{
  "llm": {
    "conf": 0.683076,
    "grade": "benign",
    "model": "Qwen/Qwen3.6-27B",
    "review": false,
    "outcome": "benign",
    "interpretation": "Legitimate password manager extension"
  },
  "ml": {
    "v": "7",
    "eng": "2.2.0-rc.1",
    "lvl": -1,
    "conf": 0,
    "mods": [
      {
        "cls": 0,
        "raw": 0.54725146,
        "rte": "az",
        "prob": 0.54725146
      }
    ],
    "prob": 0.54725146,
    "skip": [
      {
        "rte": "az/zip",
        "why": "unavailable"
      },
      {
        "rte": "az/zip",
        "why": "unavailable"
      }
    ],
    "files": [
      {
        "id": 0,
        "lvl": -1,
        "conf": 0,
        "prob": 0.5472514629364014,
        "type": "crx"
      },
      {
        "id": 1,
        "lvl": -1,
        "conf": 0,
        "prob": 0.0000769495964050293,
        "type": "png"
      },
      {
        "id": 2,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000012218952178955078,
        "type": "json"
      },
      {
        "id": 3,
        "lvl": -1,
        "conf": 0,
        "prob": 0.0008881092071533203,
        "type": "javascript"
      },
      {
        "id": 4,
        "lvl": -1,
        "conf": 0,
        "prob": 0.0030144155025482178,
        "type": "text"
      },
      {
        "id": 5,
        "lvl": -1,
        "conf": 0,
        "prob": 0.00006663799285888672,
        "type": "json"
      }
    ],
    "version": "v18.18",
    "analyzed_at": "2026-07-04T18:13:01Z"
  },
  "path": "lmfoclikpghkghnkbipjkgoondhikali.crx",
  "raw": {
    "files": [
      {
        "id": 0,
        "ctx": [
          {
            "b": "lVK}s0@@r39r=Ay608iyRueD60u%ib1{(=lnqu\u003cF0rAi800v/N4/!qn0sw)W0rAgY}[Dw{v/",
            "n": [
              {
                "c": 3,
                "d": "Staged loader six file archive",
                "i": "objectives/command-and-control/backdoor/loader/archive::staged-loader-six-files",
                "o": 0,
                "z": 25,
                "cf": 0.949999988079071
              }
            ],
            "ln": 0
          }
        ],
        "mol": "O(C)H(Os)",
        "sha": "d1fda481aaff79261e02c2774f450583df32d9dc7bff6de32d267ed04364ee63",
        "path": "lmfoclikpghkghnkbipjkgoondhikali.crx",
        "risk": 3,
        "size": 39766,
        "type": "crx",
        "facts": {
          "metrics": {
            "file": {
              "size": 39766.0,
              "entropy": 7.98,
              "size_bytes": 39766.0
            },
            "binary": {
              "overall_entropy": 7.98,
              "peak_region_bytes": 38912.0,
              "peak_region_entropy": 7.82
            },
            "archive": {
              "file_count": 6.0,
              "member_count": 7.0,
              "prefix_bytes": 1321.0,
              "script_count": 1.0,
              "zip_bomb_ratio": 3.51,
              "directory_count": 1.0,
              "executable_count": 0.0,
              "extra_field_size": 0.0,
              "noise_file_count": 0.0,
              "total_compressed": 37593.0,
              "compression.ratio": 0.65,
              "hidden_file_count": 0.0,
              "total_uncompressed": 57421.0,
              "crc_collision_count": 0.0,
              "entry_comment_count": 0.0,
              "max_filename_length": 32.0,
              "rtlo_filename_count": 0.0,
              "format.regular_count": 6.0,
              "nested_archive_count": 0.0,
              "path_traversal_count": 0.0,
              "symlink_escape_count": 0.0,
              "security.setgid_count": 0.0,
              "security.setuid_count": 0.0,
              "security.sticky_count": 0.0,
              "double_extension_count": 0.0,
              "duplicate_member_count": 0.0,
              "format.directory_count": 1.0,
              "security.symlink_count": 0.0,
              "unicode_filename_count": 0.0,
              "homoglyph_filename_count": 0.0,
              "security.encrypted_count": 0.0,
              "timing.mtime_unique_count": 5.0,
              "timing.mtime_unique_ratio": 0.71,
              "misplaced_executable_count": 0.0,
              "timing.mtime_dominant_count": 3.0,
              "timing.mtime_spread_seconds": 516.0,
              "timing.sentinel_mtime_count": 0.0,
              "security.world_writable_count": 0.0,
              "timing.mtime_dominant_fraction": 0.43,
              "compression.method_counts.deflate": 7.0
            }
          }
