Upload tokenizer

tokenizer.json

@@ -216,43 +216,43 @@
       "{": 68,
       "|": 69,
       "}": 70,
-      "##y": 71,
-      "##s": 72,
-      "##t": 73,
-      "##e": 74,
-      "##m": 75,
-      "##3": 76,
-      "##2": 77,
-      "##h": 78,
-      "##i": 79,
-      "##c": 80,
-      "##p": 81,
-      "##d": 82,
-      "##a": 83,
-      "##r": 84,
-      "##k": 85,
-      "##v": 86,
-      "##o": 87,
-      "##l": 88,
-      "##u": 89,
-      "##w": 90,
-      "##1": 91,
-      "##x": 92,
-      "##n": 93,
-      "##f": 94,
-      "##b": 95,
-      "##6": 96,
-      "##4": 97,
-      "##g": 98,
-      "##7": 99,
-      "##8": 100,
-      "##5": 101,
-      "##9": 102,
-      "##z": 103,
-      "##0": 104,
-      "##j": 105,
-      "##em": 106,
-      "##at": 107,
+      "##a": 71,
+      "##n": 72,
+      "##e": 73,
+      "##p": 74,
+      "##t": 75,
+      "##x": 76,
+      "##f": 77,
+      "##i": 78,
+      "##l": 79,
+      "##o": 80,
+      "##m": 81,
+      "##k": 82,
+      "##r": 83,
+      "##d": 84,
+      "##c": 85,
+      "##u": 86,
+      "##y": 87,
+      "##h": 88,
+      "##w": 89,
+      "##g": 90,
+      "##s": 91,
+      "##z": 92,
+      "##3": 93,
+      "##2": 94,
+      "##v": 95,
+      "##8": 96,
+      "##9": 97,
+      "##b": 98,
+      "##1": 99,
+      "##0": 100,
+      "##j": 101,
+      "##6": 102,
+      "##4": 103,
+      "##7": 104,
+      "##5": 105,
+      "##at": 106,
+      "##em": 107,
       "##st": 108,
       "##er": 109,
       "##ut": 110,
@@ -276,28 +276,28 @@
       "##mp": 128,
       "file": 129,
       "out": 130,
-      "##ce": 131,
-      "##dow": 132,
-      "##ar": 133,
-      "##ass": 134,
+      "##ar": 131,
+      "##ad": 132,
+      "##ass": 133,
+      "##ce": 134,
       "##put": 135,
-      "##py": 136,
-      "##pp": 137,
+      "##pp": 136,
+      "##py": 137,
       "output": 138,
       "##it": 139,
-      "##ve": 140,
-      "##or": 141,
+      "##or": 140,
+      "##ve": 141,
       "##emp": 142,
-      "##me": 143,
-      "##ol": 144,
+      "##ol": 143,
+      "##me": 144,
       "pro": 145,
-      "##ct": 146,
-      "##al": 147,
+      "##al": 146,
+      "##ct": 147,
       "##ump": 148,
       "mem": 149,
-      "##32": 150,
-      "##nv": 151,
-      "##tc": 152,
+      "##nv": 150,
+      "##32": 151,
+      "##nt": 152,
       "temp": 153,
       "##ch": 154,
       "##ur": 155,
@@ -311,24 +311,24 @@
       "##ame": 163,
       "##ll": 164,
       "system32": 165,
-      "##ha": 166,
-      "##di": 167,
-      "##ion": 168,
-      "##der": 169,
-      "##ad": 170,
-      "##act": 171,
-      "##ot": 172,
-      "##dows": 173,
-      "windows": 174,
-      "##hadow": 175,
+      "##di": 166,
+      "sh": 167,
+      "##act": 168,
+      "##ion": 169,
+      "##ot": 170,
+      "##der": 171,
+      "##dow": 172,
+      "##adow": 173,
+      "window": 174,
+      "windows": 175,
       "ne": 176,
       "re": 177,
-      "##en": 178,
+      "##tc": 178,
       "##ic": 179,
-      "##co": 180,
-      "##ract": 181,
-      "##kl": 182,
-      "##ls": 183,
+      "##ls": 180,
+      "##kl": 181,
+      "##ract": 182,
+      "##co": 183,
       "##ate": 184,
       "##cho": 185,
       "lsass": 186,
@@ -337,19 +337,19 @@
       "it": 189,
       "net": 190,
       "pass": 191,
-      "##ter": 192,
+      "##no": 192,
       "##pt": 193,
-      "##kdi": 194,
-      "##no": 195,
+      "##ter": 194,
+      "##kdi": 195,
       "hklm": 196,
       "echo": 197,
       "npp": 198,
       "se": 199,
       "te": 200,
-      "##spy": 201,
-      "##dump": 202,
-      "##ag": 203,
-      "##lo": 204,
+      "##ag": 201,
+      "##lo": 202,
+      "##dump": 203,
+      "##spy": 204,
       "##lea": 205,
       "nppspy": 206,
       "app": 207,
@@ -358,21 +358,21 @@
       "in": 210,
       "name": 211,
       "rd": 212,
-      "shadow": 213,
-      "tar": 214,
+      "tar": 213,
+      "##nd": 214,
       "##ty": 215,
       "##th": 216,
       "##ice": 217,
-      "##cr": 218,
-      "##rlea": 219,
-      "##vid": 220,
-      "##vice": 221,
-      "##un": 222,
-      "##get": 223,
+      "##rlea": 218,
+      "##cr": 219,
+      "##con": 220,
+      "##get": 221,
+      "##vid": 222,
+      "##vice": 223,
       "##roract": 224,
       "##rep": 225,
-      "##ont": 226,
-      "##cess": 227,
+      "##cess": 226,
+      "shadow": 227,
       "new": 228,
       "##kdiag": 229,
       "erroract": 230,
@@ -391,271 +391,271 @@
       "ps": 243,
       "sa": 244,
       "vss": 245,
-      "##cur": 246,
-      "##pro": 247,
+      "##pro": 246,
+      "##cur": 247,
       "##ue": 248,
       "##root": 249,
       "##art": 250,
       "##older": 251,
       "passw": 252,
       "##nore": 253,
-      "create": 254,
-      "ignore": 255,
-      "co": 256,
-      "id": 257,
+      "##cont": 254,
+      "create": 255,
