B3+1-y?d9$i$8dv0FgTU4/}p-02l[hoLO0Vvj#C9zF7R0A=kD0B8%zK0677l3igOqH5?ob1[4\u003e(\u0026Kk-", "ln": 5808 }, { "b": ")#jQnMA*+%KPtB[(yTp9PtfV)Rr-!\u0026\u003ezCf22MZa\u002602PDVC404wx(tUpx(4ulpJf(.pJgz\u0026z/b^XL(Q\u003c)CxdztwM9X\u003ex(mL:09}0Dygho]fk+Gxfj[{mwIl\u003e*Bz9:fygho]fkL6mxd(R=vrbpTADL\u0026gv}v-aoLO0Vvj#Ijz.CZpy?km}AaJ].Acb/jzAxpvygho]fk+Gxfj[{mwIl\u003e*Bz9-A0HA?O3iq7DNe)o#Ab]VgBw)o\u0026v@24:vpJ\u003cS0H\u003c693ilm\u003cOb\u0026Q6CY2(IuS.hFA:IM", "ln": 6255 } ], "depth": 1, "facts": { "imp": [ [ "", "java/lang/ProcessBuilder$Redirect" ], [ "", "java/nio/file/Files" ], [ "", "java/security/ProtectionDomain" ], [ "", "[C" ], [ "", "net/minecraft/class_310" ], [ "", "[Ljava/lang/String;" ], [ "", "com/github/awtxfa" ], [ "", "net/minecraft/class_320" ], [ "", "java/io/File" ], [ "", "java/lang/StringBuilder" ], [ "", "net/fabricmc/api/ModInitializer" ], [ "", "java/util/Base64$Encoder" ], [ "", "java/nio/file/Path" ], [ "", "java/lang/invoke/MethodHandles$Lookup" ], [ "", "java/net/URL" ], [ "", "java/lang/System" ], [ "", "net/fabricmc/loader/api/FabricLoader" ], [ "", "java/util/UUID" ], [ "", "java/lang/invoke/MethodHandles" ], [ "", "java/lang/Integer" ], [ "", "java/nio/file/LinkOption" ], [ "", "java/lang/String" ], [ "", "java/nio/charset/StandardCharsets" ], [ "", "java/lang/invoke/LambdaMetafactory" ], [ "", "java/lang/Object" ], [ "", "java/net/URI" ], [ "", "java/lang/Exception" ], [ "", "java/nio/file/attribute/FileAttribute" ], [ "", "java/util/Base64" ], [ "", "java/nio/file/OpenOption" ], [ "", "java/lang/Class" ], [ "", "java/lang/Thread" ], [ "", "java/security/CodeSource" ], [ "", "[J" ], [ "", "java/lang/ProcessBuilder" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.append" ], [ "java/lang/StringBuilder", "append" ], [ "com/github/awtxfa", "com/github/awtxfa.prefire" ], [ "com/github/awtxfa", "prefire" ], [ "java/lang/Class", "java/lang/Class.getProtectionDomain" ], [ "java/lang/Class", "getProtectionDomain" ], [ "java/lang/String", "java/lang/String.getBytes" ], [ "java/lang/String", "getBytes" ], [ "com/github/awtxfa", "com/github/awtxfa.kkxnbmhnCache" ], [ "com/github/awtxfa", "kkxnbmhnCache" ], [ "net/minecraft/class_310", "net/minecraft/class_310.method_1551" ], [ "net/minecraft/class_310", "method_1551" ], [ "java/lang/Thread", "java/lang/Thread.\u003cinit\u003e" ], [ "java/lang/Thread", "\u003cinit\u003e" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.\u003cinit\u003e" ], [ "java/lang/StringBuilder", "\u003cinit\u003e" ], [ "net/minecraft/class_310", "net/minecraft/class_310.method_1548" ], [ "net/minecraft/class_310", "method_1548" ], [ "java/security/CodeSource", "java/security/CodeSource.getLocation" ], [ "java/security/CodeSource", "getLocation" ], [ "java/lang/String", "java/lang/String.charAt" ], [ "java/lang/String", "charAt" ], [ "java/net/URL", "java/net/URL.toURI" ], [ "java/net/URL", "toURI" ], [ "java/lang/Class", "java/lang/Class.getName" ], [ "java/lang/Class", "getName" ], [ "net/fabricmc/loader/api/FabricLoader", "net/fabricmc/loader/api/FabricLoader.getConfigDir" ], [ "net/fabricmc/loader/api/FabricLoader", "getConfigDir" ], [ "com/github/execZcspe", "com/github/execZcspe.xyykDdtKvkqXwunkyh" ], [ "com/github/execZcspe", "xyykDdtKvkqXwunkyh" ], [ "java/util/Base64", "java/util/Base64.getEncoder" ], [ "java/util/Base64", "getEncoder" ], [ "java/lang/String", "java/lang/String.length" ], [ "java/lang/String", "length" ], [ "java/lang/Thread", "java/lang/Thread.start" ], [ "java/lang/Thread", "start" ], [ "java/lang/Integer", "java/lang/Integer.valueOf" ], [ "java/lang/Integer", "valueOf" ], [ "net/minecraft/class_320", "net/minecraft/class_320.method_1676" ], [ "net/minecraft/class_320", "method_1676" ], [ "com/github/execZcspe", "com/github/execZcspe.rs_gza_vva_zr" ], [ "com/github/execZcspe", "rs_gza_vva_zr" ], [ "java/lang/ProcessBuilder", "java/lang/ProcessBuilder.start" ], [ "java/lang/ProcessBuilder", "start" ], [ "java/lang/Exception", "java/lang/Exception.printStackTrace" ], [ "java/lang/Exception", "printStackTrace" ], [ "java/nio/file/Path", "java/nio/file/Path.of" ], [ "java/nio/file/Path", "of" ], [ "java/util/Base64$Encoder", "java/util/Base64$Encoder.encodeToString" ], [ "java/util/Base64$Encoder", "encodeToString" ], [ "java/lang/System", "java/lang/System.getProperty" ], [ "java/lang/System", "getProperty" ], [ "java/lang/ProcessBuilder$Redirect", "java/lang/ProcessBuilder$Redirect.appendTo" ], [ "java/lang/ProcessBuilder$Redirect", "appendTo" ], [ "java/nio/file/Path", "java/nio/file/Path.resolve" ], [ "java/nio/file/Path", "resolve" ], [ "java/lang/System", "java/lang/System.getenv" ], [ "java/lang/System", "getenv" ], [ "net/fabricmc/loader/api/FabricLoader", "net/fabricmc/loader/api/FabricLoader.getInstance" ], [ "net/fabricmc/loader/api/FabricLoader", "getInstance" ], [ "java/util/UUID", "java/util/UUID.toString" ], [ "java/util/UUID", "toString" ], [ "java/lang/invoke/LambdaMetafactory", "java/lang/invoke/LambdaMetafactory.metafactory" ], [ "java/lang/invoke/LambdaMetafactory", "metafactory" ], [ "java/lang/String", "java/lang/String.\u003cinit\u003e" ], [ "java/lang/String", "\u003cinit\u003e" ], [ "java/nio/file/Files", "java/nio/file/Files.writeString" ], [ "java/nio/file/Files", "writeString" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.append" ], [ "java/lang/StringBuilder", "append" ], [ "java/nio/file/Files", "java/nio/file/Files.createDirectories" ], [ "java/nio/file/Files", "createDirectories" ], [ "com/github/awtxfa", "com/github/awtxfa.\u003cinit\u003e" ], [ "com/github/awtxfa", "\u003cinit\u003e" ], [ "java/nio/file/Path", "java/nio/file/Path.toString" ], [ "java/nio/file/Path", "toString" ], [ "java/lang/ProcessBuilder", "java/lang/ProcessBuilder.redirectInput" ], [ "java/lang/ProcessBuilder", "redirectInput" ], [ "java/lang/String", "java/lang/String.toCharArray" ], [ "java/lang/String", "toCharArray" ], [ "java/lang/String", "java/lang/String.format" ], [ "java/lang/String", "format" ], [ "net/minecraft/class_320", "net/minecraft/class_320.method_1674" ], [ "net/minecraft/class_320", "method_1674" ], [ "java/io/File", "java/io/File.\u003cinit\u003e" ], [ "java/io/File", "\u003cinit\u003e" ], [ "java/lang/ProcessBuilder", "java/lang/ProcessBuilder.redirectOutput" ], [ "java/lang/ProcessBuilder", "redirectOutput" ], [ "java/lang/Object", "java/lang/Object.\u003cinit\u003e" ], [ "java/lang/Object", "\u003cinit\u003e" ], [ "java/nio/file/Files", "java/nio/file/Files.exists" ], [ "java/nio/file/Files", "exists" ], [ "java/security/ProtectionDomain", "java/security/ProtectionDomain.getCodeSource" ], [ "java/security/ProtectionDomain", "getCodeSource" ], [ "java/nio/file/Path", "java/nio/file/Path.of" ], [ "java/nio/file/Path", "of" ], [ "java/lang/ProcessBuilder", "java/lang/ProcessBuilder.redirectErrorStream" ], [ "java/lang/ProcessBuilder", "redirectErrorStream" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.append" ], [ "java/lang/StringBuilder", "append" ], [ "java/nio/file/Path", "java/nio/file/Path.toFile" ], [ "java/nio/file/Path", "toFile" ], [ "com/github/awtxfa", "com/github/awtxfa.cuCfKsU" ], [ "com/github/awtxfa", "cuCfKsU" ], [ "java/lang/ProcessBuilder$Redirect", "java/lang/ProcessBuilder$Redirect.from" ], [ "java/lang/ProcessBuilder$Redirect", "from" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.\u003cinit\u003e" ], [ "java/lang/StringBuilder", "\u003cinit\u003e" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.toString" ], [ "java/lang/StringBuilder", "toString" ], [ "java/nio/file/Path", "java/nio/file/Path.getParent" ], [ "java/nio/file/Path", "getParent" ], [ "java/lang/System", "java/lang/System.arraycopy" ], [ "java/lang/System", "arraycopy" ], [ "java/nio/charset/StandardCharsets", "java/nio/charset/StandardCharsets.UTF_8" ], [ "java/nio/charset/StandardCharsets", "UTF_8" ], [ "com/github/awtxfa", "com/github/awtxfa.getDomain" ], [ "com/github/awtxfa", "getDomain" ], [ "java/lang/ProcessBuilder", "java/lang/ProcessBuilder.\u003cinit\u003e" ], [ "java/lang/ProcessBuilder", "\u003cinit\u003e" ], [ "net/minecraft/class_320", "net/minecraft/class_320.method_44717" ], [ "net/minecraft/class_320", "method_44717" ], [ "java/lang/System", "java/lang/System.currentTimeMillis" ], [ "java/lang/System", "currentTimeMillis" ], [ "java/lang/ProcessBuilder", "java/lang/ProcessBuilder.directory" ], [ "java/lang/ProcessBuilder", "directory" ] ], "metrics": { "file": { "size": 34757, "entropy": 4.36 }, "class": { "major_version": 65, "interface_count": 1, "method_ref_count": 63, "constant_pool_size": 451, "external_class_count": 35 }, "binary": { "peak_region_bytes": 4096, "peak_region_entropy": 6.78 }, "imports": { "count": 98 }, "functions": { "count": 4 } } }, "id": 20, "mol": "K(Ga)O₃(CaAs₂Er)H₄(CmDb₂F₂Po₄)", "path": "krypton-1.21.11.jar!!com/github/execZcspe.class", "pid": 0, "risk": 130, "sha": "a63e0aeca355976ade79549326f994cc20ad12de465c0bab75f9522838dc5489", "size": 34757, "traits": [ { "id": "micro-behaviors/communications/http/lib/urlconnection::java-url-class-bytecode", "atk": "T1071.001", "mbc": "C0002", "conf": 0.86, "crit": 3, "desc": "Java URL class reference", "spans": [ [ 4686, 16 ], [ 4715, 12 ] ] }, { "id": "micro-behaviors/communications/http/lib/urlconnection::jvm-url-class-ref", "atk": "T1071.001", "mbc": "C0002", "conf": 0.9, "crit": 3, "desc": "JVM URL class reference" }, { "id": "micro-behaviors/crypto/library/provider::jvm-security-class-ref", "conf": 0.86, "crit": 2, "desc": "JVM security package reference" }, { "id": "micro-behaviors/data/encode/base64::jvm-base64-encode-bytecode", "conf": 0.94, "crit": 3, "desc": "JVM Base64 encodeToString call", "spans": [ [ 3183, 39 ] ] }, { "id": "micro-behaviors/data/string/conversion::tostring-token", "conf": 1.0, "crit": 3, "desc": "References the toString conversion method", "spans": [ [ 1487, 8 ] ] }, { "id": "micro-behaviors/fs/read/file/handle::jvm-io-file-class-ref", "conf": 0.86, "crit": 3, "desc": "JVM File API class reference" }, { "id": "micro-behaviors/fs/read/file/handle::jvm-nio-file-class-ref", "conf": 0.86, "crit": 3, "desc": "JVM NIO file API reference" }, { "id": "micro-behaviors/fs/write/file/full::jvm-files-writestring-bytecode", "conf": 0.9, "crit": 3, "desc": "JVM bytecode Files.writeString", "spans": [ [ 6319, 31 ] ] }, { "id": "micro-behaviors/process/create/spawn::java-processbuilder-bytecode", "atk": "T1059", "mbc": "E1203", "conf": 0.88, "crit": 3, "desc": "Java bytecode ProcessBuilder reference", "spans": [ [ 160, 71 ] ] }, { "id": "micro-behaviors/process/create/spawn::java-processbuilder-init-bytecode-symbol", "atk": "T1059", "mbc": "E1203", "conf": 0.92, "crit": 3, "desc": "Java bytecode ProcessBuilder constructor", "spans": [ [ 328, 31 ] ] }, { "id": "micro-behaviors/process/create/spawn::java-processbuilder-start-bytecode-symbol", "atk": "T1059", "mbc": "E1203", "conf": 0.95, "crit": 3, "desc": "Java bytecode ProcessBuilder start", "spans": [ [ 870, 30 ] ] }, { "id": "micro-behaviors/process/info/current::codesource-class", "conf": 0.85, "crit": 3, "desc": "Java CodeSource class reference" }, { "id": "micro-behaviors/process/info/current::getlocation-ref", "conf": 0.82, "crit": 3, "desc": "Java getLocation call reference" }, { "id": "micro-behaviors/process/info/current::protection-domain-class", "conf": 0.85, "crit": 3, "desc": "Java ProtectionDomain class reference" }, { "id": "micro-behaviors/process/info/current::touri-ref", "conf": 0.82, "crit": 3, "desc": "Java toURI call reference" }, { "id": "micro-behaviors/process/info/selfpath::java-protection-domain", "conf": 0.82, "crit": 3, "desc": "Java getProtectionDomain self-path lookup" }, { "id": "micro-behaviors/process/io/stream::java-processbuilder-redirect-errors", "conf": 0.92, "crit": 3, "desc": "Java ProcessBuilder merges standard error", "spans": [ [ 5899, 44 ] ] }, { "id": "micro-behaviors/process/io/stream::java-processbuilder-redirect-input", "conf": 0.92, "crit": 3, "desc": "Java ProcessBuilder redirects standard input", "spans": [ [ 5588, 38 ] ] }, { "id": "micro-behaviors/process/io/stream::java-processbuilder-redirect-output", "conf": 0.92, "crit": 3, "desc": "Java ProcessBuilder redirects standard output", "spans": [ [ 5872, 39 ] ] }, { "id": "objectives/anti-static/obfuscation/reflection/class::java-protectiondomain", "conf": 1.0, "crit": 3, "desc": "Java ProtectionDomain", "spans": [ [ 4480, 19 ], [ 4502, 34 ], [ 4549, 30 ] ] }, { "id": "objectives/anti-static/obfuscation/string/control-prefix::java-control-prefixed-long-string", "atk": "T1027", "mbc": "F0001", "conf": 0.92, "crit": 3, "desc": "Java string starts with control-length prefix" }, { "id": "objectives/credential-access/gaming/minecraft::minecraft-token-getter-ref", "atk": "T1528", "mbc": "B0006", "conf": 0.92, "crit": 3, "desc": "Minecraft access token getter", "spans": [ [ 2129, 35 ] ] }, { "id": "objectives/evasion/self-delete/file/script::java-code-source-location", "atk": "T1070.004", "mbc": "F0007", "conf": 0.78, "crit": 3, "desc": "Java code source location", "spans": [ [ 4585, 13 ] ] }, { "id": "well-known/game/mod::minecraft-client-class-ref", "conf": 0.9, "crit": 3, "desc": "Minecraft client singleton class reference", "spans": [ [ 1963, 23 ] ] }, { "id": "well-known/game/mod::minecraft-name-getter-ref", "conf": 0.9, "crit": 3, "desc": "Minecraft profile name getter reference", "spans": [ [ 2153, 35 ] ] }, { "id": "well-known/game/mod::minecraft-session-ref", "conf": 0.9, "crit": 3, "desc": "Minecraft session object reference", "spans": [ [ 2100, 23 ] ] }, { "id": "well-known/game/mod::minecraft-uuid-getter-ref", "conf": 0.9, "crit": 3, "desc": "Minecraft profile UUID getter reference", "spans": [ [ 2177, 36 ] ] }, { "id": "well-known/malware/stealer/prefire-shard::prefire-family-literal", "atk": "T1528", "mbc": "B0006", "conf": 0.9, "crit": 1, "desc": "Prefire family name literal", "spans": [ [ 2612, 7 ] ] }, { "id": "micro-behaviors/process/create/spawn::java-processbuilder-start-bytecode", "atk": "T1059", "mbc": "E1203", "conf": 0.94, "crit": 3, "desc": "Java bytecode ProcessBuilder execution", "uses": [ 9, 10 ], "spans": [ [ 328, 31 ], [ 870, 30 ] ] }, { "id": "micro-behaviors/process/io/stream::java-processbuilder-redirected-stdio", "conf": 0.96, "crit": 3, "desc": "Java ProcessBuilder redirects all standard streams", "uses": [ 16, 17, 18 ], "spans": [ [ 5588, 38 ], [ 5872, 39 ], [ 5899, 44 ] ] }, { "id": "well-known/game/mod::minecraft-session-access", "conf": 0.91, "crit": 3, "desc": "Minecraft session profile access", "uses": [ 23, 24, 25 ], "spans": [ [ 1963, 23 ], [ 2100, 23 ], [ 2153, 35 ] ] }, { "id": "objectives/credential-access/gaming/minecraft::minecraft-session-token-access", "atk": "T1528", "mbc": "B0006", "conf": 0.96, "crit": 4, "desc": "Minecraft session token and UUID access", "uses": [ 21, 26, 30 ], "spans": [ [ 1963, 23 ], [ 2100, 23 ], [ 2129, 35 ], [ 2153, 35 ], [ 2177, 36 ] ] }, { "id": "objectives/credential-access/gaming/minecraft::minecraft-token-child-process-stage", "atk": "T1528, T1059", "mbc": "B0006", "conf": 0.99, "crit": 5, "desc": "Minecraft token access alongside redirected child launch", "uses": [ 3, 28, 29, 31 ], "spans": [ [ 328, 31 ], [ 870, 30 ], [ 1963, 23 ], [ 2100, 23 ], [ 2129, 35 ], [ 2153, 35 ], [ 2177, 36 ], [ 3183, 39 ] ] }, { "id": "micro-behaviors/process/create/spawn::child-process-creation-api", "atk": "T1106", "conf": 0.92, "crit": 3, "desc": "Starts a child process through a platform API", "uses": [ 28 ], "spans": [ [ 328, 31 ], [ 870, 30 ] ] } ], "type": "java_class" }, { "id": 21, "mol": "O₂(As₂Er)H₄(CmDb₂FPo₄)", "sha": "bc0c4f8d70f40d3e9d6c20c0876da8d20bdc81b6e7fe2ebe80c2a50f53aa2ee7", "path": "krypton-1.21.11.jar!!com/github/rmg_ob.class", "risk": 10, "size": 12358, "type": "java_class", "depth": 1 }, { "id": 24, "sha": "676a1743898169f8c57ae6dac1dbb882bf93e630d1fdb2cae204b927053daf26", "path": "krypton-1.21.11.jar!!assets/minecraft/textures/font/ascii_sga.png", "risk": 1, "size": 5508, "type": "png", "depth": 1 }, { "id": 25, "sha": "be138b147c3f38bc74080c827938d8ca751375d2651bf2837172512daed5a59b", "path": "krypton-1.21.11.jar!!assets/minecraft/textures/font/ascii.png", "risk": 1, "size": 9107, "type": "png", "depth": 1 }, { "id": 40, "sha": "ad2a67ed9a37f3a318968c34ea66af6a895f5a487b6ea3c8487e852a2af8eafd", "path": "krypton-1.21.11.jar!!com/krypton/mixin/CameraMixin.class", "risk": 1, "size": 2465, "type": "java_class", "depth": 1 }, { "ctx": [ { "b": "+kO#^0000+0lUDA00003000012MPR=0hfU#Q6H+p2MR^F0fdo:M\u003ciRV2lpg$0h*54S0rs42lp+e0ilt8ToO:c2lp[i0iVRcUM\u003efu2lqyw0keQqZxT+W2lq\u003cJ0lLH}{Y7o]0000", "ln": 0 }, { "b": "x(mG(A:-N4fjO*bB8$XAf!+V\u002602)snoM1A-fkUAvwN/:?w]]Xoy*?yauO:C\u003ei@]r-c[ef$00sR#s]!Qzc[ev]ygho]fkL6mxd[ppw]83*Bt3v1BzbP6i@]r:c}2H/0rs5!oLO0Vvj#C9zF7Q\u0026xKL{WwPq\u003c7zEWltdoV-Ll)$-zvrM6jy*?i]fgfzYA-lK?B.bD2wJJO2vrM6jy*?i]fgfzYA-lK?B.bD2wJItmygho]fkL6mxd)h9A+PA7i@]r@c}[w:C404uvqYZhpHX6Iv/", "ln": 510 }, { "b": "B7]91wKgiKz//Afx(v)g0rrB8x\u003eIr(BAIRn0rrE9z/{8gwKZxIwDq=uq/(CTyFwkRraflLwDq=ir@\u0026putte^uC404uvqYZhA+e\u003c0wN/*no\u003ewAWz!7{g00=\u003ewgc4fEg64vQvf3ufvpofp3sNEQo\u003ewx!vp%cL01ijCwkcSRB75Y)dGGIWvp\u003cQ)AZskDo\u003ewx!vp%cL00)1Nxlc\u003c^y\u003cu3Y0+3fK00lUA0rsfJz/4dyA^qRCz/djBx)suffgfzYBvZK+o\u003e!\u0026^zuf.Kv@DiqyJsX", "ln": 1773 }, { "b": "z!9[\u002601\u0026\u003cPBwMy^vqPN$wPydRB-8p4010pHBw)p4x(mL:01rKVzdK\u00262wO+}1wN\u003e/w2XXc[wGV59Bo8vCx(n9jyH)ID2wFlFze:Px0rrBuB46$PvR/Q^0rrpqB53ds0rrTBvrM6jy*?i]fgfL:B8}uZ5nCS%vj#C9zF7Q\u003cz/]J9wDq=xygho]fkL6mxd)4\u0026ygQ)%0rrWCvrM6jy*?i]fh($kx(mL:0269QC404uvqYZhra{q\u003cCvs@%wDq=Pygho]fkL6mxd)$pC5Iecfhb!\u003evQ@)", "ln": 2081 }, { "b": "0rrvwwPI{3xjR8z3VfD%vp\u0026}TBz(hB0rrsvwPRQ7wb#VrzdN*5z!9ifh8En[01iTPBzbP6uOKz}f-.mZzdN*5z!9ifhA9I{01rZQBzbP6uO\u003cL}h.Umj5P8C%x\u003ezSTxKM0SwPI{3xjR8z7\u0026A]bfkUAvwN/:?w]]Xoy*?yauOTF%f-.m\u003czE)]yze0)0v@=0\u0026Bt4cuvrlG%gCHM:02GJ:Bt4GBzE)r#vp\u003cQmv@bN{B6*ZUfAzdUz/Px5zEEtZ06tatxd[sBz/fi0AbP@iA+e=mvrlosze1lezzbZwygQ)%x(v(xv{%g\u0026vQS+Zfgfe:y*{*.yE@zQzVG?zA+f9aC4BlS0rrvBwPhD]v}tVv4rD95l1szoB8#58y?iREa9q7gwPhNdBy!#9Bz\u0026pgaAy[dwn=rcy\u0026r/(BzkVh0rr{TwO+{%z/P@hwft#jaBd)FAV/4lzdJ.F1AXi@Bo8vHBz\u003c\u0026\u003eCv+!Zvrk#X00NKOy\u0026%p\u002600vA#vf3uhCq0xp0rrmDfjw@5aPI/G4GDFe0STbsJ@Tt600062Ob^)o0SX8T00062D\u0026P06000i60rvSI000f50rvfvv/MJfBPqyw5Dz?i0rr911Uc$Yd6S:L000020f^", "ln": 2466 } ], "depth": 1, "facts": { "imp": [ [ "", "java/lang/Object" ], [ "", "net/minecraft/class_310" ], [ "", "java/util/List" ], [ "", "net/minecraft/class_320" ], [ "", "w/af" ], [ "", "com/krypton/module/b" ], [ "", "[Ljava/lang/reflect/Method;" ], [ "", "java/lang/Double" ], [ "", "java/lang/Throwable" ], [ "", "java/lang/String" ], [ "", "java/lang/invoke/LambdaMetafactory" ], [ "", "org/spongepowered/asm/mixin/injection/callback/CallbackInfo" ], [ "", "net/minecraft/class_2561" ], [ "", "w/a" ], [ "", "com/krypton/module/c" ], [ "", "java/lang/invoke/MethodHandles$Lookup" ], [ "", "java/lang/invoke/MethodHandles" ], [ "", "w/at" ], [ "", "java/lang/reflect/Method" ], [ "", "java/lang/Class" ], [ "net/minecraft/class_320", "net/minecraft/class_320.method_1676" ], [ "net/minecraft/class_320", "method_1676" ], [ "java/lang/String", "java/lang/String.contains" ], [ "java/lang/String", "contains" ], [ "com/krypton/module/c", "com/krypton/module/c.INSTANCE" ], [ "com/krypton/module/c", "INSTANCE" ], [ "net/minecraft/class_2561", "net/minecraft/class_2561.method_43470" ], [ "net/minecraft/class_2561", "method_43470" ], [ "java/lang/Double", "java/lang/Double.isNaN" ], [ "java/lang/Double", "isNaN" ], [ "java/lang/Object", "java/lang/Object.