{ "llm": { "conf": 0.9855613, "error": "LLM endpoint returned 402 Payment Required: \"{\\\"error\\\":{\\\"message\\\":\\\"Insufficient credits. Add more using https://openrouter.ai/settings/credits\\\",\\\"code\\\":402,\\\"metadata\\\":{\\\"limit_source\\\":\\\"openrouter_credits\\\",\\\"remedy_hint\\\":\\\"Add credits at https://openrouter.ai/settings/credits, or lower max_tokens / prompt size to fit your remaining balance.\\\"}}}\"", "model": "openrouter/auto", "outcome": "hostile" }, "ml": { "v": "7", "eng": "2.12.0-beta.1", "lvl": 1, "conf": 99, "mods": [ { "cls": 2, "raw": 0.9855613, "rte": "az", "prob": 0.9855613 }, { "cls": 0, "raw": 0.9958848, "rte": "az/jar", "prob": 0.9958848 } ], "prob": 0.9855613, "files": [ { "id": 0, "lvl": 1, "conf": 99, "prob": 0.9855613112449646, "type": "jar" }, { "id": 1, "lvl": -1, "conf": 0, "prob": 0.00002686182597244624, "type": "java_class" }, { "id": 2, "lvl": -1, "conf": 0, "prob": 0.000010083119377668481, "type": "java_class" }, { "id": 4, "lvl": -1, "conf": 0, "prob": 0.000014851490959699731, "type": "java_class" }, { "id": 5, "lvl": -1, "conf": 0, "prob": 0.0000241696834564209, "type": "java_class" }, { "id": 6, "lvl": -1, "conf": 0, "prob": 0.000986297964118421, "type": "java_class" }, { "id": 7, "lvl": -1, "conf": 0, "prob": 0.000024020671844482422, "type": "java_class" }, { "id": 9, "lvl": -1, "conf": 0, "prob": 0.000011434157386247534, "type": "json" } ], "version": "v18.18", "analyzed_at": "2026-09-23T14:07:26Z" }, "path": "KryptonClient-1.21.11.jar", "raw": { "files": [ { "id": 0, "ctx": [ { "b": "p!H([6AwyA2MO8whc*gZ0000000000000]q003IEz7/KoBzb/afjP9Gq!{I/y\u0026.jsy*?ya+!edEw5\u0026\u003cED\u003e5A0=[lQXmrX4oCaviBByOK-bWoZg)Rj5IQ/D\u003eQe?SE[CE+]5+D-.dlX2e)n%5m\u003c070vN?Rj4IB}@i9LEOLJ.rA].\u003eCm[n-)hmR?YbK{5\u003e\u0026l1M*:?i\u0026#+(rgW\u0026LQDfp:YECMBoH5Y]]lj!lH]Zav8tAYCoX1f9[kc]p{W-NTOKdPTAO)rm!u(jjY/[\u003eR2X6mW(Pt6ZKq!D\u0026e+vuRFH5", "ln": 0 } ], "mol": "K₂(McGa)O₆(CaEuAlAs₃ErI)H₆(Cm₅Db₅F₃Os₂Po₅Ti)Md₂(Pa)", "sha": "ab8bf8682aeb971caf9a6d9a0dbeeec77f8e629d81cdcfa8ae210ea2146afb4d", "path": "KryptonClient-1.21.11.jar", "risk": 300, "size": 993121, "type": "jar", "facts": { "metrics": { "jar": { "class_count": 7, "entry_count": 12, "index_count": 0, "service_count": 0, "signature_count": 0, "native_lib_count": 0, "embedded_jar_count": 0, "manifest.entry_count": 0, "manifest.digest_count": 0, "signature_block_count": 0, "versioned_class_count": 0, "manifest.section_count": 0, "manifest.attribute_count": 13, "manifest.class_path_count": 0, "manifest.boot_class_path_count": 0 }, "file": { "size": 993121, "entropy": 8 }, "binary": { "peak_region_bytes": 992256, "peak_region_entropy": 7.85 }, "archive": { "file_count": 12, "member_count": 12, "script_count": 0, "zip_bomb_ratio": 3.27, "compressed_size": 991275, "directory_count": 0, "executable_count": 0, "extra_field_size": 0, "noise_file_count": 0, "compression.ratio": 0.88, "hidden_file_count": 0, "uncompressed_size": 1130396, "crc_collision_count": 0, "entry_comment_count": 0, "max_filename_length": 58, "rtlo_filename_count": 0, "format.regular_count": 12, "nested_archive_count": 0, "path_traversal_count": 0, "symlink_escape_count": 0, "security.setgid_count": 0, "security.setuid_count": 0, "security.sticky_count": 0, "double_extension_count": 0, "duplicate_member_count": 0, "security.symlink_count": 0, "unicode_filename_count": 0, "homoglyph_filename_count": 0, "security.encrypted_count": 0, "timing.mtime_unique_count": 1, "timing.mtime_unique_ratio": 0.08, "misplaced_executable_count": 0, "timing.mtime_dominant_count": 12, "timing.mtime_spread_seconds": 0, "timing.sentinel_mtime_count": 0, "security.world_writable_count": 0, "timing.mtime_dominant_fraction": 1, "compression.method_counts.deflate": 12 } } }, "traits": [ { "id": "micro-behaviors/process/create/spawn::java-processbuilder-bytecode", "atk": "T1059", "mbc": "E1203", "conf": 0.88, "crit": 3, "desc": "Java bytecode ProcessBuilder reference", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/process/info/current::touri-ref", "conf": 0.82, "crit": 3, "desc": "Java toURI call reference" }, { "id": "objectives/evasion/self-delete/file/script::java-code-source-location", "atk": "T1070.004", "mbc": "F0007", "conf": 0.78, "crit": 3, "desc": "Java code source location", "from": [ { "file": 6 } ] }, { "id": "micro-behaviors/process/create/spawn::java-processbuilder-start-bytecode-symbol", "atk": "T1059", "mbc": "E1203", "conf": 0.95, "crit": 3, "desc": "Java bytecode ProcessBuilder start", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/process/info/current::protection-domain-class", "conf": 0.85, "crit": 3, "desc": "Java ProtectionDomain class reference" }, { "id": "micro-behaviors/communications/socket/create::java-socket-class-import", "atk": "T1071", "mbc": "C0001", "conf": 0.9, "crit": 3, "desc": "Java imports the network socket class", "from": [ { "file": 5 } ] }, { "id": "micro-behaviors/process/info/current::codesource-class", "conf": 0.85, "crit": 3, "desc": "Java CodeSource class reference" }, { "id": "micro-behaviors/data/buffer/transfer::bytearrayinputstream-ref", "conf": 0.88, "crit": 3, "desc": "Java ByteArrayInputStream class" }, { "id": "micro-behaviors/data/decode/base64::java-base64-decode-bytecode-call", "conf": 0.96, "crit": 3, "desc": "Java Base64 decode call", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/communications/socket/ssl::jvm-x509trustmanager-issuer-callback", "conf": 0.94, "crit": 3, "desc": "JVM getAcceptedIssuers callback defined" }, { "id": "micro-behaviors/data/decode/base64::java-base64-decoding-bytecode", "conf": 0.94, "crit": 3, "desc": "Java bytecode Base64 decoding", "from": [ { "off": 19370, "file": 1 } ], "uses": [ 8, 70 ] }, { "id": "objectives/anti-static/obfuscation/string/control-prefix::java-control-prefixed-long-string", "atk": "T1027", "mbc": "F0001", "conf": 0.92, "crit": 3, "desc": "Java string starts with control-length prefix" }, { "id": "micro-behaviors/process/io/stream::java-processbuilder-redirect-output", "conf": 0.92, "crit": 3, "desc": "Java ProcessBuilder redirects standard output", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/fs/read/file/handle::jvm-io-file-class-ref", "conf": 0.86, "crit": 3, "desc": "JVM File API class reference" }, { "id": "micro-behaviors/data/archive/extract/zip::jvm-zip-entry-extraction-to-file", "conf": 0.96, "crit": 3, "desc": "JVM extracts ZIP entries to files", "from": [ { "off": 12987, "file": 1 } ], "uses": [ 32, 74, 75 ] }, { "id": "well-known/game/mod::minecraft-session-ref", "conf": 0.9, "crit": 3, "desc": "Minecraft session object reference", "from": [ { "file": 6 } ] }, { "id": "micro-behaviors/process/create/spawn::java-processbuilder-init-bytecode-symbol", "atk": "T1059", "mbc": "E1203", "conf": 0.92, "crit": 3, "desc": "Java bytecode ProcessBuilder constructor", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/process/info/current::getpath-ref", "conf": 0.8, "crit": 3, "desc": "Java getPath call reference" }, { "id": "micro-behaviors/process/info/current::getlocation-ref", "conf": 0.82, "crit": 3, "desc": "Java getLocation call reference" }, { "id": "objectives/impact/dos/disk::jvm-megabyte-byte-array-constant", "atk": "T1499.001", "conf": 0.94, "crit": 3, "desc": "JVM one-megabyte allocation constant", "from": [ { "file": 5 } ] }, { "id": "micro-behaviors/os/sysinfo/hostname::jvm-hostname-command-literal", "atk": "T1082", "mbc": "E1082", "conf": 0.9, "crit": 3, "desc": "JVM hostname command literal" }, { "id": "micro-behaviors/communications/http/lib/urlconnection::java-url-class-bytecode", "atk": "T1071.001", "mbc": "C0002", "conf": 0.86, "crit": 3, "desc": "Java URL class reference", "from": [ { "file": 5 } ] }, { "id": "micro-behaviors/process/create/spawn::java-runtime-class", "atk": "T1059", "mbc": "E1203", "conf": 0.86, "crit": 3, "desc": "Java Runtime class reference", "from": [ { "file": 5 } ] }, { "id": "micro-behaviors/data/string/conversion::tostring-token", "conf": 1.0, "crit": 3, "desc": "References the toString conversion method", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/communications/proxy/tunnel::byte-output-stream", "atk": "T1090", "mbc": "C0003", "conf": 0.5, "crit": 3, "desc": "Java ByteArrayOutputStream usage", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/os/env/gate::jvm-opaque-secret-environment-gate", "conf": 0.97, "crit": 3, "desc": "JVM compares opaque environment gate", "from": [ { "off": 14584, "file": 1 }, { "file": 2 }, { "file": 4 }, { "off": 2033, "file": 7 } ], "uses": [ 37, 47, 71 ] }, { "id": "micro-behaviors/process/io/stream::java-processbuilder-redirect-errors", "conf": 0.92, "crit": 3, "desc": "Java ProcessBuilder merges standard error", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/communications/http/lib/urlconnection::jvm-url-class-ref", "atk": "T1071.001", "mbc": "C0002", "conf": 0.9, "crit": 3, "desc": "JVM URL class reference" }, { "id": "micro-behaviors/process/create/spawn::child-process-creation-api", "atk": "T1106", "conf": 0.92, "crit": 3, "desc": "Starts a child process through a platform API", "from": [ { "off": 740, "file": 1 }, { "file": 6 }, { "off": 291, "file": 7 } ], "uses": [ 39 ] }, { "id": "micro-behaviors/communications/socket/ssl::jvm-custom-x509trustmanager", "conf": 0.95, "crit": 3, "desc": "Class implements a custom X509 trust manager", "from": [ { "file": 4 } ], "uses": [ 9, 50, 68 ] }, { "id": "metadata/package/config::fabric-mod-metadata", "conf": 0.9, "crit": 3, "desc": "Fabric mod metadata resource", "from": [ { "file": 9 } ] }, { "id": "well-known/malware/stealer/prefire-shard::prefire-family-literal", "atk": "T1528", "mbc": "B0006", "conf": 0.9, "crit": 1, "desc": "Prefire family name literal", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/fs/write/file/handle::jvm-fileoutputstream-bytecode", "conf": 0.86, "crit": 3, "desc": "JVM imports FileOutputStream class", "from": [ { "file": 1 } ] }, { "id": "objectives/credential-access/gaming/minecraft::minecraft-session-token-access", "atk": "T1528", "mbc": "B0006", "conf": 0.96, "crit": 4, "desc": "Minecraft session token and UUID access", "from": [ { "off": 2088, "file": 6 } ], "uses": [ 40, 49, 72 ] }, { "id": "micro-behaviors/data/buffer/transfer::jvm-outputstream-write", "conf": 0.96, "crit": 2, "desc": "JVM writes bytes to output stream", "from": [ { "file": 5 } ] }, { "id": "micro-behaviors/communications/socket/framing::bytebuffer-transport", "atk": "T1573", "conf": 1.0, "crit": 3, "desc": "Java byte-buffer transport type", "from": [ { "file": 5 } ] }, { "id": "micro-behaviors/process/info/selfpath::java-protection-domain", "conf": 0.82, "crit": 3, "desc": "Java getProtectionDomain self-path lookup" }, { "id": "micro-behaviors/os/env/gate::jvm-string-equals-import", "conf": 0.94, "crit": 1, "desc": "JVM class imports String equals", "from": [ { "file": 1 } ] }, { "id": "objectives/impact/dos/disk::jvm-two-backward-goto-branches", "atk": "T1499.001", "conf": 0.9, "crit": 3, "desc": "JVM repeated counter backedges", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/process/create/spawn::java-processbuilder-start-bytecode", "atk": "T1059", "mbc": "E1203", "conf": 0.94, "crit": 3, "desc": "Java bytecode ProcessBuilder execution", "from": [ { "off": 15489, "file": 1 }, { "off": 881, "file": 6 }, { "off": 3118, "file": 7 } ], "uses": [ 3, 16 ] }, { "id": "well-known/game/mod::minecraft-session-access", "conf": 0.91, "crit": 3, "desc": "Minecraft session profile access", "from": [ { "file": 6 } ], "uses": [ 15, 56, 58 ] }, { "id": "micro-behaviors/time/sleep/interval::java-thread-sleep-bytecode", "conf": 0.9, "crit": 3, "desc": "Java bytecode thread sleep", "from": [ { "file": 1 } ] }, { "id": "objectives/anti-static/obfuscation/string/control-prefix::java-character-digit-bytecode", "atk": "T1027", "mbc": "F0001", "conf": 0.9, "crit": 3, "desc": "Java bytecode calls Character.digit", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/process/thread/lifecycle::jvm-thread-start-bytecode", "conf": 0.94, "crit": 3, "desc": "JVM starts a thread", "from": [ { "file": 6 } ] }, { "id": "micro-behaviors/process/io/stream::java-processbuilder-redirected-stdio", "conf": 0.96, "crit": 3, "desc": "Java ProcessBuilder redirects all standard streams", "from": [ { "off": 15425, "file": 1 }, { "off": 5874, "file": 6 }, { "off": 2987, "file": 7 } ], "uses": [ 12, 26, 60 ] }, { "id": "micro-behaviors/communications/socket/send::java-raw-socket-client-write", "atk": "T1071", "mbc": "C0001", "conf": 0.94, "crit": 3, "desc": "Java socket client writes request bytes through DataOutputStream", "from": [ { "off": 3719, "file": 5 } ], "uses": [ 5, 34, 76 ] }, { "id": "micro-behaviors/communications/socket/create::java-socket-bytecode-reference", "atk": "T1071", "mbc": "C0001", "conf": 0.86, "crit": 3, "desc": "Java bytecode socket reference", "from": [ { "file": 5 } ] }, { "id": "micro-behaviors/os/env/gate::jvm-opaque-environment-key", "conf": 0.94, "crit": 1, "desc": "JVM class has generated gate value" }, { "id": "objectives/anti-static/obfuscation/reflection/class::java-protectiondomain", "conf": 1.0, "crit": 3, "desc": "Java ProtectionDomain", "from": [ { "file": 6 } ] }, { "id": "well-known/game/mod::minecraft-uuid-getter-ref", "conf": 0.9, "crit": 3, "desc": "Minecraft profile UUID getter reference", "from": [ { "file": 6 } ] }, { "id": "micro-behaviors/communications/socket/ssl::jvm-x509trustmanager-class-ref", "conf": 0.94, "crit": 3, "desc": "JVM X509 trust-manager interface reference" }, { "id": "micro-behaviors/communications/socket/create::java-socket-slash-reference", "atk": "T1071", "mbc": "C0001", "conf": 0.9, "crit": 3, "desc": "Java slash-form socket reference", "from": [ { "file": 5 } ] }, { "id": "micro-behaviors/communications/proxy/tunnel::inet-socket-address", "atk": "T1090", "mbc": "C0003", "conf": 0.6, "crit": 3, "desc": "Java InetSocketAddress reference", "from": [ { "file": 5 } ] }, { "id": "micro-behaviors/data/encode/base64::jvm-base64-encode-bytecode", "conf": 0.94, "crit": 3, "desc": "JVM Base64 encodeToString call", "from": [ { "file": 5 } ] }, { "id": "micro-behaviors/communications/socket/ssl::jvm-trustmanager-class-ref", "conf": 0.9, "crit": 3, "desc": "JVM TrustManager interface reference", "from": [ { "file": 5 } ] }, { "id": "micro-behaviors/data/buffer/transfer::bytearrayoutputstream-ref", "conf": 0.88, "crit": 3, "desc": "Java ByteArrayOutputStream class", "from": [ { "file": 1 } ] }, { "id": "well-known/game/mod::minecraft-client-class-ref", "conf": 0.9, "crit": 3, "desc": "Minecraft client singleton class reference", "from": [ { "file": 6 } ] }, { "id": "objectives/anti-static/obfuscation/string/crypto::java-byte-range-copy", "atk": "T1027", "mbc": "F0001", "conf": 0.7, "crit": 3, "desc": "Java byte range copy", "from": [ { "file": 1 } ] }, { "id": "well-known/game/mod::minecraft-name-getter-ref", "conf": 0.9, "crit": 3, "desc": "Minecraft profile name getter reference", "from": [ { "file": 6 } ] }, { "id": "micro-behaviors/communications/socket/ssl::jvm-sslcontext-trustmanager-init-call", "conf": 0.94, "crit": 3, "desc": "JVM SSLContext.init trust-manager call", "from": [ { "file": 5 } ] }, { "id": "micro-behaviors/process/io/stream::java-processbuilder-redirect-input", "conf": 0.92, "crit": 3, "desc": "Java ProcessBuilder redirects standard input", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/communications/socket/framing::data-stream-transport", "atk": "T1573", "conf": 1.0, "crit": 3, "desc": "Java data-stream transport type", "from": [ { "file": 5 } ] }, { "id": "objectives/credential-access/gaming/minecraft::minecraft-token-child-process-stage", "atk": "T1528, T1059", "mbc": "B0006", "conf": 0.99, "crit": 5, "desc": "Minecraft token access alongside redirected child launch", "from": [ { "off": 740, "file": 1 }, { "off": 10616, "file": 5 }, { "off": 1951, "file": 6 }, { "off": 4098, "file": 7 } ], "uses": [ 33, 39, 44, 53 ] }, { "id": "micro-behaviors/fs/write/file/full::jvm-files-writestring-bytecode", "conf": 0.9, "crit": 3, "desc": "JVM bytecode Files.writeString", "from": [ { "file": 6 } ] }, { "id": "micro-behaviors/communications/socket/ssl::jvm-sslsocket-handshake-call", "conf": 0.94, "crit": 3, "desc": "JVM SSLSocket.startHandshake call", "from": [ { "file": 5 } ] }, { "id": "micro-behaviors/communications/socket/ssl::jvm-sslparameters-set-server-names", "conf": 0.93, "crit": 3, "desc": "JVM sets TLS SNI server name", "from": [ { "file": 5 } ] }, { "id": "micro-behaviors/communications/socket/create::jvm-socket-class-ref", "atk": "T1071", "mbc": "C0001", "conf": 0.9, "crit": 3, "desc": "JVM socket class reference" }, { "id": "micro-behaviors/fs/read/file/handle::jvm-nio-file-class-ref", "conf": 0.86, "crit": 3, "desc": "JVM NIO file API reference" }, { "id": "micro-behaviors/communications/socket/ssl::jvm-x509trustmanager-server-callback", "conf": 0.94, "crit": 3, "desc": "JVM checkServerTrusted callback defined" }, { "id": "micro-behaviors/data/decode/base64::java-base64-decoder-class", "conf": 0.92, "crit": 3, "desc": "JVM Base64 decoder class reference", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/data/decode/base64::java-base64-decoder-bytecode-call", "conf": 0.94, "crit": 3, "desc": "Java Base64 decoder accessor call", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/os/env/gate::jvm-system-getenv-import", "conf": 0.94, "crit": 1, "desc": "JVM class imports System getenv", "from": [ { "file": 1 } ] }, { "id": "objectives/credential-access/gaming/minecraft::minecraft-token-getter-ref", "atk": "T1528", "mbc": "B0006", "conf": 0.92, "crit": 3, "desc": "Minecraft access token getter", "from": [ { "file": 6 } ] }, { "id": "objectives/anti-analysis/timing/evasion::kotlin-thread-sleep-check", "atk": "T1497.003", "conf": 0.94, "crit": 3, "desc": "Kotlin Thread.sleep call", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/data/archive/extract/zip::jvm-zip-entry-iteration-bytecode", "conf": 0.92, "crit": 3, "desc": "JVM iterates ZIP archive entries", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/data/archive/extract/zip::jvm-zip-entry-read-bytecode", "conf": 0.9, "crit": 3, "desc": "JVM reads ZIP archive entry data", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/communications/socket/send::java-dataoutputstream-class", "atk": "T1071", "mbc": "C0001", "conf": 0.9, "crit": 3, "desc": "Java DataOutputStream class reference", "from": [ { "file": 5 } ] }, { "id": "metadata/file/archive::archive-at-least-10-members", "conf": 0.9, "crit": 3, "desc": "Archive contains at least ten members" }, { "id": "metadata/package/entrypoint::jar-main-class", "conf": 0.95, "crit": 2, "desc": "JAR manifest declares an executable Main-Class" }, { "id": "metadata/file/naming::archive-member-over-200kb", "conf": 0.9, "crit": 3, "desc": "Archive has member larger than 200 KB" }, { "id": "metadata/file/naming::archive-member-under-10kb", "conf": 0.9, "crit": 3, "desc": "Archive has a sub-10KB member" }, { "id": "metadata/package/config::fabric-runnable-mod-archive", "conf": 0.9, "crit": 3, "desc": "Fabric mod JAR is directly runnable", "from": [ { "file": 9 } ], "uses": [ 30, 78 ], "spans": [ [ 0, 15 ] ] }, { "id": "objectives/exfiltration/stealer/credential/token::minecraft-token-http-body-exfil", "atk": "T1041", "mbc": "E1041", "conf": 0.98, "crit": 4, "desc": "Minecraft token access paired with raw socket request write", "from": [ { "off": 6662, "file": 5 }, { "off": 1951, "file": 6 } ], "uses": [ 33, 45 ], "spans": [ [ 0, 41 ] ] }, { "id": "well-known/malware/stealer/prefire-shard::prefire-packed-runtime-stealer", "atk": "T1528", "mbc": "B0006", "conf": 0.99, "crit": 5, "desc": "Prefire packed runtime Minecraft stealer", "from": [ { "off": 21062, "file": 1 }, { "file": 5 }, { "off": 1951, "file": 6 }, { "file": 7 } ], "uses": [ 11, 31, 32, 33, 42, 74, 75 ] } ] }, { "ctx": [ { "b": "+kO#^0000+1S4gt6K#5#fk20vxMW=qv@#@]yJTl9A%zWC0rrWCvrM6jy*?i]fhD4(wN//!00rl4gH\u003euufk20vxMW=qmQ{pNgey$9y\u0026%!#mRb2jbYF6Mvruc(rblR{A=Vt6Bu%^", "ln": 0 }, { "b": "00Jx68!i/6fk20vxMW=qmQ{pNgey$9y\u0026%!#mRb2j2lj#f02GQ2C42G9v]Nk^z/P]vr=*SBB9qCAwDq=Oygho]fkL6mxd)84z!0v1B3+1-y?d9$bVnh:x(W={Bo.^M0rr%KvrM6jy*?i]fhMXcv}x.5luN0UwmY=^01n(d2VtkAx(W={Bo8vUygho]flIwJy+Fa-B7El^bT=iNz!9B12lknn01-)NC404DBzkLAlsB}Dhz+Ts5DI\u003epl$G\u003eDwmY=Z03#w*C404uvqYZhx(n9jyH]d[wPRQ7wjQcDwnC*#bUSb{yJTO302bCl9+]bbvj#C9zF7RpzGY@lwIl+?BzbP6nmuyDy?mU)02tOn225@NyJTN%01R+6", "ln": 113 }, { "b": "zFs2xw[=6)fhM80xGDj{5nsD%BX2O4z!-(-xK:H#sPFHuoLO0Vvj#C9zF7R3BAh8kxf{-Py?d9$i@]r=jzwXEBuPZ911kQ03\u0026?)Wfa4WZ05aAN5nCS%vj#C9zF7R3BAh8kx9Oz(0rr{JvrM6jy*?i]fh($kx(mMIB.LV5wPw1QgZTju05aANhW5oAJPN1r(X-jmM5+1eWDsrV(X}}cMChH:FAAV9(X?X6Ma=sZZ2(eY(X}U4MXT.9Wc1iP2MM^:00V}DvraUQ0rrlJnHW1n0672", "ln": 676 }, { "b": "e=XfA05T:y2lkUy00V\u003eJAaJ]$0rs8/lN+YzvrM6jy*?i]fh($kx(mMIB.LV5wPx\u003cv07u(S3ih{-m/-O}Bz\u003e91A+PA70rr/ZdnjF+C404uvqYZhq/)4]zF83t07^e.3ih{-o922Ac}[w:C404uvqYZhq/)4]zF83WoLO0Vvj#C9zF7R3BAh8kxf{-Py?d9$i$89T08i!2h2{wL06od$NEl#p)3145MYf}bRr:t0\u003cfjy0OU\u003eL4W=rmb\u003cbpzm", "ln": 939 }, { "b": "i@]r=vrc0DB:9]!1BipRx8}#sCx)LgwnU\u003c]vGuDlAb]J4x(W+=07[Ukygho]fkL6mxd)h9A+PA7j4%x$C404uvqYZhq/)4]zF848ygho]fkL6mxd)h9A+PA7j1i\u003crvrM5", "ln": 4433 }, { "b": "0rt4.\u003eB/iBJ?bHgLh-BI\u003cd9akFtzw4XAw{o(.xQ4SK.5WRrJMc\u003eB[ZmKb-F2MG1)O\u003cdi)FFU-RMw=R(oxjVf@zGVA?xAnOI0dj/Y0rtNIW7CzdI@*qo(aJkvS*SdVYxU=/\u003e!iRMS*z?PW=B(\u003e\u003c^8w1YRBO?W^7nR(y1pdYT^pcQVX${\u003e=gfvK=nN]Xy[Rb2MXYw03ZTqL\u003c234)U5sjYO+{-TMVNG)U4w0Xp:1xPZEI}\u0026jVn@2MX=y07^", "ln": 5977 }, { "b": "\u003cCow{FXHAPN=PY=)U)}dQN*F5UKl$q(A^8*0:t*d0000000*\u003cK01-)NC404uvqYZhra{q-vpPPAuJycgB8kA0z#/}wc}U{?3\u003c6\u0026svHrfA0+hlh24I7XqEK+I025dwwlrhbzbr/hzdEW8uSp/WwDq=nyH}==x(i}K3u{i0Bzkt]A=2E\u003c00):Ry\u0026%qPB:9]!2XF0$zE=7Rw=R(vl}y9?m[CKID187%h#%0)ygho]fkktTnL.^1v}xR3x(v\u003e]0=d(q2yp96l$7gC0rr", "ln": 12216 }, { "b": "wNPAX0!yvL1T)Owdol\u0026Se={Uj0!HGb0rr@+oLO0Vvj#tkfg*52B-ZM7A+eV@j1jhs04[tc3iC.VHxdw-xjVfWwQ5q=zGG]A0rs2^dnjF+C404DBzkLADtdsKt4}}AzGG]Ai$8gE0/vr^Fc7Sf02xrTC404DBzkLADtdsKt4}}AzGG]A2lG\u003e=00^dFBwumYwEFT307)O1JSLpy01iHZl${WMv@#TfC)\u003c+q0tk.vJSLyB010pHBwMy^wO#O\u003c02u$ioLO0Vvj#Ijz.CZpy?km@vrufA3\u003c8W}Mj0.l0*-]/9bn]9vj#tkfg6![w[u0]wkvt\u0026Acln3BAg@3z3Hcg0rr%KvrM6jx(tT]x(4uRB-.OBBw)p4wNPAX0?fh\u003c26s=Mx(4tY01ZLcoLO0Vvj#tkfgGU(wJHq4ODtw\u003c0DFml0rrYWoLO0Vvj#tkfgGU(wJItw3\u0026?)YP:y\u003c\u003e0?]X}8yOo]vrM6jx(tU2B-.OBBw)p4wNPBqnHWWG04[tG3iDT$R2ZM0A+eV\u00263\u003c9sdp6}5M0\u0026Mb11:t03By+EM2pJ!ynL7vi3\u003c9BgS%O]%0\u0026#z51.hv!B7C:YT]H9Z0?6g]0rrNqwmORYAbY\u0026eB8$]60rr@+oLO0Vvj#C9zF7R4xMw3nvpB4:j1jhs0\u003cI*j3iCeFVJg4kv@c78wKQGUA^n5{We.\u0026!0!puX3iC.VUk[RazCUm)0rr^Fze\u003cJ4y\u0026:8[wP8A)vQ:C2CX^xX9.V", "ln": 12579 }, { "b": "w?%C/1y+8tzuf.xAbGqRvrt]W05#]80%1@#b)hrOOl(vI^DB^n01-)NC404DBzkLAl2}0OD2\u003ch(:]IFIv@DsipI9HkzF9IY00\u003c#Slp\u003c-$ts5-1+Mu2@0)pU\u003c0rrTtAc=bkuU:+6CWCYhCY0]\u003e=\u0026MGu00ikH1lk9y\u0026@Gb.x\u003ehDz0rrmlqE%Cv00D!uA54B]336P#B.(eqB.}cV4SUPwhF$JhByfeWwNwai00E4kz/U{V2wvWSwi\u003eu.0rr^6AbYp", "ln": 13311 }, { "b": "00016s1cGq02xrTC404DBzkLADtdsKnP5cRvru732lKe$0{Y?u0rryDwPQHYAclmh0{{5w3iGI{)G0qdygho]fkktTlv0V:l2}0OC#5N8Acln3BAg@3z3Hdi3iG.$lid5(w[=c%B7/b}3\u003cc235^!Za0}VG[2wF6/y*?A%3\u003ccb7p6}6*0}#Y}3t%A^wogsWAclmh0@h\u003cf3iGI{}un#u?Xp.KZE[W29JRj5\u00266\u003c953iG-0Tn@q6wO#2!0%5xP3iGI}0S-oeBz\u003cG\u003eBy^:UA::j]00BY0ts5-21oO/m0}uu%0rrjqnP1Le2v?)%A-m9$0rr%gygho]flIwJy+H9GA4:!2w]7)$wPx\u003ck0251vnOhsxAZ+mXAyS(puQwWGsPFHAoLO0Vvj#tkfg6@awKguSvr\u003eT\u003eBz#wAq/)4\u003evqO7b00D+bB-WS:3VZJrwoqf@Cv\u003e(o0rrBHwmP4!yhmD\u003e0rrvrz!@@}AXWZ%cbT%f06G5q1POJ503G?g5^nmn001$l)I=tcDA\u003e#dW8FEqZef7A}i%C{1/FQDIy-^!^e:kp\u003eEc@xSGVzcKM-vG(WUC(MYyJ[XAoi-\u003eDs", "ln": 13602 }, { "b": "G5J8#\u003cfu5PQpyBk13c?\u003cbMF!\u003c00il+0rsk6Td!:PRS\u003eZL\u0026Kt#KS/MwvLJ/VL\u0026Kjv8KgBFfNG:31j]\u003eS/wPq\u003c3y\u0026Z0!kM-RC05BZy0rsLnM7NreR0\u003cRo(vtn?IL6p3VGW^l[0x*mFW$faXzTiW\u003eCU\u0026IXV2\u0026u149E%aPJF*00il\u003e0rs?.(7rN]VAi5}NczkP\u0026Jm.0NV^3bSQmjb)W/)hP1BD%KM%0C(7k0yVZG*-Wctfd2M)M$07ljXUi#", "ln": 14520 }, { "b": "c}[w:C404rz.BN]y?kWSoLO0Vvj#C9zF7R0A=kD0B8%V\u003cx(4r\u003eAWjK]wnc6}v@%^v17hjt3igCovGuDrA+e=}A+e:5nP5G\u0026Bo8wac}[w:C404uvqYZhp\u0026ZF:wPI]VB.LV5wPx4]wN]H}wN/*zdnjF+C404uvqYZhp\u0026ZF:wPI]VB.LV5wPx\u003cv17RHB3igIqw=R(@3HA.S)vQ(HOuqgSN^NUI-hzQ{X9f-!\u003c?uX]F:ww#)vG0)OTF(AZWwLq-F--RLiw^c\u003c?vFeT)z4r)vGyB184Yn2W}W\u003ewO#3TzWV..17qJp3J\u003eeB01K3Xwnc6}v@$H?Bz#wA3\u003cgtGwEnzD18Xbt6lmU{x(W={Bvyj\u003cz/O=#A+eV@0rsb*s$9cWvrM6jy*?i]fhMXcv}x.5luN0UwmY^y3\u003cgCJAs8WP19azx1-[=]A=.rZ6^$I8ygho]fkL6mxd)84z!0v1B2%^jBouT)01x3N0rrZDvrM6jy*?i]fhMXcv}x.52lPhK00vgOwb#Vjc[d:%19$5@3iLLQD\u0026TjT4dx4I)7OCsUd9-8So6hL\u0026G6w=H)WegK(zH/(B9+OK*jwePZNYA)7Z6\u003cUAFjUIrf}=\u0026F$RhIk]KzVeQ\u003ey(BinzKDw]", "ln": 15152 }, { "b": "4pS:!wI#wjz/fVdCYT2/agdyq0bdTF1j(D95D/CFh+BnqIE\u0026VxESlLnl.+Rqrb\u003e/j1?E7-U26KeYA50txjVfMwN/T?wPv!K94imfygho]flIwJy+Fa-B7El^bT=iNz!9B1i$8lC1tHk-5^f@\u003c00V$Bv@C)?0rr(-oLO0Vvj#C9zF7R3BAh8kxfdLDljr#N1t{I^5cK((03M8=C404wx(tUmxKL}5wPPO7Byx5$vrb)CxKL}5wPR$#1ulzZ1YXI\u003euPn5^8CB)OC404wx(tUmxKL}5wPPN)xKL}5wPQ0x1uDVE2)rl\u003ejokB7c%G2iygho]fk+GxfjOW7A=U/lfgfzYA=U/li@", "ln": 19252 }, { "b": "k9/\u003cT0%bm7fA\u003cE=Vk7J9I=G#@WJBu}gF$yX8vzCSI9PzV0rr^FvrM6jy*?i]fgfzYA:-E1wPw1U.2TJtwnbW\u003cBo8vBc{{MPnEL:t1JgSI.uv*U026i/m}(sky\u00268QFmpPziuR%Esx-OhvxN1D5v}xH@xKQ#x3u7liC4:oVx\u003eQ@R01S*.C5?krs.?OUB:lz)Bo8vCAbP/lwO}IG18zE[1k.{M^GPWJ%nRc:\u003c#iCz00000001tH00000rj-n81l[llciCU37ny)gb[5X6Hx", "ln": 20998 }, { "b": "1gwg(j$KbxkM\u003eQrwhTO505W)]1H!v#iT2Qz1@dsS1FL(x83IL]9BGP^v734$ecDW(9Dkz{06B!PWG5\u003c1GA.EP%jOs]WG61f08DVD5(D7qrxpB73bcKM83%UbhvprdZ7*#=1y%y#6:}UTiT=9G4hxr!3.^Rz84mk?83}2!g-lPm3L:9=3ufxfF%6b!4fryb?[5\u003eAsS4TS09V/hpGG6P08cr]1IjT\u003es*[w?iUieu5)R\u003cBrxpZf5XXxU84*jjhwc(tZ7?n\u003e1y%z76+!j-iURVO6+}C#6qtEH859/284^O#g-l(u6bqk%5].knF%6b!6-\u003elj?[5\u003eAsS4{.09V/hpGFzB5)\u00260Drxp%m7Y#PM85Tp91y@k+whUtv8Oukm8V}#r6=W@bQ5VCR8X\u003ctg7Z7M\u003eu\u003e\u003cU?g-mbk6=W@aA9$IkL2WeP0Jk$LY8TS\u002685{3+tdaAbr#zLZu]/wE9%n}Kjt[r1agqem1y@k\u0026whUQy05W)]a?4CsiWaU:bnzBra!!@=86P}u1qJ4!6^Ea{06zbv1qJc@aAg.%06C\u003c@WG5\u003c1GD*I}%je5iWG61f08DVl5vINjq=%npvMC?NciHWRjt[M8cBJ[t1y@k{whU\u003cF05W)]d7ogziW\u003ed?dITAFd53X\u003c87uBI1qJp(6!iR106zbC1qJy3cVAF406C\u003c@WG5\u003c1GEN22%je5pWG601sQ8FrhcEx*hAAAceFqQ50986j87@SaweN1bg=v08f1@5NwcuB3fCMpO1V!vuhzM156!(uZaq()Gg8RXVgbG\u003e36!*vT6!:Jlg\u003eH(\u003cGFAOa%kgA*gG+OIW/xQu08DVleFqW70986q88RHMhz#BgZ64%YhE[Z86/S=eiYEj1itBK?h\u003e*o$88@u\u003e88RKihEEmWu]e-U1qJ{ihGi4XF%6b!iru5T*Q^CwsS6id09V/hpGFz=5[[YNrxrkWjIy@e89zm.hA.{uZ7\u0026!w1y%zO6*xnliZiZ8kOVK0kb53189X\u003c389wT0g-ny\u003cj@3r$j-B^=F%6b!kMN!.?[5\u003eAsS6Dk09V/hpGFz=WG601sQhLshcEx*hABhylLsdx0986F8ajM", "ln": 22318 }, { "b": "Ne^WDWG5M80d{{B1P+?T1?1Jko!l\u0026v5DEu\u00261e!)C5d(tOPeD/!1EPk$6:b9@5tPpf0Ka9!0dUTYFe5g\u003cxKFmJR-B#h83NCKQb\u0026H\u003c05E:}2c[v{W/!$2o-.D#0SZju(\u0026", "ln": 114441 }, { "b": "6A(g4hW7f8y}H3G12Zn%1rscod\u003eIFs1-bX71HXp)5d(tO-S{-s6:aUEWG5A35v.\u003e.v3aAw1oLI3!H!09000675=.[i4/=.?}#w5A@qW9d0.9hx1RQ\u003eo05KVV0aV6Z1o", "ln": 114908 } ], "depth": 1, "facts": { "imp": [ [ "", "java/lang/ProcessBuilder$Redirect" ], [ "", "java/lang/Class" ], [ "", "java/nio/file/Path" ], [ "", "java/nio/file/Files" ], [ "", "java/io/File" ], [ "", "java/util/Arrays" ], [ "", "[B" ], [ "", "java/util/Base64$Decoder" ], [ "", "java/io/FileOutputStream" ], [ "", "java/util/List" ], [ "", "java/lang/Process" ], [ "", "java/util/Base64" ], [ "", "java/lang/System" ], [ "", "java/lang/Exception" ], [ "", "java/util/zip/Inflater" ], [ "", "java/lang/invoke/MethodHandles$Lookup" ], [ "", "[C" ], [ "", "java/util/ArrayList" ], [ "", "com/github/Fcmo2OW0lusTFeEw" ], [ "", "java/lang/invoke/MethodHandles" ], [ "", "com/github/Fcmo2OW0lusTFeEw$pzvatgcTkuorstVtAnsvnve" ], [ "", "java/nio/file/LinkOption" ], [ "", "[Ljava/lang/String;" ], [ "", "java/lang/InterruptedException" ], [ "", "java/io/IOException" ], [ "", "java/util/zip/ZipInputStream" ], [ "", "java/io/PrintStream" ], [ "", "java/lang/Throwable" ], [ "", "java/io/ByteArrayOutputStream" ], [ "", "java/util/Map" ], [ "", "java/lang/StringBuilder" ], [ "", "java/nio/charset/StandardCharsets" ], [ "", "java/lang/String" ], [ "", "java/lang/ProcessBuilder" ], [ "", "java/lang/Integer" ], [ "", "java/lang/Object" ], [ "", "java/lang/Thread" ], [ "", "java/io/ByteArrayInputStream" ], [ "", "java/util/zip/ZipEntry" ], [ "", "java/nio/file/attribute/FileAttribute" ], [ "", "java/io/BufferedOutputStream" ], [ "", "java/lang/Character" ], [ "java/lang/String", "java/lang/String.\u003cinit\u003e" ], [ "java/lang/String", "\u003cinit\u003e" ], [ "com/github/ctxSkufls", "com/github/ctxSkufls.pQmlba" ], [ "com/github/ctxSkufls", "pQmlba" ], [ "java/lang/String", "java/lang/String.substring" ], [ "java/lang/String", "substring" ], [ "java/lang/System", "java/lang/System.out" ], [ "java/lang/System", "out" ], [ "com/github/ctxSkufls", "com/github/ctxSkufls.tezwigvKavMnxqoKdjwcb" ], [ "com/github/ctxSkufls", "tezwigvKavMnxqoKdjwcb" ], [ "java/lang/String", "java/lang/String.charAt" ], [ "java/lang/String", "charAt" ], [ "java/lang/String", "java/lang/String.length" ], [ "java/lang/String", "length" ], [ "com/github/ctxSkufls", "com/github/ctxSkufls.adnHcncMzIj" ], [ "com/github/ctxSkufls", "adnHcncMzIj" ], [ "java/util/Base64$Decoder", "java/util/Base64$Decoder.decode" ], [ "java/util/Base64$Decoder", "decode" ], [ "com/github/ctxSkufls", "com/github/ctxSkufls.peekJbv" ], [ "com/github/ctxSkufls", "peekJbv" ], [ "java/util/zip/Inflater", "java/util/zip/Inflater.\u003cinit\u003e" ], [ "java/util/zip/Inflater", "\u003cinit\u003e" ], [ "java/util/zip/Inflater", "java/util/zip/Inflater.inflate" ], [ "java/util/zip/Inflater", "inflate" ], [ "java/io/BufferedOutputStream", "java/io/BufferedOutputStream.\u003cinit\u003e" ], [ "java/io/BufferedOutputStream", "\u003cinit\u003e" ], [ "java/lang/String", "java/lang/String.indexOf" ], [ "java/lang/String", "indexOf" ], [ "java/util/Arrays", "java/util/Arrays.copyOfRange" ], [ "java/util/Arrays", "copyOfRange" ], [ "java/util/zip/Inflater", "java/util/zip/Inflater.end" ], [ "java/util/zip/Inflater", "end" ], [ "java/lang/ProcessBuilder", "java/lang/ProcessBuilder.redirectOutput" ], [ "java/lang/ProcessBuilder", "redirectOutput" ], [ "java/lang/System", "java/lang/System.getenv" ], [ "java/lang/System", "getenv" ], [ "java/lang/Thread", "java/lang/Thread.sleep" ], [ "java/lang/Thread", "sleep" ], [ "java/lang/System", "java/lang/System.arraycopy" ], [ "java/lang/System", "arraycopy" ], [ "com/github/ctxSkufls", "com/github/ctxSkufls.niR8nU" ], [ "com/github/ctxSkufls", "niR8nU" ], [ "java/nio/file/Path", "java/nio/file/Path.getParent" ], [ "java/nio/file/Path", "getParent" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.