diff --git "a/tokenizer_config.json" "b/tokenizer_config.json"
new file mode 100644--- /dev/null
+++ "b/tokenizer_config.json"
@@ -0,0 +1,7457 @@
+{
+ "added_tokens_decoder": {
+ "0": {
+ "content": "[PAD]",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "100": {
+ "content": "[UNK]",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "101": {
+ "content": "[CLS]",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "102": {
+ "content": "[SEP]",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "103": {
+ "content": "[MASK]",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "2012": {
+ "content": "at",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "2799": {
+ "content": "route",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "28997": {
+ "content": "meek",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30522": {
+ "content": "Starloader",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30523": {
+ "content": "MarkiRAT",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30524": {
+ "content": "zwShell",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30525": {
+ "content": "Aria-body",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30526": {
+ "content": "Threat_Group-3390",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30527": {
+ "content": "JSS_Loader",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30528": {
+ "content": "Wiper",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30529": {
+ "content": "MESSAGETAP",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30530": {
+ "content": "metaMain",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30531": {
+ "content": "Kwampirs",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30532": {
+ "content": "SoreFang",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30533": {
+ "content": "MechaFlounder",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30534": {
+ "content": "dllname",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30535": {
+ "content": "SharpDisco",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30536": {
+ "content": "DropBook",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30537": {
+ "content": "BOOTRASH",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30538": {
+ "content": "C0026",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30539": {
+ "content": "CARROTBALL",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30540": {
+ "content": "SVCReady",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30541": {
+ "content": "Wizard_Spider",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30542": {
+ "content": "WINERACK",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30543": {
+ "content": "FLIPSIDE",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30544": {
+ "content": "Derusbi",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30545": {
+ "content": "RDFSNIFFER",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30546": {
+ "content": "WellMail",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30547": {
+ "content": "TinyZBot",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30548": {
+ "content": "BadPatch",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30549": {
+ "content": "Strider",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30550": {
+ "content": "Molerats",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30551": {
+ "content": "NDiskMonitor",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30552": {
+ "content": "Get2",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30553": {
+ "content": "Epic",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30554": {
+ "content": "Octopus",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30555": {
+ "content": "Magic_Hound",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30556": {
+ "content": "GravityRAT",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30557": {
+ "content": "Grandoreiro",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30558": {
+ "content": "Impacket",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30559": {
+ "content": "Night_Dragon",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30560": {
+ "content": "ChChes",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30561": {
+ "content": "POWERSTATS",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30562": {
+ "content": "MuddyWater",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30563": {
+ "content": "PinchDuke",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30564": {
+ "content": "IronNetInjector",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30565": {
+ "content": "HiddenWasp",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30566": {
+ "content": "Putter_Panda",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30567": {
+ "content": "OceanSalt",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30568": {
+ "content": "Crutch",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30569": {
+ "content": "Industroyer",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30570": {
+ "content": "netsh",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30571": {
+ "content": "Stealth_Falcon",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30572": {
+ "content": "Moafee",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30573": {
+ "content": "ROADTools",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30574": {
+ "content": "SHOTPUT",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30575": {
+ "content": "Nomadic_Octopus",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30576": {
+ "content": "CozyCar",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30577": {
+ "content": "Invoke-PSImage",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30578": {
+ "content": "Conti",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30579": {
+ "content": "RATANKBA",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30580": {
+ "content": "Dacls",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30581": {
+ "content": "CostaRicto",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30582": {
+ "content": "SysUpdate",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30583": {
+ "content": "NBTscan",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30584": {
+ "content": "ThreatNeedle",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30585": {
+ "content": "Clambling",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30586": {
+ "content": "EVILNUM",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30587": {
+ "content": "CoinTicker",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30588": {
+ "content": "Scarlet_Mimic",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30589": {
+ "content": "Silent_Librarian",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30590": {
+ "content": "APT12",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30591": {
+ "content": "Reg",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30592": {
+ "content": "Keydnap",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30593": {
+ "content": "LockerGoga",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30594": {
+ "content": "BADFLICK",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30595": {
+ "content": "Bonadan",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30596": {
+ "content": "Ramsay",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30597": {
+ "content": "Sowbug",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30598": {
+ "content": "ECCENTRICBANDWAGON",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30599": {
+ "content": "PUNCHTRACK",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30600": {
+ "content": "Duqu",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30601": {
+ "content": "NanoCore",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30602": {
+ "content": "Trojan.Mebromi",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30603": {
+ "content": "Confucius",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30604": {
+ "content": "ISMInjector",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30605": {