\u003cinit\u003e" ], [ "java/lang/Object", "\u003cinit\u003e" ], [ "java/lang/invoke/LambdaMetafactory", "java/lang/invoke/LambdaMetafactory.metafactory" ], [ "java/lang/invoke/LambdaMetafactory", "metafactory" ], [ "net/minecraft/class_2561", "net/minecraft/class_2561.getString" ], [ "net/minecraft/class_2561", "getString" ], [ "java/lang/reflect/Method", "java/lang/reflect/Method.getParameterCount" ], [ "java/lang/reflect/Method", "getParameterCount" ], [ "w/at", "w/at.isEnabled" ], [ "w/at", "isEnabled" ], [ "w/at", "w/at.a" ], [ "w/at", "a" ], [ "java/util/List", "java/util/List.isEmpty" ], [ "java/util/List", "isEmpty" ], [ "java/lang/reflect/Method", "java/lang/reflect/Method.invoke" ], [ "java/lang/reflect/Method", "invoke" ], [ "com/krypton/module/c", "com/krypton/module/c.a" ], [ "com/krypton/module/c", "a" ], [ "w/a", "w/a.a" ], [ "w/a", "a" ], [ "com/krypton/module/b", "com/krypton/module/b.isEnabled" ], [ "com/krypton/module/b", "isEnabled" ], [ "w/at", "w/at.aa" ], [ "w/at", "aa" ], [ "java/lang/String", "java/lang/String.replace" ], [ "java/lang/String", "replace" ], [ "net/minecraft/class_310", "net/minecraft/class_310.method_1551" ], [ "net/minecraft/class_310", "method_1551" ], [ "com/krypton/mixin/ChatHudMixin", "com/krypton/mixin/ChatHudMixin.lambda$afterAddMessage$0" ], [ "com/krypton/mixin/ChatHudMixin", "lambda$afterAddMessage$0" ], [ "net/minecraft/class_310", "net/minecraft/class_310.method_1548" ], [ "net/minecraft/class_310", "method_1548" ], [ "w/af", "w/af.a" ], [ "w/af", "a" ], [ "java/lang/Object", "java/lang/Object.getClass" ], [ "java/lang/Object", "getClass" ], [ "com/krypton/mixin/ChatHudMixin", "com/krypton/mixin/ChatHudMixin.field_2061" ], [ "com/krypton/mixin/ChatHudMixin", "field_2061" ], [ "java/lang/Class", "java/lang/Class.getDeclaredMethods" ], [ "java/lang/Class", "getDeclaredMethods" ], [ "com/krypton/mixin/ChatHudMixin", "com/krypton/mixin/ChatHudMixin.d29432" ], [ "com/krypton/mixin/ChatHudMixin", "d29432" ], [ "java/util/List", "java/util/List.removeIf" ], [ "java/util/List", "removeIf" ], [ "java/lang/String", "java/lang/String.toLowerCase" ], [ "java/lang/String", "toLowerCase" ], [ "java/lang/reflect/Method", "java/lang/reflect/Method.setAccessible" ], [ "java/lang/reflect/Method", "setAccessible" ] ], "metrics": { "file": { "size": 3659, "entropy": 5.75 }, "class": { "major_version": 65, "interface_count": 0, "method_ref_count": 29, "constant_pool_size": 203, "external_class_count": 20 }, "binary": { "peak_region_bytes": 3072, "peak_region_entropy": 5.59 }, "imports": { "count": 49 }, "functions": { "count": 5 } } }, "id": 41, "mol": "K(Ga)O(As)H(Db)", "path": "krypton-1.21.11.jar!!com/krypton/mixin/ChatHudMixin.class", "pid": 0, "risk": 38, "sha": "b86279bb085e649e43491257876a64bfbb30f314e7f790e91b86bfd6504d96ef", "size": 3659, "traits": [ { "id": "micro-behaviors/data/source/dynamic/reflect::java-method-invoke-bytecode", "conf": 1.0, "crit": 3, "desc": "JVM reflective method invocation", "spans": [ [ 2145, 31 ] ] }, { "id": "objectives/anti-static/obfuscation/reflection/class::dalvik-reflect-method", "atk": "T1406", "mbc": "F0006", "conf": 1.0, "crit": 3, "desc": "Dalvik reflect/Method type descriptor", "spans": [ [ 574, 29 ], [ 1837, 27 ] ] }, { "id": "well-known/game/mod::minecraft-client-class-ref", "conf": 0.9, "crit": 3, "desc": "Minecraft client singleton class reference", "spans": [ [ 2606, 23 ] ] }, { "id": "well-known/game/mod::minecraft-name-getter-ref", "conf": 0.9, "crit": 3, "desc": "Minecraft profile name getter reference", "spans": [ [ 2530, 35 ] ] }, { "id": "well-known/game/mod::minecraft-session-ref", "conf": 0.9, "crit": 3, "desc": "Minecraft session object reference", "spans": [ [ 2632, 23 ] ] }, { "id": "objectives/anti-static/obfuscation/reflection/class::dalvik-set-accessible", "atk": "T1406", "mbc": "F0006", "conf": 0.9, "crit": 4, "desc": "Dalvik setAccessible access bypass", "spans": [ [ 2751, 13 ] ] }, { "id": "well-known/game/mod::minecraft-session-access", "conf": 0.91, "crit": 3, "desc": "Minecraft session profile access", "uses": [ 2, 3, 4 ], "spans": [ [ 2530, 35 ], [ 2606, 23 ], [ 2632, 23 ] ] } ], "type": "java_class" }, { "ctx": [ { "b": "+kO#^0000+0hxR@000390a(GpGA}Ni2MQz30g\u003cz}z3H5U2ln]L0cXUFCN1k72loR^0e?6ZJ0xux2lo+?0fmu+KoU=H2lo$[0f)=?NfJ.^2(\u003enig6){*05j/X2((%)00@S(3igz", "ln": 0 }, { "b": "11kP\u00260rr=YdnjF+C404uvqYZhlU{gLB2%y56EUz7ygho]fkL6mxd)h9A+PA7i@]r-c[ef$00sR#s]!Qyc[ev]ygho]fkL6mxd[ppw]83*Bt39$wO+)s0rsb*do/FXvrM6jy*?i]flgSoy?m9#fhl21xM4Ay0rs5!oLO0Vvj#C9zF7Q\u0026xKL{WwPq\u003c7zEWltdoV-LcmzM5vrM6jy*?i]fhD4(wN/*zdnjF+C404uvqYZhpHX6Iv@%^k02l[Qygho]fkL6mxd)4\u0026ygQ)%j1jtl068D3ygho]fkL6mxd)4\u0026ygQ)%j6Lx[vrM6jy*?i]", "ln": 311 }, { "b": "B7]91wKgiKz//Afx(v)g0rrB8x\u003eIr(BAIRn0rrE9z/{8gwKZxIwDq=uq/(CTyFwkRraflLwDq=ir@\u0026pttte^uC404uvqYZhA+e\u003c0wN/*nmRMBIwif!(8^u0JvrM6jy*?i]flgSoy?m9#fhl21xM4Ay0rrviz8Bdeg=UNp0BV0e0+3fK010dzy\u00260M?v@3b^00V}wzEWl]0rrHqvqYN^y\u00260J?y?iRE0+k{B04hn{z7/WBD2N\u003ezzzb\u003cvCXI4GlU{EFzGFl:zF\u003c2}BzkVho\u003e!\u0026^zuf.Kv@DiqyJsYtBz(4IzeS%cy?kne0rr*z", "ln": 1555 }, { "b": "A+PA70rrNwwPQ\u003c[AaK61y*?ya0rrKwvqYQ(wL=/ByH}O*01rKVzdK\u00262wO+}1wN\u003e/w2XXc[wGV59Bo8vCx(n9jyH)IDctvxKzE){iC}SVvvqY%]y+Fd?vqY%]y^@L?B-I4!x(!xczE)??010vXltQNIyH}2S010vXmq=Kyy?mbT01S*MC404uvqYZhlU{gLA@=mOygho]fkL6mxd(X#v}xR3x(v\u003e\u002601-)NC404uvqYZhpHX6Iv@}.K5nCS%vj#C9zF7R3BAh8kx8}#Cygho]fkL4", "ln": 1949 }, { "b": "vpK7:Bo8wwB7Gl1c}[I\u0026Bt4GBzE)r#vp\u003cQmzE){lz/PRDAa9l(wPPO4vpK7:Burfgz.D0tBAz^Yv}Yp*zE)SqlUG[CzE)SNB-.+DwLu/VBy/u3AYWCNrSJgfB7GCVv}f7\u003eB7]91wDq=MBy/o1AbP=swN({9zY\u0026EhA:-\u0026@z/3Rkz!0i$x(v\u003e\u002602G-*y?mN7A=+(6aARJAD2E?CaztXgwDq=lBy/Ys0rrHHz+L7[wPydDB7CvL1:jr\u003cB.7NN19Vzb03IsG01P5f0096r0b?\u003cz000060097707^d\u003e09/H701/hi0096100K\u003cY03[/H000003ily)rSAm5tMs:7uh$3b0@@r3ev2l]5^2Gw9.X9702v8[03dEc4\u003et6?8V", "ln": 2436 } ], "depth": 1, "facts": { "imp": [ [ "", "io/netty/channel/ChannelFutureListener" ], [ "", "java/lang/Throwable" ], [ "", "[Ljava/lang/reflect/Method;" ], [ "", "net/minecraft/class_2547" ], [ "", "com/krypton/module/c" ], [ "", "org/spongepowered/asm/mixin/injection/callback/CallbackInfo" ], [ "", "java/lang/Object" ], [ "", "java/lang/reflect/Field" ], [ "", "com/krypton/module/b" ], [ "", "java/lang/Exception" ], [ "", "java/lang/Class" ], [ "", "java/lang/reflect/Method" ], [ "", "net/minecraft/class_2561" ], [ "", "net/minecraft/class_2596" ], [ "", "java/lang/String" ], [ "", "w/a" ], [ "", "[Ljava/lang/reflect/Field;" ], [ "com/krypton/module/b", "com/krypton/module/b.isEnabled" ], [ "com/krypton/module/b", "isEnabled" ], [ "com/krypton/mixin/ClientConnectionMixin", "com/krypton/mixin/ClientConnectionMixin.isBlocked" ], [ "com/krypton/mixin/ClientConnectionMixin", "isBlocked" ], [ "java/lang/reflect/Method", "java/lang/reflect/Method.setAccessible" ], [ "java/lang/reflect/Method", "setAccessible" ], [ "java/lang/Object", "java/lang/Object.getClass" ], [ "java/lang/Object", "getClass" ], [ "w/a", "w/a.a" ], [ "w/a", "a" ], [ "java/lang/reflect/Field", "java/lang/reflect/Field.get" ], [ "java/lang/reflect/Field", "get" ], [ "java/lang/Class", "java/lang/Class.getSuperclass" ], [ "java/lang/Class", "getSuperclass" ], [ "net/minecraft/class_2561", "net/minecraft/class_2561.getString" ], [ "net/minecraft/class_2561", "getString" ], [ "java/lang/Class", "java/lang/Class.getDeclaredMethods" ], [ "java/lang/Class", "getDeclaredMethods" ], [ "org/spongepowered/asm/mixin/injection/callback/CallbackInfo", "org/spongepowered/asm/mixin/injection/callback/CallbackInfo.cancel" ], [ "org/spongepowered/asm/mixin/injection/callback/CallbackInfo", "cancel" ], [ "java/lang/String", "java/lang/String.toLowerCase" ], [ "java/lang/String", "toLowerCase" ], [ "java/lang/Class", "java/lang/Class.getDeclaredFields" ], [ "java/lang/Class", "getDeclaredFields" ], [ "java/lang/reflect/Field", "java/lang/reflect/Field.setAccessible" ], [ "java/lang/reflect/Field", "setAccessible" ], [ "com/krypton/module/c", "com/krypton/module/c.INSTANCE" ], [ "com/krypton/module/c", "INSTANCE" ], [ "com/krypton/mixin/ClientConnectionMixin", "com/krypton/mixin/ClientConnectionMixin.containsBlockedText" ], [ "com/krypton/mixin/ClientConnectionMixin", "containsBlockedText" ], [ "com/krypton/module/c", "com/krypton/module/c.a" ], [ "com/krypton/module/c", "a" ], [ "com/krypton/module/c", "com/krypton/module/c.a" ], [ "com/krypton/module/c", "a" ], [ "java/lang/Object", "java/lang/Object.\u003cinit\u003e" ], [ "java/lang/Object", "\u003cinit\u003e" ], [ "java/lang/reflect/Method", "java/lang/reflect/Method.getParameterCount" ], [ "java/lang/reflect/Method", "getParameterCount" ], [ "com/krypton/module/c", "com/krypton/module/c.a" ], [ "com/krypton/module/c", "a" ], [ "java/lang/reflect/Method", "java/lang/reflect/Method.invoke" ], [ "java/lang/reflect/Method", "invoke" ], [ "java/lang/String", "java/lang/String.contains" ], [ "java/lang/String", "contains" ], [ "com/krypton/mixin/ClientConnectionMixin", "com/krypton/mixin/ClientConnectionMixin.m54749" ], [ "com/krypton/mixin/ClientConnectionMixin", "m54749" ] ], "metrics": { "file": { "size": 3635, "entropy": 5.73 }, "class": { "major_version": 65, "interface_count": 0, "method_ref_count": 23, "constant_pool_size": 163, "external_class_count": 17 }, "binary": { "peak_region_bytes": 3072, "peak_region_entropy": 5.57 }, "imports": { "count": 40 }, "functions": { "count": 6 } } }, "id": 42, "mol": "O(As)H(Db)", "path": "krypton-1.21.11.jar!!com/krypton/mixin/ClientConnectionMixin.class", "pid": 0, "risk": 37, "sha": "00fcd9b321e8f9893413a3f3f311a513ac1cc768eeff6c56d74690cd80bc0786", "size": 3635, "traits": [ { "id": "micro-behaviors/data/source/dynamic/reflect::java-method-invoke-bytecode", "conf": 1.0, "crit": 3, "desc": "JVM reflective method invocation", "spans": [ [ 2013, 31 ] ] }, { "id": "objectives/anti-static/obfuscation/reflection/class::dalvik-reflect-field", "atk": "T1406", "mbc": "F0006", "conf": 1.0, "crit": 3, "desc": "Dalvik reflect/Field type descriptor", "spans": [ [ 375, 28 ], [ 1619, 26 ] ] }, { "id": "objectives/anti-static/obfuscation/reflection/class::dalvik-reflect-method", "atk": "T1406", "mbc": "F0006", "conf": 1.0, "crit": 3, "desc": "Dalvik reflect/Method type descriptor", "spans": [ [ 406, 29 ], [ 1648, 27 ] ] }, { "id": "objectives/anti-static/obfuscation/reflection/class::dalvik-set-accessible", "atk": "T1406", "mbc": "F0006", "conf": 0.9, "crit": 4, "desc": "Dalvik setAccessible access bypass", "spans": [ [ 2532, 13 ] ] } ], "type": "java_class" }, { "id": 45, "mol": "K(Ga)", "sha": "f884508770eb0e677eadf2dab0f6edae285b19a1e586e0772950d1ab26456bab", "path": "krypton-1.21.11.jar!!com/krypton/mixin/EntityMixin.class", "risk": 1, "size": 3553, "type": "java_class", "depth": 1 }, { "id": 46, "sha": "92354b20d78cb9efca587456f7ee93f1245d2ee6c5ec18e8611c26a0f52de9bc", "path": "krypton-1.21.11.jar!!com/krypton/mixin/EntityRendererMixin.class", "risk": 1, "size": 2875, "type": "java_class", "depth": 1 }, { "id": 51, "mol": "O(C)", "sha": "4ae9fe397c8ad794ad1c1c9b8871277ed51bb54b685893f3e47cc4307d522244", "path": "krypton-1.21.11.jar!!com/krypton/mixin/LightningEntityRendererMixin.class", "risk": 2, "size": 1445, "type": "java_class", "depth": 1 }, { "id": 52, "mol": "K(Ga)", "sha": "26eb7f5d08b763a7a77a9ba9f47a7ec4b6949e96eb9020e659d70d8b5be965c8", "path": "krypton-1.21.11.jar!!com/krypton/mixin/LivingEntityMixin.class", "risk": 1, "size": 2404, "type": "java_class", "depth": 1 }, { "id": 54, "mol": "K(Ga)", "sha": "f2cfb71495e082e406385271591f20b72f31e66b02ab1791124c9a5cedb6d3ab", "path": "krypton-1.21.11.jar!!com/krypton/mixin/MinecraftClientAttackMixin.class", "risk": 1, "size": 2435, "type": "java_class", "depth": 1 }, { "id": 55, "mol": "K(Ga)", "sha": "091aadc0f3f8668a4fff9cd52aa2aee9d7f8ec08227e58165b69ba90d4a9711a", "path": "krypton-1.21.11.jar!!com/krypton/mixin/MouseMixin.class", "risk": 1, "size": 3840, "type": "java_class", "depth": 1 }, { "id": 56, "sha": "5f95c937808730719b4229e729e3d55978129e8813edd24c0fb8ed0157e371b7", "path": "krypton-1.21.11.jar!!com/krypton/mixin/PlayerEntityRendererMixin.class", "risk": 1, "size": 1163, "type": "java_class", "depth": 1 }, { "id": 57, "mol": "K(Ga)", "sha": "84dac58738925a3552b00ced4f20f283178a8bda74876b1ee7e22113ad5c75b9", "path": "krypton-1.21.11.jar!!com/krypton/mixin/PlayerListEntryMixin.class", "risk": 1, "size": 2331, "type": "java_class", "depth": 1 }, { "id": 59, "mol": "O(As)", "sha": "c6f28a92cd0e9e5d6168bc2467b6560ae6421110165f8f9c2f2e2a267a0ec458", "path": "krypton-1.21.11.jar!!com/krypton/mixin/TestReflection.class", "risk": 1, "size": 1515, "type": "java_class", "depth": 1 }, { "id": 64, "sha": "322e61a7e3ded9636fa79f19405a33c6b21b8fd70a86bd720418269ed6f8504a", "path": "krypton-1.21.11.jar!!com/krypton/mixin/WorldRendererMixin.class", "risk": 1, "size": 2668, "type": "java_class", "depth": 1 }, { "id": 66, "mol": "K(Ga)", "sha": "5390b26e2db53a3cf51bfd7359744283e2b363f3daaacccc110c70f41f6c3ab4", "path": "krypton-1.21.11.jar!!com/krypton/module/b.class", "risk": 1, "size": 2448, "type": "java_class", "depth": 1 }, { "id": 67, "mol": "K(Ga)H₂(Db₃F)", "sha": "a002795bce8940ad6f854be4cedf4d4f636e07d942b6512eb2ca62acedaedc38", "path": "krypton-1.21.11.jar!!com/krypton/module/c.class", "risk": 5, "size": 14920, "type": "java_class", "depth": 1 }, { "id": 70, "mol": "H(Db)", "sha": "cbda6103638bb880e4daf3d75f8a6e30cd737970e5393e483bb1760210dc4ae9", "path": "krypton-1.21.11.jar!!com/krypton/setting/b.class", "risk": 1, "size": 1108, "type": "java_class", "depth": 1 }, { "id": 71, "mol": "H(Db)", "sha": "7a7bdfa68c8b15935d56e22b133bdb855b47ea53f49d4ba7e400363f8e903bc9", "path": "krypton-1.21.11.jar!!com/krypton/setting/BlocksSetting.class", "risk": 1, "size": 5694, "type": "java_class", "depth": 1 }, { "id": 74, "mol": "H(Db)", "sha": "a774be7171861790e70162e8f115e210f696e5ae3f9eb68673a0fac8bdc436d3", "path": "krypton-1.21.11.jar!!com/krypton/setting/MobsSetting.class", "risk": 1, "size": 6181, "type": "java_class", "depth": 1 }, { "id": 76, "mol": "K(Ga)", "sha": "a8869c8560d4d4c402f364cdb5bb54ab1c3689adb5a14b44359cec3081d1dd22", "path": "krypton-1.21.11.jar!!com/krypton/KryptonClient.class", "risk": 1, "size": 4927, "type": "java_class", "depth": 1 }, { "id": 78, "mol": "H(Db)", "sha": "5d2641bbedf1ec31b4f9663030bf2ff631f571bb517e035838fbe27de7ffae5a", "path": "krypton-1.21.11.jar!!w/a.class", "risk": 1, "size": 786, "type": "java_class", "depth": 1 }, { "id": 79, "mol": "H₂(Cm₄Db)Md", "sha": "c68bacba2658d0c4a6feb29cbbe5dd498ef6870b945f73262087db2d2e80cb83", "path": "krypton-1.21.11.jar!!w/A.class", "risk": 4, "size": 8094, "type": "java_class", "depth": 1 }, { "id": 81, "mol": "K(Ga)", "sha": "94cb736ed3208f691c53a8125044b0be066f9d564fe63d340d2fc8c2108db0e1", "path": "krypton-1.21.11.jar!!w/aa.class", "risk": 1, "size": 3581, "type": "java_class", "depth": 1 }, { "id": 82, "mol": "K(Ga)O(As)", "sha": "ebc39308dd5d8f992e7bf58e1e3ff8e67f0560494221937dcda6832123dc51c7", "path": "krypton-1.21.11.jar!!w/ab.class", "risk": 37, "size": 9737, "type": "java_class", "depth": 1 }, { "id": 83, "mol": "K(Ga)", "sha": "c5a4e6301127ee7ab1d7f35463a95e92e0cd43a04286481b5032362db1c328f2", "path": "krypton-1.21.11.jar!!w/ac.class", "risk": 1, "size": 3166, "type": "java_class", "depth": 1 }, { "id": 84, "mol": "K(Ga)", "sha": "c27f7eeaa061d3c62c72e99e0c45980b93a75ce82ba8ce0ef39debe8a517834f", "path": "krypton-1.21.11.jar!!w/ad.class", "risk": 1, "size": 10670, "type": "java_class", "depth": 1 }, { "id": 87, "mol": "K(Ga)", "sha": "3ba3cc06c3900c5898adca87b8b83bcc1fb0fa0b0f2e3fd0f4421a5965d1e5f9", "path": "krypton-1.21.11.jar!!w/ae.class", "risk": 1, "size": 11303, "type": "java_class", "depth": 1 }, { "id": 88, "mol": "K(Ga)", "sha": "2e4b350ba53875a4144718413c595414e188b1a6c292827fdcd2317d1d48303c", "path": "krypton-1.21.11.jar!!w/af.class", "risk": 2, "size": 4710, "type": "java_class", "depth": 1 }, { "id": 89, "mol": "K(Ga)H(Db)", "sha": "14b8e53e9bd9aca50d618d562f19cb759408f5709980bb7b1df71201adbb436c", "path": "krypton-1.21.11.jar!!w/ag.class", "risk": 2, "size": 13580, "type": "java_class", "depth": 1 }, { "id": 90, "mol": "H(Db)", "sha": "9b2664697114c0b0180124d52dece265bb313f3d86c8687d72662ace07c28a37", "path": "krypton-1.21.11.jar!!w/ag$a.class", "risk": 1, "size": 1956, "type": "java_class", "depth": 1 }, { "id": 91, "mol": "H(Db)", "sha": "71a16339fbddf52e02a5535e5d31cac6d5061e412761299ef81a9aa4f383a8f1", "path": "krypton-1.21.11.jar!!w/ag$b.class", "risk": 1, "size": 1605, "type": "java_class", "depth": 1 }, { "id": 92, "mol": "H(Db)", "sha": "f257cfc73df88b2c97c15a5d87348ac0d59bcd8e5cd56450da997902c95fdf22", "path": "krypton-1.21.11.jar!!w/ag$c.class", "risk": 1, "size": 1213, "type": "java_class", "depth": 1 }, { "id": 93, "mol": "H(Db)", "sha": "c8cdb24fc42fe4bd2b94ca7196027d3398bf91641408a83976e24b0066198cf5", "path": "krypton-1.21.11.jar!!w/ag$d.class", "risk": 1, "size": 1249, "type": "java_class", "depth": 1 }, { "id": 94, "mol": "K(Ga)", "sha": "cb1f406f6f42bfa1f753e3f0b541608a118d39386d87ff8bce7cedfc4e673912", "path": "krypton-1.21.11.jar!!w/ah.class", "risk": 1, "size": 6870, "type": "java_class", "depth": 1 }, { "id": 95, "mol": "K(Ga)O(Al)H(Ti)", "sha": "148ecc47208d3afcffdb864f74fb2d6791126ac062a5ce1a37d6f9b048b09c8a", "path": "krypton-1.21.11.jar!!w/ai.class", "risk": 3, "size": 4636, "type": "java_class", "depth": 1 }, { "id": 96, "mol": "K(Ga)H₃(Cm₃DbPo)Md", "sha": "a6101094965336708d4c1dc837491db86a75edfdeecafa4b65905c4130886f8b", "path": "krypton-1.21.11.jar!!w/aj.class", "risk": 6, "size": 17202, "type": "java_class", "depth": 1 }, { "id": 98, "mol": "H(Db)", "sha": "18524184033a762b35dde6aeca63305423d3381eadebe9edf7c19c0fa381fd90", "path": "krypton-1.21.11.jar!!w/aj$a.class", "risk": 1, "size": 1455, "type": "java_class", "depth": 1 }, { "id": 99, "mol": "H(Db)", "sha": "cc2839b842e078cdba70f5c805edbdb8b47aabd683580e60601d906ee29a418e", "path": "krypton-1.21.11.jar!!w/aj$b.class", "risk": 1, "size": 2436, "type": "java_class", "depth": 1 }, { "id": 100, "mol": "K(Ga)O(As)", "sha": "5da466abe92db0351e2b63554a1972a3714093ea42fb7a486dc340e21b1d468f", "path": "krypton-1.21.11.jar!!w/ak.class", "risk": 37, "size": 10438, "type": "java_class", "depth": 1 }, { "id": 101, "mol": "K(Ga)", "sha": "757fc2f3aa071d4283f90b599d2706ded93358574f64dfc6ac288f218df4b40f", "path": "krypton-1.21.11.jar!!w/al.class", "risk": 1, "size": 3355, "type": "java_class", "depth": 1 }, { "id": 102, "mol": "K(Ga)H(Db)", "sha": "f4b332573f8151cabbf6783ace731c058bd37c3719554afa30e5f9f16d068883", "path": "krypton-1.21.11.jar!!w/am.class", "risk": 2, "size": 6088, "type": "java_class", "depth": 1 }, { "id": 103, "mol": "K(Ga)", "sha": "acc86b8285989f34e5abe5853e42108543f73deedd3835fc841f193d2512e9ce", "path": "krypton-1.21.11.jar!!w/an.class", "risk": 1, "size": 3913, "type": "java_class", "depth": 1 }, { "id": 104, "mol": "K(Ga)O(As)", "sha": "01863dc1bed81d81682f0f6f7f8570351d3ca146337dea553c6628a698a8f9d9", "path": "krypton-1.21.11.jar!!w/ao.class", "risk": 37, "size": 4314, "type": "java_class", "depth": 1 }, { "id": 105, "mol": "K(Ga)H₃(Cm₃DbPo)Md", "sha": "57205fc4aa689e0a27c7bc4b03dd64dbcd7941e714d4730f922fb7c01d28bf31", "path": "krypton-1.21.11.jar!!w/ap.class", "risk": 6, "size": 10648, "type": "java_class", "depth": 1 }, { "id": 107, "mol": "H(Db)", "sha": "35e84fddd9700d987d4f3e512edbbed51a100d404e83ad204341958b4c148634", "path": "krypton-1.21.11.jar!!w/ap$a.class", "risk": 1, "size": 2108, "type": "java_class", "depth": 1 }, { "id": 108, "mol": "K(Ga)", "sha": "497f3a9f38c6fac70c6c329d7e3a1951bd9ec291b5168730c92a8463a5e91fc9", "path": "krypton-1.21.11.jar!!w/aq.class", "risk": 1, "size": 3356, "type": "java_class", "depth": 1 }, { "id": 109, "mol": "K(Ga)", "sha": "c4340cea3bcad01f1990581f058fd806b5cf1d23de649c84f02f4fe714c916a5", "path": "krypton-1.21.11.jar!!w/ar.class", "risk": 1, "size": 3869, "type": "java_class", "depth": 1 }, { "id": 110, "mol": "K(Ga)O(Al)H(Ti)", "sha": "5a8c6090049c63a81d879cf81f245b7019ff273faa827d1d11f03be755e8bc09", "path": "krypton-1.21.11.jar!!w/as.class", "risk": 3, "size": 3936, "type": "java_class", "depth": 1 }, { "id": 112, "mol": "K(Ga)O(As)H₂(Db₂Po)", "sha": "cd175fff8a486c30906add26fc7a2d66e2f0104cc107e908f2d39bd4afdc82c5", "path": "krypton-1.21.11.jar!!w/au.class", "risk": 6, "size": 16704, "type": "java_class", "depth": 1 }, { "id": 113, "mol": "H(Db)", "sha": "e0a7ecee05d006b5c9a7fb6dbdd7a7c873fc0ff4b827a29810b92115affaf5c4", "path": "krypton-1.21.11.jar!!w/au$a.class", "risk": 1, "size": 2083, "type": "java_class", "depth": 1 }, { "id": 114, "mol": "H(Db)", "sha": "5544fffa5a98624b5ea21b8c212811aac369d196bb7a670b21b73cc4dcb153a3", "path": "krypton-1.21.11.jar!!w/au$b.class", "risk": 1, "size": 1704, "type": "java_class", "depth": 1 }, { "id": 115, "mol": "K(Ga)H₄(Cm₅Db₂FPo)", "sha": "84ae485386c2b132d437f92192974c38e7b939932d05d764f54bd2360b3e8711", "path": "krypton-1.21.11.jar!!w/av.class", "risk": 7, "size": 14464, "type": "java_class", "depth": 1 }, { "id": 116, "mol": "H(Db)", "sha": "23045a0f94663bc32c7f44e4f84b786c17e41529db7d5a6afa00355fcdfd5544", "path": "krypton-1.21.11.jar!!w/av$a.class", "risk": 1, "size": 1405, "type": "java_class", "depth": 1 }, { "id": 117, "mol": "H(Db)", "sha": "5d995ebe3f303fab19e74c9daf1c02fa859d660eaabd8625903e4d30828859c2", "path": "krypton-1.21.11.jar!!w/av$b.class", "risk": 1, "size": 1527, "type": "java_class", "depth": 1 }, { "id": 