{ "ml": { "v": "7", "eng": "2.3.1-beta.0", "lvl": 15000, "conf": 38, "prob": 0.927177, "files": [ { "id": 0, "lvl": 15000, "conf": 38, "prob": 0.9271770119667053, "type": "xpi" }, { "id": 1, "type": "text" }, { "id": 2, "type": "json" }, { "id": 3, "type": "javascript" }, { "id": 4, "type": "javascript" }, { "id": 5, "type": "javascript" }, { "id": 6, "type": "javascript" }, { "id": 7, "type": "javascript" }, { "id": 8, "type": "javascript" }, { "id": 9, "type": "png" }, { "id": 10, "type": "svg" }, { "id": 11, "type": "javascript" }, { "id": 12, "type": "javascript" }, { "id": 13, "type": "javascript" }, { "id": 14, "type": "javascript" }, { "id": 15, "type": "javascript" }, { "id": 16, "type": "javascript" }, { "id": 17, "type": "javascript" }, { "id": 18, "type": "javascript" }, { "id": 19, "type": "javascript" }, { "id": 20, "type": "json" } ], "version": "v18.18", "analyzed_at": "2026-07-16T05:59:54Z" }, "path": "firefox-154.0a1.da.langpack.xpi", "raw": { "files": [ { "id": 0, "ctx": [ { "b": "p!H([6Awys2MK\u00268000000000000000001IH003IxA=k/afjXGAy\u0026r/(y?kngvj#59wPz)lfjwWdA=-{MA=k]dA==2bB4\u003c?AS\u003e{C3-{[ELf]KVtQU(eT2Ql!amntKJREsde+fmk:nh5zHIhFCj%m=zd6B{V", "n": [ { "c": 2, "d": "Mozilla web-extension signing-pipeline artifacts (build-shape, not verified)", "i": "metadata/signed/platform::mozilla-extension", "o": 0, "z": 1, "cf": 0.95 } ], "ln": 0 } ], "mol": "O(As)H(Db)", "sha": "eac64d891cb50ac338b323f5e068d4adf272c69bcd83e486eb765606d63449dc", "path": "firefox-154.0a1.da.langpack.xpi", "risk": 40, "size": 478170, "type": "xpi", "facts": { "metrics": { "file": { "size": 478170.0, "entropy": 7.86, "size_bytes": 478170.0 }, "binary": { "overall_entropy": 7.86, "peak_region_bytes": 424960.0, "peak_region_entropy": 7.85 }, "archive": { "file_count": 334.0, "member_count": 334.0, "script_count": 0.0, "zip_bomb_ratio": 6.1, "directory_count": 0.0, "executable_count": 0.0, "extra_field_size": 0.0, "noise_file_count": 0.0, "total_compressed": 413360.0, "compression.ratio": 0.3, "hidden_file_count": 0.0, "total_uncompressed": 1398743.0, "crc_collision_count": 1.0, "entry_comment_count": 0.0, "max_filename_length": 78.0, "rtlo_filename_count": 0.0, "format.regular_count": 334.0, "nested_archive_count": 0.0, "path_traversal_count": 0.0, "symlink_escape_count": 0.0, "security.setgid_count": 0.0, "security.setuid_count": 0.0, "security.sticky_count": 0.0, "double_extension_count": 0.0, "duplicate_member_count": 0.0, "security.symlink_count": 0.0, "unicode_filename_count": 0.0, "homoglyph_filename_count": 0.0, "security.encrypted_count": 0.0, "misplaced_executable_count": 0.0, "timing.mtime_dominant_count": 334.0, "timing.sentinel_mtime_count": 334.0, "security.world_writable_count": 0.0, "timing.mtime_dominant_fraction": 1.0, "compression.method_counts.deflate": 334.0 } } }, "ident": { "name": { "value": "Language: Dansk (Danish)", "source": "xpi.name", "verified": false }, "trust": "unsigned", "authors": [ { "name": "mozilladanmark.dk (contributors: Jesper Kristensen, Søren Lønbæk Nygaard Christensen, Søren Munk Skrøder)", "role": "author", "source": "xpi.author" } ], "version": { "value": "154.0.20260714.213719", "source": "xpi.version", "verified": false } }, "traits": [ { "id": "objectives/anti-static/obfuscation/encoding/arithmetic::arithmetic-sub-density", "conf": 0.95, "crit": 1, "desc": "Subtraction operators dominate the parse tree", "from": [ { "file": 3 } ], "spans": [ [ 0, 25 ] ] }, { "id": "micro-behaviors/data/llm::agent-identity-chatgpt", "conf": 0.8, "crit": 1, "desc": "ChatGPT identity reference", "from": [ { "file": 12 } ] }, { "id": "objectives/command-and-control/reverse-shell/dup::rfc1918-host-string--rx-1", "atk": "T1059", "conf": 0.75, "crit": 1, "desc": "Regex component marker", "from": [ { "file": 13 } ] }, { "id": "micro-behaviors/communications/http/keywords::http-verb-keyword--fetch", "conf": 0.75, "crit": 1, "desc": "HTTP verb keyword (fetch)", "from": [ { "file": 6 } ] }, { "id": "objectives/collection/stealer/browser::browser-auth-route-terms", "atk": "T1119", "conf": 0.88, "crit": 1, "desc": "Matches several authentication route terms", "from": [ { "file": 11 } ], "spans": [ [ 9035, 5 ] ] }, { "id": "objectives/lateral-movement/social-engineering/lures::inline-password-token", "conf": 0.8, "crit": 1, "desc": "Inline password value token", "from": [ { "file": 3 } ] }, { "id": "metadata/file/catalog/service::ai-vault-service-names", "conf": 0.82, "crit": 1, "desc": "AI and vault service names", "from": [ { "file": 12 } ] }, { "id": "metadata/file/profile/identity::documentation-page-term", "conf": 0.82, "crit": 1, "desc": "Documentation page terminology", "from": [ { "file": 6 } ] }, { "id": "micro-behaviors/ui/window/notify/keywords::notification-config-word", "conf": 0.86, "crit": 1, "desc": "notify/sender vocabulary word", "from": [ { "file": 11 } ] }, { "id": "well-known/app/observability::observability-dashboard-context", "conf": 0.94, "crit": 1, "desc": "Observability dashboard wording", "from": [ { "file": 6 } ] }, { "id": "micro-behaviors/crypto/library/keyword::cipher-keyword", "conf": 0.4, "crit": 2, "desc": "Generic 'cipher' crypto term", "from": [ { "file": 11 } ] }, { "id": "objectives/anti-static/obfuscation/string/conceal::js-reversed-eval", "conf": 0.9, "crit": 4, "desc": "Reversed eval keyword (lave)", "from": [ { "file": 11 } ] }, { "id": "objectives/collection/app-data/profile::profile-headline-field", "atk": "T1119", "conf": 0.86, "crit": 1, "desc": "Profile headline field", "from": [ { "file": 11 } ] }, { "id": "micro-behaviors/data/runtime/keywords::fingerprint-string", "conf": 0.94, "crit": 2, "desc": "fingerprint string", "from": [ { "file": 3 } ] }, { "id": "objectives/impact/crypto-manipulation/clipboard::clipboard-word-marker", "atk": "T1565.001", "conf": 0.8, "crit": 1, "desc": "Clipboard or paste keyword", "from": [ { "file": 7 } ] }, { "id": "well-known/malware/stealer/needle::panel-word", "conf": 0.4, "crit": 1, "desc": "Needle panel descriptor word", "from": [ { "file": 11 } ] }, { "id": "micro-behaviors/data/llm::agent-identity-claude", "conf": 0.8, "crit": 1, "desc": "Claude agent identity reference", "from": [ { "file": 12 } ] }, { "id": "micro-behaviors/crypto/certificate/usage::certificate-ref", "crit": 2, "desc": "References generic certificate terminology", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/ui/window/manage/dom::size-prop--height", "conf": 1.0, "crit": 1, "desc": "DOM or CSS size property (height)", "from": [ { "file": 3 } ] }, { "id": "metadata/file/metrics::low-overall-entropy-source", "conf": 0.9, "crit": 2, "desc": "Source file has low overall entropy", "from": [ { "file": 3 } ], "spans": [ [ 0, 29 ] ] }, { "id": "metadata/file/metrics::javascript-small-file-5k", "conf": 0.7, "crit": 1, "desc": "JavaScript file under 5KB", "from": [ { "file": 4 } ], "spans": [ [ 0, 44 ] ] }, { "id": "micro-behaviors/ui/window/notify/keywords::notification-alert-word", "conf": 0.9, "crit": 1, "desc": "Notification/alert UI vocabulary term", "from": [ { "file": 11 } ] }, { "id": "micro-behaviors/data/llm::agent-identity-copilot", "conf": 0.8, "crit": 1, "desc": "Copilot identity reference", "from": [ { "file": 12 } ] }, { "id": "micro-behaviors/communications/ip/literal::localhost-source", "conf": 0.75, "crit": 2, "desc": "Hardcoded localhost network host", "from": [ { "file": 11 } ] }, { "id": "metadata/file/metrics::low-string-density-large-file", "conf": 0.9, "crit": 1, "desc": "Low string density in source", "from": [ { "file": 3 } ], "spans": [ [ 0, 26 ] ] }, { "id": "objectives/anti-static/obfuscation/code-metrics/source::fluent-translation-file", "conf": 0.95, "crit": 2, "desc": "Fluent localization resource file", "from": [ { "file": 3 } ], "spans": [ [ 0, 10 ] ] }, { "id": "metadata/file/extension/identity::web-asset-extension", "conf": 1.0, "crit": 1, "desc": "CSS, HTML, JavaScript, or JSON extension", "from": [ { "file": 2 } ], "spans": [ [ 0, 13 ] ] }, { "id": "objectives/credential-access/theft/keywords::credential-field--password", "conf": 0.84, "crit": 1, "desc": "password/token/api_key field keyword (password)", "from": [ { "file": 3 } ] }, { "id": "objectives/anti-static/obfuscation/string/reconstruct::js-max-string-length-short", "conf": 0.8, "crit": 1, "desc": "JavaScript strings capped at five", "from": [ { "file": 8 } ] }, { "id": "objectives/execution/trigger/plugin::shell-commands-event-trigger--rx-10", "conf": 0.9, "crit": 1, "desc": "Regex component marker", "from": [ { "file": 11 } ] }, { "id": "metadata/lang/javascript-features::js-comma-sequence-count-5", "conf": 0.8, "crit": 2, "desc": "5+ comma sequence expressions", "from": [ { "file": 3 } ], "spans": [ [ 0, 25 ] ] }, { "id": "micro-behaviors/data/encoded::base64-token", "conf": 0.7, "crit": 2, "desc": "Literal 'base64' token in text", "from": [ { "file": 3 } ] }, { "id": "objectives/anti-static/obfuscation/encoding/arithmetic::arithmetic-sub-count", "conf": 0.95, "crit": 1, "desc": "Many subtraction operators present", "from": [ { "file": 3 } ], "spans": [ [ 0, 19 ] ] }, { "id": "objectives/command-and-control/backdoor/control/command-vocab::cmd-vocab-screenshot", "crit": 1, "desc": "\"screenshot\" command keyword", "from": [ { "file": 11 } ] }, { "id": "micro-behaviors/data/format/html::comment", "conf": 0.72, "crit": 1, "desc": "HTML comment syntax", "from": [ { "file": 10 } ] }, { "id": "objectives/exfiltration/http/hardcoded-key::request-body-marker", "atk": "T1041", "mbc": "C0002", "conf": 0.75, "crit": 1, "desc": "HTTP request body field marker", "from": [ { "file": 3 } ], "spans": [ [ 2893, 6 ] ] }, { "id": "objectives/exfiltration/stealer/credential/multi-source::node-find-key-filenames", "atk": "T1041", "conf": 0.9, "crit": 1, "desc": "Find command key filename filters", "from": [ { "file": 15 } ] }, { "id": "objectives/anti-static/obfuscation/payload/config::arch-keyed-hex-blob-dict--rx-14", "atk": "T1027", "mbc": "B0032", "conf": 0.94, "crit": 1, "desc": "Regex component marker", "from": [ { "file": 5 } ] }, { "id": "metadata/file/metrics::js-readable-source-context", "conf": 0.9, "crit": 1, "desc": "Readable JavaScript source context", "from": [ { "file": 15 } ] }, { "id": "micro-behaviors/ui/window/manage/dom::size-prop--width", "conf": 1.0, "crit": 1, "desc": "DOM or CSS size property (width)", "from": [ { "file": 3 } ] }, { "id": "objectives/credential-access/phishing/tactics::full-window-iframe-shell--rx-5", "atk": "T1566.002", "mbc": "B0030", "conf": 0.9, "crit": 1, "desc": "fixed-position iframe marker", "from": [ { "file": 14 } ] }, { "id": "metadata/permission/capture::capture-device-term", "conf": 0.86, "crit": 1, "desc": "Camera or microphone term", "from": [ { "file": 11 } ] }, { "id": "objectives/lateral-movement/brute-force/password::service-account-oracle", "atk": "T1110.001", "mbc": "E1110", "conf": 0.85, "crit": 1, "desc": "Service-account token oracle", "from": [ { "file": 