{ "llm": { "conf": 0.9895629, "grade": "hostile", "model": "Qwen/Qwen3.8-27B", "before": { "lvl": 1, "prob": 0.98442227, "class": "hostile" }, "outcome": "hostile", "interpretation": "Minecraft credential theft and C2" }, "ml": { "v": "7", "eng": "2.12.0-beta.1", "lvl": 0, "conf": 100, "mods": [ { "cls": 2, "raw": 0.98442227, "rte": "az", "prob": 0.98442227 }, { "cls": 0, "raw": 0.9949823, "rte": "az/jar", "prob": 0.9949823 } ], "prob": 0.98442227, "files": [ { "id": 0, "lvl": 0, "conf": 100, "prob": 0.9844222664833069, "type": "jar" }, { "id": 1, "lvl": -1, "conf": 0, "prob": 0.000026623407393344678, "type": "java_class" }, { "id": 3, "lvl": -1, "conf": 0, "prob": 0.000012646119103010278, "type": "java_class" }, { "id": 4, "lvl": -1, "conf": 0, "prob": 0.000014851490959699731, "type": "java_class" }, { "id": 5, "lvl": -1, "conf": 0, "prob": 0.0000241696834564209, "type": "java_class" }, { "id": 6, "lvl": -1, "conf": 0, "prob": 0.000986297964118421, "type": "java_class" }, { "id": 7, "lvl": -1, "conf": 0, "prob": 0.000023543834686279297, "type": "java_class" }, { "id": 9, "lvl": -1, "conf": 0, "prob": 0.000011434157386247534, "type": "json" } ], "version": "v18.18", "analyzed_at": "2026-09-26T20:34:31Z" }, "path": "dsmp_dupe_1.21.11.jar", "raw": { "files": [ { "id": 0, "ctx": [ { "b": "p!H([6AwyA2MLGfi:zZ=0000000000000\u0026o003IEz7/KoBzb/afjwQkn?:s=e[nZaB92NrCBfSbBTHt@]SQ5ko!aIMwM^aZ7hl{C0XESx\u003cRo^HlK}jD5Ax}LO/b:C=VCP=LH!CR2d/{:1kNUKOo5O3zZB6z\u003e1qH5/:o0U3AbBN*\u003cO[I?Ng%:W%y1x7nW}r?$#Eban(kHptHo+X-YNQjlJh[[bb?5071$qq:RyF\u003eC^NZji(cPPw8tJ:k3G!2s5gV:$%ms^a=))u7exnvq+t@9GM^OUq\u0026{N4m$0(hV", "ln": 0 } ], "mol": "K₂(McGa)O₆(CaEuAlAs₃ErI)H₆(Cm₅Db₅F₃Os₂Po₅Ti)Md₂(Pa)", "sha": "51f0937c78773e809e6c026cec5e3a38bbc80dca7855129dfa6c68387783c39e", "path": "dsmp_dupe_1.21.11.jar", "risk": 300, "size": 1713656, "type": "jar", "facts": { "metrics": { "jar": { "class_count": 7, "entry_count": 12, "index_count": 0, "service_count": 0, "signature_count": 0, "native_lib_count": 0, "embedded_jar_count": 0, "manifest.entry_count": 0, "manifest.digest_count": 0, "signature_block_count": 0, "versioned_class_count": 0, "manifest.section_count": 0, "manifest.attribute_count": 13, "manifest.class_path_count": 0, "manifest.boot_class_path_count": 0 }, "file": { "size": 1713656, "entropy": 8 }, "binary": { "peak_region_bytes": 1712128, "peak_region_entropy": 7.86 }, "archive": { "file_count": 12, "member_count": 12, "script_count": 0, "zip_bomb_ratio": 3.83, "compressed_size": 1711882, "directory_count": 0, "executable_count": 0, "extra_field_size": 0, "noise_file_count": 0, "compression.ratio": 0.92, "hidden_file_count": 0, "uncompressed_size": 1869890, "crc_collision_count": 0, "entry_comment_count": 0, "max_filename_length": 50, "rtlo_filename_count": 0, "format.regular_count": 12, "nested_archive_count": 0, "path_traversal_count": 0, "symlink_escape_count": 0, "security.setgid_count": 0, "security.setuid_count": 0, "security.sticky_count": 0, "double_extension_count": 0, "duplicate_member_count": 0, "security.symlink_count": 0, "unicode_filename_count": 0, "homoglyph_filename_count": 0, "security.encrypted_count": 0, "timing.mtime_unique_count": 1, "timing.mtime_unique_ratio": 0.08, "misplaced_executable_count": 0, "timing.mtime_dominant_count": 12, "timing.mtime_spread_seconds": 0, "timing.sentinel_mtime_count": 0, "security.world_writable_count": 0, "timing.mtime_dominant_fraction": 1, "compression.method_counts.deflate": 12 } } }, "traits": [ { "id": "micro-behaviors/process/info/current::getpath-ref", "conf": 0.8, "crit": 3, "desc": "Java getPath call reference" }, { "id": "micro-behaviors/communications/http/lib/urlconnection::jvm-url-class-ref", "atk": "T1071.001", "mbc": "C0002", "conf": 0.9, "crit": 3, "desc": "JVM URL class reference" }, { "id": "micro-behaviors/data/archive/extract/zip::jvm-zip-entry-read-bytecode", "conf": 0.9, "crit": 3, "desc": "JVM reads ZIP archive entry data", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/fs/write/file/handle::jvm-fileoutputstream-bytecode", "conf": 0.86, "crit": 3, "desc": "JVM imports FileOutputStream class", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/process/info/current::codesource-class", "conf": 0.85, "crit": 3, "desc": "Java CodeSource class reference" }, { "id": "micro-behaviors/data/archive/extract/zip::jvm-zip-entry-extraction-to-file", "conf": 0.96, "crit": 3, "desc": "JVM extracts ZIP entries to files", "from": [ { "off": 12902, "file": 1 } ], "uses": [ 2, 3, 42 ] }, { "id": "micro-behaviors/data/decode/base64::java-base64-decoding-bytecode", "conf": 0.94, "crit": 3, "desc": "Java bytecode Base64 decoding", "from": [ { "off": 19259, "file": 1 } ], "uses": [ 7, 70 ] }, { "id": "micro-behaviors/data/decode/base64::java-base64-decode-bytecode-call", "conf": 0.96, "crit": 3, "desc": "Java Base64 decode call", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/communications/socket/ssl::jvm-sslcontext-trustmanager-init-call", "conf": 0.94, "crit": 3, "desc": "JVM SSLContext.init trust-manager call", "from": [ { "file": 5 } ] }, { "id": "objectives/anti-static/obfuscation/reflection/class::java-protectiondomain", "conf": 1.0, "crit": 3, "desc": "Java ProtectionDomain", "from": [ { "file": 6 } ] }, { "id": "micro-behaviors/os/sysinfo/hostname::jvm-hostname-command-literal", "atk": "T1082", "mbc": "E1082", "conf": 0.9, "crit": 3, "desc": "JVM hostname command literal" }, { "id": "micro-behaviors/fs/read/file/handle::jvm-io-file-class-ref", "conf": 0.86, "crit": 3, "desc": "JVM File API class reference" }, { "id": "micro-behaviors/communications/socket/create::jvm-socket-class-ref", "atk": "T1071", "mbc": "C0001", "conf": 0.9, "crit": 3, "desc": "JVM socket class reference" }, { "id": "micro-behaviors/process/info/current::protection-domain-class", "conf": 0.85, "crit": 3, "desc": "Java ProtectionDomain class reference" }, { "id": "micro-behaviors/fs/read/file/handle::jvm-nio-file-class-ref", "conf": 0.86, "crit": 3, "desc": "JVM NIO file API reference" }, { "id": "micro-behaviors/communications/socket/create::java-socket-bytecode-reference", "atk": "T1071", "mbc": "C0001", "conf": 0.86, "crit": 3, "desc": "Java bytecode socket reference", "from": [ { "file": 5 } ] }, { "id": "micro-behaviors/communications/socket/ssl::jvm-custom-x509trustmanager", "conf": 0.95, "crit": 3, "desc": "Class implements a custom X509 trust manager", "from": [ { "file": 4 } ], "uses": [ 29, 31, 76 ] }, { "id": "objectives/credential-access/gaming/minecraft::minecraft-session-token-access", "atk": "T1528", "mbc": "B0006", "conf": 0.96, "crit": 4, "desc": "Minecraft session token and UUID access", "from": [ { "off": 2068, "file": 6 } ], "uses": [ 32, 65, 66 ] }, { "id": "micro-behaviors/data/encode/base64::jvm-base64-encode-bytecode", "conf": 0.94, "crit": 3, "desc": "JVM Base64 encodeToString call", "from": [ { "file": 5 } ] }, { "id": "micro-behaviors/os/env/gate::jvm-opaque-secret-environment-gate", "conf": 0.97, "crit": 3, "desc": "JVM compares opaque environment gate", "from": [ { "off": 14487, "file": 1 }, { "file": 3 }, { "file": 4 }, { "off": 1984, "file": 7 } ], "uses": [ 39, 43, 51 ] }, { "id": "micro-behaviors/process/info/current::touri-ref", "conf": 0.82, "crit": 3, "desc": "Java toURI call reference" }, { "id": "micro-behaviors/communications/socket/create::java-socket-slash-reference", "atk": "T1071", "mbc": "C0001", "conf": 0.9, "crit": 3, "desc": "Java slash-form socket reference", "from": [ { "file": 5 } ] }, { "id": "micro-behaviors/communications/socket/framing::data-stream-transport", "atk": "T1573", "conf": 1.0, "crit": 3, "desc": "Java data-stream transport type", "from": [ { "file": 5 } ] }, { "id": "objectives/credential-access/gaming/minecraft::minecraft-token-child-process-stage", "atk": "T1528, T1059", "mbc": "B0006", "conf": 0.99, "crit": 5, "desc": "Minecraft token access alongside redirected child launch", "from": [ { "off": 699, "file": 1 }, { "off": 10360, "file": 5 }, { "off": 1931, "file": 6 }, { "off": 4003, "file": 7 } ], "uses": [ 17, 18, 33, 60 ] }, { "id": "micro-behaviors/communications/socket/send::java-raw-socket-client-write", "atk": "T1071", "mbc": "C0001", "conf": 0.94, "crit": 3, "desc": "Java socket client writes request bytes through DataOutputStream", "from": [ { "off": 3328, "file": 5 } ], "uses": [ 48, 56, 69 ] }, { "id": "metadata/package/config::fabric-mod-metadata", "conf": 0.9, "crit": 3, "desc": "Fabric mod metadata resource", "from": [ { "file": 9 } ] }, { "id": "objectives/anti-static/obfuscation/string/crypto::java-byte-range-copy", "atk": "T1027", "mbc": "F0001", "conf": 0.7, "crit": 3, "desc": "Java byte range copy", "from": [ { "file": 1 } ] }, { "id": "objectives/impact/dos/disk::jvm-two-backward-goto-branches", "atk": "T1499.001", "conf": 0.9, "crit": 3, "desc": "JVM repeated counter backedges", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/communications/socket/ssl::jvm-trustmanager-class-ref", "conf": 0.9, "crit": 3, "desc": "JVM TrustManager interface reference", "from": [ { "file": 5 } ] }, { "id": "micro-behaviors/communications/socket/ssl::jvm-x509trustmanager-server-callback", "conf": 0.94, "crit": 3, "desc": "JVM checkServerTrusted callback defined" }, { "id": "micro-behaviors/process/create/spawn::child-process-creation-api", "atk": "T1106", "conf": 0.92, "crit": 3, "desc": "Starts a child process through a platform API", "from": [ { "off": 699, "file": 1 }, { "file": 6 }, { "off": 290, "file": 7 } ], "uses": [ 60 ] }, { "id": "micro-behaviors/communications/socket/ssl::jvm-x509trustmanager-issuer-callback", "conf": 0.94, "crit": 3, "desc": "JVM getAcceptedIssuers callback defined" }, { "id": "well-known/game/mod::minecraft-session-access", "conf": 0.91, "crit": 3, "desc": "Minecraft session profile access", "from": [ { "file": 6 } ], "uses": [ 46, 53, 64 ] }, { "id": "micro-behaviors/process/io/stream::java-processbuilder-redirected-stdio", "conf": 0.96, "crit": 3, "desc": "Java ProcessBuilder redirects all standard streams", "from": [ { "off": 15337, "file": 1 }, { "off": 5845, "file": 6 }, { "off": 2926, "file": 7 } ], "uses": [ 59, 61, 71 ] }, { "id": "micro-behaviors/communications/http/lib/urlconnection::java-url-class-bytecode", "atk": "T1071.001", "mbc": "C0002", "conf": 0.86, "crit": 3, "desc": "Java URL class reference", "from": [ { "file": 5 } ] }, { "id": "micro-behaviors/data/decode/base64::java-base64-decoder-class", "conf": 0.92, "crit": 3, "desc": "JVM Base64 decoder class reference", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/process/create/spawn::java-runtime-class", "atk": "T1059", "mbc": "E1203", "conf": 0.86, "crit": 3, "desc": "Java Runtime class reference", "from": [ { "file": 5 } ] }, { "id": "micro-behaviors/communications/proxy/tunnel::inet-socket-address", "atk": "T1090", "mbc": "C0003", "conf": 0.6, "crit": 3, "desc": "Java InetSocketAddress reference", "from": [ { "file": 5 } ] }, { "id": "objectives/anti-static/obfuscation/string/control-prefix::java-control-prefixed-long-string", "atk": "T1027", "mbc": "F0001", "conf": 0.92, "crit": 3, "desc": "Java string starts with control-length prefix" }, { "id": "micro-behaviors/os/env/gate::jvm-opaque-environment-key", "conf": 0.94, "crit": 1, "desc": "JVM class has generated gate value" }, { "id": "micro-behaviors/communications/socket/ssl::jvm-sslsocket-handshake-call", "conf": 0.94, "crit": 3, "desc": "JVM SSLSocket.startHandshake call", "from": [ { "file": 5 } ] }, { "id": "micro-behaviors/process/create/spawn::java-processbuilder-start-bytecode-symbol", "atk": "T1059", "mbc": "E1203", "conf": 0.95, "crit": 3, "desc": "Java bytecode ProcessBuilder start", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/data/archive/extract/zip::jvm-zip-entry-iteration-bytecode", "conf": 0.92, "crit": 3, "desc": "JVM iterates ZIP archive entries", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/os/env/gate::jvm-system-getenv-import", "conf": 0.94, "crit": 1, "desc": "JVM class imports System getenv", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/communications/socket/framing::bytebuffer-transport", "atk": "T1573", "conf": 1.0, "crit": 3, "desc": "Java byte-buffer transport type", "from": [ { "file": 5 } ] }, { "id": "micro-behaviors/communications/socket/ssl::jvm-sslparameters-set-server-names", "conf": 0.93, "crit": 3, "desc": "JVM sets TLS SNI server name", "from": [ { "file": 5 } ] }, { "id": "well-known/game/mod::minecraft-client-class-ref", "conf": 0.9, "crit": 3, "desc": "Minecraft client singleton class reference", "from": [ { "file": 6 } ] }, { "id": "objectives/impact/dos/disk::jvm-megabyte-byte-array-constant", "atk": "T1499.001", "conf": 0.94, "crit": 3, "desc": "JVM one-megabyte allocation constant", "from": [ { "file": 5 } ] }, { "id": "micro-behaviors/communications/socket/create::java-socket-class-import", "atk": "T1071", "mbc": "C0001", "conf": 0.9, "crit": 3, "desc": "Java imports the network socket class", "from": [ { "file": 5 } ] }, { "id": "micro-behaviors/process/create/spawn::java-processbuilder-init-bytecode-symbol", "atk": "T1059", "mbc": "E1203", "conf": 0.92, "crit": 3, "desc": "Java bytecode ProcessBuilder constructor", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/process/info/selfpath::java-protection-domain", "conf": 0.82, "crit": 3, "desc": "Java getProtectionDomain self-path lookup" }, { "id": "micro-behaviors/os/env/gate::jvm-string-equals-import", "conf": 0.94, "crit": 1, "desc": "JVM class imports String equals", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/data/string/conversion::tostring-token", "conf": 1.0, "crit": 3, "desc": "References the toString conversion method", "from": [ { "file": 1 } ] }, { "id": "well-known/game/mod::minecraft-session-ref", "conf": 0.9, "crit": 3, "desc": "Minecraft session object reference", "from": [ { "file": 6 } ] }, { "id": "objectives/anti-static/obfuscation/string/control-prefix::java-character-digit-bytecode", "atk": "T1027", "mbc": "F0001", "conf": 0.9, "crit": 3, "desc": "Java bytecode calls Character.digit", "from": [ { "file": 1 } ] }, { "id": "well-known/malware/stealer/prefire-shard::prefire-family-literal", "atk": "T1528", "mbc": "B0006", "conf": 0.9, "crit": 1, "desc": "Prefire family name literal", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/data/buffer/transfer::jvm-outputstream-write", "conf": 0.96, "crit": 2, "desc": "JVM writes bytes to output stream", "from": [ { "file": 5 } ] }, { "id": "objectives/anti-analysis/timing/evasion::kotlin-thread-sleep-check", "atk": "T1497.003", "conf": 0.94, "crit": 3, "desc": "Kotlin Thread.sleep call", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/data/buffer/transfer::bytearrayinputstream-ref", "conf": 0.88, "crit": 3, "desc": "Java ByteArrayInputStream class" }, { "id": "micro-behaviors/process/io/stream::java-processbuilder-redirect-errors", "conf": 0.92, "crit": 3, "desc": "Java ProcessBuilder merges standard error", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/process/create/spawn::java-processbuilder-start-bytecode", "atk": "T1059", "mbc": "E1203", "conf": 0.94, "crit": 3, "desc": "Java bytecode ProcessBuilder execution", "from": [ { "off": 15401, "file": 1 }, { "off": 885, "file": 6 }, { "off": 3057, "file": 7 } ], "uses": [ 41, 49 ] }, { "id": "micro-behaviors/process/io/stream::java-processbuilder-redirect-output", "conf": 