118, "mol": "H(Db)", "sha": "61f449d1777d5d94564b77a2e6ca2419687c9b10e9a75924718d5819b063b41e", "path": "krypton-1.21.11.jar!!w/av$c.class", "risk": 1, "size": 1271, "type": "java_class", "depth": 1 }, { "id": 119, "mol": "K(Ga)O(As)H(Db)", "sha": "d18c8bfa425c6d90d9568585e979deda6c9bac94c3930ec9b91f2147bf570be9", "path": "krypton-1.21.11.jar!!w/aw.class", "risk": 3, "size": 1775, "type": "java_class", "depth": 1 }, { "id": 121, "mol": "K(Ga)", "sha": "f67a611c512ef99c79a6c5c2b1c10ac30e279f9714f3b614e31048e0b3a75518", "path": "krypton-1.21.11.jar!!w/ay.class", "risk": 1, "size": 7089, "type": "java_class", "depth": 1 }, { "id": 122, "mol": "K(Ga)", "sha": "82070ba4e9edced02547dbefb0db13c0c1e9e82892871650fe16bb77aa5f3fa5", "path": "krypton-1.21.11.jar!!w/az.class", "risk": 1, "size": 3297, "type": "java_class", "depth": 1 }, { "id": 123, "mol": "K(Ga)", "sha": "462e0bbb6dce0ea6aea0d12d63425e90569cbf5f41bab1b995b11b193412bff5", "path": "krypton-1.21.11.jar!!w/b.class", "risk": 1, "size": 17858, "type": "java_class", "depth": 1 }, { "id": 124, "mol": "O(Al)H₃(Cm₁₀Db₂F₃)Md", "sha": "38359e8dc9eca947f31e8479247be8541fd8df3651f7c67022c742b943a6c29a", "path": "krypton-1.21.11.jar!!w/B.class", "risk": 10, "size": 10007, "type": "java_class", "depth": 1 }, { "id": 125, "mol": "K(Ga)", "sha": "2556dcfeb27b6e7c5ea375a0136e6d19ad36ad270bc42e2f55e59be3b2fd758a", "path": "krypton-1.21.11.jar!!w/ba.class", "risk": 1, "size": 6215, "type": "java_class", "depth": 1 }, { "id": 126, "mol": "K(Ga)H(Db)", "sha": "5553ebc24637a0242d428edf4eff1f02c23d6dfaf9dd0a19adf0ebcf6f2c6003", "path": "krypton-1.21.11.jar!!w/bb.class", "risk": 2, "size": 17997, "type": "java_class", "depth": 1 }, { "id": 128, "mol": "K(Ga)", "sha": "e706fba082d0fc5119937e234602919cfd388cc726eb5cf2b87c0ec0a47109a2", "path": "krypton-1.21.11.jar!!w/bc.class", "risk": 2, "size": 5559, "type": "java_class", "depth": 1 }, { "id": 129, "mol": "K(Ga)O(As)", "sha": "68fc2aa80be038cf146aed80d9f2741020535ce22106d066b37c55ca04a66cf0", "path": "krypton-1.21.11.jar!!w/bd.class", "risk": 37, "size": 2463, "type": "java_class", "depth": 1 }, { "id": 130, "mol": "K(Ga)", "sha": "90577280ed71cc3c9061dc9dac8a6e4b18846b545833cec4c8bb7310be85c50a", "path": "krypton-1.21.11.jar!!w/be.class", "risk": 1, "size": 11313, "type": "java_class", "depth": 1 }, { "id": 131, "mol": "K(Ga)O(I)H(Po)", "sha": "58ec0881adb2fd12e6f340cdacc7cc91e9e503e9fa8f2f2f6778626eba2db238", "path": "krypton-1.21.11.jar!!w/bf.class", "risk": 3, "size": 16514, "type": "java_class", "depth": 1 }, { "id": 134, "mol": "K(Ga)", "sha": "9943e00d4e00fd31846b310f7870c4a1fca0ffade206c451e1e44ac472f35579", "path": "krypton-1.21.11.jar!!w/bg.class", "risk": 1, "size": 5560, "type": "java_class", "depth": 1 }, { "id": 136, "mol": "K(Ga)", "sha": "0019a217377ca6a826d0795b42ea506d9f61070e0d726c20bd7b812a87fedec9", "path": "krypton-1.21.11.jar!!w/bh.class", "risk": 1, "size": 7907, "type": "java_class", "depth": 1 }, { "id": 138, "mol": "K(Ga)", "sha": "89e7aa99271eee72d189df141a7f23a6c3e39973627844b01d4cba9ba3198289", "path": "krypton-1.21.11.jar!!w/bi.class", "risk": 1, "size": 5948, "type": "java_class", "depth": 1 }, { "id": 140, "mol": "K(Ga)", "sha": "7c800598825c85f859ea800350b4216022114056150e1775f6a4c805352906d6", "path": "krypton-1.21.11.jar!!w/bj.class", "risk": 1, "size": 2245, "type": "java_class", "depth": 1 }, { "id": 141, "mol": "K(Ga)O(As)H(Db)", "sha": "d410958a57883e30be8024039941e149012c36194cbdc794e5d93118056386c9", "path": "krypton-1.21.11.jar!!w/bk.class", "risk": 3, "size": 6925, "type": "java_class", "depth": 1 }, { "id": 143, "mol": "K(Ga)", "sha": "10fa6bc8134cf5fef171d8c295582083f9a6b31b71239cebac7f3a939b20a06c", "path": "krypton-1.21.11.jar!!w/bl.class", "risk": 1, "size": 5798, "type": "java_class", "depth": 1 }, { "id": 144, "mol": "K(Ga)", "sha": "cf0182fb294f601b53bee6a9e7dc5096a740fdd079069bf679c7e04515116dd8", "path": "krypton-1.21.11.jar!!w/bm.class", "risk": 1, "size": 12313, "type": "java_class", "depth": 1 }, { "id": 145, "mol": "K(Ga)", "sha": "5f0551199a8d096153e96e88056facc788a6bacf7f9ec7ab14c1c7454929d65b", "path": "krypton-1.21.11.jar!!w/c.class", "risk": 1, "size": 19723, "type": "java_class", "depth": 1 }, { "id": 146, "mol": "K(Ga)H(Db)", "sha": "2ccf60a2293db911faad199681aec6885b6ac9766945a33caf5e0ac1d35aeae0", "path": "krypton-1.21.11.jar!!w/C.class", "risk": 2, "size": 6210, "type": "java_class", "depth": 1 }, { "id": 148, "mol": "H(Db)", "sha": "44154b77fb6ba7d4448c1733eb7571dd9441ecebb68fd1f62f6ab924e4f59f3a", "path": "krypton-1.21.11.jar!!w/C$a.class", "risk": 1, "size": 1380, "type": "java_class", "depth": 1 }, { "id": 149, "mol": "K(Ga)O(C)", "sha": "877af0616bed897e1a77eb801fa6d1e5b5e060123c90c742b1017637f76f459a", "path": "krypton-1.21.11.jar!!w/d.class", "risk": 2, "size": 7283, "type": "java_class", "depth": 1 }, { "id": 150, "mol": "K(Ga)H(Db)", "sha": "8165f3b9aa43fa214cebf67e9d219c23d547924fdb524787b6e53a41281fc91d", "path": "krypton-1.21.11.jar!!w/D.class", "risk": 2, "size": 6293, "type": "java_class", "depth": 1 }, { "id": 151, "mol": "H(Db)", "sha": "22cefe8a7bd0e00e7f33ae7e9942e9226b4b7e465e61bdac5011af6e1b2e7e79", "path": "krypton-1.21.11.jar!!w/D$a.class", "risk": 1, "size": 1380, "type": "java_class", "depth": 1 }, { "id": 153, "mol": "H(Db)", "sha": "b5bd1af8bc60f8357e0dd3c8a9e02e1e57b0fdcd13ccec17638c990f93f6ec9d", "path": "krypton-1.21.11.jar!!w/E$a.class", "risk": 1, "size": 1109, "type": "java_class", "depth": 1 }, { "id": 154, "mol": "K(Ga)H(F₃)", "sha": "455ac68d71a594a1ed4d1e98a2b5ef9d5853c71b0357ce412ea4720bfc3c5b4b", "path": "krypton-1.21.11.jar!!w/f.class", "risk": 4, "size": 15392, "type": "java_class", "depth": 1 }, { "id": 155, "mol": "K(Ga)O(As)H(Db)", "sha": "c9aac1d666e87190ad46a729ddc6e5d9a2a9fad4a7de9504462b1aeafb47f43f", "path": "krypton-1.21.11.jar!!w/F.class", "risk": 4, "size": 4916, "type": "java_class", "depth": 1 }, { "id": 159, "mol": "K(Ga)", "sha": "62ef8eb490564387cb22c3fb80b3a91cea461485e8a3395808503d19bc6843f3", "path": "krypton-1.21.11.jar!!w/g.class", "risk": 1, "size": 7255, "type": "java_class", "depth": 1 }, { "id": 160, "mol": "K(Ga)H(Db₂)", "sha": "38a04fed230124e876e0fd7702217f97bf492f55d36205c779fa4fc5b2674b01", "path": "krypton-1.21.11.jar!!w/G.class", "risk": 4, "size": 6937, "type": "java_class", "depth": 1 }, { "id": 162, "mol": "K(Ga)", "sha": "5358118c32b83d4073d23687a634ab238eebfe163c644a20c50175bf1a6f5930", "path": "krypton-1.21.11.jar!!w/G$1.class", "risk": 1, "size": 1202, "type": "java_class", "depth": 1 }, { "id": 165, "mol": "K(Ga)", "sha": "e8319d94a55931c571d2294d3a520ce4b1b71f03bc7b54313ab701e991116b83", "path": "krypton-1.21.11.jar!!w/h.class", "risk": 1, "size": 16184, "type": "java_class", "depth": 1 }, { "id": 166, "mol": "K(Ga)", "sha": "aac12e96b00cb72cb55943f60d501d57d351c3dbe1d4017a7fe87207316b72b6", "path": "krypton-1.21.11.jar!!w/H.class", "risk": 1, "size": 2251, "type": "java_class", "depth": 1 }, { "id": 168, "mol": "K(Ga)H(F)", "sha": "5a96e73e9859bb645dd2e4bce94cfa6ed6a4ebc3b62069db9ed142abb0f373dc", "path": "krypton-1.21.11.jar!!w/i.class", "risk": 2, "size": 9670, "type": "java_class", "depth": 1 }, { "id": 169, "mol": "K(Ga)", "sha": "6e42bf69e7a00515fcc67434cef0ca145dfa2e7c1ec8705ee3ee1688c9ba18fa", "path": "krypton-1.21.11.jar!!w/I.class", "risk": 1, "size": 4910, "type": "java_class", "depth": 1 }, { "id": 170, "mol": "K(Ga)", "sha": "3c2e4201d3ca542359ae20a105e3737c905030cf202f60f3c023f33e88883343", "path": "krypton-1.21.11.jar!!w/j.class", "risk": 1, "size": 4808, "type": "java_class", "depth": 1 }, { "id": 171, "mol": "K(Ga)H(Cm)", "sha": "6b2393a9a028cd582f782ddd6a8bac8b383f962d2948d67ba72dc054d9571e81", "path": "krypton-1.21.11.jar!!w/J.class", "risk": 2, "size": 7238, "type": "java_class", "depth": 1 }, { "id": 174, "mol": "K(Ga)H(Cm)", "sha": "e7f2058e83f61e602185abd1a7cf7e5b0e918d39bc97aa8004b7754ec104c976", "path": "krypton-1.21.11.jar!!w/K.class", "risk": 2, "size": 7199, "type": "java_class", "depth": 1 }, { "ctx": [ { "b": "+kO#^0000+0U+[vcKo-32MVvW0DekAA0MF:2MX@K0DOIECl!j]2MYnT0E+pPGA}Qm2MY[\u003c0G)Y?MiWI:2M.ZD0L]3x.uZhO2M+Oy0GWJ!KP$]S2lyw20IfI%P9Czq2lz)J0M+M", "ln": 0 }, { "b": "z.B[eBz#wAq/)4\u003evqO7b02c?goLO0Vvj#C9zF7Q#vRPE:BuoH66EUz7ygho]fkL6mxd)h9A+PA7i@]r)c[d\u00268vrM6jzE)]yrz(HL0rs2^dnjF+C404wwPPO9qCoC@zF\u003c2}BzkVhi@]s3c[d\u00268vrM6jB-.tlfg68*wI#v\u003cl$G\u003eDwmY^y0rs8/dnjF+C404DBzkLAlsB}Dhz=WFzEWP}wPx\u003ck02u$ioLO0Vvj#+Bx(2B]By/G3Bz(gY0rr-XdnjF+C404DBzkLAoLFM\u0026i@]s2c[d\u0026cwPPOxx(mG(A:-N4fjO*bB8$XAf!+V\u002600:]3oM@dai@]r-c[ef$00sR#", "ln": 1444 }, { "b": "03rQ[lqhc5C404wx(tUmxKL}5wPPN)xKL}5wPQ0.rSJg3ecb.Kf984NfAzdOf-.mPiSPi+jzwXEBuPZ95jgqNBAqLAvq[}LBzbP6A@=mzlVlHD0rrJ}z/ff3xcpb^vrb]W01qkkzGGDcBs*EqAaG4I2sJckz!9B10rru[zEWP}wPv!K6gD!XwPw]4ay/t2wGUP0A=VsC0rrx%pe+aTpd4CJ01qCpzE)\u0026Qy*?yawPE\u003eL4m$CXvqGT*ay/t2wG.6O9zx%Yz7/WBC(", "ln": 3872 }, { "b": "B-muY1X:a[y=.T$5ku.TxM4ATvrb^[wPRH7A@=mzp!$1?0rrB8x\u003eIr(BAIRn0rrE9z/{8gwKZxIwDq=uq/(CTyFwkRraflLwDq=mrA8B{h#%0\u003crD8+)vpQG)vqfK?", "ln": 4232 }, { "b": "fl/6)CxUSJz/PXDB-IqfzEWP}wN\u003e/w0B=6f3$sc[y?m3)r://!wDq=iv/VMkv@c78wDq=lv@C)?0rs6Gz/4dyA^qRCz/djBz!a0bwIlzVBy/96A^mV=6K#5#fkCPNAcc2ofkUSrB.\u003eRxvGuDyv@DiqyJsYtBz(4IzeS%cy?knf0rr\u003cAz/4dyA^qRCz/djHwPS3dzF7Rk0rsAQz/fVdzGF2xcuBDIByxzSBy/Yscs}Bvx(XGawmo+8jU[#N0rrdh0rrsmwN/T?wDq=rwnc9{z/fD7v@}.K0C8oi24.WZz!9zW01JNTv@C)?rbUYSA+PA70rrsnADLYaA@=mCwQ4=@B-.f}00cWj019sLwO+):f/I3F0rrsoz/PY6Bo8vxx8}#rxjVfJy\u0026B5@0rrvqwPQmMzE-+F2wmQ\u0026ltQ^Q0rryrwPQm:By/H]01iBJBvfFUwOk}4C(W)LxjVfMwN/T?wPv!K2XNZ\u003cm@\u0026fLzuf.ExjVfRzG6-uq/)4\u003evqM2B3ti{(o\u003ewx!vp%cL019vIBwlW:B.\u003eSg0rrvqwPQWQzdJ.F4}/D}pJZ+#B-ZM7A+eV@0rrspwPQ*Ywb#VrxjVf-wPS3dzFa1\u003e01ANLBx9u$l$G\u003eDwmY=Z01ANLBx9u$mq=QNwmY=Z00)jGBxh*^B.7NN0CzGl2wvK!pgXV(0rr%IBAzFyiXJc%Aa9*fwIdFhz7+]xBA?)d02!%wsxFWcsxFWcsxFWcsxFWcsxFWcsxFWc0rr\u003cpsxFWcsxFWcsxFWcsxFWcsxFWc0rrdm0rrvsB46}+BA)(!32aDHzEE0\u003cwN\u003e/w2X!x(A::6dASDdIygho]fjx6DfgfU]z/L\u003cU9bn]9vj#tkfg6@awKguSvr\u003eBZAcln3BAg@3z2\u003cRSygho]fkktTlv0V:l2}0OC#5N8Acln3BAg@3z2\u003cRIygho]fkktTnP5G\u0026Bw)p4wNPAR02ffRC404rz.B[eBz#wAq/)4\u003evqM2B5O+-$vj#C9zF7Q?z/oD6vqV8C5nCS%vj#C9zF7Q\u003cz/]J9wDq=Aygho]fkL6mxd(X#v}xR3x(v\u003e\u002601S*MC404uvqYZhmR)0KBo8vNy5", "ln": 4420 }, { "b": "wIl+?BzbP6nmuyDy?mVkoMa\u0026+B-muYbX*+hvj#C9zF7RpzGY@lwIl#7A+PA7lVl\u003cLvrs$Ev@#TfC(W)-ygho]fk+uyfgZhbA8/!flVl\u003cWwN/*@z/bNQ3#fi]vj#IfBt3S(nDw/1ygho]fk+uyfi7[z0rr^FvrM6jzE)]yrz(HVzEWP}wPv!Ka.\u003eCevj#Ijz.CQlvrcB2Bt3NmvqYQ:A+4KJvrcB2BAmD.5nCS%vj#+Bx(2B?vrl0rgYWN[ygho]flIwJy+Fa-B7El^bT=iNz!9B10rr%KvrM6jB-.tlfg68*wI#v\u003cmq=QNwmY=Z01%3PC404DBzkLAnPXJ:vruBd0rrQAvrM6jB-.tlfhc83Bo8vZygho]flIwJy+H9GA4:Z+nL?#@Acln3BAg@3z2\u003cRTygho]flIwJy+H9GA4:Z+nL\u0026i9Bz#wAq/)4\u003evqM2B18zE[0rrsuwO#d5xAn8Hzddi\u003elVl\u003cLvrtN+Bza3WzGx]dzGG}200m1E0rrHAwPRu)vpKy$A^mV=3VfD%xM4A*f/g:B0rrHAwPRQ7wm45GfGf1j3VfD%xM4A*f/p*y0rr{NwPPOxx(mG(A:-N4fjO*bB8$XAfGxdl7J9/afkUAvwN/:?w]]Xoy*?yauO:z\u003c0rrmuwQ5p$00WvVl#M%O0rrQFAaJ]Oz/fD7v@#B6zuf.BAa9^dwKHDVvR/PR019WNA=U!Yy\u0026r:70rryAvrcB2nP5RJ00vmICl4WLA+eV\u0026l2pv7D30Rs0rrvBwPhD]v}tVv3uxY%y***+l2pur00vm:zuf.rA@=mMB7GCXz/fD7v@$W:zdNTdBo8vHB7GCYz+\u003eH$Aclm601K6YBw=WUwk)nWwP8Zk0rrWLwPQ*YADL\u0026lBwls*xM4zZ01%u:Bw=W\u0026B.bSop\u0026ZF[wPz)r0rryDwPQ%Yy\u0026%p\u002600NB.y?W$(00NB=vrcC\u003c010Z?vSMTix(mL:01i)!lv0V:l2}0OC(W)JBz\u003e91A+PA70rrpBz=GXe0rrsCz!AZ0wDq=lBAh8j0rrdz0rrvFvqH6$pI6Rc19Vzb0rrjCfj\u003ej+19Vzm0rr^Svru73eN@Zpw[+)fwQ5fjA=.rZ6l^(bwPxwjz/ff3xdW?mAbP=s0rrQNx([3bB-ZC*wmPy(x8}#oCxdztwDjB+li4@8000f53ius\u003eH5.hNk()wOFDbVIk()UWFDbVIk([4/J@PdWk([X2J@PdW4fczfBoau30rEuz001!P0@@u4001w@5^+\u0026zl:)4?dIq=\u002607XNL0KR]0dG^6Un?6}J086*4PENnFn3J3]000", "ln": 5511 } ], "depth": 1, "facts": { "imp": [ [ "", "net/minecraft/class_309" ], [ "", "com/krypton/module/c" ], [ "", "java/io/ByteArrayInputStream" ], [ "", "java/lang/Float" ], [ "", "java/net/URL" ], [ "", "java/net/URI" ], [ "", "net/minecraft/class_310" ], [ "", "java/lang/invoke/StringConcatFactory" ], [ "", "java/io/InputStream" ], [ "", "[B" ], [ "", "com/krypton/module/Category" ], [ "", "java/util/Base64" ], [ "", "java/util/List" ], [ "", "java/lang/Boolean" ], [ "", "java/util/Iterator" ], [ "", "java/lang/Throwable" ], [ "", "java/lang/StringBuilder" ], [ "", "java/io/ByteArrayOutputStream" ], [ "", "java/lang/Thread" ], [ "", "java/util/zip/GZIPInputStream" ], [ "", "java/lang/Integer" ], [ "", "java/lang/Exception" ], [ "", "java/net/HttpURLConnection" ], [ "", "com/krypton/setting/d" ], [ "", "java/util/Base64$Decoder" ], [ "", "java/lang/Double" ], [ "", "w/a" ], [ "", "w/f" ], [ "", "java/lang/invoke/LambdaMetafactory" ], [ "", "java/lang/invoke/MethodHandles$Lookup" ], [ "", "java/net/URLEncoder" ], [ "", "com/krypton/module/b" ], [ "", "java/io/OutputStream" ], [ "", "java/util/Base64$Encoder" ], [ "", "java/lang/Object" ], [ "", "java/lang/invoke/MethodHandles" ], [ "", "java/nio/charset/StandardCharsets" ], [ "", "java/lang/Runnable" ], [ "", "java/util/zip/GZIPOutputStream" ], [ "", "[Ljava/lang/String;" ], [ "", "java/lang/String" ], [ "", "java/awt/Color" ], [ "w/l", "w/l.a" ], [ "w/l", "a" ], [ "java/lang/String", "java/lang/String.format" ], [ "java/lang/String", "format" ], [ "java/lang/String", "java/lang/String.equals" ], [ "java/lang/String", "equals" ], [ "com/krypton/module/c", "com/krypton/module/c.a" ], [ "com/krypton/module/c", "a" ], [ "java/lang/Integer", "java/lang/Integer.parseInt" ], [ "java/lang/Integer", "parseInt" ], [ "com/krypton/module/c", "com/krypton/module/c.i" ], [ "com/krypton/module/c", "i" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.append" ], [ "java/lang/StringBuilder", "append" ], [ "java/net/HttpURLConnection", "java/net/HttpURLConnection.disconnect" ], [ "java/net/HttpURLConnection", "disconnect" ], [ "w/l", "w/l.c" ], [ "w/l", "c" ], [ "java/net/HttpURLConnection", "java/net/HttpURLConnection.setConnectTimeout" ], [ "java/net/HttpURLConnection", "setConnectTimeout" ], [ "java/net/HttpURLConnection", "java/net/HttpURLConnection.setRequestProperty" ], [ "java/net/HttpURLConnection", "setRequestProperty" ], [ "java/util/Base64$Decoder", "java/util/Base64$Decoder.decode" ], [ "java/util/Base64$Decoder", "decode" ], [ "w/l", "w/l.h" ], [ "w/l", "h" ], [ "java/util/zip/GZIPOutputStream", "java/util/zip/GZIPOutputStream.\u003cinit\u003e" ], [ "java/util/zip/GZIPOutputStream", "\u003cinit\u003e" ], [ "w/f", "w/f.\u003cinit\u003e" ], [ "w/f", "\u003cinit\u003e" ], [ "w/l", "w/l.c" ], [ "w/l", "c" ], [ "java/util/Iterator", "java/util/Iterator.hasNext" ], [ "java/util/Iterator", "hasNext" ], [ "java/io/ByteArrayOutputStream", "java/io/ByteArrayOutputStream.\u003cinit\u003e" ], [ "java/io/ByteArrayOutputStream", "\u003cinit\u003e" ], [ "java/util/Iterator", "java/util/Iterator.next" ], [ "java/util/Iterator", "next" ], [ "java/lang/Float", "java/lang/Float.valueOf" ], [ "java/lang/Float", "valueOf" ], [ "java/lang/Thread", "java/lang/Thread.\u003cinit\u003e" ], [ "java/lang/Thread", "\u003cinit\u003e" ], [ "java/net/HttpURLConnection", "java/net/HttpURLConnection.setRequestMethod" ], [ "java/net/HttpURLConnection", "setRequestMethod" ], [ "java/util/List", "java/util/List.iterator" ], [ "java/util/List", "iterator" ], [ "com/krypton/module/b", "com/krypton/module/b.toggle" ], [ "com/krypton/module/b", "toggle" ], [ "java/lang/Float", "java/lang/Float.parseFloat" ], [ "java/lang/Float", "parseFloat" ], [ "java/util/zip/GZIPOutputStream", "java/util/zip/GZIPOutputStream.write" ], [ "java/util/zip/GZIPOutputStream", "write" ], [ "java/lang/String", "java/lang/String.replace" ], [ "java/lang/String", "replace" ], [ "w/l", "w/l.d" ], [ "w/l", "d" ], [ "net/minecraft/class_309", "net/minecraft/class_309.method_1455" ], [ "net/minecraft/class_309", "method_1455" ], [ "com/krypton/module/b", "com/krypton/module/b.isEnabled" ], [ "com/krypton/module/b", "isEnabled" ], [ "w/l", "w/l.f" ], [ "w/l", "f" ], [ "com/krypton/setting/d", "com/krypton/setting/d.getValue" ], [ "com/krypton/setting/d", "getValue" ], [ "com/krypton/module/c", "com/krypton/module/c.getModules" ], [ "com/krypton/module/c", "getModules" ], [ "w/l", "w/l.g" ], [ "w/l", "g" ], [ "java/awt/Color", "java/awt/Color.\u003cinit\u003e" ], [ "java/awt/Color", "\u003cinit\u003e" ], [ "java/lang/String", "java/lang/String.split" ], [ "java/lang/String", "split" ], [ "java/lang/Thread", "java/lang/Thread.start" ], [ "java/lang/Thread", "start" ], [ "java/lang/String", "java/lang/String.split" ], [ "java/lang/String", "split" ], [ "java/lang/Throwable", "java/lang/Throwable.addSuppressed" ], [ "java/lang/Throwable", "addSuppressed" ], [ "java/lang/invoke/LambdaMetafactory", "java/lang/invoke/LambdaMetafactory.metafactory" ], [ "java/lang/invoke/LambdaMetafactory", "metafactory" ], [ "java/io/InputStream", "java/io/InputStream.readAllBytes" ], [ "java/io/InputStream", "readAllBytes" ], [ "com/krypton/module/b", "com/krypton/module/b.getSettings" ], [ "com/krypton/module/b", "getSettings" ], [ "com/krypton/setting/d", "com/krypton/setting/d.setValue" ], [ "com/krypton/setting/d", "setValue" ], [ "java/net/HttpURLConnection", "java/net/HttpURLConnection.setDoOutput" ], [ "java/net/HttpURLConnection", "setDoOutput" ], [ "java/util/Base64$Encoder", "java/util/Base64$Encoder.encodeToString" ], [ "java/util/Base64$Encoder", "encodeToString" ], [ "java/lang/String", "java/lang/String.\u003cinit\u003e" ], [ "java/lang/String", "\u003cinit\u003e" ], [ "java/lang/String", "java/lang/String.getBytes" ], [ "java/lang/String", "getBytes" ], [ "com/krypton/module/b", "com/krypton/module/b.getBind" ], [ "com/krypton/module/b", "getBind" ], [ "java/awt/Color", "java/awt/Color.getRed" ], [ "java/awt/Color", "getRed" ], [ "java/io/OutputStream", "java/io/OutputStream.write" ], [ "java/io/OutputStream", "write" ], [ "com/krypton/module/Category", "com/krypton/module/Category.e" ], [ "com/krypton/module/Category", "e" ], [ "java/net/HttpURLConnection", "java/net/HttpURLConnection.getInputStream" ], [ "java/net/HttpURLConnection", "getInputStream" ], [ "java/net/HttpURLConnection", "java/net/HttpURLConnection.setReadTimeout" ], [ "java/net/HttpURLConnection", "setReadTimeout" ], [ "java/io/OutputStream", "java/io/OutputStream.close" ], [ "java/io/OutputStream", "close" ], [ "java/net/URI", "java/net/URI.\u003cinit\u003e" ], [ "java/net/URI", "\u003cinit\u003e" ], [ "java/net/URI", "java/net/URI.toURL" ], [ "java/net/URI", "toURL" ], [ "java/lang/String", "java/lang/String.valueOf" ], [ "java/lang/String", "valueOf" ], [ "java/io/ByteArrayOutputStream", "java/io/ByteArrayOutputStream.toByteArray" ], [ "java/io/ByteArrayOutputStream", "toByteArray" ], [ "java/util/Base64", "java/util/Base64.getUrlDecoder" ], [ "java/util/Base64", "getUrlDecoder" ], [ "java/util/Base64$Encoder", "java/util/Base64$Encoder.withoutPadding" ], [ "java/util/Base64$Encoder", "withoutPadding" ], [ "java/lang/String", "java/lang/String.replaceAll" ], [ "java/lang/String", "replaceAll" ], [ "java/util/zip/GZIPInputStream", "java/util/zip/GZIPInputStream.close" ], [ "java/util/zip/GZIPInputStream", "close" ], [ "java/lang/Double", "java/lang/Double.parseDouble" ], [ "java/lang/Double", "parseDouble" ], [ "java/util/zip/GZIPInputStream", "java/util/zip/GZIPInputStream.readAllBytes" ], [ "java/util/zip/GZIPInputStream", "readAllBytes" ], [ "net/minecraft/class_310", "net/minecraft/class_310.field_1774" ], [ "net/minecraft/class_310", "field_1774" ], [ "com/krypton/module/b", "com/krypton/module/b.\u003cinit\u003e" ], [ "com/krypton/module/b", "\u003cinit\u003e" ], [ "java/util/zip/GZIPInputStream", "java/util/zip/GZIPInputStream.\u003cinit\u003e" ], [ "java/util/zip/GZIPInputStream", "\u003cinit\u003e" ], [ "java/net/URLEncoder", "java/net/URLEncoder.encode" ], [ "java/net/URLEncoder", "encode" ], [ "net/minecraft/class_310", "net/minecraft/class_310.execute" ], [ "net/minecraft/class_310", "execute" ], [ "w/l", "w/l.a" ], [ "w/l", "a" ], [ "w/l", "w/l.a" ], [ "w/l", "a" ], [ "java/nio/charset/StandardCharsets", "java/nio/charset/StandardCharsets.UTF_8" ], [ "java/nio/charset/StandardCharsets", "UTF_8" ], [ "java/lang/Boolean", "java/lang/Boolean.valueOf" ], [ "java/lang/Boolean", "valueOf" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.toString" ], [ "java/lang/StringBuilder", "toString" ], [ "java/util/zip/GZIPOutputStream", "java/util/zip/GZIPOutputStream.close" ], [ "java/util/zip/GZIPOutputStream", "close" ], [ "com/krypton/module/b", "com/krypton/module/b.getName" ], [ "com/krypton/module/b", "getName" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.