        },
        "ident": {
          "trust": "self_signed",
          "identifier": {
            "value": "lfoeajgcchlidpicbabpmckkejpckcfb",
            "source": "crx.extension_id",
            "verified": true
          },
          "unique_ids": {
            "crx_id": "lfoeajgcchlidpicbabpmckkejpckcfb",
            "public_key_sha256": "b5e4096227b83f82101fc2aa49f2a251accde3d98471464dd17d1819b43786b0"
          }
        },
        "traits": [
          {
            "id": "micro-behaviors/ui/window/manage/dom::dom-element-value-read",
            "conf": 0.8999999761581421,
            "crit": 1,
            "desc": "Reads .value property of a DOM element",
            "from": [
              {
                "file": 3
              }
            ]
          },
          {
            "id": "micro-behaviors/ui/window/manage/dom::dom-element-lookup",
            "conf": 0.8999999761581421,
            "crit": 1,
            "desc": "getElementById/querySelector DOM lookup",
            "from": [
              {
                "off": 581,
                "file": 3,
                "line": 14
              }
            ]
          },
          {
            "id": "micro-behaviors/os/clipboard/access::browser-clipboard-write",
            "atk": "T1115",
            "conf": 0.9200000166893005,
            "crit": 3,
            "desc": "Browser clipboard write API",
            "from": [
              {
                "file": 3
              }
            ]
          },
          {
            "id": "micro-behaviors/ui/window/manage/dom::dom-element-lookup--getelementbyid",
            "conf": 0.8999999761581421,
            "crit": 1,
            "desc": "getElementById/querySelector (getElementById)",
            "from": [
              {
                "file": 3
              }
            ]
          },
          {
            "id": "objectives/command-and-control/backdoor/loader/archive::staged-loader-six-files",
            "conf": 0.949999988079071,
            "crit": 3,
            "desc": "Staged loader six file archive",
            "spans": [
              [
                0,
                25
              ]
            ]
          },
          {
            "id": "metadata/permission/manifest::chrome-webstore-verified-contents",
            "conf": 0.949999988079071,
            "crit": 1,
            "desc": "Chrome Web Store verified contents"
          },
          {
            "id": "metadata/signed/platform::web-extension-manifest",
            "conf": 1.0,
            "crit": 1,
            "desc": "Web-extension manifest.json at archive root"
          }
        ]
      },
      {
        "depth": 1,
        "facts": {
          "metrics": {
            "png": {
              "a_entropy": 0.0,
              "chunk_count": 7.0,
              "trailing_bytes": 0.0,
              "idat_chunk_count": 1.0,
              "text_chunk_bytes": 1615.0,
              "chunks_after_iend": 0.0,
              "compression_ratio": 0.92,
              "unknown_chunk_count": 1.0
            },
            "file": {
              "size": 45180.0,
              "entropy": 6.84,
              "size_bytes": 45180.0
            },
            "image": {
              "width": 128.0,
              "height": 128.0,
              "channels": 3.0,
              "b_entropy": 7.4,
              "g_entropy": 6.62,
              "r_entropy": 6.91,
              "edge_density": 0.08,
              "pixel_entropy": 7.32,
              "histogram_flatness": 0.92
            },
            "binary": {
              "overall_entropy": 6.84,
              "peak_region_bytes": 30720.0,
              "peak_region_entropy": 7.82
            }
          }
        },
        "id": 1,
        "path": "lmfoclikpghkghnkbipjkgoondhikali.crx!!icon128.png",
        "sha": "4cd37ef02fccefebab2bac6df5820d7a9d65ac20f30f8e7d8d74adb3a7711abb",
        "size": 45180,
        "traits": [
          {
            "id": "objectives/anti-static/obfuscation/steganography/image::b-channel-high",
            "atk": "T1027.003",
            "mbc": "B0032.001",
            "conf": 0.6000000238418579,
            "crit": 1,
            "desc": "Blue channel entropy above normal",
            "spans": [
              [
                0,
                22
              ]
            ]
          },
          {
            "id": "metadata/package/files/included::png-extension-basename",
            "conf": 0.8999999761581421,