0.92, "crit": 3, "desc": "Java ProcessBuilder redirects standard output", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/process/thread/lifecycle::jvm-thread-start-bytecode", "conf": 0.94, "crit": 3, "desc": "JVM starts a thread", "from": [ { "file": 6 } ] }, { "id": "objectives/evasion/self-delete/file/script::java-code-source-location", "atk": "T1070.004", "mbc": "F0007", "conf": 0.78, "crit": 3, "desc": "Java code source location", "from": [ { "file": 6 } ] }, { "id": "well-known/game/mod::minecraft-name-getter-ref", "conf": 0.9, "crit": 3, "desc": "Minecraft profile name getter reference", "from": [ { "file": 6 } ] }, { "id": "objectives/credential-access/gaming/minecraft::minecraft-token-getter-ref", "atk": "T1528", "mbc": "B0006", "conf": 0.92, "crit": 3, "desc": "Minecraft access token getter", "from": [ { "file": 6 } ] }, { "id": "well-known/game/mod::minecraft-uuid-getter-ref", "conf": 0.9, "crit": 3, "desc": "Minecraft profile UUID getter reference", "from": [ { "file": 6 } ] }, { "id": "micro-behaviors/communications/proxy/tunnel::byte-output-stream", "atk": "T1090", "mbc": "C0003", "conf": 0.5, "crit": 3, "desc": "Java ByteArrayOutputStream usage", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/process/create/spawn::java-processbuilder-bytecode", "atk": "T1059", "mbc": "E1203", "conf": 0.88, "crit": 3, "desc": "Java bytecode ProcessBuilder reference", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/communications/socket/send::java-dataoutputstream-class", "atk": "T1071", "mbc": "C0001", "conf": 0.9, "crit": 3, "desc": "Java DataOutputStream class reference", "from": [ { "file": 5 } ] }, { "id": "micro-behaviors/data/decode/base64::java-base64-decoder-bytecode-call", "conf": 0.94, "crit": 3, "desc": "Java Base64 decoder accessor call", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/process/io/stream::java-processbuilder-redirect-input", "conf": 0.92, "crit": 3, "desc": "Java ProcessBuilder redirects standard input", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/time/sleep/interval::java-thread-sleep-bytecode", "conf": 0.9, "crit": 3, "desc": "Java bytecode thread sleep", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/fs/write/file/full::jvm-files-writestring-bytecode", "conf": 0.9, "crit": 3, "desc": "JVM bytecode Files.writeString", "from": [ { "file": 6 } ] }, { "id": "micro-behaviors/process/info/current::getlocation-ref", "conf": 0.82, "crit": 3, "desc": "Java getLocation call reference" }, { "id": "micro-behaviors/data/buffer/transfer::bytearrayoutputstream-ref", "conf": 0.88, "crit": 3, "desc": "Java ByteArrayOutputStream class", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/communications/socket/ssl::jvm-x509trustmanager-class-ref", "conf": 0.94, "crit": 3, "desc": "JVM X509 trust-manager interface reference" }, { "id": "metadata/file/archive::archive-at-least-10-members", "conf": 0.9, "crit": 3, "desc": "Archive contains at least ten members" }, { "id": "metadata/package/entrypoint::jar-main-class", "conf": 0.95, "crit": 2, "desc": "JAR manifest declares an executable Main-Class" }, { "id": "metadata/file/naming::archive-member-under-10kb", "conf": 0.9, "crit": 3, "desc": "Archive has a sub-10KB member" }, { "id": "metadata/package/config::fabric-runnable-mod-archive", "conf": 0.9, "crit": 3, "desc": "Fabric mod JAR is directly runnable", "from": [ { "file": 9 } ], "uses": [ 25, 78 ], "spans": [ [ 0, 15 ] ] }, { "id": "objectives/exfiltration/stealer/credential/token::minecraft-token-http-body-exfil", "atk": "T1041", "mbc": "E1041", "conf": 0.98, "crit": 4, "desc": "Minecraft token access paired with raw socket request write", "from": [ { "off": 6353, "file": 5 }, { "off": 1931, "file": 6 } ], "uses": [ 17, 24 ], "spans": [ [ 0, 41 ] ] }, { "id": "well-known/malware/stealer/prefire-shard::prefire-packed-runtime-stealer", "atk": "T1528", "mbc": "B0006", "conf": 0.99, "crit": 5, "desc": "Prefire packed runtime Minecraft stealer", "from": [ { "off": 20811, "file": 1 }, { "file": 5 }, { "off": 1931, "file": 6 }, { "file": 7 } ], "uses": [ 2, 3, 17, 38, 42, 54, 55 ] } ] }, { "ctx": [ { "b": "+kO#^0000+1IT%q5[t\u0026%fk20vxMW=qvqoWLfJSh#009925nCS%vj#C9zF7Q#vRPE:Bo.^F0rsoMz/4dux([3hvLq+kB8L(rwLu/IbZKrmv}6Q)zEmm12lj]d02o0Zz7/KoBzb/aflgSBz!%PdoLF8z00-J83WMU%v}6Q)zEmm10rsoTvrM6jy*?i]fhMXcv}x.5luN0UwmY^bqE%xMA+e:52lk8i02PDVC404uvqYZhp\u0026ZF:wPI]VB.LV5wPw1Q3\u0026{tlqE%xMA+e:50rr%KvrM6jB-.tlfg68*wI#v\u003cl$G\u003eDwmY=^01P8g5nCS%vj#+Bx(2B?vrl0rgZs0)0rru)wN/T?wPv!Kc2c\u003eivj#C9zF7RpzGY@lwIl+?BzbP6nmuyDy?mVkoMa\u0026+B-mM=6AFgPygho]fkL6mxd)$pC5Iecfhl21xM4ALvqYQ(wPF7R76aytoMa\u0026+B-muY4SDB", "ln": 0 }, { "b": "y5[qGoLO0Vvj#Ijz.CZpy?km@vrufA0rrsuB5tzEyYKINoLO0Vvj#C9zF7R3BAh8kxf{-Py?d9$i@]r=jzwXEBuPZ911kQ03\u0026?)Wfa4WZ05aAN5nCS%vj#C9zF7R3BAh8kx9Oz(0rr{JvrM6jy*?i]fh($kx(mMIB.LV5wPw1QgZTju05aANcJ@Z]WB?+yGUut}X9w{y/[FysIq-#u(wQFII@xtL\u0026ENxYJd]@R2MM^:01i)!lUG[Gl2}0OC(W)Fc[ev/3\u0026\u0026o/iTL\u003cy06phY0:w1", "ln": 635 }, { "b": "gxphK00BYwdol\u0026Se=X-Q05T:O0rs8/lN+YzvrM6jy*?i]fh($kx(mMIB.LV5wPx\u003cv07c-=3ih{-rri79Bz\u003e91A+PA70rr/ZdnjF+C404uvqYZhq/)4]zF83t09oe53ih{-sPFH]\u003cGbuHHn0?0LJ^%U[35tEQPS)VZU$ct)1ZC.N#(]#H2/v!)$Wg(N5xhbWEpx7(z6QeRJx+}W^n:V(ybGMLD0(iGx]\u003eg4f#@r0rt%:SGVzBNbCrN(BSRM", "ln": 1067 }, { "b": "lSW]5uR\u003c6UB6?vjz+:UPl$Gf}00^gGvpRVlv/VMmAb]J4x(W+=07[Ukygho]fkL6mxd)h9A+PA7j4%x$C404uvqYZhq/)4]zF848ygho]fkL6mxd)h9A+PA7j1i\u003crvrM5", "ln": 4160 }, { "b": "xWk0a05T57PYzoH\u003e.s\u0026MN4Jt?H3T]6\u003cDun3HlZ?!N=e\u003cO)2X:rLc:IqTMkOJ\u003e.B(MNv-w\u0026I3jd=j]\u003eS/xjVf@zGVA?kMHfU0mp*k0rt4+\u0026jbouM4Xe0TM+RS(YlUQUEiX]S{kCO\u003c^\u0026d7XV1.TT(uKB(5q[kKG)-GSoZBJ(wIC0PoY--lJEfo2JpMq/0TXwY6^t8(B?/fHj[)cSnSVt/pq37L\u003cVn%(B:mVHQlrXN*o3-0rtv\u0026)3KvhR(6", "ln": 5704 }, { "b": "(ANzNHk\u003eR!IT2+L\u003e-qv@T^wEUUJ\u0026A\u0026\u003e.t650.rE{0000000*\u003cK01-)NC404uvqYZhra{q-vpPPAoAta%B8kA0z#/}wc}U{?3\u003c6f9pymd$0-e)$2uTSgoL^:g0rrmql3u(w01BlImRb}avqf[exJv[f00^7KwO\u003c!LBo8vDAb]JkqEK+I00V}wA7%+=0rrvmB-II3B.}cV6ky%0vj#tkfg!@dCW\u003er7BzkVh2lF3e00^*:A71bRvf3uwygho]fkL6mxd)j$A=legvR=", "ln": 12177 }, { "b": "wNPAX0+.Pm1T)Owdol\u0026Se=]+{0+?ZK0rr@+oLO0Vvj#tkfg*52B-ZM7A+eV@j1jhs04[s\u00263iB\u0026wzuf.CxjVfWwQ5q=zGG]A0rs2^dnjF+C404DBzkLADtdsKt4}}AzGG]Ai$8gf0=XLGx998O02xrTC404DBzkLADtdsKt4}}AzGG]A2lF#F00^dFBwumYwEFS-09xNfBPM:/01iHZl${WMv@#TfC)\u003c+10pZx$BPM\u003c\u0026010pHBwMy^wO#O\u003c02u$ioLO0Vvj#Ijz.CZpy?km@vrufA3\u003c7!TEg36F0!7dI9bn]9vj#tkfg6![w[u0]wkvt\u0026Acln3BAg@3z3Hb)0rr%KvrM6jx(tT]x(4uRB-.OBBw)p4wNPAX0!HBM26s=Mx(4tY01ZLcoLO0Vvj#tkfgGU(wJHq4GAu\u0026n0ziAF0rrYWoLO0Vvj#tkfgGU(wJItw3\u0026?)YHZBio0/l{T8yOo]vrM6jx(tU2B-.OBBw)p4wNPBqnHWWG04[th3iC+WI#-[YA+eV\u00263\u003c8B\u003ci%(440/)uZ1:t03By+EM2pJ!ynL7vi3\u003c8K)K{Rnw0*rS+1.hv!B7C:YL(JDA0!yAs0rrNqwmORYAbY\u0026eB8$]60rr@+oLO0Vvj#C9zF7R4xMw3nvpB4:j1jhs0*\u003c4S3iBGmNGix}v@c78wKQGUA^n5{Ob+hH0+RO93iB\u0026wMidV(\u003ee)!vPeGHF(@nWz16TrV\u0026Sf2?yi9l=gd#{(uR*", "ln": 12494 }, { "b": "w(eNe321l[wmY^EB:9]!2xjM[l$7gC0%0:I:].TW2w0#q4:YO701-)NC404DBzkLAl2}0OD2\u003ch(V\u0026Hdmv@DsipI9HkzF9IY00\u003c#Slp\u003c-$ts5-1WGr]B0\u003c@9t0rrjlz/2):X=KF\u003e00ikl0rrNPDsIj?wOTRKwmYR40rrmirbDNP024*[B4{1AAcMe9r8EawuQv52lJEe)y?W:2Byxu90rrmlo\u003c@nE01hs#oLdj2rchh1Bo8vAvS=ou0rrvzp?%8", "ln": 13321 }, { "b": "TSmHKsT-.t02xrTC404DBzkLADtdsKnP5cRvru732lJ6Q0)yS#0rryDwPQHYAclmh0)Q\u003cZ3iFAM=Ja1^ygho]fkktTlv0V:l2}0OC#5N8Acln3BAg@3z3Hc\u00263iFSQqul+6w[=c%B7/b}3\u003ca]U[D]uw0[vqK2wF6/y*?A%3\u003cb2Zi%(5k0[WIN3t%A^wogsWAclmh0[)UA3iFAM*xf0vg2r2z=m(3@I#k303iFSSLk$T=wO#2!0]Tbj3iFAM\u0026Sf2!Bz\u003cG\u003eBy^:UA::j]00BY0ts5-1\u003co1AI0[4ej0rrHxv}x)(wPqf)xM0[K1z}4BCl4WXoLO0Vvj#+Bx(2CGx(CZ%zF0Y[By/FO0rrBtxguG9C4(5q0rsinygho]fkktTlv0V:l2}0OC#5N8Acln3BAg@3z94:#4%8h\u0026yf$N^Cxe1pz/{kA0rrypzGG]ArbDNP010sSy?d9$piyyQ.AEL\u003c1+IB{?pe6aEGZ/+49DP5QpQOA.$a^eWm9%]06gCHO@?#^Vf)^?)W60%SJb0MXA*Pj\u0026Jd$4Kb\u0026y}PYpYY)VSK@Mz-(zH2X}](:AkuTP", "ln": 13566 }, { "b": ")t!BcZ2#5Y2M\u003eIA03?K:2(\u003e2e4/(UO)2w^yT^wpXMGaas)2m7\u0026TFj%*Y5O)r\u003cHp6oPo5AmUlLsn5DI\u003eowPq\u003c3y\u0026Z0!69wHE05BY\u003e0rshB\u003ecItXZN9#RK(Si\u003e\u003cd8[bVZ*D#Y5PS-\u003cE\u0026ygORdmJ77pf^02#pB0S%nu05\u003ezGJ\u003cW#.JPC}^\u003c=(U7JJhipMGKBq\u003eyPR%HPGQpI%3n7(.*6cO@IWjZt$uA\u003c?Fs!HoY\u003c9Iu\u003cq50rtv])yX.HLyS", "ln": 14423 }, { "b": "c}[w:C404rz.BN]y?kWSoLO0Vvj#C9zF7R0A=kD0B8%V\u003cx(4r\u003eAWjK]wnc6}v@%^v12y3o3igCoh30W^A+e=}A+e:5nP5G\u0026Bo8wac}[w:C404uvqYZhp\u0026ZF:wPI]VB.LV5wPx4]wN]H}wN/*zdnjF+C404uvqYZhp\u0026ZF:wPI]VB.LV5wPx\u003cv12*rw3igIqiroaM4^[[E\u003eAqd?X1.\u0026oFASi0*Q#\u003cxOAMc0\u0026\u003c1EfVX#Y4\u0026ix0xO0SJsW^FWO\u003eAz+2WWb)cRrB83*k$S\u003eX-/lI\u0026\u003c2lBVzUP)\u0026im}w13lI-2W}W\u003ewO#3TzWV.h12Ht+3J\u0026M[01K3Xwnc6}v@$H?Bz#wA3\u003ce-%i0]S{13)2ARhwZ:+vU!w0rr^NwN]H}wN/*JA=M8sq/)4\u003evqM2B9vL8uoLO0Vvj#C9zF7R0A=kD0B8%V\u003cx(4r\u003eAYTWimfu0^01x320rrpAByxii0rr\u0026.dnjF+C404uvqYZhp\u0026ZF:wPI]O3\u003cf66n^ULc14@T{5O+-$vj#C9zF7R0A=kD0B8}M*o-Uj@Aa@?-00sR#n^\u003e!$15Gsbp6jt]07)BNOSI/:VGOrQ-?.%MS]oLA\u0026Fjq]Tg=Pd)1yX-P0^KjR0a?*:D#mDN=f\u003cy\u0026Fjz@TCj/M)1yzTO@hGYLix06:C]LtJS", "ln": 15042 }, { "b": "Bx09/z!-i!y?J?H4r#INydJ8GltQNQB9W\u0026!4pS:!wI#wjz/fVdCYT9eVgMi5A4H+^W^Kjb0$/lZyYKIyxjVfMwN/T?wPv!K94imfygho]flIwJy+Fa-B7El^bT=iNz!9B1i$8k.1m#{25^d!c00V$Bv@C)?0rr(-oLO0Vvj#C9zF7R3BAh8kxfdLDljr$\u003c1nAi65cI.e03M8=C404wx(tUmxKL}5wPPO7Byx5$vrb)CxKL}5wPR$#1n-901YXI\u003euPn5^8CB)OC404wx(tUmxKL}5wPPN)xKL}5wPQ0x1n@u32)p8c@@A9wc%G2iygho]fk+GxfjOW7A=U/lfgfzYA=U/li@", "ln": 19141 }, { "b": "uWZysuP-I=1!K=vM!=43DiD540Vo]o9jVe6*w#%fHAYw-0rr^FvrM6jy*?i]fgfzYA:-E1wPw1Ux-OhqwnbW\u003cBo8vBc{{MPnEL-q1z!zFy6nwO00NpWBAohr0181IuTD${B98zp0rrNMAaK0gvp9INz/xYv0rr^Umnmk#k$2r.uUA}{y*QT$CWQQM1z*!erri74yH}+[Q\u003cHro0rsUfLAK{?U\u0026Q.g)x:K]GPLh=R@sIY)s{nLMCqyOJ{zTQ)ZdP8Xsh=BV\u003c^ozB].NX1]", "ln": 20747 }, { "b": "3ao?g1y@kOwhT?c05W)]3+3amiT=9G4hxr!3.^RI84mw?1qInK6+aMV08amp1qIvX3ufyY08e0cWG6ufGBE%W%je4@WG6Ht07H3uWG6GfsP(tphcEx*hAzx!5e5lR06ApO84\u003cN=weL$^g=t%:5XX$)wcuB36bqg[1V^t1hwD@w6+^qwaq\u003e\u003ed6=vO#6/l^u6+.q%6+UE[g\u003eH(\u003cGCsJ=%kgA*gG+OfW/w+607H3c5e5rT06ApV85Q6\u003cweMj\u003eg=ui?7}{.5wcuB38wKg61V^O8hxiCK6=J!Daq(ak92POd95FJI6=E/b6=y%#g\u003eH(\u003cGD72\u003c%kgA*gG+OmW/w+607H3c5e5wi9#Md5WG5#Vaq(of08J/e6^d3Ba?E.isRS9?08\u003e{512.wsbnzw@04w^f86n$@ayC{ev735e86n$@bnztuv735eF%9Lxr-:@00Jk$G86VG?tdaA2r#zNT09Sr71RLpM06Ap?872Cxhyxv?Z64%YcUba-6!3Y#iW\u003ed?dITAFd53X!87upI872F3cTWVsu]e-F1qJy3cVADIF%6b!dGMEE*Q^CwsS5V$076Q!2d\u003c\u003c)s*[w?iXqj35[FAJjut8je^0{*fbVyR1y@l2whVaRfUvMIf-%r?88h\u003cY87(4bfjkIIu]e-N1qJWbfk$qQF%6b!g65aB6!(uY?N-+zsS5%607a9]mPQDV5[XMLjuttqh3kV[hw[x^1y@l9whVv", "ln": 22062 }, { "b": "WG5AJjScx+g=vJnj?.T{wcuB3knuz}1V!)JhBe6z6*Fz)bPe\u0026Zk]z*2j{kmdl0#I!jP(G=6*uOAg\u003eH(\u003cGH2Tp%j+c=gG+OXW/w+607H3cjq8zq06Aqg8ajM-hBOGKZ64%YmpXqC6?k?ti.6]O1y%zY6?B!]bPf8!neT!#6?8HBnmjm(l\u003cak}6?97Hg\u003eH(\u003cGH(cv%j$o!gG+O=W/w+607H3cjq8Fs06Aqn8b4WDweO3Eg=w2BothcmwcuB3o+*yn1V/xXhCU5-6?$z5aq)]?pz(!upC-}Z6?]As6?\u0026NOg\u003eH(\u003cGIISD%kgA*gG+O\u003cW/w+607H3cjHLk[q)=Qyd.tWrs*[w?i-l?[5]+nVjuuyUqV!\u003cmr2FSG1y@lDwhWB5rLeF@rS+lY6\u0026#bIQ5VCRrUXWNqV)?mu\u003e(:Jg-oi{6\u0026#bHA9$IOL2Wfp0Jk$LY8TS\u00268cjiDlBD\u003e-r#B)GA\u003c+%gi:9z8Z64%:t3\u003c9AtnZRU6\u003cChKwhWWct!yk3t(##\u003e6\u003c.RWQ5VqNt[{V-s}$v28cN+W6\u003c.RVA9$IOL2Wfw0Jk$PY8TS\u00268c%YKlBD\u003e-r#B)GBHzfii:\u0026[mZ64%:vp7\u0026HvI@Q*6\u003egXRwhT", "ln": 22717 }, { "b": "Ne^WDWG6bo0d{{B1P+?T1?1ISo!l\u0026v5DEu\u002619vo\u00265d(tOn\u0026u!!1EPk$6:b9@5tPpf0Ka9!0dUTYFe5g\u003cxKFmJBufNP83NCKo/-G\u003c05E:}2c[viW/=/qo-.D#0SXt.W/", "ln": 134697 }, { "b": "2p)j.p^2^4y}H3G12Zn%1rscod\u003eIFs1-bX71HXq75d(tOzu\u003ezp6:aUEWG5#j5v.\u003cXv3aAw1oLI3!H!0900066X=qZg4fcI]j]LA\u003c0s5VZ0waC^0000Q00JvV04[y)00", "ln": 135238 } ], "depth": 1, "facts": { "imp": [ [ "", "java/lang/ProcessBuilder$Redirect" ], [ "", "java/util/zip/ZipEntry" ], [ "", "java/lang/String" ], [ "", "java/util/ArrayList" ], [ "", "java/lang/invoke/MethodHandles" ], [ "", "[C" ], [ "", "[Ljava/lang/String;" ], [ "", "java/lang/Throwable" ], [ "", "java/util/Arrays" ], [ "", "java/io/ByteArrayOutputStream" ], [ "", "java/nio/file/attribute/FileAttribute" ], [ "", "java/lang/Process" ], [ "", "java/lang/Character" ], [ "", "java/lang/Class" ], [ "", "java/io/BufferedOutputStream" ], [ "", "com/github/resolveLif" ], [ "", "java/lang/StringBuilder" ], [ "", "java/util/Map" ], [ "", "java/util/zip/ZipInputStream" ], [ "", "java/lang/InterruptedException" ], [ "", "java/io/IOException" ], [ "", "java/io/ByteArrayInputStream" ], [ "", "java/io/PrintStream" ], [ "", "java/lang/ProcessBuilder" ], [ "", "java/util/Base64$Decoder" ], [ "", "java/lang/Integer" ], [ "", "com/github/resolveLif$zm_cbven_mp" ], [ "", "java/nio/file/Path" ], [ "", "java/lang/invoke/MethodHandles$Lookup" ], [ "", "java/nio/file/LinkOption" ], [ "", "java/lang/System" ], [ "", "java/nio/charset/StandardCharsets" ], [ "", "java/io/FileOutputStream" ], [ "", "java/lang/Object" ], [ "", "java/nio/file/Files" ], [ "", "java/lang/Thread" ], [ "", "java/lang/Exception" ], [ "", "[B" ], [ "", "java/io/File" ], [ "", "java/util/zip/Inflater" ], [ "", "java/util/Base64" ], [ "", "java/util/List" ], [ "com/github/ajnJ0Wp", "com/github/ajnJ0Wp.caEkeOd" ], [ "com/github/ajnJ0Wp", "caEkeOd" ], [ "com/github/resolveLif", "com/github/resolveLif.ngx_nrnes" ], [ "com/github/resolveLif", "ngx_nrnes" ], [ "java/lang/System", "java/lang/System.getProperty" ], [ "java/lang/System", "getProperty" ], [ "java/util/zip/Inflater", "java/util/zip/Inflater.setInput" ], [ "java/util/zip/Inflater", "setInput" ], [ "java/nio/charset/StandardCharsets", "java/nio/charset/StandardCharsets.UTF_8" ], [ "java/nio/charset/StandardCharsets", "UTF_8" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.append" ], [ "java/lang/StringBuilder", "append" ], [ "java/lang/Integer", "java/lang/Integer.parseInt" ], [ "java/lang/Integer", "parseInt" ], [ "java/util/zip/ZipInputStream", "java/util/zip/ZipInputStream.getNextEntry" ], [ "java/util/zip/ZipInputStream", "getNextEntry" ], [ "com/github/ajnJ0Wp", "com/github/ajnJ0Wp.midTrdll" ], [ "com/github/ajnJ0Wp", "midTrdll" ], [ "java/io/File", "java/io/File.\u003cinit\u003e" ], [ "java/io/File", "\u003cinit\u003e" ], [ "java/util/zip/ZipInputStream", "java/util/zip/ZipInputStream.closeEntry" ], [ "java/util/zip/ZipInputStream", "closeEntry" ], [ "com/github/ajnJ0Wp", "com/github/ajnJ0Wp.fFsvkprpe" ], [ "com/github/ajnJ0Wp", "fFsvkprpe" ], [ "java/nio/file/Path", "java/nio/file/Path.toString" ], [ "java/nio/file/Path", "toString" ], [ "java/lang/String", "java/lang/String.indexOf" ], [ "java/lang/String", "indexOf" ], [ "java/lang/System", "java/lang/System.getenv" ], [ "java/lang/System", "getenv" ], [ "com/github/ajnJ0Wp", "com/github/ajnJ0Wp.owvhfResolver" ], [ "com/github/ajnJ0Wp", "owvhfResolver" ], [ "com/github/ajnJ0Wp", "com/github/ajnJ0Wp.ktyXVqOkCsViTZJ" ], [ "com/github/ajnJ0Wp", "ktyXVqOkCsViTZJ" ], [ "java/io/BufferedOutputStream", "java/io/BufferedOutputStream.close" ], [ "java/io/BufferedOutputStream", "close" ], [ "java/util/zip/Inflater", "java/util/zip/Inflater.end" ], [ "java/util/zip/Inflater", "end" ], [ "java/util/Map", "java/util/Map.of" ], [ "java/util/Map", "of" ], [ "java/lang/String", "java/lang/String.charAt" ], [ "java/lang/String", "charAt" ], [ "java/lang/String", "java/lang/String.substring" ], [ "java/lang/String", "substring" ], [ "com/github/resolveLif", "com/github/resolveLif.get" ], [ "com/github/resolveLif", "get" ], [ "java/util/ArrayList", "java/util/ArrayList.