\u003cinit\u003e" ], [ "java/lang/StringBuilder", "\u003cinit\u003e" ], [ "w/l", "w/l.a" ], [ "w/l", "a" ], [ "w/l", "w/l.b" ], [ "w/l", "b" ], [ "java/lang/Exception", "java/lang/Exception.getMessage" ], [ "java/lang/Exception", "getMessage" ], [ "java/lang/String", "java/lang/String.substring" ], [ "java/lang/String", "substring" ], [ "net/minecraft/class_310", "net/minecraft/class_310.method_1507" ], [ "net/minecraft/class_310", "method_1507" ], [ "java/lang/Integer", "java/lang/Integer.valueOf" ], [ "java/lang/Integer", "valueOf" ], [ "w/l", "w/l.b" ], [ "w/l", "b" ], [ "java/lang/Integer", "java/lang/Integer.parseInt" ], [ "java/lang/Integer", "parseInt" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.append" ], [ "java/lang/StringBuilder", "append" ], [ "java/lang/String", "java/lang/String.length" ], [ "java/lang/String", "length" ], [ "java/lang/Boolean", "java/lang/Boolean.booleanValue" ], [ "java/lang/Boolean", "booleanValue" ], [ "com/krypton/module/c", "com/krypton/module/c.INSTANCE" ], [ "com/krypton/module/c", "INSTANCE" ], [ "java/lang/String", "java/lang/String.isEmpty" ], [ "java/lang/String", "isEmpty" ], [ "java/net/URL", "java/net/URL.openConnection" ], [ "java/net/URL", "openConnection" ], [ "java/util/Base64", "java/util/Base64.getUrlEncoder" ], [ "java/util/Base64", "getUrlEncoder" ], [ "java/awt/Color", "java/awt/Color.getBlue" ], [ "java/awt/Color", "getBlue" ], [ "w/l", "w/l.b" ], [ "w/l", "b" ], [ "java/lang/String", "java/lang/String.trim" ], [ "java/lang/String", "trim" ], [ "java/lang/invoke/StringConcatFactory", "java/lang/invoke/StringConcatFactory.makeConcatWithConstants" ], [ "java/lang/invoke/StringConcatFactory", "makeConcatWithConstants" ], [ "net/minecraft/class_310", "net/minecraft/class_310.method_1551" ], [ "net/minecraft/class_310", "method_1551" ], [ "w/l", "w/l.b" ], [ "w/l", "b" ], [ "java/awt/Color", "java/awt/Color.getGreen" ], [ "java/awt/Color", "getGreen" ], [ "com/krypton/module/b", "com/krypton/module/b.b" ], [ "com/krypton/module/b", "b" ], [ "java/net/HttpURLConnection", "java/net/HttpURLConnection.getOutputStream" ], [ "java/net/HttpURLConnection", "getOutputStream" ], [ "com/krypton/module/b", "com/krypton/module/b.getCategory" ], [ "com/krypton/module/b", "getCategory" ], [ "java/util/Base64", "java/util/Base64.getDecoder" ], [ "java/util/Base64", "getDecoder" ], [ "java/io/ByteArrayInputStream", "java/io/ByteArrayInputStream.\u003cinit\u003e" ], [ "java/io/ByteArrayInputStream", "\u003cinit\u003e" ], [ "java/lang/Double", "java/lang/Double.valueOf" ], [ "java/lang/Double", "valueOf" ], [ "w/a", "w/a.a" ], [ "w/a", "a" ], [ "java/awt/Color", "java/awt/Color.getAlpha" ], [ "java/awt/Color", "getAlpha" ] ], "metrics": { "file": { "size": 7115, "entropy": 5.72 }, "class": { "major_version": 65, "interface_count": 0, "method_ref_count": 107, "constant_pool_size": 532, "external_class_count": 42 }, "binary": { "peak_region_bytes": 5120, "peak_region_entropy": 5.54 }, "imports": { "count": 149 }, "functions": { "count": 13 } } }, "id": 175, "mol": "K(Ga)O(C)H₄(Cm₄Db₆FPo)Md", "path": "krypton-1.21.11.jar!!w/l.class", "pid": 0, "risk": 14, "sha": "0181e1129ef7f86423d6fa3ef2af3d6069f3ac325ad85285e589b2c3b810d7e2", "size": 7115, "traits": [ { "id": "net/url", "conf": 0.85, "crit": 3, "desc": "URL reference" }, { "id": "metadata/file/string/identity::jvm-post-token", "conf": 0.9, "crit": 3, "desc": "JVM constant-pool POST token" }, { "id": "micro-behaviors/communications/http/lib/urlconnection::java-url-class-bytecode", "atk": "T1071.001", "mbc": "C0002", "conf": 0.86, "crit": 3, "desc": "Java URL class reference", "spans": [ [ 1508, 16 ], [ 1527, 26 ], [ 5619, 12 ], [ 5634, 19 ] ] }, { "id": "micro-behaviors/communications/http/lib/urlconnection::jvm-http-urlconnection-class-ref", "atk": "T1071.001", "mbc": "C0002", "conf": 0.9, "crit": 3, "desc": "JVM HttpURLConnection class ref" }, { "id": "micro-behaviors/communications/http/lib/urlconnection::jvm-http-urlconnection-inputstream", "atk": "T1071.001", "mbc": "C0002", "conf": 0.95, "crit": 3, "desc": "JVM reads an HTTP response body", "spans": [ [ 4808, 41 ] ] }, { "id": "micro-behaviors/communications/http/lib/urlconnection::jvm-url-class-ref", "atk": "T1071.001", "mbc": "C0002", "conf": 0.9, "crit": 3, "desc": "JVM URL class reference" }, { "id": "micro-behaviors/communications/http/lib/urlconnection::jvm-urlconnection-open-connection", "atk": "T1071.001", "mbc": "C0002", "conf": 0.92, "crit": 3, "desc": "JVM opens a URL connection", "spans": [ [ 6038, 27 ] ] }, { "id": "micro-behaviors/communications/http/lib/urlconnection::request-java-bytecode", "atk": "T1071.001", "mbc": "C0002", "conf": 0.82, "crit": 3, "desc": "Java bytecode HTTP connection", "spans": [ [ 5575, 77 ] ] }, { "id": "micro-behaviors/communications/http/post::java-post-method", "atk": "T1071.001", "mbc": "C0002", "conf": 0.8, "crit": 1, "desc": "Java HTTP POST method", "spans": [ [ 4264, 0 ] ] }, { "id": "micro-behaviors/communications/http/post::jvm-bytecode-do-output", "atk": "T1071.001", "mbc": "C0002", "conf": 0.86, "crit": 3, "desc": "Java bytecode HTTP output body enabled", "spans": [ [ 6167, 11 ] ] }, { "id": "micro-behaviors/communications/proxy/tunnel::byte-output-stream", "atk": "T1090", "mbc": "C0003", "conf": 0.5, "crit": 3, "desc": "Java ByteArrayOutputStream usage", "spans": [ [ 3936, 21 ], [ 5132, 21 ], [ 6285, 21 ] ] }, { "id": "micro-behaviors/communications/socket/disconnect::disconnect-reference", "conf": 0.8, "crit": 3, "desc": "Disconnect operation reference", "spans": [ [ 4636, 10 ] ] }, { "id": "micro-behaviors/data/buffer::bytearrayinputstream-ref", "conf": 0.88, "crit": 3, "desc": "Java ByteArrayInputStream class" }, { "id": "micro-behaviors/data/buffer::bytearrayoutputstream-ref", "conf": 0.88, "crit": 3, "desc": "Java ByteArrayOutputStream class", "spans": [ [ 5124, 29 ] ] }, { "id": "micro-behaviors/data/buffer::jvm-outputstream-write", "conf": 0.96, "crit": 2, "desc": "JVM writes bytes to output stream", "spans": [ [ 6419, 0 ] ] }, { "id": "micro-behaviors/data/compress/gzip::gzip-outputstream", "conf": 0.86, "crit": 3, "desc": "Java GZIPOutputStream class", "spans": [ [ 5835, 30 ] ] }, { "id": "micro-behaviors/data/decode/base64::java-base64-decode-bytecode-call", "conf": 0.96, "crit": 3, "desc": "Java Base64 decode call", "spans": [ [ 4627, 31 ] ] }, { "id": "micro-behaviors/data/decode/base64::java-base64-decoder-bytecode-call", "conf": 0.94, "crit": 3, "desc": "Java Base64 decoder accessor call", "spans": [ [ 4784, 27 ] ] }, { "id": "micro-behaviors/data/decode/base64::java-base64-decoder-class", "conf": 0.92, "crit": 3, "desc": "JVM Base64 decoder class reference", "spans": [ [ 1556, 28 ], [ 5711, 24 ] ] }, { "id": "micro-behaviors/data/decode/base64::java-base64-url-decoder-bytecode-call", "conf": 0.94, "crit": 3, "desc": "Java URL-safe Base64 decoder accessor call", "spans": [ [ 4902, 30 ] ] }, { "id": "micro-behaviors/data/decompress/gzip::gzip-inputstream", "conf": 1.0, "crit": 3, "desc": "Java GZIPInputStream class", "spans": [ [ 5803, 29 ] ] }, { "id": "micro-behaviors/data/encode/base64::jvm-base64-encode-bytecode", "conf": 0.94, "crit": 3, "desc": "JVM Base64 encodeToString call", "spans": [ [ 4662, 39 ] ] }, { "id": "micro-behaviors/data/string/conversion::tostring-token", "conf": 1.0, "crit": 3, "desc": "References the toString conversion method", "spans": [ [ 6291, 8 ] ] }, { "id": "micro-behaviors/fs/read/file/full::java-readallbytes", "conf": 0.9, "crit": 3, "desc": "Java reads whole file bytes", "spans": [ [ 6099, 12 ] ] }, { "id": "micro-behaviors/process/thread/lifecycle::jvm-thread-start-bytecode", "conf": 0.94, "crit": 3, "desc": "JVM starts a thread", "spans": [ [ 6257, 22 ] ] }, { "id": "objectives/command-and-control/infrastructure/paste::dpaste", "conf": 0.7, "crit": 3, "desc": "Dpaste reference", "spans": [ [ 4967, 10 ] ] }, { "id": "well-known/game/mod::minecraft-client-class-ref", "conf": 0.9, "crit": 3, "desc": "Minecraft client singleton class reference", "spans": [ [ 5996, 23 ] ] }, { "id": "micro-behaviors/communications/http/url/domain::http-url-binary", "atk": "T1071.001", "mbc": "C0002", "conf": 0.7, "crit": 3, "desc": "Embedded HTTP or WebSocket URL", "spans": [ [ 4959, 19 ] ] }, { "id": "micro-behaviors/communications/http/post::jvm-urlconnection-post-bytecode", "atk": "T1071.001", "mbc": "C0002", "conf": 0.92, "crit": 3, "desc": "Java bytecode URLConnection POST request", "uses": [ 1, 7, 9 ], "spans": [ [ 5575, 77 ], [ 6167, 11 ] ] }, { "id": "micro-behaviors/data/decode/base64::java-base64-decoding-bytecode", "conf": 0.94, "crit": 3, "desc": "Java bytecode Base64 decoding", "uses": [ 16, 17, 19 ], "spans": [ [ 4627, 31 ], [ 4784, 27 ], [ 4902, 30 ] ] }, { "id": "micro-behaviors/data/decompress/gzip::gzip-decompress", "conf": 0.85, "crit": 3, "desc": "Java GZIP in-memory decompression", "uses": [ 12, 20 ], "spans": [ [ 5803, 29 ] ] } ], "type": "java_class" }, { "id": 176, "mol": "K(Ga)H(Cm)", "sha": "fe0d97ca3a4b501e5ef301284152c3cc387425ed373f243664df4e43eaa9bcc3", "path": "krypton-1.21.11.jar!!w/L.class", "risk": 2, "size": 7203, "type": "java_class", "depth": 1 }, { "id": 178, "mol": "K(Ga)H(Cm)", "sha": "3acb310ea22e4da8706ba56a9781b3c1ec9d42f091000d87fbe59b068a35a17e", "path": "krypton-1.21.11.jar!!w/M.class", "risk": 2, "size": 8279, "type": "java_class", "depth": 1 }, { "id": 179, "mol": "K(Ga)O(As)H(Db₂)", "sha": "7d37637c90de603ee2ef3733c4861163d858f4bba05076a801f312cc4e07dad4", "path": "krypton-1.21.11.jar!!w/n.class", "risk": 39, "size": 21764, "type": "java_class", "depth": 1 }, { "id": 180, "mol": "O₂(AlEu)H₂(DbPo)", "sha": "4477f385e0cdcd579183db32d7f714cc6e3e0b396605f4a2751cb96855faf8a4", "path": "krypton-1.21.11.jar!!w/N.class", "risk": 4, "size": 1939, "type": "java_class", "depth": 1 }, { "id": 182, "mol": "K(Ga)", "sha": "7851d9aa48dcf39fde3d6fcd7fc92b45b71e091687a63d6fe295e992843a390a", "path": "krypton-1.21.11.jar!!w/o.class", "risk": 1, "size": 4908, "type": "java_class", "depth": 1 }, { "id": 183, "mol": "H₅(Cm₃CrDb₂F₃Po)Md", "sha": "5c9e6ae2d75e53f03a3bd9f1eb8c8cb6357d10bc67a4d731372e8cedc608f8b1", "path": "krypton-1.21.11.jar!!w/O.class", "risk": 8, "size": 7014, "type": "java_class", "depth": 1 }, { "id": 185, "mol": "K(Ga)", "sha": "864510d6512ec50ac16effd665d7b85136bd3b65cd1843f5982950c1172bb4eb", "path": "krypton-1.21.11.jar!!w/q.class", "risk": 1, "size": 5886, "type": "java_class", "depth": 1 }, { "id": 186, "mol": "K(Ga)", "sha": "d3b9ccc83fdcabd8bdc77cf339ee88dd406a069032db8a48ab2ac487f1705976", "path": "krypton-1.21.11.jar!!w/r.class", "risk": 1, "size": 6371, "type": "java_class", "depth": 1 }, { "id": 187, "mol": "K(Ga)", "sha": "8dc82c48244a0be3dc7e345ec12629a4baac1984315911b5f6f4c508acf2bf6e", "path": "krypton-1.21.11.jar!!w/s.class", "risk": 1, "size": 2607, "type": "java_class", "depth": 1 }, { "id": 188, "mol": "K(Ga)", "sha": "6bb87a703cbe98dce82c0c393c16ae0cc3b8937a0325a5e4ce653a38909962d2", "path": "krypton-1.21.11.jar!!w/t.class", "risk": 1, "size": 4412, "type": "java_class", "depth": 1 }, { "id": 189, "mol": "K(Ga)", "sha": "768c592316ffd8e0293120b65b279fe866050dea46a30a64fc50b30608b28c46", "path": "krypton-1.21.11.jar!!w/u.class", "risk": 1, "size": 2372, "type": "java_class", "depth": 1 }, { "id": 190, "mol": "K(Ga)", "sha": "2f577c5bb2aaf4bf65e392b2592e566207b0c72763548869972cc636b92e9651", "path": "krypton-1.21.11.jar!!w/v.class", "risk": 1, "size": 4432, "type": "java_class", "depth": 1 }, { "id": 192, "mol": "K(Ga)", "sha": "eda1815e8a411466d0d7a1d592ad5913e48b74c7c7918f9c2da806f48f372ff1", "path": "krypton-1.21.11.jar!!w/x.class", "risk": 1, "size": 1720, "type": "java_class", "depth": 1 }, { "id": 193, "mol": "K(Ga)", "sha": "a7b926be0e93e6e52cba3224fcce243bc9faaf8e3b6be6749b3371bb1333ce78", "path": "krypton-1.21.11.jar!!w/y.class", "risk": 1, "size": 3863, "type": "java_class", "depth": 1 }, { "id": 194, "mol": "K(Ga)H(Db)", "sha": "9e4cad218b2c6c257e805df0aa0340e5ccedaa60ca1ef0631247b4e82cdbf629", "path": "krypton-1.21.11.jar!!w/z.class", "risk": 2, "size": 5526, "type": "java_class", "depth": 1 }, { "id": 197, "mol": "Md(Pa)", "sha": "88043ec5fe798fbde2fe715f94cd0b0da329f7ef6fe8c7452c50fcbea0d9873d", "path": "krypton-1.21.11.jar!!fabric.mod.json", "risk": 1, "size": 656, "type": "json", "depth": 1 }, { "id": 199, "mol": "K(Ga)O(As)H₂(Db₂F₂)", "sha": "0e569a65fa517127b53e906ef4fdff253a454a3efaf194e49a73f2e2424caadc", "path": "krypton-1.21.11.jar!!w/AutoMine.class", "risk": 7, "size": 35441, "type": "java_class", "depth": 1 }, { "id": 201, "mol": "K(Ga)", "sha": "16ac4048ad4f3d3cf2182a89ff7658f6e57b3f0a9e8dd64c18d68177479e1956", "path": "krypton-1.21.11.jar!!w/AutoFirework.class", "risk": 1, "size": 4337, "type": "java_class", "depth": 1 }, { "id": 203, "mol": "K(Ga)", "sha": "a64041e483175a74b56fdac016bb33ab384a28d47ff5c22e318f50c08bf8fe3c", "path": "krypton-1.21.11.jar!!w/NetheriteFinder.class", "risk": 1, "size": 16312, "type": "java_class", "depth": 1 }, { "ctx": [ { "b": "+kO#^0000+2vN]s0SSrc00AYg1PO-c00vA#m/-O}nLSh-k#6^o0rro%Cp#DF3igbc2N*Xt015-b0BV0ef^].kwPPOxx(mG(A:-N4fjO*bB8$XAgCR3=ygho]fkL6mxd)h9A+Py", "ln": 0 }, { "b": "z/4dyA^qRCz/djBz!a0bwImD$09]Q93}1@Jw[+)2q!PPWwEnAA0al3ivgicB0aM3f6K#5#fkCPNAcc2ofkUSrB.\u003eRxvGuDlxjVfWvqPMR02c?goLO0Vvj#C9zF7R3Bn", "ln": 854 }, { "b": "wO#2V04/P)ygho]fkL6mxd)h9A+PA7j1i\u003crvrM6jy*?i]fh($kx(mMIB.LV5wPx\u003ct0pZ6!3\u0026{kav/VMnBz\u003e91A+PA73ikzM@%O]d0rAi32Y\u003cN0r://!wDq=Cc}[w:C404uvqYZhpHX6Iv@%^YrTF*/0rS-h1ootv00cZt05aAT3\u0026{OkY-w9nzddU(ktoqC1u?M%I3b/=W?/tJ4/)7E0sY2*0rrvEx\u0026wIIy?i}NfAzW)0s5PY2(\u003eFp5EXWM", "ln": 2695 }, { "b": "aohxAk\u0026qRx1omNxuiAK.000c3W6WvDkTkqH1oi:CvGX$R000c^NvfGDkn/(T3ivabSS@N93\u003c0BgTPnzrzE)]yze0)0v@=0\u0026Bt4cuvrlG%gCHM:01iTPBzbP6uOKz}f-.m[c[d\u0026cwPPOxx(mG(A:-N4fjO*bB8$XAf!+V@01P7J3ivabUNyMq0Kq.a3VfD%xM4A*f/pTz0rs8/oM1A-fkUAvwN/:?w]]Xoy*?yauO\u003cL$j1jho0KI\u003ec3}\u003eR^Acc2oawDA+BQFkU0K\u0026p", "ln": 4177 }, { "b": "1R}aV0rr^NwO(vewLuJNBvf$SwL^qVzGDi?5cS)V1Smq70rrKBwPRQ7wm4nLgbH=]01PkL3\u003cvQJv/VMvxjVfLy?W\u0026$z^^V%raQq@3igOu9T\u0026h]1QCbe6LH])wnC*QBAh8kxg(/YnP5G\u0026Bp50U1TaoTa{wkM02PxTzE^M{mSJiOzE^/OwmOtAC$z))B-W@\u003eYAGL?1TKrT0rrKBwPRQ7wm48Hg+Z-[1Rp?+3\u003cw3Vj]\u003eS(zdN*5z!9ilg+{\u003cw3iZ$AdHVFh", "ln": 13854 }, { "b": "q!o\u0026/x([6jwM9.-w[=F}1\u003eJ+P1YGIOC4y{./-q6Ts7L\u0026Oz/oy#02t:)3\u003cCz/s]!Qhy*?ybnP56ICU.]U02t:{3\u0026?pI1qgXJ0uqBDHxS}Q02L[03\u0026}).\u0026@GcBc}[b?z7/V", "ln": 15665 } ], "depth": 1, "facts": { "imp": [ [ "", "com/krypton/setting/ModeSetting" ], [ "", "net/minecraft/class_11909" ], [ "", "java/util/function/IntFunction" ], [ "", "java/util/EnumSet" ], [ "", "w/p" ], [ "", "java/lang/Object" ], [ "", "java/lang/Boolean" ], [ "", "net/minecraft/class_2248" ], [ "", "[I" ], [ "", "java/lang/invoke/StringConcatFactory" ], [ "", "java/lang/invoke/LambdaMetafactory" ], [ "", "java/util/List" ], [ "", "com/krypton/module/Category" ], [ "", "org/lwjgl/glfw/GLFW" ], [ "", "w/e$PickerLayout" ], [ "", "w/I" ], [ "", "[F" ], [ "", "w/e$BlocksPickerCtx" ], [ "", "w/e$MobPickerCtx" ], [ "", "[Lcom/krypton/module/Category;" ], [ "", "net/minecraft/class_11905" ], [ "", "org/joml/Matrix3x2fStack" ], [ "", "java/lang/StringBuilder" ], [ "", "net/minecraft/class_1826" ], [ "", "java/util/stream/Stream" ], [ "", "w/bb" ], [ "", "java/util/ArrayList" ], [ "", "java/util/Set" ], [ "", "w/f" ], [ "", "w/b" ], [ "", "java/util/LinkedHashSet" ], [ "", "net/minecraft/class_2561" ], [ "", "w/c" ], [ "", "java/lang/Character" ], [ "", "net/minecraft/class_11908" ], [ "", "com/krypton/module/c" ], [ "", "com/krypton/setting/BlocksSetting" ], [ "", "com/krypton/setting/d" ], [ "", "com/krypton/setting/MobsSetting" ], [ "", "java/lang/Double" ], [ "", "w/d" ], [ "", "java/lang/System" ], [ "", "net/minecraft/class_309" ], [ "", "net/minecraft/class_1802" ], [ "", "java/util/HashMap" ], [ "", "[Ljava/lang/String;" ], [ "", "java/lang/String" ], [ "", "net/minecraft/class_1299" ], [ "", "java/util/Locale" ], [ "", "java/lang/invoke/MethodHandles$Lookup" ], [ "", "java/lang/Throwable" ], [ "", "java/util/EnumMap" ], [ "", "net/minecraft/class_310" ], [ "", "java/util/Optional" ], [ "", "java/lang/Long" ], [ "", "java/lang/Integer" ], [ "", "com/krypton/module/a" ], [ "", "java/lang/Float" ], [ "", "net/minecraft/class_1799" ], [ "", "w/e$ColorPickerLayout" ], [ "", "w/l" ], [ "", "com/krypton/module/b" ], [ "", "net/minecraft/class_332" ], [ "", "java/lang/Math" ], [ "", "java/util/Iterator" ], [ "", "java/awt/Color" ], [ "", "w/G" ], [ "", "net/minecraft/class_1041" ], [ "", "net/minecraft/class_437" ], [ "", "java/util/Objects" ], [ "", "w/e$ColorDragMode" ], [ "", "java/util/stream/IntStream" ], [ "", "java/lang/invoke/MethodHandles" ], [ "", "java/util/Comparator" ], [ "java/util/EnumMap", "java/util/EnumMap.\u003cinit\u003e" ], [ "java/util/EnumMap", "\u003cinit\u003e" ], [ "w/e", "w/e.lambda$getCategoryOffset$0" ], [ "w/e", "lambda$getCategoryOffset$0" ], [ "w/e", "w/e.drawBlocksPicker" ], [ "w/e", "drawBlocksPicker" ], [ "w/e", "w/e.clampVerticalScroll" ], [ "w/e", "clampVerticalScroll" ], [ "w/G", "w/G.p" ], [ "w/G", "p" ], [ "com/krypton/module/b", "com/krypton/module/b.setExpanded" ], [ "com/krypton/module/b", "setExpanded" ], [ "w/e$PickerLayout", "w/e$PickerLayout.height" ], [ "w/e$PickerLayout", "height" ], [ "java/lang/Math", "java/lang/Math.min" ], [ "java/lang/Math", "min" ], [ "java/util/Iterator", "java/util/Iterator.hasNext" ], [ "java/util/Iterator", "hasNext" ], [ "java/lang/String", "java/lang/String.isEmpty" ], [ "java/lang/String", "isEmpty" ], [ "w/e", "w/e.uiWidth" ], [ "w/e", "uiWidth" ], [ "org/joml/Matrix3x2fStack", "org/joml/Matrix3x2fStack.popMatrix" ], [ "org/joml/Matrix3x2fStack", "popMatrix" ], [ "w/e", "w/e.getBindLabel" ], [ "w/e", "getBindLabel" ], [ "net/minecraft/class_11908", "net/minecraft/class_11908.method_74228" ], [ "net/minecraft/class_11908", "method_74228" ], [ "net/minecraft/class_437", "net/minecraft/class_437.method_25426" ], [ "net/minecraft/class_437", "method_25426" ], [ "java/util/HashMap", "java/util/HashMap.get" ], [ "java/util/HashMap", "get" ], [ "w/e", "w/e.withAlpha" ], [ "w/e", "withAlpha" ], [ "w/e", "w/e.multiplyAlpha" ], [ "w/e", "multiplyAlpha" ], [ "java/lang/String", "java/lang/String.lastIndexOf" ], [ "java/lang/String", "lastIndexOf" ], [ "java/lang/System", "java/lang/System.currentTimeMillis" ], [ "java/lang/System", "currentTimeMillis" ], [ "w/e", "w/e.getHue" ], [ "w/e", "getHue" ], [ "w/e$ColorPickerLayout", "w/e$ColorPickerLayout.fieldY" ], [ "w/e$ColorPickerLayout", "fieldY" ], [ "w/e", "w/e.expandedColorSetting" ], [ "w/e", "expandedColorSetting" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.