            "crit": 1,
            "desc": "Filename ends with .png",
            "spans": [
              [
                0,
                11
              ]
            ]
          }
        ],
        "type": "png"
      },
      {
        "ctx": [
          {
            "b": "DJ",
            "n": [
              {
                "c": 2,
                "d": "JSON data format",
                "i": "metadata/file/format::valid",
                "o": 0,
                "z": 13,
                "cf": 0.6000000238418579
              }
            ],
            "ln": 1,
            "addr": 0
          },
          {
            "b": "b6v\u003cnvru6/B-IpxiV]RWBAzFyiXJc@y?WD#BAoh\u0026xk.Z3y?kkez/4dGwPz%dv}vroAaAy0wIL]GA^e=V",
            "ln": 2,
            "addr": 2
          },
          {
            "b": "",
            "ln": 3,
            "addr": 67
          }
        ],
        "depth": 1,
        "facts": {
          "metrics": {
            "file": {
              "size": 444.0,
              "entropy": 4.77,
              "size_bytes": 444.0
            },
            "json": {
              "parsed_bytes": 444.0,
              "parse_limit_bytes": 76800.0
            },
            "binary": {
              "overall_entropy": 4.77,
              "peak_region_bytes": 444.0,
              "peak_region_entropy": 4.77
            }
          }
        },
        "id": 2,
        "path": "lmfoclikpghkghnkbipjkgoondhikali.crx!!manifest.json",
        "risk": 1,
        "sha": "0c2bd52a2d352de9d150cb321c965e81808ac083b857153ee9fabe1134dfd781",
        "size": 444,
        "traits": [
          {
            "id": "metadata/file/extension/identity::web-asset-extension",
            "conf": 1.0,
            "crit": 1,
            "desc": "Web asset file extension (css/html/js/json)",
            "spans": [
              [
                0,
                13
              ]
            ]
          },
          {
            "id": "metadata/file/format::valid",
            "conf": 0.6000000238418579,
            "crit": 2,
            "desc": "JSON data format",
            "spans": [
              [
                0,
                13
              ]
            ]
          },
          {
            "id": "metadata/package/manifest/ecosystem::conda-about-description-field",
            "conf": 0.9200000166893005,
            "crit": 1,
            "desc": "Conda about long description",
            "spans": [
              [
                166,
                97
              ]
            ]
          }
        ],
        "type": "json"
      },
      {
        "ctx": [
          {
            "b": "wn+$2zdNQbe[5p3mrSlWBwcy\u0026By/u3AWSq6pFBh{zGGDcBwcQYwmYp0efDt\u0026au.[hDJ",
            "n": [
              {
                "c": 2,
                "d": "Any script file",
                "i": "metadata/file/extension/identity::script-file",
                "o": 0,
                "z": 8,
                "cf": 1.0
              }
            ],
            "ln": 1,
            "addr": 0
          },
          {
            "b": "arR^Hfe1CHz/PwhvQTd\u0026B0b7kAV/EqwGUR%zE)\u0026%Bz(g",
            "ln": 2,
            "addr": 55
          },
          {
            "b": "arR^Hv@DmaBrC^CA+6kljS)@",
            "ln": 3,
            "addr": 92
          },
          {
            "b": "arR^HarR^Hb5}:lzGH2ra$K\u0026Xw)]H=z/c:Iar\u003e-AvRG{defDcQB.(bga$K\u0026XwN/y(a$K\u0026XC4CYowQ2yIao",
            "ln": 4,
            "addr": 113
          },
          {
            "b": "arR^HarR^Hb5Q$3B.\u003eFgefDcDx(E-%AW04Sb5?vbB8ttfefDcIz/PMrz/c:Iar\u003elsx(v\u0026jefDcGy\u0026%$Dec",
            "n": [
              {
                "c": 3,
                "d": "Encryption API usage markers",
                "i": "micro-behaviors/crypto/library/keyword::encryption-functions",
                "o": 199,
                "z": 6,
                "cf": 0.5
              }
            ],
            "ln": 5,
            "addr": 180
          },
          {
            "b": "arR^HarR^Hb6mKvvqWnuar\u003eVhBAh8ua$K\u0026XzE[6nB0rdTb5?NpB8r9Lar(byzFsiaa$K\u0026Xv@C*+y\u0026*\u003cL",
            "ln": 6,
            "addr": 247
          },
          {
            "b": "arR^HarR^Hb5zytvr9Lyar\u003e(GwO=f\u003eAW04Sb5p[gwPRS@a$K\u0026Xz/65#viNlBb6dEhzdaRtar\u003eucy\u0026\u003c8fec",
            "ln": 7,
            "addr": 313
          },
          {
            "b": "",
            "ln": 12,
            "addr": 525