+      "ignore": 256,
+      "co": 257,
       "if": 258,
-      "lo": 259,
-      "min": 260,
-      "ser": 261,
-      "scr": 262,
-      "##to": 263,
-      "##ipt": 264,
+      "id": 259,
+      "lo": 260,
+      "min": 261,
+      "ser": 262,
+      "scr": 263,
+      "##ent": 264,
       "##pa": 265,
-      "##ds": 266,
-      "##ull": 267,
-      "##ing": 268,
-      "##idump": 269,
-      "proc": 270,
-      "process": 271,
-      "##alue": 272,
-      "##omic": 273,
-      "start": 274,
-      "##ent": 275,
-      "test": 276,
-      "##load": 277,
-      "##ontro": 278,
+      "##to": 266,
+      "##ipt": 267,
+      "##ds": 268,
+      "##ull": 269,
+      "##ing": 270,
+      "##idump": 271,
+      "proc": 272,
+      "process": 273,
+      "##alue": 274,
+      "##omic": 275,
+      "start": 276,
+      "test": 277,
+      "##load": 278,
       "passwd": 279,
       "minidump": 280,
       "script": 281,
       "00": 282,
-      "cur": 283,
-      "com": 284,
-      "de": 285,
-      "di": 286,
-      "for": 287,
-      "full": 288,
-      "he": 289,
-      "t1": 290,
-      "##ex": 291,
-      "##md": 292,
-      "##po": 293,
-      "##per": 294,
-      "##wor": 295,
-      "##ntc": 296,
-      "##name": 297,
-      "##03": 298,
-      "##003": 299,
-      "##str": 300,
-      "##ets": 301,
-      "##rentc": 302,
-      "##ary": 303,
-      "##copy": 304,
-      "##lset": 305,
-      "item": 306,
-      "##thon": 307,
-      "list": 308,
-      "python": 309,
-      "service": 310,
-      "##omics": 311,
-      "##ontrolset": 312,
-      "001": 313,
-      "currentc": 314,
-      "t1003": 315,
-      "##perty": 316,
-      "currentcontrolset": 317,
-      "0x": 318,
-      "13": 319,
-      "ac": 320,
-      "bin": 321,
-      "cut": 322,
-      "con": 323,
-      "dr": 324,
-      "dmp": 325,
-      "grep": 326,
-      "ho": 327,
-      "let": 328,
-      "nt": 329,
-      "rv": 330,
-      "uname": 331,
-      "value": 332,
-      "##yload": 333,
-      "##ser": 334,
-      "##mi": 335,
-      "##il": 336,
-      "##cat": 337,
-      "##kat": 338,
-      "##kpro": 339,
-      "##op": 340,
-      "##li": 341,
-      "##ume": 342,
-      "##nal": 343,
-      "##folder": 344,
-      "##atomics": 345,
-      "##roperty": 346,
-      "exit": 347,
-      "exter": 348,
-      "pathto": 349,
-      "systemroot": 350,
-      "##ity": 351,
-      "##emproperty": 352,
-      "##olume": 353,
-      "stop": 354,
-      "reg": 355,
-      "itemproperty": 356,
-      "networ": 357,
-      "secur": 358,
-      "##und": 359,
-      "save": 360,
-      "copy": 361,
-      "##payload": 362,
-      "services": 363,
-      "binary": 364,
-      "drive": 365,
-      "host": 366,
-      "letter": 367,
-      "ntds": 368,
-      "##katz": 369,
-      "##kprovider": 370,
+      "con": 283,
+      "cur": 284,
+      "com": 285,
+      "de": 286,
+      "di": 287,
+      "for": 288,
+      "full": 289,
+      "he": 290,
+      "t1": 291,
+      "##name": 292,
+      "##ex": 293,
+      "##po": 294,
+      "##per": 295,
+      "##md": 296,
+      "##wor": 297,
+      "##sh": 298,
+      "##03": 299,
+      "##003": 300,
+      "##str": 301,
+      "##rols": 302,
+      "##ets": 303,
+      "##rent": 304,
+      "##ary": 305,
+      "##copy": 306,
+      "item": 307,
+      "##thon": 308,
+      "list": 309,
+      "python": 310,
+      "##controls": 311,
+      "service": 312,
+      "##omics": 313,
+      "001": 314,
+      "current": 315,
+      "t1003": 316,
+      "##perty": 317,
+      "##controlset": 318,
+      "currentcontrolset": 319,
+      "0x": 320,
+      "13": 321,
+      "ac": 322,
+      "bin": 323,
+      "cut": 324,
+      "dr": 325,
+      "dmp": 326,
+      "grep": 327,
+      "ho": 328,
+      "let": 329,
+      "nt": 330,
+      "rv": 331,
+      "uname": 332,
+      "value": 333,
+      "##nal": 334,
+      "##en": 335,
+      "##fi": 336,
+      "##folder": 337,
+      "##li": 338,
+      "##op": 339,
+      "##mi": 340,
+      "##kat": 341,
+      "##kpro": 342,
+      "##cat": 343,
+      "##ume": 344,
+      "##und": 345,
+      "##yload": 346,
+      "##ser": 347,
+      "##atomics": 348,
+      "##roperty": 349,
+      "exit": 350,
+      "exter": 351,
+      "pathto": 352,
+      "systemroot": 353,
+      "##ity": 354,
+      "##emproperty": 355,
+      "##olume": 356,
+      "stop": 357,
+      "reg": 358,
+      "itemproperty": 359,
+      "networ": 360,
+      "secur": 361,
+      "save": 362,
+      "copy": 363,
+      "##payload": 364,
+      "services": 365,
+      "binary": 366,
+      "drive": 367,
+      "host": 368,
+      "letter": 369,
+      "ntds": 370,
       "##nalpayload": 371,
-      "##atomicsfolder": 372,
-      "externalpayload": 373,
-      "pathtoatomicsfolder": 374,
-      "networkprovider": 375,
-      "security": 376,