\u003cinit\u003e" ], [ "java/lang/StringBuilder", "\u003cinit\u003e" ], [ "w/e", "w/e.drawInputTextClipped" ], [ "w/e", "drawInputTextClipped" ], [ "net/minecraft/class_1799", "net/minecraft/class_1799.field_8037" ], [ "net/minecraft/class_1799", "field_8037" ], [ "com/krypton/setting/BlocksSetting", "com/krypton/setting/BlocksSetting.getSelectedBlocks" ], [ "com/krypton/setting/BlocksSetting", "getSelectedBlocks" ], [ "com/krypton/setting/MobsSetting", "com/krypton/setting/MobsSetting.getSelectedMobs" ], [ "com/krypton/setting/MobsSetting", "getSelectedMobs" ], [ "w/e", "w/e.computeUiScale" ], [ "w/e", "computeUiScale" ], [ "w/e", "w/e.normalizeKeyName" ], [ "w/e", "normalizeKeyName" ], [ "java/lang/Math", "java/lang/Math.max" ], [ "java/lang/Math", "max" ], [ "w/e", "w/e.lambda$method_25402$1" ], [ "w/e", "lambda$method_25402$1" ], [ "java/lang/String", "java/lang/String.split" ], [ "java/lang/String", "split" ], [ "w/e", "w/e.getFilteredBlocks" ], [ "w/e", "getFilteredBlocks" ], [ "w/e$PickerLayout", "w/e$PickerLayout.searchHeight" ], [ "w/e$PickerLayout", "searchHeight" ], [ "net/minecraft/class_310", "net/minecraft/class_310.field_1774" ], [ "net/minecraft/class_310", "field_1774" ], [ "w/e$ColorPickerLayout", "w/e$ColorPickerLayout.fieldHeight" ], [ "w/e$ColorPickerLayout", "fieldHeight" ], [ "w/e", "w/e.searchCollapsed" ], [ "w/e", "searchCollapsed" ], [ "w/e", "w/e.draggingCategory" ], [ "w/e", "draggingCategory" ], [ "net/minecraft/class_437", "net/minecraft/class_437.method_25400" ], [ "net/minecraft/class_437", "method_25400" ], [ "java/util/HashMap", "java/util/HashMap.containsKey" ], [ "java/util/HashMap", "containsKey" ], [ "w/e", "w/e.getKeyDisplayNameStatic" ], [ "w/e", "getKeyDisplayNameStatic" ], [ "w/e$ColorDragMode", "w/e$ColorDragMode.NONE" ], [ "w/e$ColorDragMode", "NONE" ], [ "w/e", "w/e.multiplyAlpha" ], [ "w/e", "multiplyAlpha" ], [ "w/e", "w/e.getExpandedMobsPickerContext" ], [ "w/e", "getExpandedMobsPickerContext" ], [ "w/e", "w/e.anim" ], [ "w/e", "anim" ], [ "w/e", "w/e.getCategoryX" ], [ "w/e", "getCategoryX" ], [ "net/minecraft/class_11908", "net/minecraft/class_11908.method_74243" ], [ "net/minecraft/class_11908", "method_74243" ], [ "w/e", "w/e.getModuleExpandedHeight" ], [ "w/e", "getModuleExpandedHeight" ], [ "com/krypton/setting/MobsSetting", "com/krypton/setting/MobsSetting.filter" ], [ "com/krypton/setting/MobsSetting", "filter" ], [ "w/e", "w/e.buildMobsPreviewText" ], [ "w/e", "buildMobsPreviewText" ], [ "w/e", "w/e.getPreviewMobStack" ], [ "w/e", "getPreviewMobStack" ], [ "w/e", "w/e.uiHeight" ], [ "w/e", "uiHeight" ], [ "java/lang/Math", "java/lang/Math.min" ], [ "java/lang/Math", "min" ], [ "w/e$ColorPickerLayout", "w/e$ColorPickerLayout.alphaHeight" ], [ "w/e$ColorPickerLayout", "alphaHeight" ], [ "java/util/Comparator", "java/util/Comparator.thenComparing" ], [ "java/util/Comparator", "thenComparing" ], [ "com/krypton/module/Category", "com/krypton/module/Category.e" ], [ "com/krypton/module/Category", "e" ], [ "w/e", "w/e.getBlockPickerExtraHeight" ], [ "w/e", "getBlockPickerExtraHeight" ], [ "w/G", "w/G.a" ], [ "w/G", "a" ], [ "com/krypton/module/a", "com/krypton/module/a.setActivationKey" ], [ "com/krypton/module/a", "setActivationKey" ], [ "w/e", "w/e.removeLastCodePoint" ], [ "w/e", "removeLastCodePoint" ], [ "java/awt/Color", "java/awt/Color.getGreen" ], [ "java/awt/Color", "getGreen" ], [ "java/lang/Long", "java/lang/Long.longValue" ], [ "java/lang/Long", "longValue" ], [ "w/e", "w/e.getSearchPanelY" ], [ "w/e", "getSearchPanelY" ], [ "java/lang/Double", "java/lang/Double.floatValue" ], [ "java/lang/Double", "floatValue" ], [ "java/util/List", "java/util/List.add" ], [ "java/util/List", "add" ], [ "w/e$MobPickerCtx", "w/e$MobPickerCtx.layout" ], [ "w/e$MobPickerCtx", "layout" ], [ "java/lang/String", "java/lang/String.contains" ], [ "java/lang/String", "contains" ], [ "w/e", "w/e.buildBlockPickerLayout" ], [ "w/e", "buildBlockPickerLayout" ], [ "net/minecraft/class_437", "net/minecraft/class_437.method_25404" ], [ "net/minecraft/class_437", "method_25404" ], [ "java/util/stream/Stream", "java/util/stream/Stream.findFirst" ], [ "java/util/stream/Stream", "findFirst" ], [ "java/util/LinkedHashSet", "java/util/LinkedHashSet.add" ], [ "java/util/LinkedHashSet", "add" ], [ "w/e", "w/e.blockSearchActive" ], [ "w/e", "blockSearchActive" ], [ "com/krypton/module/Category", "com/krypton/module/Category.a" ], [ "com/krypton/module/Category", "a" ], [ "w/e", "w/e.drawStyledText" ], [ "w/e", "drawStyledText" ], [ "com/krypton/module/b", "com/krypton/module/b.toggle" ], [ "com/krypton/module/b", "toggle" ], [ "com/krypton/setting/d", "com/krypton/setting/d.setValue" ], [ "com/krypton/setting/d", "setValue" ], [ "w/e", "w/e.getSearchPanelHeight" ], [ "w/e", "getSearchPanelHeight" ], [ "w/e", "w/e.handleStringKeyInput" ], [ "w/e", "handleStringKeyInput" ], [ "com/krypton/setting/d", "com/krypton/setting/d.getValue" ], [ "com/krypton/setting/d", "getValue" ], [ "java/lang/Character", "java/lang/Character.isISOControl" ], [ "java/lang/Character", "isISOControl" ], [ "w/G", "w/G.INSTANCE" ], [ "w/G", "INSTANCE" ], [ "w/e", "w/e.getContentTop" ], [ "w/e", "getContentTop" ], [ "java/util/HashMap", "java/util/HashMap.put" ], [ "java/util/HashMap", "put" ], [ "net/minecraft/class_332", "net/minecraft/class_332.method_51427" ], [ "net/minecraft/class_332", "method_51427" ], [ "w/e", "w/e.getSearchPanelX" ], [ "w/e", "getSearchPanelX" ], [ "w/e", "w/e.INSTANCE" ], [ "w/e", "INSTANCE" ], [ "java/util/List", "java/util/List.isEmpty" ], [ "java/util/List", "isEmpty" ], [ "w/e", "w/e.getClipboardText" ], [ "w/e", "getClipboardText" ], [ "com/krypton/setting/BlocksSetting", "com/krypton/setting/BlocksSetting.filter" ], [ "com/krypton/setting/BlocksSetting", "filter" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.append" ], [ "java/lang/StringBuilder", "append" ], [ "w/e", "w/e.dragGrabOffsetX" ], [ "w/e", "dragGrabOffsetX" ], [ "w/e$PickerLayout", "w/e$PickerLayout.clearY" ], [ "w/e$PickerLayout", "clearY" ], [ "w/e", "w/e.getExpandProgress" ], [ "w/e", "getExpandProgress" ], [ "net/minecraft/class_310", "net/minecraft/class_310.method_1551" ], [ "net/minecraft/class_310", "method_1551" ], [ "w/e", "w/e.field_22790" ], [ "w/e", "field_22790" ], [ "w/e", "w/e.categoryHeaderColor" ], [ "w/e", "categoryHeaderColor" ], [ "java/util/EnumSet", "java/util/EnumSet.remove" ], [ "java/util/EnumSet", "remove" ], [ "w/e", "w/e.listeningString" ], [ "w/e", "listeningString" ], [ "com/krypton/module/Category", "com/krypton/module/Category.c" ], [ "com/krypton/module/Category", "c" ], [ "java/util/Comparator", "java/util/Comparator.comparing" ], [ "java/util/Comparator", "comparing" ], [ "java/lang/Boolean", "java/lang/Boolean.booleanValue" ], [ "java/lang/Boolean", "booleanValue" ], [ "net/minecraft/class_11908", "net/minecraft/class_11908.method_74230" ], [ "net/minecraft/class_11908", "method_74230" ], [ "w/e$ColorDragMode", "w/e$ColorDragMode.ALPHA" ], [ "w/e$ColorDragMode", "ALPHA" ], [ "w/e", "w/e.getBrightness" ], [ "w/e", "getBrightness" ], [ "w/e", "w/e.uiScale" ], [ "w/e", "uiScale" ], [ "w/e$ColorPickerLayout", "w/e$ColorPickerLayout.fieldWidth" ], [ "w/e$ColorPickerLayout", "fieldWidth" ], [ "w/e$PickerLayout", "w/e$PickerLayout.clearHeight" ], [ "w/e$PickerLayout", "clearHeight" ], [ "com/krypton/module/c", "com/krypton/module/c.getModules" ], [ "com/krypton/module/c", "getModules" ], [ "java/awt/Color", "java/awt/Color.getRed" ], [ "java/awt/Color", "getRed" ], [ "java/util/HashMap", "java/util/HashMap.getOrDefault" ], [ "java/util/HashMap", "getOrDefault" ], [ "java/util/LinkedHashSet", "java/util/LinkedHashSet.\u003cinit\u003e" ], [ "java/util/LinkedHashSet", "\u003cinit\u003e" ], [ "java/lang/Integer", "java/lang/Integer.intValue" ], [ "java/lang/Integer", "intValue" ], [ "com/krypton/module/b", "com/krypton/module/b.getName" ], [ "com/krypton/module/b", "getName" ], [ "java/util/EnumSet", "java/util/EnumSet.noneOf" ], [ "java/util/EnumSet", "noneOf" ], [ "net/minecraft/class_310", "net/minecraft/class_310.method_22683" ], [ "net/minecraft/class_310", "method_22683" ], [ "w/e", "w/e.field_22789" ], [ "w/e", "field_22789" ], [ "com/krypton/setting/d", "com/krypton/setting/d.getMin" ], [ "com/krypton/setting/d", "getMin" ], [ "java/lang/Float", "java/lang/Float.floatValue" ], [ "java/lang/Float", "floatValue" ], [ "w/e$MobPickerCtx", "w/e$MobPickerCtx.setting" ], [ "w/e$MobPickerCtx", "setting" ], [ "java/lang/String", "java/lang/String.replace" ], [ "java/lang/String", "replace" ], [ "com/krypton/setting/BlocksSetting", "com/krypton/setting/BlocksSetting.size" ], [ "com/krypton/setting/BlocksSetting", "size" ], [ "w/e$PickerLayout", "w/e$PickerLayout.width" ], [ "w/e$PickerLayout", "width" ], [ "w/G", "w/G.a" ], [ "w/G", "a" ], [ "w/e$PickerLayout", "w/e$PickerLayout.listX" ], [ "w/e$PickerLayout", "listX" ], [ "net/minecraft/class_2561", "net/minecraft/class_2561.method_43470" ], [ "net/minecraft/class_2561", "method_43470" ], [ "java/lang/String", "java/lang/String.CASE_INSENSITIVE_ORDER" ], [ "java/lang/String", "CASE_INSENSITIVE_ORDER" ], [ "java/lang/String", "java/lang/String.toLowerCase" ], [ "java/lang/String", "toLowerCase" ], [ "com/krypton/setting/MobsSetting", "com/krypton/setting/MobsSetting.getDisplayName" ], [ "com/krypton/setting/MobsSetting", "getDisplayName" ], [ "com/krypton/module/Category", "com/krypton/module/Category.getName" ], [ "com/krypton/module/Category", "getName" ], [ "w/e", "w/e.mobPickerScroll" ], [ "w/e", "mobPickerScroll" ], [ "w/e", "w/e.getTallestPanelHeight" ], [ "w/e", "getTallestPanelHeight" ], [ "w/e", "w/e.lambda$sanitizeTextInput$4" ], [ "w/e", "lambda$sanitizeTextInput$4" ], [ "net/minecraft/class_1799", "net/minecraft/class_1799.method_7960" ], [ "net/minecraft/class_1799", "method_7960" ], [ "com/krypton/setting/d", "com/krypton/setting/d.matchesName" ], [ "com/krypton/setting/d", "matchesName" ], [ "java/lang/String", "java/lang/String.equalsIgnoreCase" ], [ "java/lang/String", "equalsIgnoreCase" ], [ "com/krypton/setting/MobsSetting", "com/krypton/setting/MobsSetting.clear" ], [ "com/krypton/setting/MobsSetting", "clear" ], [ "java/lang/Double", "java/lang/Double.doubleValue" ], [ "java/lang/Double", "doubleValue" ], [ "w/e", "w/e.isCoordSnapperWebhookSetting" ], [ "w/e", "isCoordSnapperWebhookSetting" ], [ "w/e$PickerLayout", "w/e$PickerLayout.searchX" ], [ "w/e$PickerLayout", "searchX" ], [ "w/e$PickerLayout", "w/e$PickerLayout.listWidth" ], [ "w/e$PickerLayout", "listWidth" ], [ "w/e", "w/e.themePanelBg" ], [ "w/e", "themePanelBg" ], [ "w/e$PickerLayout", "w/e$PickerLayout.clearWidth" ], [ "w/e$PickerLayout", "clearWidth" ], [ "java/util/ArrayList", "java/util/ArrayList.iterator" ], [ "java/util/ArrayList", "iterator" ], [ "java/awt/Color", "java/awt/Color.HSBtoRGB" ], [ "java/awt/Color", "HSBtoRGB" ], [ "java/util/ArrayList", "java/util/ArrayList.add" ], [ "java/util/ArrayList", "add" ], [ "w/p", "w/p.g" ], [ "w/p", "g" ], [ "java/lang/System", "java/lang/System.identityHashCode" ], [ "java/lang/System", "identityHashCode" ], [ "w/c", "w/c.\u003cinit\u003e" ], [ "w/c", "\u003cinit\u003e" ], [ "com/krypton/setting/BlocksSetting", "com/krypton/setting/BlocksSetting.toggle" ], [ "com/krypton/setting/BlocksSetting", "toggle" ], [ "w/e$ColorDragMode", "w/e$ColorDragMode.FIELD" ], [ "w/e$ColorDragMode", "FIELD" ], [ "com/krypton/module/c", "com/krypton/module/c.getModulesInCategory" ], [ "com/krypton/module/c", "getModulesInCategory" ], [ "w/e", "w/e.sanitizeTextInput" ], [ "w/e", "sanitizeTextInput" ], [ "w/e", "w/e.toUiX" ], [ "w/e", "toUiX" ], [ "java/lang/Double", "java/lang/Double.valueOf" ], [ "java/lang/Double", "valueOf" ], [ "com/krypton/setting/d", "com/krypton/setting/d.getName" ], [ "com/krypton/setting/d", "getName" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.appendCodePoint" ], [ "java/lang/StringBuilder", "appendCodePoint" ], [ "com/krypton/setting/ModeSetting", "com/krypton/setting/ModeSetting.bj" ], [ "com/krypton/setting/ModeSetting", "bj" ], [ "java/util/EnumSet", "java/util/EnumSet.contains" ], [ "java/util/EnumSet", "contains" ], [ "w/e", "w/e.matchesQuery" ], [ "w/e", "matchesQuery" ], [ "java/util/List", "java/util/List.size" ], [ "java/util/List", "size" ], [ "w/e", "w/e.getCategoryOffset" ], [ "w/e", "getCategoryOffset" ], [ "java/util/HashMap", "java/util/HashMap.\u003cinit\u003e" ], [ "java/util/HashMap", "\u003cinit\u003e" ], [ "w/e", "w/e.updateNumericSetting" ], [ "w/e", "updateNumericSetting" ], [ "net/minecraft/class_437", "net/minecraft/class_437.method_25402" ], [ "net/minecraft/class_437", "method_25402" ], [ "w/e", "w/e.lambda$getFilteredBlocks$2" ], [ "w/e", "lambda$getFilteredBlocks$2" ], [ "com/krypton/module/b", "com/krypton/module/b.b" ], [ "com/krypton/module/b", "b" ], [ "com/krypton/setting/BlocksSetting", "com/krypton/setting/BlocksSetting.getDisplayName" ], [ "com/krypton/setting/BlocksSetting", "getDisplayName" ], [ "java/util/ArrayList", "java/util/ArrayList.sort" ], [ "java/util/ArrayList", "sort" ], [ "com/krypton/module/c", "com/krypton/module/c.INSTANCE" ], [ "com/krypton/module/c", "INSTANCE" ], [ "com/krypton/module/Category", "com/krypton/module/Category.b" ], [ "com/krypton/module/Category", "b" ], [ "java/awt/Color", "java/awt/Color.getBlue" ], [ "java/awt/Color", "getBlue" ], [ "w/e", "w/e.getExpandedBlocksPickerContext" ], [ "w/e", "getExpandedBlocksPickerContext" ], [ "w/e", "w/e.COLOR_ACCENT_DIM" ], [ "w/e", "COLOR_ACCENT_DIM" ], [ "java/lang/String", "java/lang/String.offsetByCodePoints" ], [ "java/lang/String", "offsetByCodePoints" ], [ "w/e", "w/e.toUiY" ], [ "w/e", "toUiY" ], [ "w/e", "w/e.updateColorFromField" ], [ "w/e", "updateColorFromField" ], [ "w/e", "w/e.clampBlockPickerScroll" ], [ "w/e", "clampBlockPickerScroll" ], [ "com/krypton/setting/ModeSetting", "com/krypton/setting/ModeSetting.getValue" ], [ "com/krypton/setting/ModeSetting", "getValue" ], [ "net/minecraft/class_1802", "net/minecraft/class_1802.field_8803" ], [ "net/minecraft/class_1802", "field_8803" ], [ "w/e", "w/e.easeOutCubic" ], [ "w/e", "easeOutCubic" ], [ "w/e", "w/e.categoryOffsets" ], [ "w/e", "categoryOffsets" ], [ "java/util/Optional", "java/util/Optional.orElse" ], [ "java/util/Optional", "orElse" ], [ "java/awt/Color", "java/awt/Color.getAlpha" ], [ "java/awt/Color", "getAlpha" ], [ "w/d", "w/d.\u003cinit\u003e" ], [ "w/d", "\u003cinit\u003e" ], [ "net/minecraft/class_11905", "net/minecraft/class_11905.method_74226" ], [ "net/minecraft/class_11905", "method_74226" ], [ "w/e", "w/e.draggingNumericModule" ], [ "w/e", "draggingNumericModule" ], [ "java/util/HashMap", "java/util/HashMap.clear" ], [ "java/util/HashMap", "clear" ], [ "w/e", "w/e.getPanelHeight" ], [ "w/e", "getPanelHeight" ], [ "w/e", "w/e.CACHED_CATEGORIES" ], [ "w/e", "CACHED_CATEGORIES" ], [ "java/lang/invoke/LambdaMetafactory", "java/lang/invoke/LambdaMetafactory.metafactory" ], [ "java/lang/invoke/LambdaMetafactory", "metafactory" ], [ "com/krypton/setting/MobsSetting", "com/krypton/setting/MobsSetting.size" ], [ "com/krypton/setting/MobsSetting", "size" ], [ "w/e", "w/e.getFilteredMobs" ], [ "w/e", "getFilteredMobs" ], [ "net/minecraft/class_310", "net/minecraft/class_310.method_1507" ], [ "net/minecraft/class_310", "method_1507" ], [ "java/lang/String", "java/lang/String.valueOf" ], [ "java/lang/String", "valueOf" ], [ "w/e$PickerLayout", "w/e$PickerLayout.listY" ], [ "w/e$PickerLayout", "listY" ], [ "net/minecraft/class_1802", "net/minecraft/class_1802.field_47315" ], [ "net/minecraft/class_1802", "field_47315" ], [ "com/krypton/module/Category", "com/krypton/module/Category.a" ], [ "com/krypton/module/Category", "a" ], [ "w/e", "w/e.activeColorSetting" ], [ "w/e", "activeColorSetting" ], [ "org/lwjgl/glfw/GLFW", "org/lwjgl/glfw/GLFW.glfwGetKeyName" ], [ "org/lwjgl/glfw/GLFW", "glfwGetKeyName" ], [ "java/lang/String", "java/lang/String.toUpperCase" ], [ "java/lang/String", "toUpperCase" ], [ "java/lang/Float", "java/lang/Float.valueOf" ], [ "java/lang/Float", "valueOf" ], [ "w/e", "w/e.drawModuleToggle" ], [ "w/e", "drawModuleToggle" ], [ "w/e", "w/e.searchIcon" ], [ "w/e", "searchIcon" ], [ "com/krypton/setting/MobsSetting", "com/krypton/setting/MobsSetting.contains" ], [ "com/krypton/setting/MobsSetting", "contains" ], [ "com/krypton/setting/BlocksSetting", "com/krypton/setting/BlocksSetting.contains" ], [ "com/krypton/setting/BlocksSetting", "contains" ], [ "java/lang/Math", "java/lang/Math.round" ], [ "java/lang/Math", "round" ], [ "w/e", "w/e.handleMobSearchKeyInput" ], [ "w/e", "handleMobSearchKeyInput" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.\u003cinit\u003e" ], [ "java/lang/StringBuilder", "\u003cinit\u003e" ], [ "org/joml/Matrix3x2fStack", "org/joml/Matrix3x2fStack.translate" ], [ "org/joml/Matrix3x2fStack", "translate" ], [ "w/e", "w/e.getPreviewBlockStack" ], [ "w/e", "getPreviewBlockStack" ], [ "w/e", "w/e.drawColorSetting" ], [ "w/e", "drawColorSetting" ], [ "java/util/Set", "java/util/Set.stream" ], [ "java/util/Set", "stream" ], [ "net/minecraft/class_1826", "net/minecraft/class_1826.method_8019" ], [ "net/minecraft/class_1826", "method_8019" ], [ "java/lang/Math", "java/lang/Math.exp" ], [ "java/lang/Math", "exp" ], [ "java/util/Locale", "java/util/Locale.ROOT" ], [ "java/util/Locale", "ROOT" ], [ "w/e", "w/e.drawMobsSettingSummary" ], [ "w/e", "drawMobsSettingSummary" ], [ "w/e$ColorPickerLayout", "w/e$ColorPickerLayout.\u003cinit\u003e" ], [ "w/e$ColorPickerLayout", "\u003cinit\u003e" ], [ "w/e", "w/e.searchActive" ], [ "w/e", "searchActive" ], [ "java/lang/Math", "java/lang/Math.max" ], [ "java/lang/Math", "max" ], [ "java/lang/String", "java/lang/String.format" ], [ "java/lang/String", "format" ], [ "java/lang/String", "java/lang/String.hashCode" ], [ "java/lang/String", "hashCode" ], [ "java/util/EnumMap", "java/util/EnumMap.computeIfAbsent" ], [ "java/util/EnumMap", "computeIfAbsent" ], [ "w/e", "w/e.COLOR_ACCENT" ], [ "w/e", "COLOR_ACCENT" ], [ "w/e", "w/e.buildColorPickerLayout" ], [ "w/e", "buildColorPickerLayout" ], [ "java/util/HashMap", "java/util/HashMap.remove" ], [ "java/util/HashMap", "remove" ], [ "java/lang/Math", "java/lang/Math.max" ], [ "java/lang/Math", "max" ], [ "com/krypton/setting/MobsSetting", "com/krypton/setting/MobsSetting.toggle" ], [ "com/krypton/setting/MobsSetting", "toggle" ], [ "java/lang/String", "java/lang/String.trim" ], [ "java/lang/String", "trim" ], [ "java/lang/System", "java/lang/System.nanoTime" ], [ "java/lang/System", "nanoTime" ], [ "w/e", "w/e.moduleOpenTime" ], [ "w/e", "moduleOpenTime" ], [ "net/minecraft/class_437", "net/minecraft/class_437.method_25406" ], [ "net/minecraft/class_437", "method_25406" ], [ "w/e$BlocksPickerCtx", "w/e$BlocksPickerCtx.\u003cinit\u003e" ], [ "w/e$BlocksPickerCtx", "\u003cinit\u003e" ], [ "com/krypton/module/b", "com/krypton/module/b.getBind" ], [ "com/krypton/module/b", "getBind" ], [ "java/util/List", "java/util/List.get" ], [ "java/util/List", "get" ], [ "w/e", "w/e.getMobPickerExtraHeight" ], [ "w/e", "getMobPickerExtraHeight" ], [ "w/e", "w/e.drawBlocksSettingSummary" ], [ "w/e", "drawBlocksSettingSummary" ], [ "w/e", "w/e.lerpARGB" ], [ "w/e", "lerpARGB" ], [ "w/e", "w/e.stringListAddBuffer" ], [ "w/e", "stringListAddBuffer" ], [ "java/util/ArrayList", "java/util/ArrayList.\u003cinit\u003e" ], [ "java/util/ArrayList", "\u003cinit\u003e" ], [ "com/krypton/module/Category", "com/krypton/module/Category.d" ], [ "com/krypton/module/Category", "d" ], [ "w/e", "w/e.\u003cinit\u003e" ], [ "w/e", "\u003cinit\u003e" ], [ "w/e", "w/e.stringListAddActive" ], [ "w/e", "stringListAddActive" ], [ "w/e$ColorPickerLayout", "w/e$ColorPickerLayout.fieldX" ], [ "w/e$ColorPickerLayout", "fieldX" ], [ "w/e", "w/e.searchOffsetX" ], [ "w/e", "searchOffsetX" ], [ "w/e$PickerLayout", "w/e$PickerLayout.x" ], [ "w/e$PickerLayout", "x" ], [ "com/krypton/module/b", "com/krypton/module/b.getSettings" ], [ "com/krypton/module/b", "getSettings" ], [ "com/krypton/module/Category", "com/krypton/module/Category.f" ], [ "com/krypton/module/Category", "f" ], [ "w/e", "w/e.dragGrabOffsetY" ], [ "w/e", "dragGrabOffsetY" ], [ "w/e", "w/e.updateAnimDt" ], [ "w/e", "updateAnimDt" ], [ "w/e", "w/e.updateColorFromAlpha" ], [ "w/e", "updateColorFromAlpha" ], [ "java/util/Objects", "java/util/Objects.requireNonNull" ], [ "java/util/Objects", "requireNonNull" ], [ "java/util/stream/IntStream", "java/util/stream/IntStream.forEach" ], [ "java/util/stream/IntStream", "forEach" ], [ "java/lang/String", "java/lang/String.equals" ], [ "java/lang/String", "equals" ], [ "net/minecraft/class_1041", "net/minecraft/class_1041.method_4490" ], [ "net/minecraft/class_1041", "method_4490" ], [ "net/minecraft/class_437", "net/minecraft/class_437.method_25403" ], [ "net/minecraft/class_437", "method_25403" ], [ "net/minecraft/class_1799", "net/minecraft/class_1799.\u003cinit\u003e" ], [ "net/minecraft/class_1799", "\u003cinit\u003e" ], [ "w/e$PickerLayout", "w/e$PickerLayout.searchY" ], [ "w/e$PickerLayout", "searchY" ], [ "w/e", "w/e.expandedStringListSetting" ], [ "w/e", "expandedStringListSetting" ], [ "w/e", "w/e.updateActiveColorDrag" ], [ "w/e", "updateActiveColorDrag" ], [ "w/e", "w/e.buildBlocksPreviewText" ], [ "w/e", "buildBlocksPreviewText" ], [ "java/lang/Integer", "java/lang/Integer.valueOf" ], [ "java/lang/Integer", "valueOf" ], [ "java/util/List", "java/util/List.iterator" ], [ "java/util/List", "iterator" ], [ "w/e", "w/e.getSaturation" ], [ "w/e", "getSaturation" ], [ "w/e$PickerLayout", "w/e$PickerLayout.searchWidth" ], [ "w/e$PickerLayout", "searchWidth" ], [ "java/lang/String", "java/lang/String.isBlank" ], [ "java/lang/String", "isBlank" ], [ "w/e$ColorPickerLayout", "w/e$ColorPickerLayout.alphaY" ], [ "w/e$ColorPickerLayout", "alphaY" ], [ "w/e", "w/e.clampMobPickerScroll" ], [ "w/e", "clampMobPickerScroll" ], [ "w/e", "w/e.allowDecimalForModule" ], [ "w/e", "allowDecimalForModule" ], [ "w/e$BlocksPickerCtx", "w/e$BlocksPickerCtx.layout" ], [ "w/e$BlocksPickerCtx", "layout" ], [ "w/e", "w/e.handleFriendsAddKeyInput" ], [ "w/e", "handleFriendsAddKeyInput" ], [ "net/minecraft/class_437", "net/minecraft/class_437.