{
  "ml": {
    "v": "7",
    "eng": "2.2.0",
    "lvl": -1,
    "conf": 0,
    "mods": [
      {
        "cls": 0,
        "raw": 0.012193918,
        "rte": "az",
        "prob": 0.012193918
      },
      {
        "cls": 0,
        "raw": 0.00000295043,
        "rte": "az/scripts",
        "prob": 0.00000295043
      },
      {
        "cls": 0,
        "raw": 0.00000032782555,
        "rte": "az/php",
        "prob": 0.00000032782555
      }
    ],
    "prob": 0.012193918,
    "files": [
      {
        "id": 0,
        "lvl": -1,
        "conf": 0,
        "prob": 0.012193918228149414,
        "type": "php"
      }
    ],
    "version": "v18.18",
    "analyzed_at": "2026-06-29T18:20:08Z"
  },
  "path": "template-fullwidth.php",
  "raw": {
    "v": "8",
    "files": [
      {
        "id": 0,
        "ctx": [
          {
            "b": "ju)^#z#",
            "n": [
              {
                "c": 2,
                "d": "Script overall entropy stays low",
                "i": "metadata/file/metrics::low-overall-entropy-source",
                "o": 0,
                "z": 29,
                "cf": 0.8999999761581421
              }
            ],
            "ln": 1,
            "addr": 0
          },
          {
            "b": "fdD",
            "ln": 2,
            "addr": 7
          },
          {
            "b": "raP]=y*?A%awMuZwJy@6B.\u003e(rx\u003ehs0axh]?Abn%8wD",
            "ln": 3,
            "addr": 11
          }
        ],
        "sha": "811fb92a1f9558b20e88a2937f5f3ee9e74b831edd413807a5b3e45c3008f8a0",
        "path": "/var/tmp/triage/mislabeled-bad/php/811fb92a1f95__bad/datasets/various/awesome-malware/PHP/template-fullwidth.php",
        "risk": 1,
        "size": 445,
        "type": "php",
        "facts": {
          "imp": [
            [
              "",
              "get_header"
            ],
            [
              "",
              "have_posts"
            ],
            [
              "",
              "have_posts"
            ],
            [
              "",
              "the_post"
            ],
            [
              "",
              "get_template_part"
            ],
            [
              "",
              "comments_template"
            ],
            [
              "",
              "get_footer"
            ]
          ],
          "tgt": [
            "comments_template",
            "get_footer",
            "get_header",
            "get_template_part",
            "have_posts",
            "the_post"
          ],
          "metrics": {
            "ast": {
              "max_depth": 10.0,
              "call_count": 7.0,
              "node_count": 93.0,
              "identifier_count": 6.0,
              "string_literal_count": 2.0
            },
            "file": {
              "size": 445.0,
              "entropy": 4.95,
              "size_bytes": 445.0
            },
            "text": {
              "tab_count": 28.0,
              "space_count": 27.0,
              "total_lines": 26.0,
              "char_entropy": 4.95,
              "unique_chars": 42.0,
              "string_density": 0.08,
              "avg_line_length": 15.19,
              "max_line_length": 62.0,
              "empty_line_ratio": 0.38,
              "last_line_length": 23.0,
              "whitespace_ratio": 0.24,
              "most_common_ratio": 0.08,
              "identifier_density": 0.27,
              "line_length_stddev": 19.99,
              "normalized_string_count": 0.39,
              "most_common_char_is_null": 0.0,
              "max_inline_whitespace_run": 1.0,
              "trailing_whitespace_lines": 6.0,
              "most_common_char_codepoint": 101.0,
              "normalized_unique_identifiers": 1.28
            },
            "calls": {
              "count": 7.0
            },
            "binary": {
              "overall_entropy": 4.95,
              "peak_region_bytes": 445.0,
              "peak_region_entropy": 4.95
            },
            "strings": {
              "total": 2.0,
              "avg_length": 5.5,
              "max_length": 7.0,
              "avg_entropy": 2.12,
              "total_bytes": 11.0,
              "entropy_stddev": 0.12
            },
            "comments": {
              "chars": 37.0,
              "lines": 2.0,
              "total": 1.0,
              "to_code_ratio": 0.08
            },
            "identifiers": {
              "count": 6.0,
              "total": 7.0,
              "avg_length": 12.0,
              "max_length": 17.0,
              "min_length": 8.0,
              "avg_entropy": 2.95,
              "reuse_ratio": 0.86,
              "unique_count": 6.0,
              "length_stddev": 3.61,
              "all_lowercase_ratio": 1.0
            }
          }
        },
        "traits": [
          {
            "id": "metadata/file/metrics::few-comment-lines",
            "crit": 1,
            "desc": "Five or fewer comment lines in file",
            "spans": [
              [
                0,
                21
              ]
            ]
          },
          {
            "id": "metadata/lang/scripted::php-open-tag",
            "conf": 0.949999988079071,
            "crit": 1,
            "desc": "PHP opening tag present",
            "spans": [
              [
                0,
                5
              ]
            ]
          },
          {
            "id": "metadata/file/metrics::low-overall-entropy-source",
            "conf": 0.8999999761581421,
            "crit": 2,
            "desc": "Script overall entropy stays low",
            "spans": [
              [
                0,
                29
              ]
            ]
          }
        ]
      }
    ]
  }
}