-      "externalpayloads": 377,
-      "dll": 378,
-      "mi": 379,
-      "si": 380,
-      "wh": 381,
-      "##sk": 382,
-      "##shadow": 383,
-      "##eb": 384,
-      "##ig": 385,
-      "##cs": 386,
-      "##cmd": 387,
+      "##katz": 372,
+      "##kprovider": 373,
+      "##atomicsfolder": 374,
+      "externalpayload": 375,
+      "pathtoatomicsfolder": 376,
+      "networkprovider": 377,
+      "security": 378,
+      "externalpayloads": 379,
+      "dll": 380,
+      "mi": 381,
+      "si": 382,
+      "wh": 383,
+      "##ap": 384,
+      "##ac": 385,
+      "##eb": 386,
+      "##pe": 387,
       "##ps": 388,
-      "##pe": 389,
-      "##path": 390,
-      "##de": 391,
-      "##ac": 392,
-      "##ap": 393,
-      "##rv": 394,
-      "##ke": 395,
+      "##path": 389,
+      "##il": 390,
+      "##ke": 391,
+      "##rv": 392,
+      "##de": 393,
+      "##cs": 394,
+      "##cmd": 395,
       "##ul": 396,
-      "##nd": 397,
-      "##fig": 398,
-      "##64": 399,
-      "##ze": 400,
+      "##unt": 397,
+      "##sk": 398,
+      "##ze": 399,
+      "##64": 400,
       "##ster": 401,
       "##cept": 402,
       "provider": 403,
       "apppo": 404,
       "appcmd": 405,
       "inets": 406,
-      "##unt": 407,
-      "master": 408,
-      "log": 409,
-      "testcat": 410,
+      "master": 407,
+      "log": 408,
+      "testcat": 409,
+      "confi": 410,
       "heap": 411,
-      "config": 412,
+      "##shadow": 412,
       "mimi": 413,
       "size": 414,
       "apppool": 415,
       "inetsrv": 416,
-      "cal": 417,
-      "dom": 418,
-      "els": 419,
-      "fo": 420,
-      "folder": 421,
-      "git": 422,
-      "glo": 423,
-      "ht": 424,
-      "har": 425,
-      "iex": 426,
-      "lin": 427,
-      "na": 428,
-      "pg": 429,
-      "ra": 430,
-      "rund": 431,
-      "s3": 432,
-      "sh": 433,
-      "su": 434,
-      "th": 435,
-      "tr": 436,
+      "config": 417,
+      "cal": 418,
+      "dom": 419,
+      "els": 420,
+      "fo": 421,
+      "folder": 422,
+      "git": 423,
+      "glo": 424,
+      "ht": 425,
+      "har": 426,
+      "iex": 427,
+      "lin": 428,
+      "na": 429,
+      "pg": 430,
+      "ra": 431,
+      "rund": 432,
+      "su": 433,
+      "s3": 434,
+      "tr": 435,
+      "th": 436,
       "ter": 437,
       "vs": 438,
       "wm": 439,
       "wr": 440,
-      "##se": 441,
-      "##sv": 442,
-      "##tract": 443,
-      "##tps": 444,
-      "##ect": 445,
-      "##eul": 446,
-      "##3th": 447,
-      "##hu": 448,
-      "##h1": 449,
-      "##ich": 450,
-      "##do": 451,
-      "##ddi": 452,
-      "##an": 453,
-      "##ain": 454,
-      "##volume": 455,
-      "##wn": 456,
-      "##1ss": 457,
-      "##xt": 458,
-      "##bal": 459,
-      "##gr": 460,
-      "extract": 461,
-      "##rect": 462,
-      "##ite": 463,
-      "##ory": 464,
-      "##order": 465,
-      "##ll32": 466,
-      "##ated": 467,
-      "##nodump": 468,
-      "shadowcopy": 469,
+      "##an": 441,
+      "##ain": 442,
+      "##ect": 443,
+      "##eul": 444,
+      "##tract": 445,
+      "##tps": 446,
+      "##xt": 447,
+      "##ich": 448,
+      "##do": 449,
+      "##ddi": 450,
+      "##ub": 451,
+      "##h1": 452,
+      "##hub": 453,
+      "##wn": 454,
+      "##gr": 455,
+      "##se": 456,
+      "##sv": 457,
+      "##3th": 458,
+      "##volume": 459,
+      "##bal": 460,
+      "##1ss": 461,
+      "extract": 462,
+      "##rect": 463,
+      "##ite": 464,
+      "##ory": 465,
+      "##order": 466,
+      "##ll32": 467,
+      "##ated": 468,
+      "##nodump": 469,
       "##type": 470,
-      "ps1": 471,
-      "sam": 472,
-      "##cur3th": 473,
-      "comsv": 474,
-      "device": 475,
-      "direct": 476,
-      "##string": 477,
-      "accept": 478,
-      "unamestr": 479,
-      "##lient": 480,
-      "which": 481,
-      "##skvolume": 482,
-      "##shadowcopy": 483,
+      "shadowcopy": 471,
+      "ps1": 472,
+      "sam": 473,
+      "##cur3th": 474,
+      "comsv": 475,
+      "device": 476,
+      "direct": 477,
+      "##string": 478,
+      "accept": 479,
+      "unamestr": 480,
+      "##lient": 481,
+      "which": 482,
+      "##skvolume": 483,
       "providerorder": 484,
-      "mimikatz": 485,
-      "call": 486,
-      "domain": 487,
-      "else": 488,
-      "githu": 489,
-      "global": 490,
-      "https": 491,
-      "harddi": 492,
-      "nanodump": 493,
-      "pgrep": 494,
-      "raw": 495,
-      "rundll32": 496,
-      "s3cur3th": 497,
+      "##shadowcopy": 485,
+      "mimikatz": 486,
+      "call": 487,
+      "domain": 488,
+      "else": 489,
+      "github": 490,
+      "global": 491,
+      "https": 492,
+      "harddi": 493,
+      "nanodump": 494,
+      "pgrep": 495,
+      "raw": 496,
+      "rundll32": 497,
       "sudo": 498,
-      "term": 499,