\u003cinit\u003e" ], [ "java/lang/StringBuilder", "\u003cinit\u003e" ], [ "java/util/zip/ZipEntry", "java/util/zip/ZipEntry.getName" ], [ "java/util/zip/ZipEntry", "getName" ], [ "java/util/Base64", "java/util/Base64.getDecoder" ], [ "java/util/Base64", "getDecoder" ], [ "java/util/zip/ZipInputStream", "java/util/zip/ZipInputStream.read" ], [ "java/util/zip/ZipInputStream", "read" ], [ "java/lang/Integer", "java/lang/Integer.valueOf" ], [ "java/lang/Integer", "valueOf" ], [ "com/github/ctxSkufls", "com/github/ctxSkufls.nh_yeiade_wswilo_qwqy" ], [ "com/github/ctxSkufls", "nh_yeiade_wswilo_qwqy" ], [ "java/lang/String", "java/lang/String.startsWith" ], [ "java/lang/String", "startsWith" ], [ "com/github/ctxSkufls", "com/github/ctxSkufls.bodaQaj" ], [ "com/github/ctxSkufls", "bodaQaj" ], [ "com/github/ctxSkufls", "com/github/ctxSkufls.ncGnnHqFb" ], [ "com/github/ctxSkufls", "ncGnnHqFb" ], [ "com/github/ctxSkufls", "com/github/ctxSkufls.qxef_ibd" ], [ "com/github/ctxSkufls", "qxef_ibd" ], [ "java/nio/file/Files", "java/nio/file/Files.createDirectories" ], [ "java/nio/file/Files", "createDirectories" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.append" ], [ "java/lang/StringBuilder", "append" ], [ "java/nio/file/Path", "java/nio/file/Path.resolve" ], [ "java/nio/file/Path", "resolve" ], [ "java/nio/charset/StandardCharsets", "java/nio/charset/StandardCharsets.UTF_8" ], [ "java/nio/charset/StandardCharsets", "UTF_8" ], [ "com/github/Fcmo2OW0lusTFeEw", "com/github/Fcmo2OW0lusTFeEw.get" ], [ "com/github/Fcmo2OW0lusTFeEw", "get" ], [ "java/lang/String", "java/lang/String.equals" ], [ "java/lang/String", "equals" ], [ "java/util/ArrayList", "java/util/ArrayList.\u003cinit\u003e" ], [ "java/util/ArrayList", "\u003cinit\u003e" ], [ "java/util/zip/Inflater", "java/util/zip/Inflater.setInput" ], [ "java/util/zip/Inflater", "setInput" ], [ "com/github/ctxSkufls", "com/github/ctxSkufls.uxfwnd_hbo_qjws_xe" ], [ "com/github/ctxSkufls", "uxfwnd_hbo_qjws_xe" ], [ "java/lang/ProcessBuilder", "java/lang/ProcessBuilder.redirectErrorStream" ], [ "java/lang/ProcessBuilder", "redirectErrorStream" ], [ "com/github/ctxSkufls", "com/github/ctxSkufls.xngsksWqfrgJu" ], [ "com/github/ctxSkufls", "xngsksWqfrgJu" ], [ "java/util/zip/ZipInputStream", "java/util/zip/ZipInputStream.close" ], [ "java/util/zip/ZipInputStream", "close" ], [ "java/lang/ProcessBuilder$Redirect", "java/lang/ProcessBuilder$Redirect.appendTo" ], [ "java/lang/ProcessBuilder$Redirect", "appendTo" ], [ "java/lang/System", "java/lang/System.getProperty" ], [ "java/lang/System", "getProperty" ], [ "java/lang/Class", "java/lang/Class.getSimpleName" ], [ "java/lang/Class", "getSimpleName" ], [ "com/github/Fcmo2OW0lusTFeEw$pzvatgcTkuorstVtAnsvnve", "com/github/Fcmo2OW0lusTFeEw$pzvatgcTkuorstVtAnsvnve.body" ], [ "com/github/Fcmo2OW0lusTFeEw$pzvatgcTkuorstVtAnsvnve", "body" ], [ "com/github/ctxSkufls", "com/github/ctxSkufls.LUQrPEUbzfHELHm" ], [ "com/github/ctxSkufls", "LUQrPEUbzfHELHm" ], [ "com/github/ctxSkufls", "com/github/ctxSkufls.dzrkfMgr" ], [ "com/github/ctxSkufls", "dzrkfMgr" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.append" ], [ "java/lang/StringBuilder", "append" ], [ "java/lang/Throwable", "java/lang/Throwable.addSuppressed" ], [ "java/lang/Throwable", "addSuppressed" ], [ "java/io/ByteArrayOutputStream", "java/io/ByteArrayOutputStream.write" ], [ "java/io/ByteArrayOutputStream", "write" ], [ "java/lang/Integer", "java/lang/Integer.parseInt" ], [ "java/lang/Integer", "parseInt" ], [ "java/lang/String", "java/lang/String.isEmpty" ], [ "java/lang/String", "isEmpty" ], [ "java/lang/String", "java/lang/String.\u003cinit\u003e" ], [ "java/lang/String", "\u003cinit\u003e" ], [ "java/lang/Object", "java/lang/Object.getClass" ], [ "java/lang/Object", "getClass" ], [ "java/lang/System", "java/lang/System.currentTimeMillis" ], [ "java/lang/System", "currentTimeMillis" ], [ "java/io/ByteArrayInputStream", "java/io/ByteArrayInputStream.\u003cinit\u003e" ], [ "java/io/ByteArrayInputStream", "\u003cinit\u003e" ], [ "com/github/ctxSkufls", "com/github/ctxSkufls.xoqgDvwckbg" ], [ "com/github/ctxSkufls", "xoqgDvwckbg" ], [ "java/io/PrintStream", "java/io/PrintStream.println" ], [ "java/io/PrintStream", "println" ], [ "java/util/zip/Inflater", "java/util/zip/Inflater.finished" ], [ "java/util/zip/Inflater", "finished" ], [ "com/github/ctxSkufls", "com/github/ctxSkufls.iBAuHWDojfThcFBY" ], [ "com/github/ctxSkufls", "iBAuHWDojfThcFBY" ], [ "java/lang/String", "java/lang/String.toCharArray" ], [ "java/lang/String", "toCharArray" ], [ "com/github/ctxSkufls", "com/github/ctxSkufls.swapKad" ], [ "com/github/ctxSkufls", "swapKad" ], [ "java/util/zip/ZipEntry", "java/util/zip/ZipEntry.isDirectory" ], [ "java/util/zip/ZipEntry", "isDirectory" ], [ "com/github/ctxSkufls", "com/github/ctxSkufls.nkmlyql" ], [ "com/github/ctxSkufls", "nkmlyql" ], [ "com/github/ctxSkufls", "com/github/ctxSkufls.zn_jwyjh_ogs" ], [ "com/github/ctxSkufls", "zn_jwyjh_ogs" ], [ "com/github/ctxSkufls", "com/github/ctxSkufls.DgStWhZcfnDUA" ], [ "com/github/ctxSkufls", "DgStWhZcfnDUA" ], [ "java/lang/ProcessBuilder", "java/lang/ProcessBuilder.redirectInput" ], [ "java/lang/ProcessBuilder", "redirectInput" ], [ "com/github/Fcmo2OW0lusTFeEw$pzvatgcTkuorstVtAnsvnve", "com/github/Fcmo2OW0lusTFeEw$pzvatgcTkuorstVtAnsvnve.statusCode" ], [ "com/github/Fcmo2OW0lusTFeEw$pzvatgcTkuorstVtAnsvnve", "statusCode" ], [ "com/github/ctxSkufls", "com/github/ctxSkufls.\u003cinit\u003e" ], [ "com/github/ctxSkufls", "\u003cinit\u003e" ], [ "java/util/zip/Inflater", "java/util/zip/Inflater.needsInput" ], [ "java/util/zip/Inflater", "needsInput" ], [ "com/github/ctxSkufls", "com/github/ctxSkufls.gNvWx" ], [ "com/github/ctxSkufls", "gNvWx" ], [ "java/util/Map", "java/util/Map.of" ], [ "java/util/Map", "of" ], [ "com/github/ctxSkufls", "com/github/ctxSkufls.onDyummr" ], [ "com/github/ctxSkufls", "onDyummr" ], [ "java/io/File", "java/io/File.\u003cinit\u003e" ], [ "java/io/File", "\u003cinit\u003e" ], [ "java/lang/String", "java/lang/String.format" ], [ "java/lang/String", "format" ], [ "java/nio/file/Path", "java/nio/file/Path.of" ], [ "java/nio/file/Path", "of" ], [ "java/lang/ProcessBuilder", "java/lang/ProcessBuilder.directory" ], [ "java/lang/ProcessBuilder", "directory" ], [ "java/util/Map", "java/util/Map.of" ], [ "java/util/Map", "of" ], [ "com/github/ctxSkufls", "com/github/ctxSkufls.bpzfm_ktqx_xkxn" ], [ "com/github/ctxSkufls", "bpzfm_ktqx_xkxn" ], [ "java/io/ByteArrayOutputStream", "java/io/ByteArrayOutputStream.toByteArray" ], [ "java/io/ByteArrayOutputStream", "toByteArray" ], [ "java/util/zip/ZipInputStream", "java/util/zip/ZipInputStream.\u003cinit\u003e" ], [ "java/util/zip/ZipInputStream", "\u003cinit\u003e" ], [ "java/util/zip/ZipInputStream", "java/util/zip/ZipInputStream.getNextEntry" ], [ "java/util/zip/ZipInputStream", "getNextEntry" ], [ "java/lang/Exception", "java/lang/Exception.getMessage" ], [ "java/lang/Exception", "getMessage" ], [ "java/lang/ProcessBuilder", "java/lang/ProcessBuilder.start" ], [ "java/lang/ProcessBuilder", "start" ], [ "com/github/ctxSkufls", "com/github/ctxSkufls.runDetached" ], [ "com/github/ctxSkufls", "runDetached" ], [ "com/github/ctxSkufls", "com/github/ctxSkufls.tfbtth_noc_ac_clp" ], [ "com/github/ctxSkufls", "tfbtth_noc_ac_clp" ], [ "java/util/zip/ZipInputStream", "java/util/zip/ZipInputStream.closeEntry" ], [ "java/util/zip/ZipInputStream", "closeEntry" ], [ "com/github/Fcmo2OW0lusTFeEw", "com/github/Fcmo2OW0lusTFeEw.BnoLCaReZCej" ], [ "com/github/Fcmo2OW0lusTFeEw", "BnoLCaReZCej" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.toString" ], [ "java/lang/StringBuilder", "toString" ], [ "com/github/Fcmo2OW0lusTFeEw", "com/github/Fcmo2OW0lusTFeEw.gzsCtx" ], [ "com/github/Fcmo2OW0lusTFeEw", "gzsCtx" ], [ "java/lang/Process", "java/lang/Process.pid" ], [ "java/lang/Process", "pid" ], [ "java/lang/String", "java/lang/String.substring" ], [ "java/lang/String", "substring" ], [ "com/github/ctxSkufls", "com/github/ctxSkufls.reozqz_mmvtv_aityih" ], [ "com/github/ctxSkufls", "reozqz_mmvtv_aityih" ], [ "java/io/FileOutputStream", "java/io/FileOutputStream.\u003cinit\u003e" ], [ "java/io/FileOutputStream", "\u003cinit\u003e" ], [ "java/io/BufferedOutputStream", "java/io/BufferedOutputStream.close" ], [ "java/io/BufferedOutputStream", "close" ], [ "java/util/List", "java/util/List.add" ], [ "java/util/List", "add" ], [ "com/github/ctxSkufls", "com/github/ctxSkufls.normalizeAlkshtz" ], [ "com/github/ctxSkufls", "normalizeAlkshtz" ], [ "com/github/ctxSkufls", "com/github/ctxSkufls.sVaBkAXelJQauOfG" ], [ "com/github/ctxSkufls", "sVaBkAXelJQauOfG" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.append" ], [ "java/lang/StringBuilder", "append" ], [ "com/github/ctxSkufls", "com/github/ctxSkufls.UDraba_wkNwMA" ], [ "com/github/ctxSkufls", "UDraba_wkNwMA" ], [ "java/lang/ProcessBuilder", "java/lang/ProcessBuilder.\u003cinit\u003e" ], [ "java/lang/ProcessBuilder", "\u003cinit\u003e" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.append" ], [ "java/lang/StringBuilder", "append" ], [ "com/github/ctxSkufls", "com/github/ctxSkufls.ocsceImpl" ], [ "com/github/ctxSkufls", "ocsceImpl" ], [ "java/io/ByteArrayOutputStream", "java/io/ByteArrayOutputStream.\u003cinit\u003e" ], [ "java/io/ByteArrayOutputStream", "\u003cinit\u003e" ], [ "java/lang/Character", "java/lang/Character.digit" ], [ "java/lang/Character", "digit" ], [ "com/github/ctxSkufls", "com/github/ctxSkufls.rjIch" ], [ "com/github/ctxSkufls", "rjIch" ], [ "java/nio/file/Path", "java/nio/file/Path.toString" ], [ "java/nio/file/Path", "toString" ], [ "java/lang/Object", "java/lang/Object.\u003cinit\u003e" ], [ "java/lang/Object", "\u003cinit\u003e" ], [ "java/nio/file/Files", "java/nio/file/Files.exists" ], [ "java/nio/file/Files", "exists" ], [ "java/lang/ProcessBuilder$Redirect", "java/lang/ProcessBuilder$Redirect.from" ], [ "java/lang/ProcessBuilder$Redirect", "from" ], [ "com/github/ctxSkufls", "com/github/ctxSkufls.ay_eup" ], [ "com/github/ctxSkufls", "ay_eup" ], [ "com/github/Fcmo2OW0lusTFeEw$pzvatgcTkuorstVtAnsvnve", "com/github/Fcmo2OW0lusTFeEw$pzvatgcTkuorstVtAnsvnve.bodyString" ], [ "com/github/Fcmo2OW0lusTFeEw$pzvatgcTkuorstVtAnsvnve", "bodyString" ], [ "java/nio/file/Path", "java/nio/file/Path.toFile" ], [ "java/nio/file/Path", "toFile" ], [ "java/nio/file/Files", "java/nio/file/Files.readString" ], [ "java/nio/file/Files", "readString" ], [ "java/lang/String", "java/lang/String.indexOf" ], [ "java/lang/String", "indexOf" ], [ "java/io/BufferedOutputStream", "java/io/BufferedOutputStream.write" ], [ "java/io/BufferedOutputStream", "write" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.\u003cinit\u003e" ], [ "java/lang/StringBuilder", "\u003cinit\u003e" ] ], "metrics": { "file": { "size": 117769, "entropy": 4.98 }, "class": { "major_version": 65, "interface_count": 0, "method_ref_count": 120, "constant_pool_size": 1303, "external_class_count": 42 }, "binary": { "peak_region_bytes": 18432, "peak_region_entropy": 7.03 }, "imports": { "count": 162 }, "functions": { "count": 20 } } }, "id": 1, "mol": "O₃(AlAs₂I)H₅(Db₄F₂OsPo₂Ti)", "path": "KryptonClient-1.21.11.jar!!com/github/ctxSkufls.class", "pid": 0, "risk": 13, "sha": "badb52c3b1ecfe392f6cc4e5ba47cf9df3ee2ead7945a6a21b09c8619a7339b9", "size": 117769, "traits": [ { "id": "micro-behaviors/communications/proxy/tunnel::byte-output-stream", "atk": "T1090", "mbc": "C0003", "conf": 0.5, "crit": 3, "desc": "Java ByteArrayOutputStream usage", "spans": [ [ 748, 21 ], [ 13012, 21 ], [ 13674, 21 ], [ 13818, 21 ], [ 13915, 21 ] ] }, { "id": "micro-behaviors/data/archive/extract/zip::jvm-zip-entry-iteration-bytecode", "conf": 0.92, "crit": 3, "desc": "JVM iterates ZIP archive entries", "spans": [ [ 12643, 41 ] ] }, { "id": "micro-behaviors/data/archive/extract/zip::jvm-zip-entry-read-bytecode", "conf": 0.9, "crit": 3, "desc": "JVM reads ZIP archive entry data", "spans": [ [ 12987, 33 ] ] }, { "id": "micro-behaviors/data/buffer/transfer::bytearrayinputstream-ref", "conf": 0.88, "crit": 3, "desc": "Java ByteArrayInputStream class" }, { "id": "micro-behaviors/data/buffer/transfer::bytearrayoutputstream-ref", "conf": 0.88, "crit": 3, "desc": "Java ByteArrayOutputStream class", "spans": [ [ 13666, 29 ] ] }, { "id": "micro-behaviors/data/decode/base64::java-base64-decode-bytecode-call", "conf": 0.96, "crit": 3, "desc": "Java Base64 decode call", "spans": [ [ 19370, 31 ] ] }, { "id": "micro-behaviors/data/decode/base64::java-base64-decoder-bytecode-call", "conf": 0.94, "crit": 3, "desc": "Java Base64 decoder accessor call", "spans": [ [ 19316, 27 ] ] }, { "id": "micro-behaviors/data/decode/base64::java-base64-decoder-class", "conf": 0.92, "crit": 3, "desc": "JVM Base64 decoder class reference", "spans": [ [ 257, 24 ], [ 19329, 28 ] ] }, { "id": "micro-behaviors/data/string/conversion::tostring-token", "conf": 1.0, "crit": 3, "desc": "References the toString conversion method", "spans": [ [ 1003, 8 ] ] }, { "id": "micro-behaviors/fs/read/file/handle::jvm-io-file-class-ref", "conf": 0.86, "crit": 3, "desc": "JVM File API class reference" }, { "id": "micro-behaviors/fs/read/file/handle::jvm-nio-file-class-ref", "conf": 0.86, "crit": 3, "desc": "JVM NIO file API reference" }, { "id": "micro-behaviors/fs/write/file/handle::jvm-fileoutputstream-bytecode", "conf": 0.86, "crit": 3, "desc": "JVM imports FileOutputStream class", "spans": [ [ 12850, 24 ] ] }, { "id": "micro-behaviors/os/env/gate::jvm-opaque-environment-key", "conf": 0.94, "crit": 1, "desc": "JVM class has generated gate value" }, { "id": "micro-behaviors/os/env/gate::jvm-string-equals-import", "conf": 0.94, "crit": 1, "desc": "JVM class imports String equals", "spans": [ [ 14584, 0 ] ] }, { "id": "micro-behaviors/os/env/gate::jvm-system-getenv-import", "conf": 0.94, "crit": 1, "desc": "JVM class imports System getenv", "spans": [ [ 6041, 0 ] ] }, { "id": "micro-behaviors/process/create/spawn::java-processbuilder-bytecode", "atk": "T1059", "mbc": "E1203", "conf": 0.88, "crit": 3, "desc": "Java bytecode ProcessBuilder reference", "spans": [ [ 177, 71 ] ] }, { "id": "micro-behaviors/process/create/spawn::java-processbuilder-init-bytecode-symbol", "atk": "T1059", "mbc": "E1203", "conf": 0.92, "crit": 3, "desc": "Java bytecode ProcessBuilder constructor", "spans": [ [ 740, 31 ] ] }, { "id": "micro-behaviors/process/create/spawn::java-processbuilder-start-bytecode-symbol", "atk": "T1059", "mbc": "E1203", "conf": 0.95, "crit": 3, "desc": "Java bytecode ProcessBuilder start", "spans": [ [ 15489, 30 ] ] }, { "id": "micro-behaviors/process/io/stream::java-processbuilder-redirect-errors", "conf": 0.92, "crit": 3, "desc": "Java ProcessBuilder merges standard error", "spans": [ [ 15425, 44 ] ] }, { "id": "micro-behaviors/process/io/stream::java-processbuilder-redirect-input", "conf": 0.92, "crit": 3, "desc": "Java ProcessBuilder redirects standard input", "spans": [ [ 15216, 38 ] ] }, { "id": "micro-behaviors/process/io/stream::java-processbuilder-redirect-output", "conf": 0.92, "crit": 3, "desc": "Java ProcessBuilder redirects standard output", "spans": [ [ 15398, 39 ] ] }, { "id": "micro-behaviors/time/sleep/interval::java-thread-sleep-bytecode", "conf": 0.9, "crit": 3, "desc": "Java bytecode thread sleep", "spans": [ [ 12280, 22 ] ] }, { "id": "objectives/anti-analysis/timing/evasion::kotlin-thread-sleep-check", "atk": "T1497.003", "conf": 0.94, "crit": 3, "desc": "Kotlin Thread.sleep call", "spans": [ [ 12290, 12 ] ] }, { "id": "objectives/anti-static/obfuscation/string/control-prefix::java-character-digit-bytecode", "atk": "T1027", "mbc": "F0001", "conf": 0.9, "crit": 3, "desc": "Java bytecode calls Character.digit", "spans": [ [ 21062, 25 ] ] }, { "id": "objectives/anti-static/obfuscation/string/control-prefix::java-control-prefixed-long-string", "atk": "T1027", "mbc": "F0001", "conf": 0.92, "crit": 3, "desc": "Java string starts with control-length prefix" }, { "id": "objectives/anti-static/obfuscation/string/crypto::java-byte-range-copy", "atk": "T1027", "mbc": "F0001", "conf": 0.7, "crit": 3, "desc": "Java byte range copy", "spans": [ [ 13375, 11 ] ] }, { "id": "objectives/impact/dos/disk::jvm-two-backward-goto-branches", "atk": "T1499.001", "conf": 0.9, "crit": 3, "desc": "JVM repeated counter backedges", "spans": [ [ 22382, 8 ], [ 22465, 8 ], [ 22569, 8 ], [ 22656, 8 ], [ 22754, 8 ], [ 22854, 8 ], [ 22946, 8 ], [ 23033, 8 ] ] }, { "id": "well-known/malware/stealer/prefire-shard::prefire-family-literal", "atk": "T1528", "mbc": "B0006", "conf": 0.9, "crit": 1, "desc": "Prefire family name literal", "spans": [ [ 4465, 7 ] ] }, { "id": "micro-behaviors/data/archive/extract/zip::jvm-zip-entry-extraction-to-file", "conf": 0.96, "crit": 3, "desc": "JVM extracts ZIP entries to files", "uses": [ 1, 2, 11 ], "spans": [ [ 12643, 41 ], [ 12850, 24 ], [ 12987, 33 ] ] }, { "id": "micro-behaviors/data/decode/base64::java-base64-decoding-bytecode", "conf": 0.94, "crit": 3, "desc": "Java bytecode Base64 decoding", "uses": [ 5, 6 ], "spans": [ [ 19316, 27 ], [ 19370, 31 ] ] }, { "id": "micro-behaviors/os/env/gate::jvm-opaque-secret-environment-gate", "conf": 0.97, "crit": 3, "desc": "JVM compares opaque environment gate", "uses": [ 12, 13, 14 ], "spans": [ [ 6041, 6 ], [ 14584, 6 ] ] }, { "id": "micro-behaviors/process/create/spawn::java-processbuilder-start-bytecode", "atk": "T1059", "mbc": "E1203", "conf": 0.94, "crit": 3, "desc": "Java bytecode ProcessBuilder execution", "uses": [ 16, 17 ], "spans": [ [ 740, 31 ], [ 15489, 30 ] ] }, { "id": "micro-behaviors/process/io/stream::java-processbuilder-redirected-stdio", "conf": 0.96, "crit": 3, "desc": "Java ProcessBuilder redirects all standard streams", "uses": [ 18, 19, 20 ], "spans": [ [ 15216, 38 ], [ 15398, 39 ], [ 15425, 44 ] ] }, { "id": "micro-behaviors/process/create/spawn::child-process-creation-api", "atk": "T1106", "conf": 0.92, "crit": 3, "desc": "Starts a child process through a platform API", "uses": [ 31 ], "spans": [ [ 740, 31 ], [ 15489, 30 ] ] } ], "type": "java_class" }, { "ctx": [ { "b": "+kO#^0000+04O6Ic1y\u003egfk20vxMW=qmQ{pNgey$9y\u0026%!#mRb2jbZ8*WogqoJm[i^:0rAfiygho]fkL6mxd)4\u0026ygQ)%2lj\u0026b02]A^z7/KoBzb/afgGC*z.+9\u0026fL\u003e(Mr7pB/ClX9", "ln": 0 } ], "depth": 1, "facts": { "imp": [ [ "", "java/lang/Object" ], [ "", "com/github/Fcmo2OW0lusTFeEw" ], [ "", "java/lang/System" ], [ "java/lang/Object", "java/lang/Object.\u003cinit\u003e" ], [ "java/lang/Object", "\u003cinit\u003e" ], [ "com/github/Fcmo2OW0lusTFeEw$vKTKEEWGG", "com/github/Fcmo2OW0lusTFeEw$vKTKEEWGG.expiresAt" ], [ "com/github/Fcmo2OW0lusTFeEw$vKTKEEWGG", "expiresAt" ], [ "com/github/Fcmo2OW0lusTFeEw$vKTKEEWGG", "com/github/Fcmo2OW0lusTFeEw$vKTKEEWGG.ip" ], [ "com/github/Fcmo2OW0lusTFeEw$vKTKEEWGG", "ip" ], [ "java/lang/System", "java/lang/System.currentTimeMillis" ], [ "java/lang/System", "currentTimeMillis" ] ], "metrics": { "file": { "size": 765, "entropy": 5.61 }, "class": { "major_version": 65, "interface_count": 0, "method_ref_count": 4, "constant_pool_size": 43, "external_class_count": 3 }, "binary": { "peak_region_bytes": 765, "peak_region_entropy": 5.61 }, "imports": { "count": 7 }, "functions": { "count": 2 } } }, "id": 2, "path": "KryptonClient-1.21.11.jar!!com/github/Fcmo2OW0lusTFeEw$vKTKEEWGG.class", "pid": 0, "risk": 1, "sha": "0d79050d968cac8b67dc774dca3a330262b772c4615de9d70923e84a1a8d0435", "size": 765, "traits": [ { "id": "metadata/binary/code/complexity::functions-at-most-24", "conf": 1.0, "crit": 2, "desc": "Binary has 24 or fewer functions" }, { "id": "metadata/binary/code/complexity::functions-at-most-32", "conf": 1.0, "crit": 2, "desc": "Binary has 32 or fewer functions" }, { "id": "metadata/file/magic/identity::cafebabe-magic", "conf": 1.0, "crit": 2, "desc": "CAFEBABE magic at file start", "spans": [ [ 0, 0 ] ] }, { "id": "micro-behaviors/os/env/gate::jvm-opaque-environment-key", "conf": 0.94, "crit": 1, "desc": "JVM class has generated gate value" } ], "type": "java_class" }, { "ctx": [ { "b": "+kO#^0000+06Ht.g?gDvfk20vxMW=qmQ{pNgey$9y\u0026%!#mRb2jbW$.fx)9\u003c0wQ5opABiA%DtW84CxNIczu*dx0rrWCvrM6jy*?i]fhD4(wN//!00rl49+]bbvr:CywPPODB8iG", "ln": 0 } ], "depth": 1, "facts": { "imp": [ [ "", "javax/net/ssl/X509TrustManager" ], [ "", "java/lang/Object" ], [ "", "com/github/Fcmo2OW0lusTFeEw" ], [ "", "java/security/cert/X509Certificate" ], [ "java/lang/Object", "java/lang/Object.\u003cinit\u003e" ], [ "java/lang/Object", "\u003cinit\u003e" ] ], "metrics": { "file": { "size": 1352, "entropy": 5.89 }, "class": { "major_version": 65, "interface_count": 1, "method_ref_count": 1, "constant_pool_size": 61, "external_class_count": 4 }, "binary": { "peak_region_bytes": 1024, "peak_region_entropy": 5.97 }, "imports": { "count": 5 }, "functions": { "count": 4 } } }, "id": 4, "mol": "H(Cm)", "path": "KryptonClient-1.21.11.jar!!com/github/Fcmo2OW0lusTFeEw$bpmiv_kexsrq_imzn_fwvddn.class", "pid": 0, "risk": 1, "sha": "d44aa8a5ae336b7bafc5e2fb04bc1d33998109197186a9311a6e904b0c3d0d09", "size": 1352, "traits": [ { "id": "micro-behaviors/os/env/gate::jvm-opaque-environment-key", "conf": 0.94, "crit": 1, "desc": "JVM class has generated gate value" }, { "id": "micro-behaviors/communications/socket/ssl::jvm-x509trustmanager-class-ref", "conf": 0.94, "crit": 3, "desc": "JVM X509 trust-manager interface reference" }, { "id": "micro-behaviors/communications/socket/ssl::jvm-x509trustmanager-issuer-callback", "conf": 0.94, "crit": 3, "desc": "JVM getAcceptedIssuers callback defined" }, { "id": "micro-behaviors/communications/socket/ssl::jvm-x509trustmanager-server-callback", "conf": 0.94, "crit": 3, "desc": "JVM checkServerTrusted callback defined" }, { "id": "micro-behaviors/communications/socket/ssl::jvm-custom-x509trustmanager", "conf": 0.95, "crit": 3, "desc": "Class implements a custom X509 trust manager", "uses": [ 1, 2, 3 ] } ], "type": "java_class" }, { "ctx": [ { "b": "+kO#^0000+1ek!@8!i/6fk20vxMW=qmQ{pNgey$9y\u0026%!#mRb2j2lj=901-)NC404uvqYZhpHX6Iv@}}Q0%5xUv@Diqxk8E3BZ^0[v@lctpGGk^B-QIKwKQ!*vSlf#C3/2@CYN)", "ln": 0 }, { "b": "ltcx10ziv)33x{7CZq@6wO?CFawuJUC42RGzE)]yB8#dJq=uv*z!0M]BvGXGBz(hBi@]r=jzwXEBuPZ911kQ03\u0026?\u003cVe^.NY051uM8dEC@z/oP4B8bD6C3/xfzGGt{wn(0{wORqD9zx%Yz7/KoBzb/afgGC*z.+9\u0026fL\u003e(Mr7pB/Crk*917#g!0rtXtoLO0Vvj#C9zF7R3BAh8kxfdLov@Diqxk8E3BZ^0[v@lctpGGk^B-QIKwKQ!*Ac=XoBz28.yJTMoB97D8k(", "ln": 729 }, { "b": "rTX%W0cnFEASygZ00V\u003eJAaJ]$0rs8/lN+YzvrM6jy*?i]fh($kx(mMIB.LV5wPx\u003cv0cOu^3ik8DCMv^IBz\u003e91A+PA70rr/ZdnjF+C404uvqYZhq/)4]zF83t0d1S(3ik8DD\u0026TiMx)9W2n)#gO0rr:CC5Q]ew)YQ}ACP03DsHDhwb#Vslt*ZnlT-(7t0(\u003eo0ru%+oLO0Vvj#C9zF7R3BAh8kxfe!4vrM6jy*?i]fh($kx(mMBoLO0Vvj#C9zF7R3BAh8kxfdLov@Diqxk8E3BP", "ln": 1771 }, { "b": "v@=c?By+EMa$cc1vrM6jy*?i]fh($kx(mMBdnjF+C404wwPPO9qB@}U0l$O\u003c3inrJ=\u0026BaIBz\u003eeSoAtb8c[d\u00268vrM6jzE)]yrz(HL3\u0026[YQ^*u910mR2H3#fi]vj#IfBt3S(oA$NG0rrvqwPQEYB94/\u003c/z{m90m}k70rrvqwPQ:!A=.Y\u0026*w(9#0m}ka0rrHuwPQ:?z//]cz!]*Z?t?)f0m}kd0rtd\u003c\u0026I}K?Imz(eWc\u003c#Z(5RU1LA\u003eE1Q2yTf\u003ccmppZkhfjM/+()\u003e8b.(PoOrnTkO\u003e[(X*qYS\u0026kfxMJ", "ln": 3147 }, { "b": "337h\u003cq*g0ko?2c-cmzM5vrM6jy*?i]fh($kx(mMBdnjF+C404uvqYZhq/)4]zF83t0q#]%3igbc@@A9gygho]fk+uyfh(!0yH}O)0rAJd0ST\u003eQ00\u0026M80rr*PwPQ*Yv}xv$wKpJKw[u0Yx)Kt00r\u0026EA3iphe1{1Yxygho]fk+uyfg*4)Bw)9/yH}PNwmPZ(B8}M!2MT]vc}[w:C404uvqYZhq/)4]zF845dol\u0026SeDDg=0sn=m3\u0026?KMaQFbI0sY5f2v?W\u0026zE)s10rs8/oLO0Vvj#IfBt3Nhv@2T$l1BIDwPI]OnHWWG0s]hx3iphe5EXT=03ITG0S-@n01r{WBw)9Sx(dB1B-X2)6--pZ0rJoq3\u0026?^Tec#pT0t\u003e?q9+]bbvr:CywPPODB8iHdq+Qbdv@2T$mQY!Gz/Qad0u7$s3$Br?vru6Vz!0M]Bo8w3c}[w:C404wwPPO7z!0M]BurfhvrM6jy*?i]fh($kx(mMBnM)Mpygho]fk+uyfh(!0yH}PH3\u0026}sG9sq/^0uImw7IWx4vr:CywPPODB8iHdq+Qbdv@2T$2lt}F01-^OBw(aip*[xMzdN*2A=RlYa1eNiygho]CRr@CBt4YRy+FZ=oI/ervqPN$wPz\u0026N3\u0026}KMbmjC{0vdWC8erP6vr:CywPPODB8iHdpdW#{B97e=", "ln": 3655 }, { "b": "j1i\u003crvrM6jB-.tlfhc83Buo)ieDEEi0w1m80rs6NvrM77fk+uyflqhJfh\u003e!yp*[xMzdN*2A=RD^f-.m:B7GC(wPz%9A.Z4WwPE\u003eL6duK?vrM6jB-.tlfhc83Bup{L3\u0026@c+gZTms0w%(T9oaxs)uUrCI\u003exl+FA0#m\u0026\u003cu8WM-YCdI%k+N1pb2!0rsr+wPQvUwn(E3zGFDXwO#Q7w[+:-BzkVhl2pgLA+PSez43C90vOoQg66Ap01:i.Bw(aip*[xMzdN*2A=RlYasG]#vrM77fk+uyflqhJfh\u003e!yp*[xMzdN*2A=Tq\u003erTY0\u003e0x*+\u003caPT+c01K6(vrcDXvqYQ%xKLW/3\u0026@P[e^.R50yl.^4}/D}pJZ+#B-ZM7A+eV@0rr@+dnjF+C404rz.B[eBz#wAq/)4\u003evqO7m0yD(Q3iphemf9w#xjVfRzG6-uq/)4\u003evqM2B7BQ.aygho]fkktTnP5G\u0026Bw)p4wNPBq3\u0026@\u003c0nd2w00z9p(eE{@@OBqSp(BJ}LQo-*wYZrs+\u0026hT9ANZzv*TL7bK", "ln": 4276 }, { "b": "M9/OHWDCeP\u003cF5)wRLi1vQ#[kv\u003ecgSzFs=bpLKCcu(w7Aa0Ju813q1e(uPp25iBsGH0JMl!2)3m\u003eTn@q8CxdztwDq=mc%G1!rTY2i0J#?hp64N100M$JB-Rj80KqXT3ir)5VJg4gw]zr\u003eq^/XboEJOHvrM6jx(tT@zG6-uq/)4\u003evqO7PoK\u00260Tfk20vxMW=qmQ{pNgey$9y\u0026%!#mRb2jbYF6Mvruc(rblR{A=Vt6Bu%!=C5zFmi$8d$0K-sn0S/+h00M\u003eGz/YE#0L5g.3ipheX=z^Aygho]fkL6mxd)j$A=legvR/PX0LwBk231GkAbYZ@02XEBvrM77fk+uyflqhJfh\u003e!yq/ueYwPQ0m00^yIzdMK=ASDdXoLO0Vvr:CywPPODB8iHdq+Q1@A:-/@By/Gli@]r\u003eC6E!uC#XA*qHiERCx:b*5LM}FC404wwPPO7z!0M]BuoH631vEVltf?eB-)==4qp6bA.QW%B8Ce$z!x7J6?\u0026vJC404DBzkLAo\u003c}#^mq^i/C@(3b4n7wly+X^#gEtCmzc3-r7eeEKC404rz.B[eBz#wAq/)4\u003evqO7b025jLwjZcFwKgivAyK21uVF.IxAn8FoLO0Vvj#tkfg=", "ln": 6598 }, { "b": "oL58x01A^ZB7N:KB.2e?w]z$@01\u003cr)D1Hb\u0026B8BY{Bw=T/y\u003cxT]00=C9uVPNQCl4WIw]z*fwjZ(Oz2\u003cRDoLO0Vvj#IfBt3S(oGJmP1zIy\u003efAzdWvrCvMxM3yFf-.mVB7]@iq/)3X00D[Wqf\u0026ly24RpYByu)801AKUv{:g\u0026vS2K$w]q\u003e{01I:}vNB:vC1l7mpg=j(0rrgnzuf.Vygho]fkL6mxd)25zdm6%mSir:vrs}.v}xR3x(v\u003e]0Pj4WDt\u003eLu0my", "ln": 7220 }, { "b": "z.BC1w[CQ{wN[wIAcln3BAg@3z3Ha80rr@+oLO0Vvj#tkfg*52B-ZM7A+eV@j1jhs04!lo3ixt\u003e(hZ(9ygho]fkktTlv0V:l2}0OC#5N8Acln3BAg@3z3Had3ixI]f984QA+eV\u00263\u003c2!%zvcBd0Q{G#T]JII0QP{U0rrmzx)Kt00Ruwf3ixI{]-k42Bz\u003cG\u003eBy^:UA::j]00BY0ts5-0{w$3@0QP{-0rs-2oLO0Vvj#Ijz.CQlvrcB2Bt30{vrcB2Bup{Bygho]fkL6mxd)h9A+PA7i$8an0S9i8)e^a=02#m7JF3zLJPmdp)1.\u003ehP%J{kK(qj}\u003cbG8ZI?.Ms@S905B8U@fBo8v?c}[w:C404uvqYZhq/)4]zF83Wtte^uB]", "ln": 7452 }, { "b": "0rrjqB:0\u0026^87nf[vrM6jx(tT@zG6-uq/)4\u003evqO7Pts5-1i%4IK00ii+0rruMts7[Mdm\u003c{G)/CYX0Q6OI0@@(j015+]0cwqy0SSi300K=PlmCFm0Q*7U3ixt(mGAF]c%G2fnHWWG0J(F{3ixI}nDw/sc}N9EvrM6jy*?i]fh($kx(mMBoLO0Vvj#+Bx(2B%vq[qjlmC}z04!mB3igzmoAtb5BAH8QxjsCQzGOuHo921}zff/g0rrsBBAfV\u0026CMv^MD36", "ln": 8553 }, { "b": "0rr^bqDl?am0A=]uUKNFxj1k7peR8)1Xzc#uUfrs6gN7iv{-8DpEwGlw{NS/vOxNf0rsinygho]fkktTlv0V:l2}0OC#5N8Acln3BAg@3z94:#2u+XpwLCct0rrQHuWl-@uSHJ7hevktxAn8owL^q^0rrmjvq[7803a:FvrM6jx(tT\u003eB.kk%A+e=MzG6-uq/)4\u003evqO7b01J^\u0026DusmKuVpmmuUsB\u00260rrsyz/X({z#/}wyG2s}0rrvzz/YC$BytgI3WlYcBzU}\u0026z2", "ln": 8857 }, { "b": "Sox\u003eS)ZwbzY[2dHJr/P%0rrmqq/#{T00bB/01\u0026TRz*2#xno]w%AD$2@t5XP+00WEPw(rhL1fFy-E/PJ^ygho]fkktTl$7gCpJZ+#B-ZM7A+eV@2lIZx02WgUygho]fkktTpJZ+#B-ZM7A+eV@j1jhs04!n\u00263iF6C.#P\u0026zzEEB3rb3hX3\u003caAIQ6Z))0(\u003eDA000000rr61019{\u003cx()]+xM4{k3\u003caPLA%.#=0)yVBedHNcPym]q(C6W\u0026Rh90]\u003cfK\u0026{S{DEC)ZZ6%M.iVHVH1uE\u0026K\u003c)6NUg6\u003eJr/Qh0rrBIA+PSblv0V:3\u003ca=QA%.#=0)}2G3u{J8By^^:By/I40[de#3iF6C!bYK/ygho]fkL6mxd)e9zGGPfwKQ\u0026NwPh:9z/b^Y!=t:/c}[w:C404uvqYZhra{q\u003cCvs@%wJItw3\u0026?\u003cX/A}Yi0[^OO25v^}o\u003c@nE00EyXA4?p)0Af104olFAqA5kAr.3:*mrX+j6?\u0026vJC404rz.BWTmr\u0026rNAcb/jzAv\u003e01wRJ=x8}#rAE8zxokF3N0r", "ln": 9915 }, { "b": "vrM6jB-.tlfg68*wI#v\u003cmq=QNwmY^y3\u003ccFi0sw/w0%eG64ThSexM53np*))Bx(mL(0%wYb3ig.w1PXPkwO#0@wmX.Uq/)4]zF6vW2lHF7022Cu0rtE(\u003cF!WdWtjjZLKkMp\u003c!/6yM6pM+XA6VF\u0026Kk/QYN/EPH2]k0(x^g\u003cG01amF-j5F[4sRDU-X4CJ{q%Z)1hq0S*Ka{3ipbM\u0026*3$qIidbiIrzKn\u0026/{.kH)vwnO-^U(\u0026*tOYZm:}GHu2*{2NyIv0rtZKHplk{R@@Pp\u0026ioxJZmabOISp5f\u0026!Bu", "ln": 10552 }, { "b": "v@2mXA=U=anQtx20rrHGxK%\u003eEyd@e-wnqhC2Y:G$AbPSnwDL^W1h$wR7z!d}Rg.qP0rr^FvrM6jzFs2xlv0V:luM)LwPw1TfAzdRCxdbh0rr#=ts6=jygho]fk+Gxfg6@awKpJKw[u0A3\u003cel!gysjs12H2U2XNZ\u003cq!Q8\u0026Bo8vzc[e7612Zlu3iJ0+i0fcXFb/VK0rr6101\u003cA\u003cwPzP:vSlv8ltHdKwjpto02NaTygho]fk+Gxfg6@awKpJKw[p", "ln": 11464 }, { "b": "v}tVve*%zdvrM6jy*?i]fh($kx(mMBdnjF+C42RGzE)]yB8#dJq=uvSz/fVdCYV1Q1aQG83iL+WF=L\u0026\u0026ygho]CRr@CBt4YRy+F+dB-RU0vqYH^wPw1TGBdX-051uM8FSY7vj#Xkv%8*aBA]JrwN/\u003e6wL#@Own=q\u00261bvi=HYx7e00E1Nx(\u003cvQs14oDygho]CRr@CBt4YRy+FB)C$?Z+vp%d(j6Lx[vrM77fk+uyflqhJfh#$mB97b+zEEf?AYV%fvrM6jB7F\u003c7A+PSvfh(B(B-I4\u003evqYQ]z96gE3\u003chv?IWxMo1b)lX5nbM@q/ueYwPQyIv@#TfC(W)?c[d\u00268vrM77fk+uyflqhJfh\u003e!yq/ueYwPQyIv@#R", "ln": 12499 }, { "b": "hWg346AypEhWf)WWG5=\u003cd*4Q\u003ee4#c%9aRkNYAHt012Zq$1S:rqaq\u003ep%1UfY}u\u003e\u0026\u0026Mg+eXz1SRF?g\u003eH(\u003cGARyO%kpG?lrLfeW/x5J0rAkh08G*000065OD5S\u00267xsKZ@@r(o1{Ub{2lmo}0s5P}0rr9z1dPt\u003e01n\u0026d03.Fr08JUp000a)000040096T1d]L[00Jx6hVJ*T2((:Yq2*.3N/AA?000i63ig5aZz3VE6Az9%NGa/K09h2-76+JN", "ln": 13257 }, { "b": "0bEcA2Rry:A0fX(whTO50chiS1H!wNiT2Qz1@dsS1FL(x83IL]9BGP^v735AecDW(9Dkz{0aGG4WG7OOGA.EP%jOs]WG7.90rBZX08G*000065OD5S\u0026695d\u0026@qY4!073.=02CUv0ce8*1dPt\u003e02tLo05jFl0dB[?0000N0fd5e04d:E1d/F)00Ao505:}F0000208-]\u003e000090SUdV002{$000r9Fb\u003ec20%t1)008##1]]2h005h}GF\u003c8J", "ln": 13546 }, { "b": "huURu0b@6K6:e591?K+PsRRaH0cHsb12Zx02nEAp04eS*eD=^\u003eu\u003e\u0026]OWG6+*1qIdR1Am+S0aGG4WG7OOGA?KQ%jwg[WG7.9d\u003ey.h08G*000065OD5S\u0026gxmKS05%@+2lm6}073[\u003cli3#=000310ri3y00@(gli^GS2lm6}073X!2ln=B0rr9H1dPt\u003e03zmz05%%.0fma30000U09YC+03hav05%%.0fEm500im]000040096T1d]L[01x2g", "ln": 13805 }, { "b": "WG5=T1q}sAg=tHP1IL1H6:nba1@duP1V=\u003e\u003chvg986:yxjbPc?42]J\u003cG6:m$W31bOc1oYCC6:nL:g\u003eH(\u003cGB4WS%jXm)YAHt483ZlY2M\u003e!CXb-qo076*a2!6!bdL054XbYse000021dYz(03IsAeDkX(015@hli^GS2lm6}01Pqmnc5.@07W7\u003c001wGOb-J?dGxOKec6z+QYqCo001LIy5\u003e7g9SMivec6z+Rt}Uq0ST+Ky5\u003edicJBkJO=w-\u003c1onD5huPxF00062LMNJT000Pl05\u003c(T0d\u003egJ0d$mK08\u0026\u003c$00@U70fWx=1dGn\u003c0zry$01F#e0o1M\u0026hvpfa5#?M8g.*ugS?GFB6ACf)3kJ%.0iH-f3kJ%.0iZ@j3krGBhW*Dg6ACE?hW*Dg6ACK(hW*teWG3", "ln": 14084 }, { "b": "WG5=T78W\u003e\u0026g=uc/7qo]Z6=gys7.)[21V^I6hx9wI6=rUBbPdEm8Yoy]6=gl)8^\u003eGu76Cu\u003e6=g*%g\u003eH(\u003cGC%@\u0026%jXn9YAHtm85SI]8uQY\u003eXb-qo076*a8N/YtWGbCF2O^NCPA2Su2:\u003eV0Vh\u003c9^00Y.e(nw\u003e+1?1A#iTDVg-Scw:3ao\u003c7Ne*n2]r[S*iVP7U12I[S86cBa9+ky:hxJUQYAHts12.qqaR=8[03\u0026B86^jCn6=)G=6^l%w865?{aR=5qu]iE#rFhH@R#LI-076*aaH.tziTDVcWGc3v0c/v/83NCG{bTGXb!B4%s*[z986(S\u003c}v-.m07G0@872Cxhyxv?Z64%YcUba-6!3Y#iW\u003ed?dITAFd53X!87upI872F3cTWVsu]e-F1qJy3cVADIF%6b!dGMEE*Q^CLsS5V$086:2}wyP/0q:b7El4VL2dKWliTSF10:h#k13c/c3LJKzWGcQJ3+DACsS4LY2E:ZxVh\u003eDz0tlmTVh\u003eVF0t=ERNe\u0026RW0t#:.83Q/X1HXsMZYtPt4h/R-0vo=p84KmVcS}q\u003eW/E$*0wH}.hw(#r0xvH/mMJaseXRu#87/hLhzb\u003e0Z7\u0026nh1y%zz6!^i6iXQT]f+(zTfqnB?888^W87=NTg-m\u003eWfblhRe]UhPF%6b!f-!iL?