{
  "ml": {
    "v": "7",
    "eng": "2.2.0-beta.2",
    "lvl": -1,
    "conf": 0,
    "mods": [
      {
        "cls": 0,
        "raw": 0.00025638938,
        "rte": "az",
        "prob": 0.00025638938
      },
      {
        "cls": 0,
        "raw": 0.052186698,
        "rte": "az/crx",
        "prob": 0.052186698
      }
    ],
    "prob": 0.00025638938,
    "files": [
      {
        "id": 0,
        "lvl": -1,
        "conf": 0,
        "prob": 0.0002563893795013428,
        "type": "crx"
      },
      {
        "id": 1,
        "lvl": -1,
        "conf": 0,
        "prob": 0.00001385807991027832,
        "type": "png"
      },
      {
        "id": 2,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000010261933311994653,
        "type": "chrome-manifest"
      },
      {
        "id": 3,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000024884939193725586,
        "type": "javascript"
      },
      {
        "id": 4,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000011483828529890161,
        "type": "text"
      },
      {
        "id": 5,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000011692444786604028,
        "type": "json"
      }
    ],
    "version": "v18.18",
    "analyzed_at": "2026-06-27T23:32:32Z"
  },
  "path": "lgcffmgdjbpijjldfncgkbjgjcohiiim.crx",
  "raw": {
    "files": [
      {
        "id": 0,
        "ctx": [
          {
            "b": "lVK}s0@@r39r=Ay608iyRueD60u%ib1{(=lnqu\u003cF0rAi800v/N4/!qn0sw)W0rAgY}[Dw{v/",
            "n": [
              {
                "c": 3,
                "d": "Staged loader six file archive",
                "i": "objectives/command-and-control/backdoor/loader/archive::staged-loader-six-files",
                "o": 0,
                "z": 25,
                "cf": 0.949999988079071
              }
            ],
            "ln": 0
          }
        ],
        "mol": "O(C)H(Os)",
        "sha": "4e0f09d4cea8b51e0760d5307bddc623a535a58f08cba19d89718c96827b5b45",
        "path": "/data/samples/unknown/foraged/chrome/google.com/chromewebstore.google.com/lgcffmgdjbpijjldfncgkbjgjcohiiim/lgcffmgdjbpijjldfncgkbjgjcohiiim.crx",
        "risk": 3,
        "size": 42300,
        "type": "crx",
        "facts": {
          "metrics": {
            "file": {
              "size": 42300.0,
              "entropy": 7.99,
              "size_bytes": 42300.0
            },
            "binary": {
              "overall_entropy": 7.99,
              "peak_region_bytes": 41984.0,
              "peak_region_entropy": 7.83
            },
            "archive": {
              "file_count": 6.0,
              "member_count": 7.0,
              "prefix_bytes": 1321.0,
              "script_count": 1.0,
              "zip_bomb_ratio": 2.33,
              "directory_count": 1.0,
              "executable_count": 0.0,
              "extra_field_size": 0.0,
              "noise_file_count": 0.0,
              "total_compressed": 40127.0,
              "compression.ratio": 0.74,
              "hidden_file_count": 0.0,
              "total_uncompressed": 54320.0,
              "crc_collision_count": 0.0,
              "entry_comment_count": 0.0,
              "max_filename_length": 32.0,
              "rtlo_filename_count": 0.0,
              "format.regular_count": 6.0,
              "nested_archive_count": 0.0,
              "path_traversal_count": 0.0,
              "symlink_escape_count": 0.0,
              "security.setgid_count": 0.0,
              "security.setuid_count": 0.0,
              "security.sticky_count": 0.0,
              "double_extension_count": 0.0,
              "duplicate_member_count": 0.0,
              "format.directory_count": 1.0,
              "security.symlink_count": 0.0,
              "unicode_filename_count": 0.0,
              "homoglyph_filename_count": 0.0,
              "security.encrypted_count": 0.0,
              "timing.mtime_unique_count": 5.0,
              "timing.mtime_unique_ratio": 0.71,
              "misplaced_executable_count": 0.0,
              "timing.mtime_dominant_count": 3.0,
              "timing.mtime_spread_seconds": 128.0,
              "timing.sentinel_mtime_count": 0.0,
              "security.world_writable_count": 0.0,
              "timing.mtime_dominant_fraction": 0.43,
              "compression.method_counts.deflate": 7.0
            }
          }
        },
        "ident": {
          "trust": "self_signed",
          "identifier": {
            "value": "lfoeajgcchlidpicbabpmckkejpckcfb",
            "source": "crx.extension_id",
            "verified": true
          },
          "unique_ids": {
            "crx_id": "lfoeajgcchlidpicbabpmckkejpckcfb",
            "public_key_sha256": "b5e4096227b83f82101fc2aa49f2a251accde3d98471464dd17d1819b43786b0"
          }
        },
        "traits": [
          {
