in ransomware/artifact.lua [3029:3039]
function Ransomware.EntropyMismatch(processData, fileExtension)
if not utils.TableHasKey(processData.entropyMismatchExtensions, fileExtension) then
processData.entropyMismatchExtensions[fileExtension] = 0
utils.DebugLog('NEW ENTROPY MISMATCH EXTENSION: ' .. fileExtension)
processData.numEntropyMismatchExtensions = processData.numEntropyMismatchExtensions + 1
end
utils.DebugLog('ENTROPY MISMATCH EXTENSION: ' .. fileExtension)
processData.entropyMismatchExtensions[fileExtension] = processData.entropyMismatchExtensions[fileExtension] + 1
return processData.entropyMismatchExtensions[fileExtension]
end