\u003cinit\u003e" ], [ "java/util/ArrayList", "\u003cinit\u003e" ], [ "java/lang/Character", "java/lang/Character.digit" ], [ "java/lang/Character", "digit" ], [ "java/util/Arrays", "java/util/Arrays.copyOfRange" ], [ "java/util/Arrays", "copyOfRange" ], [ "java/lang/String", "java/lang/String.startsWith" ], [ "java/lang/String", "startsWith" ], [ "java/lang/Class", "java/lang/Class.getSimpleName" ], [ "java/lang/Class", "getSimpleName" ], [ "java/lang/String", "java/lang/String.format" ], [ "java/lang/String", "format" ], [ "java/lang/String", "java/lang/String.toCharArray" ], [ "java/lang/String", "toCharArray" ], [ "java/io/FileOutputStream", "java/io/FileOutputStream.\u003cinit\u003e" ], [ "java/io/FileOutputStream", "\u003cinit\u003e" ], [ "java/nio/file/Files", "java/nio/file/Files.readString" ], [ "java/nio/file/Files", "readString" ], [ "java/lang/String", "java/lang/String.indexOf" ], [ "java/lang/String", "indexOf" ], [ "java/nio/file/Path", "java/nio/file/Path.of" ], [ "java/nio/file/Path", "of" ], [ "com/github/resolveLif", "com/github/resolveLif.dAj" ], [ "com/github/resolveLif", "dAj" ], [ "java/lang/System", "java/lang/System.currentTimeMillis" ], [ "java/lang/System", "currentTimeMillis" ], [ "java/lang/String", "java/lang/String.\u003cinit\u003e" ], [ "java/lang/String", "\u003cinit\u003e" ], [ "com/github/ajnJ0Wp", "com/github/ajnJ0Wp.ykm" ], [ "com/github/ajnJ0Wp", "ykm" ], [ "java/lang/Process", "java/lang/Process.pid" ], [ "java/lang/Process", "pid" ], [ "java/lang/String", "java/lang/String.isEmpty" ], [ "java/lang/String", "isEmpty" ], [ "java/io/BufferedOutputStream", "java/io/BufferedOutputStream.write" ], [ "java/io/BufferedOutputStream", "write" ], [ "com/github/ajnJ0Wp", "com/github/ajnJ0Wp.gllrlxc8" ], [ "com/github/ajnJ0Wp", "gllrlxc8" ], [ "java/lang/ProcessBuilder$Redirect", "java/lang/ProcessBuilder$Redirect.appendTo" ], [ "java/lang/ProcessBuilder$Redirect", "appendTo" ], [ "java/lang/Exception", "java/lang/Exception.getMessage" ], [ "java/lang/Exception", "getMessage" ], [ "com/github/ajnJ0Wp", "com/github/ajnJ0Wp.prepareZzrjrei" ], [ "com/github/ajnJ0Wp", "prepareZzrjrei" ], [ "com/github/ajnJ0Wp", "com/github/ajnJ0Wp.MzejetfmSMTYt" ], [ "com/github/ajnJ0Wp", "MzejetfmSMTYt" ], [ "java/lang/ProcessBuilder", "java/lang/ProcessBuilder.directory" ], [ "java/lang/ProcessBuilder", "directory" ], [ "com/github/ajnJ0Wp", "com/github/ajnJ0Wp.KBaohMypPBIP" ], [ "com/github/ajnJ0Wp", "KBaohMypPBIP" ], [ "com/github/ajnJ0Wp", "com/github/ajnJ0Wp.mnov_hvu_bf" ], [ "com/github/ajnJ0Wp", "mnov_hvu_bf" ], [ "com/github/ajnJ0Wp", "com/github/ajnJ0Wp.fom" ], [ "com/github/ajnJ0Wp", "fom" ], [ "java/io/ByteArrayOutputStream", "java/io/ByteArrayOutputStream.toByteArray" ], [ "java/io/ByteArrayOutputStream", "toByteArray" ], [ "com/github/ajnJ0Wp", "com/github/ajnJ0Wp.frovXedorpuSoclcj" ], [ "com/github/ajnJ0Wp", "frovXedorpuSoclcj" ], [ "com/github/ajnJ0Wp", "com/github/ajnJ0Wp.VxDXClRi" ], [ "com/github/ajnJ0Wp", "VxDXClRi" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.toString" ], [ "java/lang/StringBuilder", "toString" ], [ "java/util/zip/Inflater", "java/util/zip/Inflater.\u003cinit\u003e" ], [ "java/util/zip/Inflater", "\u003cinit\u003e" ], [ "com/github/ajnJ0Wp", "com/github/ajnJ0Wp.ezsi_qjoyge" ], [ "com/github/ajnJ0Wp", "ezsi_qjoyge" ], [ "com/github/ajnJ0Wp", "com/github/ajnJ0Wp.nemm_dqbsqh_bs_gtehp" ], [ "com/github/ajnJ0Wp", "nemm_dqbsqh_bs_gtehp" ], [ "java/util/zip/ZipInputStream", "java/util/zip/ZipInputStream.close" ], [ "java/util/zip/ZipInputStream", "close" ], [ "java/util/zip/ZipInputStream", "java/util/zip/ZipInputStream.\u003cinit\u003e" ], [ "java/util/zip/ZipInputStream", "\u003cinit\u003e" ], [ "java/util/zip/Inflater", "java/util/zip/Inflater.inflate" ], [ "java/util/zip/Inflater", "inflate" ], [ "java/nio/file/Files", "java/nio/file/Files.exists" ], [ "java/nio/file/Files", "exists" ], [ "com/github/ajnJ0Wp", "com/github/ajnJ0Wp.runDetached" ], [ "com/github/ajnJ0Wp", "runDetached" ], [ "com/github/ajnJ0Wp", "com/github/ajnJ0Wp.i4OJlBA" ], [ "com/github/ajnJ0Wp", "i4OJlBA" ], [ "com/github/ajnJ0Wp", "com/github/ajnJ0Wp.toGlsgp" ], [ "com/github/ajnJ0Wp", "toGlsgp" ], [ "java/nio/file/Path", "java/nio/file/Path.getParent" ], [ "java/nio/file/Path", "getParent" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.append" ], [ "java/lang/StringBuilder", "append" ], [ "java/lang/String", "java/lang/String.substring" ], [ "java/lang/String", "substring" ], [ "com/github/ajnJ0Wp", "com/github/ajnJ0Wp.wTWlj_s" ], [ "com/github/ajnJ0Wp", "wTWlj_s" ], [ "java/lang/System", "java/lang/System.arraycopy" ], [ "java/lang/System", "arraycopy" ], [ "java/lang/ProcessBuilder$Redirect", "java/lang/ProcessBuilder$Redirect.from" ], [ "java/lang/ProcessBuilder$Redirect", "from" ], [ "java/lang/ProcessBuilder", "java/lang/ProcessBuilder.redirectOutput" ], [ "java/lang/ProcessBuilder", "redirectOutput" ], [ "java/util/List", "java/util/List.add" ], [ "java/util/List", "add" ], [ "com/github/resolveLif$zm_cbven_mp", "com/github/resolveLif$zm_cbven_mp.body" ], [ "com/github/resolveLif$zm_cbven_mp", "body" ], [ "java/lang/ProcessBuilder", "java/lang/ProcessBuilder.redirectErrorStream" ], [ "java/lang/ProcessBuilder", "redirectErrorStream" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.append" ], [ "java/lang/StringBuilder", "append" ], [ "com/github/ajnJ0Wp", "com/github/ajnJ0Wp.cqUQu_K" ], [ "com/github/ajnJ0Wp", "cqUQu_K" ], [ "com/github/ajnJ0Wp", "com/github/ajnJ0Wp.zw_HpV_wb" ], [ "com/github/ajnJ0Wp", "zw_HpV_wb" ], [ "com/github/ajnJ0Wp", "com/github/ajnJ0Wp.Z4SkYNBmDKfXC" ], [ "com/github/ajnJ0Wp", "Z4SkYNBmDKfXC" ], [ "java/lang/String", "java/lang/String.equals" ], [ "java/lang/String", "equals" ], [ "java/util/zip/ZipEntry", "java/util/zip/ZipEntry.getName" ], [ "java/util/zip/ZipEntry", "getName" ], [ "java/lang/System", "java/lang/System.out" ], [ "java/lang/System", "out" ], [ "java/lang/String", "java/lang/String.\u003cinit\u003e" ], [ "java/lang/String", "\u003cinit\u003e" ], [ "com/github/ajnJ0Wp", "com/github/ajnJ0Wp.lsQFrl" ], [ "com/github/ajnJ0Wp", "lsQFrl" ], [ "java/lang/ProcessBuilder", "java/lang/ProcessBuilder.start" ], [ "java/lang/ProcessBuilder", "start" ], [ "java/io/ByteArrayOutputStream", "java/io/ByteArrayOutputStream.write" ], [ "java/io/ByteArrayOutputStream", "write" ], [ "java/io/PrintStream", "java/io/PrintStream.println" ], [ "java/io/PrintStream", "println" ], [ "com/github/ajnJ0Wp", "com/github/ajnJ0Wp.gpaxox_iff_uchjkh" ], [ "com/github/ajnJ0Wp", "gpaxox_iff_uchjkh" ], [ "java/nio/file/Files", "java/nio/file/Files.createDirectories" ], [ "java/nio/file/Files", "createDirectories" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.append" ], [ "java/lang/StringBuilder", "append" ], [ "java/util/zip/ZipInputStream", "java/util/zip/ZipInputStream.read" ], [ "java/util/zip/ZipInputStream", "read" ], [ "java/lang/Object", "java/lang/Object.getClass" ], [ "java/lang/Object", "getClass" ], [ "java/util/zip/Inflater", "java/util/zip/Inflater.finished" ], [ "java/util/zip/Inflater", "finished" ], [ "com/github/ajnJ0Wp", "com/github/ajnJ0Wp.updateKrsflvsgp" ], [ "com/github/ajnJ0Wp", "updateKrsflvsgp" ], [ "java/nio/file/Path", "java/nio/file/Path.resolve" ], [ "java/nio/file/Path", "resolve" ], [ "com/github/resolveLif$zm_cbven_mp", "com/github/resolveLif$zm_cbven_mp.statusCode" ], [ "com/github/resolveLif$zm_cbven_mp", "statusCode" ], [ "com/github/ajnJ0Wp", "com/github/ajnJ0Wp.BkVmHp" ], [ "com/github/ajnJ0Wp", "BkVmHp" ], [ "java/lang/Object", "java/lang/Object.\u003cinit\u003e" ], [ "java/lang/Object", "\u003cinit\u003e" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.\u003cinit\u003e" ], [ "java/lang/StringBuilder", "\u003cinit\u003e" ], [ "java/lang/ProcessBuilder", "java/lang/ProcessBuilder.\u003cinit\u003e" ], [ "java/lang/ProcessBuilder", "\u003cinit\u003e" ], [ "java/util/Base64", "java/util/Base64.getDecoder" ], [ "java/util/Base64", "getDecoder" ], [ "java/io/ByteArrayInputStream", "java/io/ByteArrayInputStream.\u003cinit\u003e" ], [ "java/io/ByteArrayInputStream", "\u003cinit\u003e" ], [ "com/github/ajnJ0Wp", "com/github/ajnJ0Wp.UZVZb" ], [ "com/github/ajnJ0Wp", "UZVZb" ], [ "com/github/resolveLif$zm_cbven_mp", "com/github/resolveLif$zm_cbven_mp.bodyString" ], [ "com/github/resolveLif$zm_cbven_mp", "bodyString" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.\u003cinit\u003e" ], [ "java/lang/StringBuilder", "\u003cinit\u003e" ], [ "java/io/ByteArrayOutputStream", "java/io/ByteArrayOutputStream.\u003cinit\u003e" ], [ "java/io/ByteArrayOutputStream", "\u003cinit\u003e" ], [ "com/github/ajnJ0Wp", "com/github/ajnJ0Wp.\u003cinit\u003e" ], [ "com/github/ajnJ0Wp", "\u003cinit\u003e" ], [ "com/github/ajnJ0Wp", "com/github/ajnJ0Wp.dlnin_zlqb_hy" ], [ "com/github/ajnJ0Wp", "dlnin_zlqb_hy" ], [ "java/util/Map", "java/util/Map.of" ], [ "java/util/Map", "of" ], [ "com/github/ajnJ0Wp", "com/github/ajnJ0Wp.CdfVLRMK" ], [ "com/github/ajnJ0Wp", "CdfVLRMK" ], [ "java/io/BufferedOutputStream", "java/io/BufferedOutputStream.\u003cinit\u003e" ], [ "java/io/BufferedOutputStream", "\u003cinit\u003e" ], [ "java/util/zip/Inflater", "java/util/zip/Inflater.needsInput" ], [ "java/util/zip/Inflater", "needsInput" ], [ "java/lang/String", "java/lang/String.length" ], [ "java/lang/String", "length" ], [ "java/lang/ProcessBuilder", "java/lang/ProcessBuilder.redirectInput" ], [ "java/lang/ProcessBuilder", "redirectInput" ], [ "com/github/ajnJ0Wp", "com/github/ajnJ0Wp.yk_ajk_ksle" ], [ "com/github/ajnJ0Wp", "yk_ajk_ksle" ], [ "java/lang/Thread", "java/lang/Thread.sleep" ], [ "java/lang/Thread", "sleep" ], [ "java/lang/Throwable", "java/lang/Throwable.addSuppressed" ], [ "java/lang/Throwable", "addSuppressed" ], [ "java/util/Base64$Decoder", "java/util/Base64$Decoder.decode" ], [ "java/util/Base64$Decoder", "decode" ], [ "java/nio/file/Path", "java/nio/file/Path.toFile" ], [ "java/nio/file/Path", "toFile" ], [ "java/lang/Integer", "java/lang/Integer.valueOf" ], [ "java/lang/Integer", "valueOf" ], [ "java/util/zip/ZipEntry", "java/util/zip/ZipEntry.isDirectory" ], [ "java/util/zip/ZipEntry", "isDirectory" ] ], "metrics": { "file": { "size": 137978, "entropy": 4.49 }, "class": { "major_version": 65, "interface_count": 0, "method_ref_count": 120, "constant_pool_size": 1215, "external_class_count": 42 }, "binary": { "peak_region_bytes": 17408, "peak_region_entropy": 7.02 }, "imports": { "count": 162 }, "functions": { "count": 20 } } }, "id": 1, "mol": "O₃(AlAs₂I)H₅(Db₄F₂OsPo₂Ti)", "path": "dsmp_dupe_1.21.11.jar!!com/github/ajnJ0Wp.class", "pid": 0, "risk": 13, "sha": "06900b1c9e696d50bba27a9a325994a0e60f57f5d5bc90c954558e9096de62c5", "size": 137978, "traits": [ { "id": "micro-behaviors/communications/proxy/tunnel::byte-output-stream", "atk": "T1090", "mbc": "C0003", "conf": 0.5, "crit": 3, "desc": "Java ByteArrayOutputStream usage", "spans": [ [ 707, 21 ], [ 12927, 21 ], [ 13638, 21 ], [ 13778, 21 ], [ 13870, 21 ] ] }, { "id": "micro-behaviors/data/archive/extract/zip::jvm-zip-entry-iteration-bytecode", "conf": 0.92, "crit": 3, "desc": "JVM iterates ZIP archive entries", "spans": [ [ 12558, 41 ] ] }, { "id": "micro-behaviors/data/archive/extract/zip::jvm-zip-entry-read-bytecode", "conf": 0.9, "crit": 3, "desc": "JVM reads ZIP archive entry data", "spans": [ [ 12902, 33 ] ] }, { "id": "micro-behaviors/data/buffer/transfer::bytearrayinputstream-ref", "conf": 0.88, "crit": 3, "desc": "Java ByteArrayInputStream class" }, { "id": "micro-behaviors/data/buffer/transfer::bytearrayoutputstream-ref", "conf": 0.88, "crit": 3, "desc": "Java ByteArrayOutputStream class", "spans": [ [ 13630, 29 ] ] }, { "id": "micro-behaviors/data/decode/base64::java-base64-decode-bytecode-call", "conf": 0.96, "crit": 3, "desc": "Java Base64 decode call", "spans": [ [ 19259, 31 ] ] }, { "id": "micro-behaviors/data/decode/base64::java-base64-decoder-bytecode-call", "conf": 0.94, "crit": 3, "desc": "Java Base64 decoder accessor call", "spans": [ [ 19205, 27 ] ] }, { "id": "micro-behaviors/data/decode/base64::java-base64-decoder-class", "conf": 0.92, "crit": 3, "desc": "JVM Base64 decoder class reference", "spans": [ [ 219, 24 ], [ 19218, 28 ] ] }, { "id": "micro-behaviors/data/string/conversion::tostring-token", "conf": 1.0, "crit": 3, "desc": "References the toString conversion method", "spans": [ [ 1131, 8 ] ] }, { "id": "micro-behaviors/fs/read/file/handle::jvm-io-file-class-ref", "conf": 0.86, "crit": 3, "desc": "JVM File API class reference" }, { "id": "micro-behaviors/fs/read/file/handle::jvm-nio-file-class-ref", "conf": 0.86, "crit": 3, "desc": "JVM NIO file API reference" }, { "id": "micro-behaviors/fs/write/file/handle::jvm-fileoutputstream-bytecode", "conf": 0.86, "crit": 3, "desc": "JVM imports FileOutputStream class", "spans": [ [ 12765, 24 ] ] }, { "id": "micro-behaviors/os/env/gate::jvm-opaque-environment-key", "conf": 0.94, "crit": 1, "desc": "JVM class has generated gate value" }, { "id": "micro-behaviors/os/env/gate::jvm-string-equals-import", "conf": 0.94, "crit": 1, "desc": "JVM class imports String equals", "spans": [ [ 14487, 0 ] ] }, { "id": "micro-behaviors/os/env/gate::jvm-system-getenv-import", "conf": 0.94, "crit": 1, "desc": "JVM class imports System getenv", "spans": [ [ 5768, 0 ] ] }, { "id": "micro-behaviors/process/create/spawn::java-processbuilder-bytecode", "atk": "T1059", "mbc": "E1203", "conf": 0.88, "crit": 3, "desc": "Java bytecode ProcessBuilder reference", "spans": [ [ 139, 71 ] ] }, { "id": "micro-behaviors/process/create/spawn::java-processbuilder-init-bytecode-symbol", "atk": "T1059", "mbc": "E1203", "conf": 0.92, "crit": 3, "desc": "Java bytecode ProcessBuilder constructor", "spans": [ [ 699, 31 ] ] }, { "id": "micro-behaviors/process/create/spawn::java-processbuilder-start-bytecode-symbol", "atk": "T1059", "mbc": "E1203", "conf": 0.95, "crit": 3, "desc": "Java bytecode ProcessBuilder start", "spans": [ [ 15401, 30 ] ] }, { "id": "micro-behaviors/process/io/stream::java-processbuilder-redirect-errors", "conf": 0.92, "crit": 3, "desc": "Java ProcessBuilder merges standard error", "spans": [ [ 15337, 44 ] ] }, { "id": "micro-behaviors/process/io/stream::java-processbuilder-redirect-input", "conf": 0.92, "crit": 3, "desc": "Java ProcessBuilder redirects standard input", "spans": [ [ 15106, 38 ] ] }, { "id": "micro-behaviors/process/io/stream::java-processbuilder-redirect-output", "conf": 0.92, "crit": 3, "desc": "Java ProcessBuilder redirects standard output", "spans": [ [ 15300, 39 ] ] }, { "id": "micro-behaviors/time/sleep/interval::java-thread-sleep-bytecode", "conf": 0.9, "crit": 3, "desc": "Java bytecode thread sleep", "spans": [ [ 12241, 22 ] ] }, { "id": "objectives/anti-analysis/timing/evasion::kotlin-thread-sleep-check", "atk": "T1497.003", "conf": 0.94, "crit": 3, "desc": "Kotlin Thread.sleep call", "spans": [ [ 12251, 12 ] ] }, { "id": "objectives/anti-static/obfuscation/string/control-prefix::java-character-digit-bytecode", "atk": "T1027", "mbc": "F0001", "conf": 0.9, "crit": 3, "desc": "Java bytecode calls Character.digit", "spans": [ [ 20811, 25 ] ] }, { "id": "objectives/anti-static/obfuscation/string/control-prefix::java-control-prefixed-long-string", "atk": "T1027", "mbc": "F0001", "conf": 0.92, "crit": 3, "desc": "Java string starts with control-length prefix" }, { "id": "objectives/anti-static/obfuscation/string/crypto::java-byte-range-copy", "atk": "T1027", "mbc": "F0001", "conf": 0.7, "crit": 3, "desc": "Java byte range copy", "spans": [ [ 13385, 11 ] ] }, { "id": "objectives/impact/dos/disk::jvm-two-backward-goto-branches", "atk": "T1499.001", "conf": 0.9, "crit": 3, "desc": "JVM repeated counter backedges", "spans": [ [ 22126, 8 ], [ 22226, 8 ], [ 22314, 8 ], [ 22412, 8 ], [ 22501, 8 ], [ 22781, 8 ], [ 22957, 8 ], [ 23063, 8 ] ] }, { "id": "well-known/malware/stealer/prefire-shard::prefire-family-literal", "atk": "T1528", "mbc": "B0006", "conf": 0.9, "crit": 1, "desc": "Prefire family name literal", "spans": [ [ 4192, 7 ] ] }, { "id": "micro-behaviors/data/archive/extract/zip::jvm-zip-entry-extraction-to-file", "conf": 0.96, "crit": 3, "desc": "JVM extracts ZIP entries to files", "uses": [ 1, 2, 11 ], "spans": [ [ 12558, 41 ], [ 12765, 24 ], [ 12902, 33 ] ] }, { "id": "micro-behaviors/data/decode/base64::java-base64-decoding-bytecode", "conf": 0.94, "crit": 3, "desc": "Java bytecode Base64 decoding", "uses": [ 5, 6 ], "spans": [ [ 19205, 27 ], [ 19259, 31 ] ] }, { "id": "micro-behaviors/os/env/gate::jvm-opaque-secret-environment-gate", "conf": 0.97, "crit": 3, "desc": "JVM compares opaque environment gate", "uses": [ 12, 13, 14 ], "spans": [ [ 5768, 6 ], [ 14487, 6 ] ] }, { "id": "micro-behaviors/process/create/spawn::java-processbuilder-start-bytecode", "atk": "T1059", "mbc": "E1203", "conf": 0.94, "crit": 3, "desc": "Java bytecode ProcessBuilder execution", "uses": [ 16, 17 ], "spans": [ [ 699, 31 ], [ 15401, 30 ] ] }, { "id": "micro-behaviors/process/io/stream::java-processbuilder-redirected-stdio", "conf": 0.96, "crit": 3, "desc": "Java ProcessBuilder redirects all standard streams", "uses": [ 18, 19, 20 ], "spans": [ [ 15106, 38 ], [ 15300, 39 ], [ 15337, 44 ] ] }, { "id": "micro-behaviors/process/create/spawn::child-process-creation-api", "atk": "T1106", "conf": 0.92, "crit": 3, "desc": "Starts a child process through a platform API", "uses": [ 31 ], "spans": [ [ 699, 31 ], [ 15401, 30 ] ] } ], "type": "java_class" }, { "ctx": [ { "b": "+kO#^0000+09xm4a.bCcfk20vxMW=qA+frgy\u003c6w-x\u003ewSpzc{^ZC4CL#zeYZW0rAfiygho]fkL6mxd)4\u0026ygQ)%2lj\u0026b02o0Zz7/KoBzb/aflgSBz!%PdoLF8z00Jx63WMU%v}6P", "ln": 0 }, { "b": "aPI/G0rr918up@Y3JHkd000]qbleeM0@@r38uq2.5c8?kq2*N@0SS(lq#=)#5D\u00267t0000a0000c0000f0000103}Q(0096$0001z00Ao70000[5*]^X5*@p102l8TloDg#u1=tjaZWwL5e5Ut5?2\u003cY5?5nyd4*LT5Eti}8Xr)sjq68a91S:cjSC1vD{b7w", "ln": 1240 } ], "depth": 1, "facts": { "imp": [ [ "", "java/nio/charset/StandardCharsets" ], [ "", "java/util/Map" ], [ "", "java/lang/String" ], [ "", "java/lang/Object" ], [ "", "com/github/resolveLif" ], [ "java/util/Map", "java/util/Map.get" ], [ "java/util/Map", "get" ], [ "com/github/resolveLif$zm_cbven_mp", "com/github/resolveLif$zm_cbven_mp.body" ], [ "com/github/resolveLif$zm_cbven_mp", "body" ], [ "com/github/resolveLif$zm_cbven_mp", "com/github/resolveLif$zm_cbven_mp.statusLine" ], [ "com/github/resolveLif$zm_cbven_mp", "statusLine" ], [ "java/lang/Object", "java/lang/Object.\u003cinit\u003e" ], [ "java/lang/Object", "\u003cinit\u003e" ], [ "com/github/resolveLif$zm_cbven_mp", "com/github/resolveLif$zm_cbven_mp.statusCode" ], [ "com/github/resolveLif$zm_cbven_mp", "statusCode" ], [ "java/nio/charset/StandardCharsets", "java/nio/charset/StandardCharsets.UTF_8" ], [ "java/nio/charset/StandardCharsets", "UTF_8" ], [ "java/lang/String", "java/lang/String.\u003cinit\u003e" ], [ "java/lang/String", "\u003cinit\u003e" ], [ "com/github/resolveLif$zm_cbven_mp", "com/github/resolveLif$zm_cbven_mp.headers" ], [ "com/github/resolveLif$zm_cbven_mp", "headers" ], [ "java/lang/String", "java/lang/String.toLowerCase" ], [ "java/lang/String", "toLowerCase" ] ], "metrics": { "file": { "size": 1604, "entropy": 5.79 }, "class": { "major_version": 65, "interface_count": 0, "method_ref_count": 9, "constant_pool_size": 88, "external_class_count": 5 }, "binary": { "peak_region_bytes": 1024, "peak_region_entropy": 5.76 }, "imports": { "count": 14 }, "functions": { "count": 3 } } }, "id": 3, "path": "dsmp_dupe_1.21.11.jar!!com/github/resolveLif$zm_cbven_mp.class", "pid": 0, "risk": 1, "sha": "72e417b88c4f7308a9d85fed1d89cdff4dada225a42b6db5cbe3334a27fc9ddc", "size": 1604, "traits": [ { "id": "metadata/binary/code/complexity::few-functions-3", "conf": 1.0, "crit": 2, "desc": "Binary has 3+ functions" }, { "id": "metadata/binary/code/complexity::functions-at-most-24", "conf": 1.0, "crit": 2, "desc": "Binary has 24 or fewer functions" }, { "id": "metadata/binary/code/complexity::functions-at-most-32", "conf": 1.0, "crit": 2, "desc": "Binary has 32 or fewer functions" }, { "id": "micro-behaviors/os/env/gate::jvm-opaque-environment-key", "conf": 0.94, "crit": 1, "desc": "JVM class has generated gate value" } ], "type": "java_class" }, { "ctx": [ { "b": "+kO#^0000+07^g\u003eay/tbfk20vxMW=qA+frgy\u003c6w-x\u003ewS2w)YK?wOLN*DiTAJ0rrWCvrM6jy*?i]fhD4(wN//!00rl49+]bbvr:CywPPODB8iHih843\u0026A=(CBo\u003c}{FxjV8*00Jx", "ln": 0 } ], "depth": 1, "facts": { "imp": [ [ "", "com/github/resolveLif" ], [ "", "java/lang/Object" ], [ "", "javax/net/ssl/X509TrustManager" ], [ "", "java/security/cert/X509Certificate" ], [ "java/lang/Object", "java/lang/Object.\u003cinit\u003e" ], [ "java/lang/Object", "\u003cinit\u003e" ] ], "metrics": { "file": { "size": 1421, "entropy": 6.08 }, "class": { "major_version": 65, "interface_count": 1, "method_ref_count": 1, "constant_pool_size": 73, "external_class_count": 4 }, "binary": { "peak_region_bytes": 1024, "peak_region_entropy": 6.18 }, "imports": { "count": 5 }, "functions": { "count": 4 } } }, "id": 4, "mol": "H(Cm)", "path": "dsmp_dupe_1.21.11.jar!!com/github/resolveLif$cf_qeej_lz.class", "pid": 0, "risk": 1, "sha": "1dbe206f3b72c2a3eaf1aa3727f30e7ab1bfc1f76921a04123a1a63af4457ebf", "size": 1421, "traits": [ { "id": "micro-behaviors/os/env/gate::jvm-opaque-environment-key", "conf": 0.94, "crit": 1, "desc": "JVM class has generated gate value" }, { "id": "micro-behaviors/communications/socket/ssl::jvm-x509trustmanager-class-ref", "conf": 0.94, "crit": 3, "desc": "JVM X509 trust-manager interface reference" }, { "id": "micro-behaviors/communications/socket/ssl::jvm-x509trustmanager-issuer-callback", "conf": 0.94, "crit": 3, "desc": "JVM getAcceptedIssuers callback defined" }, { "id": "micro-behaviors/communications/socket/ssl::jvm-x509trustmanager-server-callback", "conf": 0.94, "crit": 3, "desc": "JVM checkServerTrusted callback defined" }, { "id": "micro-behaviors/communications/socket/ssl::jvm-custom-x509trustmanager", "conf": 0.95, "crit": 3, "desc": "Class implements a custom X509 trust manager", "uses": [ 1, 2, 3 ] } ], "type": "java_class" }, { "ctx": [ { "b": "+kO#^0000+1d62*6\u003eqf0fk20vxMW=qA+frgy\u003c6w-x\u003evOI0rAfiygho]fkL6mxd)4\u0026ygQ)%2lj\u0026b03C=\u0026z7/KoBzb/aflgSBz!%PdoLF8:v}G7/wO2Q-y\u003cDr^1PXPOv@Diqxk8C", "ln": 0 }, { "b": "zFBs}00bW)00)N-yH?l*yh%sPawuJUC42RGzE)]yB8#dJq=uv*z!0M]BvGXGBz(hBi@]r=jzwXEBuPZ911kQ03\u0026?\u003cVe^.NY051uM3{=WTx?AX)ggTiHyYKILoK\u00260Tfk20vxMW=qA+frgy\u003c6w-x\u003exBc00u\u003eBBo8w2c}[w:C404uvqYZhq/)4]zF83WoK\u00260Tfk20vxMW=qA+frgy\u003c6w-x\u003ewSpzc{^ZC4CL#ze.Mq0269QC404rz.BWTmr\u0026rNAcb/jzu*e00rrsDAS", "ln": 692 }, { "b": "tM:2THy%YWYbDk300V\u003eJAaJ]$0rs8/lN+YzvrM6jy*?i]fh($kx(mMIB.LV5wPx\u003cv0hxK\u00263ilN@R2ZM4Bz\u003e91A+PA70rr/ZdnjF+C404uvqYZhq/)4]zF83t0h/*}3ilN@Sq##7B7]@il3mzM018nhnK#c9uOCe\u003c0rrmvvRNN$00WdCnO03U0rw\u0026xoLO0Vvj#C9zF7R3BAh8kxfe!4vrM6jy*?i]fh($kx(mMBoLO0Vvj#C9zF7R3BAh8kxfe!4vrM6jy*?i]fh($kx(mMBoA", "ln": 2408 }, { "b": "v@=c?By+EMa$cc1vrM6jy*?i]fh($kx(mMBdnjF+C404wwPPO9qB@}U0jI%r3imHmXD8WlBz\u003eeSoAtb8c[d\u00268vrM6jzE)]yrz(HL3\u0026))tYB1UE0keyk3#fi]vj#IfBt3S(oA$Nj0rrvqwPQEYB94/\u003c.2Qzv0kFPK0rrvqwPQ:!A=.Y\u0026.#Mei0kFPN0rrHuwPQ:?z//]cz!]*Z-@J4B0kFPQ0rsIN\u003cctCWJ\u003cX2WRT6wu)YhDlLCvDOGyk[P\u003ccD}eKG4xON^lf4)Yz9E0lLrx5m]\u003c7vqH0RxkRTdwD", "ln": 2778 }, { "b": "w]RA#lu$$4pECi-cmzM5vrM6jy*?i]fh($kx(mMBdnjF+C404uvqYZhq/)4]zF83t0oKpA3igbc\u003eM7U]ygho]fk+uyfh(!0yH}O)0o%)\u003e(I@Nu00\u0026M80rr*PwPQ*Yv}xv$wKpJKw[u0Yx)Kt00px\u0026T3iow()/rzbygho]fk+uyfg*4)Bw)9/yH}PNwmPZ(B8}M^[C@R9c}[w:C404uvqYZhq/)4]zF845dol\u0026SeDCwH0p*cZ3\u0026?KMaQFbI0qlA[2v?W\u0026zE)s10rs8/oLO0Vvj#IfBt3Nhv@2T$l1BIDwPI]OnHWWG0qDM\u00263iow(}v0uI03ITG0S-c001r{WBw)9Sx(dB1B-X2(@S5F@0p6T+3\u0026?^Tec#pT0rAi39+]bbvr:CywPPODB8iHdq+Qbdv@2T$mQY!Gz/Qad0rSu53$Br?vru6Vz!0M]Bo8w3c}[w:C404wwPPO7z!0M]BurfhvrM6jy*?i]fh($kx(mMBnM)Mpygho]fk+uyfh(!0yH}PH3\u0026{Ij1{$wl0s5S97IWx4vr:CywPPODB8iHdq+Qbdv@2T$2ltbi01-^OBw(aip*[xMzdN*2A=RlYa1eNiygho]CRr@CBt4YRy+FZ=oI/ervqPN$wPz\u0026N3\u0026{.p3\u003c)1x0sY5f8erP6vr:CywPPODB8iHdpdW#{B97e=", "ln": 3264 }, { "b": "j1i\u003crvrM6jB-.tlfhc83Buo)i76biV0tLRL0rs6NvrM77fk+uyflqhJfh\u003e!yp*[xMzdN*2A=RD^8ux*FB7GC(wPz%9A.Z4WwPE\u003eL6duK?vrM6jB-.tlfhc83Bup{L3\u0026}sG9sq/^0uImwhX1#hSo}9\u0026)WHDuPR7erR@-J4)53xkVyZx=X-gu7)1@EuJdywZM/%H6)yxZ]NXX@pKkM\u003ew2MV4G03VF}Bvy7TAbPDdBv*1OzGGP8x\u003e7N[x(v(Py?EWbx([393\u0026}KM5EFKT0v4QB5ozA8q=uv^vrb^[wPRH7A@=m-c}[w:C42RGzE)]yB8#dJq=uv^vrb^[wPRH7B2$*K3\u0026}TPcjf+X0vE)F4S=-2A=:\u0026XzE^*4vqxA.0vX133ipFmdGGIWxjVfXB-.OBBw)p4wNPAR02NakoLO0Vvj#tkfhD.jAcln3BAg@3z95dbecdsf0p6Ur0rrQxwPQHYAcln3BAg@3z2\u003cRMc[d\u00268vrM6jx(tT@zG6-uq/)4\u003evqO7m0wBKe3iow)g64wc4=+7b(ZB%uMAGnjS]Y5i)6\u003caZM:C+vF:n#y\u003cajo", "ln": 3885 }, { "b": "PZO.S\u0026\u003c(kKFrZxvLMp:$1N7\u003e#\u003cgSa?L8ejNPxIq%\u003cgZlN0Hr-^3q1e(uPp25iBsGH0HJ[w2)2UVNe)o\u003eCxdztwDq=mc%G1!rTY1#0H%F$hVYDI00M$JB-Rj80IouA3ir6^PAb2}vqZa90rteeoLO0Vvj#tkfg*52B-ZM7A+eV@j1i\u003ckz/4dux([3hvLq+kB8L(rwLu/IbZKrmv}6Q)zEmm1i$8d:0IY#40S/7$00M\u003eGz/YE#0J2\u0026H3iow)RVu=hygho]fkL6mxd)j$A=legvR/PX0Ju813v3reB9I5eBA?T602XEBvrM77fk+uyflqhJfh\u003e!yq/ueYwPQ0m01%r(w]8vbs9e1)raQ8Ulv9S%0rsclygho]CRr@CBt4YRy+FZ=oI/ervqPN$wPz\u0026N0rrQxwo-l9p?$tNy\u003ceo+z2\u003cRGoLO0Vvj#IfBt3Nhv@2T$i@]r[AD320vS=)eza![^syL(XCMv^HA+frmy\u0026?Dl02ngxvrM6jB-.tlfhk\u003e]bT(P)A^o.E01i{{B8k@2Ct8ZZx8}#FoLO0Vvj#tkfhD.jAcln3BAg@3z94:#23KD5Cwh0%02ngxvrM6jx(tT@zG6-uq/)4\u003evqO7b00", "ln": 6289 }, { "b": "0rro]l}y9B0rryoB-pY5wO=h:019Ttr-iT7z*CD10rrTPzEm6!DuiCtA=2C@D1^oV2Y:%7xKtB@Arc4HoLO0Vvj#IfBt3S(oGJmP4Pt!?k$#q!l0)z{uTDw9024Uxy/\u003e4EA=(qcA=j{0uS{ursPFHhy\u0026a8$yhNx]AD2t$0rrTHCxd[qAZ\u003c!\u0026t5wa/o)3Ep32@::raY#OuPwb!6k8z^Ds7Vis9O7vxHMPwmr.mm0rr^SqB\u003c\u003e@qdr%xuTVxoqEr%7nnO", "ln": 6879 }, { "b": "z.BC1w[CQ{wN[wIAcln3BAg@3z3H9[0rr@+oLO0Vvj#tkfg*52B-ZM7A+eV@j1jhs04!l83iw=W*5Rf]ygho]fkktTlv0V:l2}0OC#5N8Acln3BAg@3z3H9%3iw@.f984QA+eV\u00263\u003c2k=M\u003cJ(D0Pjv!N/F#^0O)!o0rrmzx)Kt00PTlF3iw@-\u003cPbt?Bz\u003cG\u003eBy^:UA::j]00BY0ts5-0\u003ek\u003c=N0O)!v0rs-2oLO0Vvj#Ijz.CQlvrcB2Bt30{vrcB2Bup{Bygho]fkL6mxd)h9A+PA7i$8a!0Qy6[?2V\u003cy03R:jJKd=zZuII})xSzGOu}HvIq\u003ep{\u003cEhm}Q\u003e4S/Zuho02M:t]00NB.y?W$(04ff*ygho]fkL6mxd)h9A+PA7i@", "ln": 7173 }, { "b": "wk3(:yJ]\u003cW87nf[vrM6jx(tT@zG6-uq/)4\u003evqO7Pts5-1e=)Wk00iiQ0rruMts7[Mdm\u003c{G?VtLu0OvDf0@@(j015+.0g\u003cn)0SSi300K=PlmCFm0P9@r3iw=Xiro9+c%G2fnHWWG0H\u003ccL3iw@:jokBfc}N9EvrM6jy*?i]fh($kx(mMBoLO0Vvj#+Bx(2B%vq[qjlmC}z04!mo3igzmklg-*v{%syB.gTO6g(.2o\u003cZOlw[$:AzFjc0raXBq0rrsBBAd", "ln": 8296 }, { "b": "Cy1EH0rrmql1sy9010NQw]?K9luM(v00WQPy\u0026%qC0rrpwBxrY#0rrBBvrb^[nP5cU0rsinygho]fkktTlv0V:l2}0OC#5N8Acln3BAg@3z94:#1-XlMl@\u003cr*6gDtwp*W0@xL?9DoLXuHB:dwf0rrswvqPNEzuf.xAb]Jkp\u0026yyQ03a:FvrM6jx(tT\u003eB.kk%A+e=MzG6-uq/)4\u003evqO7b01s0Ywkc#+z^)AOw]mRH6kz8=ByPo4uUBm+D0+GmA^qFv0rrsAwPRv7x8", "ln": 8598 }, { "b": "0yD\u003e/2xTx*y!neZ0rrQNCsLUfD39FdibiOEoAQ%vS:D1e:rLzkrEnJ=knjYB\u003c*:BM1-TO8ws5b{LMp+3ygho]fkktTl$7gCpJZ+#B-ZM7A+eV@2lI*A02WgUygho]fkktTpJZ+#B-ZM7A+eV@j1jhs04!n(3iFfF-@MeCzEEB3rb3hX3\u003caJLOEbxX0)gVD000000rr61019{\u003cx()]+xM4{k3\u003caYOOEbCq0)Z(Ee!c{zTm8jZ)#\u003exEWxn?=Ui7s/(W$!{Ucc#]YxW25", "ln": 9690 }, { "b": "LiN*S)Ul?+U7#FfRW9vK0rrBIA+PSblv0V:3\u003ca(TOEbCq0[mkJ3u{J8By^^:By/I40[Ew:3iFfF/8U\u003c\u0026ygho]fkL6mxd)e9zGGPfwKQ\u0026NwPh:9z/b^Y/-q6\u0026c}[w:C404uvqYZhra{q\u003cCvs@%wJItw3\u0026?\u003cX*x[2o0]9!R6lF2bm{!U#v@+{\u003csvt?\u0026s8}2g0rrNhr:Q8xxKs!qpfg^)0rrd00rrpvwQ5qL0rr\u003cdygho]fkktTnL.^1v}xR3x(v(J0rrNrwb", "ln": 9908 }, { "b": "vrM6jB-.tlfg68*wI#v\u003cmq=QNwmY^y3\u003ccnb}W9rr0@J604ThSexM53np*))Bx(mL(0@-n#3ig.v@@A9fwO#0@wmX.Uq/)4]zF6vW0rOU@022Co0rtN{\u003eD}hEF}@W0MeGAg\u003cfbxzR\u003e\u0026W.YZzhJ\u003eD{37Gqm+uYwQAj\u003cfav6RJ{IJIsc+u\u003eE3=rGtcVUS]gQ:\u003cf1m4RKcUMFD#tX0rsIO\u0026GfI{G[nlzX966-)u0g?V4g#5T(Lg*(yKy4K!7\u0026(GYn5/\u003eA.qq0%O=agZrfwI%FcG)6jg\u0026GokhGM/$1", "ln": 10296 }, { "b": "01rvVxKLZ$uU\u003cm\u003ey\u003c2*V6idOzm{/nmsAN$(luNGVCW#540rryCwPI*ezGxv\u003eb8@\u003cS0rr^FvrM6jzFs2xlv0V:luM)LwPw1Tc\u0026\u003cqJCxdbh0rr#=ts6=jygho]fk+Gxfg6@awKpJKw[u0A3\u003cd%Yd*=wc11TDM2XNZ\u003cq!Q8\u0026Bo8vzc[e7611\u003cWe3iIZVfARpPFb/VK0rr6100u\u003eqx8}#Hc}[w:C404wx(tT\u003eD30Q:B.kk%AYUZJ3\u003cer*h3%r+12Z", "ln": 11131 }, { "b": "v}tVve*%zdvrM6jy*?i]fh($kx(mMBdnjF+C42RGzE)]yB8#dJq=uvSz/fVdCYV1Q19BY?3iLwLCl4WZygho]CRr@CBt4YRy+F+dB-RU0vqYH^wPw1TC)TJQ051uM8FSY7vj#Xkv%8*aBA]JrwN/\u003e6wL#@Own=q\u00261agBTEe\u003e]300E1Nx(\u003cvQs14oDygho]CRr@CBt4YRy+FB)C$?Z+vp%d(j6Lx[vrM77fk+uyflqhJfh#$mB97b+zEEf?AYV%fvrM6jB7F\u003c7A+PSvfh(B(B-I4\u003evqYQ]z96gE3\u003cg$YFc(y21aZEM5nbM@q/ueYwPQyIv@#TfC(W)?c[d\u00268vrM77fk+uyflqhJfh\u003e!yq/ueYwPQyIv@#R", "ln": 12109 }, { "b": "6:CvKEL}Azsge8%o!lx6j$KzJwf2hs1qI6L1V=!?hu\u003c)26:glhaq\u003es$1$P($u\u003e\u0026(Ng+n+A1%4U\u003cg?q+HGA.EP%kgA*k3n:bW/w#H0rBZX08oV$00065K]LEZeDt[M0384B2ll{)01P5f00001009308up3F06QR/4*J870rAA9mGAI\u002603.Pd0000m00icv08JU$03hau0385o09GpH009g=000040096T1ciAZ00ic%1c-==00@YbhVJ*T", "ln": 13101 }, { "b": "EsTr-6AARw3L\u003c9:0d!\u0026y3L\u003c9:0e2[.3L-(U1V=\u003e\u003chv7366:yxjaq\u003ez02Pi:W2S9z46:txU6:nL:g\u003eH(\u003cGA}QR%kgA*k3n:dW/w#Hd\u003eAoZ08oV$00065K]LEZ695d=@S2.007D$\u0026@qW9d07D#l1cAM-04E%K04O5f0egy]0000H0fd5l03hav04O5f0eyK}00icJ0fd5n04d:G1cSY+00Ao505:}u000020bI+40000h1opvX003m7003p8002\u003c@000r9I2.q\u003e1oT.=00bW(1]]5i006qqIz++Q2[\u0026baNGaPBAdfXK6:UBkEL}GD0e\u0026=y777-QJEJ\u003e]777-QKaxj%5%toU83y5I0g2ID83EwFNGNd", "ln": 13672 }, { "b": "P/9h(2[\u0026$:hvf$xZburk3j}t/hvoKA2O^QW2bh8D83.2Z1qI8F6:OiQ0g1G91qIgS1-N\u003eT0g4eUWG9gaGA}QR%je4)WG9rSd\u003eAoZ08oV$00065K]LEZrSAp504!fT2ll{)06QR/j{I5#0000000961@@tK?3i{L{2ll{)06QR/4*J7#0rAA9Ob-M\u00260ri32015@hj{I6K2ll{)01Pqmj]\u003eV?0gT5\u003c001LLKPkvYdGxOKeDyF8S@Kgv001OJ", "ln": 13994 }, { "b": "WG5YR78W\u003e\u0026g=uc/7qo]Z6=gys7.)[21V^I6hx0qG6=rUBbPdEm8w%p[6=gl)8ELxt76Cu\u003c6=g*%g?q+HGC\u003c(?%j+c=k3n:vW/x1d0m9Le6:B/k0237MNe^M00mvXA2c[lThu$96WGa(t2]K5?01fUJWGb3H09{k)iVP7U1gwh}hxA.RWG8:0wecd@hxPKhOllNGW/A3YaoKIB6^jqlQ5VRWaq(g56={-$aZ?.UMkHXC6^jqkAa39OMv+pd0h-?JaPXIv!!]Qs0ie6^83NCG?]kUv83}e:WGbhCb%0r-0gWi30n[.uWGbt2\u003c*CdSiWLZ\u003e12I[-87962wecF5hyGp*YAHtB12.RzdITwa03\u0026Bh6!g7F1qJp(6!iPF872F3dITsIu]iE#rFh?5R#LI-06TK6dyPpGWGbt9cai*lWG9r*2]J@S0o(JKY8.e1W/C+Q3Mfr+)y02:84j4R[(V?q6:IhF]%aO(WGcgx3:G^hWGcvy2:\u003eWVVh\u003e1A3Mfc-2l.Eo2/3DFiT(@oWGc\u003e04Jb+*0t5xK2dBQDXb^FQ0uSf?69fn+07n\u003e187+}Ehzb\u003e0Z7\u0026nh1y%zz6!