            "id": "objectives/credential-access/theft/keywords::secret",
            "conf": 0.30000001192092896,
            "crit": 1,
            "desc": "Credential-access vocabulary word: secret",
            "from": [
              {
                "file": 3
              }
            ]
          },
          {
            "id": "metadata/permission/manifest::extension-conventional-version",
            "conf": 0.949999988079071,
            "crit": 2,
            "desc": "Extension uses conventional version"
          },
          {
            "id": "metadata/permission/manifest::extension-description-field",
            "conf": 0.949999988079071,
            "crit": 2,
            "desc": "Extension declares description field"
          },
          {
            "id": "micro-behaviors/os/clipboard/access::browser-clipboard-write",
            "atk": "T1115",
            "conf": 0.9200000166893005,
            "crit": 3,
            "desc": "Browser clipboard write API",
            "from": [
              {
                "file": 3
              }
            ]
          },
          {
            "id": "metadata/permission/manifest::extension-name-field",
            "conf": 0.949999988079071,
            "crit": 2,
            "desc": "Extension declares name field"
          },
          {
            "id": "metadata/permission/manifest::chrome-webstore-verified-contents",
            "conf": 0.949999988079071,
            "crit": 1,
            "desc": "Chrome Web Store verified contents"
          },
          {
            "id": "metadata/signed/platform::web-extension-manifest",
            "conf": 1.0,
            "crit": 1,
            "desc": "Web-extension manifest.json at archive root"
          },
          {
            "id": "objectives/command-and-control/backdoor/loader/archive::staged-loader-six-files",
            "conf": 0.949999988079071,
            "crit": 3,
            "desc": "Staged loader six file archive",
            "spans": [
              [
                0,
                25
              ]
            ]
          }
        ]
      },
      {
        "depth": 1,
        "facts": {
          "metrics": {
            "png": {
              "a_entropy": 0.0,
              "chunk_count": 6.0,
              "trailing_bytes": 0.0,
              "idat_chunk_count": 1.0,
              "text_chunk_bytes": 1534.0,
              "chunks_after_iend": 0.0,
              "compression_ratio": 0.86,
              "unknown_chunk_count": 1.0
            },
            "file": {
              "size": 42157.0,
              "entropy": 7.39,
              "size_bytes": 42157.0
            },
            "image": {
              "width": 128.0,
              "height": 128.0,
              "channels": 3.0,
              "b_entropy": 6.15,
              "g_entropy": 6.66,
              "r_entropy": 7.16,
              "edge_density": 0.13,
              "pixel_entropy": 6.98,
              "histogram_flatness": 0.87
            },
            "binary": {
              "overall_entropy": 7.39,
              "peak_region_bytes": 30720.0,
              "peak_region_entropy": 7.83
            }
          }
        },
        "id": 1,
        "path": "/data/samples/unknown/foraged/chrome/google.com/chromewebstore.google.com/lgcffmgdjbpijjldfncgkbjgjcohiiim/lgcffmgdjbpijjldfncgkbjgjcohiiim.crx!!icon128.png",
        "sha": "68af32dddabd6ff2cab67bc4c973deb24de0001af1f641954ac730a05a1b1b11",
        "size": 42157,
        "traits": [
          {
            "id": "objectives/anti-static/obfuscation/steganography/image::r-channel-high",
            "atk": "T1027.003",
            "mbc": "B0032.001",
            "conf": 0.6000000238418579,
            "crit": 1,
            "desc": "Red channel entropy above normal",
            "spans": [
              [
                0,
                22
              ]
            ]
          },
          {
            "id": "metadata/package/files/included::png-extension-basename",
            "conf": 0.8999999761581421,
            "crit": 1,
            "desc": "Filename ends with .png",
            "spans": [
              [
                0,
                11
              ]
            ]
          }
        ],
        "type": "png"
      },
      {
        "ctx": [
          {
            "b": "DJ",
            "n": [
              {
                "c": 2,
                "d": "Declares \"storage\" permission",
                "i": "micro-behaviors/browser-extension/permission/storage::declared",
                "o": 0,
                "z": 1,
                "cf": 0.949999988079071
              }
            ],
            "ln": 1,
            "addr": 0
          },
          {
            "b": "b6v\u003cnvru6/B-IpxiV]RWBAzFyiXJc@y?WD#BAoh\u0026xk.Z3y?kkez/4dGwPz%dv}vroAaAy0wIL]GA^e=V",
            "n": [