+ "content": "FELIXROOT",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30606": {
+ "content": "Vasport",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30607": {
+ "content": "MailSniper",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30608": {
+ "content": "TEMP.Veles",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30609": {
+ "content": "Operation_Dream_Job",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30610": {
+ "content": "Downdelph",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30611": {
+ "content": "BitPaymer",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30612": {
+ "content": "C0018",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30613": {
+ "content": "C0027",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30614": {
+ "content": "Lurid",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30615": {
+ "content": "Zeroaccess",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30616": {
+ "content": "LaZagne",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30617": {
+ "content": "Volatile_Cedar",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30618": {
+ "content": "C0010",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30619": {
+ "content": "KARAE",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30620": {
+ "content": "Pillowmint",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30621": {
+ "content": "SLOWDRIFT",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30622": {
+ "content": "MoonWind",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30623": {
+ "content": "T9000",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30624": {
+ "content": "Cleaver",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30625": {
+ "content": "Comnie",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30626": {
+ "content": "BADHATCH",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30627": {
+ "content": "Exaramel_for_Linux",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30628": {
+ "content": "Tropic_Trooper",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30629": {
+ "content": "FunnyDream",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30630": {
+ "content": "TinyTurla",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30631": {
+ "content": "GoldenSpy",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30632": {
+ "content": "EXOTIC_LILY",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30633": {
+ "content": "Ursnif",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30634": {
+ "content": "FIN4",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30635": {
+ "content": "Pteranodon",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30636": {
+ "content": "Kasidet",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30637": {
+ "content": "Kessel",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30638": {
+ "content": "Denis",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30639": {
+ "content": "RDAT",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30640": {
+ "content": "dsquery",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30641": {
+ "content": "Launch_Daemon",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30642": {
+ "content": "RawPOS",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30643": {
+ "content": "RobbinHood",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30644": {
+ "content": "LuminousMoth",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30645": {
+ "content": "Peppy",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30646": {
+ "content": "CrackMapExec",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30647": {
+ "content": "LazyScripter",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30648": {
+ "content": "Umbreon",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30649": {
+ "content": "ABK",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30650": {
+ "content": "Mosquito",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30651": {
+ "content": "Astaroth",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30652": {
+ "content": "LoudMiner",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30653": {
+ "content": "Matryoshka",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30654": {
+ "content": "Winnti_for_Linux",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30655": {
+ "content": "PsExec",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30656": {
+ "content": "Helminth",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30657": {
+ "content": "ngrok",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30658": {
+ "content": "Siloscape",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30659": {
+ "content": "4H_RAT",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30660": {
+ "content": "Ping",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30661": {
+ "content": "CORALDECK",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30662": {
+ "content": "Indrik_Spider",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30663": {
+ "content": "YAHOYAH",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30664": {
+ "content": "Sibot",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30665": {
+ "content": "PowGoop",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30666": {
+ "content": "APT19",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30667": {
+ "content": "build_downer",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30668": {
+ "content": "SUPERNOVA",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30669": {
+ "content": "NativeZone",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30670": {
+ "content": "pwdump",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30671": {
+ "content": "Tasklist",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30672": {
+ "content": "Olympic_Destroyer",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30673": {
+ "content": "Ixeshe",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30674": {
+ "content": "LookBack",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30675": {
+ "content": "Empire",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30676": {
+ "content": "Small_Sieve",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30677": {
+ "content": "Raindrop",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30678": {
+ "content": "RegDuke",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30679": {
+ "content": "WinMM",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30680": {
+ "content": "Flame",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30681": {
+ "content": "Silence",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30682": {
+ "content": "ftp",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30683": {
+ "content": "Torisma",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30684": {
+ "content": "NightClub",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30685": {
+ "content": "PowerPunch",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30686": {
+ "content": "WINDSHIELD",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30687": {
+ "content": "BISCUIT",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30688": {
+ "content": "Sandworm_Team",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30689": {
+ "content": "yty",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30690": {
+ "content": "NETWIRE",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30691": {
+ "content": "SUNBURST",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30692": {
+ "content": "RogueRobin",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30693": {
+ "content": "Kivars",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30694": {
+ "content": "HELLOKITTY",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30695": {
+ "content": "APT-C-36",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30696": {
+ "content": "GrimAgent",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30697": {
+ "content": "SNUGRIDE",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30698": {