[5\u003ePsS5{5086:3i#FFB4Z(y584B1PlkZj[45T7g84eFl84r}OmMH$@47lgeiU5+4A-]\u003cK{C@*54\u003et0/}v-)6WG5=Tg-naLg=vieg}\u003c966/xIWhwFc.1V!NAhAhBh6/I=^bPeJQi2KKQ6/xwliaaMXgZ1KM6/x@rg?q:", "ln": 14808 }, { "b": "1R?ig01x!G0#h0F0V9)283EwF[TfvYRVp6w1HXvL5d(tMCS2:v2atI@RVov82d$j52lM\u003c\u00266:LJUQ5VF?83Z(Z6:txUwvqL+hvg980?YI$RVmev2O^UNhvckX*aa3C0@", "ln": 36607 } ], "depth": 1, "facts": { "imp": [ [ "", "java/util/Iterator" ], [ "", "[C" ], [ "", "java/lang/Integer" ], [ "", "java/nio/ByteBuffer" ], [ "", "javax/net/ssl/TrustManager" ], [ "", "java/net/URL" ], [ "", "java/io/DataOutputStream" ], [ "", "java/util/Base64$Encoder" ], [ "", "java/net/URI" ], [ "", "java/lang/String" ], [ "", "java/util/Set" ], [ "", "java/net/Socket" ], [ "", "java/lang/StringBuilder" ], [ "", "java/net/InetSocketAddress" ], [ "", "javax/net/ssl/SSLParameters" ], [ "", "java/util/LinkedHashMap" ], [ "", "com/github/Fcmo2OW0lusTFeEw$pzvatgcTkuorstVtAnsvnve" ], [ "", "java/lang/Exception" ], [ "", "java/lang/NumberFormatException" ], [ "", "java/util/concurrent/ConcurrentHashMap" ], [ "", "javax/net/ssl/SSLSocketFactory" ], [ "", "java/lang/invoke/MethodHandles$Lookup" ], [ "", "java/lang/Throwable" ], [ "", "java/io/BufferedInputStream" ], [ "", "java/security/SecureRandom" ], [ "", "java/util/List" ], [ "", "com/github/Fcmo2OW0lusTFeEw$bpmiv_kexsrq_imzn_fwvddn" ], [ "", "java/lang/invoke/MethodHandles" ], [ "", "java/nio/charset/StandardCharsets" ], [ "", "javax/net/ssl/SSLContext" ], [ "", "[B" ], [ "", "java/util/Map" ], [ "", "java/lang/RuntimeException" ], [ "", "javax/net/ssl/SNIHostName" ], [ "", "java/io/ByteArrayOutputStream" ], [ "", "java/lang/Object" ], [ "", "com/github/Fcmo2OW0lusTFeEw$vKTKEEWGG" ], [ "", "java/lang/System" ], [ "", "java/util/Map$Entry" ], [ "", "java/util/Base64" ], [ "", "java/io/OutputStream" ], [ "", "javax/net/ssl/SSLSocket" ], [ "", "java/io/IOException" ], [ "", "[Ljava/lang/String;" ], [ "", "java/io/InputStream" ], [ "java/lang/String", "java/lang/String.equalsIgnoreCase" ], [ "java/lang/String", "equalsIgnoreCase" ], [ "com/github/Fcmo2OW0lusTFeEw", "com/github/Fcmo2OW0lusTFeEw.avu_wvuk_cgpx" ], [ "com/github/Fcmo2OW0lusTFeEw", "avu_wvuk_cgpx" ], [ "com/github/Fcmo2OW0lusTFeEw$vKTKEEWGG", "com/github/Fcmo2OW0lusTFeEw$vKTKEEWGG.\u003cinit\u003e" ], [ "com/github/Fcmo2OW0lusTFeEw$vKTKEEWGG", "\u003cinit\u003e" ], [ "java/util/Map$Entry", "java/util/Map$Entry.getKey" ], [ "java/util/Map$Entry", "getKey" ], [ "javax/net/ssl/SSLSocketFactory", "javax/net/ssl/SSLSocketFactory.createSocket" ], [ "javax/net/ssl/SSLSocketFactory", "createSocket" ], [ "java/lang/Integer", "java/lang/Integer.parseInt" ], [ "java/lang/Integer", "parseInt" ], [ "java/nio/ByteBuffer", "java/nio/ByteBuffer.position" ], [ "java/nio/ByteBuffer", "position" ], [ "javax/net/ssl/SSLContext", "javax/net/ssl/SSLContext.getSocketFactory" ], [ "javax/net/ssl/SSLContext", "getSocketFactory" ], [ "java/net/URL", "java/net/URL.getQuery" ], [ "java/net/URL", "getQuery" ], [ "com/github/Fcmo2OW0lusTFeEw", "com/github/Fcmo2OW0lusTFeEw.rufjnnUqqsiYnhugkRhkyyog" ], [ "com/github/Fcmo2OW0lusTFeEw", "rufjnnUqqsiYnhugkRhkyyog" ], [ "java/io/DataOutputStream", "java/io/DataOutputStream.writeShort" ], [ "java/io/DataOutputStream", "writeShort" ], [ "java/io/ByteArrayOutputStream", "java/io/ByteArrayOutputStream.toByteArray" ], [ "java/io/ByteArrayOutputStream", "toByteArray" ], [ "java/lang/String", "java/lang/String.\u003cinit\u003e" ], [ "java/lang/String", "\u003cinit\u003e" ], [ "com/github/Fcmo2OW0lusTFeEw", "com/github/Fcmo2OW0lusTFeEw.ZrB__gH" ], [ "com/github/Fcmo2OW0lusTFeEw", "ZrB__gH" ], [ "java/net/Socket", "java/net/Socket.getOutputStream" ], [ "java/net/Socket", "getOutputStream" ], [ "java/io/ByteArrayOutputStream", "java/io/ByteArrayOutputStream.write" ], [ "java/io/ByteArrayOutputStream", "write" ], [ "java/util/LinkedHashMap", "java/util/LinkedHashMap.\u003cinit\u003e" ], [ "java/util/LinkedHashMap", "\u003cinit\u003e" ], [ "java/net/URI", "java/net/URI.toURL" ], [ "java/net/URI", "toURL" ], [ "java/io/BufferedInputStream", "java/io/BufferedInputStream.read" ], [ "java/io/BufferedInputStream", "read" ], [ "java/net/URL", "java/net/URL.getPort" ], [ "java/net/URL", "getPort" ], [ "java/lang/String", "java/lang/String.getBytes" ], [ "java/lang/String", "getBytes" ], [ "java/io/BufferedInputStream", "java/io/BufferedInputStream.read" ], [ "java/io/BufferedInputStream", "read" ], [ "javax/net/ssl/SSLContext", "javax/net/ssl/SSLContext.getInstance" ], [ "javax/net/ssl/SSLContext", "getInstance" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.append" ], [ "java/lang/StringBuilder", "append" ], [ "com/github/Fcmo2OW0lusTFeEw", "com/github/Fcmo2OW0lusTFeEw.ZwfYdb" ], [ "com/github/Fcmo2OW0lusTFeEw", "ZwfYdb" ], [ "java/io/InputStream", "java/io/InputStream.read" ], [ "java/io/InputStream", "read" ], [ "com/github/Fcmo2OW0lusTFeEw", "com/github/Fcmo2OW0lusTFeEw.kuw" ], [ "com/github/Fcmo2OW0lusTFeEw", "kuw" ], [ "com/github/Fcmo2OW0lusTFeEw", "com/github/Fcmo2OW0lusTFeEw.uHsnbbcm" ], [ "com/github/Fcmo2OW0lusTFeEw", "uHsnbbcm" ], [ "com/github/Fcmo2OW0lusTFeEw", "com/github/Fcmo2OW0lusTFeEw.rvWSw2lMF" ], [ "com/github/Fcmo2OW0lusTFeEw", "rvWSw2lMF" ], [ "java/lang/String", "java/lang/String.split" ], [ "java/lang/String", "split" ], [ "javax/net/ssl/SSLSocket", "javax/net/ssl/SSLSocket.close" ], [ "javax/net/ssl/SSLSocket", "close" ], [ "java/io/ByteArrayOutputStream", "java/io/ByteArrayOutputStream.size" ], [ "java/io/ByteArrayOutputStream", "size" ], [ "java/net/Socket", "java/net/Socket.\u003cinit\u003e" ], [ "java/net/Socket", "\u003cinit\u003e" ], [ "java/lang/String", "java/lang/String.startsWith" ], [ "java/lang/String", "startsWith" ], [ "com/github/Fcmo2OW0lusTFeEw", "com/github/Fcmo2OW0lusTFeEw.wkerlQbprmBkepdEm" ], [ "com/github/Fcmo2OW0lusTFeEw", "wkerlQbprmBkepdEm" ], [ "com/github/Fcmo2OW0lusTFeEw", "com/github/Fcmo2OW0lusTFeEw.fogbSa" ], [ "com/github/Fcmo2OW0lusTFeEw", "fogbSa" ], [ "java/io/ByteArrayOutputStream", "java/io/ByteArrayOutputStream.\u003cinit\u003e" ], [ "java/io/ByteArrayOutputStream", "\u003cinit\u003e" ], [ "java/io/ByteArrayOutputStream", "java/io/ByteArrayOutputStream.write" ], [ "java/io/ByteArrayOutputStream", "write" ], [ "java/util/Base64$Encoder", "java/util/Base64$Encoder.withoutPadding" ], [ "java/util/Base64$Encoder", "withoutPadding" ], [ "java/lang/String", "java/lang/String.isEmpty" ], [ "java/lang/String", "isEmpty" ], [ "java/util/Set", "java/util/Set.iterator" ], [ "java/util/Set", "iterator" ], [ "java/lang/Integer", "java/lang/Integer.parseInt" ], [ "java/lang/Integer", "parseInt" ], [ "java/net/Socket", "java/net/Socket.close" ], [ "java/net/Socket", "close" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.append" ], [ "java/lang/StringBuilder", "append" ], [ "java/net/URL", "java/net/URL.getProtocol" ], [ "java/net/URL", "getProtocol" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.\u003cinit\u003e" ], [ "java/lang/StringBuilder", "\u003cinit\u003e" ], [ "java/net/Socket", "java/net/Socket.setReceiveBufferSize" ], [ "java/net/Socket", "setReceiveBufferSize" ], [ "java/nio/charset/StandardCharsets", "java/nio/charset/StandardCharsets.ISO_8859_1" ], [ "java/nio/charset/StandardCharsets", "ISO_8859_1" ], [ "java/lang/String", "java/lang/String.indexOf" ], [ "java/lang/String", "indexOf" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.setLength" ], [ "java/lang/StringBuilder", "setLength" ], [ "java/util/Iterator", "java/util/Iterator.next" ], [ "java/util/Iterator", "next" ], [ "java/net/Socket", "java/net/Socket.getInputStream" ], [ "java/net/Socket", "getInputStream" ], [ "java/io/BufferedInputStream", "java/io/BufferedInputStream.read" ], [ "java/io/BufferedInputStream", "read" ], [ "javax/net/ssl/SSLSocketFactory", "javax/net/ssl/SSLSocketFactory.getDefault" ], [ "javax/net/ssl/SSLSocketFactory", "getDefault" ], [ "java/lang/Object", "java/lang/Object.\u003cinit\u003e" ], [ "java/lang/Object", "\u003cinit\u003e" ], [ "java/net/URL", "java/net/URL.getPath" ], [ "java/net/URL", "getPath" ], [ "java/lang/String", "java/lang/String.trim" ], [ "java/lang/String", "trim" ], [ "java/util/Iterator", "java/util/Iterator.hasNext" ], [ "java/util/Iterator", "hasNext" ], [ "java/io/OutputStream", "java/io/OutputStream.flush" ], [ "java/io/OutputStream", "flush" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.\u003cinit\u003e" ], [ "java/lang/StringBuilder", "\u003cinit\u003e" ], [ "java/io/ByteArrayOutputStream", "java/io/ByteArrayOutputStream.toString" ], [ "java/io/ByteArrayOutputStream", "toString" ], [ "java/lang/System", "java/lang/System.currentTimeMillis" ], [ "java/lang/System", "currentTimeMillis" ], [ "java/net/InetSocketAddress", "java/net/InetSocketAddress.\u003cinit\u003e" ], [ "java/net/InetSocketAddress", "\u003cinit\u003e" ], [ "java/util/List", "java/util/List.of" ], [ "java/util/List", "of" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.append" ], [ "java/lang/StringBuilder", "append" ], [ "java/nio/ByteBuffer", "java/nio/ByteBuffer.position" ], [ "java/nio/ByteBuffer", "position" ], [ "com/github/Fcmo2OW0lusTFeEw", "com/github/Fcmo2OW0lusTFeEw.bkyfeCfsofuBtpyy" ], [ "com/github/Fcmo2OW0lusTFeEw", "bkyfeCfsofuBtpyy" ], [ "java/lang/String", "java/lang/String.contains" ], [ "java/lang/String", "contains" ], [ "java/util/Map", "java/util/Map.entrySet" ], [ "java/util/Map", "entrySet" ], [ "java/io/OutputStream", "java/io/OutputStream.write" ], [ "java/io/OutputStream", "write" ], [ "com/github/Fcmo2OW0lusTFeEw", "com/github/Fcmo2OW0lusTFeEw.normalizeUuqbvejdp" ], [ "com/github/Fcmo2OW0lusTFeEw", "normalizeUuqbvejdp" ], [ "java/nio/ByteBuffer", "java/nio/ByteBuffer.getInt" ], [ "java/nio/ByteBuffer", "getInt" ], [ "java/io/BufferedInputStream", "java/io/BufferedInputStream.\u003cinit\u003e" ], [ "java/io/BufferedInputStream", "\u003cinit\u003e" ], [ "java/nio/ByteBuffer", "java/nio/ByteBuffer.get" ], [ "java/nio/ByteBuffer", "get" ], [ "com/github/Fcmo2OW0lusTFeEw$pzvatgcTkuorstVtAnsvnve", "com/github/Fcmo2OW0lusTFeEw$pzvatgcTkuorstVtAnsvnve.body" ], [ "com/github/Fcmo2OW0lusTFeEw$pzvatgcTkuorstVtAnsvnve", "body" ], [ "java/lang/String", "java/lang/String.equals" ], [ "java/lang/String", "equals" ], [ "java/util/Base64", "java/util/Base64.getUrlEncoder" ], [ "java/util/Base64", "getUrlEncoder" ], [ "javax/net/ssl/SSLSocket", "javax/net/ssl/SSLSocket.startHandshake" ], [ "javax/net/ssl/SSLSocket", "startHandshake" ], [ "java/nio/ByteBuffer", "java/nio/ByteBuffer.wrap" ], [ "java/nio/ByteBuffer", "wrap" ], [ "java/io/DataOutputStream", "java/io/DataOutputStream.writeBytes" ], [ "java/io/DataOutputStream", "writeBytes" ], [ "java/lang/System", "java/lang/System.nanoTime" ], [ "java/lang/System", "nanoTime" ], [ "javax/net/ssl/SSLSocket", "javax/net/ssl/SSLSocket.getOutputStream" ], [ "javax/net/ssl/SSLSocket", "getOutputStream" ], [ "java/nio/ByteBuffer", "java/nio/ByteBuffer.get" ], [ "java/nio/ByteBuffer", "get" ], [ "java/util/Base64$Encoder", "java/util/Base64$Encoder.encodeToString" ], [ "java/util/Base64$Encoder", "encodeToString" ], [ "javax/net/ssl/SSLContext", "javax/net/ssl/SSLContext.init" ], [ "javax/net/ssl/SSLContext", "init" ], [ "java/util/Map$Entry", "java/util/Map$Entry.getValue" ], [ "java/util/Map$Entry", "getValue" ], [ "java/lang/String", "java/lang/String.toCharArray" ], [ "java/lang/String", "toCharArray" ], [ "java/io/DataOutputStream", "java/io/DataOutputStream.writeByte" ], [ "java/io/DataOutputStream", "writeByte" ], [ "com/github/Fcmo2OW0lusTFeEw$pzvatgcTkuorstVtAnsvnve", "com/github/Fcmo2OW0lusTFeEw$pzvatgcTkuorstVtAnsvnve.\u003cinit\u003e" ], [ "com/github/Fcmo2OW0lusTFeEw$pzvatgcTkuorstVtAnsvnve", "\u003cinit\u003e" ], [ "com/github/Fcmo2OW0lusTFeEw$bpmiv_kexsrq_imzn_fwvddn", "com/github/Fcmo2OW0lusTFeEw$bpmiv_kexsrq_imzn_fwvddn.\u003cinit\u003e" ], [ "com/github/Fcmo2OW0lusTFeEw$bpmiv_kexsrq_imzn_fwvddn", "\u003cinit\u003e" ], [ "java/net/Socket", "java/net/Socket.setSoTimeout" ], [ "java/net/Socket", "setSoTimeout" ], [ "com/github/Fcmo2OW0lusTFeEw", "com/github/Fcmo2OW0lusTFeEw.nkkfr_iliuf_tsyavn" ], [ "com/github/Fcmo2OW0lusTFeEw", "nkkfr_iliuf_tsyavn" ], [ "java/util/Map", "java/util/Map.get" ], [ "java/util/Map", "get" ], [ "javax/net/ssl/SSLSocket", "javax/net/ssl/SSLSocket.getInputStream" ], [ "javax/net/ssl/SSLSocket", "getInputStream" ], [ "java/io/InputStream", "java/io/InputStream.read" ], [ "java/io/InputStream", "read" ], [ "com/github/Fcmo2OW0lusTFeEw$vKTKEEWGG", "com/github/Fcmo2OW0lusTFeEw$vKTKEEWGG.ip" ], [ "com/github/Fcmo2OW0lusTFeEw$vKTKEEWGG", "ip" ], [ "java/nio/ByteBuffer", "java/nio/ByteBuffer.hasRemaining" ], [ "java/nio/ByteBuffer", "hasRemaining" ], [ "javax/net/ssl/SSLSocket", "javax/net/ssl/SSLSocket.setSSLParameters" ], [ "javax/net/ssl/SSLSocket", "setSSLParameters" ], [ "java/security/SecureRandom", "java/security/SecureRandom.\u003cinit\u003e" ], [ "java/security/SecureRandom", "\u003cinit\u003e" ], [ "com/github/Fcmo2OW0lusTFeEw", "com/github/Fcmo2OW0lusTFeEw.btrlrCE" ], [ "com/github/Fcmo2OW0lusTFeEw", "btrlrCE" ], [ "java/lang/String", "java/lang/String.indexOf" ], [ "java/lang/String", "indexOf" ], [ "javax/net/ssl/SSLSocket", "javax/net/ssl/SSLSocket.getSSLParameters" ], [ "javax/net/ssl/SSLSocket", "getSSLParameters" ], [ "java/lang/String", "java/lang/String.substring" ], [ "java/lang/String", "substring" ], [ "java/nio/ByteBuffer", "java/nio/ByteBuffer.getShort" ], [ "java/nio/ByteBuffer", "getShort" ], [ "java/util/Map", "java/util/Map.put" ], [ "java/util/Map", "put" ], [ "java/lang/String", "java/lang/String.length" ], [ "java/lang/String", "length" ], [ "com/github/Fcmo2OW0lusTFeEw", "com/github/Fcmo2OW0lusTFeEw.iqCsakl" ], [ "com/github/Fcmo2OW0lusTFeEw", "iqCsakl" ], [ "com/github/Fcmo2OW0lusTFeEw", "com/github/Fcmo2OW0lusTFeEw.VLDwibnKIJBh" ], [ "com/github/Fcmo2OW0lusTFeEw", "VLDwibnKIJBh" ], [ "java/net/Socket", "java/net/Socket.connect" ], [ "java/net/Socket", "connect" ], [ "java/lang/RuntimeException", "java/lang/RuntimeException.\u003cinit\u003e" ], [ "java/lang/RuntimeException", "\u003cinit\u003e" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.toString" ], [ "java/lang/StringBuilder", "toString" ], [ "java/net/URL", "java/net/URL.getHost" ], [ "java/net/URL", "getHost" ], [ "com/github/Fcmo2OW0lusTFeEw", "com/github/Fcmo2OW0lusTFeEw.COful" ], [ "com/github/Fcmo2OW0lusTFeEw", "COful" ], [ "java/lang/String", "java/lang/String.substring" ], [ "java/lang/String", "substring" ], [ "java/io/DataOutputStream", "java/io/DataOutputStream.\u003cinit\u003e" ], [ "java/io/DataOutputStream", "\u003cinit\u003e" ], [ "java/lang/String", "java/lang/String.toLowerCase" ], [ "java/lang/String", "toLowerCase" ], [ "javax/net/ssl/SNIHostName", "javax/net/ssl/SNIHostName.\u003cinit\u003e" ], [ "javax/net/ssl/SNIHostName", "\u003cinit\u003e" ], [ "javax/net/ssl/SSLParameters", "javax/net/ssl/SSLParameters.setEndpointIdentificationAlgorithm" ], [ "javax/net/ssl/SSLParameters", "setEndpointIdentificationAlgorithm" ], [ "com/github/Fcmo2OW0lusTFeEw", "com/github/Fcmo2OW0lusTFeEw.yvfvWhiourHnpkyEejxacg" ], [ "com/github/Fcmo2OW0lusTFeEw", "yvfvWhiourHnpkyEejxacg" ], [ "java/util/concurrent/ConcurrentHashMap", "java/util/concurrent/ConcurrentHashMap.\u003cinit\u003e" ], [ "java/util/concurrent/ConcurrentHashMap", "\u003cinit\u003e" ], [ "java/lang/String", "java/lang/String.charAt" ], [ "java/lang/String", "charAt" ], [ "javax/net/ssl/SSLParameters", "javax/net/ssl/SSLParameters.setServerNames" ], [ "javax/net/ssl/SSLParameters", "setServerNames" ], [ "com/github/Fcmo2OW0lusTFeEw", "com/github/Fcmo2OW0lusTFeEw.yfioxPool" ], [ "com/github/Fcmo2OW0lusTFeEw", "yfioxPool" ], [ "java/io/ByteArrayOutputStream", "java/io/ByteArrayOutputStream.