4 } ] }, { "id": "objectives/credential-access/financial/credit-card::mastercard-bin--rx-1", "atk": "T1005", "mbc": "B0030", "conf": 0.75, "crit": 1, "desc": "Regex component marker", "from": [ { "file": 13 } ] }, { "id": "objectives/supply-chain/recon-exfil/oast/secret::node-payload-id-field", "conf": 0.3, "crit": 1, "desc": "id field in object literal", "from": [ { "file": 4 } ] }, { "id": "metadata/file/extension/identity::script-content-extension-mismatch", "conf": 0.9, "crit": 1, "desc": "Script content mismatches extension", "from": [ { "file": 3 } ] }, { "id": "metadata/file/profile/identity::sequential-identifiers", "conf": 0.8, "crit": 2, "desc": "Sequential source identifier names", "from": [ { "file": 3 } ], "spans": [ [ 0, 36 ] ] }, { "id": "objectives/anti-static/obfuscation/payload/config::arch-keyed-hex-blob-dict--rx-21", "atk": "T1027", "mbc": "B0032", "conf": 0.94, "crit": 1, "desc": "Regex component marker", "from": [ { "file": 5 } ] }, { "id": "micro-behaviors/os/clipboard/access::clipboard-keyword", "conf": 0.7, "crit": 1, "desc": "Clipboard keyword", "from": [ { "file": 7 } ] }, { "id": "metadata/lang/scripted::undefined-literal", "conf": 1.0, "crit": 1, "desc": "JavaScript undefined literal", "from": [ { "file": 11 } ] }, { "id": "objectives/impact/system/power::shutdown-keyword", "conf": 0.98, "crit": 1, "desc": "shutdown command keyword", "from": [ { "file": 4 } ] }, { "id": "metadata/file/string/artifact::payload-word-token", "conf": 0.6, "crit": 1, "desc": "Generic payload word present", "from": [ { "file": 6 } ] }, { "id": "objectives/discovery/host/browser/identity::bookmarks-word", "atk": "T1217", "conf": 0.4, "crit": 1, "desc": "bookmarks keyword", "from": [ { "file": 11 } ] }, { "id": "objectives/command-and-control/remote-command/keywords::command-result-word", "conf": 0.4, "crit": 1, "desc": "Command/result vocabulary pair", "from": [ { "file": 2 } ] }, { "id": "metadata/file/metrics::file-has-30-plus-lines", "conf": 0.9, "crit": 1, "desc": "File has 30 or more lines", "from": [ { "file": 3 } ], "spans": [ [ 0, 24 ] ] }, { "id": "metadata/file/metrics::concealed-payload-mass-1k", "conf": 0.8, "crit": 1, "desc": "High-entropy region mass over 1KB", "from": [ { "file": 3 } ], "spans": [ [ 0, 34 ] ] }, { "id": "metadata/package/documentation::references-changelog-history", "conf": 1.0, "crit": 2, "desc": "HISTORY documentation reference", "from": [ { "file": 11 } ] }, { "id": "micro-behaviors/ui/window/manage/dom::dom-element-value-read", "conf": 0.9, "crit": 2, "desc": "Reads the value of a DOM element", "from": [ { "file": 3 } ] }, { "id": "objectives/execution/trigger/plugin::shell-commands-event-trigger--rx-11", "conf": 0.9, "crit": 1, "desc": "Regex component marker", "from": [ { "file": 11 } ] }, { "id": "metadata/file/profile/language::lang-english", "conf": 0.8, "crit": 2, "desc": "Contains frequent English function words", "from": [ { "file": 11 } ], "spans": [ [ 277, 3 ] ] }, { "id": "micro-behaviors/data/control-flow/analysis::for-loop-content", "conf": 0.3, "crit": 2, "desc": "for loop (content)", "from": [ { "file": 11 } ] }, { "id": "micro-behaviors/data/llm::agent-identity-set", "conf": 0.9, "crit": 3, "desc": "Contains multiple AI-agent terms or product names", "from": [ { "off": 451, "file": 12, "line": 3 } ] }, { "id": "objectives/anti-static/obfuscation/code-metrics/string-blob::js-multi-line-blob-recognized-text", "atk": "T1027", "mbc": "B0032", "conf": 0.95, "crit": 1, "desc": "Recognized multiline blob text", "from": [ { "off": 7063, "file": 3, "line": 143 } ] }, { "id": "micro-behaviors/data/db/sql::sql-plaintext-password-update", "conf": 0.82, "crit": 1, "desc": "SQL password value update", "from": [ { "file": 3 } ] }, { "id": "metadata/package/files/included::png-extension-basename", "conf": 0.9, "crit": 1, "desc": "PNG image file extension", "from": [ { "file": 9 } ] }, { "id": "micro-behaviors/data/manipulation::tracking-selector-token", "conf": 0.8, "crit": 1, "desc": "Tracking selector token", "from": [ { "file": 11 } ] }, { "id": "objectives/anti-static/obfuscation/code-metrics/source::non-ascii-locale-marker", "conf": 1.0, "crit": 1, "desc": "Locale/translation non-ASCII marker", "from": [ { "file": 3 } ], "spans": [ [ 0, 10 ] ] }, { "id": "objectives/supply-chain/recon-exfil/ai-cli::prompt-indexeddb", "atk": "T1552.001, T1041", "mbc": "E1552", "conf": 0.94, "crit": 1, "desc": "\"IndexedDB\" browser credential store name", "from": [ { "file": 19 } ] }, { "id": "metadata/file/format::valid", "conf": 0.6, "crit": 2, "desc": "JSON data format", "from": [ { "file": 2 } ], "spans": [ [ 0, 13 ] ] }, { "id": "objectives/collection/stealer/wallet::hardware-wallet-target-surface", "atk": "T1552.001", "conf": 0.9, "crit": 1, "desc": "Wallet or backup target term", "from": [ { "file": 3 } ] }, { "id": "objectives/supply-chain/install-hook/scripts/hook-file::postinstall-ip-command-marker", "atk": "T1016", "conf": 0.92, "crit": 1, "desc": "IP interface command string in hook-like JS", "from": [ { "file": 13 } ] }, { "id": "metadata/signed/platform::pkcs7-signature", "conf": 1.0, "crit": 1, "desc": "META-INF/mozilla.rsa (Mozilla PKCS#7 sig blob)" }, { "id": "metadata/signed/platform::cose-signature", "conf": 1.0, "crit": 1, "desc": "META-INF/cose.sig (Mozilla COSE sig blob)" }, { "id": "metadata/file/format::web-extension-root-manifest", "conf": 0.95, "crit": 1, "desc": "Root web-extension manifest.json" }, { "id": "metadata/signed/platform::cose-manifest", "conf": 1.0, "crit": 1, "desc": "META-INF/cose.manifest (Mozilla COSE digests)" }, { "id": "metadata/file/metrics::archive-many-compressed-members", "conf": 0.9, "crit": 2, "desc": "Archive has many members", "spans": [ [ 0, 27 ] ] }, { "id": "metadata/package/metrics::jar-many-members", "conf": 0.98, "crit": 1, "desc": "JAR has many archive members", "spans": [ [ 0, 27 ] ] }, { "id": "metadata/signed/platform::pkcs7-signature-file", "conf": 1.0, "crit": 1, "desc": "META-INF/mozilla.sf (Mozilla PKCS#7 digest list)" }, { "id": "metadata/signed/platform::mozilla-extension", "conf": 0.95, "crit": 2, "desc": "Mozilla web-extension signing-pipeline artifacts (build-shape, not verified)" } ] }, { "id": 1, "sha": "6f6e4a9784fbb2f0bfd6b75f6bbeb8bb6f19cc4ccbe5696fc04216d3eeb26b73", "path": "firefox-154.0a1.da.langpack.xpi!!chrome/da/locale/da/global/intl.css", "size": 417, "type": "text", "depth": 1 }, { "ctx": [ { "b": "DJ", "n": [ { "c": 2, "d": "JSON data format", "i": "metadata/file/format::valid", "o": 0, "z": 13, "cf": 0.6 } ], "ln": 1, "addr": 0 }, { "b": "arR\u003eqA=leywPxCkA:-\u0026@x(mMpz!rP}v}/v/fjF%gzE+wiBzJcZaBs", "ln": 2, "addr": 2 }, { "b": "arR^Hb5I4nB7]J8b03\u0026Jt}t", "ln": 3, "addr": 45 }, { "b": "arR^HarR\u003eFB.Lu3vpKy[z/fRFzddr\u003cxjUH=a$J", "ln": 386, "addr": 14262 }, { "b": "arR^HarR\u003eFB.Lu3vpKy[z/fRFv@k:dzddr\u003cxjUH=a$J", "ln": 387, "addr": 14293 }, { "b": "arR^HarR\u003eFB.Lu3vpKy[z/fRFv@k:dv@bZ+A=L-3wO#Q6x(!xmA^oz:ec", "n": [ { "c": 1, "d": "Command/result vocabulary pair", "i": "objectives/command-and-control/remote-command/keywords::command-result-word", "o": 14348, "z": 199, "cf": 0.4 } ], "ln": 388, "addr": 14328 }, { "b": "arR^HarR\u003eFB.Lu3vpKy[z/fRFv@k:dzfo@ia$J", "ln": 389, "addr": 14374 }, { "b": "arR^HarR\u003eFB.Lu3vpKy[z/fRFwN]H%AaAM8ec", "ln": 390, "addr": 14405 } ], "depth": 1, "facts": { "metrics": { "file": { "size": 68076.0, "entropy": 4.68, "size_bytes": 68076.0 }, "json": { "parsed_bytes": 68076.0, "parse_limit_bytes": 76800.0 }, "binary": { "overall_entropy": 4.68, "peak_region_bytes": 62956.0, "peak_region_entropy": 4.8 } } }, "id": 2, "path": "firefox-154.0a1.da.langpack.xpi!!localization/da/coverage.json", "pid": 0, "risk": 1, "sha": "fc86d756748d697295ee2697de20e385f641972578a23e271670cf720ff997df", "size": 68076, "traits": [ { "id": "objectives/command-and-control/remote-command/keywords::command-result-word", "conf": 0.4, "crit": 1, "desc": "Command/result vocabulary pair", "spans": [ [ 14348, 199 ] ] }, { "id": "metadata/file/format::valid", "conf": 0.6, "crit": 2, "desc": "JSON data format", "spans": [ [ 0, 13 ] ] }, { "id": "metadata/file/extension/identity::web-asset-extension", "conf": 1.0, "crit": 1, "desc": "CSS, HTML, JavaScript, or JSON extension", "spans": [ [ 0, 13 ] ] } ], "type": "json" }, { "ctx": [ { "b": "v}xX5zd^(vBzk\u0026kwGTbyarR^He{7/Hy?j.LavxZXBzku3yHIr[wnM3#x(!xpvruj4zvf(+A==ehAXhxwvL8ChzE\u003c}N3lQDlatdFsvR6u#jS)dbzE\u003c@2wPz)bw[=3?By/F1v}xX5zd^(vBywSgA+f90zdm6%wN(]D3lQDlatdFsvR6u#jS)75B8k#vzFs03wPw]iz6iFfwnt:]wmYN#wEq{UA==ehAXhxwvL8Lgz/xJ7auZ5OarR^Vy**^:y-\u003e\u003e-p?sV*z/fcb3s^T/BzUVheP+AgePUGzC4CYnauZ5OarR^Vy**^:y-\u003e\u003e-q!o#)wPzt?v}xX5zd^(vBywSgv{{Gy3lQDlatdFsvR6u#jS)4kBz(hlBy/M9ATDq/A==ehAXhcxzE\u003c}NavHt{xKL{7v}xX5x\u003ez6{vru73azbU5ay]hcB7DFjA+w/#x(^Z8x(v)2AX5tzwPw]cwmYU2x\u003ez6?wPzv5ay]h03s^T/BzUVhePLAtwO\u003e)/A+e=7jS)dbB8$[nv}xX5x\u003ez6{vru73ayYwlxjVcbBzkLlvrrSawmYU2x\u003ez6?wPzu8wnbW0z*2Yjw]zYjCv+l8By!#]ATDq/A==ehAXhlwz/xJ7auZ\u0026nBS+vaAV!\u003e6A==2cx\u003e}d0wPw]fx\u003eI6\u0026zE^rfay]57azCv$zGGP8x\u003e7Z{wPw]7x(!ubaAg[jB8L@cATDq/A==ehAXhuzA=#2mauZ\u0026nx(!ubaAhmuBy/Fnx\u003eg^)Bzku3v}xW(AV/Hxwoql)wO=B0AV!$jAV/BmA=#2mv}xX5x\u003ez6{vru9)yhsk!wPz)fxl2OlvivYQm0fR=vr9G2wPz)bw[=3?By/Fny?WJ{wO#3\u0026efFFmAV/7bwO#Q7w[+:^A+fnlwncaawGUF]A==2cx-", "ln": 0, "col": 1, "line": 1 }, { "b": "avwBDv}xX5x\u003ez6{vrq\u00260arR^VB98XzwGTbUze0(tCwgPfxGvm)iaV}*3s^T/BzUVheOeEbBs?0lA=-)AwnccqBAhIBBrAZ?qE%xMxjV9aBzkMcx\u003ehp0zE^*gx(4Q1zF5", "ln": 789, "col": 46, "line": 19 }, { "b": "arSpTBA}XlauZ\u0026:x(kIDx\u003ehs0iV{mswO\u003cHKze0(txK$)\u003cxMMoTgbJMVi%]FeA==ehAXg^jA=-)Dz/Z1yjQJqOarSpMvpA!:auZ\u0026F.\u003e}D@3s^T/BzUVheN@vjBs?xszdK*", "ln": 1129, "col": 3, "line": 28 }, { "b": "AV^HLarR^He]j%9wO-FLax8\u0026(C4CX3v}xX5zd^(vBz\u003e@azy]:mzdK?M3lQDlatdFsvR6u#jS)WqyINH4xK$Z}wO#f)wc#*TA==ehAXg:ixk8m8eO[\u003c8wO-FL3lQDlao", "ln": 1280, "col": 19, "line": 33 }, { "b": "A==ehAXhuzA+O@#auZ5OarR^Vy**^:y-\u003e\u003e-q!o#-wO#TczdN.{v}xX5zd^(vw[=c}wPz:gx(n2AB7!#lgbQ%jjQJqOarSpMvpA!:auZ\u0026Cni[*.h8W3#x(mM{A:-N4A^qBcv}xX5zd^(vC4\u003eJiauZ5OarR^Vy**^:y-\u003e\u003e-r+VTmFtJU@arR^VvpJ!UB8#bdC{2l", "ln": 1496, "col": 3, "line": 43 }, { "b": "A+cw7wPS39e^=fmv}xR3x(v(vzd^(vv}xX5eO]unvruj4zy{0Ky-\u003e\u003eFarR^He{pVtB.8WUavfKUwPI{7iTPCyv}xR3x(v(vzd^(vv}xX5eO]unvruj4zy]yqCw.knvpQGz3lQDlatdFsvR6u#jS)pbzGE1hwPz)bw[=3?Bp6ckarSpBv}f7\u003eB8bujauY", "ln": 2489, "col": 125, "line": 79 }, { "b": "wPw]gB.\u003e=8BrC1laAImjyH}K1wN]\u003c$z/xA4A+cw6wPz)bw[=3?By/Fnw].r5wO@S7vrb[5vrb{4B7]A9wPzD}wohs1xK$Y%BhK*%B8L[rwPP5ozddEbay!\u00262wg!jdyH.Auga^3VA4LQeByupPavxZXBzku3yHIr@BrCHmay]53aAhvnC42G7az}", "ln": 3319, "col": 49, "line": 96 }, { "b": "A==2cx\u003e}d0wPPECwox3jXnDw6wPw]4BrCpmAbP=swPzt?w[=6)eN\u0026:sCxmsEv}xX5x\u003ez6?vru6jB8UY2auZ\u0026mwPz)bw[=3?By]l6wPwb(ze:AlBs?0heN@vjBAo3MA=k/lBrAZ?r(p!Jxcp.@zxJL9y-)!qz6hhieN@vjBzku3yHIr@A=bCtay]QqC4\u003e+nx(mC", "ln": 3659, "col": 42, "line": 100 }, { "b": "BS+:wwPS39AV!