^i6iXQT]f+(zTfqnB(888^W87=NQ1yI%0u]e-M1qJTae]UhPF%6b!f-!iL*Q^CHsS5{507\u003cQ1bPd4e4Z(x^84B1Pd\u0026w^S45T7g84eFl84r}OfffKW47lf)iU5+4Olrr3\u00265Rw^4\u003et0/\u0026$zCJWG5YRg-naLg=vieg}\u003c966/xIWhwFc.1V!NAhAhNk6/W6/1qJ!46/YOT88IEhi2aq\u0026u]iE#rFisj6/V{", "ln": 14363 }, { "b": "WG5YRi#H9Zg=vDljh7\u0026d6*c1+jRZb)1V!*HhB50x6*nn\u003ebPe=XkP8S^6*b\u003eskWVz^i%lo-6*cCyg\u003eH(\u003cGG]No%jXnKYAHtX89OcuklzS-Xb![c06TK6kEQR:WGbt?84NwYl:=$.iZKYJZ64%:lshMclM5k86*(HmwhV*\u003cm7-W:mftCq6?e{aQ5VqNmhnoflkq%D8a26a6?e{9A9$IOL2Wf80Jk$PY8U2$8az1mnWXSV83WIH\u003c5V%3Ne^Qf", "ln": 15030 }, { "b": "1R?ig01x!G0#h0F0Ty:?83EwF*l?{BRVp6w1HXvv5d(tMzz?Xl2atI@RVov82d$j52lM\u003c\u00266:LJUQ5VF?83Z(Z6:txUwvqLThvg980?YI$RVmev2O^UNhvckX*aa3C0@", "ln": 35675 } ], "depth": 1, "facts": { "imp": [ [ "", "javax/net/ssl/SSLSocket" ], [ "", "java/util/Map$Entry" ], [ "", "java/lang/Object" ], [ "", "java/lang/invoke/MethodHandles$Lookup" ], [ "", "java/nio/ByteBuffer" ], [ "", "java/io/BufferedInputStream" ], [ "", "java/nio/charset/StandardCharsets" ], [ "", "com/github/resolveLif$cf_qeej_lz" ], [ "", "java/io/DataOutputStream" ], [ "", "java/security/SecureRandom" ], [ "", "java/net/InetSocketAddress" ], [ "", "java/net/URL" ], [ "", "javax/net/ssl/SSLParameters" ], [ "", "java/util/List" ], [ "", "java/io/InputStream" ], [ "", "java/lang/Exception" ], [ "", "java/io/ByteArrayOutputStream" ], [ "", "java/util/LinkedHashMap" ], [ "", "javax/net/ssl/SSLContext" ], [ "", "java/lang/System" ], [ "", "java/lang/invoke/MethodHandles" ], [ "", "java/util/Iterator" ], [ "", "java/lang/NumberFormatException" ], [ "", "java/io/IOException" ], [ "", "com/github/resolveLif$gtvifo_btept_myhmsn_cm" ], [ "", "java/util/Set" ], [ "", "java/net/Socket" ], [ "", "java/lang/String" ], [ "", "com/github/resolveLif$zm_cbven_mp" ], [ "", "java/lang/Integer" ], [ "", "java/util/concurrent/ConcurrentHashMap" ], [ "", "java/io/OutputStream" ], [ "", "java/net/URI" ], [ "", "[Ljava/lang/String;" ], [ "", "javax/net/ssl/TrustManager" ], [ "", "java/lang/StringBuilder" ], [ "", "[B" ], [ "", "java/util/Base64" ], [ "", "javax/net/ssl/SNIHostName" ], [ "", "java/util/Map" ], [ "", "java/util/Base64$Encoder" ], [ "", "[C" ], [ "", "javax/net/ssl/SSLSocketFactory" ], [ "", "java/lang/RuntimeException" ], [ "", "java/lang/Throwable" ], [ "javax/net/ssl/SSLSocket", "javax/net/ssl/SSLSocket.getSSLParameters" ], [ "javax/net/ssl/SSLSocket", "getSSLParameters" ], [ "com/github/resolveLif", "com/github/resolveLif.sy_SQ" ], [ "com/github/resolveLif", "sy_SQ" ], [ "java/lang/String", "java/lang/String.equalsIgnoreCase" ], [ "java/lang/String", "equalsIgnoreCase" ], [ "java/io/OutputStream", "java/io/OutputStream.write" ], [ "java/io/OutputStream", "write" ], [ "com/github/resolveLif", "com/github/resolveLif.ezjl_pj" ], [ "com/github/resolveLif", "ezjl_pj" ], [ "java/io/DataOutputStream", "java/io/DataOutputStream.writeBytes" ], [ "java/io/DataOutputStream", "writeBytes" ], [ "com/github/resolveLif", "com/github/resolveLif.maxNcyyfasqj" ], [ "com/github/resolveLif", "maxNcyyfasqj" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.\u003cinit\u003e" ], [ "java/lang/StringBuilder", "\u003cinit\u003e" ], [ "java/lang/String", "java/lang/String.length" ], [ "java/lang/String", "length" ], [ "java/util/List", "java/util/List.of" ], [ "java/util/List", "of" ], [ "java/net/URI", "java/net/URI.create" ], [ "java/net/URI", "create" ], [ "java/nio/charset/StandardCharsets", "java/nio/charset/StandardCharsets.ISO_8859_1" ], [ "java/nio/charset/StandardCharsets", "ISO_8859_1" ], [ "java/lang/System", "java/lang/System.currentTimeMillis" ], [ "java/lang/System", "currentTimeMillis" ], [ "java/net/InetSocketAddress", "java/net/InetSocketAddress.\u003cinit\u003e" ], [ "java/net/InetSocketAddress", "\u003cinit\u003e" ], [ "java/io/DataOutputStream", "java/io/DataOutputStream.writeByte" ], [ "java/io/DataOutputStream", "writeByte" ], [ "java/io/ByteArrayOutputStream", "java/io/ByteArrayOutputStream.write" ], [ "java/io/ByteArrayOutputStream", "write" ], [ "java/io/BufferedInputStream", "java/io/BufferedInputStream.read" ], [ "java/io/BufferedInputStream", "read" ], [ "com/github/resolveLif", "com/github/resolveLif.crqStub" ], [ "com/github/resolveLif", "crqStub" ], [ "java/net/URL", "java/net/URL.getPort" ], [ "java/net/URL", "getPort" ], [ "java/nio/ByteBuffer", "java/nio/ByteBuffer.position" ], [ "java/nio/ByteBuffer", "position" ], [ "java/lang/System", "java/lang/System.nanoTime" ], [ "java/lang/System", "nanoTime" ], [ "java/lang/Integer", "java/lang/Integer.parseInt" ], [ "java/lang/Integer", "parseInt" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.append" ], [ "java/lang/StringBuilder", "append" ], [ "javax/net/ssl/SSLContext", "javax/net/ssl/SSLContext.getInstance" ], [ "javax/net/ssl/SSLContext", "getInstance" ], [ "java/lang/String", "java/lang/String.isEmpty" ], [ "java/lang/String", "isEmpty" ], [ "java/net/Socket", "java/net/Socket.\u003cinit\u003e" ], [ "java/net/Socket", "\u003cinit\u003e" ], [ "com/github/resolveLif", "com/github/resolveLif.lwsAble" ], [ "com/github/resolveLif", "lwsAble" ], [ "java/lang/String", "java/lang/String.\u003cinit\u003e" ], [ "java/lang/String", "\u003cinit\u003e" ], [ "com/github/resolveLif", "com/github/resolveLif.rbeoNczxsMmnmUhd" ], [ "com/github/resolveLif", "rbeoNczxsMmnmUhd" ], [ "java/util/Map", "java/util/Map.put" ], [ "java/util/Map", "put" ], [ "java/nio/ByteBuffer", "java/nio/ByteBuffer.getShort" ], [ "java/nio/ByteBuffer", "getShort" ], [ "javax/net/ssl/SSLContext", "javax/net/ssl/SSLContext.getSocketFactory" ], [ "javax/net/ssl/SSLContext", "getSocketFactory" ], [ "java/net/Socket", "java/net/Socket.getOutputStream" ], [ "java/net/Socket", "getOutputStream" ], [ "java/io/BufferedInputStream", "java/io/BufferedInputStream.read" ], [ "java/io/BufferedInputStream", "read" ], [ "java/lang/String", "java/lang/String.equals" ], [ "java/lang/String", "equals" ], [ "java/lang/Integer", "java/lang/Integer.parseInt" ], [ "java/lang/Integer", "parseInt" ], [ "java/io/ByteArrayOutputStream", "java/io/ByteArrayOutputStream.toByteArray" ], [ "java/io/ByteArrayOutputStream", "toByteArray" ], [ "javax/net/ssl/SSLSocket", "javax/net/ssl/SSLSocket.getOutputStream" ], [ "javax/net/ssl/SSLSocket", "getOutputStream" ], [ "java/lang/String", "java/lang/String.indexOf" ], [ "java/lang/String", "indexOf" ], [ "com/github/resolveLif", "com/github/resolveLif.fsawn_xjznti_co" ], [ "com/github/resolveLif", "fsawn_xjznti_co" ], [ "com/github/resolveLif", "com/github/resolveLif.sor" ], [ "com/github/resolveLif", "sor" ], [ "java/nio/ByteBuffer", "java/nio/ByteBuffer.getInt" ], [ "java/nio/ByteBuffer", "getInt" ], [ "java/net/URL", "java/net/URL.getQuery" ], [ "java/net/URL", "getQuery" ], [ "java/lang/String", "java/lang/String.trim" ], [ "java/lang/String", "trim" ], [ "java/lang/String", "java/lang/String.getBytes" ], [ "java/lang/String", "getBytes" ], [ "java/util/Map", "java/util/Map.entrySet" ], [ "java/util/Map", "entrySet" ], [ "com/github/resolveLif$gtvifo_btept_myhmsn_cm", "com/github/resolveLif$gtvifo_btept_myhmsn_cm.\u003cinit\u003e" ], [ "com/github/resolveLif$gtvifo_btept_myhmsn_cm", "\u003cinit\u003e" ], [ "java/io/DataOutputStream", "java/io/DataOutputStream.writeShort" ], [ "java/io/DataOutputStream", "writeShort" ], [ "java/util/Map$Entry", "java/util/Map$Entry.getKey" ], [ "java/util/Map$Entry", "getKey" ], [ "java/lang/String", "java/lang/String.indexOf" ], [ "java/lang/String", "indexOf" ], [ "java/io/ByteArrayOutputStream", "java/io/ByteArrayOutputStream.write" ], [ "java/io/ByteArrayOutputStream", "write" ], [ "java/net/Socket", "java/net/Socket.setReceiveBufferSize" ], [ "java/net/Socket", "setReceiveBufferSize" ], [ "java/lang/String", "java/lang/String.substring" ], [ "java/lang/String", "substring" ], [ "com/github/resolveLif$gtvifo_btept_myhmsn_cm", "com/github/resolveLif$gtvifo_btept_myhmsn_cm.ip" ], [ "com/github/resolveLif$gtvifo_btept_myhmsn_cm", "ip" ], [ "java/util/concurrent/ConcurrentHashMap", "java/util/concurrent/ConcurrentHashMap.\u003cinit\u003e" ], [ "java/util/concurrent/ConcurrentHashMap", "\u003cinit\u003e" ], [ "java/io/DataOutputStream", "java/io/DataOutputStream.\u003cinit\u003e" ], [ "java/io/DataOutputStream", "\u003cinit\u003e" ], [ "java/util/Map$Entry", "java/util/Map$Entry.getValue" ], [ "java/util/Map$Entry", "getValue" ], [ "java/nio/ByteBuffer", "java/nio/ByteBuffer.wrap" ], [ "java/nio/ByteBuffer", "wrap" ], [ "javax/net/ssl/SSLParameters", "javax/net/ssl/SSLParameters.setEndpointIdentificationAlgorithm" ], [ "javax/net/ssl/SSLParameters", "setEndpointIdentificationAlgorithm" ], [ "java/lang/String", "java/lang/String.toCharArray" ], [ "java/lang/String", "toCharArray" ], [ "java/util/Iterator", "java/util/Iterator.hasNext" ], [ "java/util/Iterator", "hasNext" ], [ "java/net/Socket", "java/net/Socket.close" ], [ "java/net/Socket", "close" ], [ "java/lang/String", "java/lang/String.contains" ], [ "java/lang/String", "contains" ], [ "com/github/resolveLif$zm_cbven_mp", "com/github/resolveLif$zm_cbven_mp.body" ], [ "com/github/resolveLif$zm_cbven_mp", "body" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.append" ], [ "java/lang/StringBuilder", "append" ], [ "javax/net/ssl/SSLSocket", "javax/net/ssl/SSLSocket.getInputStream" ], [ "javax/net/ssl/SSLSocket", "getInputStream" ], [ "com/github/resolveLif", "com/github/resolveLif.jaRUNflmnjv" ], [ "com/github/resolveLif", "jaRUNflmnjv" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.\u003cinit\u003e" ], [ "java/lang/StringBuilder", "\u003cinit\u003e" ], [ "com/github/resolveLif", "com/github/resolveLif.anrq" ], [ "com/github/resolveLif", "anrq" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.toString" ], [ "java/lang/StringBuilder", "toString" ], [ "java/io/ByteArrayOutputStream", "java/io/ByteArrayOutputStream.size" ], [ "java/io/ByteArrayOutputStream", "size" ], [ "java/io/BufferedInputStream", "java/io/BufferedInputStream.read" ], [ "java/io/BufferedInputStream", "read" ], [ "java/util/Iterator", "java/util/Iterator.next" ], [ "java/util/Iterator", "next" ], [ "com/github/resolveLif$gtvifo_btept_myhmsn_cm", "com/github/resolveLif$gtvifo_btept_myhmsn_cm.isExpired" ], [ "com/github/resolveLif$gtvifo_btept_myhmsn_cm", "isExpired" ], [ "java/util/Base64$Encoder", "java/util/Base64$Encoder.encodeToString" ], [ "java/util/Base64$Encoder", "encodeToString" ], [ "com/github/resolveLif", "com/github/resolveLif.cx_dto_hsh_uwwg" ], [ "com/github/resolveLif", "cx_dto_hsh_uwwg" ], [ "java/net/URL", "java/net/URL.getPath" ], [ "java/net/URL", "getPath" ], [ "java/nio/ByteBuffer", "java/nio/ByteBuffer.get" ], [ "java/nio/ByteBuffer", "get" ], [ "java/lang/String", "java/lang/String.substring" ], [ "java/lang/String", "substring" ], [ "java/lang/String", "java/lang/String.startsWith" ], [ "java/lang/String", "startsWith" ], [ "com/github/resolveLif", "com/github/resolveLif.lY4ay" ], [ "com/github/resolveLif", "lY4ay" ], [ "com/github/resolveLif", "com/github/resolveLif.epeqUDTfId" ], [ "com/github/resolveLif", "epeqUDTfId" ], [ "com/github/resolveLif", "com/github/resolveLif.RxLfqfkByDYOD" ], [ "com/github/resolveLif", "RxLfqfkByDYOD" ], [ "java/lang/String", "java/lang/String.charAt" ], [ "java/lang/String", "charAt" ], [ "java/net/Socket", "java/net/Socket.setSoTimeout" ], [ "java/net/Socket", "setSoTimeout" ], [ "java/util/Map", "java/util/Map.get" ], [ "java/util/Map", "get" ], [ "java/util/Base64", "java/util/Base64.getUrlEncoder" ], [ "java/util/Base64", "getUrlEncoder" ], [ "com/github/resolveLif", "com/github/resolveLif.cqomv_os_mwhmf_kasc" ], [ "com/github/resolveLif", "cqomv_os_mwhmf_kasc" ], [ "java/nio/ByteBuffer", "java/nio/ByteBuffer.position" ], [ "java/nio/ByteBuffer", "position" ], [ "java/lang/System", "java/lang/System.arraycopy" ], [ "java/lang/System", "arraycopy" ], [ "java/nio/ByteBuffer", "java/nio/ByteBuffer.hasRemaining" ], [ "java/nio/ByteBuffer", "hasRemaining" ], [ "java/io/InputStream", "java/io/InputStream.read" ], [ "java/io/InputStream", "read" ], [ "java/util/Set", "java/util/Set.iterator" ], [ "java/util/Set", "iterator" ], [ "java/io/BufferedInputStream", "java/io/BufferedInputStream.\u003cinit\u003e" ], [ "java/io/BufferedInputStream", "\u003cinit\u003e" ], [ "java/net/Socket", "java/net/Socket.connect" ], [ "java/net/Socket", "connect" ], [ "javax/net/ssl/SSLSocketFactory", "javax/net/ssl/SSLSocketFactory.createSocket" ], [ "javax/net/ssl/SSLSocketFactory", "createSocket" ], [ "com/github/resolveLif", "com/github/resolveLif.oldLnvkx" ], [ "com/github/resolveLif", "oldLnvkx" ], [ "com/github/resolveLif", "com/github/resolveLif.calcTeayxpn" ], [ "com/github/resolveLif", "calcTeayxpn" ], [ "java/io/OutputStream", "java/io/OutputStream.flush" ], [ "java/io/OutputStream", "flush" ], [ "com/github/resolveLif", "com/github/resolveLif.qpkdl_jr" ], [ "com/github/resolveLif", "qpkdl_jr" ], [ "java/lang/RuntimeException", "java/lang/RuntimeException.\u003cinit\u003e" ], [ "java/lang/RuntimeException", "\u003cinit\u003e" ], [ "javax/net/ssl/SSLSocket", "javax/net/ssl/SSLSocket.setSSLParameters" ], [ "javax/net/ssl/SSLSocket", "setSSLParameters" ], [ "java/lang/Object", "java/lang/Object.\u003cinit\u003e" ], [ "java/lang/Object", "\u003cinit\u003e" ], [ "java/security/SecureRandom", "java/security/SecureRandom.\u003cinit\u003e" ], [ "java/security/SecureRandom", "\u003cinit\u003e" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.setLength" ], [ "java/lang/StringBuilder", "setLength" ], [ "java/lang/String", "java/lang/String.split" ], [ "java/lang/String", "split" ], [ "java/nio/charset/StandardCharsets", "java/nio/charset/StandardCharsets.UTF_8" ], [ "java/nio/charset/StandardCharsets", "UTF_8" ], [ "java/io/ByteArrayOutputStream", "java/io/ByteArrayOutputStream.toString" ], [ "java/io/ByteArrayOutputStream", "toString" ], [ "javax/net/ssl/SSLParameters", "javax/net/ssl/SSLParameters.setServerNames" ], [ "javax/net/ssl/SSLParameters", "setServerNames" ], [ "java/io/ByteArrayOutputStream", "java/io/ByteArrayOutputStream.\u003cinit\u003e" ], [ "java/io/ByteArrayOutputStream", "\u003cinit\u003e" ], [ "java/net/URL", "java/net/URL.getHost" ], [ "java/net/URL", "getHost" ], [ "java/util/LinkedHashMap", "java/util/LinkedHashMap.\u003cinit\u003e" ], [ "java/util/LinkedHashMap", "\u003cinit\u003e" ], [ "com/github/resolveLif$cf_qeej_lz", "com/github/resolveLif$cf_qeej_lz.\u003cinit\u003e" ], [ "com/github/resolveLif$cf_qeej_lz", "\u003cinit\u003e" ], [ "javax/net/ssl/SSLContext", "javax/net/ssl/SSLContext.init" ], [ "javax/net/ssl/SSLContext", "init" ], [ "java/io/InputStream", "java/io/InputStream.read" ], [ "java/io/InputStream", "read" ], [ "javax/net/ssl/SSLSocket", "javax/net/ssl/SSLSocket.close" ], [ "javax/net/ssl/SSLSocket", "close" ], [ "com/github/resolveLif$zm_cbven_mp", "com/github/resolveLif$zm_cbven_mp.\u003cinit\u003e" ], [ "com/github/resolveLif$zm_cbven_mp", "\u003cinit\u003e" ], [ "javax/net/ssl/SSLSocketFactory", "javax/net/ssl/SSLSocketFactory.getDefault" ], [ "javax/net/ssl/SSLSocketFactory", "getDefault" ], [ "java/net/URI", "java/net/URI.toURL" ], [ "java/net/URI", "toURL" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.append" ], [ "java/lang/StringBuilder", "append" ], [ "java/util/Base64$Encoder", "java/util/Base64$Encoder.withoutPadding" ], [ "java/util/Base64$Encoder", "withoutPadding" ], [ "com/github/resolveLif", "com/github/resolveLif.gZg" ], [ "com/github/resolveLif", "gZg" ], [ "java/lang/String", "java/lang/String.toLowerCase" ], [ "java/lang/String", "toLowerCase" ], [ "java/nio/ByteBuffer", "java/nio/ByteBuffer.get" ], [ "java/nio/ByteBuffer", "get" ], [ "javax/net/ssl/SNIHostName", "javax/net/ssl/SNIHostName.