          },
          {
            "b": "arR^Hfe1CopFz%2y?mD{zGG}",
            "ln": 13,
            "addr": 527
          },
          {
            "b": "arR^Hv@DmaBrCKhB8%--B8U@7C{2l)wn+$2zdNQbe[X:qmqMKLwO#PRC$zJ{cVAHnB1H{pB8U@7C{+45",
            "n": [
              {
                "c": 1,
                "d": "getElementById/querySelector (getElementById)",
                "i": "micro-behaviors/ui/window/manage/dom::dom-element-lookup--getelementbyid",
                "o": 581,
                "z": 14,
                "cf": 0.8999999761581421
              }
            ],
            "ln": 14,
            "addr": 548
          },
          {
            "b": "arR^Hv@DmaBrCjczE)\u0026%By^^XzxI7+wn+$2zdNQbe[X:qmqMKLwO#PRC$zJ{cUE1dwPzj3wI4wkzyl\u003e{",
            "n": [
              {
                "c": 3,
                "d": "JS build-config-injector compat noise markers",
                "i": "objectives/supply-chain/trojanized/app/config-injection::js-build-config-compatibility-marker",
                "o": 624,
                "z": 11,
                "cf": 1.0
              }
            ],
            "ln": 15,
            "addr": 614
          },
          {
            "b": "arR^Hv@DmaBrC7iAcT=(zxI7+wn+$2zdNQbe[X:qmqMKLwO#PRC$zJ{cU47lC}AGEzyl\u003e{",
            "ln": 16,
            "addr": 680
          },
          {
            "b": "arR^Hv@DmaBrC^CA+4KQB-8q1y?WA\u003eAV^H/wn+$2zdNQbe[X:qmqMKLwO#PRC$zJ{cWfGHwg.qfB-8pGdlv",
            "ln": 17,
            "addr": 738
          },
          {
            "b": "arR^Hfe1CFAaAy0wGV5gx\u003eg^}aA?gfB.8Xax(!lfvr?",
            "ln": 23,
            "addr": 1065
          },
          {
            "b": "arR^HCw?IjlVm9+Bw)0\u0026wmY^lvpS[qC4CMkoLFM\u0026wO#71c)@.DAclmIefDuLdiH=qaBs",
            "ln": 24,
            "addr": 1101
          },
          {
            "b": "arR^HarR^HCw?IjlVm9+Bxh*^e{7VHBvf$:By/uiauZ\u0026Ue{7JxxjVfqC42ifwJG",
            "n": [
              {
                "c": 1,
                "d": "Reads .value property of a DOM element",
                "i": "micro-behaviors/ui/window/manage/dom::dom-element-value-read",
                "o": 1200,
                "z": 6,
                "cf": 0.8999999761581421
              },
              {
                "c": 1,
                "d": "Assigns code body into DOM element text",
                "i": "objectives/command-and-control/dropper/execution/browser::dom-script-text-body-assign",
                "o": 1177,
                "z": 14,
                "cf": 0.800000011920929
              }
            ],
            "ln": 25,
            "addr": 1157
          },
          {
            "b": "arR^HEjmk",
            "ln": 26,
            "addr": 1209
          },
          {
            "b": "",
            "ln": 27,
            "addr": 1218
          },
          {
            "b": "",
            "ln": 32,
            "addr": 1373
          },
          {
            "b": "arR^HarR^Hfe1CAx\u003e7{3A:-\u0026@z/3Rvz/Pxf",
            "ln": 33,
            "addr": 1375
          },
          {
            "b": "arR^HarR^Hw]zYjc#rEpazz@Yatt(1x=]IXv@DHcBupQVd\u003er4\u003eDJ",
            "n": [
              {
                "c": 2,
                "d": "Iteration or loop pattern",
                "i": "micro-behaviors/data/control-flow/analysis::iteration-loop-pattern",
                "o": 1412,
                "z": 6,
                "cf": 0.5
              }
            ],
            "ln": 34,
            "addr": 1405
          },
          {
            "b": "arR^HarR^HarR^Hv@DmaBrCQjzE^W5s8Sa\u0026auZ\u0026\u003ez/PxfttnKFxF9[kz/oUAo\u003c@cSe]\u003exrwn=rkdiH8.Cw?IjB1RouzFa68dp21",
            "n": [
              {
                "c": 2,
                "d": "Math.random invocation",
                "i": "micro-behaviors/os/random/prng/stdlib::math-random-call",
                "o": 1496,
                "z": 11,
                "cf": 1.0
              }
            ],
            "ln": 35,
            "addr": 1448
          },
          {
            "b": "arR^HarR^HarR^HAa9*eAa\u003co2B7ETTAXqrNB7=$xvqYQ]zc7T@wgoO",
            "ln": 36,
            "addr": 1529
          },
          {
            "b": "arR^HarR^HEe",
            "ln": 37,
            "addr": 1574
          },
          {
            "b": "",
            "ln": 38,
            "addr": 1585
          },
          {
            "b": "arR^HarR^Hy?mYhw[=c\u003ey/1LYB8U/kvrl05jS[YLB8#qlA::32l2{##yhW*7c){O]dlv",
