From 317ff8b6b75b0a12d1c7143935a0a9c398a451cd Mon Sep 17 00:00:00 2001
From: nichogenius <nichogenius@gmail.com>
Date: Thu, 27 Jul 2017 07:08:05 -0600
Subject: [PATCH] Added functions, dropped Spammer.

Spammers gives false positives.  added a couple more php functions in base64
---
 patterns_raw.txt | 25 +++++++++++++++++++------
 1 file changed, 19 insertions(+), 6 deletions(-)

diff --git a/patterns_raw.txt b/patterns_raw.txt
index 7d6c9a8..e5b838c 100644
--- a/patterns_raw.txt
+++ b/patterns_raw.txt
@@ -39,6 +39,21 @@ PD9waH
 w/cGhw
 8P3Boc
 
+# "stat" in base64
+c3Rhd
+N0YX
+zdGF0
+
+# "copy" in base64
+Y29we
+NvcH
+jb3B5
+
+# "mail" in base64
+bWFpb
+1haW
+tYWls
+
 # "system" in base64
 c3lzdGVt
 N5c3Rlb
@@ -59,10 +74,10 @@ YmFzZTY0X2RlY29kZ
 Jhc2U2NF9kZWNvZG
 iYXNlNjRfZGVjb2Rl
 
-# "eval(" in base64
-ZXZhbC
-V2YWwo
-ldmFsK
+# "eval" in base64
+ZXZhb
+V2YW
+ldmFs
 
 # "HTTP_USER_AGENT" in base64
 SFRUUF9VU0VSX0FHRU5U
@@ -134,8 +149,6 @@ Dr.abolalh
 C0derz.com
 Mr.HiTman
 IrSecTeam
-#Spammer gives a lot of false positives... maybe worth dropping
-Spammer
 FLoodeR
 eriuqer
 zehirhacker