}haAIamC4CYpzE^\u0026$xjU[2wH[%B.\u003e!F*wO#3!zF\u003c3aay]QqwmV((y\u00269)7wmYN\u003exjSibx\u003e}G}A+G2{B7n({v@3cdw]zYjwmYT@wGV59A=#2maA7)nyJvs\u0026C4CXBayPvmwmYT3vqZm1zE^s0az2Tqxl!r7x\u003eIJgv}xX5x\u003ez6{vrq", "ln": 4481, "col": 36, "line": 112 }, { "b": "yJTJjwGV59zE^r3yJsYtBy/G7wmV)2vqfL0aARslaAg[jB8L@czy#oawPz(ACwhejePUGzx\u003c\u003e*2jQJqOarSpWvqH6$auZ\u0026mwPz)bw[=3?BrCBiwft@8A+P95B.$#bAYLs\u0026as82tA+O@#piyz.wPw]w3uG=@wg.XqeN@QhwO#Pwv}xX5x\u003ez6?vru66", "ln": 5359, "col": 92, "line": 120 }, { "b": "fGyZ{wPz)bw[=3?Brz#1mn+Mwv}xX5eOn{wzddJrAbe%8hY$mass#D+iw1-LA==2cx\u003e}d0asH5VlSki*dgfM@A=-)Bz/PY6Bs?DEv@\u003cNXv}Yp+zxI7+ss#D+iw1-LA==2cx\u003e}d0az\u003eX2azX((wmV(ip!KeObr44U", "ln": 7176, "col": 22, "line": 145 } ], "depth": 1, "facts": { "imp": [ [ "", "Authority" ], [ "", "certifikat" ], [ "", "certifikat" ], [ "", "certifikat" ], [ "", "certifikat" ], [ "", "certifikat" ] ], "mbr": [ "CA.delete", "Eksporter….accesskey", "Importer….accesskey", "Slet….accesskey", "Vis….accesskey", "alle….accesskey", "ca.label", "card.pkcs12", "cert.label", "certifikat.accesskey", "certifikat.delete", "certifikat.save", "certifikat.style", "certifikater.For", "dette.exception", "email.label", "export.label", "filen.Enten", "forkert.pkcs12", "host.label", "identitetstyveri.add", "information.Der", "information.add", "mailbrugere.certmgr", "name.label", "people.label", "permanent.accesskey", "personen.cert", "restore.label", "selv.delete", "serial.label", "server.label", "servers.label", "signatur.add", "sikkerhedsenheden.choose", "sikkerhedskopi….accesskey", "sikkerhedsundtagelse.accesskey", "tillid….accesskey", "title.title", "undtagelse.add", "undtagelse….accesskey", "view.label", "virkning.Er", "websted.add", "websteder.certmgr", "årsager.pkcs12", "øjeblikket.Det" ], "tgt": [ "Authority", "certifikat" ], "metrics": { "ast": { "op.sub": 255, "max_depth": 13, "call_count": 6, "node_count": 2145, "member_count": 47, "op_density.sub": 0.12, "sequence_count": 7, "member_depth_max": 2 }, "file": { "size": 7338, "entropy": 4.66 }, "text": { "lines": 148, "top_char": 101, "max_ws_run": 2, "digit_ratio": 0.01, "space_count": 933, "char_entropy": 4.66, "unique_chars": 75, "top_char_null": 0, "lines_over_200": 1, "string_density": 0.01, "top_char_ratio": 0.13, "avg_line_length": 48.58, "max_line_length": 219, "non_ascii_ratio": 0.02, "last_line_length": 33, "whitespace_ratio": 0.15, "identifier_density": 6.36, "line_length_stddev": 40.21, "normalized_string_count": 0.08, "suspicious_identifier_ratio": 0.04, "normalized_unique_identifiers": 49.8 }, "binds": { "count": 126 }, "binary": { "peak_region_bytes": 5290, "peak_region_entropy": 4.9 }, "strings": { "bytes": 13, "count": 1, "avg_length": 13, "max_length": 13, "avg_entropy": 3.39 }, "consistency": { "extension_content_mismatch": 1, "extension_content_mismatch.script_as_unknown": 1 }, "identifiers": { "count": 942, "unique": 359, "avg_length": 6.79, "max_length": 24, "min_length": 1, "avg_entropy": 2.22, "reuse_ratio": 0.38, "length_stddev": 3.89, "has_digit_ratio": 0.02, "sequential_names": 13, "single_char_count": 13, "single_char_ratio": 0.04, "high_entropy_count": 1, "high_entropy_ratio": 0, "all_lowercase_ratio": 0.69, "all_uppercase_ratio": 0.04, "numeric_suffix_count": 7 } } }, "id": 3, "path": "firefox-154.0a1.da.langpack.xpi!!localization/da/security/certificates/certManager.ftl", "pid": 30, "risk": 2, "sha": "09924d6ddc5f8c94e526dc6fea52fa96d43a63f4df9ea9de2e052e3d010e0531", "size": 7338, "traits": [ { "id": "metadata/file/line::file-has-30-plus-lines", "conf": 0.9, "crit": 2, "desc": "File has 30 or more lines" }, { "id": "metadata/lang/locale::language-label-code-de", "conf": 0.97, "crit": 2, "desc": "German UI language code", "spans": [ [ 4529, 0 ] ] }, { "id": "metadata/lang/locale::language-label-code-en", "conf": 0.97, "crit": 2, "desc": "English UI language code", "spans": [ [ 3367, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-5", "conf": 0.8, "crit": 1, "desc": "English function-word token \"for\"", "spans": [ [ 606, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-6", "conf": 0.8, "crit": 1, "desc": "English function-word token \"with\"", "spans": [ [ 5407, 0 ] ] }, { "id": "metadata/file/naming::sequential-identifiers", "conf": 0.8, "crit": 2, "desc": "Sequential source identifier names" }, { "id": "metadata/file/string/count::few-string-literals", "conf": 0.4, "crit": 3, "desc": "File has very few string literals" }, { "id": "micro-behaviors/crypto/certificate/usage::certificate-ref", "conf": 0.5, "crit": 2, "desc": "References certificate terminology", "spans": [ [ 3707, 0 ] ] }, { "id": "metadata/lang/locale::language-label-table-codes-a", "conf": 0.9, "crit": 2, "desc": "Common UI language-code pair", "uses": [ 2 ], "spans": [ [ 3367, 0 ] ] }, { "id": "metadata/lang/locale::language-label-table-codes-b", "conf": 0.9, "crit": 2, "desc": "European UI language-code pair", "uses": [ 1 ], "spans": [ [ 4529, 0 ] ] } ], "type": "javascript" }, { "ctx": [ { "b": "vpBd$Bs?DLz!0v1B7GzABzk\u0026kwGTbUp\u0026ZF:wPGCp.\u003e?lYBy/GbzF6q+vScyhePt-Gv}x.5wPGCkz!%Mkzy]pbBzkVhauZ5OarR^VBzk\u0026kwGTbUnmuyDy?W^1wPwb^vScyhePt-Gv}x.5wPGCAxMXAcz*c7JAb](bwPI]njQJqOarSpUx([f5auZ\u0026szEEs5x)a6dazb51wNYE:wmV)4xcpR{B8k#vaAhvtv}xY*vpBc", "n": [ { "c": 2, "d": "Fluent localization resource file", "i": "metadata/file/profile/locale::fluent-translation-file", "o": 0, "z": 18, "cf": 0.95 }, { "c": 1, "d": "shutdown command keyword", "i": "objectives/impact/system/power::shutdown-keyword", "o": 115, "z": 8, "cf": 0.98 } ], "ln": 0, "col": 1, "line": 1 }, { "b": "arR^HarR^Hax@=4wNcAPA=kM7y@rk)ayP85wGUI{zF\u003c2dAb](bwPGjwBAko}wmV($aBtjRwoz{3BzkVhaBLwNwOVBawc%C4arR^HarR^HasZPlBzblat{8%:z!rZ1.(mV0vqG:\u003eay]53zE\u003c@fA=kD0B0\u00268LA(j.:wGUXfDMTOAB-H]jx(v(iEin", "n": [ { "c": 2, "d": "European UI language-code pair", "i": "metadata/file/profile/locale::language-label-table-codes-b", "o": 420, "z": 2, "cf": 0.9 } ], "ln": 372, "col": 4, "line": 13 } ], "depth": 1, "facts": { "imp": [ [ "", "title" ], [ "", "action.title" ], [ "", "process" ], [ "", "title" ], [ "", "process" ], [ "", "title" ], [ "", "tab" ], [ "", "title" ], [ "", "process.title" ], [ "", "name" ], [ "", "resident" ], [ "", "total" ], [ "", "process" ], [ "", "process" ], [ "", "process" ], [ "", "process" ], [ "", "Filer" ], [ "", "process" ], [ "", "Udvidelser" ], [ "", "process" ], [ "", "sider" ], [ "", "process" ], [ "", "Plugins" ], [ "", "process" ], [ "", "websteder" ], [ "", "process" ], [ "", "plugins" ], [ "", "process" ], [ "", "GPU" ], [ "", "process" ], [ "", "VR" ], [ "", "process" ], [ "", "dekoder" ], [ "", "process" ], [ "", "Netværk" ], [ "", "process" ], [ "", "server" ], [ "", "process" ], [ "", "allokeret" ], [ "", "process" ], [ "", "Værktøj" ], [ "", "process" ], [ "", "Inference" ], [ "", "process" ], [ "", "private" ], [ "", "serviceworker" ], [ "", "disabled" ], [ "", "coep" ], [ "", "process2" ], [ "", "threads" ], [ "", "threads" ], [ "", "id" ], [ "", "name" ], [ "", "tab" ], [ "", "one" ], [ "", "many" ], [ "", "Subframes" ], [ "", "unknown" ], [ "", "generic" ], [ "", "applemedia" ], [ "", "wmf" ], [ "", "engine" ], [ "", "oracle" ], [ "", "utils" ], [ "", "dialog" ], [ "", "module" ], [ "", "cpu" ], [ "", "ready" ], [ "", "idle" ], [ "", "idle" ], [ "", "inaktiv.title" ], [ "", "changed" ], [ "", "change" ], [ "", "ns" ], [ "", "us" ], [ "", "ms" ], [ "", "KB" ], [ "", "MB" ], [ "", "GB" ], [ "", "TB" ], [ "", "PB" ], [ "", "EB" ] ], "mbr": [ "action.title", "inaktiv.title", "process.title" ], "tgt": [ "Filer", "GPU", "Inference", "Netværk", "Plugins", "Subframes", "Udvidelser", "VR", "Værktøj", "allokeret", "dekoder", "plugins", "process", "server", "sider", "websteder" ], "metrics": { "ast": { "op.sub": 264.0, "max_depth": 16.0, "bind_count": 71.0, "call_count": 18.0, "node_count": 1685.0, "member_count": 3.0, "op_density.sub": 0.16, "sequence_count": 1.0, "identifier_count": 201.0, "member_depth_max": 2.0, "string_literal_count": 1.0 }, "file": { "size": 4374.0, "entropy": 4.86, "size_bytes": 4374.0 }, "text": { "digit_ratio": 0.0, "space_count": 492.0, "total_lines": 89.0, "char_entropy": 4.86, "unique_chars": 77.0, "string_density": 0.01, "avg_line_length": 48.15, "high_byte_ratio": 0.01, "max_line_length": 104.0, "non_ascii_ratio": 0.01, "last_line_length": 19.0, "whitespace_ratio": 0.13, "most_common_ratio": 0.08, "identifier_density": 5.78, "line_length_stddev": 24.62, "normalized_string_count": 0.11, "repeated_char_sequences": 2.0, "most_common_char_is_null": 0.0, "max_inline_whitespace_run": 1.0, "most_common_char_codepoint": 101.0, "suspicious_identifier_ratio": 0.03, "normalized_unique_identifiers": 31.04 }, "binds": { "count": 71.0 }, "calls": { "count": 18.0 }, "binary": { "overall_entropy": 4.86, "peak_region_bytes": 4096.0, "peak_region_entropy": 5.02 }, "source": { "function_count": 1.0 }, "members": { "count": 3.0 }, "strings": { "total": 1.0, "avg_length": 7.0, "max_length": 7.0, "avg_entropy": 2.52, "total_bytes": 7.0 }, "functions": { "count": 1.0, "avg_params": 3.0, "max_params": 3.0, "one_liners": 6.0, "avg_name_length": 6.0, "avg_length_lines": 1.0, "max_length_lines": 1.0, "min_length_lines": 1.0, "avg_param_name_length": 10.0, "density_per_100_lines": 6.74, "code_in_functions_ratio": 0.07 }, "consistency": { "extension_content_mismatch": 1.0, "extension_content_mismatch.script_as_unknown": 1.0 }, "identifiers": { "count": 201.0, "total": 514.0, "avg_length": 5.97, "max_length": 24.0, "min_length": 1.0, "avg_entropy": 2.2, "reuse_ratio": 0.39, "unique_count": 201.0, "length_stddev": 3.34, "has_digit_ratio": 0.01, "sequential_names": 7.0, "single_char_count": 7.0, "single_char_ratio": 0.03, "high_entropy_count": 3.0, "high_entropy_ratio": 0.01, "all_lowercase_ratio": 0.6, "all_uppercase_ratio": 0.06, "numeric_suffix_count": 2.0 } } }, "id": 4, "path": "firefox-154.0a1.da.langpack.xpi!!localization/da/toolkit/about/aboutProcesses.ftl", "pid": 0, "risk": 1, "sha": "9be5f24ff56ea67e5f3a46e3ff00bdad6a6f23001ccd048a23b3d7940c6f352d", "size": 4374, "traits": [ { "id": "metadata/file/profile/locale::fluent-translation-file", "conf": 0.95, "crit": 2, "desc": "Fluent localization resource file", "spans": [ [ 0, 18 ] ] }, { "id": "metadata/file/metrics::low-string-density-large-file", "conf": 0.9, "crit": 1, "desc": "Low string density in source", "spans": [ [ 0, 26 ] ] }, { "id": "metadata/file/metrics::file-has-30-plus-lines", "conf": 0.9, "crit": 1, "desc": "File has 30 or more lines", "spans": [ [ 0, 24 ] ] }, { "id": "metadata/file/profile/locale::language-label-table-codes-b", "conf": 0.9, "crit": 2, "desc": "European UI language-code pair", "spans": [ [ 420, 2 ] ] }, { "id": "metadata/file/extension/identity::script-content-extension-mismatch", "conf": 0.9, "crit": 1, "desc": "Script content mismatches extension", "spans": [ [ 0, 45 ] ] }, { "id": "metadata/file/metrics::script-peak-region-over-1k", "conf": 0.8, "crit": 1, "desc": "Peak-entropy source region exceeds 1KB", "spans": [ [ 0, 34 ] ] }, { "id": "metadata/file/metrics::low-overall-entropy-source", "conf": 0.9, "crit": 2, "desc": "Source file has low overall entropy", "spans": [ [ 0, 29 ] ] }, { "id": "objectives/impact/system/power::shutdown-keyword", "conf": 0.98, "crit": 1, "desc": "shutdown command keyword", "spans": [ [ 115, 8 ] ] }, { "id": "objectives/anti-static/obfuscation/encoding/arithmetic::arithmetic-sub-count", "conf": 0.95, "crit": 1, "desc": "Many subtraction operators present", "spans": [ [ 0, 19 ] ] }, { "id": "metadata/file/profile/identity::sequential-identifiers", "conf": 0.8, "crit": 2, "desc": "Sequential source identifier names", "spans": [ [ 0, 35 ] ] }, { "id": "metadata/file/metrics::javascript-small-file-5k", "conf": 0.7, "crit": 1, "desc": "JavaScript file under 5KB", "spans": [ [ 0, 48 ] ] }, { "id": "objectives/anti-static/obfuscation/encoding/arithmetic::arithmetic-sub-density", "conf": 0.95, "crit": 1, "desc": "Subtraction operators dominate the parse tree", "spans": [ [ 0, 25 ] ] }, { "id": "metadata/file/profile/locale::localized-source-marker", "conf": 0.95, "crit": 2, "desc": "Localized source or translation context", "spans": [ [ 0, 18 ] ] } ], "type": "javascript" }, { "id": 5, "sha": "5ac0fdd53c742c08fcb78fb1e89636c59d22dd00f653d2a4adb40a71b04eea4b", "path": "firefox-154.0a1.da.langpack.xpi!!localization/da/toolkit/about/aboutProfiles.ftl", "risk": 1, "size": 2575, "type": "javascript", "depth": 1 }, { "id": 6, "sha": "c54c8e80231a9818f67dda4e27dcf16306bb568e26be5b7c11e2a628e7a32e7a", "path": "firefox-154.0a1.da.langpack.xpi!!localization/da/toolkit/about/aboutTelemetry.ftl", "risk": 1, "size": 5608, "type": "javascript", "depth": 1 }, { "id": 7, "sha": "9354607091c17409f720d97d9a9e8defdde28c715226b6f5e48b22fc4095975d", "path": "firefox-154.0a1.da.langpack.xpi!!localization/da/toolkit/about/aboutThirdParty.ftl", "risk": 1, "size": 3454, "type": "javascript", "depth": 1 }, { "id": 8, "sha": "dc9269a98803d5a919beae33720e0566b48b44918b8583c1fba1ee93f65296f6", "path": "firefox-154.0a1.da.langpack.xpi!!localization/da/toolkit/printing/printUI.ftl", "risk": 1, "size": 3567, "type": "javascript", "depth": 1 }, { "id": 9, "sha": "26f6ac4536c2668d59e0ef10b999a6706596b81e87746e32a9c47bb71c25d3f0", "path": "firefox-154.0a1.da.langpack.xpi!!browser/chrome/browser/locale/da/app-marketplace-icons/android.png", "size": 4257, "type": "png", "depth": 1 }, { "id": 10, "sha": "9fac7491c911f5b45738127d9ab8f60c01e85a7a3563ca8f29a7feeec8d28546", "path": "firefox-154.0a1.da.langpack.xpi!!browser/chrome/browser/locale/da/app-marketplace-icons/ios.svg", "size": 5773, "type": "svg", "depth": 1 }, { "ctx": [ { "b": "vSDyhB7Gwzzddc@eQ7]Dwn=VzwmYvYB.(dKBzk\u0026kwGTbUDMT[HA:-\u0026@eOocwy+oKkzdK\u0026r", "n": [ { "c": 2, "d": "Fluent localization resource file", "i": "objectives/anti-static/obfuscation/code-metrics/source::fluent-translation-file", "o": 0, "z": 11, "cf": 0.95 } ], "ln": 1, "addr": 0 }, { "b": "vSDyhB7Gwzzddc@ePt-AC42G7eQ7]Dwn=VzBzk\u0026kwGTb", "ln": 2, "addr": 57 }, { "b": "arR^HDMVcUk#ZrHqCwL*at2+", "n": [ { "c": 1, "d": "Regex component marker", "i": "objectives/anti-static/obfuscation/payload/config::arch-keyed-hex-blob-dict--rx-14", "o": 99, "z": 8, "cf": 0.94 } ], "ln": 3, "addr": 93 }, { "b": "arR^HarR^HtwW!Uz/YhbDMT[HA:-\u0026@eOocwy+oKkzdK\u0026raMv{oaw^8)C42FnvSDyhB7]J8", "n": [ { "c": 1, "d": "Regex component marker", "i": "objectives/anti-static/obfuscation/payload/config::arch-keyed-hex-blob-dict--rx-21", "o": 122, "z": 5, "cf": 0.94 } ], "ln": 4, "addr": 113 }, { "b": "arR^HarR^Rtw[Q%wPz60DMT[HA:-\u0026@eOocwy+oKkzdK\u0026raw^8)C42FnvSDyhB7]J8", "ln": 5, "addr": 170 }, { "b": "arR^HEe", "ln": 6, "addr": 223 }, { "b": "vSDyhB7Gwzzddc@ePt-AC42G7ePV5Dw[=Gww]zYwv@DmbwO#PjjS)Nwx)9{bayYwfCxmFox8", "n": [ { "c": 2, "d": "Contains frequent English function words", "i": "metadata/file/profile/language::lang-english", "o": 257, "z": 3, "cf": 0.8 } ], "ln": 7, "addr": 229 }, { "b": "Ab]Vovru6jvSDyhB7]J8ePUPzA=+/lBs?PCCYUI)auZ\u0026zA+PY9BrC4kz*cnpzF78ewN({gat45yvqYQcB7/GjByPDnePb0lwGVy", "ln": 8, "addr": 287 }, { "b": "B-Iqcvr9@lwmYU2x([RLvS=^mz/cWX", "ln": 9, "addr": 367 }, { "b": "arR^He[5^mvj=q7vR6u#jS)^tB0bgmw]zZbvruj4zxJ\u003emaA}yaB97#7", "ln": 10, "addr": 392 }, { "b": "B-Iqcvr9@vwPz%dv}xZkzF%Shw[+:-BzkVheN-KbxM4]ljP", "n": [ { "c": 1, "d": "Notification/alert UI vocabulary term", "i": "micro-behaviors/ui/window/notify/keywords::notification-alert-word", "o": 453, "z": 12, "cf": 0.9 } ], "ln": 11, "addr": 437 }, { "b": "arR^He{82Iy\u0026\u003cxgBy/YsauZ\u003c+G\u003c[{xAa9S}y?mYhw]zYjvR6Q@wN]v)aA89tx(n0lvqG:\u003eA+PA7", "ln": 12, "addr": 475 }, { "b": "B-Iqcvr9@zwNWlez//Y9x\u003e7N[x(v(vvqYN*z/M%-", "ln": 13, "addr": 536 }, { "b": "arR^He{82Iy\u0026\u003cxgBy/YsauZ\u0026F.\u003e}l.aA89twox2rx(1]ez!9@#xjSh{wPIS#wmY^7w].r5Cv+l8By!#]Bn", "ln": 14, "addr": 569 }, { "b": "B-Iqcvr9@px\u003eg{fzF%Shw[+:-BzkVheN-KbxM4]ljP", "ln": 15, "addr": 635 }, { "b": "arR^He{82Iy\u0026\u003cxgBy/YsauZ\u003c+G\u003c[{xo?v-AePtcowO.", "n": [ { "c": 1, "d": "Needle panel descriptor word", "i": "well-known/malware/stealer/needle::panel-word", "o": 698, "z": 5, "cf": 0.4 } ], "ln": 16, "addr": 669 }, { "b": "B-Iqcvr9@vwPzG[y+oKyBzku3v{%E[z/ddnzEWu#AV^H", "ln": 17, "addr": 704 }, { "b": "arR^He{82Iy\u0026\u003cxgBy/YsauZ\u003c+G\u003c[{xB7GxawO-@qvqYT)wPN", "ln": 18, "addr": 740 }, { "b": "B-Iqcvr9@fvqZl%B1IoFBzku3v{%E[z/ddnzEWu#AV^H", "ln": 23, "addr": 938 }, { "b": "arR^He{82Iy\u0026\u003cxgBy/YsauZ\u0026r.\u003e?lYBy/FnBzkMcvpS}=B7Gwmw]zYjv{%m#vrj2iyJBPrvqx$0z/b", "ln": 24, "addr": 974 }, { "b": "B-Iqcvr9@zwNWliByM[zxKL{)eP2iiA=k]gz/fbrzF%Shw[+:-BzkVheN-KbxM4]ljP", "n": [ { "c": 1, "d": "Camera or microphone term", "i": "metadata/permission/capture::capture-device-term", "o": 1058, "z": 10, "cf": 0.86 } ], "ln": 25, "addr": 1037 }, { "b": "arR^He{82Iy\u0026\u003cxgBy/YsauZ\u0026kwnM3#x(!xpwPw]7wO=6#xcpR{ay]h7az\u003e?dA=kMdzxJ!cwfu8cvSMT5wmY\u0026", "ln": 26, "addr": 1091 }, { "b": "B-Iqcvr9@gwObv[y\u0026?mDz//Y9x\u003e7N[x(v(vvqYN*z/M%-", "ln": 27, "addr": 1159 }, { "b": "arR^He{82Iy\u0026\u003cxgBy/YsauZ\u003c+G\u003c[{xAa9S}y?mYhw]zYjAbP/iBzkVhB1I0xA+frh.)\u003c-1B8kAd", "ln": 30, "addr": 1282 }, { "b": "B-Iqcvr9@oz!0i(xM4%lePbGGx\u003ez6?vruj4zy]pmv}Y!3auY", "n": [ { "c": 2, "d": "Hardcoded localhost network host", "i": "micro-behaviors/communications/ip/literal::localhost-source", "o": 1350, "z": 9, "cf": 0.75 } ], "ln": 31, "addr": 1343 }, { "b": "arR^He{82Iy\u0026\u003cxgBy/YsauZ\u0026kwnM3#x(!xpwPw]4wm]s*xcqqgy-)LjyHI3\u003caz2C7wN]v)azbLjay]59By=OswNY.5wN\u003e", "ln": 32, "addr": 1382 }, { "b": "B-Iqcvr9@lzE^s6wN)x6vL8FoBzku3v{%E[z/ddnzEWu#AV^H", "ln": 41, "addr": 1911 }, { "b": "arR^He{82Iy\u0026\u003cxgBy/YsauZ\u003c+G\u003c[{xAa9S}y?mYhw]zYjvR6Q@wN]v)aA89tvq{fqz!rP$x(mGly**%/AS", "ln": 42, "addr": 1951 }, { "b": "B-Iqcvr9@svrlHlz/PwuzF%Shw[+:-BzkVheN-KbxM4]ljP", "n": [ { "c": 1, "d": "password/token/api_key field keyword (password)", "i": "objectives/credential-access/theft/keywords::credential-field--password", "o": 2024, "z": 8, "cf": 0.84 } ], "ln": 43, "addr": 2017 }, { "b": "arR^He{82Iy\u0026\u003cxgBy/YsauZ\u003c+G\u003c[{xAa9S}y?mYhw]zYjvR6Q@wN]v)aA89tvrrS8wO(o}ayO![vqY.0yJ0-{AS", "ln": 44, "addr": 2055 }, { "b": "B-Iqcvr9@zwNWliByM[zxKL{)eO5Box\u003e7Z}ePbGGx\u003ez6?vruj4zy]pmv}Y!3auY", "ln": 45, "addr": 2125 }, { "b": "B-Iqcvr9@vwNPQ?xF1suAc0QHzENJ)A+3pQaxh=\u003cBrCBmzE^^0efFLszE:(bwPzuyaxcg/xcq55wfujwbXp\u003eax(mGSvqPM#Eir6mA+f3dwGUXfvpTy\u0026B8$]8wO=E1Bs)", "ln": 78, "addr": 3714 }, { "b": "B-Iqcvr9@vwNPQ?xF1suAc0QKwN]H}wN/*lg9w.5q/(C*BrCadzxK2rXmYX[zF78aayO/3wPI{7w[t!2wPP5bz/M$eBrChkR66w*A=V59xcp/bvix[tbXp\u003eax(mGSvqPM#EirDvay]h7ayYwfCxmtoxLzKfz/PMce=", "ln": 79, "addr": 3817 }, { "b": "B-Iqcvr9@wvpBs%B7F^2v}WDjzENJ)A+3pQaxDySy?B(3wO#x%azkn6C4Czhw]zYjxMXuqx\u003eI0$wGUA6azbt9wmV(]wPPECwox2hwN]v)az2ebwPxy", "ln": 80, "addr": 3947 }, { "b": "B-Iqcvr9@vwNPQ?xF17twmWu4z/oAdvrcd8auZ\u0026lz!A}8RGcD-AS", "n": [ { "c": 3, "d": "Browser bookmarks access", "i": "objectives/discovery/host/browser/identity::bookmarks", "o": 4058, "z": 9, "cf": 0.8 } ], "ln": 81, "addr": 4039 }, { "b": "B-Iqcvr9@vwNPQ?xF17twmWumvpBp2jS)j5zE)o[vpS{", "ln": 82, "addr": 4081 }, { "b": "B-Iqcvr9@vwNPQ?xF17twmWuax(!xmA^n=\u003cav{i/Bz(hlyx", "n": [ { "c": 2, "d": "HISTORY documentation reference", "i": "metadata/package/documentation::references-changelog-history", "o": 4136, "z": 7, "cf": 1.0 } ], "ln": 83, "addr": 4117 }, { "b": "B-Iqcvr9@vwNPQ?xF17twmWu3v@#B6zGu{-av]{UwnC%$xjV8", "ln": 84, "addr": 4155 }, { "b": "ADL#9yHHZ{x(v)gePLAzByxiiauZ\u0026qwO#NhvrcDjDMT[HA:-\u0026@ePUPzA=-)JvqPM#Ee", "ln": 195, "addr": 9012 }, { "b": "ADL#9yHHZ{x(v)geN@TdePLAzByxiiauZ\u0026WwO#NhvrcC", "ln": 196, "addr": 9066 }, { "b": "ADL#9yHHZ{x(v)gePUAxwO2+2xM4#GauZ\u0026Dvp{Y]BrCTu.\u003e}D\u003evRGT{wN]u", "n": [ { "c": 1, "d": "\"screenshot\" command keyword", "i": "objectives/command-and-control/backdoor/control/command-vocab::cmd-vocab-screenshot", "o": 9115, "z": 10, "cf": 0.5 } ], "ln": 197, "addr": 9102 }, { "b": "ADL#9yHHZ{x(v)geN@TdePUAxwO2+2xM4#FauZ\u0026*yS02\u0026zdmi}y?mc*efG4yxcp=caAItoRGcJ.x(4P%wmU", "ln": 198, "addr": 9150 }, { "b": "ADL#9yHHZ{x(v)geP=2wzGxS5By=NTawWe(A=Yc}Bn", "ln": 199, "addr": 9217 }, { "b": "arR^He]j%9wO-FLav*0W", "ln": 228, "addr": 10278 }, { "b": "vScg2zddE2ePtcowO-FL", "ln": 229, "addr": 10295 }, { "b": "arR^He]#bWy?j.Laz\u003e?geQ7]tBz9YTgbAGU", "n": [ { "c": 1, "d": "DOM or CSS size property (width)", "i": "micro-behaviors/ui/window/manage/dom::size-prop--width", "o": 10329, "z": 5, "cf": 1.0 } ], "ln": 230, "addr": 10312 }, { "b": "x\u003eg^)Bzk\u0026xePUSFwI4Rlw]zZbvruj4zxI7+s7L\u0026ZBy/07eOP9mz/PY6BzkVhazbLjaBtjRxM4%laBK", "ln": 231, "addr": 10341 }, { "b": "x\u003eg^)Bzk\u0026xeOFZ7wmY^kB7F\u003c7A+PSveQ7]JxF0[oB95J/", "ln": 232, "addr": 10404 }, { "b": "x\u003eg^)Bzk\u0026xePtowze16jx(v)gePV2LA:-P(eN-d0wPI]Ay?m3}zy]ZzA+cvRawxXIB0bshA+b", "ln": 259, "addr": 12326 }, { "b": "x\u003eg^)Bzk\u0026xePtowze16jx(v)gePLAsz^^fdxLzvaauZ\u0026nBS+:vvqE66B.\u003e=8C4(1uxjU%{zE^O3RGlq\u003eB7]e@zy=]x.)