-      "vsc": 500,
-      "wmic": 501,
-      "write": 502,
-      "##eula": 503,
-      "##h1t": 504,
-      "##1ssh1t": 505,
-      "comsvcs": 506,
-      "directory": 507,
-      "accepteula": 508,
-      "##skvolumeshadowcopy": 509,
-      "github": 510,
+      "s3cur3th": 499,
+      "term": 500,
+      "vsc": 501,
+      "wmic": 502,
+      "write": 503,
+      "##eula": 504,
+      "##h1t": 505,
+      "##1ssh1t": 506,
+      "comsvcs": 507,
+      "directory": 508,
+      "accepteula": 509,
+      "##skvolumeshadowcopy": 510,
       "globalroot": 511,
       "harddiskvolumeshadowcopy": 512,
       "s3cur3th1ssh1t": 513,
@@ -663,14 +663,14 @@
       "and": 515,
       "be": 516,
       "cmd": 517,
-      "dd": 518,
-      "do": 519,
+      "do": 518,
+      "dd": 519,
       "dow": 520,
       "dit": 521,
       "dump": 522,
       "dot": 523,
-      "es": 524,
-      "ed": 525,
+      "ed": 524,
+      "es": 525,
       "f2": 526,
       "f1": 527,
       "fre": 528,
@@ -695,71 +695,71 @@
       "wa": 547,
       "web": 548,
       "x64": 549,
-      "##ym": 550,
-      "##sh": 551,
-      "##sd": 552,
-      "##so": 553,
-      "##sw": 554,
-      "##mem": 555,
-      "##min": 556,
-      "##mit": 557,
-      "##38": 558,
-      "##21": 559,
-      "##2b": 560,
-      "##ip": 561,
-      "##col": 562,
-      "##cont": 563,
-      "##client": 564,
-      "##pass": 565,
-      "##pwn": 566,
-      "##dmp": 567,
-      "##dated": 568,
-      "##am": 569,
-      "##ab": 570,
-      "##kur": 571,
-      "##ver": 572,
-      "##value": 573,
-      "##out": 574,
-      "##oke": 575,
-      "##user": 576,
-      "##net": 577,
-      "##nload": 578,
-      "##file": 579,
-      "##56": 580,
-      "##ject": 581,
+      "##am": 550,
+      "##ab": 551,
+      "##net": 552,
+      "##nload": 553,
+      "##pass": 554,
+      "##pwn": 555,
+      "##file": 556,
+      "##ip": 557,
+      "##out": 558,
+      "##oke": 559,
+      "##mem": 560,
+      "##min": 561,
+      "##mit": 562,
+      "##mgr": 563,
+      "##kur": 564,
+      "##dmp": 565,
+      "##dated": 566,
+      "##col": 567,
+      "##client": 568,
+      "##user": 569,
+      "##ymgr": 570,
+      "##wow": 571,
+      "##so": 572,
+      "##sd": 573,
+      "##swow": 574,
+      "##38": 575,
+      "##2b": 576,
+      "##21": 577,
+      "##ver": 578,
+      "##value": 579,
+      "##ject": 580,
+      "##56": 581,
       "##ert": 582,
       "##erdump": 583,
       "##utl": 584,
       "##util": 585,
       "expa": 586,
       "##ink": 587,
-      "sysw": 588,
-      "##ow64": 589,
-      "exepath": 590,
+      "syswow": 588,
+      "exepath": 589,
+      "##admin": 590,
       "##pykatz": 591,
       "##ort": 592,
       "lsa": 593,
       "winpwn": 594,
-      "##admin": 595,
+      "red": 595,
       "res": 596,
-      "red": 597,
+      "##lsa": 597,
       "##code": 598,
       "##count": 599,
-      "##lsa": 600,
-      "##chost": 601,
-      "secr": 602,
-      "sekur": 603,
-      "text": 604,
-      "catch": 605,
-      "limit": 606,
-      "map": 607,
-      "pypykatz": 608,
-      "vssadmin": 609,
-      "##proto": 610,
+      "##chost": 600,
+      "secr": 601,
+      "sekur": 602,
+      "text": 603,
+      "catch": 604,
+      "limit": 605,
+      "map": 606,
+      "pypykatz": 607,
+      "vssadmin": 608,
+      "##proto": 609,
+      "##content": 610,
       "count": 611,
       "loc": 612,
-      "procdump": 613,
-      "##entutl": 614,
+      "##entutl": 613,
+      "procdump": 614,
       "scripts": 615,
       "dest": 616,
       "force": 617,
@@ -770,8 +770,8 @@
       "logon": 622,
       "found": 623,
       "line": 624,
-      "then": 625,
-      "try": 626,
+      "try": 625,
+      "then": 626,
       "githubuser": 627,
       "download": 628,
       "dotnet": 629,
@@ -790,189 +790,189 @@
       "venv": 642,
       "wait": 643,
       "webclient": 644,
-      "##ymgr": 645,
-      "##content": 646,
-      "expand": 647,
-      "syswow64": 648,
-      "secrets": 649,
-      "sekurlsa": 650,
-      "fullmemdmp": 651,
-      "securityprotocol": 652,
-      "githubusercontent": 653,
-      "downloadstring": 654,
-      "updatedvalue": 655,
-      "121": 656,
-      "338": 657,
-      "9a": 658,
-      "ad": 659,
-      "all": 660,
-      "by": 661,
-      "bac": 662,
-      "cl": 663,
-      "cle": 664,
-      "contro": 665,
-      "can": 666,
-      "client": 667,
-      "cert": 668,
-      "don": 669,
-      "dcs": 670,
-      "en": 671,
-      "est": 672,
-      "eli": 673,
-      "fi": 674,
-      "go": 675,
-      "gw": 676,
-      "gre": 677,
-      "gse": 678,
-      "is": 679,
-      "io": 680,
-      "iw": 681,
-      "imp": 682,
-      "ke": 683,
-      "kr": 684,
-      "mm": 685,
-      "mo": 686,
-      "mon": 687,
-      "mic": 688,
-      "mkl": 689,
-      "non": 690,