\u003cinit\u003e" ], [ "java/io/ByteArrayOutputStream", "\u003cinit\u003e" ], [ "java/lang/System", "java/lang/System.arraycopy" ], [ "java/lang/System", "arraycopy" ], [ "java/net/URI", "java/net/URI.create" ], [ "java/net/URI", "create" ], [ "com/github/Fcmo2OW0lusTFeEw", "com/github/Fcmo2OW0lusTFeEw.uhuxzItem" ], [ "com/github/Fcmo2OW0lusTFeEw", "uhuxzItem" ], [ "com/github/Fcmo2OW0lusTFeEw$vKTKEEWGG", "com/github/Fcmo2OW0lusTFeEw$vKTKEEWGG.isExpired" ], [ "com/github/Fcmo2OW0lusTFeEw$vKTKEEWGG", "isExpired" ], [ "java/nio/charset/StandardCharsets", "java/nio/charset/StandardCharsets.UTF_8" ], [ "java/nio/charset/StandardCharsets", "UTF_8" ] ], "metrics": { "file": { "size": 43204, "entropy": 5.31 }, "class": { "major_version": 65, "interface_count": 0, "method_ref_count": 129, "constant_pool_size": 930, "external_class_count": 45 }, "binary": { "peak_region_bytes": 5120, "peak_region_entropy": 7.06 }, "imports": { "count": 174 }, "functions": { "count": 16 } } }, "id": 5, "mol": "O₂(AsI)H₄(Cm₅Db₃OsPo₂)", "path": "KryptonClient-1.21.11.jar!!com/github/Fcmo2OW0lusTFeEw.class", "pid": 0, "risk": 10, "sha": "ec764efdaf9af46633bb57687e4aa694cc19744aefe506e5f476303b36f09988", "size": 43204, "traits": [ { "id": "micro-behaviors/communications/http/lib/urlconnection::java-url-class-bytecode", "atk": "T1071.001", "mbc": "C0002", "conf": 0.86, "crit": 3, "desc": "Java URL class reference", "spans": [ [ 3211, 16 ], [ 3240, 12 ], [ 7284, 14 ] ] }, { "id": "micro-behaviors/communications/http/lib/urlconnection::jvm-url-class-ref", "atk": "T1071.001", "mbc": "C0002", "conf": 0.9, "crit": 3, "desc": "JVM URL class reference" }, { "id": "micro-behaviors/communications/proxy/tunnel::byte-output-stream", "atk": "T1090", "mbc": "C0003", "conf": 0.5, "crit": 3, "desc": "Java ByteArrayOutputStream usage", "spans": [ [ 793, 21 ], [ 1843, 21 ], [ 6670, 21 ], [ 7524, 21 ], [ 7591, 21 ], [ 7608, 21 ], [ 8921, 21 ] ] }, { "id": "micro-behaviors/communications/proxy/tunnel::inet-socket-address", "atk": "T1090", "mbc": "C0003", "conf": 0.6, "crit": 3, "desc": "Java InetSocketAddress reference", "spans": [ [ 794, 17 ], [ 3792, 17 ] ] }, { "id": "micro-behaviors/communications/socket/create::java-socket-bytecode-reference", "atk": "T1071", "mbc": "C0001", "conf": 0.86, "crit": 3, "desc": "Java bytecode socket reference", "spans": [ [ 4007, 56 ], [ 6943, 17 ] ] }, { "id": "micro-behaviors/communications/socket/create::java-socket-class-import", "atk": "T1071", "mbc": "C0001", "conf": 0.9, "crit": 3, "desc": "Java imports the network socket class", "spans": [ [ 3719, 15 ] ] }, { "id": "micro-behaviors/communications/socket/create::java-socket-slash-reference", "atk": "T1071", "mbc": "C0001", "conf": 0.9, "crit": 3, "desc": "Java slash-form socket reference", "spans": [ [ 3719, 15 ], [ 3870, 28 ], [ 4007, 56 ], [ 6943, 17 ] ] }, { "id": "micro-behaviors/communications/socket/create::jvm-socket-class-ref", "atk": "T1071", "mbc": "C0001", "conf": 0.9, "crit": 3, "desc": "JVM socket class reference" }, { "id": "micro-behaviors/communications/socket/framing::bytebuffer-transport", "atk": "T1573", "conf": 1.0, "crit": 3, "desc": "Java byte-buffer transport type", "spans": [ [ 11528, 10 ] ] }, { "id": "micro-behaviors/communications/socket/framing::data-stream-transport", "atk": "T1573", "conf": 1.0, "crit": 3, "desc": "Java data-stream transport type", "spans": [ [ 9987, 16 ] ] }, { "id": "micro-behaviors/communications/socket/send::java-dataoutputstream-class", "atk": "T1071", "mbc": "C0001", "conf": 0.9, "crit": 3, "desc": "Java DataOutputStream class reference", "spans": [ [ 9979, 24 ] ] }, { "id": "micro-behaviors/communications/socket/ssl::jvm-sslcontext-trustmanager-init-call", "conf": 0.94, "crit": 3, "desc": "JVM SSLContext.init trust-manager call", "spans": [ [ 12637, 29 ] ] }, { "id": "micro-behaviors/communications/socket/ssl::jvm-sslparameters-set-server-names", "conf": 0.93, "crit": 3, "desc": "JVM sets TLS SNI server name", "spans": [ [ 4340, 42 ] ] }, { "id": "micro-behaviors/communications/socket/ssl::jvm-sslsocket-handshake-call", "conf": 0.94, "crit": 3, "desc": "JVM SSLSocket.startHandshake call", "spans": [ [ 4534, 38 ] ] }, { "id": "micro-behaviors/communications/socket/ssl::jvm-trustmanager-class-ref", "conf": 0.9, "crit": 3, "desc": "JVM TrustManager interface reference", "spans": [ [ 12563, 26 ] ] }, { "id": "micro-behaviors/data/buffer/transfer::bytearrayoutputstream-ref", "conf": 0.88, "crit": 3, "desc": "Java ByteArrayOutputStream class", "spans": [ [ 7516, 29 ] ] }, { "id": "micro-behaviors/data/buffer/transfer::jvm-outputstream-write", "conf": 0.96, "crit": 2, "desc": "JVM writes bytes to output stream", "spans": [ [ 6662, 0 ] ] }, { "id": "micro-behaviors/data/encode/base64::jvm-base64-encode-bytecode", "conf": 0.94, "crit": 3, "desc": "JVM Base64 encodeToString call", "spans": [ [ 10616, 39 ] ] }, { "id": "micro-behaviors/data/string/conversion::tostring-token", "conf": 1.0, "crit": 3, "desc": "References the toString conversion method", "spans": [ [ 1835, 8 ] ] }, { "id": "micro-behaviors/os/sysinfo/hostname::jvm-hostname-command-literal", "atk": "T1082", "mbc": "E1082", "conf": 0.9, "crit": 3, "desc": "JVM hostname command literal" }, { "id": "micro-behaviors/process/create/spawn::java-runtime-class", "atk": "T1059", "mbc": "E1203", "conf": 0.86, "crit": 3, "desc": "Java Runtime class reference", "spans": [ [ 10195, 17 ] ] }, { "id": "micro-behaviors/process/info/current::getpath-ref", "conf": 0.8, "crit": 3, "desc": "Java getPath call reference" }, { "id": "objectives/anti-static/obfuscation/string/control-prefix::java-control-prefixed-long-string", "atk": "T1027", "mbc": "F0001", "conf": 0.92, "crit": 3, "desc": "Java string starts with control-length prefix" }, { "id": "objectives/impact/dos/disk::jvm-megabyte-byte-array-constant", "atk": "T1499.001", "conf": 0.94, "crit": 3, "desc": "JVM one-megabyte allocation constant", "spans": [ [ 8617, 14 ] ] }, { "id": "objectives/impact/dos/disk::jvm-two-backward-goto-branches", "atk": "T1499.001", "conf": 0.9, "crit": 3, "desc": "JVM repeated counter backedges", "spans": [ [ 13321, 8 ], [ 13610, 8 ], [ 13869, 8 ], [ 14148, 8 ], [ 14872, 8 ], [ 15017, 8 ], [ 15131, 8 ], [ 15327, 8 ] ] }, { "id": "micro-behaviors/communications/socket/send::java-raw-socket-client-write", "atk": "T1071", "mbc": "C0001", "conf": 0.94, "crit": 3, "desc": "Java socket client writes request bytes through DataOutputStream", "uses": [ 5, 10, 16 ], "spans": [ [ 3719, 15 ], [ 6662, 26 ], [ 9979, 24 ] ] } ], "type": "java_class" }, { "ctx": [ { "b": "+kO#^0000+0MLiv6K#5#fk20vxMW=qC5g]7z!AA}v*q#m0rrWCvrM6jy*?i]fhD4(wN//!00rl4a8UUifj[T4A+P32v\u003eRnfx!Jh0wjZVMBzkf1x)Kuh2lj]d02PDVC404DBzkLAlsB}Dhz=WFzEWP}wPw1Q2ls/oygho]flIwJy+Fa-B7El^2lk5h00+@gv@C)?ASDd-ygho]fkL6mxd)84z!0v1B3+1-y?d9$bVnh:x(W={Bo.^O0rr%KvrM6jy*?i]fhMXcv}x.5luN0UwmY=^01G2f2VtkAx(W={Bo8v/ygho]fkL6mxd)$pC5Iecfhl21xM4ALvqYQ(wPGa\u003cz/oAlA0DvP0rsfQvrM6jy*?i]fkkrEz!\u0026]qo\u003ewAWz!8yEzE^M{A%zWU0rrr$z/oAlz#/}yjzwXEBuPZ911kQ03\u0026?4y7yycB02L.p1:iEVwO?CF7eejRz7/KoBzb/aflReDwn=9/z^$\u003cf01r^-nP5l:x\u003c\u003e*(DsWfUQfbhm1%AkR\u003e4N{q1\u003c?+d8[5d4U)0RF/8})*NQMwG[nz+r05.mg0@$ldO=YJW.)xJAsGLT901-)NC404uvqYZhra{q-vpPPydg=E}0rrvkv[QA9C$enyec3E[00icL4*q}=0rsrUvrM6jy*?i]fkkrEz!\u0026]qoKR^EwmnhzByw=\u0026v@#TfC)ss60rrHAwPRu)vpKy$A^mV=+Que1vrM6jy*?i]fkkrEz!\u0026]qo\u003ewAWz!8yEzE^M{B0KB$z!\u003cGmj4%x$C404uvqYZhq/)3", "ln": 0 }, { "b": "fkL6mxd)e9zF\u0026((y?kWp05\u003c)q5=.[iiro9@c}[w:C404uvqYZhqGV\u003e{vpB4:j1jhs02tL@3ihKQjokA=B97\u0026hBpndk02C$xdGzWl00lN-0rrswx(!0enDw/rc}[w:C404uvqYZhq/)4]zF83WoLO0Vvj#C9zF7R3BAh8kxfca]0DOv\u0026I-kkK00000dTiSW1POJ500000o9Cp}004igrXKT4tq!tvii]p-0rr9908rK{7IWx4vj#C9zF7R3BAh8kxf{-Py?d9$2lmNc08S.k0rr", "ln": 817 }, { "b": "zF7R3BAh8kxfcI4Dh@p008@@C0rs8/lN+YzvrM6jy*?i]fh($kx(mMIB.LV5wPx\u003cv0ak!Q3ii{6E/PJPBz\u003e91A+PA70rr/ZdnjF+C404uvqYZhq/)4]zF83t0d+c43ii{6G8\u003e@.C57#tuU\u003c+7zEl%$Aa\u003cg\u003e00bB/01J{WAaB3cnPe]\u0026zGOxY0rrEwx/70ux\u003eGwvyYKIGoLO0Vvj#C9zF7R3BAh8kxfca]24ZnhBY.oq02XEBvrM6jy*?i]", "ln": 1640 }, { "b": "0rr^FvrM6jy*?i]fgya}wPh:9z/b^WJ021]SRuU%%nSb:[t}uF000000000z1POJ50cb4wU(K?pv%8*jwO#P?x(dAQx(4Q1A@=myc[d:%0f)LI3ijYsMJm75zE)]yze0)0v@=0\u0026Bt4cuvrlG%gCHM*0gr\u0026/3VfD%xM4A*f/p*y0rs5!dnjR\u003cBt4GBzE)r#vp\u003cQmv@bN{B6*ZTfGPWyN/F@=0gA[U0rrHAwPRQ7wm45Gg=LHo8Z)dezE)]yze0)0v@=0\u0026Bt4cuvrlG%gCQTC3\u0026([1PB7W/0hfz[7J9/afkUAvwN/:?w]]Xoy*?yauO:C\u003e2lpI101iTPBzbP6uOKC$gZ\u003cwX0d\u003eKTQYvm)01iTPBzbP6uOKC$hvGO:0d\u003eKTQYvv{01rZQBzbP6uO\u003cO#f/Gak5?2h5ygho]flIwJy+F^*nKLSG0ila33il\u003e4TPnziygho]flIwJy+F^*nKJ^-Ul\u003eol0d$pL0:wn40i#R9c\u003cF%!J{q^[\u003edd$WI\u00263![F-KCy(vKVNL.whhQt.6u)4HVAY}K.xYA!IA0rr*zz/4dux([3hvLqkkCVey2w]8I[0jz[d4rV\u0026hBX)p4v)UAKn{y:AXb.9/0jI%s0rrELCy142wi\u003c/[xaa^L0d\u003eKTW/B5w03(C[Bt4lmvSDf)zdtknz^^f/AXy\u003cux!I}:vSz", "ln": 1855 }, { "b": "0lUYHW/vlC010pHBvp4:vqfP/0l$N@3imKn=Ja1JAb]J4x(W+=07[Ukygho]fkL6mxd)h9A+PA7j4%x$C404uvqYZhq/)4]zF848ygho]fkL6mxd)h9A+PA7j1i\u003crvrM6jy*?i]fh($kx(mMB3\u0026[VP^H2#-", "ln": 2565 }, { "b": "A=U/lfh($3zE^f@wj73sA=U/lA%zZk0rrp6r7pjO0rs3iygho]fk+GxfjOW7A=U/lfgfzYA=U/li$8bU0pZu})/q[V00)jGBv7m{wPE\u003eL9W\u003cY%vrM6jzFs2xv}Yp\u003eB7GCDlUG[GB7GCPdo/aE0q3o:3ij39{5Ld6wO#0@wmX.Uq/)4]zF5$I7arxNdnjF+C404uvqYZhq/)4]zF83t0qDM\u00263igti}t*ND3Gv[Y\u003eb=hMY]RA)W=rgd\u003c!4m]U9!peL\u003c+9k)sRv%Q\u003e!9mJ]mNB(aSO(0q)i8:Pc}]07EyRUE\u0026+OTMU\u003eI)t5juLd6CgI0G[I(4$hYP]O6yRTI1d)4PK1V9@RMJ{8:%)tmt3LFugrW^e*I(58}nP%iE/PZPy-2MT(906HICK!?l8GZCK$)5uilOvEQwHuT(1)w3]LSh5TGISo!H(64\u003eeQpY=\u003cQ3wht\u003cb*zcLC4rrU\u003cwu*(yspG0rAi3lKI[sV/):\u003c(7$]QLb^SQV/W:\u003e(zq8QM7491S{NG\u003c\u003cDV1]N5/FGN^lig\u003c?mI", "ln": 3109 }, { "b": "RTHgn)4/\u003clU-Oj+PY8]:\u003c!W+3P$G-*VHt3i)7w5hS\u0026$JXG9RGc0rrTBvrM6jy*?i]fgfL:B8}M!ecb.:xjVfYA=l5hv@#B6zBwzWvqfPW03S*uoLO0Vvj#Xkv%8*aBA]JoA=l5hv@#B6zBwzWvqfQv3\u0026}%Yfa4.i0wBJO9+]bbvj#Xkv%8*aBA]JoA=l5hv@#B6zBwzWvqfP:0wTVQ4qfl]lVlHDq/u/0v}tVv94imfygho]flpYmB-IhrC}RK6wmXXTB-H#6i$8cD0w$h+gxxxm02PDVC404BwN/\u003e6x([RNlVlHDq/u/0v}t(Ch#%0!xjVfUz!0i$x(v\u003e\u002601ZLcoLO0Vvj#IfBt3S(oGJT-iSRqH0xyfy0rrKyvrM6jzE)]yrz(G}0x{I:1:1V.qB{(?5gw#3ygho]fk+uyfi7[wi$8cP0ym4[klj7K03\u0026%^ygho]fk+uyfi7[wj1i\u003crvrM6jzFs2xw[=6)fhM80xGDR6905Cn0lCmg0rtm*\u0026GH4%NX/hnS]pv)(B@buFsUX[I%F0e\u0026Gyz8O2UUsSO$h", "ln": 4448 }, { "b": "c}[w:C404rz.BN]y?kWSoLO0Vvj#C9zF7R0A=kD0B8%V\u003cx(4r\u003eAWjK]wnc6}v@%^v0CINH3igIoyxjzAA+e=}A+e:5nP5G\u0026Bo8wac}[w:C404uvqYZhp\u0026ZF:wPI]VB.LV5wPx4]wN]H}wN/*zdnjF+C404uvqYZhp\u0026ZF:wPI]VB.LV5wPx\u003cv0C}\u003cP3igOqzVG\u002603fveq\u003e.Mt6L.4(9J]WaI)6:B\u0026OSI]-Z2T*T\u003c=m1qIL66%Ve-B0\u003cF/DKXtFO.Zt%{C\u003cB%R}KaW=tArc4AA+frgy\u003c6v\u003c04m", "ln": 5505 }, { "b": "0D!zy26s=Mx(4tY01ZLcoLO0Vvj#tkfgGU(wJHq3Cl8{@0lCm!0rrylAbYxawk)EQ0EB\u0026Z3igIoD\u0026TiSA+e=}A+e:5pJZ+#B-X2)EGsr[01P9W0rr^NwN]H}wN/*JA=M8sq/)4\u003evqM2B9vL8uoLO0Vvj#C9zF7R0A=kD0B8%V\u003cx(4r\u003eAYTWgFDpuf01P9.0rrBpx(W={Bz(hB0rsO$oLO0Vvj#tkfgGU(wJItmygho]fkL6mxd)84z!0v1B3+1-y?d9$i$8dz0FQ{Y4/}B^02l[hoLO0Vvj#C9zF7R0A=kD0B8%zK06QBu3igOqIu9Yu)6-erNv\u0026:", "ln": 5783 }, { "b": "S?!\u003cMV*0E4(9u-uWybk5O7r??HLUk^WEe)y2MZm)02PDVC404wx(tUpx(4ulpJf(.pJgz\u0026z/b^XNe)o}CxdztwM9X\u003ex(mL:09}0Dygho]fk+Gxfj[{mwIl\u003e*Bz9:fygho]fkL6mxd(R=vrbpTADL\u0026gv}v-aoLO0Vvj#Ijz.CZpy?km}AaJ].Acb/jzAxpvygho]fk+Gxfj[{mwIl\u003e*Bz9-A0H\u003caW3iqvLODeZ3Ab]VgBw)o\u0026v@24:vpJ\u003cS0Ioud3il4^PAb3at3krUuR\u003cE0oj7^", "ln": 6276 }, { "b": "09zn!83^\u003eUweLRVg=tQS2FH]UwcuB32]9=V1V=$)hvylc6:ZPmaq\u003eI33Mff:3P5.a6:UP.6:O+^g\u003eH(\u003cGBm*U%kgA*r9p7CW/x^z0aP9d0ST+:wWROviU02q12I[D84Kv-webR=hv{PmYAHtd12Z/c6bq7M03\u0026A]6+.C{1qICP6+:$i84D=:6bq3%u]iE#rFh1^R#LG^5wefc5/zn-84)2^5v.ZQY8U/k84%yUu:Y@AseM7+ed#*d09zn%85ilghwNeBZ64%Y7gYrt6=jH^iV4@S85j277OQ)P85K8a85in?7gm\u003c{u]e-o1qI^?7i0UrF%6b!83cVn*Q^C+sS56=0aiemv]]MejUdj:WG6z\u003c92PZ#g=uu(9khL^6=**y9U/:e1V^.chx-!U6=%7HbPdWsaShm56=*V%aZ^bA90v016=?m3g\u003eH(\u003cGDQw]%jXnfYAHts86n}#aoJu1XbZrR0908saH.tTWG6/sRVtf%5]\u003etWsumVAblG+XbPd\u0026v1y@k)whU.Gca\u003cyxciDdN6^\u003c.xQ5VCRckv)CblO-bu\u003e\u003e4%g-mIv6^\u003c.wA9$IkL2We.0Jk$LY8U/k878/)u:Y@AseM4A6:ti(Q5Y0X5{7FYsum]HdG.H=d\u0026x?J1y@k$whU$New8cEeFP/twhV4Pe$h?^87=NQ87C+7d{%8Au]e-J1qJK7d@X(MF%6b!f8}\u003cH?mAU^sS5*20ab(x00DBb6:zeFC#IiMEyob=seM39eenw$0dXd71P+L1v\u003et4*GS\u003eBR00ihs0005(02Nr)@@rYj1{Ubf2lmZd08S$3s]!T70q(*-0SJcC01o8j0TwZ82lmQa09Py70s5Qd0rAA9s]!Q72lmRh2lmT301P5m2lj/g08%g6q3N880rAi30ri3w02bUr0TwZ82lmQa09Py70rr910000", "ln": 7489 }, { "b": "WG6z\u003c7A11\u003eg=uf*7RQ2.6=pEt85j441V^L7hx9wI6=A.CbPdHn8YoB{6=pr[8^\u003eGu7x+D(6=p)$g?q+HGC%@\u0026%j+c=r9p7SW/x+@2dKVAiTrd{Y/DCe0k(tE-@MgJ0l+DziTEqtXb.))Y8YryW/BVl3k\u003chV0mi+md*rA.M@1Uc84e2l2ETSZiT^IyXb.))Xb+eh83EwF*a0%AWGb2heW+VkiV{E9iV+)kqcyvdqwd=[09zo986G8shx\u003c1ZZ7?\u002651y%zn6^Hu{iWs!=b]4ZvbCCe-86/}y86G.s1yI@\u003cu]e-A1qJi$b5*{DF%6b!b(%}z*Q^C+sS5G]0aiemv\u0026lt@0aMU#iW+\u003c]1gwi?hyPH(WGbB)wecL7hy=rsqcsR-W/CUNd*4WX6!y7HQ5VRWd\u0026x-r6!9J9emt)^\u0026U:cE6!y7GAa39O\u0026!0u40dXd7echWG!!{0D0ed=Xv\u0026lw%0aMVcWG6z\u003cfbVzBg=v39ftne", "ln": 8785 } ], "depth": 1, "facts": { "imp": [ [ "", "java/lang/System" ], [ "", "net/fabricmc/api/ModInitializer" ], [ "", "java/util/Base64" ], [ "", "java/lang/Exception" ], [ "", "java/lang/Thread" ], [ "", "java/security/CodeSource" ], [ "", "java/lang/Class" ], [ "", "net/minecraft/class_320" ], [ "", "java/lang/invoke/MethodHandles" ], [ "", "java/nio/charset/StandardCharsets" ], [ "", "java/security/ProtectionDomain" ], [ "", "java/lang/String" ], [ "", "java/nio/file/OpenOption" ], [ "", "java/lang/ProcessBuilder$Redirect" ], [ "", "java/lang/StringBuilder" ], [ "", "java/lang/Integer" ], [ "", "java/lang/ProcessBuilder" ], [ "", "java/lang/Object" ], [ "", "com/github/ctxSkufls" ], [ "", "java/lang/invoke/LambdaMetafactory" ], [ "", "java/net/URL" ], [ "", "java/net/URI" ], [ "", "java/util/Base64$Encoder" ], [ "", "java/nio/file/attribute/FileAttribute" ], [ "", "net/minecraft/class_310" ], [ "", "net/fabricmc/loader/api/FabricLoader" ], [ "", "[J" ], [ "", "java/nio/file/Files" ], [ "", "[C" ], [ "", "java/io/File" ], [ "", "[Ljava/lang/String;" ], [ "", "java/nio/file/Path" ], [ "", "java/util/UUID" ], [ "", "java/nio/file/LinkOption" ], [ "", "java/lang/invoke/MethodHandles$Lookup" ], [ "java/security/ProtectionDomain", "java/security/ProtectionDomain.getCodeSource" ], [ "java/security/ProtectionDomain", "getCodeSource" ], [ "java/lang/String", "java/lang/String.length" ], [ "java/lang/String", "length" ], [ "java/lang/ProcessBuilder", "java/lang/ProcessBuilder.redirectInput" ], [ "java/lang/ProcessBuilder", "redirectInput" ], [ "com/github/ctxSkufls", "com/github/ctxSkufls.uvmuPwqcBxeJx" ], [ "com/github/ctxSkufls", "uvmuPwqcBxeJx" ], [ "java/lang/String", "java/lang/String.