Full admin rights through a COM-based UAC bypass — no prompt, no popup, no user click. From there the payload elevates itself to SYSTEM via token capture, unlocking every capability while looking like a trusted system service.

PowerShell payloads run with AMSI patched and ETW telemetry dead before the first line executes. Defender's script scanning sees nothing; EDR gets no events. Your scripts land clean, every time.

Every build ships fully obfuscated with encrypted strings and scrubbed binaries — no hardcoded indicators, no signatures to accumulate. Each jar build rotates its identity, so one detection never burns the operation.

The client refreshes itself on every launch — updates ship instantly with zero redistribution. Bypass improved, feature added, fix deployed: every machine picks it up the next time the game opens. Old jars never go stale.