diff --git a/patterns_raw.txt b/patterns_raw.txt
index 7d6c9a8..e5b838c 100644
--- a/patterns_raw.txt
+++ b/patterns_raw.txt
@@ -39,6 +39,21 @@ PD9waH
 w/cGhw
 8P3Boc
 
+# "stat" in base64
+c3Rhd
+N0YX
+zdGF0
+
+# "copy" in base64
+Y29we
+NvcH
+jb3B5
+
+# "mail" in base64
+bWFpb
+1haW
+tYWls
+
 # "system" in base64
 c3lzdGVt
 N5c3Rlb
@@ -59,10 +74,10 @@ YmFzZTY0X2RlY29kZ
 Jhc2U2NF9kZWNvZG
 iYXNlNjRfZGVjb2Rl
 
-# "eval(" in base64
-ZXZhbC
-V2YWwo
-ldmFsK
+# "eval" in base64
+ZXZhb
+V2YW
+ldmFs
 
 # "HTTP_USER_AGENT" in base64
 SFRUUF9VU0VSX0FHRU5U
@@ -134,8 +149,6 @@ Dr.abolalh
 C0derz.com
 Mr.HiTman
 IrSecTeam
-#Spammer gives a lot of false positives... maybe worth dropping
-Spammer
 FLoodeR
 eriuqer
 zehirhacker