\u003cinit\u003e" ], [ "net/minecraft/class_437", "\u003cinit\u003e" ], [ "w/e", "w/e.blockSearchQuery" ], [ "w/e", "blockSearchQuery" ], [ "w/e", "w/e.lastAnimNanos" ], [ "w/e", "lastAnimNanos" ], [ "java/util/List", "java/util/List.removeIf" ], [ "java/util/List", "removeIf" ], [ "org/joml/Matrix3x2fStack", "org/joml/Matrix3x2fStack.pushMatrix" ], [ "org/joml/Matrix3x2fStack", "pushMatrix" ], [ "w/G", "w/G.D" ], [ "w/G", "D" ], [ "w/e", "w/e.abbreviateSensitiveSuffix" ], [ "w/e", "abbreviateSensitiveSuffix" ], [ "w/e", "w/e.drawDonutIcon" ], [ "w/e", "drawDonutIcon" ], [ "w/e", "w/e.formatStringSettingValue" ], [ "w/e", "formatStringSettingValue" ], [ "w/e", "w/e.mobSearchQuery" ], [ "w/e", "mobSearchQuery" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.toString" ], [ "java/lang/StringBuilder", "toString" ], [ "net/minecraft/class_332", "net/minecraft/class_332.method_51448" ], [ "net/minecraft/class_332", "method_51448" ], [ "w/e", "w/e.frameDt" ], [ "w/e", "frameDt" ], [ "org/joml/Matrix3x2fStack", "org/joml/Matrix3x2fStack.scale" ], [ "org/joml/Matrix3x2fStack", "scale" ], [ "w/e", "w/e.COLOR_PANEL_BG" ], [ "w/e", "COLOR_PANEL_BG" ], [ "w/e", "w/e.drawEnabledBar" ], [ "w/e", "drawEnabledBar" ], [ "w/e", "w/e.drawStringListEditor" ], [ "w/e", "drawStringListEditor" ], [ "w/b", "w/b.\u003cinit\u003e" ], [ "w/b", "\u003cinit\u003e" ], [ "net/minecraft/class_11908", "net/minecraft/class_11908.method_74231" ], [ "net/minecraft/class_11908", "method_74231" ], [ "java/lang/String", "java/lang/String.substring" ], [ "java/lang/String", "substring" ], [ "net/minecraft/class_309", "net/minecraft/class_309.method_1460" ], [ "net/minecraft/class_309", "method_1460" ], [ "w/e", "w/e.draggingNumericSetting" ], [ "w/e", "draggingNumericSetting" ], [ "w/e", "w/e.listeningActivationBind" ], [ "w/e", "listeningActivationBind" ], [ "w/e$PickerLayout", "w/e$PickerLayout.y" ], [ "w/e$PickerLayout", "y" ], [ "w/e", "w/e.expandedMobsSetting" ], [ "w/e", "expandedMobsSetting" ], [ "java/lang/Integer", "java/lang/Integer.toString" ], [ "java/lang/Integer", "toString" ], [ "w/e$PickerLayout", "w/e$PickerLayout.clearX" ], [ "w/e$PickerLayout", "clearX" ], [ "w/e", "w/e.draggingNumericCatX" ], [ "w/e", "draggingNumericCatX" ], [ "java/lang/String", "java/lang/String.replace" ], [ "java/lang/String", "replace" ], [ "w/e", "w/e.themeAccent" ], [ "w/e", "themeAccent" ], [ "w/e", "w/e.drawMobsPicker" ], [ "w/e", "drawMobsPicker" ], [ "java/lang/Math", "java/lang/Math.min" ], [ "java/lang/Math", "min" ], [ "com/krypton/module/Category", "com/krypton/module/Category.name" ], [ "com/krypton/module/Category", "name" ], [ "java/lang/String", "java/lang/String.toLowerCase" ], [ "java/lang/String", "toLowerCase" ], [ "w/e$PickerLayout", "w/e$PickerLayout.listHeight" ], [ "w/e$PickerLayout", "listHeight" ], [ "w/e", "w/e.handleSearchKeyInput" ], [ "w/e", "handleSearchKeyInput" ], [ "com/krypton/setting/ModeSetting", "com/krypton/setting/ModeSetting.getName" ], [ "com/krypton/setting/ModeSetting", "getName" ], [ "w/e$PickerLayout", "w/e$PickerLayout.\u003cinit\u003e" ], [ "w/e$PickerLayout", "\u003cinit\u003e" ], [ "w/p", "w/p.i" ], [ "w/p", "i" ], [ "org/lwjgl/glfw/GLFW", "org/lwjgl/glfw/GLFW.glfwGetKey" ], [ "org/lwjgl/glfw/GLFW", "glfwGetKey" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.isEmpty" ], [ "java/lang/StringBuilder", "isEmpty" ], [ "w/e", "w/e.colorDragMode" ], [ "w/e", "colorDragMode" ], [ "java/awt/Color", "java/awt/Color.RGBtoHSB" ], [ "java/awt/Color", "RGBtoHSB" ], [ "w/I", "w/I.a" ], [ "w/I", "a" ], [ "net/minecraft/class_332", "net/minecraft/class_332.method_25294" ], [ "net/minecraft/class_332", "method_25294" ], [ "net/minecraft/class_11909", "net/minecraft/class_11909.comp_4799" ], [ "net/minecraft/class_11909", "comp_4799" ], [ "net/minecraft/class_11909", "net/minecraft/class_11909.method_74245" ], [ "net/minecraft/class_11909", "method_74245" ], [ "w/e", "w/e.expandedBlocksSetting" ], [ "w/e", "expandedBlocksSetting" ], [ "java/awt/Color", "java/awt/Color.\u003cinit\u003e" ], [ "java/awt/Color", "\u003cinit\u003e" ], [ "w/e", "w/e.clamp01" ], [ "w/e", "clamp01" ], [ "w/e$BlocksPickerCtx", "w/e$BlocksPickerCtx.setting" ], [ "w/e$BlocksPickerCtx", "setting" ], [ "java/lang/String", "java/lang/String.codePoints" ], [ "java/lang/String", "codePoints" ], [ "java/util/stream/IntStream", "java/util/stream/IntStream.filter" ], [ "java/util/stream/IntStream", "filter" ], [ "w/e", "w/e.lambda$getFilteredMobs$3" ], [ "w/e", "lambda$getFilteredMobs$3" ], [ "java/lang/Math", "java/lang/Math.round" ], [ "java/lang/Math", "round" ], [ "w/e", "w/e.listeningBind" ], [ "w/e", "listeningBind" ], [ "java/util/EnumSet", "java/util/EnumSet.add" ], [ "java/util/EnumSet", "add" ], [ "w/e", "w/e.searchOffsetY" ], [ "w/e", "searchOffsetY" ], [ "w/I", "w/I.a" ], [ "w/I", "a" ], [ "w/e", "w/e.searchQuery" ], [ "w/e", "searchQuery" ], [ "w/e", "w/e.getKeyDisplayName" ], [ "w/e", "getKeyDisplayName" ], [ "w/e", "w/e.buildMobPickerLayout" ], [ "w/e", "buildMobPickerLayout" ], [ "java/util/ArrayList", "java/util/ArrayList.\u003cinit\u003e" ], [ "java/util/ArrayList", "\u003cinit\u003e" ], [ "net/minecraft/class_11909", "net/minecraft/class_11909.comp_4798" ], [ "net/minecraft/class_11909", "comp_4798" ], [ "java/lang/String", "java/lang/String.substring" ], [ "java/lang/String", "substring" ], [ "w/e", "w/e.getCategoryY" ], [ "w/e", "getCategoryY" ], [ "com/krypton/setting/BlocksSetting", "com/krypton/setting/BlocksSetting.clear" ], [ "com/krypton/setting/BlocksSetting", "clear" ], [ "w/e$MobPickerCtx", "w/e$MobPickerCtx.\u003cinit\u003e" ], [ "w/e$MobPickerCtx", "\u003cinit\u003e" ], [ "java/lang/String", "java/lang/String.length" ], [ "java/lang/String", "length" ], [ "w/e", "w/e.collapsedCategories" ], [ "w/e", "collapsedCategories" ], [ "java/lang/Math", "java/lang/Math.pow" ], [ "java/lang/Math", "pow" ], [ "java/util/function/IntFunction", "java/util/function/IntFunction.apply" ], [ "java/util/function/IntFunction", "apply" ], [ "w/e", "w/e.fontWidth" ], [ "w/e", "fontWidth" ], [ "w/e", "w/e.PANEL_COUNT" ], [ "w/e", "PANEL_COUNT" ], [ "java/lang/Long", "java/lang/Long.valueOf" ], [ "java/lang/Long", "valueOf" ], [ "w/e", "w/e.drawModeSetting" ], [ "w/e", "drawModeSetting" ], [ "com/krypton/setting/BlocksSetting", "com/krypton/setting/BlocksSetting.getName" ], [ "com/krypton/setting/BlocksSetting", "getName" ], [ "w/e", "w/e.animValues" ], [ "w/e", "animValues" ], [ "net/minecraft/class_437", "net/minecraft/class_437.method_25401" ], [ "net/minecraft/class_437", "method_25401" ], [ "w/e", "w/e.handleBlockSearchKeyInput" ], [ "w/e", "handleBlockSearchKeyInput" ], [ "w/e", "w/e.getMobStack" ], [ "w/e", "getMobStack" ], [ "w/e", "w/e.draggingSearch" ], [ "w/e", "draggingSearch" ], [ "java/lang/String", "java/lang/String.toUpperCase" ], [ "java/lang/String", "toUpperCase" ], [ "com/krypton/setting/MobsSetting", "com/krypton/setting/MobsSetting.getName" ], [ "com/krypton/setting/MobsSetting", "getName" ], [ "w/I", "w/I.a" ], [ "w/I", "a" ], [ "com/krypton/setting/d", "com/krypton/setting/d.getMax" ], [ "com/krypton/setting/d", "getMax" ], [ "w/e", "w/e.verticalScroll" ], [ "w/e", "verticalScroll" ], [ "w/e", "w/e.fontTrimToWidth" ], [ "w/e", "fontTrimToWidth" ], [ "w/e", "w/e.isStringListSetting" ], [ "w/e", "isStringListSetting" ], [ "com/krypton/module/b", "com/krypton/module/b.isEnabled" ], [ "com/krypton/module/b", "isEnabled" ], [ "com/krypton/module/a", "com/krypton/module/a.getActivationKey" ], [ "com/krypton/module/a", "getActivationKey" ], [ "java/util/Iterator", "java/util/Iterator.next" ], [ "java/util/Iterator", "next" ], [ "w/e", "w/e.parseStringList" ], [ "w/e", "parseStringList" ], [ "w/e", "w/e.trimWithEllipsis" ], [ "w/e", "trimWithEllipsis" ], [ "w/e", "w/e.pointInRect" ], [ "w/e", "pointInRect" ], [ "w/f", "w/f.\u003cinit\u003e" ], [ "w/f", "\u003cinit\u003e" ], [ "com/krypton/module/b", "com/krypton/module/b.isExpanded" ], [ "com/krypton/module/b", "isExpanded" ], [ "w/e", "w/e.mobSearchActive" ], [ "w/e", "mobSearchActive" ], [ "w/e", "w/e.drawScaledText" ], [ "w/e", "drawScaledText" ], [ "w/e", "w/e.getStringListEditorExtraHeight" ], [ "w/e", "getStringListEditorExtraHeight" ], [ "java/lang/Boolean", "java/lang/Boolean.valueOf" ], [ "java/lang/Boolean", "valueOf" ], [ "w/e", "w/e.setStringListFromLowerList" ], [ "w/e", "setStringListFromLowerList" ], [ "w/e", "w/e.blockPickerScroll" ], [ "w/e", "blockPickerScroll" ], [ "com/krypton/setting/ModeSetting", "com/krypton/setting/ModeSetting.bk" ], [ "com/krypton/setting/ModeSetting", "bk" ], [ "java/lang/invoke/StringConcatFactory", "java/lang/invoke/StringConcatFactory.makeConcatWithConstants" ], [ "java/lang/invoke/StringConcatFactory", "makeConcatWithConstants" ] ], "metrics": { "file": { "size": 62512, "entropy": 6.49 }, "class": { "major_version": 65, "interface_count": 0, "method_ref_count": 376, "constant_pool_size": 1889, "external_class_count": 74 }, "binary": { "peak_region_bytes": 15360, "peak_region_entropy": 6.38 }, "imports": { "count": 450 }, "functions": { "count": 113 } } }, "id": 209, "mol": "K(Ga)H₂(DbOs)", "path": "krypton-1.21.11.jar!!w/e.class", "pid": 0, "risk": 3, "sha": "06b2ee3727b357f59854e3e05452e5568d20fa1ef7d66176ea92793bac00ac5c", "size": 62512, "traits": [ { "id": "micro-behaviors/data/string/conversion::tostring-token", "conf": 1.0, "crit": 3, "desc": "References the toString conversion method", "spans": [ [ 2759, 8 ] ] }, { "id": "well-known/game/mod::minecraft-client-class-ref", "conf": 0.9, "crit": 3, "desc": "Minecraft client singleton class reference", "spans": [ [ 4241, 23 ] ] }, { "id": "micro-behaviors/os/clipboard/reference::clipboard-keyword", "conf": 0.7, "crit": 3, "desc": "Clipboard keyword", "spans": [ [ 13918, 16 ] ] } ], "type": "java_class" }, { "id": 210, "mol": "H(Db)", "sha": "30ec31d3bb6db1ec7f76b2aa994c6421cc9a6a53d020691d35b9e198f65297d7", "path": "krypton-1.21.11.jar!!w/e$BlocksPickerCtx.class", "risk": 1, "size": 1483, "type": "java_class", "depth": 1 }, { "id": 213, "mol": "H(Db)", "sha": "d48b2b3575c0bc5723584f0b9187186dece109a4b12eeb88fdd4394526a4e6eb", "path": "krypton-1.21.11.jar!!w/e$MobPickerCtx.class", "risk": 1, "size": 1462, "type": "java_class", "depth": 1 }, { "ctx": [ { "b": "+kO#^0000+1c:5\u003e0S-o8qEK9IzWuyD00JPc1}gFp00\u0026P98!i/6fkCPNAcc2ofkUSrB.\u003eRxlT+7Fxk.*o0rrdi0rsclv@DiqyJsYtBz(4IzeS%cy?km!vru6[z/Qa+3igzk3KlUu3\u0026*.p4GMLzv@DiqyJsYtBz(4IzeS%cy?kne0rrr^x(mTbj]\u003eTsc}[w:C404uvqYZhq/)4]zF848v@DiqyJsYtBz(4IzeS%cy?km!vru6[z/Qa+dolVN5ch+Cv@DiqyJsYtBz(4IB7GDnx(mMpwc-eF0rrQdxM58qs7(e.aw39WwEnzK02k.s77pfV02L.p5O+-$vj#C9zF7Q?z/oD6vqV8C2x\u003cJ(B.auX0rr(-s$9cWvrI", "ln": 0 }, { "b": "0385C3\u0026\u003cSmtMB*evrcE7B94V/vf3uzs7b/+x(mMaw]zYjq/DU%x\u003ezUIFtJRM9roNT0aV7m0rrsBByxolA%8D?^9@v49roZX0b8vD0rrHGByxolB3\u003c\u003eZz/L\u003cU0z9N", "ln": 1171 }, { "b": "vrM6jy*?i]fh=}gzEE0\u003cwJItmygho]flIwJy+GppzEW*fA+fcgfgH8aB-I4P3io=1{xHY[3\u0026{86}t*NjzE)]yze0)0v@=0\u0026Bt4cuvrlG%gCHM:01iTPBzbP6uOKz}f-.m[c[d\u0026cwPPOxx(mG(A:-N4fjO*bB8$XAf!+V}0qlA\u003c3\u0026{ka@S90aw[+*)wm45Ih8Lym8ba{VBt4GBzE)r#vp\u003cQmv@bN{B6*:Wh-?lB0096ozE)]yze0)0v@=0\u0026Bt4cuvrlG%g+Z(@04Xc", "ln": 2804 }, { "b": "vR/Qq3ih7EiT=3J0xZw.5m]:2B-I4\u0026z!%k*v@=p5Bo8vSc[d\u00268vrM6jzFs2xw[=6)fhM80xGDC1j]\u003eT2ygho]fkL6mxd)84z!0v1B3+1-y?d9$2MWf\u003e01J%^Cv+/oxK#0@e[Gos2MWl)017qMz+$E)w[=6)2MWr]01Z.JCX7xcBzkVhp\u0026ye:v%FsXmGAF[lv0JUB8}P/nc5X]eK\u003cC\u003cwEwJh0zrT#oBH}@0xZw.5]7\u0026#vj#Ijz.CZpy?km@vrue-01K9?l1j[Ny\u0026%\u0026hp*[DV3JS\u003c2pyEn20z@\u003c$2Y%#-BAh8kx8}#Dc[d\u00268vrM6jy*?i]fh($kx(mMB2MW\u003c800^N:z//Y9C)BBJ0rrjgzG#M\u0026jPOQ)01w%h0rr(-tte^uC404uvqYZhq/)4]zF83WrTF\u003c\u003c0A])jtld$f026x:wnc6}v@$dWA=k$%BAg@3z2\u003cRSc%w5[ygho]fkL6mxd)84z!0v1B3+1-y?d9$i%(0K0BufnuJBKn00NB=vrcC\u003c02l[hoLO0Vvj#C9zF7R0A=kD0B8%zF0B=6f7IWx4vj#C9zF7R3BAh8kxf{-Py?d9$3isMowdeCE0e7NTw=R(Eygho]fkktTluM)LwPzu)qE%oEwPw1RxAn8Jygho]fkktTnP5G\u0026Bw)p4wNPBNwNPaXATz?Z0C.]vyZZtY0D4]r5O+-$vj#C9zF7R0A=kD0B8}uZ4RGu{nP5G\u0026Bw)p4wNPAR02E4joLO0Vvj#tkfg*52B-ZM7A+eV@i%+}b0DwtBATR$\u00260DXtxa.\u003eCevj#Ijz.CQlvrcB2Bt3NmvqYQ:A+4KJvrcB2BAmD.1YXI\u003euPn5^8CB)OC404wx(tUmxKL}5wPPN)xKL}5wPQ0v0CqBR3\u0026*.qCl4X0c}[w:C404rz.BX1Acln3BAg@3z2", "ln": 3476 }, { "b": "0E$i70rs8/lN+YzvrM6jy*?i]fh($kx(mMIB.LV5wPx\u003ct0C8p^3\u0026#a-GAh5Rv@c78wEnBo0F}i=IueRo01AvEwk^R\u0026Ab]JhB7F\u003e.02NaTygho]fkL6mxd)j$A=legvR/Qqdol=Ry5%q50GEf-0rrvGvqf*Mz/Mf=vf6dh038953\u0026#H\u003eZ5XiAvq{g4C#eA}y!]g}Aclmc0H9P+6ky%0vj#C9zF7Q\u003eCW\u003er7BzkVh2MZj(00L/iA=k$2%k)\u003cf3ius\u003eNg6a+0z@\u003c$3ti{(o\u003ewx!vp%cS0H%e\u003c5LV?Ex\u003c\u0026c8wNP9(w)]y\u0026wN(8E9rz-u0IovR0rrvzy*?Q6zF6pRU(QKb0IPNI0rrvsB3:XKzFGHUQYyD5petj}mn)bRpFIk%U(QZg0Jb%%0rrynz/fV9x(m$)02)sWygho]fkL4", "ln": 4352 }, { "b": "nLYu!1AF6Zwb#V.c}[w:C404rz.BN]y?kWSoLO0Vvj#5kBt4uBvp%d8luM)LwPzu)nO})GwJHa#4flCHygho]fkktTlv0V:l2}0OC#5N8Acln3BAg@3z3*sM0B#Dq5ch+kAbGp}0Tw=t3\u003c47z6AFgqCxdztwDq^5c}[w:C404jCxtGLzdd6*fh=w0wmY^)wjZSDxjTd#ygho]fkL6mxd)h9A+PA7j4%x$C404rz.B[eBz#wAq/)4\u003evqO7Ps{C9A0rs9OvrM6jx(tT\u003eD30Q-A=LPlnP5G\u0026Bw)p4wNPA.0T]bE3\u003c4pF8ux*CBz\u003cG\u003eBy^:UA::j]00BY0ts5U#6-]u-01w#I0rroKts6=t3izpJao}@\u003e3\u003c4QOblm=YzE)]yze0)0v@=0\u0026Bt4cuvrlG%f!+sp0rrHAwPRQ7wm4eHfGxdlf^].gvrM6jx(tT@zG6-uq/)4\u003evqO7PoM1A-fkUAvwN/:?w]]Xoy*?yauOKk?f/]Qwb()#.ygho]fk+Gxfj[{mwIl?#wO$p.BzkVh3iwPScKZ580X1cI4Sk\u003c4nP5G\u0026Bw)p4wNPAR07Fwgygho]fk+Gxfj[{mwIl\u003e*Bz9:uoLO0Vvj#Ijz.CZpy?km}AaJ].Acb/jzAxpvygho]fkktTnP5G\u0026Bw)p4wNPBq3izZUH6E=h0rr^FvrM6jx(tT@zG6-uq/)4\u003evqMRS2M=Q!0XTQe0rrjmwPN}Ma1eNiyghn", "ln": 5771 }, { "b": "BAzLqvS=^7j1i\u003crvrM6jzFs2xw[=6)fhM80xGDF3Y8.)yB8u2euVo}1y*Ruwe]U\u003e^3JS\u003c3Y:K$R0(1:o2xBx%z!%Pd0rsI@oLO0Vvj#C9zF7R3BAh8kxfdLoygho]fk+Gxfj[{mwIl\u003e*Bz9-y038cS3\u003caoDq2{U9B8u2elVl*Uz/ex)5=-vvWH95:0(UMH-SBfY01j0\u003ex()]+BAh8kx8@0Rc}[w:C404wx(tUpx(4ulp*[DVj4%x$C404uvqYZhlUG[Gq!o@\u003ewO#0?j4%x$C404wx(tUmxKL}5wPPN)xKL}5wPQ1roLO0Vvj#Ijz.CZpy?km}AaJ].Acb/jzAxpvygho]fk+Gxfj[{mwIl\u003e*Bz9-x038c.3\u003caML*YmxZAbPMeq!6\u0026ZAc8x^9r", "ln": 8060 }, { "b": "q!p2\u003ex(v(qdiK3CarUYoBAIRwas82tB8#5lzvg!02M\u0026GR02PP+Bs}AAzE)r#vp\u003cQlv@bN{B6*WWhzCKu!=KCd0[W[./-G\u003ed01S*MC404uvqYZhlU{gLA@=mCw]zY+vqPMR03%3!ygho]fkL6mxd)h9A+PA7j1i\u003crvrM6jy*?i]fgfL:B8%zG0]9!R3#GM$xM4A*g=3%EfBv)j0]ss!?VzZp010pHBwls*xM4zZ06?@aygho]fkL6mxd)h9A+PA7j6Lx[vrM6jy*?i]fgfL:B8%z(oLO0Vvj#C9zF7RywOb:\u0026v@%v#wPRQ7wig1$\u0026Sf2\u003cygho]fkL6mxd)4\u0026ygQ)%3iGn\u0026\u003cP+\u003eH3\u003cbO[\u003eM7V2ygho]fkL6mxd[ppw]83*Bt3v1BzbP60rrsrzGY@lwDq=\u003ec}[w:C404uvqYZhpHX6Iv@%!poLO0Vvj#C9zF7Q#vRPE:Bup{Bygho]fkL6mxd)4\u0026ygQ)%i%(5O0{Z6)(\u003cJ%.0}36?7J9/afkUAvwN/:?w]]Xoy*?yauO:C$0rrHAwPRQ7wm45Ig=2dj8Z)dezE)]yze0)0v@=0\u0026Bt4cuvrlG%gC.0L3iGe/[c/x*0}Du(2XNZ\u003clU{gLA@=mOc[d\u00268vrM6jy*?i]fgfL:B8%zI0[ECB3\u003cc86{5Ld2xjVfVwPRQ7wod+K9vJvvoLO0Vvj#C9zF7RywOb:\u0026v@%v#wPRQ7wig4#{Ygv5zdN*5z!9ifi59e}0]%BV3\u003ccqbq2{U4xjVfWvqPM.0]%BY3\u003ccze1owGmxjVfYvrb^[wPRH7lVm9+Bo?%G0rrZEA^qRCz/e{5vpT7\u003cuTW$%3ih7G0T]ek0xZw.5m]:2B-I4XBAhg@v@=p5Bp51v0%G8n1][", "ln": 9864 }, { "b": "wml-[xKM0dh30Xfc}[w:C404uvqYZhq/)4]zF848zE)]yze0)0v@=0\u0026Bt4cuvrlG%gCHNBdolVQoAtbjtte^uC404uvqYZhA+e\u003c0wN/*no\u003ewAWz!7{g02PJXzdm3:bXp\u003emB-I4VA=:#[vpS}WbS2J46L}h{vQ@))B7Gl1lVl\u003c:A=k+tgxvE\u003ec}[w:C404uvqYZhq/)4]zF84mdolDH3t:c/vQ@))w*xbj01-%Pzdm3:bXRamyE\u0026OUbRYr1hyImpwPPOxx(mG(A:-N4fjO!", "ln": 11359 }, { "b": "8Wc@]6^3@\u0026y}6H1u]xbx9gu\u003cr6=JIv4\u003es{!OTxD-62{*H1}}5Qhx:O5V\u0026Sl97zN\u0026z6^akd2W!w\u003c1gwnAGC\u003c(?@@%#9V\u0026Sl92O!6?7.v6=5[IfN0+!?s00065jPCDZ{5EkQ00fk51oCXa1P+\u003edb($pKkMOg\u003emGG\u003c@m/*70o98K5rSP-hr@]@ltMIIrvGBgyx92^FG-P0\u0026Q5\u0026ahTPurtY-D7L.2.KQ+Mk-:/8-})\u0026Smd3)e+ug00gmz5co#Q", "ln": 20447 }, { "b": "6:$S^v278u00GLehvZDi2bh8P6:LuTu\u003e\u003cd^4g\u0026.KxKA.e7Z7M:HNjFg78Ne?4\u00262KYHNsOi3mV=2We+xPGBO3X%i4UE00065jPCDZuh$=w00i\u0026m1P/zs8uHVO8V*\u0026RbMX?-dGQH*d/{W\u003chuB)0k(@8cm/\u003c+jo-=BqqVX9xsPP=Ew=:gSASNG^Hxn+4HYO}7KPD{hP-MUyWGm]UYAfO-Y-GLY.VzB)kMy=:cJBz\u003c0q(*c1oev901f2i9r#Pr", "ln": 21567 }, { "b": "83N-j1{l:*6:CDTQ5Wj(1R?m$iTux2{zBmB0@on9/QhZY83)UL}#\u0026U)78Ww}1o=yt\u0026Almmq)(+/seM38GA?KQ%hy(o1wMc30rr91Ee[=$R#M(3jPCDZe=VmV00kaW2lD)=bMZ1beDO0lo-^ASwca)]BojSaClf\u0026aEf8.nFc51pFDwgvkMy=:fAqpR06ZC?2lq1l0qlT0!=#on2lJ\u0026?14@T}001$T00Ju72lq1l0qlx)li^H?01YFto-X8\u003e", "ln": 22487 } ], "depth": 1, "facts": { "imp": [ [ "", "javax/imageio/ImageIO" ], [ "", "java/io/InputStream" ], [ "", "net/minecraft/class_332" ], [ "", "net/minecraft/class_312" ], [ "", "java/lang/Object" ], [ "", "net/minecraft/class_1043" ], [ "", "java/lang/invoke/StringConcatFactory" ], [ "", "java/lang/invoke/MethodHandles$Lookup" ], [ "", "com/krypton/setting/d" ], [ "", "java/util/concurrent/atomic/AtomicBoolean" ], [ "", "java/nio/file/Files" ], [ "", "java/lang/Process" ], [ "", "java/lang/Throwable" ], [ "", "java/io/ByteArrayOutputStream" ], [ "", "java/io/InputStreamReader" ], [ "", "java/lang/Double" ], [ "", "net/minecraft/class_327" ], [ "", "net/minecraft/class_1011" ], [ "", "java/lang/Class" ], [ "", "java/lang/System" ], [ "", "net/minecraft/class_2960" ], [ "", "[Ljava/lang/String;" ], [ "", "java/util/concurrent/Executors" ], [ "", "java/io/PrintStream" ], [ "", "java/lang/ProcessBuilder" ], [ "", "java/nio/file/Path" ], [ "", "java/nio/charset/StandardCharsets" ], [ "", "java/io/BufferedReader" ], [ "", "com/krypton/module/Category" ], [ "", "net/minecraft/class_310" ], [ "", "java/lang/String" ], [ "", "net/fabricmc/fabric/api/event/Event" ], [ "", "java/lang/invoke/MethodHandles" ], [ "", "java/lang/Math" ], [ "", "java/lang/reflect/Method" ], [ "", "net/minecraft/class_10799" ], [ "", "java/nio/file/attribute/FileAttribute" ], [ "", "java/lang/Thread" ], [ "", "com/krypton/module/b" ], [ "", "net/minecraft/class_1041" ], [ "", "w/I" ], [ "", "java/lang/Boolean" ], [ "", "net/minecraft/class_408" ], [ "", "java/nio/file/OpenOption" ], [ "", "[Ljava/lang/reflect/Method;" ], [ "", "java/lang/StringBuilder" ], [ "", "java/lang/Exception" ], [ "", "net/fabricmc/fabric/api/client/rendering/v1/HudRenderCallback" ], [ "", "net/minecraft/class_329" ], [ "", "java/util/concurrent/ExecutorService" ], [ "", "java/io/ByteArrayInputStream" ], [ "", "java/lang/invoke/LambdaMetafactory" ], [ "", "java/nio/file/LinkOption" ], [ "", "net/minecraft/class_1060" ], [ "javax/imageio/ImageIO", "javax/imageio/ImageIO.read" ], [ "javax/imageio/ImageIO", "read" ], [ "java/lang/Class", "java/lang/Class.getMethods" ], [ "java/lang/Class", "getMethods" ], [ "net/minecraft/class_310", "net/minecraft/class_310.field_1772" ], [ "net/minecraft/class_310", "field_1772" ], [ "w/Radio", "w/Radio.ART_ID" ], [ "w/Radio", "ART_ID" ], [ "java/lang/System", "java/lang/System.getProperty" ], [ "java/lang/System", "getProperty" ], [ "java/util/concurrent/Executors", "java/util/concurrent/Executors.newSingleThreadExecutor" ], [ "java/util/concurrent/Executors", "newSingleThreadExecutor" ], [ "java/lang/Process", "java/lang/Process.waitFor" ], [ "java/lang/Process", "waitFor" ], [ "w/Radio", "w/Radio.dragOffX" ], [ "w/Radio", "dragOffX" ], [ "w/Radio", "w/Radio.lambda$chat$5" ], [ "w/Radio", "lambda$chat$5" ], [ "w/Radio", "w/Radio.spotifyOnly" ], [ "w/Radio", "spotifyOnly" ], [ "java/io/BufferedReader", "java/io/BufferedReader.readLine" ], [ "java/io/BufferedReader", "readLine" ], [ "w/Radio", "w/Radio.renderIfEnabled" ], [ "w/Radio", "renderIfEnabled" ], [ "w/Radio", "w/Radio.a" ], [ "w/Radio", "a" ], [ "w/Radio", "w/Radio.dragging" ], [ "w/Radio", "dragging" ], [ "java/lang/String", "java/lang/String.valueOf" ], [ "java/lang/String", "valueOf" ], [ "net/minecraft/class_1060", "net/minecraft/class_1060.method_4616" ], [ "net/minecraft/class_1060", "method_4616" ], [ "java/lang/Boolean", "java/lang/Boolean.valueOf" ], [ "java/lang/Boolean", "valueOf" ], [ "w/Radio", "w/Radio.pendingArtPath" ], [ "w/Radio", "pendingArtPath" ], [ "javax/imageio/ImageIO", "javax/imageio/ImageIO.write" ], [ "javax/imageio/ImageIO", "write" ], [ "net/minecraft/class_1041", "net/minecraft/class_1041.method_4495" ], [ "net/minecraft/class_1041", "method_4495" ], [ "net/minecraft/class_327", "net/minecraft/class_327.method_1727" ], [ "net/minecraft/class_327", "method_1727" ], [ "w/Radio", "w/Radio.hudHooked" ], [ "w/Radio", "hudHooked" ], [ "java/lang/Throwable", "java/lang/Throwable.addSuppressed" ], [ "java/lang/Throwable", "addSuppressed" ], [ "w/Radio", "w/Radio.hudX" ], [ "w/Radio", "hudX" ], [ "java/io/ByteArrayOutputStream", "java/io/ByteArrayOutputStream.