            "n": [
              {
                "c": 2,
                "d": "Generic file read/write operations",
                "i": "micro-behaviors/fs/file/read-write::binary-file-ops",
                "o": 1631,
                "z": 5,
                "cf": 0.800000011920929
              }
            ],
            "ln": 39,
            "addr": 1587
          },
          {
            "b": "",
            "ln": 40,
            "addr": 1643
          },
          {
            "b": "arR^HarR^Hfe1ClAbYxawft]3zE^W5atLJVx\u003eId4az#ssvR6M",
            "ln": 41,
            "addr": 1645
          },
          {
            "b": "arR^HarR^Hfe1CmA+P8%aA?EuBZY8exkzp7v}V#@w[CQ:BrCHtaARgtBrCWzaz\u003eLev}W0av}^Jbx=}IhwO\u003e#",
            "ln": 56,
            "addr": 2159
          },
          {
            "b": "arR^HarR^HAa9*el${ZYy*?PwB98XzwId[uvpK1[C{2l)cONegcP.",
            "ln": 57,
            "addr": 2228
          },
          {
            "b": "arR^HarR^HB7GC)x(dB1B-Y2WdiH=qaAg+gB3%.-Abn%de]#bWy?kkqAa9l\u003cBA[#(asw(\u003eefDV3fEY6",
            "n": [
              {
                "c": 2,
                "d": "setTimeout timer usage",
                "i": "micro-behaviors/time/schedule/interval::setTimeout",
                "o": 2280,
                "z": 10,
                "cf": 0.5
              }
            ],
            "ln": 58,
            "addr": 2272
          },
          {
            "b": "arR^HEld",
            "ln": 59,
            "addr": 2337
          },
          {
            "b": "",
            "ln": 60,
            "addr": 2345
          },
          {
            "b": "",
            "ln": 65,
            "addr": 2531
          },
          {
            "b": "arR^HarR^HBAhTHDJ",
            "ln": 66,
            "addr": 2533
          },
          {
            "b": "arR^HarR^HarR^HvrVc]BrCEfC4\u003eO$Bz(gLv@b\u003c#vSbW}wg\u00267Dx()]=wQ5qBBy/YsrbUcxAcS(]",
            "n": [
              {
                "c": 3,
                "d": "Browser clipboard write API",
                "i": "micro-behaviors/os/clipboard/access::browser-clipboard-write",
                "o": 2566,
                "z": 29,
                "cf": 0.9200000166893005
              }
            ],
            "ln": 67,
            "addr": 2548
          },
          {
            "b": "arR^HarR^HarR^H",
            "ln": 68,
            "addr": 2610
          },
          {
            "b": "arR^HarR^HarR^Hfe1CDxM58qnl552l2paMBn",
            "ln": 69,
            "addr": 2624
          }
        ],
        "depth": 1,
        "facts": {
          "imp": [
            [
              "",
              "document.addEventListener"
            ],
            [
              "",
              "words"
            ],
            [
              "",
              "symbols"
            ],
            [
              "",
              "passDisplay"
            ],
            [
              "",
              "document.getElementById"
            ],
            [
              "",
              "generateBtn"
            ],
            [
              "",
              "document.getElementById"
            ],
            [
              "",
              "copyBtn"
            ],
            [
              "",
              "document.getElementById"
            ],
            [
              "",
              "wordCountSlider"
            ],
            [
              "",
              "document.getElementById"
            ],
            [
              "",
              "wordCountVal"
            ],
            [
              "",
              "document.getElementById"
            ],
            [
              "",
              "incNumbers"
            ],
            [
              "",
              "document.getElementById"
            ],
            [
              "",
              "incSymbols"
            ],
            [
              "",
              "document.getElementById"
            ],
            [
              "",
              "sysToast"
            ],
            [
              "",
              "document.getElementById"
            ],
            [
              "",
              "wordCountSlider.addEventListener"
            ],
            [
              "",
              "wordCountVal.textContent"
            ],
            [
              "",
              "generatePassphrase"
            ],
            [
              "",