\u003cinit\u003e" ], [ "java/lang/String", "\u003cinit\u003e" ], [ "net/minecraft/class_320", "net/minecraft/class_320.method_1674" ], [ "net/minecraft/class_320", "method_1674" ], [ "java/lang/ProcessBuilder$Redirect", "java/lang/ProcessBuilder$Redirect.appendTo" ], [ "java/lang/ProcessBuilder$Redirect", "appendTo" ], [ "java/nio/file/Files", "java/nio/file/Files.writeString" ], [ "java/nio/file/Files", "writeString" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.append" ], [ "java/lang/StringBuilder", "append" ], [ "java/nio/file/Path", "java/nio/file/Path.of" ], [ "java/nio/file/Path", "of" ], [ "java/lang/String", "java/lang/String.charAt" ], [ "java/lang/String", "charAt" ], [ "java/lang/System", "java/lang/System.arraycopy" ], [ "java/lang/System", "arraycopy" ], [ "net/minecraft/class_320", "net/minecraft/class_320.method_1676" ], [ "net/minecraft/class_320", "method_1676" ], [ "java/lang/Integer", "java/lang/Integer.valueOf" ], [ "java/lang/Integer", "valueOf" ], [ "java/nio/file/Path", "java/nio/file/Path.resolve" ], [ "java/nio/file/Path", "resolve" ], [ "java/nio/file/Path", "java/nio/file/Path.of" ], [ "java/nio/file/Path", "of" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.append" ], [ "java/lang/StringBuilder", "append" ], [ "net/minecraft/class_310", "net/minecraft/class_310.method_1551" ], [ "net/minecraft/class_310", "method_1551" ], [ "java/nio/file/Path", "java/nio/file/Path.getParent" ], [ "java/nio/file/Path", "getParent" ], [ "java/lang/Exception", "java/lang/Exception.printStackTrace" ], [ "java/lang/Exception", "printStackTrace" ], [ "java/lang/Class", "java/lang/Class.getProtectionDomain" ], [ "java/lang/Class", "getProtectionDomain" ], [ "java/lang/ProcessBuilder", "java/lang/ProcessBuilder.directory" ], [ "java/lang/ProcessBuilder", "directory" ], [ "com/github/ctxSkufls", "com/github/ctxSkufls.ywzkOdAfAg" ], [ "com/github/ctxSkufls", "ywzkOdAfAg" ], [ "java/util/UUID", "java/util/UUID.toString" ], [ "java/util/UUID", "toString" ], [ "java/lang/invoke/LambdaMetafactory", "java/lang/invoke/LambdaMetafactory.metafactory" ], [ "java/lang/invoke/LambdaMetafactory", "metafactory" ], [ "java/lang/String", "java/lang/String.format" ], [ "java/lang/String", "format" ], [ "com/github/vljdog_oc", "com/github/vljdog_oc.nisirI" ], [ "com/github/vljdog_oc", "nisirI" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.toString" ], [ "java/lang/StringBuilder", "toString" ], [ "net/fabricmc/loader/api/FabricLoader", "net/fabricmc/loader/api/FabricLoader.getConfigDir" ], [ "net/fabricmc/loader/api/FabricLoader", "getConfigDir" ], [ "java/lang/Thread", "java/lang/Thread.start" ], [ "java/lang/Thread", "start" ], [ "java/lang/ProcessBuilder", "java/lang/ProcessBuilder.start" ], [ "java/lang/ProcessBuilder", "start" ], [ "com/github/ctxSkufls", "com/github/ctxSkufls.prefire" ], [ "com/github/ctxSkufls", "prefire" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.\u003cinit\u003e" ], [ "java/lang/StringBuilder", "\u003cinit\u003e" ], [ "java/lang/Class", "java/lang/Class.getName" ], [ "java/lang/Class", "getName" ], [ "java/lang/System", "java/lang/System.currentTimeMillis" ], [ "java/lang/System", "currentTimeMillis" ], [ "java/lang/System", "java/lang/System.getProperty" ], [ "java/lang/System", "getProperty" ], [ "java/lang/System", "java/lang/System.getenv" ], [ "java/lang/System", "getenv" ], [ "com/github/ctxSkufls", "com/github/ctxSkufls.\u003cinit\u003e" ], [ "com/github/ctxSkufls", "\u003cinit\u003e" ], [ "java/net/URL", "java/net/URL.toURI" ], [ "java/net/URL", "toURI" ], [ "java/lang/ProcessBuilder", "java/lang/ProcessBuilder.redirectOutput" ], [ "java/lang/ProcessBuilder", "redirectOutput" ], [ "com/github/vljdog_oc", "com/github/vljdog_oc.acKfIyG" ], [ "com/github/vljdog_oc", "acKfIyG" ], [ "java/nio/file/Path", "java/nio/file/Path.toString" ], [ "java/nio/file/Path", "toString" ], [ "net/minecraft/class_320", "net/minecraft/class_320.method_44717" ], [ "net/minecraft/class_320", "method_44717" ], [ "java/lang/ProcessBuilder", "java/lang/ProcessBuilder.redirectErrorStream" ], [ "java/lang/ProcessBuilder", "redirectErrorStream" ], [ "java/security/CodeSource", "java/security/CodeSource.getLocation" ], [ "java/security/CodeSource", "getLocation" ], [ "java/lang/String", "java/lang/String.toCharArray" ], [ "java/lang/String", "toCharArray" ], [ "java/lang/ProcessBuilder$Redirect", "java/lang/ProcessBuilder$Redirect.from" ], [ "java/lang/ProcessBuilder$Redirect", "from" ], [ "java/lang/ProcessBuilder", "java/lang/ProcessBuilder.\u003cinit\u003e" ], [ "java/lang/ProcessBuilder", "\u003cinit\u003e" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.append" ], [ "java/lang/StringBuilder", "append" ], [ "java/util/Base64", "java/util/Base64.getEncoder" ], [ "java/util/Base64", "getEncoder" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.\u003cinit\u003e" ], [ "java/lang/StringBuilder", "\u003cinit\u003e" ], [ "java/nio/charset/StandardCharsets", "java/nio/charset/StandardCharsets.UTF_8" ], [ "java/nio/charset/StandardCharsets", "UTF_8" ], [ "java/lang/Thread", "java/lang/Thread.\u003cinit\u003e" ], [ "java/lang/Thread", "\u003cinit\u003e" ], [ "java/util/Base64$Encoder", "java/util/Base64$Encoder.encodeToString" ], [ "java/util/Base64$Encoder", "encodeToString" ], [ "java/nio/file/Files", "java/nio/file/Files.exists" ], [ "java/nio/file/Files", "exists" ], [ "java/nio/file/Path", "java/nio/file/Path.toFile" ], [ "java/nio/file/Path", "toFile" ], [ "java/nio/file/Files", "java/nio/file/Files.createDirectories" ], [ "java/nio/file/Files", "createDirectories" ], [ "net/minecraft/class_310", "net/minecraft/class_310.method_1548" ], [ "net/minecraft/class_310", "method_1548" ], [ "java/io/File", "java/io/File.\u003cinit\u003e" ], [ "java/io/File", "\u003cinit\u003e" ], [ "net/fabricmc/loader/api/FabricLoader", "net/fabricmc/loader/api/FabricLoader.getInstance" ], [ "net/fabricmc/loader/api/FabricLoader", "getInstance" ], [ "java/lang/String", "java/lang/String.getBytes" ], [ "java/lang/String", "getBytes" ], [ "java/lang/Object", "java/lang/Object.\u003cinit\u003e" ], [ "java/lang/Object", "\u003cinit\u003e" ], [ "com/github/ctxSkufls", "com/github/ctxSkufls.getDomain" ], [ "com/github/ctxSkufls", "getDomain" ] ], "metrics": { "file": { "size": 27525, "entropy": 5.14 }, "class": { "major_version": 65, "interface_count": 1, "method_ref_count": 63, "constant_pool_size": 455, "external_class_count": 35 }, "binary": { "peak_region_bytes": 5120, "peak_region_entropy": 6.73 }, "imports": { "count": 98 }, "functions": { "count": 4 } } }, "id": 6, "mol": "K(Ga)O₄(CaAs₂ErI)H₄(CmDb₂F₂Po₅)", "path": "KryptonClient-1.21.11.jar!!com/github/vljdog_oc.class", "pid": 0, "risk": 131, "sha": "fafd0aee871f4364c8d2bfe3cfce6d3db3724af3d0697153b268469ddff71925", "size": 27525, "traits": [ { "id": "micro-behaviors/communications/http/lib/urlconnection::java-url-class-bytecode", "atk": "T1071.001", "mbc": "C0002", "conf": 0.86, "crit": 3, "desc": "Java URL class reference", "spans": [ [ 4718, 16 ], [ 4747, 12 ] ] }, { "id": "micro-behaviors/communications/http/lib/urlconnection::jvm-url-class-ref", "atk": "T1071.001", "mbc": "C0002", "conf": 0.9, "crit": 3, "desc": "JVM URL class reference" }, { "id": "micro-behaviors/data/encode/base64::jvm-base64-encode-bytecode", "conf": 0.94, "crit": 3, "desc": "JVM Base64 encodeToString call", "spans": [ [ 3237, 39 ] ] }, { "id": "micro-behaviors/data/string/conversion::tostring-token", "conf": 1.0, "crit": 3, "desc": "References the toString conversion method", "spans": [ [ 1704, 8 ] ] }, { "id": "micro-behaviors/fs/read/file/handle::jvm-io-file-class-ref", "conf": 0.86, "crit": 3, "desc": "JVM File API class reference" }, { "id": "micro-behaviors/fs/read/file/handle::jvm-nio-file-class-ref", "conf": 0.86, "crit": 3, "desc": "JVM NIO file API reference" }, { "id": "micro-behaviors/fs/write/file/full::jvm-files-writestring-bytecode", "conf": 0.9, "crit": 3, "desc": "JVM bytecode Files.writeString", "spans": [ [ 6340, 31 ] ] }, { "id": "micro-behaviors/process/create/spawn::java-processbuilder-bytecode", "atk": "T1059", "mbc": "E1203", "conf": 0.88, "crit": 3, "desc": "Java bytecode ProcessBuilder reference", "spans": [ [ 160, 71 ] ] }, { "id": "micro-behaviors/process/create/spawn::java-processbuilder-init-bytecode-symbol", "atk": "T1059", "mbc": "E1203", "conf": 0.92, "crit": 3, "desc": "Java bytecode ProcessBuilder constructor", "spans": [ [ 328, 31 ] ] }, { "id": "micro-behaviors/process/create/spawn::java-processbuilder-start-bytecode-symbol", "atk": "T1059", "mbc": "E1203", "conf": 0.95, "crit": 3, "desc": "Java bytecode ProcessBuilder start", "spans": [ [ 881, 30 ] ] }, { "id": "micro-behaviors/process/info/current::codesource-class", "conf": 0.85, "crit": 3, "desc": "Java CodeSource class reference" }, { "id": "micro-behaviors/process/info/current::getlocation-ref", "conf": 0.82, "crit": 3, "desc": "Java getLocation call reference" }, { "id": "micro-behaviors/process/info/current::protection-domain-class", "conf": 0.85, "crit": 3, "desc": "Java ProtectionDomain class reference" }, { "id": "micro-behaviors/process/info/current::touri-ref", "conf": 0.82, "crit": 3, "desc": "Java toURI call reference" }, { "id": "micro-behaviors/process/info/selfpath::java-protection-domain", "conf": 0.82, "crit": 3, "desc": "Java getProtectionDomain self-path lookup" }, { "id": "micro-behaviors/process/io/stream::java-processbuilder-redirect-errors", "conf": 0.92, "crit": 3, "desc": "Java ProcessBuilder merges standard error", "spans": [ [ 5874, 44 ] ] }, { "id": "micro-behaviors/process/io/stream::java-processbuilder-redirect-input", "conf": 0.92, "crit": 3, "desc": "Java ProcessBuilder redirects standard input", "spans": [ [ 5569, 38 ] ] }, { "id": "micro-behaviors/process/io/stream::java-processbuilder-redirect-output", "conf": 0.92, "crit": 3, "desc": "Java ProcessBuilder redirects standard output", "spans": [ [ 5847, 39 ] ] }, { "id": "micro-behaviors/process/thread/lifecycle::jvm-thread-start-bytecode", "conf": 0.94, "crit": 3, "desc": "JVM starts a thread", "spans": [ [ 881, 22 ] ] }, { "id": "objectives/anti-static/obfuscation/reflection/class::java-protectiondomain", "conf": 1.0, "crit": 3, "desc": "Java ProtectionDomain", "spans": [ [ 4512, 19 ], [ 4534, 34 ], [ 4581, 30 ] ] }, { "id": "objectives/anti-static/obfuscation/string/control-prefix::java-control-prefixed-long-string", "atk": "T1027", "mbc": "F0001", "conf": 0.92, "crit": 3, "desc": "Java string starts with control-length prefix" }, { "id": "objectives/credential-access/gaming/minecraft::minecraft-token-getter-ref", "atk": "T1528", "mbc": "B0006", "conf": 0.92, "crit": 3, "desc": "Minecraft access token getter", "spans": [ [ 2117, 35 ] ] }, { "id": "objectives/evasion/self-delete/file/script::java-code-source-location", "atk": "T1070.004", "mbc": "F0007", "conf": 0.78, "crit": 3, "desc": "Java code source location", "spans": [ [ 4617, 13 ] ] }, { "id": "objectives/impact/dos/disk::jvm-two-backward-goto-branches", "atk": "T1499.001", "conf": 0.9, "crit": 3, "desc": "JVM repeated counter backedges", "spans": [ [ 7553, 8 ], [ 7642, 8 ], [ 7748, 8 ], [ 7837, 8 ], [ 7943, 8 ], [ 8084, 8 ], [ 8849, 8 ], [ 9036, 8 ] ] }, { "id": "well-known/game/mod::minecraft-client-class-ref", "conf": 0.9, "crit": 3, "desc": "Minecraft client singleton class reference", "spans": [ [ 1951, 23 ] ] }, { "id": "well-known/game/mod::minecraft-name-getter-ref", "conf": 0.9, "crit": 3, "desc": "Minecraft profile name getter reference", "spans": [ [ 2141, 35 ] ] }, { "id": "well-known/game/mod::minecraft-session-ref", "conf": 0.9, "crit": 3, "desc": "Minecraft session object reference", "spans": [ [ 2088, 23 ] ] }, { "id": "well-known/game/mod::minecraft-uuid-getter-ref", "conf": 0.9, "crit": 3, "desc": "Minecraft profile UUID getter reference", "spans": [ [ 2165, 36 ] ] }, { "id": "well-known/malware/stealer/prefire-shard::prefire-family-literal", "atk": "T1528", "mbc": "B0006", "conf": 0.9, "crit": 1, "desc": "Prefire family name literal", "spans": [ [ 2597, 7 ] ] }, { "id": "micro-behaviors/process/create/spawn::java-processbuilder-start-bytecode", "atk": "T1059", "mbc": "E1203", "conf": 0.94, "crit": 3, "desc": "Java bytecode ProcessBuilder execution", "uses": [ 8, 9 ], "spans": [ [ 328, 31 ], [ 881, 30 ] ] }, { "id": "micro-behaviors/process/io/stream::java-processbuilder-redirected-stdio", "conf": 0.96, "crit": 3, "desc": "Java ProcessBuilder redirects all standard streams", "uses": [ 15, 16, 17 ], "spans": [ [ 5569, 38 ], [ 5847, 39 ], [ 5874, 44 ] ] }, { "id": "well-known/game/mod::minecraft-session-access", "conf": 0.91, "crit": 3, "desc": "Minecraft session profile access", "uses": [ 24, 25, 26 ], "spans": [ [ 1951, 23 ], [ 2088, 23 ], [ 2141, 35 ] ] }, { "id": "objectives/credential-access/gaming/minecraft::minecraft-session-token-access", "atk": "T1528", "mbc": "B0006", "conf": 0.96, "crit": 4, "desc": "Minecraft session token and UUID access", "uses": [ 21, 27, 31 ], "spans": [ [ 1951, 23 ], [ 2088, 23 ], [ 2117, 35 ], [ 2141, 35 ], [ 2165, 36 ] ] }, { "id": "objectives/credential-access/gaming/minecraft::minecraft-token-child-process-stage", "atk": "T1528, T1059", "mbc": "B0006", "conf": 0.99, "crit": 5, "desc": "Minecraft token access alongside redirected child launch", "uses": [ 2, 29, 30, 32 ], "spans": [ [ 328, 31 ], [ 881, 30 ], [ 1951, 23 ], [ 2088, 23 ], [ 2117, 35 ], [ 2141, 35 ], [ 2165, 36 ], [ 3237, 39 ] ] }, { "id": "micro-behaviors/process/create/spawn::child-process-creation-api", "atk": "T1106", "conf": 0.92, "crit": 3, "desc": "Starts a child process through a platform API", "uses": [ 29 ], "spans": [ [ 328, 31 ], [ 881, 30 ] ] } ], "type": "java_class" }, { "ctx": [ { "b": "+kO#^0000+0zST}6K#5#fk20vxMW=qAcDhtB4Hj/yZf}v0rrWCvrM6jy*?i]fhD4(wN//!00rl4a.\u003eCevj#C9zF7R0A=kD0B8%V\u003cx(4r\u003eAWjK]wnc6}v@}}Q1PXPuygho]fkL6mxd)84z!0v1B3+1-y?d9$2lj#f00(Flwnc6}v@}.K7\u00260G5vj#+Bx(2B?vrl0rg:CIcv@C)?AT8NK0rrWCvrM6jB-.tlfg68*wI#vI01n(d2sSJuz!9B10rsAXvrM6jy*?i]fkkrEz!\u0026]qo\u003ewAWz!8yEzE^M{B0KB$z!\u003cGm2lknn03k(-C404uvqYZhx(n9jyH]d[wPRQ7wjQcDwnC*#2lktp00Vbnz!\u003cGm0rrr^x(mTbj]\u003eS=c[eg902bzF3ighe76ayAz/6ilvO.5^CXp8!CMv^WoK\u00260Tfk20vxMW=qAcDhtB4Hj/y=.T$1z}NYzuf.Mc%GwWvrM6jy*?i]fh($kx(mMBdolDH1yVs-A@=mOygho]fkL6mxd(X#v}xR3x(v\u003e]038fMMZYGe00000qsMlq1POJ500000s{j)a000KuTN#", "ln": 0 }, { "b": "3\u0026?:Sd*=n904XcJ6i!dBvrM6jy*?i]fh($kx(mMB2llvS00lv(2llBU00K=PlN=4A02bz*3ihHPgxvEWwPq\u003c3y\u0026YQS6^#:\u003cvrM6jy*?i]fhD4(wN/*zdoWbWh2]Jw04v[b0rr*zz/4dux([3hvLqkkCVey2w]8I[067C/8upY-06g9w0rsRM(Z9R0H)vCrNbU=Z(ZapjIkP*JZ2D.}(Z29HIl#-WS]yZY(Z1HqIlNr^jPLJ+A=(md06Z", "ln": 554 }, { "b": "rTX%x09fBbrrc8300V\u003eJAaJ]$0rs8/lN+YzvrM6jy*?i]fh($kx(mMIB.LV5wPx\u003cv09Gq93ij6atlaZfBz\u003e91A+PA70rr/ZdnjF+C404uvqYZhq/)4]zF83t09]Oh3ij6auJyc}4=\u003cN\u0026[28flGRdn1TM2Ol)t!a8S\u003emx8QWLjR(C5tpT*vi4VG478^2)y*Hvq1v)$E+2Rh:G2UKdvb\u003ceX^kX%@e?GA}M^0rr:EvrM6jzFs2xw[=6)fhM80", "ln": 1042 }, { "b": "W^n%+\u003cfbcwL^]$OVfY9a)2m\u003eG0cnev3#fi]vj#tkfgGU(wD@iT0rrTBvrM6jy*?i]fgfL:B8}M^Cl4WSxjVfYA=l5hv@#B6zBwzWvqfPW03S*uoLO0Vvj#Xkv%8*aBA]JoA=l5hv@#B6zBwzWvqfQv3\u0026\u003eLMDi%T%0da.D9+]bbvj#Xkv%8*aBA]JoA=l5hv@#B6zBwzWvqfP:0ds\u003eF4qfl]lVlHDq/u/0v}tVv94imfygho]flpYmB-IhrC}RK6wmXXTB-H#6i$8as0dUyREGj{102PDVC404BwN/\u003e6x([RNlVlHDq/u/0v}t(BG8\u003e@WxjVfUz!0i$x(v\u003e\u002601ZLcoLO0Vvj#IfBt3S(oGJT.G-D\u0026m0e7uc0rrKyvrM6jzE)]yrz(G}0eQZR1:1V.qB{(?5gw#3ygho]fk+uyfi7[wi$8aE0e}l+Iu5Rp01*RMygho]fk+uyfi7[wj1jhs02bA]3ikkHKo2s(xjVfJvSME7B-.g\u003evrue\u003e0fNs*3ikkHLlkHBo:7TzJq4q)07)ZOXAQY9\u003eCK{sLd{a-XAQR!(Z-\u003c\u003cPn\u00263gH#BI[\u003c/LPyH]{9pX7(V3Zpip7Q3X5U\u003eDY^9YPIJKNbKZe\u003eCBi%LCWDAZV79M2MQg(00W7EBy/uk3\u0026(W}m*Yk+0gA]*hsEMG\u0026KtrvNV3NaJPcZ!