Hostile ^99% Download

KryptonClient-1.21.11.jar

Minecraft token access alongside redirected child launchPrefire packed runtime Minecraft stealer

SHA-256ab8bf8682aeb971caf9a6d9a0dbeeec77f8e629d81cdcfa8ae210ea2146afb4d

URLhttps://mb-api.abuse.ch/api/v1/

MaleculeK₂(McGa)O₆(CaEuAlAs₃ErI)H₆(Cm₅Db₅F₃Os₂Po₅Ti)Md₂(Pa)

Evidence

Java bytecode ProcessBuilder constructor vljdog_oc.class · 0x0–0x260

⋯9 more rows
0x90070009010007456e636f646572010021......Encoder..!
0xa06a6176612f6c616e672f50726f636573java/lang/Proces
0xb0734275696c6465722452656469726563sBuilder$Redirec
0xc07407000c0100186a6176612f6c616e67t......java/lang
0xd02f50726f636573734275696c64657207/ProcessBuilder.
0xe0000e0100085265646972656374010025.....Redirect..%
0xf06a6176612f6c616e672f696e766f6b65java/lang/invoke
⋯3 more rows
0x1306f6448616e646c65730700130100064codHandles......L
0x1406f6f6b75700100063c696e69743e0100ookup...<init>..
0x150032829560c001600170a000400180100.()V............
0x16005764974656d0100164c636f6d2f6769.vItem...Lcom/gi
0x170746875622f766c6a646f675f6f633b01thub/vljdog_oc;.
⋯15 more rows

Java bytecode ProcessBuilder start vljdog_oc.class · 0x331–0x401

⋯3 more rows
0x3613b29560c0016003b0a002a003c010005;)V....;..*.<...
0x37173746172740c003e00170a002a003f01start..>....*.?.
0x381000261310100066e6973697249010026..a1...nisirI..&
0x391284c6a6176612f6c616e672f53747269(Ljava/lang/Stri
⋯7 more rows

JVM Base64 encodeToString call vljdog_oc.class · 0xc25–0xdc5

⋯7 more rows
0xc95295b420c00f400f50a005400f601000e)[B.......T.....
0xca5656e636f6465546f537472696e670100encodeToString..
0xcb516285b42294c6a6176612f6c616e672f.([B)Ljava/lang/
0xcc5537472696e673b0c00f800f90a000800String;.........
0xcd5fa01002b0ae2a5a9e6acbbe0bd8fe9bf...+............
⋯15 more rows

Java ProcessBuilder merges standard error vljdog_oc.class · 0x1697–0x1797

⋯3 more rows
0x16c764546f0c017b016a0a000d017c01000edTo..{.j....|...
0x16d772656469726563744f75747075740c01redirectOutput..
0x16e77e016e0a000f017f0100137265646972~.n........redir
0x16f76563744572726f7253747265616d0100ectErrorStream..
0x17071d285a294c6a6176612f6c616e672f50.(Z)Ljava/lang/P
0x1717726f636573734275696c6465723b0c01rocessBuilder;..
0x17278101820a000f01830100096469726563...........direc
⋯7 more rows

JVM iterates ZIP archive entries ctxSkufls.class · 0x3123–0x3363

⋯3 more rows
0x31533b29560c002e02860a0280028701000c;)V.............
0x31636765744e657874456e74727901001a28getNextEntry...(
0x3173294c6a6176612f7574696c2f7a69702f)Ljava/util/zip/
0x31835a6970456e7472793b0c0289028a0a02ZipEntry;.......
0x319380028b0100166a6176612f7574696c2f......java/util/
⋯7 more rows
0x3213612f696f2f42756666657265644f7574a/io/BufferedOut
0x322370757453747265616d0702990100186aputStream......j
0x32336176612f696f2f46696c654f75747075ava/io/FileOutpu
0x32437453747265616d07029b010006746f46tStream......toF
0x3253696c6501001028294c6a6176612f696file...()Ljava/io
⋯4 more rows
0x32a37453747265616d3b4929560c002e02a4tStream;I)V.....
0x32b30a029a02a5010004726561640c02a702........read....
0x32c34e0a028002a801000577726974650100N........write..
0x32d307285b42494929560c02aa02ab0a029a.([BII)V........
0x32e302ac010005636c6f73650c02ae002f0a.....close..../.
0x32f3029a02af01000d616464537570707265.......addSuppre
⋯7 more rows

No evidence locations were recorded for this file. Raw result