              {
                "c": 2,
                "d": "Extension uses Google update URL",
                "i": "metadata/permission/manifest::extension-google-update-url",
                "o": 2,
                "z": 47,
                "cf": 0.949999988079071
              }
            ],
            "ln": 2,
            "addr": 2
          },
          {
            "b": "",
            "ln": 3,
            "addr": 67
          },
          {
            "b": "arR\u003eBvqY^\u003ewPI%2C4CYnx(v(kiV{jf",
            "n": [
              {
                "c": 2,
                "d": "Chrome extension manifest file",
                "i": "metadata/permission/manifest::is-chrome-manifest",
                "o": 71,
                "z": 1,
                "cf": 0.949999988079071
              }
            ],
            "ln": 4,
            "addr": 69
          },
          {
            "b": "arR\u003eCvqPN1iV]RmvqfL6awD=@x)9{bx(v(iqfu/0wPG4D",
            "n": [
              {
                "c": 2,
                "d": "Extension declares name field",
                "i": "metadata/permission/manifest::extension-name-field",
                "o": 97,
                "z": 23,
                "cf": 0.949999988079071
              }
            ],
            "ln": 5,
            "addr": 95
          },
          {
            "b": "arR\u003eKwPz\u003caz/c:War\u0026J)fFk46ec",
            "n": [
              {
                "c": 2,
                "d": "Extension uses conventional version",
                "i": "metadata/permission/manifest::extension-conventional-version",
                "o": 135,
                "z": 5,
                "cf": 0.949999988079071
              }
            ],
            "ln": 6,
            "addr": 133
          },
          {
            "b": "arR\u003eswPIv4x(Ffdz/c:War\u003c-}wGUA0azC.mAa%ubzF78iB-hwkaz1$\u003exDQ?]C}Hjbz/x$Az/M$gD1gV4azbLjayPeaBzblae*q?",
            "n": [
              {
                "c": 2,
                "d": "Extension declares description field",
                "i": "metadata/permission/manifest::extension-description-field",
                "o": 158,
                "z": 59,
                "cf": 0.949999988079071
              }
            ],
            "ln": 7,
            "addr": 156
          },
          {
            "b": "arR\u003epv@#B6zx.a:DJ",
            "ln": 8,
            "addr": 237
          },
          {
            "b": "arR^Hb4Lm%vrDyduVZ17y?j!Kar\u003ciZx(55qo(Cb/C42Gbz/cW{B-hwkB0rd",
            "ln": 9,
            "addr": 252
          },
          {
            "b": "arV7-",
            "ln": 11,
            "addr": 336
          },
          {
            "b": "arR\u003exv@Dmab03\u0026[",
            "ln": 12,
            "addr": 342
          },
          {
            "b": "arR^Ha#7\u0026jb03?\u003cx\u003e870f!$ZvAbGqj",
            "n": [
              {
                "c": 2,
                "d": "Extension declares 128px icon",
                "i": "metadata/permission/manifest::extension-icon-128",
                "o": 360,
                "z": 11,
                "cf": 0.949999988079071
              }
            ],
            "ln": 13,
            "addr": 356
          },
          {
            "b": "arV7-",
            "ln": 14,
            "addr": 382
          },
          {
            "b": "arR\u003eEwPzT4B8#5lzGv0.ax{4hBz(hdxjSn)",
            "ln": 15,
            "addr": 388
          }
        ],
        "depth": 1,
        "facts": {
          "metrics": {
            "file": {
              "size": 421.0,
              "entropy": 4.76,
              "size_bytes": 421.0
            },
            "binary": {
              "overall_entropy": 4.76,
              "peak_region_bytes": 421.0,
              "peak_region_entropy": 4.76
            }
          }
        },
        "id": 2,
        "path": "/data/samples/unknown/foraged/chrome/google.com/chromewebstore.google.com/lgcffmgdjbpijjldfncgkbjgjcohiiim/lgcffmgdjbpijjldfncgkbjgjcohiiim.crx!!manifest.json",
        "risk": 1,
        "sha": "825fb2ae793b4176046b898315db5384a98c38f3e9cab650602331d1ab5f9d85",
        "size": 421,
        "traits": [
          {
            "id": "metadata/permission/manifest::extension-name-field",
            "conf": 0.949999988079071,
            "crit": 2,
            "desc": "Extension declares name field",
            "spans": [
              [
                97,
                23
              ]
            ]
          },
          {
            "id": "metadata/permission/manifest::extension-description-field",
            "conf": 0.949999988079071,
            "crit": 2,
            "desc": "Extension declares description field",
            "spans": [
              [
                158,
                59
              ]
            ]