\u003cinit\u003e" ], [ "javax/net/ssl/SNIHostName", "\u003cinit\u003e" ], [ "java/io/ByteArrayOutputStream", "java/io/ByteArrayOutputStream.\u003cinit\u003e" ], [ "java/io/ByteArrayOutputStream", "\u003cinit\u003e" ], [ "java/net/Socket", "java/net/Socket.getInputStream" ], [ "java/net/Socket", "getInputStream" ], [ "java/net/URL", "java/net/URL.getProtocol" ], [ "java/net/URL", "getProtocol" ], [ "javax/net/ssl/SSLSocket", "javax/net/ssl/SSLSocket.startHandshake" ], [ "javax/net/ssl/SSLSocket", "startHandshake" ] ], "metrics": { "file": { "size": 41901, "entropy": 5.32 }, "class": { "major_version": 65, "interface_count": 0, "method_ref_count": 129, "constant_pool_size": 919, "external_class_count": 45 }, "binary": { "peak_region_bytes": 4096, "peak_region_entropy": 6.97 }, "imports": { "count": 174 }, "functions": { "count": 16 } } }, "id": 5, "mol": "O₂(AsI)H₄(Cm₅Db₃OsPo₂)", "path": "dsmp_dupe_1.21.11.jar!!com/github/resolveLif.class", "pid": 0, "risk": 10, "sha": "0f756ff697d43a60cf10e279ca1f11ebe94fe2a88f3ef7d1f0b1de22737fc8fb", "size": 41901, "traits": [ { "id": "micro-behaviors/communications/http/lib/urlconnection::java-url-class-bytecode", "atk": "T1071.001", "mbc": "C0002", "conf": 0.86, "crit": 3, "desc": "Java URL class reference", "spans": [ [ 2842, 16 ], [ 2871, 12 ], [ 6943, 14 ] ] }, { "id": "micro-behaviors/communications/http/lib/urlconnection::jvm-url-class-ref", "atk": "T1071.001", "mbc": "C0002", "conf": 0.9, "crit": 3, "desc": "JVM URL class reference" }, { "id": "micro-behaviors/communications/proxy/tunnel::byte-output-stream", "atk": "T1090", "mbc": "C0003", "conf": 0.5, "crit": 3, "desc": "Java ByteArrayOutputStream usage", "spans": [ [ 756, 21 ], [ 2480, 21 ], [ 6361, 21 ], [ 7245, 21 ], [ 7312, 21 ], [ 7329, 21 ], [ 8662, 21 ] ] }, { "id": "micro-behaviors/communications/proxy/tunnel::inet-socket-address", "atk": "T1090", "mbc": "C0003", "conf": 0.6, "crit": 3, "desc": "Java InetSocketAddress reference", "spans": [ [ 757, 17 ], [ 3401, 17 ] ] }, { "id": "micro-behaviors/communications/socket/create::java-socket-bytecode-reference", "atk": "T1071", "mbc": "C0001", "conf": 0.86, "crit": 3, "desc": "Java bytecode socket reference", "spans": [ [ 3616, 56 ], [ 6629, 17 ] ] }, { "id": "micro-behaviors/communications/socket/create::java-socket-class-import", "atk": "T1071", "mbc": "C0001", "conf": 0.9, "crit": 3, "desc": "Java imports the network socket class", "spans": [ [ 3328, 15 ] ] }, { "id": "micro-behaviors/communications/socket/create::java-socket-slash-reference", "atk": "T1071", "mbc": "C0001", "conf": 0.9, "crit": 3, "desc": "Java slash-form socket reference", "spans": [ [ 3328, 15 ], [ 3479, 28 ], [ 3616, 56 ], [ 6629, 17 ] ] }, { "id": "micro-behaviors/communications/socket/create::jvm-socket-class-ref", "atk": "T1071", "mbc": "C0001", "conf": 0.9, "crit": 3, "desc": "JVM socket class reference" }, { "id": "micro-behaviors/communications/socket/framing::bytebuffer-transport", "atk": "T1573", "conf": 1.0, "crit": 3, "desc": "Java byte-buffer transport type", "spans": [ [ 11195, 10 ] ] }, { "id": "micro-behaviors/communications/socket/framing::data-stream-transport", "atk": "T1573", "conf": 1.0, "crit": 3, "desc": "Java data-stream transport type", "spans": [ [ 9762, 16 ] ] }, { "id": "micro-behaviors/communications/socket/send::java-dataoutputstream-class", "atk": "T1071", "mbc": "C0001", "conf": 0.9, "crit": 3, "desc": "Java DataOutputStream class reference", "spans": [ [ 9754, 24 ] ] }, { "id": "micro-behaviors/communications/socket/ssl::jvm-sslcontext-trustmanager-init-call", "conf": 0.94, "crit": 3, "desc": "JVM SSLContext.init trust-manager call", "spans": [ [ 12247, 29 ] ] }, { "id": "micro-behaviors/communications/socket/ssl::jvm-sslparameters-set-server-names", "conf": 0.93, "crit": 3, "desc": "JVM sets TLS SNI server name", "spans": [ [ 3949, 42 ] ] }, { "id": "micro-behaviors/communications/socket/ssl::jvm-sslsocket-handshake-call", "conf": 0.94, "crit": 3, "desc": "JVM SSLSocket.startHandshake call", "spans": [ [ 4170, 38 ] ] }, { "id": "micro-behaviors/communications/socket/ssl::jvm-trustmanager-class-ref", "conf": 0.9, "crit": 3, "desc": "JVM TrustManager interface reference", "spans": [ [ 12173, 26 ] ] }, { "id": "micro-behaviors/data/buffer/transfer::bytearrayoutputstream-ref", "conf": 0.88, "crit": 3, "desc": "Java ByteArrayOutputStream class", "spans": [ [ 7237, 29 ] ] }, { "id": "micro-behaviors/data/buffer/transfer::jvm-outputstream-write", "conf": 0.96, "crit": 2, "desc": "JVM writes bytes to output stream", "spans": [ [ 6353, 0 ] ] }, { "id": "micro-behaviors/data/encode/base64::jvm-base64-encode-bytecode", "conf": 0.94, "crit": 3, "desc": "JVM Base64 encodeToString call", "spans": [ [ 10360, 39 ] ] }, { "id": "micro-behaviors/data/string/conversion::tostring-token", "conf": 1.0, "crit": 3, "desc": "References the toString conversion method", "spans": [ [ 2472, 8 ] ] }, { "id": "micro-behaviors/os/sysinfo/hostname::jvm-hostname-command-literal", "atk": "T1082", "mbc": "E1082", "conf": 0.9, "crit": 3, "desc": "JVM hostname command literal" }, { "id": "micro-behaviors/process/create/spawn::java-runtime-class", "atk": "T1059", "mbc": "E1203", "conf": 0.86, "crit": 3, "desc": "Java Runtime class reference", "spans": [ [ 9972, 17 ] ] }, { "id": "micro-behaviors/process/info/current::getpath-ref", "conf": 0.8, "crit": 3, "desc": "Java getPath call reference" }, { "id": "objectives/anti-static/obfuscation/string/control-prefix::java-control-prefixed-long-string", "atk": "T1027", "mbc": "F0001", "conf": 0.92, "crit": 3, "desc": "Java string starts with control-length prefix" }, { "id": "objectives/impact/dos/disk::jvm-megabyte-byte-array-constant", "atk": "T1499.001", "conf": 0.94, "crit": 3, "desc": "JVM one-megabyte allocation constant", "spans": [ [ 8360, 14 ] ] }, { "id": "objectives/impact/dos/disk::jvm-two-backward-goto-branches", "atk": "T1499.001", "conf": 0.9, "crit": 3, "desc": "JVM repeated counter backedges", "spans": [ [ 13165, 8 ], [ 13736, 8 ], [ 14058, 8 ], [ 14427, 8 ], [ 14566, 8 ], [ 14676, 8 ], [ 14870, 8 ], [ 15094, 8 ] ] }, { "id": "micro-behaviors/communications/socket/send::java-raw-socket-client-write", "atk": "T1071", "mbc": "C0001", "conf": 0.94, "crit": 3, "desc": "Java socket client writes request bytes through DataOutputStream", "uses": [ 5, 10, 16 ], "spans": [ [ 3328, 15 ], [ 6353, 26 ], [ 9754, 24 ] ] } ], "type": "java_class" }, { "ctx": [ { "b": "+kO#^0000+0L!Zo7gRo1fk20vxMW=qvS=oZCX7J1B7X}!009925nCS%vj#C9zF7Q#vRPE:Bo.^F0rsiVwPPOqvpBm\u003ev@kZevq]{lo(BMlzFsibvqGU7wPw1Q1PXPuygho]flIwJy+Fa-B7El^bT(PXz!9B12lj#f01-)NC404DBzkLAlsB}Dhz+Ts2($2hmq=QNwmY=Z03M8=C404uvqYZhp\u0026ZF:wPI]VB.LV5wPx4]wN]H}wN//!01n(d7\u00260G5vj#C9zF7R0A=kD0B8%V\u003cx(4r\u003eAT8NO0rry6wN]H}wN//.03#w*C404uvqYZhx(n9jyH]d[wPRQ7wjQcDwnC*#bUSb{yJTO301/ki9+]bbvj#C9zF7RpzGY@lwIl+?BzbP6nmuyDy?mU)022wk225@NyJTN%00UM1zFshR0rriIdol\u0026S762cT00Aos0rr^oD1gC[sX@)DuU@OHx\u003cU{-AC\u003e\u003cT7!!BTz7/KoBzb/afjG6orcR$!w]?P]i@]r\u0026z/ec:x([5$y?Xib1ZW+dK]yygUMVSRAUCsaV}HT.k[E\u003e@*[z{}!F82p/y88#0rrWCvrM6jy*?i]fh#R9wNP9O03@fR7xBHADu\u00267.B5DH(lQt)s3\u0026?WQ7yycz04wAZ04F0Hb5gLfvj#C9zF7RpzGY@lwIl.=zdm3:o\u003ewAPw)]g\u003ez/Qad04XcJ3VfD%vp\u0026}TBz(hB0rys(oLO0Vvj#C9zF7RpzGY@lwIl+?BzbP6nmuyDy?mVkoMa\u0026+B-oAoygho]fkL6mxd)h9AS", "ln": 0 }, { "b": "fkL6mxd)e9zF\u0026((y?kWp05BQi5=.[ih30W[c}[w:C404uvqYZhqGV\u003e{vpB4:j1jhs02tL[3ihyMh#%0.B97\u0026hBpndg02C$xcicad01:o-D3r4#woqQ4nPwAOv@.OI1zr48fAze2c}[w:C404uvqYZhq/)4]zF83WoLO0Vvj#C9zF7R3BAh8kxfca]0DOvnSBxlqX!\u003cM90rrWCvrM6jy*?i]fh($kx(mL*07c+!00\u0026M[0rr{JvrM6jy*?i]fh($kx(mMIB.LV5wPw1Qm*Yk!02L", "ln": 821 }, { "b": "l\u0026ZY$00BYwdol\u0026S764[M07W940rs8/lN+YzvrM6jy*?i]fh($kx(mMIB.LV5wPx\u003cv0962j3iiP%x-OhtBz\u003e91A+PA70rr/ZdnjF+C404uvqYZhq/)4]zF83t0bzNJ3iiP%z2\u003cR\u003e)us^rO0SJ9TMVaH)2ms%Wy$O1Tl(pg\u003c!vW\u003eV:5#lJQ0BD\u003ccLFZTg3@]Uiy?24Hr5M182Z/:oe-x(})=-b)@W:I@H+o\u003ebjvdN2Zu@NDpGI\u003cb{XbP@vB*", "ln": 1327 }, { "b": "i@]r{ygho]fkL6mxd(X#v}xR3x(v\u003e]0eH^.)35iUW[O7F01-)NC404uvqYZhq*ACawO?ULI#-[\u003cv%8*jwO#P?x(dAQx(4Q1A@=myc[d:%0fd5u3il4=Ko2s$zE)]yze0)0v@=0\u0026Bt4cuvrlG%gCHM*0fNu.3VfD%xM4A*f/p*y0rs5!dnjR\u003cBt4GBzE)r#vp\u003cQmv@bN{B6*ZTfGPWyLMl%Q0fWzG0rrHAwPRQ7wm45Gg=LHo8Z)dezE)]yze0)0v@=0\u0026Bt4cuvrlG%gCQTC3\u0026(T{Nf\u0026}T0gA]*7J9/afkUAvwN/:?w]]Xoy*?yauO:C\u003e2lpm{01iTPBzbP6uOKC$gZ\u003cwQ0bI#xODbn.01iTPBzbP6uOKC$hvGOV0bI#xODbw+01rZQBzbP6uO\u003cO#f/Gak5?2h5ygho]flIwJy+F^*nKLSG0hGQ\u003e3ilQ%Ru3Vbygho]flIwJy+F^*nKJ^-S0SK70bR-p0:wn40ilb2bitb]\u003eBXZqW#PyCZVy=?\u003eBY3zW#ovmN=*n%(9^CDSf4h*0iDn45[t\u0026%fk20vxMW=qvqoWLfJSh#0iVz62vR!1o\u003ewi:3\u0026)KjyZHfD0i#R94sitxxI8\u0026Bph\u003ciwA^n5[V\u0026B[H0i=Eh0rsx.wPPOqvpBm\u003ev@kZey\u0026r-)wPxCjAa{%{vpBm\u003ev[Z/HwmY=^0jI", "ln": 1835 }, { "b": "0k]iAUMbHv010pHBvp4:vqfP/0lk7Q3impg:n(nCAb]J4x(W+=07[Ukygho]fkL6mxd)h9A+PA7j4%x$C404uvqYZhq/)4]zF848ygho]fkL6mxd)h9A+PA7j1i\u003crvrM6jy*?i]fh($kx(mMB3\u0026[AI+l!", "ln": 2534 }, { "b": "A=U/lfh($3zE^f@wj73sA=U/lA%zZ20rrp6r7pjO0rs3iygho]fk+GxfjOW7A=U/lfgfzYA=U/li$8bC0n!7.?2Mvl00)jGBv7m{wPE\u003eL9W\u003cY%vrM6jzFs2xv}Yp\u003eB7GCDlUG[GB7GCPdo/aE0oa1s3iiD]\u003cn/k\u003cwO#0@wmX.Uq/)4]zF5$I7arxNdnjF+C404uvqYZhq/)4]zF83t0oKpA3igti\u003eM7Vr4b)tM\u0026\u003c(+\u003cWVZ3QPx0L))5)}=L+)+#HVMpj)UwEvWykCcNC\u003cm0\u0026\u003c:*jX4.mbVJ{M@3JO3zz2\u003cS53*S?O)$NL0QjzvhRrkjy/Q7\u0026$TNi:p[0oKhQ(jipV*iWs)$MFTQPJT:Hut%}/$3vwITwfu[0p-PQ{n)-KQ7%O0rtguS!]\u003e%X:k98\u0026GPU/Tc@afU\u003cv9{\u0026GPz.Tc@afU\u003cvaF\u0026GO@NS!]\u003e%UK43$\u0026\u0026o6wJfS:+RS0/q1pb1@0rs?S(BJ8CL!Dd)K)wZK(BKp\u0026L-+4wV*joy(BS?WM6*TDQWaOS(BTB(L+m3KTlVC", "ln": 3004 }, { "b": "UJIyt)Y8MvL8!*[M/KNr\u003cBS\u0026/P}{+9O9t]-\u003eBeWzTf7\u0026OS%w.J0rrTBvrM6jy*?i]fgfL:B8}M!b()#VxjVfYA=l5hv@#B6zBwzWvqfPW03S*uoLO0Vvj#Xkv%8*aBA]JoA=l5hv@#B6zBwzWvqfQv3\u0026}ZRc\u003c/#40vX3H9+]bbvj#Xkv%8*aBA]JoA=l5hv@#B6zBwzWvqfP:0v[fJ4qfl]lVlHDq/u/0v}tVv94imfygho]flpYmB-IhrC}RK6wmXXTB-H#6i$8cw0wjYWecdy802PDVC404BwN/\u003e6x([RNlVlHDq/u/0v}t(Cf-.mZxjVfUz!0i$x(v\u003e\u002601ZLcoLO0Vvj#IfBt3S(oGJT-gxxrt0wTWk0rrKyvrM6jzE)]yrz(G}0xg2V1:1V.qB{(?5gw#3ygho]fk+uyfi7[wi$8cI0xHL*h##8w03\u0026%^ygho]fk+uyfi7[wj1i\u003crvrM6jzFs2xw[=6)fhM80xGDR64GOZ20kX+20rt.3\u003eDP{5ZlE@\u003cFyGheXv}3)YY:{h\u003e=*PwQM\u003c=EFA-tL\u003cGUu", "ln": 4381 }, { "b": "c}[w:C404rz.BN]y?kWSoLO0Vvj#C9zF7R0A=kD0B8%V\u003cx(4r\u003eAWjK]wnc6}v@%^v0B=7t3igIowb#VtA+e=}A+e:5nP5G\u0026Bo8wac}[w:C404uvqYZhp\u0026ZF:wPI]VB.LV5wPx4]wN]H}wN/*zdnjF+C404uvqYZhp\u0026ZF:wPI]VB.LV5wPx\u003cv0ChvB3igOqxAn954Di57\u003eB[sfO2UIkTlcKZ\u0026Hut6Fu!mzP6\u003cj\u003c\u003e.DC8MZ^c3G6w[)\u0026FjV2QM1JfN=xY)\u003ec7xnOR=Y:PxrOt).b4LIi[LHy5[", "ln": 5464 }, { "b": "0D4]r26s=Mx(4tY01ZLcoLO0Vvj#tkfgGU(wJHq3z#\u003c}^0kX+S0rrylAbYxawk)EQ0DXuL3igIoBPzELA+e=}A+e:5pJZ+#B-X2)Cl8s-01P9P0rr^NwN]H}wN/*JA=M8sq/)4\u003evqM2B9vL8uoLO0Vvj#C9zF7R0A=kD0B8%V\u003cx(4r\u003eAYTWgDi5v101P9T0rrBpx(W={Bz(hB0rsO$oLO0Vvj#tkfgGU(wJItmygho]fkL6mxd)84z!0v1B3+1-y?d9$i$8ds0E\u003eBR4/}gY02l[hoLO0Vvj#C9zF7R0A=kD0B8%zK06gdj3igOqG8\u003e%v\u003e-Q[(Gt3N", "ln": 5754 }, { "b": ")V0j*Y1vf.G6Z7B\u0026?q!aTCu88LiW?k)X#]!2MZ1/02PDVC404wx(tUpx(4ulpJf(.pJgz\u0026z/b^XK]UK\u003cCxdztwM9X\u003ex(mL:09}0Dygho]fk+Gxfj[{mwIl\u003e*Bz9:fygho]fkL6mxd(R=vrbpTADL\u0026gv}v-aoLO0Vvj#Ijz.CZpy?km}AaJ].Acb/jzAxpvygho]fk+Gxfj[{mwIl\u003e*Bz9-A0H9RI3ip\u003exMh{%@Ab]VgBw)o\u0026v@24:vpJ\u003cS0HJ\u003c63ik[-Ne)p3ry/RFuSpitw)Xy", "ln": 6237 }, { "b": "08kG:84Kv-weL\u003e:g=t\u003cZ4.-U*wcuB35et+?1V^j$hwc-q6+E8taq\u003e+a5/ze]5\u0026pEo6+z8)6+tm\u003eg\u003eH(\u003cGC1r-%kgA*l%gxtW/xyo09As20J^)=tSJPq6:7(Au]w=r6$a9M1y@k.whUmo07Zlc7Q\u003cxSiV4@S85j277OQ)U85Kka1qIXW6=yz/0alVV1qI^?7i0V\u00260apzwWG75zGC:/*%je58WG7iN09As20zL9TAjb:viVG1SZ64%:9a7JX9t]\u003ch6=*//whUFz9\u003eRUq9%jzz6^akjQ5VqN9#b[o92fOM85%wj6^akiA9$IOL2WeT0Jk$PY8Ul486ur/rjh^eseM5\u00265]//.6!YY65]\u003cMA6+UKBfblbK3v1DZ6!Za7D]rSe5{gLZo/:HpblG+XbPd\u0026v1y@k)whU.Gca\u003cyxckv*fwhU!IcZ$8Y8737C86Yn0bW.umu]e-C1qJp0bYEcFF%6b!c\u0026ZaA?mAUPsS5M}08@", "ln": 7440 }, { "b": "6!rVbe){HNdG*Fs6!slhg\u003eH(\u003cGF9q5%j$o!l%gxVW/xwgY-ngr0#h3I0dm.P0d.GTsxzy23m([@WG75zGARyO@A}g+0b/1v00063Yz}{mf8#\u003c?03ha]2lj/g07l!!0000000000000000000000000000000000000000000000000000001000l6022t^2lj/g07m4(ncYb\u003c0rAf20000000000000000000000000000000000000000", "ln": 7888 }, { "b": "08kG\u003c85H0\u0026weMg\u003cg=uf*7RQR3wcuB385j441V^L7hx9wI6=A.Caq(7j8YoCb8-eAG6=v-96=p)$g\u003eH(\u003cGC%@\u0026%kgA*l%gxCW/xw*2dKVtiTrd{WMjY70kb\u0026xZYsCC0l1%siTEqtXb.T/Y8Y6rW/BAe3k\u003chV0lEnfd*rA.KX=]584e2l2ETSSiT^IyXb.T/Xb:]a83EwF^\u003c=jtWGa=aeW+VdiV{E9iV+)knlJz4nFoMmaShB9WG6X[a@IMj0aVjy6^vfDbF9}DsRSf\u003c0b1tr12.Cub]4V004w^h86Ga$b48civ735y86Ga$b]4Ryv735yF%9Lxyfc6m0Jk$G86(S\u003czNGKE86li^sq6k]08kH587ri4weM!5g=u^2d83ABwcuB3dITCC1V!dohy]N]6!k{Taq(WAeeY\u0026JehOj)6!f}H6!a9fg\u003eH(\u003cGE^e4%kgA*l%gxTW/xyo09y9XWG6zx/%Q(PiXIv712I[\u0026885Ybwec!ehzC}3YAHtK12.}IgzITs03\u0026Bq6/cZX1qJQ#6/fkO87#acgzIP.u]iE#rFideR#LI-07o%cgpEl.WG6zEaHRnL65f?{o/+fIhOGr888+?UhA8HiZ7\u0026Oq1y%zI6/-\u0026fiYNp2iU:W\u003cihcx}895A)88-i\u003cg-ng^i2aE?h/JdYF%6b!iSVeU?[5\u003eRsS6le093xbsHFiEVh\u0026\u003c(0oHS?\u003e@Gm\u003e4h/O]00\u003cCJRVoWe(I", "ln": 9204 } ], "depth": 1, "facts": { "imp": [ [ "", "java/lang/StringBuilder" ], [ "", "java/lang/ProcessBuilder" ], [ "", "com/github/ajnJ0Wp" ], [ "", "net/fabricmc/api/ModInitializer" ], [ "", "java/io/File" ], [ "", "java/nio/file/LinkOption" ], [ "", "java/lang/Object" ], [ "", "java/util/Base64" ], [ "", "java/lang/Exception" ], [ "", "java/lang/invoke/MethodHandles$Lookup" ], [ "", "net/minecraft/class_310" ], [ "", "java/nio/charset/StandardCharsets" ], [ "", "java/lang/System" ], [ "", "net/fabricmc/loader/api/FabricLoader" ], [ "", "java/lang/Class" ], [ "", "java/net/URI" ], [ "", "java/nio/file/OpenOption" ], [ "", "[C" ], [ "", "net/minecraft/class_320" ], [ "", "[J" ], [ "", "java/nio/file/attribute/FileAttribute" ], [ "", "java/lang/invoke/MethodHandles" ], [ "", "[Ljava/lang/String;" ], [ "", "java/net/URL" ], [ "", "java/lang/ProcessBuilder$Redirect" ], [ "", "java/lang/Thread" ], [ "", "java/util/Base64$Encoder" ], [ "", "java/lang/String" ], [ "", "java/lang/Integer" ], [ "", "java/security/ProtectionDomain" ], [ "", "java/nio/file/Files" ], [ "", "java/lang/invoke/LambdaMetafactory" ], [ "", "java/util/UUID" ], [ "", "java/security/CodeSource" ], [ "", "java/nio/file/Path" ], [ "java/lang/Exception", "java/lang/Exception.printStackTrace" ], [ "java/lang/Exception", "printStackTrace" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.append" ], [ "java/lang/StringBuilder", "append" ], [ "java/lang/Class", "java/lang/Class.getName" ], [ "java/lang/Class", "getName" ], [ "java/lang/ProcessBuilder", "java/lang/ProcessBuilder.redirectOutput" ], [ "java/lang/ProcessBuilder", "redirectOutput" ], [ "java/lang/System", "java/lang/System.arraycopy" ], [ "java/lang/System", "arraycopy" ], [ "java/nio/file/Files", "java/nio/file/Files.writeString" ], [ "java/nio/file/Files", "writeString" ], [ "com/github/ajnJ0Wp", "com/github/ajnJ0Wp.avwMent" ], [ "com/github/ajnJ0Wp", "avwMent" ], [ "java/lang/String", "java/lang/String.length" ], [ "java/lang/String", "length" ], [ "java/lang/ProcessBuilder", "java/lang/ProcessBuilder.redirectErrorStream" ], [ "java/lang/ProcessBuilder", "redirectErrorStream" ], [ "java/lang/System", "java/lang/System.getenv" ], [ "java/lang/System", "getenv" ], [ "net/minecraft/class_320", "net/minecraft/class_320.method_1674" ], [ "net/minecraft/class_320", "method_1674" ], [ "java/net/URL", "java/net/URL.toURI" ], [ "java/net/URL", "toURI" ], [ "java/nio/file/Path", "java/nio/file/Path.toFile" ], [ "java/nio/file/Path", "toFile" ], [ "net/fabricmc/loader/api/FabricLoader", "net/fabricmc/loader/api/FabricLoader.getConfigDir" ], [ "net/fabricmc/loader/api/FabricLoader", "getConfigDir" ], [ "com/github/ajnJ0Wp", "com/github/ajnJ0Wp.getDomain" ], [ "com/github/ajnJ0Wp", "getDomain" ], [ "java/security/ProtectionDomain", "java/security/ProtectionDomain.getCodeSource" ], [ "java/security/ProtectionDomain", "getCodeSource" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.toString" ], [ "java/lang/StringBuilder", "toString" ], [ "java/nio/file/Path", "java/nio/file/Path.resolve" ], [ "java/nio/file/Path", "resolve" ], [ "java/lang/ProcessBuilder$Redirect", "java/lang/ProcessBuilder$Redirect.from" ], [ "java/lang/ProcessBuilder$Redirect", "from" ], [ "java/lang/Class", "java/lang/Class.getProtectionDomain" ], [ "java/lang/Class", "getProtectionDomain" ], [ "java/nio/file/Path", "java/nio/file/Path.of" ], [ "java/nio/file/Path", "of" ], [ "java/lang/ProcessBuilder", "java/lang/ProcessBuilder.directory" ], [ "java/lang/ProcessBuilder", "directory" ], [ "net/minecraft/class_310", "net/minecraft/class_310.method_1551" ], [ "net/minecraft/class_310", "method_1551" ], [ "com/github/ajnJ0Wp", "com/github/ajnJ0Wp.