-      "null": 691,
-      "nul": 692,
-      "or": 693,
-      "own": 694,
-      "pol": 695,
-      "plea": 696,
-      "rem": 697,
-      "sr": 698,
-      "so": 699,
-      "sile": 700,
-      "sha": 701,
-      "ty": 702,
-      "tls": 703,
-      "txt": 704,
-      "xor": 705,
-      "##yn": 706,
-      "##sid": 707,
-      "##sab": 708,
-      "##scode": 709,
-      "##tm": 710,
-      "##ti": 711,
-      "##e2": 712,
-      "##ec": 713,
-      "##ed": 714,
-      "##e9": 715,
-      "##ml": 716,
-      "##3c": 717,
-      "##36": 718,
-      "##hex": 719,
-      "##is": 720,
-      "##if": 721,
+      "expand": 645,
+      "syswow64": 646,
+      "secrets": 647,
+      "sekurlsa": 648,
+      "fullmemdmp": 649,
+      "securityprotocol": 650,
+      "githubusercontent": 651,
+      "downloadstring": 652,
+      "updatedvalue": 653,
+      "121": 654,
+      "338": 655,
+      "9a": 656,
+      "ad": 657,
+      "all": 658,
+      "by": 659,
+      "bac": 660,
+      "cl": 661,
+      "cle": 662,
+      "can": 663,
+      "client": 664,
+      "cert": 665,
+      "don": 666,
+      "dcs": 667,
+      "en": 668,
+      "est": 669,
+      "eli": 670,
+      "fi": 671,
+      "go": 672,
+      "gw": 673,
+      "gre": 674,
+      "gse": 675,
+      "io": 676,
+      "iw": 677,
+      "is": 678,
+      "imp": 679,
+      "ke": 680,
+      "kr": 681,
+      "mo": 682,
+      "mm": 683,
+      "mon": 684,
+      "mic": 685,
+      "mkl": 686,
+      "non": 687,
+      "null": 688,
+      "nul": 689,
+      "or": 690,
+      "own": 691,
+      "pol": 692,
+      "plea": 693,
+      "rem": 694,
+      "so": 695,
+      "sr": 696,
+      "sile": 697,
+      "ty": 698,
+      "tls": 699,
+      "txt": 700,
+      "xor": 701,
+      "##a3": 702,
+      "##a7": 703,
+      "##are": 704,
+      "##nc": 705,
+      "##nect": 706,
+      "##ed": 707,
+      "##ec": 708,
+      "##e2": 709,
+      "##e9": 710,
+      "##pon": 711,
+      "##pcon": 712,
+      "##pen": 713,
+      "##port": 714,
+      "##ti": 715,
+      "##tm": 716,
+      "##tro": 717,
+      "##ft": 718,
+      "##fen": 719,
+      "##if": 720,
+      "##is": 721,
       "##ib": 722,
-      "##c5": 723,
-      "##cre": 724,
-      "##con": 725,
-      "##cdump": 726,
-      "##can": 727,
-      "##pon": 728,
-      "##pen": 729,
-      "##port": 730,
-      "##pcon": 731,
-      "##du": 732,
-      "##dce": 733,
-      "##a7": 734,
-      "##a36": 735,
-      "##ring": 736,
-      "##lac": 737,
-      "##ux": 738,
-      "##uin": 739,
-      "##uscode": 740,
-      "##12": 741,
-      "##nt": 742,
-      "##nect": 743,
-      "##ft": 744,
-      "##fen": 745,
-      "##fil": 746,
-      "##be9": 747,
-      "##6a7": 748,
-      "##41": 749,
-      "##guin": 750,
-      "##73": 751,
-      "##773": 752,
-      "##88": 753,
-      "##ation": 754,
-      "##atuscode": 755,
-      "##roso": 756,
-      "except": 757,
-      "exfil": 758,
-      "##inter": 759,
-      "##intm": 760,
-      "##ination": 761,
-      "##lect": 762,
-      "##leout": 763,
-      "##red": 764,
-      "syml": 765,
-      "##owke": 766,
-      "filename": 767,
-      "##ord": 768,
-      "##olve": 769,
-      "property": 770,
-      "progr": 771,
-      "##alti": 772,
-      "##alport": 773,
-      "##tcpcon": 774,
-      "##urce": 775,
-      "lsad": 776,
-      "win32": 777,
-      "state": 778,
-      "string": 779,
-      "statuscode": 780,
-      "##active": 781,
-      "##ote": 782,
-      "read": 783,
-      "repo": 784,
-      "realti": 785,
-      "##icy": 786,
-      "##core": 787,
-      "nettcpcon": 788,
-      "netcore": 789,
-      "select": 790,
-      "team": 791,
-      "##ager": 792,
-      "input": 793,
-      "insid": 794,
-      "##replac": 795,
-      "##cessib": 796,
-      "maps": 797,
-      "psex": 798,
-      "pspath": 799,
-      "##process": 800,
-      "##artex": 801,
-      "password": 802,
-      "createdump": 803,
-      "ifm": 804,
-      "locat": 805,
-      "server": 806,
-      "##ingprocess": 807,
-      "starting": 808,
-      "defen": 809,
-      "dir": 810,
-      "disk": 811,
-      "disab": 812,
-      "##pointm": 813,
-      "##words": 814,
-      "##aryco": 815,
-      "itemtype": 816,
-      "python3": 817,
-      "python2": 818,
-      "servicepointm": 819,
-      "0x41": 820,
-      "account": 821,
-      "conso": 822,
-      "##server": 823,
-      "##lish": 824,
+      "##lac": 723,
+      "##link": 724,
+      "##mlink": 725,
+      "##ring": 726,
+      "##du": 727,
+      "##dce": 728,
+      "##cb": 729,
+      "##c5": 730,
+      "##cre": 731,
+      "##cdump": 732,
+      "##can": 733,
+      "##ux": 734,
+      "##us": 735,
+      "##uin": 736,
+      "##ync": 737,
+      "##hex": 738,
+      "##guin": 739,
+      "##sid": 740,
+      "##sab": 741,
+      "##3cb": 742,
+      "##88": 743,