          },
          {
            "id": "metadata/permission/manifest::extension-google-update-url",
            "conf": 0.949999988079071,
            "crit": 2,
            "desc": "Extension uses Google update URL",
            "spans": [
              [
                2,
                47
              ]
            ]
          },
          {
            "id": "metadata/permission/manifest::extension-conventional-version",
            "conf": 0.949999988079071,
            "crit": 2,
            "desc": "Extension uses conventional version",
            "spans": [
              [
                135,
                5
              ]
            ]
          },
          {
            "id": "metadata/permission/manifest::extension-icon-128",
            "conf": 0.949999988079071,
            "crit": 2,
            "desc": "Extension declares 128px icon",
            "spans": [
              [
                360,
                11
              ]
            ]
          },
          {
            "id": "metadata/permission/manifest::chrome-extension-basic-metadata",
            "conf": 0.949999988079071,
            "crit": 2,
            "desc": "Chrome extension has basic metadata",
            "spans": [
              [
                97,
                23
              ],
              [
                135,
                5
              ],
              [
                158,
                59
              ]
            ]
          }
        ],
        "type": "chrome-manifest"
      },
      {
        "ctx": [
          {
            "b": "fdF8jvqfL6awD=@x)9{bx(v(iqfu/0wPF$CaAhmrB-n%FA@",
            "n": [
              {
                "c": 2,
                "d": "Benign encoded JavaScript context",
                "i": "metadata/lang/encoded/unicode-escape::javascript-benign-context",
                "o": 0,
                "z": 8,
                "cf": 1.0
              }
            ],
            "ln": 1,
            "addr": 0
          },
          {
            "b": "arR!3x(mT4vqE69wPzT4B8#5lzGu{GB98tvvp%c]z/fxpdj#-iC4CYtBzbxaxcqkqzGu}pz!0i(y\u003cvS",
            "ln": 2,
            "addr": 39
          },
          {
            "b": "dLy",
            "ln": 3,
            "addr": 104
          },
          {
            "b": "",
            "ln": 4,
            "addr": 108
          },
          {
            "b": "v@DmaBrz?KjS(d]diH=qay]z2B.$YcBs}MQwPA5{wO+{/Bz(gFB16f",
            "n": [
              {
                "c": 1,
                "d": "getElementById/querySelector DOM (querySelector)",
                "i": "micro-behaviors/ui/window/manage/dom::dom-element-lookup--queryselector",
                "o": 136,
                "z": 13,
                "cf": 0.8999999761581421
              }
            ],
            "ln": 5,
            "addr": 110
          },
          {
            "b": "",
            "ln": 6,
            "addr": 155
          },
          {
            "b": "fe1C1eIe8xB-hwkay[]5viu$txM4{kefF\u003eyw]8g0wHO-NeIc",
            "ln": 7,
            "addr": 157
          },
          {
            "b": "v@DmaBrBBXpGf+YauZ\u0026K",
            "ln": 8,
            "addr": 197
          },
          {
            "b": "arT(jra]?=B7F\u003c4wPP5kw/$.$BAzkmxcpR@wNP9(x(+zfwPS3dzF78kByxiiwN)zqefW!%A+=^%Cvti6b3=-",
            "n": [
              {
                "c": 2,
                "d": "English language detection",
                "i": "metadata/file/profile/language::lang-english",
                "o": 219,
                "z": 3,
                "cf": 0.800000011920929
              },
              {
                "c": 1,
                "d": "Credential-access vocabulary word: secret",
                "i": "objectives/credential-access/theft/keywords::secret",
                "o": 223,
                "z": 6,
                "cf": 0.30000001192092896
              }
            ],
            "ln": 9,
            "addr": 215
          },
          {
            "b": "arT(jnPV7-y\u003cfrkB0bKnwO(Ghx(d*cB8#58y?j-izGGPeazC@SFsgE3wn=u%e*q?\u003cpgXl.z/cW(vqYQ!y*!I[ec",
            "ln": 10,
            "addr": 284
          },
          {
            "b": "arT(jl#Kh(xKM09D2E*Fv{%maaA}KwxDRIjvrrSqz/)govrMikaA}HgA+cwsz/)ghA+c\u003cEefX5bwP89$A+cv\u003ez/oYdC4CGib3=-",
            "ln": 11,
            "addr": 355
          },
          {
            "b": "v@DmaBrCTDz/Po0wGTbUDJ",
            "ln": 76,
            "addr": 4675
          },
          {
            "b": "arUGsvpQ^4wQetCDJ",
            "ln": 77,
            "addr": 4694
          },
          {
            "b": "arR^HA+funA=91qwP]m[A=k/eB7D:FA+frgy\u003c6wsjW70n",
            "n": [
              {
                "c": 2,
                "d": "new Promise() usage marker",
                "i": "metadata/lang/javascript-features::has-promise-new",