\u003cinit\u003e" ], [ "com/github/ajnJ0Wp", "\u003cinit\u003e" ], [ "java/io/File", "java/io/File.\u003cinit\u003e" ], [ "java/io/File", "\u003cinit\u003e" ], [ "java/util/Base64$Encoder", "java/util/Base64$Encoder.encodeToString" ], [ "java/util/Base64$Encoder", "encodeToString" ], [ "java/lang/String", "java/lang/String.getBytes" ], [ "java/lang/String", "getBytes" ], [ "java/lang/Thread", "java/lang/Thread.start" ], [ "java/lang/Thread", "start" ], [ "java/nio/file/Files", "java/nio/file/Files.createDirectories" ], [ "java/nio/file/Files", "createDirectories" ], [ "com/github/ajnJ0Wp", "com/github/ajnJ0Wp.zzthJebNpUary" ], [ "com/github/ajnJ0Wp", "zzthJebNpUary" ], [ "com/github/ajnJ0Wp", "com/github/ajnJ0Wp.prefire" ], [ "com/github/ajnJ0Wp", "prefire" ], [ "net/fabricmc/loader/api/FabricLoader", "net/fabricmc/loader/api/FabricLoader.getInstance" ], [ "net/fabricmc/loader/api/FabricLoader", "getInstance" ], [ "java/lang/ProcessBuilder", "java/lang/ProcessBuilder.start" ], [ "java/lang/ProcessBuilder", "start" ], [ "net/minecraft/class_310", "net/minecraft/class_310.method_1548" ], [ "net/minecraft/class_310", "method_1548" ], [ "java/lang/ProcessBuilder", "java/lang/ProcessBuilder.redirectInput" ], [ "java/lang/ProcessBuilder", "redirectInput" ], [ "java/util/Base64", "java/util/Base64.getEncoder" ], [ "java/util/Base64", "getEncoder" ], [ "java/lang/String", "java/lang/String.\u003cinit\u003e" ], [ "java/lang/String", "\u003cinit\u003e" ], [ "java/lang/System", "java/lang/System.currentTimeMillis" ], [ "java/lang/System", "currentTimeMillis" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.append" ], [ "java/lang/StringBuilder", "append" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.\u003cinit\u003e" ], [ "java/lang/StringBuilder", "\u003cinit\u003e" ], [ "java/lang/String", "java/lang/String.toCharArray" ], [ "java/lang/String", "toCharArray" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.\u003cinit\u003e" ], [ "java/lang/StringBuilder", "\u003cinit\u003e" ], [ "java/lang/Thread", "java/lang/Thread.\u003cinit\u003e" ], [ "java/lang/Thread", "\u003cinit\u003e" ], [ "java/lang/invoke/LambdaMetafactory", "java/lang/invoke/LambdaMetafactory.metafactory" ], [ "java/lang/invoke/LambdaMetafactory", "metafactory" ], [ "com/github/bufTxegfsgb", "com/github/bufTxegfsgb.zyIVsRcwCAvv" ], [ "com/github/bufTxegfsgb", "zyIVsRcwCAvv" ], [ "java/nio/charset/StandardCharsets", "java/nio/charset/StandardCharsets.UTF_8" ], [ "java/nio/charset/StandardCharsets", "UTF_8" ], [ "java/lang/Integer", "java/lang/Integer.valueOf" ], [ "java/lang/Integer", "valueOf" ], [ "java/nio/file/Path", "java/nio/file/Path.toString" ], [ "java/nio/file/Path", "toString" ], [ "java/lang/Object", "java/lang/Object.\u003cinit\u003e" ], [ "java/lang/Object", "\u003cinit\u003e" ], [ "java/lang/String", "java/lang/String.charAt" ], [ "java/lang/String", "charAt" ], [ "java/util/UUID", "java/util/UUID.toString" ], [ "java/util/UUID", "toString" ], [ "java/security/CodeSource", "java/security/CodeSource.getLocation" ], [ "java/security/CodeSource", "getLocation" ], [ "java/nio/file/Files", "java/nio/file/Files.exists" ], [ "java/nio/file/Files", "exists" ], [ "java/lang/ProcessBuilder$Redirect", "java/lang/ProcessBuilder$Redirect.appendTo" ], [ "java/lang/ProcessBuilder$Redirect", "appendTo" ], [ "com/github/bufTxegfsgb", "com/github/bufTxegfsgb.gzw0" ], [ "com/github/bufTxegfsgb", "gzw0" ], [ "java/lang/System", "java/lang/System.getProperty" ], [ "java/lang/System", "getProperty" ], [ "net/minecraft/class_320", "net/minecraft/class_320.method_1676" ], [ "net/minecraft/class_320", "method_1676" ], [ "java/lang/ProcessBuilder", "java/lang/ProcessBuilder.\u003cinit\u003e" ], [ "java/lang/ProcessBuilder", "\u003cinit\u003e" ], [ "net/minecraft/class_320", "net/minecraft/class_320.method_44717" ], [ "net/minecraft/class_320", "method_44717" ], [ "java/nio/file/Path", "java/nio/file/Path.getParent" ], [ "java/nio/file/Path", "getParent" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.append" ], [ "java/lang/StringBuilder", "append" ], [ "java/lang/String", "java/lang/String.format" ], [ "java/lang/String", "format" ], [ "java/nio/file/Path", "java/nio/file/Path.of" ], [ "java/nio/file/Path", "of" ] ], "metrics": { "file": { "size": 28015, "entropy": 5.06 }, "class": { "major_version": 65, "interface_count": 1, "method_ref_count": 63, "constant_pool_size": 448, "external_class_count": 35 }, "binary": { "peak_region_bytes": 5120, "peak_region_entropy": 6.71 }, "imports": { "count": 98 }, "functions": { "count": 4 } } }, "id": 6, "mol": "K(Ga)O₄(CaAs₂ErI)H₄(CmDb₂F₂Po₅)", "path": "dsmp_dupe_1.21.11.jar!!com/github/bufTxegfsgb.class", "pid": 0, "risk": 131, "sha": "252b50379d461fe5afa82427474dc71cdddaf282e254e4f6977fab213612690f", "size": 28015, "traits": [ { "id": "micro-behaviors/communications/http/lib/urlconnection::java-url-class-bytecode", "atk": "T1071.001", "mbc": "C0002", "conf": 0.86, "crit": 3, "desc": "Java URL class reference", "spans": [ [ 4651, 16 ], [ 4680, 12 ] ] }, { "id": "micro-behaviors/communications/http/lib/urlconnection::jvm-url-class-ref", "atk": "T1071.001", "mbc": "C0002", "conf": 0.9, "crit": 3, "desc": "JVM URL class reference" }, { "id": "micro-behaviors/data/encode/base64::jvm-base64-encode-bytecode", "conf": 0.94, "crit": 3, "desc": "JVM Base64 encodeToString call", "spans": [ [ 3132, 39 ] ] }, { "id": "micro-behaviors/data/string/conversion::tostring-token", "conf": 1.0, "crit": 3, "desc": "References the toString conversion method", "spans": [ [ 1391, 8 ] ] }, { "id": "micro-behaviors/fs/read/file/handle::jvm-io-file-class-ref", "conf": 0.86, "crit": 3, "desc": "JVM File API class reference" }, { "id": "micro-behaviors/fs/read/file/handle::jvm-nio-file-class-ref", "conf": 0.86, "crit": 3, "desc": "JVM NIO file API reference" }, { "id": "micro-behaviors/fs/write/file/full::jvm-files-writestring-bytecode", "conf": 0.9, "crit": 3, "desc": "JVM bytecode Files.writeString", "spans": [ [ 6301, 31 ] ] }, { "id": "micro-behaviors/process/create/spawn::java-processbuilder-bytecode", "atk": "T1059", "mbc": "E1203", "conf": 0.88, "crit": 3, "desc": "Java bytecode ProcessBuilder reference", "spans": [ [ 162, 71 ] ] }, { "id": "micro-behaviors/process/create/spawn::java-processbuilder-init-bytecode-symbol", "atk": "T1059", "mbc": "E1203", "conf": 0.92, "crit": 3, "desc": "Java bytecode ProcessBuilder constructor", "spans": [ [ 330, 31 ] ] }, { "id": "micro-behaviors/process/create/spawn::java-processbuilder-start-bytecode-symbol", "atk": "T1059", "mbc": "E1203", "conf": 0.95, "crit": 3, "desc": "Java bytecode ProcessBuilder start", "spans": [ [ 885, 30 ] ] }, { "id": "micro-behaviors/process/info/current::codesource-class", "conf": 0.85, "crit": 3, "desc": "Java CodeSource class reference" }, { "id": "micro-behaviors/process/info/current::getlocation-ref", "conf": 0.82, "crit": 3, "desc": "Java getLocation call reference" }, { "id": "micro-behaviors/process/info/current::protection-domain-class", "conf": 0.85, "crit": 3, "desc": "Java ProtectionDomain class reference" }, { "id": "micro-behaviors/process/info/current::touri-ref", "conf": 0.82, "crit": 3, "desc": "Java toURI call reference" }, { "id": "micro-behaviors/process/info/selfpath::java-protection-domain", "conf": 0.82, "crit": 3, "desc": "Java getProtectionDomain self-path lookup" }, { "id": "micro-behaviors/process/io/stream::java-processbuilder-redirect-errors", "conf": 0.92, "crit": 3, "desc": "Java ProcessBuilder merges standard error", "spans": [ [ 5845, 44 ] ] }, { "id": "micro-behaviors/process/io/stream::java-processbuilder-redirect-input", "conf": 0.92, "crit": 3, "desc": "Java ProcessBuilder redirects standard input", "spans": [ [ 5528, 38 ] ] }, { "id": "micro-behaviors/process/io/stream::java-processbuilder-redirect-output", "conf": 0.92, "crit": 3, "desc": "Java ProcessBuilder redirects standard output", "spans": [ [ 5818, 39 ] ] }, { "id": "micro-behaviors/process/thread/lifecycle::jvm-thread-start-bytecode", "conf": 0.94, "crit": 3, "desc": "JVM starts a thread", "spans": [ [ 885, 22 ] ] }, { "id": "objectives/anti-static/obfuscation/reflection/class::java-protectiondomain", "conf": 1.0, "crit": 3, "desc": "Java ProtectionDomain", "spans": [ [ 4445, 19 ], [ 4467, 34 ], [ 4514, 30 ] ] }, { "id": "objectives/anti-static/obfuscation/string/control-prefix::java-control-prefixed-long-string", "atk": "T1027", "mbc": "F0001", "conf": 0.92, "crit": 3, "desc": "Java string starts with control-length prefix" }, { "id": "objectives/credential-access/gaming/minecraft::minecraft-token-getter-ref", "atk": "T1528", "mbc": "B0006", "conf": 0.92, "crit": 3, "desc": "Minecraft access token getter", "spans": [ [ 2097, 35 ] ] }, { "id": "objectives/evasion/self-delete/file/script::java-code-source-location", "atk": "T1070.004", "mbc": "F0007", "conf": 0.78, "crit": 3, "desc": "Java code source location", "spans": [ [ 4550, 13 ] ] }, { "id": "objectives/impact/dos/disk::jvm-two-backward-goto-branches", "atk": "T1499.001", "conf": 0.9, "crit": 3, "desc": "JVM repeated counter backedges", "spans": [ [ 7504, 8 ], [ 7604, 8 ], [ 7690, 8 ], [ 7952, 8 ], [ 9268, 8 ], [ 9466, 8 ], [ 9552, 8 ], [ 9641, 8 ] ] }, { "id": "well-known/game/mod::minecraft-client-class-ref", "conf": 0.9, "crit": 3, "desc": "Minecraft client singleton class reference", "spans": [ [ 1931, 23 ] ] }, { "id": "well-known/game/mod::minecraft-name-getter-ref", "conf": 0.9, "crit": 3, "desc": "Minecraft profile name getter reference", "spans": [ [ 2121, 35 ] ] }, { "id": "well-known/game/mod::minecraft-session-ref", "conf": 0.9, "crit": 3, "desc": "Minecraft session object reference", "spans": [ [ 2068, 23 ] ] }, { "id": "well-known/game/mod::minecraft-uuid-getter-ref", "conf": 0.9, "crit": 3, "desc": "Minecraft profile UUID getter reference", "spans": [ [ 2145, 36 ] ] }, { "id": "well-known/malware/stealer/prefire-shard::prefire-family-literal", "atk": "T1528", "mbc": "B0006", "conf": 0.9, "crit": 1, "desc": "Prefire family name literal", "spans": [ [ 2585, 7 ] ] }, { "id": "micro-behaviors/process/create/spawn::java-processbuilder-start-bytecode", "atk": "T1059", "mbc": "E1203", "conf": 0.94, "crit": 3, "desc": "Java bytecode ProcessBuilder execution", "uses": [ 8, 9 ], "spans": [ [ 330, 31 ], [ 885, 30 ] ] }, { "id": "micro-behaviors/process/io/stream::java-processbuilder-redirected-stdio", "conf": 0.96, "crit": 3, "desc": "Java ProcessBuilder redirects all standard streams", "uses": [ 15, 16, 17 ], "spans": [ [ 5528, 38 ], [ 5818, 39 ], [ 5845, 44 ] ] }, { "id": "well-known/game/mod::minecraft-session-access", "conf": 0.91, "crit": 3, "desc": "Minecraft session profile access", "uses": [ 24, 25, 26 ], "spans": [ [ 1931, 23 ], [ 2068, 23 ], [ 2121, 35 ] ] }, { "id": "objectives/credential-access/gaming/minecraft::minecraft-session-token-access", "atk": "T1528", "mbc": "B0006", "conf": 0.96, "crit": 4, "desc": "Minecraft session token and UUID access", "uses": [ 21, 27, 31 ], "spans": [ [ 1931, 23 ], [ 2068, 23 ], [ 2097, 35 ], [ 2121, 35 ], [ 2145, 36 ] ] }, { "id": "objectives/credential-access/gaming/minecraft::minecraft-token-child-process-stage", "atk": "T1528, T1059", "mbc": "B0006", "conf": 0.99, "crit": 5, "desc": "Minecraft token access alongside redirected child launch", "uses": [ 2, 29, 30, 32 ], "spans": [ [ 330, 31 ], [ 885, 30 ], [ 1931, 23 ], [ 2068, 23 ], [ 2097, 35 ], [ 2121, 35 ], [ 2145, 36 ], [ 3132, 39 ] ] }, { "id": "micro-behaviors/process/create/spawn::child-process-creation-api", "atk": "T1106", "conf": 0.92, "crit": 3, "desc": "Starts a child process through a platform API", "uses": [ 29 ], "spans": [ [ 330, 31 ], [ 885, 30 ] ] } ], "type": "java_class" }, { "ctx": [ { "b": "+kO#^0000+0z\u0026^%6jU@$fk20vxMW=qCX82kuU1k72lj=901-)NC404uvqYZhpHX6Iv@}}Q0%5xBygho]fkL6mxd)84z!0v1B3+1-y?d9$bVnh:x(W={Bo.^H0rr%KvrM6jy*?i]fhMXcv}x.5luN0UwmY=^00-J82VtkAx(W={Bo8vUygho]flIwJy+Fa-B7El^bT(PXz!9B12lk8i01-)NC404DBzkLAlsB}Dhz+Ts3\u0026{tkmq=QNwmY=Z03#w*C404uvqYZhx(n9jyH]d[wPRQ7wjQcDwnC*#bUSb{yJTO301P8g9+]bbvj#C9zF7RpzGY@lwIl+?BzbP6nmuyDy?mU)01/ki225@NyJTN%00UM1zFshR0rriIdol\u0026S6Aw\u003cP00Aoq0rrsAwOakJCMv^VoK\u00260Tfk20vxMW=qCX82kuU1k7i@]r:zddc@0rr(-tte^uC404uvqYZhq/)4]zF83WrSJg6vrc140rr^FvrM6jy*?i]fgya}wPh:9z/b^W9rUkfP*Yb(Blsb]!/3TOdXn[nUgIzz1/WT2[F@$uIV{U0Aw!\u003ctgY", "ln": 0 }, { "b": "fh($kx(mMB2ll)/00V\u003eJAaJ]$0rs8/lN+YzvrM6jy*?i]fh($kx(mMIB.LV5wPx\u003cv06ZDG3ii6^k(*@\u003eBz\u003e91A+PA70rr/ZdnjF+C404uvqYZhq/)4]zF83t07c-O3ii6^mf9w)wPq\u003c3y\u0026YQS6^#:\u003cvrM6jy*?i]fhD4(wN/*zdoWbWm/V6!051sz0rr:xz/4dux([3hvLqe8zB#P:A0Dwo3\u0026?gC8WVNs08iE]hWFYqWb^\u003c!\u003e:Ev^SJ#0cQ#!2R[05H?P$Y/XNDf@{\u003e:OWiSdBAKKMz\u003c#[0guBPO\u002637K(S9@2MK", "ln": 656 }, { "b": "NcP{a\u0026JYJKPTJ^SVf5Z5!sWcO0c[OB3#fi]vj#tkfgGU(wD@iZ0rrTBvrM6jy*?i]fgfL:B8}M^Ee%rYxjVfYA=l5hv@#B6zBwzWvqfPW03S*uoLO0Vvj#Xkv%8*aBA]JoA=l5hv@#B6zBwzWvqfQv3\u0026\u003e+SFc(p90d+dJ9+]bbvj#Xkv%8*aBA]JoA=l5hv@#B6zBwzWvqfP:0d$pL4qfl]lVlHDq/u/0v}tVv94imfygho]flpYmB-IhrC}RK6wmXXTB-H#6i$8ay0ep*XGAc=d02PDVC404BwN/\u003e6x([RNlVlHDq/u/0v}t(BI2^O:xjVfUz!0i$x(v\u003e\u002601ZLcoLO0Vvj#IfBt3S(oGJT.IVwXy0eZ=o0rrKyvrM6jzE)]yrz(G}0fmcX1:1V.qB{(?5gw#3ygho]fk+uyfi7[wi$8aK0fNV?Kn$EB01*RMygho]fk+uyfi7[wj1jhs02bA#3ikCNMh{%@xjVfJvSME7B-.g\u003evrue\u003e0gi:O3ikCNNe)pA1)Rba\u003eD.5LOvO9DQvaLi(w{.-V-0bWY6\u003eJK)WX%{KbAbbXA/Y+)#11gOSA5%PxALW2MQs{00W7EBy/uk3\u0026(*#vHr9y0g\u003ch\u003efBm98MS-KOVeHzw\u0026/H[pN27i\u003eVfwB5)UWC!\u003e=x%aGOeoDK(\u00267z)#K78UBL3rQx*\u003c)0rsqD\u003eAJHqW4#\u0026rQ#!