+ "content": "STARWHALE",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30699": {
+ "content": "Mimikatz",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30700": {
+ "content": "Uroburos",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30701": {
+ "content": "Rootkit",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30702": {
+ "content": "POWERTON",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30703": {
+ "content": "Avenger",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30704": {
+ "content": "Gallmaker",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30705": {
+ "content": "Thrip",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30706": {
+ "content": "SILENTTRINITY",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30707": {
+ "content": "DealersChoice",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30708": {
+ "content": "PowerStallion",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30709": {
+ "content": "Windshift",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30710": {
+ "content": "DnsSystem",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30711": {
+ "content": "Naikon",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30712": {
+ "content": "Net",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30713": {
+ "content": "Cardinal_RAT",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30714": {
+ "content": "FruitFly",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30715": {
+ "content": "ShiftyBug",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30716": {
+ "content": "NotPetya",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30717": {
+ "content": "QUIETCANARY",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30718": {
+ "content": "DustySky",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30719": {
+ "content": "FatDuke",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30720": {
+ "content": "Brave_Prince",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30721": {
+ "content": "kworker:0/1",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30722": {
+ "content": "Catchamas",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30723": {
+ "content": "StrifeWater",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30724": {
+ "content": "TA505",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30725": {
+ "content": "Waterbear",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30726": {
+ "content": "Prestige",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30727": {
+ "content": "BOOSTWRITE",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30728": {
+ "content": "Meteor",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30729": {
+ "content": "AutoIt_backdoor",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30730": {
+ "content": "ZLib",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30731": {
+ "content": "HTTPBrowser",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30732": {
+ "content": "CreepyDrive",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30733": {
+ "content": "RawDisk",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30734": {
+ "content": "Tonto_Team",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30735": {
+ "content": "Volgmer",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30736": {
+ "content": "Operation_CuckooBees",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30737": {
+ "content": "Industroyer2",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30738": {
+ "content": "SUNSPOT",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30739": {
+ "content": "HALFBAKED",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30740": {
+ "content": "EnvyScout",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30741": {
+ "content": "Explosive",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30742": {
+ "content": "APT37",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30743": {
+ "content": "SQLRat",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30744": {
+ "content": "Fox_Kitten",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30745": {
+ "content": "Sykipot",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30746": {
+ "content": "GOLD_SOUTHFIELD",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30747": {
+ "content": "Conficker",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30748": {
+ "content": "TEARDROP",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30749": {
+ "content": "Dipsind",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30750": {
+ "content": "Calisto",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30751": {
+ "content": "Deep_Panda",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30752": {
+ "content": "OSX/Shlayer",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30753": {
+ "content": "DownPaper",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30754": {
+ "content": "TajMahal",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30755": {
+ "content": "Melcoz",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30756": {
+ "content": "Bisonal",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30757": {
+ "content": "Operation_Spalax",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30758": {
+ "content": "HEXANE",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30759": {
+ "content": "GuLoader",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30760": {
+ "content": "Leviathan",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30761": {
+ "content": "Kinsing",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30762": {
+ "content": "Remcos",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30763": {
+ "content": "HDoor",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30764": {
+ "content": "HyperBro",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30765": {
+ "content": "PipeMon",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30766": {
+ "content": "FakeM",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30767": {
+ "content": "Mafalda",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30768": {
+ "content": "Nidiran",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30769": {
+ "content": "Action_RAT",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30770": {
+ "content": "Psylo",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30771": {
+ "content": "Ragnar_Locker",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30772": {
+ "content": "Bumblebee",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30773": {
+ "content": "HTRAN",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30774": {
+ "content": "C0021",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30775": {
+ "content": "XTunnel",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30776": {
+ "content": "ThiefQuest",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30777": {
+ "content": "SeaDuke",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30778": {
+ "content": "PowerShell",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30779": {
+ "content": "Havij",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30780": {
+ "content": "Goopy",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30781": {
+ "content": "Ember_Bear",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30782": {
+ "content": "ShimRat",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30783": {
+ "content": "DarkHydrus",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30784": {
+ "content": "TINYTYPHON",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30785": {
+ "content": "CORESHELL",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30786": {
+ "content": "Netwalker",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30787": {
+ "content": "KEYMARBLE",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30788": {
+ "content": "Operation_Sharpshooter",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30789": {
+ "content": "Ecipekac",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30790": {
+ "content": "Neoichor",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30791": {