\u003c.fvrrTfRFY{+x(mM{A=bChB8n:\u003cAV/7ewO#x%z7U", "ln": 260, "addr": 12385 }, { "b": "x\u003eg^)Bzk\u0026xeN@Qdvr9@vx()]rwmoN*auY", "n": [ { "c": 1, "d": "HTTP request body field marker", "i": "objectives/exfiltration/http/hardcoded-key::request-body-marker", "o": 12512, "z": 6, "cf": 0.75 } ], "ln": 261, "addr": 12492 }, { "b": "arR^He]j%9wO-FLax0F}ay/tdyIvv3aA7)nCv+l8By/07wmoN*\u0026^^)", "ln": 262, "addr": 12519 }, { "b": "x\u003eg^)Bzk\u0026xeN@ZpzE)s1x(v(vzF%RGB7F\u003c7A+c?zwN/\u003e6x([RLC4\u003eJiauZ\u0026nx(k59z/Pr3zE^r{B7DFox(1]owNY.5wN]v]az2Nox\u003e}G}aAImjyH}Js", "ln": 263, "addr": 12563 }, { "b": "arR^He]j%9wO-FLavZ9SA=91xzE^\u0026$xjU[2wPv", "ln": 271, "addr": 13182 }, { "b": "arR^He[5m1wPI{dwQbyYavV", "ln": 272, "addr": 13213 }, { "b": "x\u003eg^)Bzk\u0026xeO5Blv@=p5BzkVheOP9zwN/\u003e6wGTbUl${JYw]zZ0x(mD)y\u0026:egBzkLlwmY\u003e8wGVhdvSMT5wftD7azCRbwGU@jx)9{be*9C$wo8l7yHI96B7DF8wGUY8w]zZbvruj4zE)\u0026tay]Qqx(mE5wO#3\u0026AV==xCPZB9xjkW\u003cB8bY8wPxsAvR6Q@wN]v)aA7)nz/xJrB8CYfxjV9az/3RawPRu%x(mN8yJ1lndf", "ln": 273, "addr": 13232 }, { "b": "x\u003eg^)Bzk\u0026xeO5Blv@=p5BzkVheQ7=myB%4gAa\u0026*6eOP9AA=i6-avG{YazbLjvRGZ\u003cwO=B0aARslay]59By=OswNY.5wN(](zGYPewmY^7B9p#8azV1yAcbVix(mMaz!yh7AV/7iyH[ScA+PY9Bs)", "n": [ { "c": 3, "d": "Encryption API usage markers", "i": "micro-behaviors/crypto/library/keyword::encryption-functions", "o": 13444, "z": 6, "cf": 0.5 } ], "ln": 274, "addr": 13418 }, { "b": "x\u003eg^)Bzk\u0026xeO5Blv@=p5BzkVheQ7=myB%4gAa\u0026*6ePLMDyAL+.l2HjNwGU+%zxK1iay]h7wGUY8w]zZbvruj4zE)\u0026hwO=f]AV\u0026n%zE^^0aA}yaB97#7wPR#oz/xsaXn(U4y+t", "ln": 275, "addr": 13537 }, { "b": "x\u003eg^)Bzk\u0026xeO5Blv@=p5BzkVheN-dhx)a5tvR/%)yH}3iauZ\u0026]at45yvqYQcB7/GjBs?xszdK\u0026razth7ayYe9yH}J$BrCZEx\u003e}:2ay]51wGUz[ay]53zE\u003c@ix\u003eg^c", "ln": 276, "addr": 13644 }, { "b": "x\u003eg^)Bzk\u0026xeO5Blv@=p5BzkVhePtctB7]/eeO]ulwmYo]jS)dbzxJLfA:\u0026:2wmYN#wGUM8azCRbwGU@jx)9{baA7)nwmV($zF0*czddK2z/fcbefFFCay]51wPxsAyHI96B7Gznvp*S\u003czE^^0e=", "ln": 277, "addr": 13745 }, { "b": "AbPYrA4Mcxy?m9#eN@jawPzihwmY{#v}u=C", "ln": 298, "addr": 15143 }, { "b": "arR^He{pVtB.8WUawlcWwPziu", "n": [ { "c": 2, "d": "Reads the value of a DOM element", "i": "micro-behaviors/ui/window/manage/dom::dom-element-value-read", "o": 15176, "z": 6, "cf": 0.9 } ], "ln": 299, "addr": 15172 }, { "b": "arR^He[5m1wPI{dwQbyYawh", "ln": 300, "addr": 15193 }, { "b": "B7/05x(mMnCvtJfx(mMnAb](bwO2y7Bz\u0026:Mvpyux", "ln": 316, "addr": 15831 }, { "b": "arR^He]j%9wO-FLavZo\u0026BAtu%BrCWty-)s#zE)o[vpP", "ln": 317, "addr": 15864 }, { "b": "B7/05x(mMnCvtJfx(mMnwnc9[vR/Qcw]zYwB7GAlx(v(ijP", "n": [ { "c": 1, "d": "Matches several authentication route terms", "i": "objectives/collection/stealer/browser::browser-auth-route-terms", "o": 15927, "z": 7, "cf": 0.88 } ], "ln": 318, "addr": 15899 }, { "b": "arR^He]j%9wO-FLavG^HyJKolwPw]7wO=6#xlbUlwPITjBAz8gB7DFaz/M$hwO#x%aAIanB7]Mg", "ln": 319, "addr": 15937 }, { "b": "Cv+l8wPzG[y+oZty?m9#ePtSGBs?rqvR6u#jS)!yRFG(/wO@SiwPzG@y-)XnA=:t", "ln": 320, "addr": 15998 }, { "b": "B-Iqcvr9@uwPJ0gBs*{hBzkVhePVbIByO#oBywSgCwhejeN@ZpByw)3wPw[Rax95\u0026w]]eqx(1]7vqYT=y**\u003c=BrFDfauTZ:vqXnQas7DnzGGr3zE)\u0026hElof7Aa9SF", "ln": 370, "addr": 18130 }, { "b": "B-Iqcvr9@uwPJ0gBs*{hBzkVheP+AgeOx9xB-n{PzF\u0026)1wN(]Daxrq/C5y@bC4CLlxl5clAaG", "ln": 371, "addr": 18231 }, { "b": "B-Iqcvr9@uwPJ0gBs*{hBzkVheP$\u0026Hx(\u003e}sA=k!Dv@b\u003c#vSbW}wfs2Tls\u003ekQXmV{@A:Z8kwnu0}Ac2Yhy?d9$", "n": [ { "c": 2, "d": "Clipboard handling marker", "i": "objectives/collection/clipboard/capture::clipboard-marker", "o": 18322, "z": 9, "cf": 0.7 } ], "ln": 372, "addr": 18290 }, { "b": "B-Iqcvr9@uwPJ0gBs*{hBzkVheN\u0026p6z/PzvBywT2z/YF#A:@=mCv+kajS)ZAD21Kw.\u003e!FPvpyu\u003ez/M$eBrCUxXmYv}zdNl2DMTOBzF9W3wGVy", "ln": 373, "addr": 18359 }, { "b": "B-Iqcvr9@uwPJ0gBs*{hBzkVheN\u0026p6z/PzvBywT2z/YF#A:@=mz//V7AV^H/rc0n1aAkk{axh=UazbLjayPvmBhLI2wGU%fR67acbXp\u003eax(mG8Ee", "ln": 374, "addr": 18447 }, { "b": "B-Iqcvr9@uwPJ0gBs*{hBzkVheP+AgBz(kivrb\u003c\u003eePk-AwPxwlzF9W3wGTbUq]uaTaz\u003eX2aBtjRwO#c{zE\u003c@say]hbwOVy0azbU5ayO/3wPI{7w[t!2wPN", "ln": 376, "addr": 18623 }, { "b": "B-Iqcvr9@uwPJ0gBs*{hBzkVheN@ZrC}BbReN@QhAai-]A+3pQawlS(x#u]\u003c", "ln": 377, "addr": 18718 }, { "b": "B-Iqcvr9@uwPJ0gBs*{hBzkVheP\u003e@wwObT]wN)x5vqGB@y*?B7AXhryB9hqvauZ\u0026\u0026wmYv!zE)\u003c1Bn", "n": [ { "c": 1, "d": "JavaScript undefined literal", "i": "metadata/lang/scripted::undefined-literal", "o": 18788, "z": 9, "cf": 1.0 } ], "ln": 378, "addr": 18767 }, { "b": "B-Iqcvr9@uwPJ0gBs*{iwn=vbePV5zBzk\u0026kwGTbUDMT[HA:-\u0026@ePt-Gwozy7ePb0lwGVyMB.2VfwmYN#wD", "ln": 379, "addr": 18829 }, { "b": "B-Iqcvr9@uwPJ0gBs?uuzy]{LvSVsay?j.LaBtj.zdEJovSC){wg.XczdK\u0026r", "ln": 380, "addr": 18895 }, { "b": "arR^He{82Iy\u0026\u003cxgBy/YsauZ\u0026vB.-aex(4P%wmWubeN\u0026Bgy?mc*asINVbY^TqA=+/lBrC#X", "ln": 472, "addr": 23393 }, { "b": "Aa@*7B-I4Bx(kIwx\u003e8mcA+c?wvqYT)eOFZ7wmY^7jS)79y\u00260V[wI4QFvRGT{wN]u", "ln": 473, "addr": 23450 }, { "b": "Aa@*7B-I4Bx(kIwx\u003e8mcA+c?wvqYT)eOFZ7wnC%$wGTbUl$HEZwGVhdvSMT5wftq#vR6dWy?mSfx\u003e}G}ayY53y?mc*eOM!Cx(4P%wmU", "n": [ { "c": 1, "d": "Profile headline field", "i": "objectives/collection/app-data/profile::profile-headline-field", "o": 23527, "z": 8, "cf": 0.86 } ], "ln": 474, "addr": 23502 }, { "b": "Aa@*7B-I4Bx(kIwx\u003e8mcA+c?wvqYT)eN\u0026TeC{2l)r+V8Qz!i@iC4(2eB0bsxy?WK9x(+zhyING7B8L[rB.2VfyIWN5wO@S7vrMf)aAUI#zFKtpB7]nraA28[AV!?9y\u00260V[wI4QFvRGT{wN]u{wPw]4yJKolwPzv7e=", "ln": 475, "addr": 23585 }, { "b": "Aa@*7B-I4Bx(kIwx\u003e8mcA+c?lzEE0\u003cwI51xxj(3(auY", "ln": 476, "addr": 23715 }, { "b": "Bz(8lvQTpevS=^mz/ddFvrMilAa9x\u003cauY", "ln": 573, "addr": 27150 }, { "b": "arR^He]j%9wO-FLav*0WaAImcwD", "ln": 574, "addr": 27177 }, { "b": "arR^He{82Iy\u0026\u003cxgBy/YsauZ\u0026qwO\u0026M2wO#x%aAImcwGSyFas82wz/P@fB-X:Odf", "ln": 575, "addr": 27199 }, { "b": "Bz(8lvQTpevS=^mz/ddBAaJ]sw[=6)auY", "n": [ { "c": 3, "d": "Obsidian shell command event trigger", "i": "objectives/execution/trigger/plugin::shell-commands-event-trigger", "o": 27261, "z": 12, "cf": 0.9 } ], "ln": 576, "addr": 27249 }, { "b": "arR^He]j%9wO-FLaJ5[xzxJL9yY", "ln": 577, "addr": 27276 }, { "b": "arR^He{82Iy\u0026\u003cxgBy/YsauZ\u003c+G\u003c[{xwO@S5x(1[uDMTOPxM4{kv%8(oEjk", "ln": 578, "addr": 27298 }, { "b": "Bz(8lvQTpevS=^mz/ddFD2vb6wg.[ivSJUP", "ln": 579, "addr": 27345 }, { "b": "arR^He]j%9wO-FLawuG\u003cBrC1dy?j-3vqYT=y**\u003c=", "ln": 653, "addr": 29963 }, { "b": "arR^He{82Iy\u0026\u003cxgBy/YsauZ\u0026vx(!wsvqG:\u003eazb51wNYE:wmU", "ln": 654, "addr": 29996 }, { "b": "Aa%icwN)xmvpBpfwo8QceOP9kx\u003e7N[z/M%-ax98\u003cA3e+3zE)o[vpS}\u003eazttbazbLjayPvmw)]+5xt.l1wGUI{Bn", "ln": 655, "addr": 30035 }, { "b": "A+frlz/PzvB7GAlx(v(vB97\u0026hBAIKOB9hbdwPI%cz/ddzwPI{3xjShGauTZ!A=k\u0026dkeS7-zxK4nwnC%)wPzu8w)]N*vR/E-wJ@pgB98CvzF8cQm0fR/vqWi2wO#3!zF\u003c2dwnb{7Bzko4x\u003eI0$wGV59B8#5lzxJLivixJfz!B90zeA\u003c4B.bCkx=}:BeN\u0026:ezE+tuxM4{kePb0lwGVyzjzwUBay[]5vj=pIfM5EWvqPNsb57L9zxZ.$aA.NjwPw[:x(!xmA+Pqw", "n": [ { "c": 1, "d": "Regex component marker", "i": "objectives/execution/trigger/plugin::shell-commands-event-trigger--rx-11", "o": 30118, "z": 10, "cf": 0.9 } ], "ln": 656, "addr": 30105 }, { "b": "A+frlz/PzvB7GAlx(v(vB97\u0026hBAIKOB9hbdwPI%cz/ddoB-..zzxI7+r+VQ$ze0S9xM!rmwmou", "ln": 657, "addr": 30318 }, { "b": "w[=6)Aa@/$wPxwiy\u0026r*0wN)xbzF0/@vr9FNavG{YaA8pkvqY!2vruj4zxJR3AV!?cz!\u0026{8wPP56wm]s*xcqqgy-)LjyHI3\u003cazbt7wPw]j.\u003e!F^wO#x%ay/tbAclnlAXm", "ln": 658, "addr": 30378 }, { "b": "wmoN*ePLAwz/P@lzF7Lsz//Y9x\u003e7N[x(v(vzdN^fvp%c]jS]7]eN\u0026:ezE+tuxM4{kePb0lwGVyzB7Gl1wPw]4B-.Lsvruj8yANd@Byuqlx(1]sat4+FzE^WaePUPzA=-)JvqPM#EjMHZ.\u003e!G0x=}h1zxJLfA:\u0026P\u003cA+cw7x(k55A=leywPxwvAbo9ewO=B0e=", "n": [ { "c": 1, "d": "notify/sender vocabulary word", "i": "micro-behaviors/ui/window/notify/keywords::notification-config-word", "o": 30541, "z": 6, "cf": 0.86 } ], "ln": 659, "addr": 30481 }, { "b": "wmoN*ePLAwz/P@lzF7Lsz//Y9x\u003e7N[x(v(vvS=^mz/cWX", "ln": 660, "addr": 30635 }, { "b": "arR^He]j%9wO-FLaxDySy?CpwxM^/{azLF2ay]51wPv", "ln": 661, "addr": 30672 }, { "b": "BAhIBBz$VawO-@cy\u0026r*0wPxwkwPIv4x(Ffdz/cWXaBtj.vSC){wg.+vz!a02Bs?xszdK\u0026raz\u003eXcwPxsAvrrSnx(X0gz/6f0wmY^7v-bY@aA8BmA^2u%xjSh@x\u003eFM9x(mE4wIb97.\u003e!G0x={(3z!\u0026{8wPw]m.\u003e!F)vqYZ?aAIEraz(mqx\u003eIJu", "ln": 799, "addr": 38630 }, { "b": "BAhIBBz$VawO-@cy\u0026r*0wN)xawNPaXAV^H/DMT[HA:-\u0026@ePt-Gwozy7ePb0lwGVyzvR/%#wPzu)wGUI$B8$[nBzkS9azbLjay]h0iS", "n": [ { "c": 2, "d": "Iteration or loop pattern", "i": "micro-behaviors/data/control-flow/analysis::iteration-loop-pattern", "o": 38847, "z": 10, "cf": 0.5 } ], "ln": 800, "addr": 38775 }, { "b": "BAhIBBz$VawO-@uA:-D[x(mMnxK$Q.wPw[RaBtj.vSC){wg.+vz!a02Bs?xszdK\u0026raARsly\u0026r\u0026bwncaawGV8ezF7HyBhK*%Cv+l8By!#]AV/7iyH[S3.\u003e?w@x=}FsD24hbAYK", "n": [ { "c": 1, "d": "Tracking selector token", "i": "micro-behaviors/data/manipulation::tracking-selector-token", "o": 38868, "z": 8, "cf": 0.8 } ], "ln": 801, "addr": 38857 }, { "b": "BAhIBBz$VawO-@uA:-D[x(mMnwmY*(A+PGmx(v(ijS):nwO@SiAbP=hzFa2xzdNG\u003ezFsfewPw]9B-7\u00266A+fnlzF%f7wGU=avq{f%AX5tBz/PYqy*?u}AV/pkaz+$ex(mJ]y\u0026\u003cleaz(mqx\u003eIQ6B0bgjyH]9", "ln": 802, "addr": 38964 }, { "b": "BAhIBBz$VawO-@jzGxx0B-I4BB7F\u003c6x(v(vxK$Q.wPw[RavG{YazbLjvRGZ\u003cwO=B0az2Nox\u003e}G}aAImjyH}I", "ln": 803, "addr": 39088 }, { "b": "BAhIBBz$VawO-@mx(!wFy**^:y+o:HvpK7!zF7Lhz/fVdzGE0:ax9k$A+PA7B1I9zwn2)$wb", "ln": 810, "addr": 39479 }, { "b": "BAhIBBz$VawO-@mx(!wFy**^:y+omkzF9K3Ab]VgBy/FnjP", "n": [ { "c": 2, "d": "fingerprint string", "i": "micro-behaviors/data/runtime/keywords::fingerprint-string", "o": 39559, "z": 11, "cf": 0.94 } ], "ln": 811, "addr": 39537 }, { "b": "arR^HDMTOzz/]@tat2+", "ln": 812, "addr": 39575 }, { "b": "arR^HDMTOzz/]@tat2+", "ln": 874, "addr": 42346 }, { "b": "arR^HarR^Htw[y\u003ct{aFpeN\u0026:ezE+trA=kGhv@%quvqPM#EirSCy\u0026132aBtjRv@DHcBrC#Ov@=\u003clBz(2gzE)?", "ln": 875, "addr": 42362 }, { "b": "arR^HarR^Rtw[Q%wPz60DMT[HA:-\u0026@ePt-Gwozy7ePb0lwGVyzBzkMcz!6#qas7DnB-8pzEir3uD2N\u003ezze0)0A=R", "ln": 876, "addr": 42430 }, { "b": "arR^HEe", "ln": 877, "addr": 42501 }, { "b": "BAhIBBz$VawO-@dA^qRCz/6iawPxwAvpy*8x(!wFxK$Q.wPw[RavG{+B7DFrwNY.5wN]v)azbLjBhLI2wPw]4BrCydC4z!aA^qRCz/6iax(mMA", "n": [ { "c": 4, "d": "Reversed eval keyword (lave)", "i": "objectives/anti-static/obfuscation/string/conceal::js-reversed-eval", "o": 42577, "z": 4, "cf": 0.9 } ], "ln": 878, "addr": 42507 }, { "b": "BAhIBBz$VawO-@cA+eV?xKLZ*A==vOvqZ13D2mFxB1H\u003cwwNP7ZwN)xawNPaXAV^H/nmuJYwox2azxJ.kzGG!tAkOH{wmY\u003e8wGVhdvSMT5wiQ", "ln": 879, "addr": 42596 }, { "b": "BAhIBBz$VawO-@cA+eV?xKLZ*A==vOvqZ13D2mFxB1H\u003cwwNP7ZwN)x6wPIv4x(Ffdz/cWXaBtj.vSC){wg.+vz!a02Bs?xszdK\u0026razth7aA8jfvp%d[efFwyay]59By=OswNY.5wN(]%vr9G7vp\u003cQ7wPP59vrt{].\u003e}h(x(mD)zxJLfAV![7aAImcB97$of!%\u003e*.