                "o": 4720,
                "z": 12,
                "cf": 1.0
              }
            ],
            "ln": 78,
            "addr": 4709
          },
          {
            "b": "arR^HarUfjzGx[xvrb{/auZ\u0026SxMw3dwIe4Cz/Po0wJ}!*D2vamkr*o2xMw3dwIe4Cz/Po0wJ}!-z!0i(i@",
            "ln": 79,
            "addr": 4747
          },
          {
            "b": "arR^HarUxgc)r2twNN2gA+funA=91uwPI^aC4A7GEjmk",
            "ln": 80,
            "addr": 4814
          },
          {
            "b": "fe1C1eIe8BBzkM9Bzkrcat2e%",
            "ln": 90,
            "addr": 5011
          },
          {
            "b": "w{503BzkVhaARKjvr\u003eHSC{\u003ea*",
            "ln": 91,
            "addr": 5033
          },
          {
            "b": "arUfjzGx[xwfs2TzE[2ml$7gGc[dj",
            "n": [
              {
                "c": 3,
                "d": "Checks for timing jitter using Date differences",
                "i": "objectives/anti-analysis/timing/jitter::js-date-diff-jitter-pattern",
                "o": 5067,
                "z": 8,
                "cf": 1.0
              }
            ],
            "ln": 92,
            "addr": 5055
          },
          {
            "b": "arUfjzGx[xC{2l)wg?IaBvHy?y/$sTAWSv#",
            "ln": 93,
            "addr": 5080
          },
          {
            "b": "arUfjzGx[xz6g$:q/)4]zF7wde[X:qo(B]\u003exECqWf!1.]vpSqUvrcDrgaTR6a$kO",
            "ln": 94,
            "addr": 5110
          },
          {
            "b": "w{503BzkVhay[[{y\u003cwP\u0026wmZ0lyH}=xaA7\u003e7B7GCRfE.t",
            "ln": 105,
            "addr": 5459
          },
          {
            "b": "arUGiBrCltjS(Bu",
            "ln": 106,
            "addr": 5496
          },
          {
            "b": "arUomAV==DwPP5ejUO%ijzOINe]k9pxlm/Gx!7X.DJ",
            "n": [
              {
                "c": 2,
                "d": "Iteration or loop pattern",
                "i": "micro-behaviors/data/control-flow/analysis::iteration-loop-pattern",
                "o": 5511,
                "z": 6,
                "cf": 0.5
              }
            ],
            "ln": 107,
            "addr": 5510
          },
          {
            "b": "arR^HxDPCXc$\u003e7^f^4$?yH}=zv}Yp\u003elVlHDl3aI?djDx6k0y8yi@",
            "ln": 108,
            "addr": 5545
          },
          {
            "b": "arV7",
            "ln": 109,
            "addr": 5588
          },
          {
            "b": "w{503BzkVhaAIaoqfu/0wKpVlzE^s6c$$bS",
            "ln": 113,
            "addr": 5643
          },
          {
            "b": "arUfjzGx[xtxzzsvo\u003e0saw(cmr7f.\u0026x\u003cA!",
            "ln": 114,
            "addr": 5673
          },
          {
            "b": "arUVDz//LVy+x*vCYVq\u003ezGGDcBrAZ?Buo",
            "n": [
              {
                "c": 1,
                "d": "Assigns code body into DOM element text",
                "i": "objectives/command-and-control/dropper/execution/browser::dom-script-text-body-assign",
                "o": 5711,
                "z": 14,
                "cf": 0.800000011920929
              }
            ],
            "ln": 115,
            "addr": 5702
          },
          {
            "b": "arU9nBzbPkmqKO#wQ5q:z/fVdzGE0:ayKhVLPRk#vsqJB",
            "ln": 116,
            "addr": 5730
          },
          {
            "b": "Ee",
            "ln": 117,
            "addr": 5768
          },
          {
            "b": "arUfjAcT=(zz2vdwjpVMzGFM^B97#hwPxgyv@b\u003c?yA+qLc[co4j%kg",
            "ln": 144,
            "addr": 6516
          },
          {
            "b": "arR^Hv@DmaBrCWpCYU5\u003eayDEwADMhwwKQz/By/YslVl\u003c:wO#Qras8qxB-.qnAZ:^%By/YslVl\u003c:wO#Qru][",
            "ln": 145,
            "addr": 6561
          },
          {
            "b": "arR^HzEEZ5xjk[2AXp\u003crx(EK1vrb)hCxdztwMik=BsqlxCYUw!Bzbl6c[3Jck6)",
            "n": [
              {
                "c": 3,
                "d": "Browser clipboard write API",
                "i": "micro-behaviors/os/clipboard/access::browser-clipboard-write",
                "o": 6633,
                "z": 29,
                "cf": 0.9200000166893005
              }
            ],
            "ln": 146,
            "addr": 6629
          },
          {
            "b": "arR^HarUfjAcT=(zz33xCYVq\u003ezGGDcBrAZ?b13o/x\u003ep/#b0b",
            "ln": 147,
            "addr": 6681
          },
          {
            "b": "arR^HarU-pBw#%\u003ewP8Zkc[3Jcj%juNAcT=(zz33xCYVq\u003ezGGDcBrAZ?b13o/C{j^Ziwrcoi@",
            "n": [
              {
                "c": 2,
                "d": "setTimeout timer usage",
                "i": "micro-behaviors/time/schedule/interval::setTimeout",
                "o": 6727,
                "z": 10,
                "cf": 0.5
              }
            ],
            "ln": 148,