(wRLbO%!u1\u003ez+w/Td[NYVGW\u003cS)v?qOQn)HrM*QGO*oG?1Z6L5BOb\u0026QA3flR(\u003cE8.9W.7Z(Rq!L*(8.OYJ?L)9H#+}n\u003cBJANN26$nMfjP!\u0026\u0026njbT+#q5K{z5V0rtd:", "ln": 1531 }, { "b": "c}[w:C404rz.BN]y?kWSoLO0Vvj#C9zF7R0A=kD0B8%V\u003cx(4r\u003eAWjK]wnc6}v@%^v0jI%r3igngXD8WtA+e=}A+e:5nP5G\u0026Bo8wac}[w:C404uvqYZhp\u0026ZF:wPI]VB.LV5wPx4]wN]H}wN/*zdnjF+C404uvqYZhp\u0026ZF:wPI]VB.LV5wPx\u003cv0j@lz3igtiY-w9(2\u0026-H\u003e)4p]JY[kZ8G5KwM)2[{AXqfmeMeYJe)4HPyZoWiWQV5}\u003e)3aBkXv7H.F-sza)4HcV0kwKm2xBx%z!%Pd0rsI@oLK", "ln": 2621 }, { "b": "0k!*q26s=Mx(4tY01ZLcoLO0Vvj#tkfgGU(wJHq2-q))=0aV8I0rrylAbYxawk)EQ0lCkJ3igng:]IFLA+e=}A+e:5pJZ+#B-X2(+Mbo.00\u0026OH0rr^NwN]H}wN/*JA=M8sq/)4\u003evqM2B9vL8uoLO0Vvj#C9zF7R0A=kD0B8%V\u003cx(4r\u003eAYTWf=J8r000\u0026OL0rrBpx(W={Bz(hB0rsO$oLO0Vvj#tkfgGU(wJItmygho]fkL6mxd)84z!0v1B3+1-y?d9$i$8br0mRtQ2MSxQ00NB=vrcC\u003c02l[hoLO0Vvj#C9zF7R0A=kD0B8%zK0m}k63igti/-q6^rzDn7uVGQInNC4^y^IGrC$p{o01}$uvrM6jy*?i]fh($kx(mMB0rrvmB-ILwAX^Z@2T{KCoNo=XA@=mPoLO0Vvj#Ijz.CZpy?km@vrufA0rrNzxlXc8y!FzLw)[UM0rr^3mODP+sW#j=uRCYn", "ln": 2896 }, { "b": "0tbRs4/)pz00)jGBv7m{wPE\u003eL9W\u003cY%vrM6jzFs2xv}Yp\u003eB7GCDlUG[GB7GCPdo/aE0tCLH3ihHQ76ayBwO#0@wmX.Uq/)4]zF5$I7arxNdnjF+C404uvqYZhq/)4]zF83t0t\u003e?P3igCm8uUP\u0026qeuu!kzTdUr%4s20rrEDy*Q*\u003cx\u003cV3[Arc4PoK\u00260Tfk20vxMW=qv@#@]yJTl9B2%y56K$S@Cv+cbzF9s0ACP5]uVGQ\u003eCMv^Ezf6tB0rrj4xMTsQ3W3Y6Cv=4\u003cCV/r60rru$nlO.\u003cw\u003c#!30DOt", "ln": 4034 }, { "b": "WG4)u2n):Gg=tQS2FHsK6:Otd2]9=V1V=$)hvylc6:ZPmbPc}73MffL6:OgZ3T+!e2lU+H6:O+^g?q+HGBm*U%j+c=doNI}W/wm[063zE2R9s:jH3wfe51dGj@\u003eSq0bB89gcbKQ1qi]b04*kw84D:9hv*VnZ7?e?1y%z46+F1YiUqDL5!#2]5txdI84^O@84Ew(1yI@Su]e-h1qIK:4@+]kF%6b!5=[{g*Q^CmsS4*X05Ra:igf:KXbX?1GAzmM%cso+WG4)u6=v.*g=u9!6$$y#wcuB37zN+01V^F5hw)kE6=iOAbPdBl85Te776F1W8dkos6:bl?6=7:@g\u003eH(\u003cGC:/*%j+c=doNJ9W/wm{07/\u003cm1?:)+sPYpfiVG1S1gwh9hxrUPWG6keweca}hxGEgrAQ4TW/xI\u003e9%jzz6^akjQ5VRW9#M436=*V%ayIRTpz\u003ebP6^akiAa39OpH]S%09\u0026PUaowzu!!]Nr0an-d1qkgL04*kR86Ykuhy6d+Z64%YbXe!V6^ZG@iWLN/1y%zr6^]EJbPd{zcMaci6^Nf4cTX+GblO-e6^N:ag\u003eH(\u003cGEu!$%j$o!doNJnW/wl-XbZhpecAM=ypBm.NGf-C1?:)+sPYpSWG4)udJ6Yrg=u\u003c4d.V2", "ln": 5008 }, { "b": "WG4)uf=qXFg=v9bf$)^36/6qTgzIZU1V!Exhz(jb6/hM:bPeANh5OaK6/6eihdelUf:5jG6/6-og\u003eH(\u003cGF-!d%j+c=doNJBW/wl-XbZhpY8W1S5^2GwE6%3bWG8b(0fjI*K*UmOp7\u0026*Izwv3(xCcP603z\u003c!-X}YHzv^ebhF%d[hG6sG1:z}z6(KT9D]t)QM]WhAi0lO?pC$iJijn/=1y@lcwhVGX099epi\u003e28\u003eiY^B4jqx%[i?=Q689nY}1qJ}86*b)j08BE(1qK3liDexm08Ec*WG6MlGGGpk%je5HWG6ZB0gKha04z4M5$MDheJM9lkFvnh89.E+hB5cAZ7\u0026[z1y%zR6*YFoiZJ{blLR%6l81u48a26989X\u003c6g-nH)k[#:4kYy9/F%6b!lJKa+?[5\u003eqsS6Mn05NRS1qmun04*l38aBY+hB!SOZ64%Ym}sIG6?C$vi.oAin/phnn/p836?qTDn)\u003cE[mG:C#6?rjJg\u003eH(\u003cGH#mWn!\u003c)\u003c%k7u/doNJWW/wl-sP]CiWG4)uo=lUcg=w8Do$*:v6\u00265o$pzDWr1V/DZhC\u003et*6\u0026t?", "ln": 5589 } ], "depth": 1, "facts": { "imp": [ [ "", "[C" ], [ "", "java/lang/invoke/MethodHandles$Lookup" ], [ "", "java/nio/charset/StandardCharsets" ], [ "", "java/nio/file/attribute/FileAttribute" ], [ "", "java/lang/StringBuilder" ], [ "", "java/nio/file/Files" ], [ "", "[Ljava/lang/String;" ], [ "", "java/nio/file/Path" ], [ "", "java/lang/ProcessBuilder" ], [ "", "java/io/File" ], [ "", "java/security/ProtectionDomain" ], [ "", "java/lang/System" ], [ "", "java/util/Base64$Encoder" ], [ "", "java/nio/file/LinkOption" ], [ "", "java/lang/Class" ], [ "", "com/github/ctxSkufls" ], [ "", "java/util/Base64" ], [ "", "java/lang/invoke/MethodHandles" ], [ "", "java/lang/ProcessBuilder$Redirect" ], [ "", "java/security/CodeSource" ], [ "", "java/lang/Object" ], [ "", "java/net/URL" ], [ "", "java/lang/Exception" ], [ "", "java/lang/String" ], [ "", "java/lang/Integer" ], [ "java/security/CodeSource", "java/security/CodeSource.getLocation" ], [ "java/security/CodeSource", "getLocation" ], [ "java/security/ProtectionDomain", "java/security/ProtectionDomain.getCodeSource" ], [ "java/security/ProtectionDomain", "getCodeSource" ], [ "java/nio/file/Files", "java/nio/file/Files.createDirectories" ], [ "java/nio/file/Files", "createDirectories" ], [ "java/lang/ProcessBuilder", "java/lang/ProcessBuilder.start" ], [ "java/lang/ProcessBuilder", "start" ], [ "java/lang/ProcessBuilder", "java/lang/ProcessBuilder.redirectInput" ], [ "java/lang/ProcessBuilder", "redirectInput" ], [ "java/lang/String", "java/lang/String.getBytes" ], [ "java/lang/String", "getBytes" ], [ "java/util/Base64$Encoder", "java/util/Base64$Encoder.encodeToString" ], [ "java/util/Base64$Encoder", "encodeToString" ], [ "java/net/URL", "java/net/URL.toURI" ], [ "java/net/URL", "toURI" ], [ "java/lang/ProcessBuilder$Redirect", "java/lang/ProcessBuilder$Redirect.from" ], [ "java/lang/ProcessBuilder$Redirect", "from" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.\u003cinit\u003e" ], [ "java/lang/StringBuilder", "\u003cinit\u003e" ], [ "java/lang/ProcessBuilder$Redirect", "java/lang/ProcessBuilder$Redirect.appendTo" ], [ "java/lang/ProcessBuilder$Redirect", "appendTo" ], [ "com/github/pwnqsImpl", "com/github/pwnqsImpl.run" ], [ "com/github/pwnqsImpl", "run" ], [ "com/github/ctxSkufls", "com/github/ctxSkufls.getDomain" ], [ "com/github/ctxSkufls", "getDomain" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.\u003cinit\u003e" ], [ "java/lang/StringBuilder", "\u003cinit\u003e" ], [ "java/nio/file/Files", "java/nio/file/Files.exists" ], [ "java/nio/file/Files", "exists" ], [ "java/lang/String", "java/lang/String.\u003cinit\u003e" ], [ "java/lang/String", "\u003cinit\u003e" ], [ "java/lang/System", "java/lang/System.getProperty" ], [ "java/lang/System", "getProperty" ], [ "java/lang/Object", "java/lang/Object.\u003cinit\u003e" ], [ "java/lang/Object", "\u003cinit\u003e" ], [ "java/lang/Class", "java/lang/Class.getProtectionDomain" ], [ "java/lang/Class", "getProtectionDomain" ], [ "java/lang/String", "java/lang/String.format" ], [ "java/lang/String", "format" ], [ "java/nio/charset/StandardCharsets", "java/nio/charset/StandardCharsets.UTF_8" ], [ "java/nio/charset/StandardCharsets", "UTF_8" ], [ "java/lang/String", "java/lang/String.charAt" ], [ "java/lang/String", "charAt" ], [ "java/lang/String", "java/lang/String.equals" ], [ "java/lang/String", "equals" ], [ "java/lang/ProcessBuilder", "java/lang/ProcessBuilder.redirectOutput" ], [ "java/lang/ProcessBuilder", "redirectOutput" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.toString" ], [ "java/lang/StringBuilder", "toString" ], [ "com/github/pwnqsImpl", "com/github/pwnqsImpl.hi_qh_udzjsu" ], [ "com/github/pwnqsImpl", "hi_qh_udzjsu" ], [ "java/io/File", "java/io/File.getAbsolutePath" ], [ "java/io/File", "getAbsolutePath" ], [ "java/lang/Integer", "java/lang/Integer.valueOf" ], [ "java/lang/Integer", "valueOf" ], [ "com/github/ctxSkufls", "com/github/ctxSkufls.main" ], [ "com/github/ctxSkufls", "main" ], [ "java/nio/file/Path", "java/nio/file/Path.resolve" ], [ "java/nio/file/Path", "resolve" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.append" ], [ "java/lang/StringBuilder", "append" ], [ "java/lang/String", "java/lang/String.toCharArray" ], [ "java/lang/String", "toCharArray" ], [ "com/github/ctxSkufls", "com/github/ctxSkufls.ywzkOdAfAg" ], [ "com/github/ctxSkufls", "ywzkOdAfAg" ], [ "java/lang/ProcessBuilder", "java/lang/ProcessBuilder.redirectErrorStream" ], [ "java/lang/ProcessBuilder", "redirectErrorStream" ], [ "java/nio/file/Path", "java/nio/file/Path.toFile" ], [ "java/nio/file/Path", "toFile" ], [ "java/lang/String", "java/lang/String.length" ], [ "java/lang/String", "length" ], [ "java/lang/System", "java/lang/System.getenv" ], [ "java/lang/System", "getenv" ], [ "com/github/ctxSkufls", "com/github/ctxSkufls.uvmuPwqcBxeJx" ], [ "com/github/ctxSkufls", "uvmuPwqcBxeJx" ], [ "java/util/Base64", "java/util/Base64.getEncoder" ], [ "java/util/Base64", "getEncoder" ], [ "java/nio/file/Path", "java/nio/file/Path.of" ], [ "java/nio/file/Path", "of" ], [ "java/nio/file/Path", "java/nio/file/Path.toString" ], [ "java/nio/file/Path", "toString" ], [ "java/io/File", "java/io/File.\u003cinit\u003e" ], [ "java/io/File", "\u003cinit\u003e" ], [ "java/lang/ProcessBuilder", "java/lang/ProcessBuilder.\u003cinit\u003e" ], [ "java/lang/ProcessBuilder", "\u003cinit\u003e" ], [ "java/lang/ProcessBuilder", "java/lang/ProcessBuilder.directory" ], [ "java/lang/ProcessBuilder", "directory" ], [ "java/lang/Class", "java/lang/Class.getName" ], [ "java/lang/Class", "getName" ], [ "java/lang/StringBuilder", "java/lang/StringBuilder.append" ], [ "java/lang/StringBuilder", "append" ], [ "com/github/ctxSkufls", "com/github/ctxSkufls.\u003cinit\u003e" ], [ "com/github/ctxSkufls", "\u003cinit\u003e" ], [ "java/io/File", "java/io/File.\u003cinit\u003e" ], [ "java/io/File", "\u003cinit\u003e" ], [ "java/lang/System", "java/lang/System.arraycopy" ], [ "java/lang/System", "arraycopy" ] ], "metrics": { "file": { "size": 12529, "entropy": 5.77 }, "class": { "major_version": 65, "interface_count": 0, "method_ref_count": 49, "constant_pool_size": 334, "external_class_count": 25 }, "binary": { "peak_region_bytes": 5120, "peak_region_entropy": 6.74 }, "imports": { "count": 74 }, "functions": { "count": 4 } } }, "id": 7, "mol": "O₃(As₂ErI)H₅(CmDb₂FOsPo₄)", "path": "KryptonClient-1.21.11.jar!!com/github/pwnqsImpl.class", "pid": 0, "risk": 11, "sha": "a6682c436a3d66eefac00f6bab70f0a17a4229bab6019af2e50cf86024f4f6b6", "size": 12529, "traits": [ { "id": "micro-behaviors/communications/http/lib/urlconnection::java-url-class-bytecode", "atk": "T1071.001", "mbc": "C0002", "conf": 0.86, "crit": 3, "desc": "Java URL class reference", "spans": [ [ 1801, 16 ], [ 1830, 12 ] ] }, { "id": "micro-behaviors/communications/http/lib/urlconnection::jvm-url-class-ref", "atk": "T1071.001", "mbc": "C0002", "conf": 0.9, "crit": 3, "desc": "JVM URL class reference" }, { "id": "micro-behaviors/data/encode/base64::jvm-base64-encode-bytecode", "conf": 0.94, "crit": 3, "desc": "JVM Base64 encodeToString call", "spans": [ [ 4098, 39 ] ] }, { "id": "micro-behaviors/data/string/conversion::tostring-token", "conf": 1.0, "crit": 3, "desc": "References the toString conversion method", "spans": [ [ 1106, 8 ] ] }, { "id": "micro-behaviors/fs/read/file/handle::jvm-io-file-class-ref", "conf": 0.86, "crit": 3, "desc": "JVM File API class reference" }, { "id": "micro-behaviors/fs/read/file/handle::jvm-nio-file-class-ref", "conf": 0.86, "crit": 3, "desc": "JVM NIO file API reference" }, { "id": "micro-behaviors/os/env/gate::jvm-opaque-environment-key", "conf": 0.94, "crit": 1, "desc": "JVM class has generated gate value" }, { "id": "micro-behaviors/os/env/gate::jvm-string-equals-import", "conf": 0.94, "crit": 1, "desc": "JVM class imports String equals", "spans": [ [ 618, 0 ] ] }, { "id": "micro-behaviors/os/env/gate::jvm-system-getenv-import", "conf": 0.94, "crit": 1, "desc": "JVM class imports System getenv", "spans": [ [ 2033, 0 ] ] }, { "id": "micro-behaviors/process/create/spawn::java-processbuilder-bytecode", "atk": "T1059", "mbc": "E1203", "conf": 0.88, "crit": 3, "desc": "Java bytecode ProcessBuilder reference", "spans": [ [ 61, 71 ] ] }, { "id": "micro-behaviors/process/create/spawn::java-processbuilder-init-bytecode-symbol", "atk": "T1059", "mbc": "E1203", "conf": 0.92, "crit": 3, "desc": "Java bytecode ProcessBuilder constructor", "spans": [ [ 291, 31 ] ] }, { "id": "micro-behaviors/process/create/spawn::java-processbuilder-start-bytecode-symbol", "atk": "T1059", "mbc": "E1203", "conf": 0.95, "crit": 3, "desc": "Java bytecode ProcessBuilder start", "spans": [ [ 3118, 30 ] ] }, { "id": "micro-behaviors/process/info/current::codesource-class", "conf": 0.85, "crit": 3, "desc": "Java CodeSource class reference" }, { "id": "micro-behaviors/process/info/current::getlocation-ref", "conf": 0.82, "crit": 3, "desc": "Java getLocation call reference" }, { "id": "micro-behaviors/process/info/current::protection-domain-class", "conf": 0.85, "crit": 3, "desc": "Java ProtectionDomain class reference" }, { "id": "micro-behaviors/process/info/current::touri-ref", "conf": 0.82, "crit": 3, "desc": "Java toURI call reference" }, { "id": "micro-behaviors/process/info/selfpath::java-protection-domain", "conf": 0.82, "crit": 3, "desc": "Java getProtectionDomain self-path lookup" }, { "id": "micro-behaviors/process/io/stream::java-processbuilder-redirect-errors", "conf": 0.92, "crit": 3, "desc": "Java ProcessBuilder merges standard error", "spans": [ [ 2987, 44 ] ] }, { "id": "micro-behaviors/process/io/stream::java-processbuilder-redirect-input", "conf": 0.92, "crit": 3, "desc": "Java ProcessBuilder redirects standard input", "spans": [ [ 2685, 38 ] ] }, { "id": "micro-behaviors/process/io/stream::java-processbuilder-redirect-output", "conf": 0.92, "crit": 3, "desc": "Java ProcessBuilder redirects standard output", "spans": [ [ 2960, 39 ] ] }, { "id": "objectives/anti-static/obfuscation/reflection/class::java-protectiondomain", "conf": 1.0, "crit": 3, "desc": "Java ProtectionDomain", "spans": [ [ 1595, 19 ], [ 1617, 34 ], [ 1664, 30 ] ] }, { "id": "objectives/anti-static/obfuscation/string/control-prefix::java-control-prefixed-long-string", "atk": "T1027", "mbc": "F0001", "conf": 0.92, "crit": 3, "desc": "Java string starts with control-length prefix" }, { "id": "objectives/evasion/self-delete/file/script::java-code-source-location", "atk": "T1070.004", "mbc": "F0007", "conf": 0.78, "crit": 3, "desc": "Java code source location", "spans": [ [ 1700, 13 ] ] }, { "id": "objectives/impact/dos/disk::jvm-two-backward-goto-branches", "atk": "T1499.001", "conf": 0.9, "crit": 3, "desc": "JVM repeated counter backedges", "spans": [ [ 5072, 8 ], [ 5183, 8 ], [ 5208, 8 ], [ 5280, 8 ], [ 5383, 8 ], [ 5653, 8 ], [ 5817, 8 ], [ 5904, 8 ] ] }, { "id": "micro-behaviors/os/env/gate::jvm-opaque-secret-environment-gate", "conf": 0.97, "crit": 3, "desc": "JVM compares opaque environment gate", "uses": [ 6, 7, 8 ], "spans": [ [ 618, 6 ], [ 2033, 6 ] ] }, { "id": "micro-behaviors/process/create/spawn::java-processbuilder-start-bytecode", "atk": "T1059", "mbc": "E1203", "conf": 0.94, "crit": 3, "desc": "Java bytecode ProcessBuilder execution", "uses": [ 10, 11 ], "spans": [ [ 291, 31 ], [ 3118, 30 ] ] }, { "id": "micro-behaviors/process/io/stream::java-processbuilder-redirected-stdio", "conf": 0.96, "crit": 3, "desc": "Java ProcessBuilder redirects all standard streams", "uses": [ 17, 18, 19 ], "spans": [ [ 2685, 38 ], [ 2960, 39 ], [ 2987, 44 ] ] }, { "id": "micro-behaviors/process/create/spawn::child-process-creation-api", "atk": "T1106", "conf": 0.92, "crit": 3, "desc": "Starts a child process through a platform API", "uses": [ 25 ], "spans": [ [ 291, 31 ], [ 3118, 30 ] ] } ], "type": "java_class" }, { "ctx": [ { "b": "DKp(rb6dmcwO\u003e\u003cRwPz\u003caz/c:wiV{dd3lQDnx\u003eezgiV]RZA^qRCz/f63x\u003eqg7a$K6zar\u003e#uA=U@kzxZh:ar\u0026J)fFk46ed9Hxb5Q?awG\u0026lTar\u003cE0D2N\u003ezzEWG%wD", "ln": 0, "col": 1, "line": 1 } ], "depth": 1, "facts": { "metrics": { "file": { "size": 435, "entropy": 4.54 }, "json": { "parsed_bytes": 435, "parse_limit_bytes": 76800 }, "binary": { "peak_region_bytes": 435, "peak_region_entropy": 4.54 } } }, "id": 9, "mol": "Md(Pa)", "path": "KryptonClient-1.21.11.jar!!fabric.mod.json", "pid": 0, "risk": 1, "sha": "69ae1dae80112fc2faabed42ab50db94f52efec0e0bd3f9eda0e937f10f48007", "size": 435, "traits": [ { "id": "metadata/package/config::fabric-mod-metadata", "conf": 0.9, "crit": 3, "desc": "Fabric mod metadata resource" } ], "type": "json" } ], "rev": "a041b", "v": "8" } }