\u003e?lZwmY^lavZ6.wfu29ayO\u003ekaA89twox2aAV!?5A(kzcBs)", "ln": 880, "addr": 42683 }, { "b": "BAhIBBz$VawO-@cA+eV?xKLZ*A==vOvqZ13D2mFxB1H\u003cwwNP7ZwN)x4B-..zzy]ykB8tSjB09Q*l1UpOA@", "ln": 881, "addr": 42878 }, { "b": "BAhIBBz$VawO-@cA+eV?xKLZ*A==vOvqZ13D2mFxB1H\u003cwwNP7ZwN)x4B-..zzy]viwN/HczeTraBz(gxjS)WBvrcDjxl4B5x(+zryHI9#x(mL", "ln": 882, "addr": 42944 } ], "depth": 1, "facts": { "imp": [ [ "", "title" ], [ "", "title" ], [ "", "content" ], [ "", "button" ], [ "", "label" ], [ "", "anchor" ], [ "", "tooltiptext" ], [ "", "anchor" ], [ "", "tooltiptext" ], [ "", "anchor" ], [ "", "tooltiptext" ], [ "", "anchor" ], [ "", "tooltiptext" ], [ "", "anchor" ], [ "", "tooltiptext" ], [ "", "anchor" ], [ "", "tooltiptext" ], [ "", "anchor" ], [ "", "tooltiptext" ], [ "", "anchor" ], [ "", "tooltiptext" ], [ "", "anchor" ], [ "", "tooltiptext" ], [ "", "anchor" ], [ "", "tooltiptext" ], [ "", "anchor" ], [ "", "tooltiptext" ], [ "", "anchor" ], [ "", "tooltiptext" ], [ "", "anchor" ], [ "", "tooltiptext" ], [ "", "anchor" ], [ "", "tooltiptext" ], [ "", "anchor" ], [ "", "tooltiptext" ], [ "", "anchor" ], [ "", "tooltiptext" ], [ "", "anchor" ], [ "", "tooltiptext" ], [ "", "anchor" ], [ "", "tooltiptext" ], [ "", "anchor" ], [ "", "tooltiptext" ], [ "", "anchor" ], [ "", "tooltiptext" ], [ "", "anchor" ], [ "", "tooltiptext" ], [ "", "anchor" ], [ "", "tooltiptext" ], [ "", "confirm" ], [ "", "short" ], [ "", "button" ], [ "", "title" ], [ "", "feedback" ], [ "", "Feedback.title" ], [ "", "more2" ], [ "", "mere.accesskey" ], [ "", "history2" ], [ "", "historik.accesskey" ], [ "", "help2" ], [ "", "hjælp.accesskey" ], [ "", "suggestion2" ], [ "", "forslag.accesskey" ], [ "", "suggest2" ], [ "", "accesskey" ], [ "", "location2" ], [ "", "frequently2" ], [ "", "suggestions2" ], [ "", "dropmarker" ], [ "", "title" ], [ "", "acknowledgment" ], [ "", "weather" ], [ "", "onboard" ], [ "", "onboard" ], [ "", "bookmarks" ], [ "", "tabs" ], [ "", "history" ], [ "", "actions" ], [ "", "blocked" ], [ "", "tooltiptext" ], [ "", "blocked" ], [ "", "tooltiptext" ], [ "", "blocked" ], [ "", "tooltiptext" ], [ "", "blocked" ], [ "", "tooltiptext" ], [ "", "blocked" ], [ "", "tooltiptext" ], [ "", "blocked" ], [ "", "tooltiptext" ], [ "", "blocked" ], [ "", "tooltiptext" ], [ "", "blocked" ], [ "", "tooltiptext" ], [ "", "blocked" ], [ "", "tooltiptext" ], [ "", "blocked2" ], [ "", "tooltiptext" ], [ "", "blocked" ], [ "", "blocked" ], [ "", "blocked" ], [ "", "blocked" ], [ "", "blocked" ], [ "", "bookmark" ], [ "", "bogmærke" ], [ "", "bookmark" ], [ "", "side" ], [ "", "button" ], [ "", "label" ], [ "", "history" ], [ "", "label" ], [ "", "søgehistorik.accesskey" ], [ "", "extension2" ], [ "", "label" ], [ "", "udvidelser….accesskey" ], [ "", "extension2" ], [ "", "label" ], [ "", "udvidelse.accesskey" ], [ "", "autohide" ], [ "", "label" ], [ "", "værktøjslinjer.accesskey" ], [ "", "exit" ], [ "", "label" ], [ "", "skærm.accesskey" ], [ "", "title" ], [ "", "button" ], [ "", "tab" ], [ "", "label" ], [ "", "faneblad.accesskey" ], [ "", "søgetjeneste.accesskey" ], [ "", "private" ], [ "", "label" ], [ "", "vinduer.accesskey" ], [ "", "alias" ], [ "", "engine" ], [ "", "label" ], [ "", "\"{ $engineName }\".tooltiptext" ], [ "", "label" ], [ "", "menu" ], [ "", "label" ], [ "", "bookmarks" ], [ "", "Bogmærker" ], [ "", "tabs" ], [ "", "Faneblade" ], [ "", "history" ], [ "", "Historik" ], [ "", "actions" ], [ "", "Handlinger" ], [ "", "addons" ], [ "", "addons3" ], [ "", "bookmarks2" ], [ "", "bookmarks" ], [ "", "clearrecenthistory" ], [ "", "downloads2" ], [ "", "downloads" ], [ "", "extensions" ], [ "", "extensions2" ], [ "", "firefoxview" ], [ "", "firefoxview" ], [ "", "help" ], [ "", "help" ], [ "", "inspector2" ], [ "", "inspector2" ], [ "", "colorpicker" ], [ "", "colorpicker" ], [ "", "library" ], [ "", "library" ], [ "", "logins2" ], [ "", "logins" ], [ "", "mute" ], [ "", "print2" ], [ "", "print" ], [ "", "savepdf" ], [ "", "savepdf2" ], [ "", "private2" ], [ "", "private" ], [ "", "refresh" ], [ "", "refresh" ], [ "", "restart" ], [ "", "restart" ], [ "", "screenshot3" ], [ "", "screenshot2" ], [ "", "translate" ], [ "", "translate" ], [ "", "settings2" ], [ "", "settings2" ], [ "", "themes" ], [ "", "themes2" ], [ "", "update" ], [ "", "update" ], [ "", "viewsource2" ], [ "", "viewsource2" ], [ "", "more" ], [ "", "title" ], [ "", "label" ], [ "", "bookmark" ], [ "", "bookmark" ], [ "", "cancel.label" ], [ "", "Afbryd.accesskey" ], [ "", "remove.label" ], [ "", "checkbox" ], [ "", "label" ], [ "", "gemmes.accesskey" ], [ "", "button" ], [ "", "label" ], [ "", "panel.style" ], [ "", "information" ], [ "", "host.title" ], [ "", "secure" ], [ "", "secure" ], [ "", "failure" ], [ "", "internal" ], [ "", "file" ], [ "", "associated" ], [ "", "page" ], [ "", "blocked" ], [ "", "root" ], [ "", "loaded" ], [ "", "side" ], [ "", "loaded" ], [ "", "encryption" ], [ "", "upgraded" ], [ "", "label2" ], [ "", "on" ], [ "", "label" ], [ "", "off" ], [ "", "label" ], [ "", "temporarily" ], [ "", "label" ], [ "", "on3" ], [ "", "off3" ], [ "", "upgrade" ], [ "", "header" ], [ "", "hint" ], [ "", "more" ], [ "", "hint" ], [ "", "data" ], [ "", "label" ], [ "", "view" ], [ "", "verified" ], [ "", "label" ], [ "", "label" ], [ "", "etsi" ], [ "", "forordning" ], [ "", "root2" ], [ "", "overridden" ], [ "", "exception" ], [ "", "label" ], [ "", "undtagelser.accesskey" ], [ "", "insecure" ], [ "", "indsender" ], [ "", "intro" ], [ "", "risk" ], [ "", "blocked2" ], [ "", "loaded" ], [ "", "insecure2" ], [ "", "indhold" ], [ "", "mixed2" ], [ "", "siden" ], [ "", "loaded" ], [ "", "indhold" ], [ "", "insecure" ], [ "", "websted" ], [ "", "text" ], [ "", "label" ], [ "", "button" ], [ "", "button" ], [ "", "button" ], [ "", "button" ], [ "", "opener" ], [ "", "button2" ], [ "", "label" ], [ "", "bogmærker….tooltiptext" ], [ "", "message" ], [ "", "name" ], [ "", "device.value" ], [ "", "icon" ], [ "", "device.value" ], [ "", "icon" ], [ "", "icon" ], [ "", "screen" ], [ "", "label" ], [ "", "shared" ], [ "", "window" ], [ "", "screen" ], [ "", "tab" ], [ "", "label" ], [ "", "session" ], [ "", "label" ], [ "", "label" ], [ "", "available" ], [ "", "close" ], [ "", "label" ], [ "", "placeholder" ], [ "", "placeholder" ], [ "", "disabled" ], [ "", "placeholder" ], [ "", "label" ], [ "", "engine" ], [ "", "placeholder" ], [ "", "label" ], [ "", "bookmarks" ], [ "", "placeholder" ], [ "", "label" ], [ "", "history" ], [ "", "placeholder" ], [ "", "tabs" ], [ "", "placeholder" ], [ "", "actions" ], [ "", "placeholder" ], [ "", "name" ], [ "", "placeholder" ], [ "", "anchor2" ], [ "", "fjernstyring" ], [ "", "granted" ], [ "", "tab" ], [ "", "value" ], [ "", "extension.value" ], [ "", "button2" ], [ "", "title" ], [ "", "button" ], [ "", "button" ], [ "", "chat" ], [ "", "engine" ], [ "", "private" ], [ "", "engine" ], [ "", "sponsored" ], [ "", "tab" ], [ "", "view" ], [ "", "visit" ], [ "", "container" ], [ "", "unnamed" ], [ "", "clipboard" ], [ "", "web" ], [ "", "other" ], [ "", "web" ], [ "", "engine" ], [ "", "clipboard" ], [ "", "result" ], [ "", "subtitle" ], [ "", "subtitle" ], [ "", "subtitle" ], [ "", "recommended" ], [ "", "title" ], [ "", "country" ], [ "", "only" ], [ "", "sponsored" ], [ "", "title" ], [ "", "description" ], [ "", "name" ], [ "", "allow" ], [ "", "now" ], [ "", "dismiss" ], [ "", "all2" ], [ "", "market2" ], [ "", "market" ], [ "", "market" ], [ "", "all" ], [ "", "countdown" ], [ "", "range" ], [ "", "ongoing" ], [ "", "today" ], [ "", "today" ], [ "", "button3.title" ], [ "", "engine2" ], [ "", "title" ], [ "", "keyword2" ], [ "", "title" ], [ "", "dropmarker2" ], [ "", "title" ], [ "", "button2" ], [ "", "title" ], [ "", "default2.title" ], [ "", "engine" ], [ "", "\"{ $engineName }\".title" ], [ "", "header" ], [ "", "header" ], [ "", "mode" ], [ "", "keywords" ], [ "", "bookmarks" ], [ "", "history" ], [ "", "tabs" ], [ "", "actions" ], [ "", "tabgroup" ], [ "", "tabgroup" ], [ "", "tab" ], [ "", "faneblad.accesskey" ], [ "", "tab" ], [ "", "faneblad.accesskey" ], [ "", "window" ], [ "", "vindue.accesskey" ], [ "", "window" ], [ "", "vindue.accesskey" ], [ "", "suggest.label" ], [ "", "suggestions" ], [ "", "quickactions" ], [ "", "searches" ], [ "", "trending" ], [ "", "show2" ], [ "", "søgninger.accesskey" ], [ "", "acknowledgment" ], [ "", "button" ], [ "", "button" ], [ "", "open" ], [ "", "billede" ], [ "", "close" ], [ "", "billede" ], [ "", "header" ], [ "", "headline" ], [ "", "body" ], [ "", "toggle" ], [ "", "domain" ], [ "", "domain" ], [ "", "button" ], [ "", "skærm" ], [ "", "button" ], [ "", "skærm" ], [ "", "button" ], [ "", "skærm" ], [ "", "button" ], [ "", "skærm" ], [ "", "domain" ], [ "", "domain" ], [ "", "bookmarks" ], [ "", "subheader" ], [ "", "chevron" ], [ "", "content" ], [ "", "button.label" ], [ "", "menu" ], [ "", "menu.label" ], [ "", "visibility.label" ], [ "", "panel" ], [ "", "title" ], [ "", "styled" ], [ "", "button.label" ], [ "", "Udvidelser.tooltiptext" ], [ "", "needed.label" ], [ "", "Udvidelser.tooltiptext" ], [ "", "quarantined.label" ], [ "", "Udvidelser.tooltiptext" ], [ "", "blocklisted.label" ], [ "", "Udvidelser.tooltiptext" ], [ "", "heading2" ], [ "", "description2" ], [ "", "checkbox" ], [ "", "altid.accesskey" ], [ "", "button.label" ], [ "", "Annuller.accesskey" ], [ "", "button2" ], [ "", "session.accesskey" ], [ "", "complete" ], [ "", "allow.label" ], [ "", "Tillad.accesskey" ], [ "", "relay" ], [ "", "provides" ], [ "", "notice" ], [ "", "name" ], [ "", "name" ], [ "", "unsigned" ], [ "", "value" ], [ "", "more" ], [ "", "url" ], [ "", "checkbox2" ], [ "", "vinduer.accesskey" ], [ "", "checkbox" ], [ "", "udvidelsen.accesskey" ], [ "", "message" ], [ "", "message" ], [ "", "message" ], [ "", "message" ], [ "", "button.label" ], [ "", "menuitem" ], [ "", "menuitem" ], [ "", "open" ], [ "", "somewhere" ], [ "", "nowhere" ], [ "", "open" ], [ "", "somewhere" ], [ "", "nowhere" ], [ "", "folder" ], [ "", "mappe.accessKey" ], [ "", "button" ], [ "", "opsætning.tooltiptext" ], [ "", "enabled" ], [ "", "disabled" ], [ "", "on" ], [ "", "off" ], [ "", "enabled" ], [ "", "disabled" ], [ "", "secure" ], [ "", "insecure" ], [ "", "enabled" ], [ "", "enabled2" ], [ "", "insecure" ], [ "", "insecure" ], [ "", "disabled" ], [ "", "disabled" ], [ "", "button" ], [ "", "link" ], [ "", "header" ], [ "", "title" ], [ "", "description" ], [ "", "clear" ], [ "", "cancel" ], [ "", "header.title" ], [ "", "morelink" ], [ "", "all" ], [ "", "header" ], [ "", "title" ], [ "", "name" ], [ "", "name" ], [ "", "description" ], [ "", "header" ], [ "", "description" ], [ "", "header" ], [ "", "description" ], [ "", "header" ], [ "", "dismiss" ], [ "", "monitor" ], [ "", "message" ], [ "", "button" ], [ "", "igen.accesskey" ] ], "mbr": [ "Afbryd.accesskey", "Annuller.accesskey", "Feedback.title", "Genindlæs.accesskey", "HTTP.identity", "Tillad.accesskey", "Udvidelser.tooltiptext", "administrator.identity", "adressefeltet.urlbar", "aktiveret.Vi", "aktiveret.picture", "allow.label", "altid.accesskey", "andre.identity", "berørt.trustpanel", "beskyttelse.trustpanel", "beskyttet.Vi", "blocklisted.label", "bogmærker….tooltiptext", "browserhistorik.urlbar", "button.label", "button3.title", "cancel.label", "certifikat.Det", "computer.identity", "default2.title", "delt.sharing", "device.value", "efter.urlbar", "ekstraktion.urlbar", "extension.value", "faneblad.accesskey", "faneblad.sharing", "forslag.accesskey", "forslag.urlbar", "fra.trustpanel", "gemmes.accesskey", "gemt.file", "genindlæsning.refresh", "header.title", "historik.accesskey", "hjælp.accesskey", "host.title", "igen.accesskey", "igen.bookmarks", "igen.pointerlock", "igen.trustpanel", "igennem.identity", "ikke.trustpanel", "info.content", "kender.identity", "krypteret.De", "kryptering.identity", "mappe.accessKey", "mappe.file", "markør.Tryk", "menu.label", "mere.accesskey", "mindre.Så", "mindre.Vi", "mistænkeligt.trustpanel", "muligt.identity", "muligt.trustpanel", "måneder.Find", "name.Andre", "name.Andre.sharing", "name.bookmarks", "ned.Der", "ned.Filen", "needed.label", "nettet.aria", "noget.trustpanel", "omdirigere.popup", "omdirigeringer.urlbar", "opførsel.identity", "opgraderinger.identity", "opsætning.tooltiptext", "panel.style", "position.urlbar", "privat.Andre", "privat.identity", "quarantined.label", "remove.label", "ryddet.trustpanel", "session.accesskey", "side.identity", "side.refresh", "siden().identity", "sikker.identity", "sikre.identity", "skærm.Andre", "skærm.accesskey", "spam.firefox", "sporingsbeskyttelse.reduced", "suggest.label", "søgehistorik.accesskey", "søgestreng.aria", "søgetjeneste.accesskey", "søgninger.accesskey", "søgninger.reader", "tilbagemeldingen.Du", "tilladelser.urlbar", "udvidelse.accesskey", "udvidelse.identity", "udvidelsen.accesskey", "udvidelser….accesskey", "undtagelser.accesskey", "usikkert.identity", "vindue.accesskey", "vindue.reset", "vinduer.accesskey", "vinduer.popup", "vinduer.redirect", "visibility.label", "visning.aria", "vælges.file", "værktøjslinjer.accesskey", "websted.identity", "websted.urlbar", "åbnes.Der", "åbnes.Filen", "åbnes.Ingen", "ændres.trustpanel" ], "tgt": [ "Bogmærker", "Faneblade", "Handlinger", "Historik", "billede", "bogmærke", "fjernstyring", "forordning", "indhold", "indsender", "side", "siden", "skærm", "websted" ], "metrics": { "ast": { "op.gt": 11.0, "op.lt": 18.0, "op.div": 2.0, "op.mul": 15.0, "op.sub": 1608.0, "max_depth": 171.0, "bind_count": 562.0, "call_count": 21.0, "node_count": 12530.0, "member_count": 123.0, "op_density.gt": 0.0, "op_density.lt": 0.0, "op_density.div": 0.0, "op_density.mul": 0.0, "op_density.sub": 0.13, "sequence_count": 3.0, "identifier_count": 1158.0, "member_depth_max": 3.0, "string_literal_count": 17.0, "array_literal_max_length": 1.0 }, "file": { "size": 43348.0, "entropy": 4.74, "size_bytes": 43348.0 }, "text": { "digit_ratio": 0.0, "space_count": 5859.0, "total_lines": 887.0, "char_entropy": 4.74, "unique_chars": 88.0, "lines_over_200": 4.0, "string_density": 0.02, "avg_line_length": 47.87, "high_byte_ratio": 0.02, "max_line_length": 225.0, "non_ascii_ratio": 0.02, "last_line_length": 18.0, "whitespace_ratio": 0.16, "most_common_ratio": 0.09, "identifier_density": 5.81, "line_length_stddev": 33.68, "normalized_string_count": 0.57, "repeated_char_sequences": 16.0, "most_common_char_is_null": 0.0, "max_inline_whitespace_run": 1.0, "most_common_char_codepoint": 101.0, "suspicious_identifier_ratio": 0.02, "normalized_unique_identifiers": 118.25 }, "binds": { "count": 562.0 }, "calls": { "count": 21.0 }, "binary": { "overall_entropy": 4.74, "peak_region_bytes": 43348.0, "peak_region_entropy": 4.82 }, "source": { "function_count": 1.0 }, "members": { "count": 123.0 }, "strings": { "total": 17.0, "avg_length": 11.18, "max_length": 16.0, "avg_entropy": 3.0, "total_bytes": 190.0, "entropy_stddev": 0.48 }, "functions": { "count": 1.0, "avg_params": 1.0, "max_params": 1.0, "over_100_lines": 1.0, "avg_name_length": 7.0, "avg_length_lines": 153.0, "max_length_lines": 153.0, "min_length_lines": 153.0, "avg_param_name_length": 3.0, "density_per_100_lines": 0.11, "code_in_functions_ratio": 0.17 }, "consistency": { "extension_content_mismatch": 1.0, "extension_content_mismatch.script_as_unknown": 1.0 }, "identifiers": { "count": 1158.0, "total": 5155.0, "avg_length": 6.92, "max_length": 20.0, "min_length": 1.0, "avg_entropy": 2.36, "reuse_ratio": 0.22, "unique_count": 1158.0, "length_stddev": 3.23, "has_digit_ratio": 0.04, "sequential_names": 27.0, "single_char_count": 27.0, "single_char_ratio": 0.02, "high_entropy_count": 14.0, "high_entropy_ratio": 0.01, "all_lowercase_ratio": 0.68, "all_uppercase_ratio": 0.02, "repeated_char_names": 1.0, "numeric_suffix_count": 47.0 } } }, "id": 11, "mol": "O(As)", "path": "firefox-154.0a1.da.langpack.xpi!!browser/localization/da/browser/browser.ftl", "pid": 0, "risk": 38, "sha": "4a7a9faa06d90498f96319a75c7a7eee02f72f36c49727aadb701b940dc4c46d", "size": 43348, "traits": [ { "id": "objectives/anti-static/obfuscation/string/conceal::js-reversed-eval", "conf": 0.9, "crit": 4, "desc": "Reversed eval keyword (lave)", "spans": [ [ 42577, 4 ] ] }, { "id": "micro-behaviors/communications/ip/literal::localhost-source", "conf": 0.75, "crit": 2, "desc": "Hardcoded localhost network host", "spans": [ [ 1350, 9 ] ] }, { "id": "objectives/impact/crypto-manipulation/clipboard::clipboard-word-marker", "atk": "T1565.001", "conf": 0.8, "crit": 1, "desc": "Clipboard or paste keyword", "spans": [ [ 18322, 9 ] ] }, { "id": "micro-behaviors/ui/window/manage/dom::dom-element-value-read", "conf": 0.9, "crit": 2, "desc": "Reads the value of a DOM element", "spans": [ [ 15176, 6 ] ] }, { "id": "metadata/file/extension/identity::script-content-extension-mismatch", "conf": 0.9, "crit": 1, "desc": "Script content mismatches extension", "spans": [ [ 0, 45 ] ] }, { "id": "objectives/anti-static/obfuscation/payload/config::arch-keyed-hex-blob-dict--rx-14", "atk": "T1027", "mbc": "B0032", "conf": 0.94, "crit": 1, "desc": "Regex component marker", "spans": [ [ 99, 8 ] ] }, { "id": "well-known/malware/stealer/needle::panel-word", "conf": 0.4, "crit": 1, "desc": "Needle panel descriptor word", "spans": [ [ 698, 5 ] ] }, { "id": "objectives/execution/trigger/plugin::shell-commands-event-trigger--rx-10", "conf": 0.9, "crit": 1, "desc": "Regex component marker", "spans": [ [ 27261, 12 ] ] }, { "id": "metadata/package/documentation::references-changelog-history", "conf": 1.0, "crit": 2, "desc": "HISTORY documentation reference", "spans": [ [ 4136, 7 ] ] }, { "id": "micro-behaviors/ui/window/manage/dom::size-prop--width", "conf": 1.0, "crit": 1, "desc": "DOM or CSS size property (width)", "spans": [ [ 10329, 5 ] ] }, { "id": "metadata/lang/scripted::undefined-literal", "conf": 1.0, "crit": 1, "desc": "JavaScript undefined literal", "spans": [ [ 18788, 9 ] ] }, { "id": "objectives/exfiltration/http/hardcoded-key::request-body-marker", "atk": "T1041", "mbc": "C0002", "conf": 0.75, "crit": 1, "desc": "HTTP request body field marker", "spans": [ [ 12512, 6 ] ] }, { "id": "objectives/credential-access/theft/keywords::credential-field--password", "conf": 0.84, "crit": 1, "desc": "password/token/api_key field keyword (password)", "spans": [ [ 2024, 8 ] ] }, { "id": "micro-behaviors/ui/window/notify/keywords::notification-config-word", "conf": 0.86, "crit": 1, "desc": "notify/sender vocabulary word", "spans": [ [ 30541, 6 ] ] }, { "id": "objectives/anti-static/obfuscation/payload/config::arch-keyed-hex-blob-dict--rx-21", "atk": "T1027", "mbc": "B0032", "conf": 0.94, "crit": 1, "desc": "Regex component marker", "spans": [ [ 122, 5 ] ] }, { "id": "objectives/command-and-control/backdoor/control/command-vocab::cmd-vocab-screenshot", "crit": 1, "desc": "\"screenshot\" command keyword", "spans": [ [ 9115, 10 ] ] }, { "id": "micro-behaviors/data/manipulation::tracking-selector-token", "conf": 0.8, "crit": 1, "desc": "Tracking selector token", "spans": [ [ 38868, 8 ] ] }, { "id": "metadata/file/metrics::file-has-30-plus-lines", "conf": 0.9, "crit": 1, "desc": "File has 30 or more lines", "spans": [ [ 0, 25 ] ] }, { "id": "objectives/collection/stealer/browser::browser-auth-route-terms", "atk": "T1119", "conf": 0.88, "crit": 1, "desc": "Matches several authentication route terms", "spans": [ [ 15927, 7 ] ] }, { "id": "metadata/permission/capture::capture-device-term", "conf": 0.86, "crit": 1, "desc": "Camera or microphone term", "spans": [ [ 1058, 10 ] ] }, { "id": "micro-behaviors/crypto/library/keyword::cipher-keyword", "conf": 0.4, "crit": 2, "desc": "Generic 'cipher' crypto term", "spans": [ [ 13444, 6 ] ] }, { "id": "metadata/file/metrics::low-string-density-large-file", "conf": 0.9, "crit": 1, "desc": "Low string density in source", "spans": [ [ 0, 26 ] ] }, { "id": "objectives/collection/app-data/profile::profile-headline-field", "atk": "T1119", "conf": 0.86, "crit": 1, "desc": "Profile headline field", "spans": [ [ 23527, 8 ] ] }, { "id": "metadata/file/metrics::low-overall-entropy-source", "conf": 0.9, "crit": 2, "desc": "Source file has low overall entropy", "spans": [ [ 0, 29 ] ] }, { "id": "metadata/file/metrics::concealed-payload-mass-1k", "conf": 0.8, "crit": 1, "desc": "High-entropy region mass over 1KB", "spans": [ [ 0, 35 ] ] }, { "id": "metadata/file/profile/identity::sequential-identifiers", "conf": 0.8, "crit": 2, "desc": "Sequential source identifier names", "spans": [ [ 0, 36 ] ] }, { "id": "objectives/execution/trigger/plugin::shell-commands-event-trigger--rx-11", "conf": 0.9, "crit": 1, "desc": "Regex component marker", "spans": [ [ 30118, 10 ] ] }, { "id": "micro-behaviors/data/control-flow/analysis::for-loop-content", "conf": 0.3, "crit": 2, "desc": "for loop (content)", "spans": [ [ 38847, 10 ] ] }, { "id": "micro-behaviors/data/runtime/keywords::fingerprint-string", "conf": 0.94, "crit": 2, "desc": "fingerprint string", "spans": [ [ 39559, 11 ] ] }, { "id": "metadata/file/profile/language::lang-english", "conf": 0.8, "crit": 2, "desc": "Contains frequent English function words", "spans": [ [ 257, 3 ] ] }, { "id": "objectives/anti-static/obfuscation/code-metrics/source::fluent-translation-file", "conf": 0.95, "crit": 2, "desc": "Fluent localization resource file", "spans": [ [ 0, 11 ] ] }, { "id": "micro-behaviors/ui/window/notify/keywords::notification-alert-word", "conf": 0.9, "crit": 1, "desc": "Notification/alert UI vocabulary term", "spans": [ [ 453, 12 ] ] }, { "id": "objectives/discovery/host/browser/identity::bookmarks-word", "atk": "T1217", "conf": 0.4, "crit": 1, "desc": "bookmarks keyword", "spans": [ [ 4058, 9 ] ] }, { "id": "micro-behaviors/os/clipboard/access::clipboard-keyword", "conf": 0.7, "crit": 1, "desc": "Clipboard keyword", "spans": [ [ 18322, 9 ] ] }, { "id": "objectives/anti-static/obfuscation/encoding/arithmetic::arithmetic-sub-density", "conf": 0.95, "crit": 1, "desc": "Subtraction operators dominate the parse tree", "spans": [ [ 0, 25 ] ] }, { "id": "objectives/anti-static/obfuscation/encoding/arithmetic::arithmetic-sub-count", "conf": 0.95, "crit": 1, "desc": "Many subtraction operators present", "spans": [ [ 0, 20 ] ] }, { "id": "objectives/anti-static/obfuscation/code-metrics/source::non-ascii-locale-marker", "conf": 1.0, "crit": 1, "desc": "Locale/translation non-ASCII marker", "spans": [ [ 0, 11 ] ] } ], "type": "javascript" }, { "ctx": [ { "b": "xjU%?x!syqBAzkmxlbUmxKM0mv}Yp)xk?@Ay?W^5B09Q*r+k!:vrrSn.\u003e}l.wGTuNvrt1or3kQVv}xR3wPzv5ay]QqpJf(.k$MbujyGvyvrt{fy+WRYePb0lwJ.kNx(mYvb0GEEBzkS9wO=B0AV!