\u003cinit\u003e" ], [ "java/io/ByteArrayOutputStream", "\u003cinit\u003e" ], [ "java/nio/file/Path", "java/nio/file/Path.resolve" ], [ "java/nio/file/Path", "resolve" ], [ "java/lang/Math", "java/lang/Math.min" ], [ "java/lang/Math", "min" ], [ "w/Radio", "w/Radio.lambda$hookHud$1" ], [ "w/Radio", "lambda$hookHud$1" ], [ "w/Radio", "w/Radio.lambda$f$2" ], [ "w/Radio", "lambda$f$2" ], [ "net/minecraft/class_329", "net/minecraft/class_329.method_1743" ], [ "net/minecraft/class_329", "method_1743" ], [ "java/lang/invoke/StringConcatFactory", "java/lang/invoke/StringConcatFactory.makeConcatWithConstants" ], [ "java/lang/invoke/StringConcatFactory", "makeConcatWithConstants" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.append" ], [ "java/lang/StringBuilder", "append" ], [ "net/minecraft/class_310", "net/minecraft/class_310.field_1729" ], [ "net/minecraft/class_310", "field_1729" ], [ "java/util/concurrent/atomic/AtomicBoolean", "java/util/concurrent/atomic/AtomicBoolean.compareAndSet" ], [ "java/util/concurrent/atomic/AtomicBoolean", "compareAndSet" ], [ "w/Radio", "w/Radio.boxX" ], [ "w/Radio", "boxX" ], [ "w/Radio", "w/Radio.applyPollOutput" ], [ "w/Radio", "applyPollOutput" ], [ "java/nio/file/Path", "java/nio/file/Path.toAbsolutePath" ], [ "java/nio/file/Path", "toAbsolutePath" ], [ "java/lang/String", "java/lang/String.indexOf" ], [ "java/lang/String", "indexOf" ], [ "w/Radio", "w/Radio.hoverBtn" ], [ "w/Radio", "hoverBtn" ], [ "java/lang/ProcessBuilder", "java/lang/ProcessBuilder.\u003cinit\u003e" ], [ "java/lang/ProcessBuilder", "\u003cinit\u003e" ], [ "com/krypton/module/b", "com/krypton/module/b.\u003cinit\u003e" ], [ "com/krypton/module/b", "\u003cinit\u003e" ], [ "java/lang/ProcessBuilder", "java/lang/ProcessBuilder.redirectErrorStream" ], [ "java/lang/ProcessBuilder", "redirectErrorStream" ], [ "java/nio/file/Files", "java/nio/file/Files.newInputStream" ], [ "java/nio/file/Files", "newInputStream" ], [ "com/krypton/module/Category", "com/krypton/module/Category.e" ], [ "com/krypton/module/Category", "e" ], [ "java/lang/Class", "java/lang/Class.forName" ], [ "java/lang/Class", "forName" ], [ "net/minecraft/class_310", "net/minecraft/class_310.method_1551" ], [ "net/minecraft/class_310", "method_1551" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.append" ], [ "java/lang/StringBuilder", "append" ], [ "net/minecraft/class_2960", "net/minecraft/class_2960.method_60655" ], [ "net/minecraft/class_2960", "method_60655" ], [ "w/Radio", "w/Radio.lambda$sendControl$3" ], [ "w/Radio", "lambda$sendControl$3" ], [ "w/Radio", "w/Radio.artTexture" ], [ "w/Radio", "artTexture" ], [ "java/lang/String", "java/lang/String.equals" ], [ "java/lang/String", "equals" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.toString" ], [ "java/lang/StringBuilder", "toString" ], [ "net/minecraft/class_312", "net/minecraft/class_312.method_1604" ], [ "net/minecraft/class_312", "method_1604" ], [ "w/Radio", "w/Radio.pollScript" ], [ "w/Radio", "pollScript" ], [ "w/Radio", "w/Radio.artKey" ], [ "w/Radio", "artKey" ], [ "net/minecraft/class_310", "net/minecraft/class_310.execute" ], [ "net/minecraft/class_310", "execute" ], [ "java/lang/Class", "java/lang/Class.getMethod" ], [ "java/lang/Class", "getMethod" ], [ "w/Radio", "w/Radio.hudY" ], [ "w/Radio", "hudY" ], [ "w/Radio", "w/Radio.dragOffY" ], [ "w/Radio", "dragOffY" ], [ "com/krypton/setting/d", "com/krypton/setting/d.setValue" ], [ "com/krypton/setting/d", "setValue" ], [ "java/io/InputStreamReader", "java/io/InputStreamReader.\u003cinit\u003e" ], [ "java/io/InputStreamReader", "\u003cinit\u003e" ], [ "java/lang/String", "java/lang/String.toUpperCase" ], [ "java/lang/String", "toUpperCase" ], [ "java/lang/Boolean", "java/lang/Boolean.TRUE" ], [ "java/lang/Boolean", "TRUE" ], [ "w/Radio", "w/Radio.boxY" ], [ "w/Radio", "boxY" ], [ "w/Radio", "w/Radio.ctrlInFlight" ], [ "w/Radio", "ctrlInFlight" ], [ "java/io/ByteArrayInputStream", "java/io/ByteArrayInputStream.\u003cinit\u003e" ], [ "java/io/ByteArrayInputStream", "\u003cinit\u003e" ], [ "java/lang/Math", "java/lang/Math.max" ], [ "java/lang/Math", "max" ], [ "java/io/InputStream", "java/io/InputStream.close" ], [ "java/io/InputStream", "close" ], [ "java/nio/file/Files", "java/nio/file/Files.writeString" ], [ "java/nio/file/Files", "writeString" ], [ "w/Radio", "w/Radio.status" ], [ "w/Radio", "status" ], [ "net/minecraft/class_310", "net/minecraft/class_310.field_1705" ], [ "net/minecraft/class_310", "field_1705" ], [ "java/lang/String", "java/lang/String.length" ], [ "java/lang/String", "length" ], [ "w/Radio", "w/Radio.ctrlScript" ], [ "w/Radio", "ctrlScript" ], [ "java/lang/Process", "java/lang/Process.getInputStream" ], [ "java/lang/Process", "getInputStream" ], [ "w/I", "w/I.a" ], [ "w/I", "a" ], [ "java/lang/reflect/Method", "java/lang/reflect/Method.invoke" ], [ "java/lang/reflect/Method", "invoke" ], [ "w/Radio", "w/Radio.ensureCtrlScript" ], [ "w/Radio", "ensureCtrlScript" ], [ "java/util/concurrent/atomic/AtomicBoolean", "java/util/concurrent/atomic/AtomicBoolean.set" ], [ "java/util/concurrent/atomic/AtomicBoolean", "set" ], [ "w/Radio", "w/Radio.lastPollMs" ], [ "w/Radio", "lastPollMs" ], [ "java/lang/ProcessBuilder", "java/lang/ProcessBuilder.start" ], [ "java/lang/ProcessBuilder", "start" ], [ "java/nio/file/Path", "java/nio/file/Path.of" ], [ "java/nio/file/Path", "of" ], [ "net/minecraft/class_312", "net/minecraft/class_312.method_1603" ], [ "net/minecraft/class_312", "method_1603" ], [ "com/krypton/setting/d", "com/krypton/setting/d.getValue" ], [ "com/krypton/setting/d", "getValue" ], [ "w/Radio", "w/Radio.lambda$new$0" ], [ "w/Radio", "lambda$new$0" ], [ "java/nio/file/Path", "java/nio/file/Path.toString" ], [ "java/nio/file/Path", "toString" ], [ "java/lang/String", "java/lang/String.isBlank" ], [ "java/lang/String", "isBlank" ], [ "java/lang/Thread", "java/lang/Thread.\u003cinit\u003e" ], [ "java/lang/Thread", "\u003cinit\u003e" ], [ "java/lang/System", "java/lang/System.currentTimeMillis" ], [ "java/lang/System", "currentTimeMillis" ], [ "w/Radio", "w/Radio.destroyArtTexture" ], [ "w/Radio", "destroyArtTexture" ], [ "java/lang/String", "java/lang/String.indexOf" ], [ "java/lang/String", "indexOf" ], [ "net/minecraft/class_332", "net/minecraft/class_332.method_51433" ], [ "net/minecraft/class_332", "method_51433" ], [ "java/io/BufferedReader", "java/io/BufferedReader.\u003cinit\u003e" ], [ "java/io/BufferedReader", "\u003cinit\u003e" ], [ "net/fabricmc/fabric/api/client/rendering/v1/HudRenderCallback", "net/fabricmc/fabric/api/client/rendering/v1/HudRenderCallback.EVENT" ], [ "net/fabricmc/fabric/api/client/rendering/v1/HudRenderCallback", "EVENT" ], [ "java/nio/file/Files", "java/nio/file/Files.isRegularFile" ], [ "java/nio/file/Files", "isRegularFile" ], [ "java/lang/String", "java/lang/String.trim" ], [ "java/lang/String", "trim" ], [ "w/Radio", "w/Radio.handleMouseDrag" ], [ "w/Radio", "handleMouseDrag" ], [ "w/Radio", "w/Radio.instance" ], [ "w/Radio", "instance" ], [ "java/util/concurrent/ExecutorService", "java/util/concurrent/ExecutorService.submit" ], [ "java/util/concurrent/ExecutorService", "submit" ], [ "w/Radio", "w/Radio.lastBoxW" ], [ "w/Radio", "lastBoxW" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.\u003cinit\u003e" ], [ "java/lang/StringBuilder", "\u003cinit\u003e" ], [ "w/I", "w/I.a" ], [ "w/I", "a" ], [ "net/minecraft/class_1041", "net/minecraft/class_1041.method_4502" ], [ "net/minecraft/class_1041", "method_4502" ], [ "w/Radio", "w/Radio.artReady" ], [ "w/Radio", "artReady" ], [ "w/Radio", "w/Radio.statusColor" ], [ "w/Radio", "statusColor" ], [ "com/krypton/setting/d", "com/krypton/setting/d.\u003cinit\u003e" ], [ "com/krypton/setting/d", "\u003cinit\u003e" ], [ "java/io/PrintStream", "java/io/PrintStream.println" ], [ "java/io/PrintStream", "println" ], [ "w/Radio", "w/Radio.smtcCommonPs" ], [ "w/Radio", "smtcCommonPs" ], [ "java/lang/Thread", "java/lang/Thread.setDaemon" ], [ "java/lang/Thread", "setDaemon" ], [ "java/nio/charset/StandardCharsets", "java/nio/charset/StandardCharsets.UTF_8" ], [ "java/nio/charset/StandardCharsets", "UTF_8" ], [ "w/Radio", "w/Radio.lambda$ensureArtLoaded$4" ], [ "w/Radio", "lambda$ensureArtLoaded$4" ], [ "w/Radio", "w/Radio.chat" ], [ "w/Radio", "chat" ], [ "w/Radio", "w/Radio.loadedArtKey" ], [ "w/Radio", "loadedArtKey" ], [ "w/Radio", "w/Radio.pollInFlight" ], [ "w/Radio", "pollInFlight" ], [ "java/lang/System", "java/lang/System.err" ], [ "java/lang/System", "err" ], [ "net/minecraft/class_332", "net/minecraft/class_332.method_25290" ], [ "net/minecraft/class_332", "method_25290" ], [ "w/Radio", "w/Radio.handleMouseClick" ], [ "w/Radio", "handleMouseClick" ], [ "w/Radio", "w/Radio.title" ], [ "w/Radio", "title" ], [ "w/Radio", "w/Radio.artist" ], [ "w/Radio", "artist" ], [ "java/nio/file/Path", "java/nio/file/Path.toFile" ], [ "java/nio/file/Path", "toFile" ], [ "java/lang/String", "java/lang/String.substring" ], [ "java/lang/String", "substring" ], [ "java/util/concurrent/atomic/AtomicBoolean", "java/util/concurrent/atomic/AtomicBoolean.\u003cinit\u003e" ], [ "java/util/concurrent/atomic/AtomicBoolean", "\u003cinit\u003e" ], [ "w/Radio", "w/Radio.applyIdle" ], [ "w/Radio", "applyIdle" ], [ "java/lang/reflect/Method", "java/lang/reflect/Method.getParameterCount" ], [ "java/lang/reflect/Method", "getParameterCount" ], [ "java/lang/invoke/LambdaMetafactory", "java/lang/invoke/LambdaMetafactory.metafactory" ], [ "java/lang/invoke/LambdaMetafactory", "metafactory" ], [ "w/Radio", "w/Radio.pollWindowsNowPlaying" ], [ "w/Radio", "pollWindowsNowPlaying" ], [ "net/minecraft/class_1060", "net/minecraft/class_1060.method_4615" ], [ "net/minecraft/class_1060", "method_4615" ], [ "net/minecraft/class_10799", "net/minecraft/class_10799.field_56883" ], [ "net/minecraft/class_10799", "field_56883" ], [ "net/minecraft/class_310", "net/minecraft/class_310.field_1755" ], [ "net/minecraft/class_310", "field_1755" ], [ "java/lang/Object", "java/lang/Object.getClass" ], [ "java/lang/Object", "getClass" ], [ "w/Radio", "w/Radio.playing" ], [ "w/Radio", "playing" ], [ "w/Radio", "w/Radio.hookHud" ], [ "w/Radio", "hookHud" ], [ "java/lang/String", "java/lang/String.contains" ], [ "java/lang/String", "contains" ], [ "java/lang/Boolean", "java/lang/Boolean.equals" ], [ "java/lang/Boolean", "equals" ], [ "w/Radio", "w/Radio.lastBoxH" ], [ "w/Radio", "lastBoxH" ], [ "w/Radio", "w/Radio.updateHover" ], [ "w/Radio", "updateHover" ], [ "w/Radio", "w/Radio.ensurePollScript" ], [ "w/Radio", "ensurePollScript" ], [ "java/io/ByteArrayOutputStream", "java/io/ByteArrayOutputStream.toByteArray" ], [ "java/io/ByteArrayOutputStream", "toByteArray" ], [ "net/minecraft/class_310", "net/minecraft/class_310.method_22683" ], [ "net/minecraft/class_310", "method_22683" ], [ "net/minecraft/class_1041", "net/minecraft/class_1041.method_4486" ], [ "net/minecraft/class_1041", "method_4486" ], [ "java/lang/Double", "java/lang/Double.valueOf" ], [ "java/lang/Double", "valueOf" ], [ "net/minecraft/class_1043", "net/minecraft/class_1043.close" ], [ "net/minecraft/class_1043", "close" ], [ "java/lang/reflect/Method", "java/lang/reflect/Method.getName" ], [ "java/lang/reflect/Method", "getName" ], [ "w/Radio", "w/Radio.sendControl" ], [ "w/Radio", "sendControl" ], [ "w/Radio", "w/Radio.clearArt" ], [ "w/Radio", "clearArt" ], [ "w/Radio", "w/Radio.drawAlbumArt" ], [ "w/Radio", "drawAlbumArt" ], [ "java/io/BufferedReader", "java/io/BufferedReader.close" ], [ "java/io/BufferedReader", "close" ], [ "java/lang/Double", "java/lang/Double.intValue" ], [ "java/lang/Double", "intValue" ], [ "java/lang/String", "java/lang/String.isEmpty" ], [ "java/lang/String", "isEmpty" ], [ "w/Radio", "w/Radio.renderHud" ], [ "w/Radio", "renderHud" ], [ "com/krypton/setting/d", "com/krypton/setting/d.\u003cinit\u003e" ], [ "com/krypton/setting/d", "\u003cinit\u003e" ], [ "java/nio/file/Files", "java/nio/file/Files.createDirectories" ], [ "java/nio/file/Files", "createDirectories" ], [ "net/minecraft/class_310", "net/minecraft/class_310.method_1531" ], [ "net/minecraft/class_310", "method_1531" ], [ "w/I", "w/I.a" ], [ "w/I", "a" ], [ "net/fabricmc/fabric/api/event/Event", "net/fabricmc/fabric/api/event/Event.register" ], [ "net/fabricmc/fabric/api/event/Event", "register" ], [ "java/lang/Exception", "java/lang/Exception.getMessage" ], [ "java/lang/Exception", "getMessage" ], [ "w/Radio", "w/Radio.pollExec" ], [ "w/Radio", "pollExec" ], [ "w/Radio", "w/Radio.ensureArtLoaded" ], [ "w/Radio", "ensureArtLoaded" ], [ "net/minecraft/class_1043", "net/minecraft/class_1043.\u003cinit\u003e" ], [ "net/minecraft/class_1043", "\u003cinit\u003e" ], [ "w/Radio", "w/Radio.valueAfter" ], [ "w/Radio", "valueAfter" ], [ "w/Radio", "w/Radio.showWhenIdle" ], [ "w/Radio", "showWhenIdle" ], [ "net/minecraft/class_1011", "net/minecraft/class_1011.method_4309" ], [ "net/minecraft/class_1011", "method_4309" ], [ "w/Radio", "w/Radio.chatOpen" ], [ "w/Radio", "chatOpen" ], [ "w/Radio", "w/Radio.isEnabled" ], [ "w/Radio", "isEnabled" ] ], "metrics": { "file": { "size": 23659, "entropy": 6.28 }, "class": { "major_version": 65, "interface_count": 0, "method_ref_count": 163, "constant_pool_size": 916, "external_class_count": 54 }, "binary": { "peak_region_bytes": 15360, "peak_region_entropy": 5.89 }, "imports": { "count": 217 }, "functions": { "count": 38 } } }, "id": 215, "mol": "K(Ga)O₃(AsCI)H₃(Db₃F₃Po₃)", "path": "krypton-1.21.11.jar!!w/Radio.class", "pid": 0, "risk": 52, "sha": "ad353d87b9ea6b8040578972a3b942464a7a37942a08ea8478a3f428ec4fb97d", "size": 23659, "traits": [ { "id": "execution/shell", "conf": 0.85, "crit": 3, "desc": "Shell command string" }, { "id": "metadata/lang/natural::lang-english--atom-5", "conf": 0.8, "crit": 1, "desc": "English function-word token \"for\"", "spans": [ [ 1203, 0 ] ] }, { "id": "micro-behaviors/communications/proxy/tunnel::byte-output-stream", "atk": "T1090", "mbc": "C0003", "conf": 0.5, "crit": 3, "desc": "Java ByteArrayOutputStream usage", "spans": [ [ 147, 21 ], [ 5843, 21 ], [ 6027, 21 ] ] }, { "id": "micro-behaviors/data/buffer::bytearrayinputstream-ref", "conf": 0.88, "crit": 3, "desc": "Java ByteArrayInputStream class" }, { "id": "micro-behaviors/data/buffer::bytearrayoutputstream-ref", "conf": 0.88, "crit": 3, "desc": "Java ByteArrayOutputStream class", "spans": [ [ 5835, 29 ] ] }, { "id": "micro-behaviors/data/source/dynamic/reflect::java-class-forname-bytecode", "conf": 1.0, "crit": 3, "desc": "JVM Class.forName invocation", "spans": [ [ 9960, 23 ] ] }, { "id": "micro-behaviors/data/source/dynamic/reflect::java-class-getmethod-bytecode", "conf": 1.0, "crit": 3, "desc": "JVM reflective method lookup", "spans": [ [ 10038, 25 ] ] }, { "id": "micro-behaviors/data/source/dynamic/reflect::java-method-invoke-bytecode", "conf": 1.0, "crit": 3, "desc": "JVM reflective method invocation", "spans": [ [ 10179, 31 ] ] }, { "id": "micro-behaviors/data/source/dynamic/reflect::jvm-reflect-method-class-ref", "conf": 0.9, "crit": 2, "desc": "JVM java.lang.reflect.Method class reference" }, { "id": "micro-behaviors/data/string/conversion::tostring-token", "conf": 1.0, "crit": 3, "desc": "References the toString conversion method", "spans": [ [ 3709, 8 ] ] }, { "id": "micro-behaviors/fs/path/extension::java-executable-reference", "conf": 0.92, "crit": 3, "desc": "Java bytecode references an executable path" }, { "id": "micro-behaviors/fs/read/file/handle::jvm-nio-file-class-ref", "conf": 0.86, "crit": 3, "desc": "JVM NIO file API reference" }, { "id": "micro-behaviors/fs/write/file/full::jvm-files-writestring-bytecode", "conf": 0.9, "crit": 3, "desc": "JVM bytecode Files.writeString", "spans": [ [ 8218, 31 ] ] }, { "id": "micro-behaviors/process/control/wait::java-process-waitfor-bytecode", "conf": 0.9, "crit": 3, "desc": "Java bytecode process wait", "spans": [ [ 4471, 25 ] ] }, { "id": "micro-behaviors/process/create/spawn::java-processbuilder-bytecode", "atk": "T1059", "mbc": "E1203", "conf": 0.88, "crit": 3, "desc": "Java bytecode ProcessBuilder reference", "spans": [ [ 3540, 71 ] ] }, { "id": "micro-behaviors/process/create/spawn::java-processbuilder-init-bytecode-symbol", "atk": "T1059", "mbc": "E1203", "conf": 0.92, "crit": 3, "desc": "Java bytecode ProcessBuilder constructor", "spans": [ [ 139, 31 ] ] }, { "id": "micro-behaviors/process/create/spawn::java-processbuilder-start-bytecode-symbol", "atk": "T1059", "mbc": "E1203", "conf": 0.95, "crit": 3, "desc": "Java bytecode ProcessBuilder start", "spans": [ [ 3874, 30 ] ] }, { "id": "micro-behaviors/process/io/stream::java-processbuilder-redirect-errors", "conf": 0.92, "crit": 3, "desc": "Java ProcessBuilder merges standard error", "spans": [ [ 3810, 44 ] ] }, { "id": "micro-behaviors/process/io/stream::jvm-process-input-stream", "conf": 0.94, "crit": 3, "desc": "JVM process output stream access", "spans": [ [ 4037, 32 ] ] }, { "id": "objectives/anti-static/obfuscation/reflection/class::dalvik-reflect-method", "atk": "T1406", "mbc": "F0006", "conf": 1.0, "crit": 3, "desc": "Dalvik reflect/Method type descriptor", "spans": [ [ 10050, 64 ], [ 10397, 29 ], [ 11423, 27 ] ] }, { "id": "objectives/command-and-control/remote-command/control::java-nio-input-stream", "atk": "T1059", "mbc": "B0022", "conf": 0.72, "crit": 3, "desc": "Java NIO input stream", "spans": [ [ 6204, 14 ] ] }, { "id": "objectives/impact/dos/disk::jvm-two-backward-goto-branches", "atk": "T1499.001", "conf": 0.9, "crit": 3, "desc": "JVM repeated counter backedges", "spans": [ [ 20511, 8 ], [ 21631, 8 ], [ 22551, 8 ] ] }, { "id": "well-known/game/mod::minecraft-client-class-ref", "conf": 0.9, "crit": 3, "desc": "Minecraft client singleton class reference", "spans": [ [ 2868, 23 ] ] }, { "id": "micro-behaviors/process/create/spawn::java-processbuilder-start-bytecode", "atk": "T1059", "mbc": "E1203", "conf": 0.94, "crit": 3, "desc": "Java bytecode ProcessBuilder execution", "uses": [ 15, 16 ], "spans": [ [ 139, 31 ], [ 3874, 30 ] ] }, { "id": "objectives/anti-static/obfuscation/reflection/class::java-invoke-or-getmethod", "conf": 1.0, "crit": 1, "desc": "Java invoke or getMethod", "uses": [ 6 ], "spans": [ [ 10038, 0 ] ] }, { "id": "micro-behaviors/data/source/dynamic/reflect::java-bytecode-reflective-method-invoke", "conf": 0.94, "crit": 3, "desc": "JVM resolves and invokes method reflectively", "uses": [ 5, 6, 7 ], "spans": [ [ 9960, 23 ], [ 10038, 25 ], [ 10179, 31 ] ] }, { "id": "micro-behaviors/process/create/spawn::child-process-creation-api", "atk": "T1106", "conf": 0.92, "crit": 3, "desc": "Starts a child process through a platform API", "uses": [ 23 ], "spans": [ [ 139, 31 ], [ 3874, 30 ] ] }, { "id": "objectives/anti-static/obfuscation/reflection/class::java-reflective-invoke", "conf": 0.9, "crit": 3, "desc": "Reflective method invocation in bytecode", "uses": [ 8, 24 ], "spans": [ [ 10038, 25 ] ] }, { "id": "objectives/anti-static/obfuscation/reflection/class::jvm-reflection-command-exec", "atk": "T1027", "conf": 0.98, "crit": 4, "desc": "JVM reflection paired with command execution", "uses": [ 16, 25 ], "spans": [ [ 3874, 30 ], [ 9960, 23 ], [ 10038, 25 ], [ 10179, 31 ] ] } ], "type": "java_class" }, { "id": 216, "mol": "K(Ga)", "sha": "2593707f303a72503782b441aabf5bb1634459ce9a051abababbee0e212400c9", "path": "krypton-1.21.11.jar!!com/krypton/mixin/ChatScreenMixin.class", "risk": 1, "size": 2458, "type": "java_class", "depth": 1 }, { "ctx": [ { "b": "+kO#^0000+0?fC}0S-ofl3mo/avx%Vv@2T@2(\u003e8d1Qt2i3\u0026*Ij2MT]Av@DiqyJsYtBz(4IzeS%cy?km!vru6[z/Qa700cNg03a:yz/4dyA^qRCz/djBz!a0bwIlzVBy/96A^o.", "ln": 0 }, { "b": "Cxj)yx)a5gv@b\u003c?yJz9Jp\u0026Zb*B0aB8Bz\u0026pjA:-P6BzbkdvScGz3ig!v+)TP$0j8Xa1y(aNBo}{Z0mhbOAraw!02XEFwPPOxx(mG(A:-N4fjO*bB8$XAf!+V}0mH}$2lro.0m?e40rr{NwPPOxx(mG(A:-N4fjO*bB8$XAf!-Rd3ta0-y?c)ch.)h\u003c02XEFwPPOxx(mG(A:-N4fjO*bB8$XEg=vA40mH@33\u0026[#Y*w}oYw[+*)wm45Hi5Z\u003cr8ba{VBt4GBzE)r#vp\u003cQmv@bN{B6**Yi6dAD^/whj0nW.k0rrEsx\u003eq9\u003euOKF%h30W{oM1A-fkUAvwN+", "ln": 2181 }, { "b": "z/oD5z*c7100BYwdolYPArc4Dw[+*)wm45Ih.+TuA@*v/0D!!KB]=^/01S*MC404uvqYZhlU{gLA@=mLxjVfMwN/K+A+e=Jx\u003eq9\u003e0rsY1oLO0Vvj#C9zF7R3BAh8kxfdLoygho]fkL6mxd[ppw]83*Bt39$wO+)s3itzMDiTE$3\u0026$.REe%r:ygho]fkL6mxd[ppw]83*Bt39$wO+(T01B0XBu%zDwPI{bvR/PR00BYNdol=RC(-y60E$i40rrsBwPQHYBo8vSc}[w:C404uvqYZhpHX6Iv@%!7dol=Q6-\u0026{}0FyGc0rr^yy?m3}l3diSv@1CIz!@%5CwWAY94jG#wPPOxx(mG(A:-N4fjO*bB8$XAf!+WrrTw!Z0F*%YI3%Ax0Gc%U7\u0026A]bfkUAvwN/:?w]]Xoy*?yauOKq]h#%0^w[+*)wm4hNfGo7k8CC3WBt4GBzE)r#vp\u003cQmv@bN{B6*T", "ln": 3882 }, { "b": "gYWN%c}[I\u0026Bt4GBzE)r#vp\u003cQmv@bN{B6*TShAi=ErTF*w0H0])LMv3I01T9YB8L(rwKHD5BAy@3yxjzPc[d\u00268vrM6jy*?i]flgSoy?m9#fhl21xM4Ay2lyd(01-)NC404uvqYZhpHX6Iv@@4UNe@-Y0H\u003cF#Ob]eY02PDVC404uvqYZhA+e\u003c0wN/*no\u003ewAWz!5\u003eG25d%#z!