            "addr": 6721
          },
          {
            "b": "arR^HEjmk",
            "ln": 149,
            "addr": 6780
          },
          {
            "b": "arV7Yi@",
            "ln": 150,
            "addr": 6789
          }
        ],
        "depth": 1,
        "facts": {
          "imp": [
            [
              "",
              "document.querySelector"
            ],
            [
              "",
              "QUOTES"
            ],
            [
              "",
              "todayEl"
            ],
            [
              "",
              "quoteEl"
            ],
            [
              "",
              "authorEl"
            ],
            [
              "",
              "copyBtn"
            ],
            [
              "",
              "anotherBtn"
            ],
            [
              "",
              "storage"
            ],
            [
              "",
              "area"
            ],
            [
              "",
              "resolve"
            ],
            [
              "",
              "area.get"
            ],
            [
              "",
              "area"
            ],
            [
              "",
              "area.set"
            ],
            [
              "",
              "d.getFullYear"
            ],
            [
              "",
              "String.padStart"
            ],
            [
              "",
              "String"
            ],
            [
              "",
              "d.getMonth"
            ],
            [
              "",
              "day"
            ],
            [
              "",
              "String.padStart"
            ],
            [
              "",
              "String"
            ],
            [
              "",
              "d.getDate"
            ],
            [
              "",
              "d.toLocaleDateString"
            ],
            [
              "",
              "key.charCodeAt"
            ],
            [
              "",
              "quoteEl.textContent"
            ],
            [
              "",
              "authorEl.textContent"
            ],
            [
              "",
              "key"
            ],
            [
              "",
              "todayKey"
            ],
            [
              "",
              "todayEl.textContent"
            ],
            [
              "",
              "formatDateHuman"
            ],
            [
              "",
              "data"
            ],
            [
              "",
              "storage.load"
            ],
            [
              "",
              "offset"
            ],
            [
              "",
              "Number.isInteger"
            ],
            [
              "",
              "offset"
            ],
            [
              "",
              "Math.max"
            ],
            [
              "",
              "storage.save"
            ],
            [
              "",
              "idx"
            ],
            [
              "",
              "dailyIndex"
            ],
            [
              "",
              "setQuoteByIndex"
            ],
            [
              "",
              "anotherBtn.addEventListener"
            ],
            [
              "",
              "state"
            ],
            [
              "",
              "offset"
            ],
            [
              "",
              "storage.save"
            ],
            [
              "",
              "nextIdx"
            ],
            [
              "",
              "dailyIndex"
            ],
            [
              "",
              "setQuoteByIndex"
            ],
            [
              "",
              "copyBtn.addEventListener"
            ],
            [
              "",
              "text"
            ],
            [
              "",
              "navigator.clipboard.writeText.then"
            ],
            [
              "",
              "navigator.clipboard.writeText"
            ],
            [
              "",
              "copyBtn.textContent"
            ],
            [
              "",
              "setTimeout"
            ],
            [
              "",
              "copyBtn.textContent"
            ],
            [
              "",
              "init"
            ]
          ],
          "mbr": [
            "Math.max",
            "Number.isInteger",
            "QUOTES.length",
            "String().padStart",
            "anotherBtn.addEventListener",
            "area.get",
            "area.set",
            "authorEl.textContent",
            "chrome.storage",
            "chrome.storage.local",
            "chrome.storage.sync",
            "copyBtn.addEventListener",
            "copyBtn.textContent",