+      "##12": 744,
+      "##6a7": 745,
+      "##688": 746,
+      "##41": 747,
+      "##73": 748,
+      "##773": 749,
+      "##ation": 750,
+      "##atus": 751,
+      "##roso": 752,
+      "exfi": 753,
+      "except": 754,
+      "##inter": 755,
+      "##intm": 756,
+      "##ination": 757,
+      "##lect": 758,
+      "##leout": 759,
+      "symlink": 760,
+      "##owke": 761,
+      "filename": 762,
+      "##adump": 763,
+      "##ord": 764,
+      "##olve": 765,
+      "property": 766,
+      "progr": 767,
+      "##alport": 768,
+      "##alti": 769,
+      "##urce": 770,
+      "lsadump": 771,
+      "win32": 772,
+      "state": 773,
+      "string": 774,
+      "status": 775,
+      "share": 776,
+      "##active": 777,
+      "##ote": 778,
+      "read": 779,
+      "repo": 780,
+      "realti": 781,
+      "##tcpcon": 782,
+      "##icy": 783,
+      "##core": 784,
+      "nettcpcon": 785,
+      "netcore": 786,
+      "select": 787,
+      "team": 788,
+      "##ager": 789,
+      "input": 790,
+      "insid": 791,
+      "##replac": 792,
+      "##cessib": 793,
+      "maps": 794,
+      "psex": 795,
+      "pspath": 796,
+      "##process": 797,
+      "##artex": 798,
+      "password": 799,
+      "createdump": 800,
+      "ifm": 801,
+      "locat": 802,
+      "server": 803,
+      "##ingprocess": 804,
+      "starting": 805,
+      "conso": 806,
+      "contro": 807,
+      "defen": 808,
+      "dir": 809,
+      "disk": 810,
+      "disab": 811,
+      "##pointm": 812,
+      "##words": 813,
+      "##shed": 814,
+      "##showke": 815,
+      "##aryco": 816,
+      "itemtype": 817,
+      "python3": 818,
+      "python2": 819,
+      "servicepointm": 820,
+      "0x41": 821,
+      "account": 822,
+      "##lished": 823,
+      "##server": 824,
       "ntdsutil": 825,
       "while": 826,
-      "##aca36": 827,
+      "##aca3": 827,
       "##accessib": 828,
       "##key": 829,
       "providerpath": 830,
@@ -980,8 +980,8 @@
       "mimipen": 832,
       "fore": 833,
       "linux": 834,
-      "this": 835,
-      "true": 836,
+      "true": 835,
+      "this": 836,
       "##anager": 837,
       "samfile": 838,
       "elseif": 839,
@@ -991,106 +991,103 @@
       "cmdkey": 843,
       "dumpert": 844,
       "dumpcre": 845,
-      "##showke": 846,
-      "##38c5": 847,
-      "##2156": 848,
-      "##2b2b": 849,
-      "##passwords": 850,
-      "##amfile": 851,
-      "##ablish": 852,
-      "##5638c5": 853,
+      "##amfile": 846,
+      "##ablished": 847,
+      "##passwords": 848,
+      "##38c5": 849,
+      "##2b2b": 850,
+      "##2156": 851,
+      "##5638c5": 852,
+      "redcan": 853,
       "respon": 854,
       "resolve": 855,
-      "redcan": 856,
-      "##codehex": 857,
-      "located": 858,
-      "localport": 859,
-      "destination": 860,
-      "logonserver": 861,
-      "logonpasswords": 862,
-      "expandstring": 863,
-      "securityprotocoltype": 864,
-      "121dce": 865,
-      "3389": 866,
-      "adreplac": 867,
-      "bypass": 868,
-      "back": 869,
-      "class": 870,
-      "cleartex": 871,
-      "control": 872,
-      "clientaccessib": 873,
-      "certutil": 874,
-      "done": 875,
-      "dcsyn": 876,
-      "encodehex": 877,
-      "establish": 878,
-      "elif": 879,
-      "going": 880,
-      "gwmi": 881,
-      "green": 882,
-      "gsecdump": 883,
-      "iwr": 884,
-      "import": 885,
-      "keymgr": 886,
-      "krshowke": 887,
-      "modu": 888,
-      "microso": 889,
-      "mklink": 890,
-      "noninter": 891,
-      "order": 892,
-      "owningprocess": 893,
-      "policy": 894,
-      "please": 895,
-      "remote": 896,
-      "src": 897,
-      "source": 898,
-      "silent": 899,
-      "shared": 900,
-      "type": 901,
-      "tls12": 902,
-      "xordump": 903,
-      "##e26a7": 904,
-      "##3cbe9": 905,
-      "##nection": 906,
-      "##882156": 907,
-      "exception": 908,
-      "##leoutput": 909,
-      "symlink": 910,
-      "propertytype": 911,
-      "programfile": 912,
-      "lsadump": 913,
-      "strings": 914,
-      "realtime": 915,
-      "nettcpconnection": 916,
-      "inside": 917,
-      "psexec": 918,
-      "location": 919,
-      "defender": 920,
-      "diskshadow": 921,
-      "disable": 922,
-      "servicepointmanager": 923,
-      "consoleoutput": 924,
+      "##codehex": 856,
+      "located": 857,
+      "localport": 858,
+      "destination": 859,
+      "logonserver": 860,
+      "logonpasswords": 861,
+      "expandstring": 862,
+      "securityprotocoltype": 863,
+      "121dce": 864,
+      "3389": 865,
+      "adreplac": 866,
+      "bypass": 867,
+      "back": 868,
+      "class": 869,
+      "cleartex": 870,
+      "clientaccessib": 871,
+      "certutil": 872,
+      "done": 873,
+      "dcsync": 874,
+      "encodehex": 875,