\u0026[+068D3ygho]fkL6mxd)4\u0026ygQ)%j6Lx[vrM6jy*?i]fhD4(wN/*zdnjF+C404uvqYZhpHX6Iv@%^B00rk43JT#yPBp\u003c{0Dd#s8F:wsAcc2obY^KsnPXJXrDz.sz/oD5z*c780IYU}3ta0-y?c)ch-it$02kKh3\u003c0jaL(Q\u003c@A+frgy\u003c6wTz+k4Zzb\u003eT*5=-4mS%F+v0JuFdSSxd301JKTl3diSv@1!IBzbP60rs3iygho]fkL6mxd[ppw]83*Bt3v1BzbP6i%U\u003e?0rrHAwPRQ7wm45GgD2NvA@\u0026DM0K8Qf0rrZAwPQsKv@bN]wN[IDBzbP60rtwkoLO0Vvj#C9zF7R3BAh8kxffr\u003eygho]fkL6mxd(R*vrlGKdnjF+C404uvqYZhA+e\u003c0wN/*no\u003ewAWz!7{p0HS$m5=-7nS%F+v0KSspWGiAf01SQUnPXJXrDz.CwPRQ7wc-jC0rrHAwPRQ7wm45Gi5qfE1]$Xh0Gvb(3\u003c10wY-w9vzdN*5z!9ikfF\u003eY?030yooM1A-fkUAvwN/:?w]]Xoy*?yauOKG1ixEMGZx8aP0L]fB.t[#", "ln": 4313 }, { "b": "fkUAvwN/:?w]]Xoy*?yauOKF@gysf90M$YG+NsJ%0NpYC7\u0026A]bfkUAvwN/:?w]]Xoy*?yauOKG1g64vXBz\u003e91A+PA70rr/ZdnjF+C404uvqYZhq/)4]zF83r0hY!z3\u003c1-R=h^[MBz\u003c\u0026\u003eCv+!Zvrk#=0N?5H1-[)aA+2HSRubiQ0Odq60rrynz/fV9x(m$)02)sWygho]fkL6mxd(R=vrbpTADL\u0026gv}v.Js{LeZ0rrmfvr=t?0OWRP17uB=", "ln": 5033 }, { "b": "ygho]fkL6mxd)e9zF\u0026((y?kWSrTn:O0rr%OwPPLwx(mG(A:-N4e[nZaB8$Xzh8We@0DOq\u003e3\u003c4)Wd//RPw]zY+vqPMR03%3!ygho]fkL6mxd)h9A+PA7j1i\u003crvrM6jy*?i]fgfL:B8%zG0XBAM3#GM$xM4A*g=3%EfBv\u002640XT@-fAFAV010pHBwls*xM4z*0X%*k2lDZ\u003c0Yp3q0rr{NwPPOxx(mG(A:-N4fjO*bB8$XAgc2vn3VfD%xM4A*f/H{B0rs5!dnjR\u003cBt4GBzE)r#vp\u003cQmv@bN{B6*ZVi6dDFMi62O0YZry0rryrwPQpQvrlF\u003c023+foLO0Vvj#C9zF7Q\u0026y*?yai%(1f0Z3\u003e)jPW!F019vIBwls*xM4B50rsb*do/FXvrM6jy*?i]flgSoy?m9#fhl21xM4Ay2M^l(01iTPBzbP6uOKI{g715I0ZWp%lJLEk00^dFBwumYwEnBm0.0I0mGM6X00W1OBZY9c0rr\u0026.oLO0Vvj#C9zF7Q#vRPE:Bup{P3iuK@nELU)0z9p(5OCV%p*[xMzdN*2AZK+/zGDi=6-}5q0.\u0026W70rrTJwO#3\u0026", "ln": 5953 }, { "b": "wml-[xKM0df-.nbc}[w:C404uvqYZhq/)4]zF848zE)]yze0)0v@=0\u0026Bt4cuvrlG%gCHNBdolVPyxjzOtte^uC404uvqYZhA+e\u003c0wN/*no\u003ewAWz!7{g01-%Pzdm3:bXRamyE\u0026OUbRPl0hyImpwPPOxx(mG(A:-N4fjO*bB8$XAgCR3=zE)]yze0)0v@=0\u0026Bt4cuvrlG%ix5(Sj1jhh018UyB-H#6mRMWI0rrV%B-.K?y?Wx{wPxzrvrM5W01.Fnz/*5xA:-]YwPRQ7woep", "ln": 6843 } ], "depth": 1, "facts": { "imp": [ [ "", "net/minecraft/class_239" ], [ "", "net/minecraft/class_327" ], [ "", "net/fabricmc/fabric/api/client/rendering/v1/HudRenderCallback" ], [ "", "net/fabricmc/fabric/api/event/Event" ], [ "", "net/minecraft/class_304" ], [ "", "com/krypton/setting/d" ], [ "", "java/lang/Throwable" ], [ "", "net/minecraft/class_1792" ], [ "", "[Ljava/lang/reflect/Method;" ], [ "", "java/lang/Double" ], [ "", "com/krypton/module/Category" ], [ "", "java/lang/Boolean" ], [ "", "net/minecraft/class_315" ], [ "", "net/minecraft/class_1041" ], [ "", "java/lang/Object" ], [ "", "java/lang/reflect/Method" ], [ "", "net/minecraft/class_310" ], [ "", "java/lang/invoke/LambdaMetafactory" ], [ "", "net/minecraft/class_408" ], [ "", "net/minecraft/class_332" ], [ "", "java/lang/invoke/MethodHandles$Lookup" ], [ "", "java/lang/invoke/StringConcatFactory" ], [ "", "net/minecraft/class_239$class_240" ], [ "", "java/lang/Class" ], [ "", "java/lang/invoke/MethodHandles" ], [ "", "java/lang/String" ], [ "", "com/krypton/mixin/MinecraftClientAccessor" ], [ "", "java/io/PrintStream" ], [ "", "com/krypton/module/b" ], [ "", "net/minecraft/class_746" ], [ "", "net/minecraft/class_1799" ], [ "", "java/lang/reflect/Field" ], [ "", "java/lang/Long" ], [ "", "java/lang/Math" ], [ "", "net/minecraft/class_329" ], [ "", "java/util/ArrayDeque" ], [ "", "java/lang/Float" ], [ "", "net/minecraft/class_1743" ], [ "", "net/minecraft/class_1268" ], [ "", "java/lang/System" ], [ "java/lang/reflect/Method", "java/lang/reflect/Method.getParameterCount" ], [ "java/lang/reflect/Method", "getParameterCount" ], [ "w/AutoClicker", "w/AutoClicker.rightClick" ], [ "w/AutoClicker", "rightClick" ], [ "java/lang/Class", "java/lang/Class.getDeclaredField" ], [ "java/lang/Class", "getDeclaredField" ], [ "w/AutoClicker", "w/AutoClicker.performRightClick" ], [ "w/AutoClicker", "performRightClick" ], [ "w/AutoClicker", "w/AutoClicker.isLookingAtBlock" ], [ "w/AutoClicker", "isLookingAtBlock" ], [ "net/minecraft/class_329", "net/minecraft/class_329.method_1743" ], [ "net/minecraft/class_329", "method_1743" ], [ "w/AutoClicker", "w/AutoClicker.doAttackMethod" ], [ "w/AutoClicker", "doAttackMethod" ], [ "w/AutoClicker", "w/AutoClicker.doItemUseMethod" ], [ "w/AutoClicker", "doItemUseMethod" ], [ "java/lang/Double", "java/lang/Double.valueOf" ], [ "java/lang/Double", "valueOf" ], [ "w/AutoClicker", "w/AutoClicker.lastLeftMs" ], [ "w/AutoClicker", "lastLeftMs" ], [ "w/AutoClicker", "w/AutoClicker.boxY" ], [ "w/AutoClicker", "boxY" ], [ "w/AutoClicker", "w/AutoClicker.dragOffY" ], [ "w/AutoClicker", "dragOffY" ], [ "java/lang/Class", "java/lang/Class.getDeclaredMethod" ], [ "java/lang/Class", "getDeclaredMethod" ], [ "java/io/PrintStream", "java/io/PrintStream.println" ], [ "java/io/PrintStream", "println" ], [ "java/lang/Double", "java/lang/Double.doubleValue" ], [ "java/lang/Double", "doubleValue" ], [ "net/fabricmc/fabric/api/client/rendering/v1/HudRenderCallback", "net/fabricmc/fabric/api/client/rendering/v1/HudRenderCallback.EVENT" ], [ "net/fabricmc/fabric/api/client/rendering/v1/HudRenderCallback", "EVENT" ], [ "net/minecraft/class_1799", "net/minecraft/class_1799.method_7960" ], [ "net/minecraft/class_1799", "method_7960" ], [ "java/lang/Math", "java/lang/Math.max" ], [ "java/lang/Math", "max" ], [ "java/util/ArrayDeque", "java/util/ArrayDeque.isEmpty" ], [ "java/util/ArrayDeque", "isEmpty" ], [ "w/AutoClicker", "w/AutoClicker.weaponsOnly" ], [ "w/AutoClicker", "weaponsOnly" ], [ "w/AutoClicker", "w/AutoClicker.breakBlocks" ], [ "w/AutoClicker", "breakBlocks" ], [ "w/AutoClicker", "w/AutoClicker.holdingWeapon" ], [ "w/AutoClicker", "holdingWeapon" ], [ "net/minecraft/class_310", "net/minecraft/class_310.field_1755" ], [ "net/minecraft/class_310", "field_1755" ], [ "java/lang/reflect/Field", "java/lang/reflect/Field.setAccessible" ], [ "java/lang/reflect/Field", "setAccessible" ], [ "w/AutoClicker", "w/AutoClicker.lambda$hookHud$0" ], [ "w/AutoClicker", "lambda$hookHud$0" ], [ "w/AutoClicker", "w/AutoClicker.hookHud" ], [ "w/AutoClicker", "hookHud" ], [ "com/krypton/module/Category", "com/krypton/module/Category.c" ], [ "com/krypton/module/Category", "c" ], [ "java/util/ArrayDeque", "java/util/ArrayDeque.\u003cinit\u003e" ], [ "java/util/ArrayDeque", "\u003cinit\u003e" ], [ "w/AutoClicker", "w/AutoClicker.renderHud" ], [ "w/AutoClicker", "renderHud" ], [ "java/lang/System", "java/lang/System.currentTimeMillis" ], [ "java/lang/System", "currentTimeMillis" ], [ "net/minecraft/class_315", "net/minecraft/class_315.field_1886" ], [ "net/minecraft/class_315", "field_1886" ], [ "java/lang/String", "java/lang/String.contains" ], [ "java/lang/String", "contains" ], [ "w/AutoClicker", "w/AutoClicker.a" ], [ "w/AutoClicker", "a" ], [ "net/minecraft/class_746", "net/minecraft/class_746.method_6104" ], [ "net/minecraft/class_746", "method_6104" ], [ "java/lang/invoke/LambdaMetafactory", "java/lang/invoke/LambdaMetafactory.metafactory" ], [ "java/lang/invoke/LambdaMetafactory", "metafactory" ], [ "com/krypton/mixin/MinecraftClientAccessor", "com/krypton/mixin/MinecraftClientAccessor.krypton$setAttackCooldown" ], [ "com/krypton/mixin/MinecraftClientAccessor", "krypton$setAttackCooldown" ], [ "java/lang/Math", "java/lang/Math.max" ], [ "java/lang/Math", "max" ], [ "com/krypton/setting/d", "com/krypton/setting/d.setValue" ], [ "com/krypton/setting/d", "setValue" ], [ "w/AutoClicker", "w/AutoClicker.pruneClicks" ], [ "w/AutoClicker", "pruneClicks" ], [ "java/util/ArrayDeque", "java/util/ArrayDeque.addLast" ], [ "java/util/ArrayDeque", "addLast" ], [ "java/lang/System", "java/lang/System.err" ], [ "java/lang/System", "err" ], [ "net/minecraft/class_310", "net/minecraft/class_310.field_1687" ], [ "net/minecraft/class_310", "field_1687" ], [ "java/lang/Boolean", "java/lang/Boolean.booleanValue" ], [ "java/lang/Boolean", "booleanValue" ], [ "java/lang/reflect/Field", "java/lang/reflect/Field.setInt" ], [ "java/lang/reflect/Field", "setInt" ], [ "net/minecraft/class_332", "net/minecraft/class_332.method_25294" ], [ "net/minecraft/class_332", "method_25294" ], [ "w/AutoClicker", "w/AutoClicker.clearAttackCooldown" ], [ "w/AutoClicker", "clearAttackCooldown" ], [ "w/AutoClicker", "w/AutoClicker.resolveDoAttack" ], [ "w/AutoClicker", "resolveDoAttack" ], [ "net/minecraft/class_315", "net/minecraft/class_315.field_1904" ], [ "net/minecraft/class_315", "field_1904" ], [ "java/lang/reflect/Method", "java/lang/reflect/Method.setAccessible" ], [ "java/lang/reflect/Method", "setAccessible" ], [ "w/AutoClicker", "w/AutoClicker.cps" ], [ "w/AutoClicker", "cps" ], [ "net/minecraft/class_332", "net/minecraft/class_332.method_51433" ], [ "net/minecraft/class_332", "method_51433" ], [ "w/AutoClicker", "w/AutoClicker.resolveDoItemUse" ], [ "w/AutoClicker", "resolveDoItemUse" ], [ "java/lang/Float", "java/lang/Float.valueOf" ], [ "java/lang/Float", "valueOf" ], [ "net/minecraft/class_239$class_240", "net/minecraft/class_239$class_240.field_1332" ], [ "net/minecraft/class_239$class_240", "field_1332" ], [ "w/AutoClicker", "w/AutoClicker.boxX" ], [ "w/AutoClicker", "boxX" ], [ "net/minecraft/class_1792", "net/minecraft/class_1792.toString" ], [ "net/minecraft/class_1792", "toString" ], [ "java/util/ArrayDeque", "java/util/ArrayDeque.peekFirst" ], [ "java/util/ArrayDeque", "peekFirst" ], [ "java/util/ArrayDeque", "java/util/ArrayDeque.clear" ], [ "java/util/ArrayDeque", "clear" ], [ "w/AutoClicker", "w/AutoClicker.a" ], [ "w/AutoClicker", "a" ], [ "net/minecraft/class_310", "net/minecraft/class_310.method_22683" ], [ "net/minecraft/class_310", "method_22683" ], [ "java/lang/Object", "java/lang/Object.getClass" ], [ "java/lang/Object", "getClass" ], [ "w/AutoClicker", "w/AutoClicker.renderIfEnabled" ], [ "w/AutoClicker", "renderIfEnabled" ], [ "java/lang/Math", "java/lang/Math.round" ], [ "java/lang/Math", "round" ], [ "com/krypton/module/b", "com/krypton/module/b.\u003cinit\u003e" ], [ "com/krypton/module/b", "\u003cinit\u003e" ], [ "java/lang/invoke/StringConcatFactory", "java/lang/invoke/StringConcatFactory.makeConcatWithConstants" ], [ "java/lang/invoke/StringConcatFactory", "makeConcatWithConstants" ], [ "w/AutoClicker", "w/AutoClicker.handleMouseClick" ], [ "w/AutoClicker", "handleMouseClick" ], [ "w/AutoClicker", "w/AutoClicker.hudHooked" ], [ "w/AutoClicker", "hudHooked" ], [ "java/lang/Boolean", "java/lang/Boolean.valueOf" ], [ "java/lang/Boolean", "valueOf" ], [ "java/lang/Math", "java/lang/Math.max" ], [ "java/lang/Math", "max" ], [ "w/AutoClicker", "w/AutoClicker.lastBoxH" ], [ "w/AutoClicker", "lastBoxH" ], [ "w/AutoClicker", "w/AutoClicker.dragOffX" ], [ "w/AutoClicker", "dragOffX" ], [ "java/lang/Double", "java/lang/Double.intValue" ], [ "java/lang/Double", "intValue" ], [ "net/minecraft/class_1799", "net/minecraft/class_1799.method_7909" ], [ "net/minecraft/class_1799", "method_7909" ], [ "java/lang/Float", "java/lang/Float.floatValue" ], [ "java/lang/Float", "floatValue" ], [ "w/AutoClicker", "w/AutoClicker.holdMode" ], [ "w/AutoClicker", "holdMode" ], [ "w/AutoClicker", "w/AutoClicker.dragging" ], [ "w/AutoClicker", "dragging" ], [ "net/minecraft/class_310", "net/minecraft/class_310.field_1724" ], [ "net/minecraft/class_310", "field_1724" ], [ "java/lang/Class", "java/lang/Class.getMethod" ], [ "java/lang/Class", "getMethod" ], [ "w/AutoClicker", "w/AutoClicker.leftClick" ], [ "w/AutoClicker", "leftClick" ], [ "net/minecraft/class_304", "net/minecraft/class_304.method_1434" ], [ "net/minecraft/class_304", "method_1434" ], [ "net/minecraft/class_310", "net/minecraft/class_310.field_1772" ], [ "net/minecraft/class_310", "field_1772" ], [ "net/minecraft/class_310", "net/minecraft/class_310.method_1551" ], [ "net/minecraft/class_310", "method_1551" ], [ "java/lang/reflect/Method", "java/lang/reflect/Method.invoke" ], [ "java/lang/reflect/Method", "invoke" ], [ "com/krypton/setting/d", "com/krypton/setting/d.\u003cinit\u003e" ], [ "com/krypton/setting/d", "\u003cinit\u003e" ], [ "java/lang/Math", "java/lang/Math.round" ], [ "java/lang/Math", "round" ], [ "w/AutoClicker", "w/AutoClicker.noHitDelay" ], [ "w/AutoClicker", "noHitDelay" ], [ "w/AutoClicker", "w/AutoClicker.hudY" ], [ "w/AutoClicker", "hudY" ], [ "net/minecraft/class_310", "net/minecraft/class_310.field_1765" ], [ "net/minecraft/class_310", "field_1765" ], [ "net/minecraft/class_310", "net/minecraft/class_310.field_1705" ], [ "net/minecraft/class_310", "field_1705" ], [ "w/AutoClicker", "w/AutoClicker.handleMouseDrag" ], [ "w/AutoClicker", "handleMouseDrag" ], [ "net/minecraft/class_310", "net/minecraft/class_310.execute" ], [ "net/minecraft/class_310", "execute" ], [ "w/AutoClicker", "w/AutoClicker.isEnabled" ], [ "w/AutoClicker", "isEnabled" ], [ "w/AutoClicker", "w/AutoClicker.chatOpen" ], [ "w/AutoClicker", "chatOpen" ], [ "java/util/ArrayDeque", "java/util/ArrayDeque.removeFirst" ], [ "java/util/ArrayDeque", "removeFirst" ], [ "net/minecraft/class_1041", "net/minecraft/class_1041.method_4486" ], [ "net/minecraft/class_1041", "method_4486" ], [ "net/minecraft/class_1041", "net/minecraft/class_1041.method_4502" ], [ "net/minecraft/class_1041", "method_4502" ], [ "w/AutoClicker", "w/AutoClicker.getMeasuredCps" ], [ "w/AutoClicker", "getMeasuredCps" ], [ "w/AutoClicker", "w/AutoClicker.performLeftClick" ], [ "w/AutoClicker", "performLeftClick" ], [ "java/lang/String", "java/lang/String.toLowerCase" ], [ "java/lang/String", "toLowerCase" ], [ "net/minecraft/class_310", "net/minecraft/class_310.field_1690" ], [ "net/minecraft/class_310", "field_1690" ], [ "java/lang/Long", "java/lang/Long.valueOf" ], [ "java/lang/Long", "valueOf" ], [ "w/AutoClicker", "w/AutoClicker.instance" ], [ "w/AutoClicker", "instance" ], [ "java/lang/String", "java/lang/String.valueOf" ], [ "java/lang/String", "valueOf" ], [ "net/minecraft/class_239", "net/minecraft/class_239.method_17783" ], [ "net/minecraft/class_239", "method_17783" ], [ "com/krypton/mixin/MinecraftClientAccessor", "com/krypton/mixin/MinecraftClientAccessor.krypton$setItemUseCooldown" ], [ "com/krypton/mixin/MinecraftClientAccessor", "krypton$setItemUseCooldown" ], [ "w/AutoClicker", "w/AutoClicker.lambda$chat$1" ], [ "w/AutoClicker", "lambda$chat$1" ], [ "w/AutoClicker", "w/AutoClicker.lastRightMs" ], [ "w/AutoClicker", "lastRightMs" ], [ "java/lang/Class", "java/lang/Class.forName" ], [ "java/lang/Class", "forName" ], [ "com/krypton/setting/d", "com/krypton/setting/d.getValue" ], [ "com/krypton/setting/d", "getValue" ], [ "net/minecraft/class_327", "net/minecraft/class_327.method_1727" ], [ "net/minecraft/class_327", "method_1727" ], [ "w/AutoClicker", "w/AutoClicker.chat" ], [ "w/AutoClicker", "chat" ], [ "net/minecraft/class_1268", "net/minecraft/class_1268.field_5808" ], [ "net/minecraft/class_1268", "field_5808" ], [ "com/krypton/setting/d", "com/krypton/setting/d.\u003cinit\u003e" ], [ "com/krypton/setting/d", "\u003cinit\u003e" ], [ "java/lang/String", "java/lang/String.equals" ], [ "java/lang/String", "equals" ], [ "w/AutoClicker", "w/AutoClicker.hudX" ], [ "w/AutoClicker", "hudX" ], [ "w/AutoClicker", "w/AutoClicker.recentClicks" ], [ "w/AutoClicker", "recentClicks" ], [ "java/lang/Boolean", "java/lang/Boolean.FALSE" ], [ "java/lang/Boolean", "FALSE" ], [ "java/lang/Class", "java/lang/Class.getMethods" ], [ "java/lang/Class", "getMethods" ], [ "w/AutoClicker", "w/AutoClicker.lastBoxW" ], [ "w/AutoClicker", "lastBoxW" ], [ "net/fabricmc/fabric/api/event/Event", "net/fabricmc/fabric/api/event/Event.register" ], [ "net/fabricmc/fabric/api/event/Event", "register" ], [ "java/util/ArrayDeque", "java/util/ArrayDeque.size" ], [ "java/util/ArrayDeque", "size" ], [ "java/lang/Long", "java/lang/Long.longValue" ], [ "java/lang/Long", "longValue" ], [ "java/lang/reflect/Method", "java/lang/reflect/Method.getName" ], [ "java/lang/reflect/Method", "getName" ], [ "java/lang/Math", "java/lang/Math.min" ], [ "java/lang/Math", "min" ], [ "net/minecraft/class_746", "net/minecraft/class_746.method_6047" ], [ "net/minecraft/class_746", "method_6047" ] ], "metrics": { "file": { "size": 13637, "entropy": 6.09 }, "class": { "major_version": 65, "interface_count": 0, "method_ref_count": 125, "constant_pool_size": 667, "external_class_count": 40 }, "binary": { "peak_region_bytes": 9216, "peak_region_entropy": 5.81 }, "imports": { "count": 165 }, "functions": { "count": 29 } } }, "id": 217, "mol": "K(Ga)O(As)H(Db₂)", "path": "krypton-1.21.11.jar!!w/AutoClicker.class", "pid": 0, "risk": 39, "sha": "069a62a5b4f41ec020683423fa7e2f3b44ad8b0bfc6a0b41d1345946c5cfe961", "size": 13637, "traits": [ { "id": "micro-behaviors/data/source/dynamic/reflect::java-class-forname-bytecode", "conf": 1.0, "crit": 3, "desc": "JVM Class.forName invocation", "spans": [ [ 6017, 23 ] ] }, { "id": "micro-behaviors/data/source/dynamic/reflect::java-class-getmethod-bytecode", "conf": 1.0, "crit": 3, "desc": "JVM reflective method lookup", "spans": [ [ 6095, 25 ] ] }, { "id": "micro-behaviors/data/source/dynamic/reflect::java-method-invoke-bytecode", "conf": 1.0, "crit": 3, "desc": "JVM reflective method invocation", "spans": [ [ 4470, 31 ] ] }, { "id": "micro-behaviors/data/string/conversion::tostring-token", "conf": 1.0, "crit": 3, "desc": "References the toString conversion method", "spans": [ [ 5097, 8 ] ] }, { "id": "objectives/anti-static/obfuscation/reflection/class::dalvik-get-declared-field", "atk": "T1406", "mbc": "F0006", "conf": 1.0, "crit": 3, "desc": "Dalvik getDeclaredField reflection", "spans": [ [ 3946, 16 ] ] }, { "id": "objectives/anti-static/obfuscation/reflection/class::dalvik-get-declared-method", "atk": "T1406", "mbc": "F0006", "conf": 1.0, "crit": 3, "desc": "Dalvik getDeclaredMethod reflection", "spans": [ [ 4716, 17 ] ] }, { "id": "objectives/anti-static/obfuscation/reflection/class::dalvik-reflect-field", "atk": "T1406", "mbc": "F0006", "conf": 1.0, "crit": 3, "desc": "Dalvik reflect/Field type descriptor", "spans": [ [ 3965, 45 ] ] }, { "id": "objectives/anti-static/obfuscation/reflection/class::dalvik-reflect-method", "atk": "T1406", "mbc": "F0006", "conf": 1.0, "crit": 3, "desc": "Dalvik reflect/Method type descriptor", "spans": [ [ 4377, 28 ], [ 4660, 26 ], [ 4736, 64 ], [ 6256, 29 ], [ 6907, 27 ] ] }, { "id": "well-known/game/mod::minecraft-client-class-ref", "conf": 0.9, "crit": 3, "desc": "Minecraft client singleton class reference", "spans": [ [ 2292, 23 ] ] }, { "id": "objectives/anti-static/obfuscation/reflection/class::dalvik-set-accessible", "atk": "T1406", "mbc": "F0006", "conf": 0.9, "crit": 4, "desc": "Dalvik setAccessible access bypass", "spans": [ [ 4052, 13 ] ] }, { "id": "micro-behaviors/data/source/dynamic/reflect::java-bytecode-reflective-method-invoke", "conf": 0.94, "crit": 3, "desc": "JVM resolves and invokes method reflectively", "uses": [ 0, 1, 2 ], "spans": [ [ 4470, 31 ], [ 6017, 23 ], [ 6095, 25 ] ] } ], "type": "java_class" }, { "id": 218, "mol": "O(C)", "sha": "a2c79aa02e50f1a90caef8b37ac4b2c5e01ded619a284db591187d62c96694bf", "path": "krypton-1.21.11.jar!!com/krypton/module/ModuleIcons.class", "risk": 2, "size": 4727, "type": "java_class", "depth": 1 }, { "id": 220, "mol": "K(Ga)O(As)H(Db)", "sha": "3ff6da31774b72ed14f2cacad4bd7e00d892a40d5b40558fd55e1100ffeb0fd3", "path": "krypton-1.21.11.jar!!w/ItemGlow.class", "risk": 3, "size": 5433, "type": "java_class", "depth": 1 }, { "id": 222, "mol": "O(Al)H₄(CmDbFTi)", "sha": "24f1d65adcddb6ab51edb4e1ee620ab0a5bc3c100474ab740e96ea13c1beb667", "path": "krypton-1.21.11.jar!!w/DiscordIpc.class", "risk": 6, "size": 7168, "type": "java_class", "depth": 1 }, { "id": 223, "mol": "K(Ga)O(As)H₂(DbF₂)", "sha": "786218aebe37d7b505ac6e8bb61a400dd2b5ee5c1fb95d16d4918af78e59a2d8", "path": "krypton-1.21.11.jar!!w/DiscordPresence.class", "risk": 5, "size": 7002, "type": "java_class", "depth": 1 }, { "id": 224, "mol": "K(Ga)O₃(AlAsCa)H₄(Cm₄Db₃F₂Ti)Md", "sha": "905bcc78de14cf2f85c522992c9b04f1f8cf95d512c6145af236810e817c24c8", "path": "krypton-1.21.11.jar!!w/ConnectNotify.class", "risk": 12, "size": 15483, "type": "java_class", "depth": 1 }, { "id": 227, "mol": "O(As)", "sha": "200ab93ce80d7fd8e8297f8f3a88c98248e6156893e01261b4236eb399727106", "path": "krypton-1.21.11.jar!!w/ExtraFeatures.class", "risk": 36, "size": 3857, "type": "java_class", "depth": 1 }, { "id": 228, "mol": "O(As)H₂(DbF₂)", "sha": "d7afadf6cec4d19689692702561e87c98434b84ef9322ebadb3de199100c0c09", "path": "krypton-1.21.11.jar!!SidebarMoney.class", "risk": 39, "size": 12433, "type": "java_class", "depth": 1 } ], "omitted_files": 129, "rev": "e86a6", "v": "8" } }