function Ransomware.EntropyMismatch()

in ransomware/artifact.lua [3029:3039]


function Ransomware.EntropyMismatch(processData, fileExtension)
    if not utils.TableHasKey(processData.entropyMismatchExtensions, fileExtension) then
        processData.entropyMismatchExtensions[fileExtension] = 0
        utils.DebugLog('NEW ENTROPY MISMATCH EXTENSION: ' .. fileExtension)
        processData.numEntropyMismatchExtensions = processData.numEntropyMismatchExtensions + 1
    end

    utils.DebugLog('ENTROPY MISMATCH EXTENSION: ' .. fileExtension)
    processData.entropyMismatchExtensions[fileExtension] = processData.entropyMismatchExtensions[fileExtension] + 1
    return processData.entropyMismatchExtensions[fileExtension]
end