+ "content": "Ferocious_Kitten",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30792": {
+ "content": "HARDRAIN",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30793": {
+ "content": "Gorgon_Group",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30794": {
+ "content": "BACKSPACE",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30795": {
+ "content": "LitePower",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30796": {
+ "content": "Kazuar",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30797": {
+ "content": "Woody_RAT",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30798": {
+ "content": "OSInfo",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30799": {
+ "content": "CloudDuke",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30800": {
+ "content": "OwaAuth",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30801": {
+ "content": "DanBot",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30802": {
+ "content": "APT32",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30803": {
+ "content": "Naid",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30804": {
+ "content": "Azorult",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30805": {
+ "content": "Carbanak",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30806": {
+ "content": "VBShower",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30807": {
+ "content": "China_Chopper",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30808": {
+ "content": "FIN8",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30809": {
+ "content": "Smoke_Loader",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30810": {
+ "content": "ZxxZ",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30811": {
+ "content": "APT39",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30812": {
+ "content": "Mivast",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30813": {
+ "content": "Hancitor",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30814": {
+ "content": "BADCALL",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30815": {
+ "content": "CharmPower",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30816": {
+ "content": "Ruler",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30817": {
+ "content": "Javali",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30818": {
+ "content": "Briba",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30819": {
+ "content": "Ebury",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30820": {
+ "content": "Pisloader",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30821": {
+ "content": "Dark_Caracal",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30822": {
+ "content": "StrongPity",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30823": {
+ "content": "TURNEDUP",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30824": {
+ "content": "Okrum",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30825": {
+ "content": "CreepySnail",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30826": {
+ "content": "More_eggs",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30827": {
+ "content": "Daserf",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30828": {
+ "content": "Zebrocy",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30829": {
+ "content": "PLAINTEE",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30830": {
+ "content": "Maze",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30831": {
+ "content": "HIDEDRV",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30832": {
+ "content": "Winnti_Group",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30833": {
+ "content": "Lucifer",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30834": {
+ "content": "Sardonic",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30835": {
+ "content": "FIN5",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30836": {
+ "content": "Evilnum",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30837": {
+ "content": "BONDUPDATER",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30838": {
+ "content": "Carbon",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30839": {
+ "content": "PLATINUM",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30840": {
+ "content": "WarzoneRAT",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30841": {
+ "content": "pngdowner",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30842": {
+ "content": "Threat_Group-1314",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30843": {
+ "content": "P2P_ZeuS",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30844": {
+ "content": "FLASHFLOOD",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30845": {
+ "content": "Linfo",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30846": {
+ "content": "Caterpillar_WebShell",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30847": {
+ "content": "FrameworkPOS",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30848": {
+ "content": "HotCroissant",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30849": {
+ "content": "POWERSOURCE",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30850": {
+ "content": "Attor",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30851": {
+ "content": "Peirates",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30852": {
+ "content": "Pacu",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30853": {
+ "content": "SHUTTERSPEED",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30854": {
+ "content": "njRAT",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30855": {
+ "content": "Rising_Sun",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30856": {
+ "content": "USBStealer",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30857": {
+ "content": "Chaes",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30858": {
+ "content": "Mongall",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30859": {
+ "content": "PHOREAL",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30860": {
+ "content": "BBSRAT",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30861": {
+ "content": "PS1",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30862": {
+ "content": "KOCTOPUS",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30863": {
+ "content": "POSHSPY",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30864": {
+ "content": "InvisiMole",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30865": {
+ "content": "LiteDuke",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30866": {
+ "content": "Agent.btz",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30867": {
+ "content": "PolyglotDuke",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30868": {
+ "content": "Poseidon_Group",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30869": {
+ "content": "DCSrv",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30870": {
+ "content": "Saint_Bot",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30871": {
+ "content": "CaddyWiper",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30872": {
+ "content": "Chaos",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30873": {
+ "content": "Earth_Lusca",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30874": {
+ "content": "Whitefly",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30875": {
+ "content": "JHUHUGIT",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30876": {
+ "content": "Wiarp",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30877": {
+ "content": "Cryptoistic",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30878": {
+ "content": "VERMIN",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30879": {
+ "content": "SDBbot",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30880": {
+ "content": "MiniDuke",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30881": {
+ "content": "RARSTONE",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30882": {
+ "content": "Sakula",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30883": {
+ "content": "Ke3chang",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30884": {
+ "content": "BADNEWS",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30885": {
