Is Secure Exam Proctor safe?

/**
 * Decode Uint8Array-encoded strings from Secure Exam Proctor (fpmapakogndmenjcfoajifaaonnkpkei)
 * Claim 6701 reproducer — CWE-506 (Embedded Malicious Code / string obfuscation)
 *
 * Usage:
 *   node secure-exam-proctor-decode-strings.js /path/to/extracted/assets/Js2Q.js
 */

const fs = require('fs');
const path = require('path');

const jsPath = process.argv[2] || path.join(__dirname, 'assets/Js2Q.js');
if (!fs.existsSync(jsPath)) {
  console.error('File not found:', jsPath);
  process.exit(1);
}

const js = fs.readFileSync(jsPath, 'utf8');
const decoder = new TextDecoder();
const regex = /new Uint8Array\(\[([^\]]+)\]\)/g;
let m;
const results = [];

while ((m = regex.exec(js)) !== null) {
  const bytes = m[1].split(',').map(Number);
  try {
    const decoded = decoder.decode(new Uint8Array(bytes));
    results.push({ pos: m.index, length: bytes.length, text: decoded });
  } catch (e) { /* ignore non-UTF-8 */ }
}

console.log(`Total new Uint8Array([...]) patterns in file: ${results.length}`);
console.log('\nAll decoded strings:\n');
results.forEach(({ pos, length, text }) => {
  console.log(`  offset ${pos.toString().padStart(7)} [${length} bytes]: ${JSON.stringify(text)}`);
});

// Highlight the hardcoded AES-CBC fallback key
const KEY_BYTES = [65,70,49,115,85,71,118,115,118,85,115,98,106,120,53,110,114,48,52,79,84,122,90,57,67,70,89,85,76,85,88,119];
const key = decoder.decode(new Uint8Array(KEY_BYTES));
console.log('\n=== Hardcoded AES-CBC fallback decryption key ===');
console.log(`  Value: ${JSON.stringify(key)}`);
console.log(`  Length: ${key.length} bytes`);
console.log('  Location: catch-block at ~offset 375114 in Js2Q.js');
console.log('  Used when: server-supplied session key fails to decrypt WebSocket payload');