              "count"
            ],
            [
              "",
              "parseInt"
            ],
            [
              "",
              "passphraseArr"
            ],
            [
              "",
              "randomWord"
            ],
            [
              "",
              "Math.floor"
            ],
            [
              "",
              "Math.random"
            ],
            [
              "",
              "passphraseArr.push"
            ],
            [
              "",
              "finalPassphrase"
            ],
            [
              "",
              "passphraseArr.join"
            ],
            [
              "",
              "randomNum"
            ],
            [
              "",
              "Math.floor"
            ],
            [
              "",
              "Math.random"
            ],
            [
              "",
              "randomSym"
            ],
            [
              "",
              "Math.floor"
            ],
            [
              "",
              "Math.random"
            ],
            [
              "",
              "passDisplay.textContent"
            ],
            [
              "",
              "passDisplay.style.opacity"
            ],
            [
              "",
              "setTimeout"
            ],
            [
              "",
              "passDisplay.style.opacity"
            ],
            [
              "",
              "copyBtn.addEventListener"
            ],
            [
              "",
              "textToCopy"
            ],
            [
              "",
              "navigator.clipboard.writeText"
            ],
            [
              "",
              "sysToast.classList.remove"
            ],
            [
              "",
              "setTimeout"
            ],
            [
              "",
              "sysToast.classList.add"
            ],
            [
              "",
              "console.error"
            ],
            [
              "",
              "generateBtn.addEventListener"
            ],
            [
              "",
              "generatePassphrase"
            ]
          ],
          "mbr": [
            "Math.floor",
            "Math.random",
            "console.error",
            "copyBtn.addEventListener",
            "document.addEventListener",
            "document.getElementById",
            "e.target",
            "e.target.value",
            "generateBtn.addEventListener",
            "incNumbers.checked",
            "incSymbols.checked",
            "navigator.clipboard",
            "navigator.clipboard.writeText",
            "passDisplay.style",
            "passDisplay.style.opacity",
            "passDisplay.textContent",
            "passphraseArr.join",
            "passphraseArr.push",
            "symbols.length",
            "sysToast.classList",
            "sysToast.classList.add",
            "sysToast.classList.remove",
            "wordCountSlider.addEventListener",
            "wordCountSlider.value",
            "wordCountVal.textContent",
            "words.length"
          ],
          "tgt": [
            "Math.floor",
            "Math.random",
            "console.error",
            "copyBtn.addEventListener",
            "document.addEventListener",
            "document.getElementById",
            "generateBtn.addEventListener",
            "generatePassphrase",
            "navigator.clipboard.writeText",
            "parseInt",
            "passphraseArr.join",
            "passphraseArr.push",
            "setTimeout",
            "sysToast.classList.add",
            "sysToast.classList.remove",
            "wordCountSlider.addEventListener"
          ],
          "metrics": {
            "ast": {
              "op.eq": 1.0,
              "op.lt": 1.0,
              "op.add": 3.0,
              "op.mul": 3.0,
              "max_depth": 22.0,
              "bind_count": 23.0,
              "call_count": 28.0,
              "node_count": 875.0,
              "member_count": 26.0,
              "op_density.eq": 0.0,
              "op_density.lt": 0.0,
              "op_density.add": 0.0,
              "op_density.mul": 0.0,
              "identifier_count": 46.0,
              "member_depth_max": 3.0,
              "string_literal_count": 59.0,
              "array_literal_max_length": 30.0,
              "string_concat_chain_max_length": 2.0
            },
            "file": {