            "d.getDate",
            "d.getFullYear",
            "d.getMonth",
            "d.toLocaleDateString",
            "data.dailyKey",
            "data.dailyOffset",
            "document.querySelector",
            "key.charCodeAt",
            "key.length",
            "navigator.clipboard",
            "navigator.clipboard.writeText",
            "navigator.clipboard.writeText().then",
            "quoteEl.textContent",
            "storage.load",
            "storage.save",
            "todayEl.textContent"
          ],
          "tgt": [
            "$",
            "Date",
            "Math.max",
            "Number.isInteger",
            "Promise",
            "String",
            "String().padStart",
            "anotherBtn.addEventListener",
            "area.get",
            "area.set",
            "copyBtn.addEventListener",
            "d.getDate",
            "d.getFullYear",
            "d.getMonth",
            "d.toLocaleDateString",
            "dailyIndex",
            "document.querySelector",
            "formatDateHuman",
            "init",
            "key.charCodeAt",
            "navigator.clipboard.writeText",
            "navigator.clipboard.writeText().then",
            "resolve",
            "setQuoteByIndex",
            "setTimeout",
            "storage.load",
            "storage.save",
            "todayKey"
          ],
          "metrics": {
            "ast": {
              "op.eq": 1.0,
              "op.lt": 1.0,
              "op.add": 4.0,
              "op.lor": 1.0,
              "op.mod": 2.0,
              "op.mul": 1.0,
              "op.land": 1.0,
              "op.lnot": 1.0,
              "op.ushr": 1.0,
              "max_depth": 19.0,
              "bind_count": 32.0,
              "call_count": 38.0,
              "node_count": 1701.0,
              "op.coalesce": 2.0,
              "member_count": 29.0,
              "op_density.eq": 0.0,
              "op_density.lt": 0.0,
              "op_density.add": 0.0,
              "op_density.lor": 0.0,
              "op_density.mod": 0.0,
              "op_density.mul": 0.0,
              "op_density.land": 0.0,
              "op_density.lnot": 0.0,
              "op_density.ushr": 0.0,
              "identifier_count": 68.0,
              "member_depth_max": 4.0,
              "op_density.coalesce": 0.0,
              "string_literal_count": 134.0,
              "array_literal_max_length": 57.0,
              "string_concat_chain_max_length": 3.0
            },
            "file": {
              "size": 6810.0,
              "entropy": 5.06,
              "size_bytes": 6810.0
            },
            "text": {
              "digit_ratio": 0.01,
              "space_count": 1010.0,
              "total_lines": 153.0,
              "char_entropy": 5.06,
              "unique_chars": 93.0,
              "string_density": 0.88,
              "avg_line_length": 42.51,
              "high_byte_ratio": 0.01,
              "max_line_length": 113.0,
              "non_ascii_ratio": 0.01,
              "empty_line_ratio": 0.1,
              "last_line_length": 7.0,
              "whitespace_ratio": 0.19,
              "most_common_ratio": 0.07,
              "identifier_density": 1.14,
              "line_length_stddev": 30.67,
              "normalized_string_count": 10.83,
              "most_common_char_is_null": 0.0,
              "max_inline_whitespace_run": 1.0,
              "most_common_char_codepoint": 101.0,
              "suspicious_identifier_ratio": 0.12,
              "normalized_unique_identifiers": 9.37
            },
            "binds": {
              "count": 32.0
            },
            "calls": {
              "count": 38.0
            },
            "binary": {
              "overall_entropy": 5.06,
              "peak_region_bytes": 6810.0,
              "peak_region_entropy": 5.18
            },
            "source": {
              "function_count": 7.0
            },
            "members": {
              "count": 29.0
            },
            "strings": {
              "total": 134.0,
              "avg_length": 27.85,
              "max_length": 86.0,
              "avg_entropy": 3.33,
              "total_bytes": 3732.0,
              "entropy_stddev": 0.71
            },
            "comments": {
              "chars": 283.0,
              "lines": 9.0,
              "total": 8.0,
              "to_code_ratio": 0.06
            },
            "functions": {
              "count": 7.0,
              "anonymous": 6.0,
              "avg_params": 0.54,
              "max_params": 2.0,
              "one_liners": 2.0,
              "length_stddev": 7.51,
              "avg_name_length": 8.57,
              "no_params_count": 7.0,
              "avg_length_lines": 6.92,
              "max_length_lines": 32.0,