+      "established": 876,
+      "elif": 877,
+      "going": 878,
+      "gwmi": 879,
+      "green": 880,
+      "gsecdump": 881,
+      "iwr": 882,
+      "import": 883,
+      "keymgr": 884,
+      "krshowke": 885,
+      "modu": 886,
+      "microso": 887,
+      "mklink": 888,
+      "noninter": 889,
+      "order": 890,
+      "owningprocess": 891,
+      "policy": 892,
+      "please": 893,
+      "remote": 894,
+      "source": 895,
+      "src": 896,
+      "silent": 897,
+      "type": 898,
+      "tls12": 899,
+      "xordump": 900,
+      "##nection": 901,
+      "##e26a7": 902,
+      "##e92b2b": 903,
+      "##3cbe92b2b": 904,
+      "##6882156": 905,
+      "exfil": 906,
+      "exception": 907,
+      "##leoutput": 908,
+      "propertytype": 909,
+      "programfile": 910,
+      "strings": 911,
+      "statuscode": 912,
+      "shared": 913,
+      "realtime": 914,
+      "nettcpconnection": 915,
+      "inside": 916,
+      "psexec": 917,
+      "location": 918,
+      "consoleoutput": 919,
+      "control": 920,
+      "defender": 921,
+      "diskshadow": 922,
+      "disable": 923,
+      "servicepointmanager": 924,
       "##aca36882156": 925,
       "mimipenguin": 926,
       "dumpcreds": 927,
-      "##2b2b5638c5": 928,
-      "response": 929,
-      "redcanaryco": 930,
+      "##5638c5773": 928,
+      "redcanaryco": 929,
+      "response": 930,
       "121dcee26a7": 931,
       "adreplaccount": 932,
       "cleartext": 933,
       "clientaccessible": 934,
-      "dcsync": 935,
-      "established": 936,
-      "krshowkeymgr": 937,
-      "module": 938,
-      "microsoft": 939,
-      "noninteractive": 940,
-      "##3cbe92b2b5638c5": 941,
-      "programfiles": 942,
-      "##aca368821563cbe92b2b5638c5": 943,
-      "121dcee26a7aca368821563cbe92b2b5638c5": 944,
-      "121dcee26a7aca368821563cbe92b2b5638c5773": 945
+      "krshowkeymgr": 935,
+      "module": 936,
+      "microsoft": 937,
+      "noninteractive": 938,
+      "##3cbe92b2b5638c5773": 939,
+      "programfiles": 940,
+      "##aca368821563cbe92b2b5638c5773": 941,
+      "121dcee26a7aca368821563cbe92b2b5638c5773": 942
     }
   }
 }

vocab.txt

@@ -69,43 +69,43 @@ z
 {
 |
 }
-##y
-##s
-##t
+##a
+##n
 ##e
-##m
-##3
-##2
-##h
-##i
-##c
 ##p
-##d
-##a
-##r
-##k
-##v
-##o
+##t
+##x
+##f
+##i
 ##l
+##o
+##m
+##k
+##r
+##d
+##c
 ##u
+##y
+##h
 ##w
-##1
-##x
-##n
-##f
-##b
-##6
-##4
 ##g
-##7
+##s
+##z
+##3
+##2
+##v
 ##8
-##5
 ##9
-##z
+##b
+##1
 ##0
 ##j
-##em
+##6
+##4
+##7
+##5
 ##at
+##em
 ##st
 ##er
 ##ut
@@ -129,28 +129,28 @@ exe
 ##mp
 file
 out
-##ce
-##dow
 ##ar
+##ad
 ##ass
+##ce
 ##put
-##py
 ##pp
+##py
 output
 ##it
-##ve
 ##or
+##ve
 ##emp
-##me
 ##ol
+##me
 pro
-##ct
 ##al
+##ct
 ##ump
 mem
-##32
 ##nv
-##tc
+##32
+##nt
 temp
 ##ch
 ##ur
@@ -164,24 +164,24 @@ st
 ##ame
 ##ll
 system32
-##ha
 ##di
-##ion
-##der
-##ad
+sh
 ##act
+##ion
 ##ot
-##dows
+##der
+##dow
+##adow
+window
 windows
-##hadow
 ne
 re
-##en
+##tc
 ##ic
-##co
-##ract
-##kl
 ##ls
+##kl
+##ract
+##co
 ##ate
 ##cho
 lsass
@@ -190,19 +190,19 @@ hkl
 it
 net
 pass
-##ter
+##no
 ##pt
+##ter
 ##kdi
-##no
 hklm
 echo
 npp
 se
 te
-##spy
-##dump
 ##ag
 ##lo
+##dump
+##spy
 ##lea
 nppspy
 app
@@ -211,21 +211,21 @@ er
 in
 name
 rd
-shadow
 tar
+##nd
 ##ty
 ##th
 ##ice
-##cr
 ##rlea
+##cr
+##con
+##get
 ##vid
 ##vice
-##un
-##get
 ##roract
 ##rep
-##ont
 ##cess
+shadow
 new
 ##kdiag
 erroract
@@ -244,26 +244,28 @@ py
 ps
 sa
 vss
-##cur
 ##pro
+##cur
 ##ue
 ##root
 ##art
 ##older
 passw
 ##nore
+##cont
 create
 ignore
 co
-id
 if
+id
 lo
 min
 ser
 scr
+##ent
+##pa
 ##to
 ##ipt
-##pa
 ##ds
 ##ull
 ##ing
@@ -273,14 +275,13 @@ process
 ##alue
 ##omic
 start
-##ent
 test
 ##load
-##ontro
 passwd
 minidump
 script
 00
+con
 cur
 com
 de
@@ -289,39 +290,39 @@ for
 full
 he
 t1
+##name
 ##ex
-##md
 ##po
 ##per
+##md
 ##wor
-##ntc
-##name
+##sh
 ##03
 ##003
 ##str
+##rols
 ##ets
-##rentc
+##rent
 ##ary
 ##copy
-##lset
 item
 ##thon
 list
 python
+##controls
 service
 ##omics
-##ontrolset
 001
-currentc
+current
 t1003
 ##perty
+##controlset
 currentcontrolset
 0x
 13
 ac
 bin
 cut
-con
 dr
 dmp
 grep
@@ -331,18 +332,20 @@ nt
 rv
 uname
 value
-##yload
-##ser
+##nal
+##en
+##fi
+##folder
+##li
+##op
 ##mi
-##il
-##cat
 ##kat
 ##kpro
-##op
-##li
+##cat
 ##ume
-##nal
-##folder
+##und
+##yload
+##ser
 ##atomics
 ##roperty
 exit
@@ -357,7 +360,6 @@ reg
 itemproperty
 networ
 secur
-##und
 save
 copy
 ##payload
@@ -367,9 +369,9 @@ drive
 host
 letter
 ntds
+##nalpayload
 ##katz
 ##kprovider
-##nalpayload
 ##atomicsfolder
 externalpayload
 pathtoatomicsfolder
@@ -380,41 +382,40 @@ dll
 mi
 si
 wh
-##sk
-##shadow
+##ap
+##ac
 ##eb
-##ig
-##cs
-##cmd
-##ps
 ##pe
+##ps
 ##path
-##de
-##ac
-##ap
-##rv
+##il
 ##ke
+##rv
+##de
+##cs
+##cmd
 ##ul
-##nd
-##fig
-##64
+##unt
+##sk
 ##ze
+##64
 ##ster
 ##cept
 provider
 apppo
 appcmd
 inets
-##unt