              "size": 3092.0,
              "entropy": 4.84,
              "size_bytes": 3092.0
            },
            "text": {
              "digit_ratio": 0.01,
              "space_count": 713.0,
              "total_lines": 84.0,
              "char_entropy": 4.84,
              "unique_chars": 83.0,
              "string_density": 0.7,
              "avg_line_length": 34.83,
              "max_line_length": 82.0,
              "empty_line_ratio": 0.18,
              "last_line_length": 3.0,
              "whitespace_ratio": 0.28,
              "most_common_ratio": 0.05,
              "identifier_density": 1.38,
              "line_length_stddev": 24.86,
              "encoded_string_ratio": 0.02,
              "normalized_string_count": 6.44,
              "repeated_char_sequences": 14.0,
              "most_common_char_is_null": 0.0,
              "max_inline_whitespace_run": 1.0,
              "trailing_whitespace_lines": 3.0,
              "most_common_char_codepoint": 101.0,
              "suspicious_identifier_ratio": 0.04,
              "normalized_unique_identifiers": 7.2
            },
            "binds": {
              "count": 23.0
            },
            "calls": {
              "count": 28.0
            },
            "binary": {
              "overall_entropy": 4.84,
              "peak_region_bytes": 3072.0,
              "peak_region_entropy": 4.82
            },
            "members": {
              "count": 26.0
            },
            "strings": {
              "total": 59.0,
              "avg_length": 6.46,
              "max_length": 36.0,
              "avg_entropy": 2.08,
              "total_bytes": 381.0,
              "entropy_stddev": 1.1,
              "base64_candidates": 1.0
            },
            "comments": {
              "chars": 323.0,
              "lines": 14.0,
              "total": 14.0,
              "to_code_ratio": 0.2
            },
            "functions": {
              "anonymous": 6.0,
              "avg_params": 0.17,
              "max_params": 1.0,
              "one_liners": 1.0,
              "length_stddev": 29.21,
              "no_params_count": 5.0,
              "avg_length_lines": 23.0,
              "max_length_lines": 84.0,
              "min_length_lines": 1.0,
              "nested_functions": 3.0,
              "avg_nesting_depth": 1.17,
              "max_nesting_depth": 2.0,
              "single_char_params": 1.0,
              "avg_param_name_length": 1.0,
              "density_per_100_lines": 7.14,
              "code_in_functions_ratio": 1.64
            },
            "identifiers": {
              "count": 46.0,
              "total": 116.0,
              "avg_length": 8.11,
              "max_length": 18.0,
              "min_length": 1.0,
              "avg_entropy": 2.48,
              "reuse_ratio": 0.4,
              "unique_count": 46.0,
              "length_stddev": 3.79,
              "sequential_names": 2.0,
              "single_char_count": 2.0,
              "single_char_ratio": 0.04,
              "high_entropy_count": 1.0,
              "high_entropy_ratio": 0.02,
              "all_lowercase_ratio": 0.5
            }
          }
        },
        "id": 3,
        "mol": "H(Os)",
        "path": "lmfoclikpghkghnkbipjkgoondhikali.crx!!popup.js",
        "risk": 2,
        "sha": "baa98a9f2cea9fe2d80e0c74b7e709fd13cc4bf84d2314226b099e1c38cd96f2",
        "size": 3092,
        "traits": [
          {
            "id": "micro-behaviors/os/clipboard/access::browser-clipboard-write",
            "atk": "T1115",
            "conf": 0.9200000166893005,
            "crit": 3,
            "desc": "Browser clipboard write API",
            "spans": [
              [
                2566,
                29
              ]
            ]
          },
          {
            "id": "micro-behaviors/ui/window/manage/dom::dom-element-value-read",
            "conf": 0.8999999761581421,
            "crit": 1,
            "desc": "Reads .value property of a DOM element",
            "spans": [
              [
                1200,
                6
              ]
            ]
          },
          {
            "id": "micro-behaviors/ui/window/manage/dom::dom-element-lookup--getelementbyid",
            "conf": 0.8999999761581421,
            "crit": 1,
            "desc": "getElementById/querySelector (getElementById)",
            "spans": [
              [
                581,
                14