$jAV!?iB.r/\u0026vlL/LxcorBay[]5vj=pIfM5EWvqPNsb5y$hyCE7$Ab]Vovrus1C5}Rvy?X09yDKmUj$WgPwO${\u003cePUGBBzkS9B1H)nvrs8hy*?D%wI4.jzFKqojS)^pwftr5aA\u003eV1y?Er4l2H^TA=k]hv\u003c1cPvrD9(ayO+\u0026wPh:5A+fnlwox1XzGGMjz/xA2B09ONay[]5vj=pIfM5EWvqPNsb5y$hyCv1%rbb#ZwPI%8C4\u003e=d.\u003e?w@w]zYjw]zZ0A=(2aA+du^vlMj+jyGvyvrt{fy+WRYePb0lwJ.kNx(mYwb0FtlB.t=mz!%cfx\u003e]*:vlL/LxcorBay[]5vj=pIfM5EWvqPNsb5y$hyCNd#p\u0026Zn[vrus1C5}Rvy?X09yDKmUj$WgPwO${\u003cePUGBBzkS9B1H)nvrs8hz/xAbz/^NEx(mZcauZ\u0026FwN(](BrC+ARFG)Ravy6^x(4ZfayO+\u0026wPh:5A+fnlwox1Svix8?Byu+qf!^F%zEEx[jTaYRzFH%Jk6yTRyR##?azbLjavy6^x(4ZfaveNwmr\u0026=.A+P95v}xZzfjv3!z!ygPvix8?Byu+qf!^F%zEEx[jTaYRzFI0Kk22:3A=l2qw]@8pAb]Vovrus1C5}knyIZ[=A+PA7jtgbbe^=l5zEElhB7GDnx(mN8eN@E5Bs?cpze0)4eO]csyJyQYaxA5:ayPvmCeHg[xjShQz/oo8wGTGOze0)4ayO+\u0026wPh:5A+fnlwox1Svix8?Byu+qf!^F%zEEx[jTaYRzFH%Jk1xKfxkzc4Bztx8wPI%8C4\u003e=d", "ln": 0, "col": 1, "line": 1 }, { "b": "zFI0Kk5+KRC42Gex)aMpz!%cfx\u003e]*:vlMpJxjU%?x!syqBAzkmxlbUmxKM0my\u0026r/(y?N:dBs?ryzFKqojS)7iB.q?cx(k58xjU%6Ab]Vovru66v}Yp)vScuhy\u0026s8$y\u0026?iJw{tCjazbLjz6in0auT6PwmoN*eO)c}zy]:mzdL\u003cOy?W^5f^n!$y*?f?w[=6zf8", "ln": 1281, "col": 162, "line": 6 }, { "b": "ePt-Gze:PrePV5KzddE0DsXiZ3lQDlatdFsvR6u#jS)WizeA\u003c4w)]=*arR^He{pVtB.8WUax8Y=zdNP%vrrS5wPP5ivrcc{A+e=)aAhwsREKsYBrCHmazU[oBy[%6By/LDavp9\u003excqbowPz\u003ccA+PccwPw]ixcqeozFKujAc3bny\u00260*6xjV9ax=}F9zex", "ln": 1588, "col": 6, "line": 9 }, { "b": "z/6DnB1IxOx)H)+3lQDlatdFsvR6u#jS)QAx)HaearR^VC42ifwGTbUoKS8!wO@SgB.MdABzkLlze0S9z/3RcwPP5ivrcc{A+e=)e*a8mx(1]ex\u003eFM1zxJ#qRFx%UazbLjB8bu6y?WJ[aAR)FwPw]4w/#el.)\u003c-1B8w*\u003ey+cYve[F*te*a+xwPv", "ln": 2015, "col": 9, "line": 15 }, { "b": "arR^He]j%9wO-FLavZo\u0026yIWB1ay]59By+!4arR^VC42ifwGTbUmSir.y*?ubwmV)bx\u003eIK4xlefaayX[{A+eY\u003eAV/6swmY\u003c9zddE2wPzu)wGU\u00263wftD3yIWM8z/Pwvavp9\u003excqb9BhK*%wOVu#ze:r5AXmYiwO${\u003cePt-Gze:PrePt-Gz!s33vpP", "ln": 2286, "col": 1, "line": 19 }, { "b": "A+cwiz6iw2azbLjB8bu6y?WJ[ay/7[ByGfgB389:j$E*0xM!9hay]QqC4\u003e+nxKM6}aztJcRFHh]BzkLlvrrSn.\u003e}l.wIas5wO${\u003cePkJoz^^V%x(mMnAb]VfvrcSojS)jjA==xuRGreTwO${\u003cePkJoz^^V%x(mMnB7F\u003c1zE^f@C{2l)oM+aTxjU%?", "ln": 6495, "col": 99, "line": 101 } ], "depth": 1, "facts": { "imp": [ [ "", "links" ], [ "", "name" ], [ "", "links" ], [ "", "name" ], [ "", "name" ], [ "", "links" ], [ "", "name" ], [ "", "links" ], [ "", "name" ], [ "", "name" ], [ "", "links" ], [ "", "name" ], [ "", "links" ], [ "", "name" ], [ "", "links" ], [ "", "name" ], [ "", "selection" ], [ "", "summarize.label" ], [ "", "Sammenfat.value" ], [ "", "simplify" ], [ "", "label" ], [ "", "sproget.value" ], [ "", "quiz.label" ], [ "", "Quiz.value" ], [ "", "explain" ], [ "", "label" ], [ "", "dette.value" ], [ "", "proofread.label" ], [ "", "Korrekturlæs.value" ], [ "", "chatbot.accesskey" ], [ "", "chatbot" ], [ "", "label" ], [ "", "chatbot.accesskey" ], [ "", "generic" ], [ "", "label" ], [ "", "provider" ], [ "", "label" ], [ "", "generic" ], [ "", "label" ], [ "", "provider" ], [ "", "label" ], [ "", "sidebar" ], [ "", "label" ], [ "", "button" ], [ "", "label" ], [ "", "badge" ], [ "", "page" ], [ "", "generic" ], [ "", "placeholder" ], [ "", "provider" ], [ "", "placeholder" ], [ "", "generic.heading" ], [ "", "chatbotten.message" ], [ "", "warning" ], [ "", "heading" ], [ "", "markering.message" ], [ "", "hide" ], [ "", "label" ], [ "", "title" ], [ "", "menu" ], [ "", "title" ], [ "", "button" ], [ "", "title" ], [ "", "button" ], [ "", "title" ], [ "", "details" ], [ "", "label" ], [ "", "generic" ], [ "", "label" ], [ "", "provider" ], [ "", "label" ], [ "", "shortcut" ], [ "", "label" ], [ "", "shortcut" ], [ "", "label" ], [ "", "chatbot" ], [ "", "label" ], [ "", "warning" ], [ "", "message" ], [ "", "summarize" ], [ "", "title" ], [ "", "button" ], [ "", "subtitle" ], [ "", "subtitle" ], [ "", "subtitle" ], [ "", "subtitle" ], [ "", "title" ], [ "", "subtitle" ], [ "", "button" ], [ "", "header" ], [ "", "description" ], [ "", "name" ], [ "", "primary" ], [ "", "secondary" ], [ "", "tooltip" ], [ "", "title" ], [ "", "tooltip" ], [ "", "title" ], [ "", "tooltip" ], [ "", "title" ], [ "", "tooltip" ], [ "", "title" ], [ "", "tooltip" ], [ "", "title" ], [ "", "tooltip" ], [ "", "title" ], [ "", "optout" ], [ "", "label" ], [ "", "cancel" ], [ "", "label" ], [ "", "time" ], [ "", "v2" ], [ "", "link" ], [ "", "v2" ], [ "", "unexpected" ], [ "", "retry" ], [ "", "button" ], [ "", "title" ], [ "", "enable" ], [ "", "label" ], [ "", "links.description" ], [ "", "points" ], [ "", "label" ], [ "", "press.label" ], [ "", "title" ], [ "", "message" ], [ "", "press" ], [ "", "press" ], [ "", "header" ] ], "mbr": [ "Hovedpunkter.link", "Korrekturlæs.value", "Quiz.value", "Sammenfat.value", "bunden.genai", "chatbot.accesskey", "chatbot.genai", "chatbotten.message", "den.Bevar", "derefter.genai", "dette.value", "eksempler.genai", "enhed.link", "f.eks", "f.eks.flervalgs", "galt.link", "generic.heading", "grammatikfejl.Identificer", "hovedpunkter.For", "højreklik.link", "kortfattet.Brug", "link.link", "linket.Virker", "links.description", "markerede.Stil", "markering.message", "mere.Så", "name.genai", "nøjagtighed.Vis", "nøjagtighed.genai", "ord.Bevar", "ord.Brug", "press.label", "proofread.label", "quiz.label", "sammenfatning.genai", "sandt.Vent", "sproget.value", "summarize.label", "tegn.Vi", "teksten.Oprethold", "vises.genai", "webside.link" ], "metrics": { "ast": { "op.gt": 14, "op.lt": 21, "op.mul": 1, "op.sub": 322, "max_depth": 50, "call_count": 2, "node_count": 2676, "member_count": 43, "max_array_len": 1, "op_density.gt": 0.01, "op_density.lt": 0.01, "op_density.mul": 0, "op_density.sub": 0.12, "sequence_count": 2, "member_depth_max": 3 }, "file": { "size": 9288, "entropy": 4.79 }, "text": { "lines": 152, "top_char": 101, "max_ws_run": 2, "digit_ratio": 0.01, "space_count": 1253, "char_entropy": 4.79, "unique_chars": 80, "top_char_null": 0, "lines_over_200": 8, "string_density": 0.1, "top_char_ratio": 0.1, "avg_line_length": 60.11, "max_line_length": 291, "non_ascii_ratio": 0.02, "last_line_length": 119, "whitespace_ratio": 0.15, "identifier_density": 7.34, "line_length_stddev": 58.06, "normalized_string_count": 1.22, "repeated_char_sequences": 4, "suspicious_identifier_ratio": 0.02, "normalized_unique_identifiers": 48.57 }, "binds": { "count": 129 }, "binary": { "peak_region_bytes": 9216, "peak_region_entropy": 4.88 }, "strings": { "bytes": 124, "count": 15, "avg_length": 8.27, "max_length": 14, "avg_entropy": 2.72, "entropy_stddev": 0.51 }, "consistency": { "extension_content_mismatch": 1, "extension_content_mismatch.script_as_unknown": 1 }, "identifiers": { "count": 1115, "unique": 352, "avg_length": 6.35, "max_length": 20, "min_length": 1, "avg_entropy": 2.27, "reuse_ratio": 0.32, "length_stddev": 3.17, "has_digit_ratio": 0.01, "sequential_names": 5, "single_char_count": 4, "single_char_ratio": 0.01, "high_entropy_count": 4, "high_entropy_ratio": 0.01, "all_lowercase_ratio": 0.69, "all_uppercase_ratio": 0, "repeated_char_names": 1, "numeric_suffix_count": 1 } } }, "id": 12, "mol": "H(Db)", "path": "firefox-154.0a1.da.langpack.xpi!!browser/localization/da/browser/genai.ftl", "risk": 2, "sha": "854db046110d3f7caed2ad9c3a1666f7676f96c62f60a7d19ffbb27a58d1704a", "size": 9288, "traits": [ { "id": "metadata/file/metrics::file-has-30-plus-lines", "conf": 0.9, "crit": 1, "desc": "File has 30 or more lines", "spans": [ [ 0, 0 ] ] }, { "id": "metadata/file/profile/language::lang-english--atom-4", "conf": 0.8, "crit": 2, "desc": "English function-word token \"have\"", "spans": [ [ 6543, 0 ] ] }, { "id": "metadata/file/profile/language::lang-english--atom-5", "conf": 0.8, "crit": 2, "desc": "English function-word token \"for\"", "spans": [ [ 118, 0 ] ] }, { "id": "metadata/file/profile/locale::language-label-code-de", "conf": 0.97, "crit": 2, "desc": "German UI language code", "spans": [ [ 2334, 0 ] ] }, { "id": "metadata/file/profile/locale::language-label-code-en", "conf": 0.97, "crit": 2, "desc": "English UI language code", "spans": [ [ 2063, 0 ] ] }, { "id": "micro-behaviors/data/llm::agent-identity-chatgpt", "conf": 0.8, "crit": 1, "desc": "ChatGPT identity reference", "spans": [ [ 20, 0 ] ] }, { "id": "micro-behaviors/data/llm::agent-identity-claude", "conf": 0.8, "crit": 1, "desc": "Claude agent identity reference", "spans": [ [ 232, 0 ] ] }, { "id": "micro-behaviors/data/llm::agent-identity-copilot", "conf": 0.8, "crit": 1, "desc": "Copilot identity reference", "spans": [ [ 451, 0 ] ] }, { "id": "metadata/file/profile/locale::language-label-table-codes-a", "conf": 0.9, "crit": 2, "desc": "Common UI language-code pair", "uses": [ 4 ], "spans": [ [ 2063, 0 ] ] }, { "id": "metadata/file/profile/locale::language-label-table-codes-b", "conf": 0.9, "crit": 2, "desc": "European UI language-code pair", "uses": [ 3 ], "spans": [ [ 2334, 0 ] ] }, { "id": "micro-behaviors/data/llm::agent-identity-set", "conf": 0.9, "crit": 3, "desc": "References multiple AI assistant products", "uses": [ 5, 6, 7 ], "spans": [ [ 20, 7 ], [ 232, 16 ], [ 451, 7 ] ] } ], "type": "javascript" }, { "id": 13, "sha": "9b18d0064edeefed07e15bf39d5afae254f4373ffd9e06efd2ce555b6ffd6442", "path": "firefox-154.0a1.da.langpack.xpi!!browser/localization/da/browser/newtab/asrouter.ftl", "risk": 1, "size": 19564, "type": "javascript", "depth": 1 }, { "id": 14, "sha": "5b3e90935ac33c026c0ba8c89d471d9affcb71ca9ed65653ede8bbadaffdbdc5", "path": "firefox-154.0a1.da.langpack.xpi!!browser/localization/da/browser/newtab/newtab.ftl", "risk": 1, "size": 35243, "type": "javascript", "depth": 1 }, { "id": 15, "sha": "8c5bd61b0ebb7fb763f28a2e2e676712fcac51525455777beb57ed1149ff74b2", "path": "firefox-154.0a1.da.langpack.xpi!!browser/localization/da/browser/places.ftl", "risk": 1, "size": 6030, "type": "javascript", "depth": 1 }, { "id": 16, "sha": "96e9beb42d18823448fbad412c321ae6fcc061a6ae748a2e6ac256f5ec1d21af", "path": "firefox-154.0a1.da.langpack.xpi!!browser/localization/da/browser/profiles.ftl", "risk": 1, "size": 9651, "type": "javascript", "depth": 1 }, { "id": 17, "sha": "7d785fec801e416f7bf96f8a91a06bd2740c666b897ad3f706b2b0834da86b5e", "path": "firefox-154.0a1.da.langpack.xpi!!browser/localization/da/browser/sidebar.ftl", "risk": 1, "size": 5999, "type": "javascript", "depth": 1 }, { "id": 18, "sha": "924db3c6ca6e19722ef07337a19ee1d486169512885d071c4bce734495968270", "path": "firefox-154.0a1.da.langpack.xpi!!browser/localization/da/browser/sync.ftl", "risk": 1, "size": 3846, "type": "javascript", "depth": 1 }, { "id": 19, "sha": "45a531b4da7b0fd2fcd102e3f82cb0abbf183f22ee91500c9099e46aebbd66e0", "path": "firefox-154.0a1.da.langpack.xpi!!browser/localization/da/devtools/client/storage.ftl", "risk": 1, "size": 2903, "type": "javascript", "depth": 1 }, { "id": 20, "sha": "0e25f912ef45d30a9908b56faeb6bc92f44eb5301e3e6167b5934d58cbeacdab", "path": "firefox-154.0a1.da.langpack.xpi!!manifest.json", "risk": 1, "size": 1867, "type": "json", "depth": 1 } ], "omitted_files": 15, "rev": "5ef70", "v": "8" } }