              "min_length_lines": 1.0,
              "nested_functions": 4.0,
              "avg_nesting_depth": 0.62,
              "max_nesting_depth": 3.0,
              "single_char_params": 2.0,
              "avg_param_name_length": 3.57,
              "density_per_100_lines": 8.5,
              "code_in_functions_ratio": 0.59
            },
            "identifiers": {
              "count": 68.0,
              "total": 174.0,
              "avg_length": 6.26,
              "max_length": 18.0,
              "min_length": 1.0,
              "avg_entropy": 2.13,
              "reuse_ratio": 0.39,
              "unique_count": 68.0,
              "length_stddev": 3.83,
              "sequential_names": 8.0,
              "single_char_count": 9.0,
              "single_char_ratio": 0.13,
              "high_entropy_count": 1.0,
              "high_entropy_ratio": 0.01,
              "all_lowercase_ratio": 0.54,
              "all_uppercase_ratio": 0.01
            }
          }
        },
        "id": 3,
        "mol": "H(Os)",
        "path": "/data/samples/unknown/foraged/chrome/google.com/chromewebstore.google.com/lgcffmgdjbpijjldfncgkbjgjcohiiim/lgcffmgdjbpijjldfncgkbjgjcohiiim.crx!!popup.js",
        "risk": 1,
        "sha": "62200c66c398bbd43a9bf868854b9e287a711229b68e5964a6761572a76442eb",
        "size": 6810,
        "traits": [
          {
            "id": "objectives/credential-access/theft/keywords::secret",
            "conf": 0.30000001192092896,
            "crit": 1,
            "desc": "Credential-access vocabulary word: secret",
            "spans": [
              [
                223,
                6
              ]
            ]
          },
          {
            "id": "micro-behaviors/os/clipboard/access::browser-clipboard-write",
            "atk": "T1115",
            "conf": 0.9200000166893005,
            "crit": 3,
            "desc": "Browser clipboard write API",
            "spans": [
              [
                6633,
                29
              ]
            ]
          }
        ],
        "type": "javascript"
      },
      {
        "depth": 1,
        "facts": {
          "metrics": {
            "file": {
              "size": 1960.0,
              "entropy": 5.23,
              "size_bytes": 1960.0
            },
            "binary": {
              "overall_entropy": 5.23,
              "peak_region_bytes": 1960.0,
              "peak_region_entropy": 5.25
            }
          }
        },
        "id": 4,
        "path": "/data/samples/unknown/foraged/chrome/google.com/chromewebstore.google.com/lgcffmgdjbpijjldfncgkbjgjcohiiim/lgcffmgdjbpijjldfncgkbjgjcohiiim.crx!!style.css",
        "sha": "4ad768e2c816cd45ef9a0bae964803f5a45df31c4ce4b162e145ad868f7cf33d",
        "size": 1960,
        "type": "text"
      },
      {
        "ctx": [
          {
            "b": "tydM8wPIv4x(Ffdz/c:Wb6m\u003cpwOtH[xDRn9AV!$dy?j!wb6dEhzE)u=v@DmbwO#Pli^S5\u0026vr(WcvpQMyb4V3(ygn}QfJ}KnfJZ8z",
            "n": [
              {
                "c": 2,
                "d": "JSON data format",
                "i": "metadata/file/format::valid",
                "o": 0,
                "z": 22,
                "cf": 0.6000000238418579
              }
            ],
            "ln": 0
          }
        ],
        "depth": 1,
        "facts": {
          "metrics": {
            "file": {
              "size": 1731.0,
              "entropy": 5.98,
              "size_bytes": 1731.0
            },
            "json": {
              "parsed_bytes": 1731.0,
              "parse_limit_bytes": 76800.0
            },
            "binary": {
              "overall_entropy": 5.98,
              "peak_region_bytes": 1731.0,
              "peak_region_entropy": 6.03
            }
          }
        },
        "id": 5,
        "path": "/data/samples/unknown/foraged/chrome/google.com/chromewebstore.google.com/lgcffmgdjbpijjldfncgkbjgjcohiiim/lgcffmgdjbpijjldfncgkbjgjcohiiim.crx!!_metadata/verified_contents.json",
        "risk": 1,
        "sha": "ccc595b1ad161a5cf72a792be019e19def49460a710b7b1daf5a533f84a87ca9",
        "size": 1731,
        "traits": [
          {
            "id": "metadata/file/format::valid",
            "conf": 0.6000000238418579,
            "crit": 2,
            "desc": "JSON data format",
            "spans": [
              [
                0,
                22
              ]
            ]
          },
          {
            "id": "metadata/file/extension/identity::web-asset-extension",
            "conf": 1.0,
            "crit": 1,
            "desc": "Web asset file extension (css/html/js/json)",
            "spans": [
              [
                0,
                22
              ]
            ]
          }
        ],
        "type": "json"
      }
    ],
    "rev": "46112",
    "v": "8"
  }
}