              ]
            ]
          },
          {
            "id": "micro-behaviors/ui/window/manage/dom::dom-element-lookup",
            "conf": 0.8999999761581421,
            "crit": 1,
            "desc": "getElementById/querySelector DOM lookup",
            "spans": [
              [
                581,
                14
              ]
            ]
          }
        ],
        "type": "javascript"
      },
      {
        "ctx": [
          {
            "b": "",
            "ln": 73,
            "addr": 1969
          },
          {
            "b": "kX\u003c}Rw].r%wPF#6y?W^5wPw]u",
            "ln": 74,
            "addr": 1971
          },
          {
            "b": "arR^Hh83s0DMWlCvpK1[C@^64j0n}",
            "n": [
              {
                "c": 2,
                "d": "CSS opacity zero rule",
                "i": "micro-behaviors/data/format/css::opacity-zero",
                "o": 2003,
                "z": 10,
                "cf": 0.7799999713897705
              }
            ],
            "ln": 75,
            "addr": 1993
          },
          {
            "b": "Ee",
            "ln": 76,
            "addr": 2018
          },
          {
            "b": "",
            "ln": 77,
            "addr": 2021
          }
        ],
        "depth": 1,
        "facts": {
          "metrics": {
            "file": {
              "size": 4948.0,
              "entropy": 4.92,
              "size_bytes": 4948.0
            },
            "binary": {
              "overall_entropy": 4.92,
              "peak_region_bytes": 4948.0,
              "peak_region_entropy": 5.04
            }
          }
        },
        "id": 4,
        "path": "lmfoclikpghkghnkbipjkgoondhikali.crx!!style.css",
        "risk": 1,
        "sha": "952e8346e6809b37d685f6b560dcde3cf081fc4a1c871463c118d5d1844f8173",
        "size": 4948,
        "traits": [
          {
            "id": "micro-behaviors/data/format/css::display-none",
            "conf": 0.8199999928474426,
            "crit": 1,
            "desc": "CSS display none rule",
            "spans": [
              [
                4931,
                13
              ]
            ]
          },
          {
            "id": "micro-behaviors/data/format/css::opacity-zero",
            "conf": 0.7799999713897705,
            "crit": 2,
            "desc": "CSS opacity zero rule",
            "spans": [
              [
                2003,
                10
              ]
            ]
          }
        ],
        "type": "text"
      },
      {
        "ctx": [
          {
            "b": "tydM8wPIv4x(Ffdz/c:Wb6m\u003cpwOtH[xDRn9AV!$dy?j!wb6dEhzE)u=v@DmbwO#Pli^S5\u0026vr(WcvpQMyb4V3(ygn}QfJ}KnfJZ8z",
            "n": [
              {
                "c": 2,
                "d": "JSON data format",
                "i": "metadata/file/format::valid",
                "o": 0,
                "z": 22,
                "cf": 0.6000000238418579
              }
            ],
            "ln": 0
          }
        ],
        "depth": 1,
        "facts": {
          "metrics": {
            "file": {
              "size": 1731.0,
              "entropy": 5.99,
              "size_bytes": 1731.0
            },
            "json": {
              "parsed_bytes": 1731.0,
              "parse_limit_bytes": 76800.0
            },
            "binary": {
              "overall_entropy": 5.99,
              "peak_region_bytes": 1731.0,
              "peak_region_entropy": 6.03
            }
          }
        },
        "id": 5,
        "path": "lmfoclikpghkghnkbipjkgoondhikali.crx!!_metadata/verified_contents.json",
        "risk": 1,
        "sha": "c1bab6e3bf2eee52425115e4c105cdbd5a4cd6ce89cc85ee3668a16a12a718bb",
        "size": 1731,
        "traits": [
          {
            "id": "metadata/file/extension/identity::web-asset-extension",
            "conf": 1.0,
            "crit": 1,
            "desc": "Web asset file extension (css/html/js/json)",
            "spans": [
              [
                0,
                22
              ]
            ]
          },
          {
            "id": "metadata/file/format::valid",
            "conf": 0.6000000238418579,
            "crit": 2,
            "desc": "JSON data format",
            "spans": [
              [
                0,
                22
              ]
            ]
          }
        ],
        "type": "json"
      }
    ],
    "rev": "299a3",
    "v": "8"
  }
}