It is obfuscated in a way that will still avoid detection during static code analysis and casual code review.<p>This looks like debug or logging string builder which no one would give it a second look while glancing over it.<p>Hashes and binary blobs will look out of place, same thing goes for intentionally obfuscated secure string builder.<p>When you put in a back door the best one will always be the shortest possible complicating it will only increase the likelihood of it being detected.<p>The sign of a true high level adversary isn&#x27;t overly complicated and obfuscated software but one which is remarkably simple and elegant whilst still achieving the desired functionality.<p>Obfuscation and complexity screams cyber criminals which care more about covering their own trail than ensuring functionality.