 master
 log
 testcat
+confi
 heap
-config
+##shadow
 mimi
 size
 apppool
 inetsrv
+config
 cal
 dom
 els
@@ -430,35 +431,35 @@ na
 pg
 ra
 rund
-s3
-sh
 su
-th
+s3
 tr
+th
 ter
 vs
 wm
 wr
-##se
-##sv
-##tract
-##tps
+##an
+##ain
 ##ect
 ##eul
-##3th
-##hu
-##h1
+##tract
+##tps
+##xt
 ##ich
 ##do
 ##ddi
-##an
-##ain
-##volume
+##ub
+##h1
+##hub
 ##wn
-##1ss
-##xt
-##bal
 ##gr
+##se
+##sv
+##3th
+##volume
+##bal
+##1ss
 extract
 ##rect
 ##ite
@@ -467,8 +468,8 @@ extract
 ##ll32
 ##ated
 ##nodump
-shadowcopy
 ##type
+shadowcopy
 ps1
 sam
 ##cur3th
@@ -481,13 +482,13 @@ unamestr
 ##lient
 which
 ##skvolume
-##shadowcopy
 providerorder
+##shadowcopy
 mimikatz
 call
 domain
 else
-githu
+github
 global
 https
 harddi
@@ -495,8 +496,8 @@ nanodump
 pgrep
 raw
 rundll32
-s3cur3th
 sudo
+s3cur3th
 term
 vsc
 wmic
@@ -508,7 +509,6 @@ comsvcs
 directory
 accepteula
 ##skvolumeshadowcopy
-github
 globalroot
 harddiskvolumeshadowcopy
 s3cur3th1ssh1t
@@ -516,14 +516,14 @@ at
 and
 be
 cmd
-dd
 do
+dd
 dow
 dit
 dump
 dot
-es
 ed
+es
 f2
 f1
 fre
@@ -548,57 +548,56 @@ volume
 wa
 web
 x64
-##ym
-##sh
-##sd
-##so
-##sw
+##am
+##ab
+##net
+##nload
+##pass
+##pwn
+##file
+##ip
+##out
+##oke
 ##mem
 ##min
 ##mit
-##38
-##21
-##2b
-##ip
-##col
-##cont
-##client
-##pass
-##pwn
+##mgr
+##kur
 ##dmp
 ##dated
-##am
-##ab
-##kur
+##col
+##client
+##user
+##ymgr
+##wow
+##so
+##sd
+##swow
+##38
+##2b
+##21
 ##ver
 ##value
-##out
-##oke
-##user
-##net
-##nload
-##file
-##56
 ##ject
+##56
 ##ert
 ##erdump
 ##utl
 ##util
 expa
 ##ink
-sysw
-##ow64
+syswow
 exepath
+##admin
 ##pykatz
 ##ort
 lsa
 winpwn
-##admin
-res
 red
+res
+##lsa
 ##code
 ##count
-##lsa
 ##chost
 secr
 sekur
@@ -609,10 +608,11 @@ map
 pypykatz
 vssadmin
 ##proto
+##content
 count
 loc
-procdump
 ##entutl
+procdump
 scripts
 dest
 force
@@ -623,8 +623,8 @@ securityproto
 logon
 found
 line
-then
 try
+then
 githubuser
 download
 dotnet
@@ -643,8 +643,6 @@ updated
 venv
 wait
 webclient
-##ymgr
-##content
 expand
 syswow64
 secrets
@@ -663,7 +661,6 @@ by
 bac
 cl
 cle
-contro
 can
 client
 cert
@@ -677,14 +674,14 @@ go
 gw
 gre
 gse
-is
 io
 iw
+is
 imp
 ke
 kr
-mm
 mo
+mm
 mon
 mic
 mkl
@@ -696,94 +693,94 @@ own
 pol
 plea
 rem
-sr
 so
+sr
 sile
-sha
 ty
 tls
 txt
 xor
-##yn
-##sid
-##sab
-##scode
-##tm
-##ti
-##e2
-##ec
+##a3
+##a7
+##are
+##nc
+##nect
 ##ed
+##ec
+##e2
 ##e9
-##ml
-##3c
-##36
-##hex
-##is
+##pon
+##pcon
+##pen
+##port
+##ti
+##tm
+##tro
+##ft
+##fen
 ##if
+##is
 ##ib
+##lac
+##link
+##mlink
+##ring
+##du
+##dce
+##cb
 ##c5
 ##cre
-##con
 ##cdump
 ##can
-##pon
-##pen
-##port
-##pcon
-##du
-##dce
-##a7
-##a36
-##ring
-##lac
 ##ux
+##us
 ##uin
-##uscode
+##ync
+##hex
+##guin
+##sid
+##sab
+##3cb
+##88
 ##12
-##nt
-##nect
-##ft
-##fen
-##fil
-##be9
 ##6a7
+##688
 ##41
-##guin
 ##73
 ##773
-##88
 ##ation
-##atuscode
+##atus
 ##roso
+exfi
 except
-exfil
 ##inter
 ##intm
 ##ination
 ##lect
 ##leout
-##red
-syml
+symlink
 ##owke
 filename
+##adump
 ##ord
 ##olve
 property
 progr
-##alti
 ##alport
-##tcpcon
+##alti
 ##urce
-lsad
+lsadump
 win32
 state
 string
-statuscode
+status
+share
 ##active
 ##ote
 read
 repo
 realti
+##tcpcon
 ##icy
 ##core
 nettcpcon
@@ -807,12 +804,16 @@ locat
 server
 ##ingprocess
 starting
+conso
+contro
 defen
 dir
 disk
 disab
 ##pointm
 ##words
+##shed
+##showke
 ##aryco
 itemtype
 python3
@@ -820,12 +821,11 @@ python2
 servicepointm
 0x41
 account
-conso
+##lished
 ##server
-##lish
 ntdsutil
 while
-##aca36
+##aca3
 ##accessib
 ##key
 providerpath
@@ -833,8 +833,8 @@ logout
 mimipen
 fore
 linux
-this
 true
+this
 ##anager
 samfile
 elseif
@@ -844,17 +844,16 @@ atomics
 cmdkey
 dumpert
 dumpcre
-##showke
+##amfile
+##ablished
+##passwords
 ##38c5
-##2156
 ##2b2b
-##passwords
-##amfile
-##ablish
+##2156
 ##5638c5
+redcan
 respon
 resolve
-redcan
 ##codehex
 located
 localport
@@ -870,13 +869,12 @@ bypass
 back
 class
 cleartex
-control
 clientaccessib
 certutil
 done
-dcsyn
+dcsync
 encodehex
-establish
+established
 elif
 going
 gwmi
@@ -895,52 +893,51 @@ owningprocess
 policy
 please
 remote
-src
 source
+src
 silent
-shared
 type
 tls12
 xordump
-##e26a7
-##3cbe9
 ##nection
-##882156
+##e26a7
+##e92b2b
+##3cbe92b2b
+##6882156
+exfil
 exception
 ##leoutput
-symlink
 propertytype
 programfile
-lsadump
 strings
+statuscode
+shared
 realtime
 nettcpconnection
 inside
 psexec
 location
+consoleoutput
+control
 defender
 diskshadow
 disable
 servicepointmanager
-consoleoutput
 ##aca36882156
 mimipenguin
 dumpcreds
-##2b2b5638c5
-response
+##5638c5773
 redcanaryco
+response
 121dcee26a7
 adreplaccount
 cleartext
 clientaccessible
-dcsync
-established
 krshowkeymgr
 module
 microsoft
 noninteractive
-##3cbe92b2b5638c5
+##3cbe92b2b5638c5773
 programfiles
-##aca368821563cbe92b2b5638c5
-121dcee26a7aca368821563cbe92b2b5638c5
+##aca368821563cbe92b2b5638c5773
 121dcee26a7aca368821563cbe92b2b5638c5773