{
  "ml": {
    "v": "7",
    "eng": "2.0.1-rc.1",
    "lvl": -1,
    "conf": 0,
    "mods": [
      {
        "cls": 0,
        "raw": 0.00005845229,
        "rte": "az",
        "prob": 0.00005845229
      },
      {
        "cls": 0,
        "raw": 0.000050663948,
        "rte": "az/scripts",
        "prob": 0.000050663948
      },
      {
        "cls": 0,
        "raw": 0.40574235,
        "rte": "az/php",
        "prob": 0.40574235
      }
    ],
    "prob": 0.00005845229,
    "files": [
      {
        "id": 0,
        "lvl": -1,
        "conf": 0,
        "prob": 0.000058452289522392675,
        "type": "php"
      }
    ],
    "version": "v18.18",
    "analyzed_at": "2026-06-15T06:58:55Z"
  },
  "path": "scanner.php",
  "raw": {
    "v": "7",
    "tv": "061e3",
    "files": [
      {
        "id": 0,
        "ctx": [
          {
            "a": 171,
            "b": "",
            "l": 12
          },
          {
            "a": 172,
            "b": "w]zZ3vpJ%[c)S+IA==vBvriLpAbP=sdiJ%",
            "l": 13
          },
          {
            "a": 200,
            "b": "arR^HbXz0rjS)14B8LM7z/xo9c)Skiwo6jzbYEWxBsXKWwPz*ez.91RwPz*jBAe]PbY):qwP8Zkdlv",
            "l": 14,
            "n": [
              {
                "c": 3,
                "d": "any language socket dial primitive",
                "i": "objectives/command-and-control/reverse-shell/dup::any-socket-dial",
                "o": 211,
                "z": 9
              }
            ]
          },
          {
            "a": 263,
            "b": "arR^Hx\u003ewFobXz0raW4$hmNoZDmjxva",
            "l": 15
          },
          {
            "a": 288,
            "b": "arR^HarR^HkXsIxz/YFrbXz0Ai@",
            "l": 16,
            "n": [
              {
                "c": 3,
                "d": "PHP error suppression operator usage",
                "i": "micro-behaviors/os/stdio::error-suppress-prefix",
                "o": 296,
                "z": 12
              }
            ]
          },
          {
            "a": 310,
            "b": "arR^HarR^HbYWEqB.(e7t{8oMvrcx%C{\u003c}Sz/P}Gi@",
            "l": 17
          }
        ],
        "mol": "O(C)H₂(CmOs)",
        "sha": "8caf9dff06de7586067b5ca16ccee0b6304d6adbd0969f3d2857d2a95915a095",
        "fact": {
          "id": "php",
          "imp": [
            [
              "",
              "range"
            ],
            [
              "",
              "shuffle"
            ],
            [
              "",
              "fsockopen"
            ],
            [
              "",
              "fclose"
            ]
          ],
          "mbr": [
            "$PHPSPLOIT.IP",
            "$PHPSPLOIT.PORT_MAX",
            "$PHPSPLOIT.PORT_MIN",
            "$PHPSPLOIT.TIMEOUT"
          ],
          "met": {
            "ast": {
              "op.ne": 1.0,
              "max_depth": 11.0,
              "bind_count": 5.0,
              "call_count": 4.0,
              "node_count": 231.0,
              "member_count": 4.0,
              "op_density.ne": 0.0,
              "identifier_count": 13.0,
              "member_depth_max": 2.0,
              "string_literal_count": 4.0,
              "array_literal_max_length": 3.0
            },
            "file": {
              "size": 441.0,
              "entropy": 4.9,
              "size_bytes": 441.0
            },
            "text": {
              "space_count": 75.0,
              "total_lines": 26.0,
              "char_entropy": 4.9,
              "unique_chars": 53.0,
              "string_density": 0.15,
              "avg_line_length": 15.96,
              "max_line_length": 63.0,
              "empty_line_ratio": 0.31,
              "last_line_length": 2.0,
              "whitespace_ratio": 0.23,
              "most_common_ratio": 0.07,
              "identifier_density": 2.15,
              "line_length_stddev": 18.83,
              "normalized_string_count": 0.78,
              "most_common_char_is_null": 0.0,
              "max_inline_whitespace_run": 1.0,
              "most_common_char_codepoint": 114.0,
              "normalized_unique_identifiers": 4.68
            },
            "binds": {
              "count": 5.0
            },
            "calls": {
              "count": 4.0
            },
            "binary": {
              "overall_entropy": 4.9
            },
            "members": {
              "count": 4.0
            },
            "strings": {
              "total": 4.0,
              "avg_length": 6.25,
              "max_length": 8.0,
              "avg_entropy": 2.38,
              "total_bytes": 25.0,
              "entropy_stddev": 0.82
            },
            "identifiers": {
              "count": 13.0,
              "total": 56.0,
              "avg_length": 6.0,
              "max_length": 10.0,
              "min_length": 2.0,
              "avg_entropy": 2.27,
              "reuse_ratio": 0.39,
              "unique_count": 22.0,
              "length_stddev": 1.91,
              "all_lowercase_ratio": 0.55,
              "all_uppercase_ratio": 0.05
            }
          },
          "str": [
            [
              27,
              "u8",
              "IP"
            ],
            [
              28,
              "u8",
              "IP"
            ],
            [
              57,
              "u8",
              "TIMEOUT"
            ],
            [
              58,
              "u8",
              "TIMEOUT"
            ],
            [
              96,
              "u8",
              "PORT_MIN"
            ],
            [
              97,
              "u8",
              "PORT_MIN"
            ],
            [
              120,
              "u8",
              "PORT_MAX"
            ],
            [
              121,
              "u8",
              "PORT_MAX"
            ]
          ],
          "tgt": [
            "fclose",
            "fsockopen",
            "range",
            "shuffle"
          ],
          "val": {
            "file.stem": "scanner",
            "file.basename": "scanner.php",
            "source.language": "php",
            "source.imports[0]": "fclose",
            "source.imports[1]": "fsockopen",
            "source.imports[2]": "range",
            "source.imports[3]": "shuffle",
            "source.strings[0]": "PORT_MAX",
            "source.strings[1]": "PORT_MIN",
            "source.strings[2]": "TIMEOUT",
            "source.has_imports": true
          }
        },
        "find": [
          {
            "id": "micro-behaviors/communications/socket/connect::fsockopen-call",
            "atk": "T1095",
            "mbc": "C0001",
            "conf": 0.8500000238418579,
            "crit": 3,
            "desc": "PHP fsockopen socket open"
          },
          {
            "id": "micro-behaviors/os/stdio::error-suppress-prefix",
            "conf": 0.699999988079071,
            "crit": 3,
            "desc": "PHP error suppression operator usage"
          },
          {
            "id": "objectives/command-and-control/reverse-shell/dup::any-socket-dial",
            "atk": "T1059",
            "mbc": "B0030",
            "conf": 0.8999999761581421,
            "crit": 3,
            "desc": "any language socket dial primitive"
          }
        ],
        "path": "scanner.php",
        "risk": 3,
        "size": 441,
        "type": "php"
      }
    ]
  }
}