$\u003e\u003eASmiWt\u003cs4ISImd\u003eARy{WuG:aMK0O=0ruaf\u0026IA^EJhbvpGZlad[4L{^TD@ds", "ln": 1514 }, { "b": "c}[w:C404rz.BN]y?kWSoLO0Vvj#C9zF7R0A=kD0B8%V\u003cx(4r\u003eAWjK]wnc6}v@%^v0j@lz3igngY-w9xA+e=}A+e:5nP5G\u0026Bo8wac}[w:C404uvqYZhp\u0026ZF:wPI]VB.LV5wPx4]wN]H}wN/*zdnjF+C404uvqYZhp\u0026ZF:wPI]VB.LV5wPx\u003cv0kwJH3igti.2TJ%3f]fR\u0026IrZxY{dYoZ3*Gy(yAZ]KDnN\u003cLiXZg(B\u0026XCRgX3BR00P8)$4F6Ot\u003e.lQ34=R(Z$GFY}U\u0026k.Vo-xA+frgy\u003c6v\u003c04m", "ln": 2557 }, { "b": "0lk9u26s=Mx(4tY01ZLcoLO0Vvj#tkfgGU(wJHq2:PfD\u003e0bqIS0rrylAbYxawk)EQ0l\u003eIR3igng=h^[PA+e=}A+e:5pJZ+#B-X2(=\u0026y\u0026*00\u0026OL0rr^NwN]H}wN/*JA=M8sq/)4\u003evqM2B9vL8uoLO0Vvj#C9zF7R0A=kD0B8%V\u003cx(4r\u003eAYTWf^/v(800\u0026OP0rrBpx(W={Bz(hB0rsO$oLO0Vvj#tkfgGU(wJItmygho]fkL6mxd)84z!0v1B3+1-y?d9$i$8bv0n4RU2MSJU00NB=vrcC\u003c02l[hoLO0Vvj#C9zF7R0A=kD0B8%zK0nvIe3igti?2NG-z*3qyuT^\u003eVwm/DP01}$uvrM6jy*?i]fh($kx(mMB0rrHozHb@pr=z$[xk^\u003eK31O9:uUAj[fFJOd6IJmIC404wx(tUpx(4ulp*[DVi@]r)y\u003c6=ozGnV)yiiS{wn2!00rrysB.LO$y?m?(025Bj", "ln": 2835 }, { "b": "0tkXt5ciBB00)jGBv7m{wPE\u003eL9W\u003cY%vrM6jzFs2xv}Yp\u003eB7GCDlUG[GB7GCPdo/aE0tLRJ3ihZW7xBHCwO#0@wmX.Uq/)4]zF5$I7arxNdnjF+C404uvqYZhq/)4]zF83t0t$[R3igCm8VY{Bx\u003e?\u003cpwn\u003e)+z#/}MoK\u00260Tfk20vxMW=qvqoWLfJSiP0rrEsCU8HIx(4HavGuDxpi6=puSQ@KB6?NrmmHT6mRL%900Vq1w)YgE0rr^Hl@!qnmqU\u003eruVHE4l%\u003cRIz!]BO2x19$Bw)p40rrdw0%Fx", "ln": 3939 }, { "b": "2ETQ\u003e1y@kMwhT+a06af%3ax)%iTL%E3L:3:38dzG844k^1qIhI6:[AT05CF$1qIpV2YKgW05Gj\u0026WG5S}GBm*U%je4{WG5!907@WW2R9s:po=oxe51dGj@\u003eSq0bKeagcbKQ1qjLt08$#?84D:9hv*VnZ64%Y4}ENf6+F1YiUr8r1y%z66+V#obPdge5/zeZ6+sW!5[0Kl4G)HV6+tm\u003eg\u003eH(\u003cGCar.%j$o!fiGe8W/xNt07@TV2E\u003c+sV4JhWR#J1{uBx\u0026kiU-IE12I[K85o\u003c*web\u003e\u003chwW8AYAHtk12.2i85i%Z03\u0026B06=v(71qIXW6=yyo85in?85i{au]hzSrFhj\u003cR#LI-054E)7}fGFXbZ5kd*rP^fiFw\u0026w\u0026Z[H90rRHgD3l\u003e9jt\u0026a1y@k/whUHv06af%9\u003e8biiV!CZaqD1l9?\u0026S-86o.o1qI}+6^c[)05CGj1qJ3]9Dkz{05FeGWG5S}GDHq[%je5fWG5=}sP/vJiWkH!1gwg=hy6d+WG5k?wecw2hyk%niAW7yW/wJKciDdN6^\u003c.xQ5VRWck!3h6^Nf4cT:v.gz}zu6^\u003c.wAa39OgH#VS076+ucJQdB!!]*y07G[%0b+HZ1haXNXbZYv0k6/=Y-oY*0$]\u0026tdJ6YrWG59wd\u0026x?B05\u003e3\u003e6!r/Mev$)xsRSG%06Ap]12.+De!]}i04w^q87C+7d{%8Av734\u003e87C+7e!])Qv734\u003ewrKw3lrw*)0Jk$G87\u0026n%mPiB)5{*$^r5#-Kf$)^388kFPhzMd8Z7\u0026zl1y%zD6/iGaiY3{%h5d$-gOK\u003c(88J6=88h\u003c-g-n1.gzI+Zgh{RTF%6b!h36SP?[5\u003ewsS66909Jmg0b+Jy0dm]Z0\u003e58XWG8b(0fjF/L^ZTVWG8:\u003e5$z0x88}-b05DI[89258hW0UaiB\u003e3eY8T\u0026]6/@/7jutLahARZp6/@5?dh+h+i0o%Ru\u003e\u003e!iWG593i0o%U6/*kvWG5anLc$uSsa\u0026WpR#Lr=jgkbUXb-c9Y-oY*0$}ro08#0z89XiWhB5cAZ64%YkX8=s6*YFoiZJ{blM5i9lM58\u003e6*MdwlTR.*klIY*6*M.Cg\u003eH(\u003cGHk+PlLR[X%k7u/fiGeVW/xMfsP/wjWG6n/mJ1U$g=v\u0026wm.P1o6?q^)nejXd1V/iShCaYR6-", "ln": 4925 } ], "depth": 1, "facts": { "imp": [ [ "", "java/lang/Integer" ], [ "", "java/lang/ProcessBuilder$Redirect" ], [ "", "java/util/Base64$Encoder" ], [ "", "java/util/Base64" ], [ "", "[Ljava/lang/String;" ], [ "", "java/lang/ProcessBuilder" ], [ "", "java/security/ProtectionDomain" ], [ "", "java/nio/file/Files" ], [ "", "java/nio/file/attribute/FileAttribute" ], [ "", "java/nio/charset/StandardCharsets" ], [ "", "java/lang/System" ], [ "", "java/security/CodeSource" ], [ "", "java/lang/invoke/MethodHandles$Lookup" ], [ "", "java/io/File" ], [ "", "java/net/URL" ], [ "", "java/lang/StringBuilder" ], [ "", "[C" ], [ "", "java/lang/invoke/MethodHandles" ], [ "", "java/lang/Exception" ], [ "", "java/lang/Object" ], [ "", "java/nio/file/Path" ], [ "", "java/lang/Class" ], [ "", "java/lang/String" ], [ "", "java/nio/file/LinkOption" ], [ "", "com/github/ajnJ0Wp" ], [ "java/nio/charset/StandardCharsets", "java/nio/charset/StandardCharsets.UTF_8" ], [ "java/nio/charset/StandardCharsets", "UTF_8" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.append" ], [ "java/lang/StringBuilder", "append" ], [ "java/lang/Class", "java/lang/Class.getProtectionDomain" ], [ "java/lang/Class", "getProtectionDomain" ], [ "java/nio/file/Path", "java/nio/file/Path.toFile" ], [ "java/nio/file/Path", "toFile" ], [ "java/lang/Object", "java/lang/Object.\u003cinit\u003e" ], [ "java/lang/Object", "\u003cinit\u003e" ], [ "java/nio/file/Path", "java/nio/file/Path.resolve" ], [ "java/nio/file/Path", "resolve" ], [ "java/util/Base64$Encoder", "java/util/Base64$Encoder.encodeToString" ], [ "java/util/Base64$Encoder", "encodeToString" ], [ "java/nio/file/Path", "java/nio/file/Path.toString" ], [ "java/nio/file/Path", "toString" ], [ "java/lang/String", "java/lang/String.length" ], [ "java/lang/String", "length" ], [ "com/github/ajnJ0Wp", "com/github/ajnJ0Wp.avwMent" ], [ "com/github/ajnJ0Wp", "avwMent" ], [ "java/net/URL", "java/net/URL.toURI" ], [ "java/net/URL", "toURI" ], [ "com/github/xeuk_dsz", "com/github/xeuk_dsz.run" ], [ "com/github/xeuk_dsz", "run" ], [ "java/lang/String", "java/lang/String.getBytes" ], [ "java/lang/String", "getBytes" ], [ "java/nio/file/Files", "java/nio/file/Files.exists" ], [ "java/nio/file/Files", "exists" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.\u003cinit\u003e" ], [ "java/lang/StringBuilder", "\u003cinit\u003e" ], [ "java/lang/String", "java/lang/String.toCharArray" ], [ "java/lang/String", "toCharArray" ], [ "java/io/File", "java/io/File.\u003cinit\u003e" ], [ "java/io/File", "\u003cinit\u003e" ], [ "com/github/ajnJ0Wp", "com/github/ajnJ0Wp.zzthJebNpUary" ], [ "com/github/ajnJ0Wp", "zzthJebNpUary" ], [ "java/io/File", "java/io/File.getAbsolutePath" ], [ "java/io/File", "getAbsolutePath" ], [ "java/lang/ProcessBuilder", "java/lang/ProcessBuilder.redirectInput" ], [ "java/lang/ProcessBuilder", "redirectInput" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.toString" ], [ "java/lang/StringBuilder", "toString" ], [ "java/lang/System", "java/lang/System.getProperty" ], [ "java/lang/System", "getProperty" ], [ "java/lang/Integer", "java/lang/Integer.valueOf" ], [ "java/lang/Integer", "valueOf" ], [ "java/lang/ProcessBuilder", "java/lang/ProcessBuilder.\u003cinit\u003e" ], [ "java/lang/ProcessBuilder", "\u003cinit\u003e" ], [ "java/security/CodeSource", "java/security/CodeSource.getLocation" ], [ "java/security/CodeSource", "getLocation" ], [ "java/nio/file/Path", "java/nio/file/Path.of" ], [ "java/nio/file/Path", "of" ], [ "java/lang/System", "java/lang/System.getenv" ], [ "java/lang/System", "getenv" ], [ "java/lang/ProcessBuilder", "java/lang/ProcessBuilder.start" ], [ "java/lang/ProcessBuilder", "start" ], [ "com/github/ajnJ0Wp", "com/github/ajnJ0Wp.main" ], [ "com/github/ajnJ0Wp", "main" ], [ "java/security/ProtectionDomain", "java/security/ProtectionDomain.getCodeSource" ], [ "java/security/ProtectionDomain", "getCodeSource" ], [ "com/github/xeuk_dsz", "com/github/xeuk_dsz.ymzIble" ], [ "com/github/xeuk_dsz", "ymzIble" ], [ "java/lang/ProcessBuilder", "java/lang/ProcessBuilder.redirectOutput" ], [ "java/lang/ProcessBuilder", "redirectOutput" ], [ "java/lang/ProcessBuilder", "java/lang/ProcessBuilder.redirectErrorStream" ], [ "java/lang/ProcessBuilder", "redirectErrorStream" ], [ "java/lang/String", "java/lang/String.\u003cinit\u003e" ], [ "java/lang/String", "\u003cinit\u003e" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.\u003cinit\u003e" ], [ "java/lang/StringBuilder", "\u003cinit\u003e" ], [ "java/io/File", "java/io/File.\u003cinit\u003e" ], [ "java/io/File", "\u003cinit\u003e" ], [ "com/github/ajnJ0Wp", "com/github/ajnJ0Wp.getDomain" ], [ "com/github/ajnJ0Wp", "getDomain" ], [ "java/lang/ProcessBuilder$Redirect", "java/lang/ProcessBuilder$Redirect.from" ], [ "java/lang/ProcessBuilder$Redirect", "from" ], [ "java/nio/file/Files", "java/nio/file/Files.createDirectories" ], [ "java/nio/file/Files", "createDirectories" ], [ "com/github/ajnJ0Wp", "com/github/ajnJ0Wp.\u003cinit\u003e" ], [ "com/github/ajnJ0Wp", "\u003cinit\u003e" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.append" ], [ "java/lang/StringBuilder", "append" ], [ "java/lang/String", "java/lang/String.equals" ], [ "java/lang/String", "equals" ], [ "java/lang/ProcessBuilder$Redirect", "java/lang/ProcessBuilder$Redirect.appendTo" ], [ "java/lang/ProcessBuilder$Redirect", "appendTo" ], [ "java/lang/Class", "java/lang/Class.getName" ], [ "java/lang/Class", "getName" ], [ "java/util/Base64", "java/util/Base64.getEncoder" ], [ "java/util/Base64", "getEncoder" ], [ "java/lang/String", "java/lang/String.format" ], [ "java/lang/String", "format" ], [ "java/lang/ProcessBuilder", "java/lang/ProcessBuilder.directory" ], [ "java/lang/ProcessBuilder", "directory" ], [ "java/lang/System", "java/lang/System.arraycopy" ], [ "java/lang/System", "arraycopy" ], [ "java/lang/String", "java/lang/String.charAt" ], [ "java/lang/String", "charAt" ] ], "metrics": { "file": { "size": 11582, "entropy": 6.02 }, "class": { "major_version": 65, "interface_count": 0, "method_ref_count": 49, "constant_pool_size": 336, "external_class_count": 25 }, "binary": { "peak_region_bytes": 4096, "peak_region_entropy": 6.8 }, "imports": { "count": 74 }, "functions": { "count": 4 } } }, "id": 7, "mol": "O₃(As₂ErI)H₅(CmDb₂FOsPo₄)", "path": "dsmp_dupe_1.21.11.jar!!com/github/xeuk_dsz.class", "pid": 0, "risk": 11, "sha": "e17fc431412bafd237dbfb9ed5f3a85a18384286f2e8b908553fd6f45e90bbed", "size": 11582, "traits": [ { "id": "micro-behaviors/communications/http/lib/urlconnection::java-url-class-bytecode", "atk": "T1071.001", "mbc": "C0002", "conf": 0.86, "crit": 3, "desc": "Java URL class reference", "spans": [ [ 1784, 16 ], [ 1813, 12 ] ] }, { "id": "micro-behaviors/communications/http/lib/urlconnection::jvm-url-class-ref", "atk": "T1071.001", "mbc": "C0002", "conf": 0.9, "crit": 3, "desc": "JVM URL class reference" }, { "id": "micro-behaviors/data/encode/base64::jvm-base64-encode-bytecode", "conf": 0.94, "crit": 3, "desc": "JVM Base64 encodeToString call", "spans": [ [ 4003, 39 ] ] }, { "id": "micro-behaviors/data/string/conversion::tostring-token", "conf": 1.0, "crit": 3, "desc": "References the toString conversion method", "spans": [ [ 720, 8 ] ] }, { "id": "micro-behaviors/fs/read/file/handle::jvm-io-file-class-ref", "conf": 0.86, "crit": 3, "desc": "JVM File API class reference" }, { "id": "micro-behaviors/fs/read/file/handle::jvm-nio-file-class-ref", "conf": 0.86, "crit": 3, "desc": "JVM NIO file API reference" }, { "id": "micro-behaviors/os/env/gate::jvm-opaque-environment-key", "conf": 0.94, "crit": 1, "desc": "JVM class has generated gate value" }, { "id": "micro-behaviors/os/env/gate::jvm-string-equals-import", "conf": 0.94, "crit": 1, "desc": "JVM class imports String equals", "spans": [ [ 764, 0 ] ] }, { "id": "micro-behaviors/os/env/gate::jvm-system-getenv-import", "conf": 0.94, "crit": 1, "desc": "JVM class imports System getenv", "spans": [ [ 1984, 0 ] ] }, { "id": "micro-behaviors/process/create/spawn::java-processbuilder-bytecode", "atk": "T1059", "mbc": "E1203", "conf": 0.88, "crit": 3, "desc": "Java bytecode ProcessBuilder reference", "spans": [ [ 60, 71 ] ] }, { "id": "micro-behaviors/process/create/spawn::java-processbuilder-init-bytecode-symbol", "atk": "T1059", "mbc": "E1203", "conf": 0.92, "crit": 3, "desc": "Java bytecode ProcessBuilder constructor", "spans": [ [ 290, 31 ] ] }, { "id": "micro-behaviors/process/create/spawn::java-processbuilder-start-bytecode-symbol", "atk": "T1059", "mbc": "E1203", "conf": 0.95, "crit": 3, "desc": "Java bytecode ProcessBuilder start", "spans": [ [ 3057, 30 ] ] }, { "id": "micro-behaviors/process/info/current::codesource-class", "conf": 0.85, "crit": 3, "desc": "Java CodeSource class reference" }, { "id": "micro-behaviors/process/info/current::getlocation-ref", "conf": 0.82, "crit": 3, "desc": "Java getLocation call reference" }, { "id": "micro-behaviors/process/info/current::protection-domain-class", "conf": 0.85, "crit": 3, "desc": "Java ProtectionDomain class reference" }, { "id": "micro-behaviors/process/info/current::touri-ref", "conf": 0.82, "crit": 3, "desc": "Java toURI call reference" }, { "id": "micro-behaviors/process/info/selfpath::java-protection-domain", "conf": 0.82, "crit": 3, "desc": "Java getProtectionDomain self-path lookup" }, { "id": "micro-behaviors/process/io/stream::java-processbuilder-redirect-errors", "conf": 0.92, "crit": 3, "desc": "Java ProcessBuilder merges standard error", "spans": [ [ 2926, 44 ] ] }, { "id": "micro-behaviors/process/io/stream::java-processbuilder-redirect-input", "conf": 0.92, "crit": 3, "desc": "Java ProcessBuilder redirects standard input", "spans": [ [ 2621, 38 ] ] }, { "id": "micro-behaviors/process/io/stream::java-processbuilder-redirect-output", "conf": 0.92, "crit": 3, "desc": "Java ProcessBuilder redirects standard output", "spans": [ [ 2899, 39 ] ] }, { "id": "objectives/anti-static/obfuscation/reflection/class::java-protectiondomain", "conf": 1.0, "crit": 3, "desc": "Java ProtectionDomain", "spans": [ [ 1578, 19 ], [ 1600, 34 ], [ 1647, 30 ] ] }, { "id": "objectives/anti-static/obfuscation/string/control-prefix::java-control-prefixed-long-string", "atk": "T1027", "mbc": "F0001", "conf": 0.92, "crit": 3, "desc": "Java string starts with control-length prefix" }, { "id": "objectives/evasion/self-delete/file/script::java-code-source-location", "atk": "T1070.004", "mbc": "F0007", "conf": 0.78, "crit": 3, "desc": "Java code source location", "spans": [ [ 1683, 13 ] ] }, { "id": "objectives/impact/dos/disk::jvm-two-backward-goto-branches", "atk": "T1499.001", "conf": 0.9, "crit": 3, "desc": "JVM repeated counter backedges", "spans": [ [ 4989, 8 ], [ 5122, 8 ], [ 5194, 8 ], [ 5297, 8 ], [ 5388, 8 ], [ 5499, 8 ], [ 5580, 8 ], [ 5702, 8 ] ] }, { "id": "micro-behaviors/os/env/gate::jvm-opaque-secret-environment-gate", "conf": 0.97, "crit": 3, "desc": "JVM compares opaque environment gate", "uses": [ 6, 7, 8 ], "spans": [ [ 764, 6 ], [ 1984, 6 ] ] }, { "id": "micro-behaviors/process/create/spawn::java-processbuilder-start-bytecode", "atk": "T1059", "mbc": "E1203", "conf": 0.94, "crit": 3, "desc": "Java bytecode ProcessBuilder execution", "uses": [ 10, 11 ], "spans": [ [ 290, 31 ], [ 3057, 30 ] ] }, { "id": "micro-behaviors/process/io/stream::java-processbuilder-redirected-stdio", "conf": 0.96, "crit": 3, "desc": "Java ProcessBuilder redirects all standard streams", "uses": [ 17, 18, 19 ], "spans": [ [ 2621, 38 ], [ 2899, 39 ], [ 2926, 44 ] ] }, { "id": "micro-behaviors/process/create/spawn::child-process-creation-api", "atk": "T1106", "conf": 0.92, "crit": 3, "desc": "Starts a child process through a platform API", "uses": [ 25 ], "spans": [ [ 290, 31 ], [ 3057, 30 ] ] } ], "type": "java_class" }, { "ctx": [ { "b": "DKp(rb6dmcwO\u003e\u003cRwPz\u003caz/c:wiV{dd3lQDnx\u003eezgiV]R=vpK7YxjSnr3lQDnC4CYnx(v(kauyR?f!LdjfD@4ParR\u003eCvqPN1auyR?p*)\u003cHvp%c}ed9Hxb4Lnav/", "ln": 0, "col": 1, "line": 1 } ], "depth": 1, "facts": { "metrics": { "file": { "size": 430, "entropy": 4.56 }, "json": { "parsed_bytes": 430, "parse_limit_bytes": 76800 }, "binary": { "peak_region_bytes": 430, "peak_region_entropy": 4.56 } } }, "id": 9, "mol": "Md(Pa)", "path": "dsmp_dupe_1.21.11.jar!!fabric.mod.json", "pid": 0, "risk": 1, "sha": "9b235d53a38c45c2fb3e9bde4c30a0ed837dbc075718644271f3564bfc14f998", "size": 430, "traits": [ { "id": "metadata/package/config::fabric-mod-metadata", "conf": 0.9, "crit": 3, "desc": "Fabric mod metadata resource" } ], "type": "json" } ], "rev": "c1ea9", "v": "8" } }