+ "content": "IcedID",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30886": {
+ "content": "Zeus_Panda",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30887": {
+ "content": "StreamEx",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30888": {
+ "content": "Dtrack",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30889": {
+ "content": "WhisperGate",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30890": {
+ "content": "Nerex",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30891": {
+ "content": "APT16",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30892": {
+ "content": "Miner-C",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30893": {
+ "content": "Skeleton_Key",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30894": {
+ "content": "GoldFinder",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30895": {
+ "content": "Trojan.Karagany",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30896": {
+ "content": "Rubeus",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30897": {
+ "content": "Dridex",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30898": {
+ "content": "BS2005",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30899": {
+ "content": "Operation_Wocao",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30900": {
+ "content": "PROMETHIUM",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30901": {
+ "content": "POLONIUM",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30902": {
+ "content": "APT1",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30903": {
+ "content": "TYPEFRAME",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30904": {
+ "content": "Rover",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30905": {
+ "content": "Proton",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30906": {
+ "content": "CSPY_Downloader",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30907": {
+ "content": "ZeroT",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30908": {
+ "content": "Cyclops_Blink",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30909": {
+ "content": "certutil",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30910": {
+ "content": "SolarWinds_Compromise",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30911": {
+ "content": "ShadowPad",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30912": {
+ "content": "Egregor",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30913": {
+ "content": "ASPXSpy",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30914": {
+ "content": "HOMEFRY",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30915": {
+ "content": "LAPSUS$",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30916": {
+ "content": "BLINDINGCAN",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30917": {
+ "content": "TA551",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30918": {
+ "content": "Komplex",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30919": {
+ "content": "SideCopy",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30920": {
+ "content": "CARROTBAT",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30921": {
+ "content": "USBferry",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30922": {
+ "content": "WastedLocker",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30923": {
+ "content": "Fgdump",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30924": {
+ "content": "BoomBox",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30925": {
+ "content": "Bundlore",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30926": {
+ "content": "SideTwist",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30927": {
+ "content": "CookieMiner",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30928": {
+ "content": "Turian",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30929": {
+ "content": "KEYPLUG",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30930": {
+ "content": "P.A.S._Webshell",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30931": {
+ "content": "KOPILUWAK",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30932": {
+ "content": "PUNCHBUGGY",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30933": {
+ "content": "Heyoka_Backdoor",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30934": {
+ "content": "LightNeuron",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30935": {
+ "content": "Mori",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30936": {
+ "content": "Hildegard",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30937": {
+ "content": "XCSSET",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30938": {
+ "content": "Felismus",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30939": {
+ "content": "Elderwood",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30940": {
+ "content": "OSX_OCEANLOTUS.D",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30941": {
+ "content": "httpclient",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30942": {
+ "content": "Arp",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30943": {
+ "content": "Ajax_Security_Team",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30944": {
+ "content": "BendyBear",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30945": {
+ "content": "Blue_Mockingbird",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30946": {
+ "content": "Chrommme",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30947": {
+ "content": "Kimsuky",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30948": {
+ "content": "XAgentOSX",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30949": {
+ "content": "BackConfig",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30950": {
+ "content": "AuTo_Stealer",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30951": {
+ "content": "NETEAGLE",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30952": {
+ "content": "GCMAN",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30953": {
+ "content": "Pandora",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30954": {
+ "content": "CopyKittens",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30955": {
+ "content": "Zox",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30956": {
+ "content": "MobileOrder",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30957": {
+ "content": "Cadelspy",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30958": {
+ "content": "RemoteCMD",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30959": {
+ "content": "Revenge_RAT",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30960": {
+ "content": "KONNI",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30961": {
+ "content": "GoldMax",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30962": {
+ "content": "CCBkdr",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30963": {
+ "content": "APT18",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30964": {
+ "content": "RedLeaves",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30965": {
+ "content": "GRIFFON",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30966": {
+ "content": "BloodHound",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30967": {
+ "content": "P8RAT",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30968": {
+ "content": "TrickBot",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30969": {
+ "content": "OopsIE",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30970": {
+ "content": "SHIPSHAPE",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30971": {
+ "content": "AuditCred",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30972": {
+ "content": "Cobalt_Strike",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30973": {
+ "content": "ZIRCONIUM",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30974": {
+ "content": "H1N1",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30975": {
+ "content": "CHOPSTICK",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30976": {
+ "content": "C0017",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30977": {
+ "content": "Gelsemium",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30978": {
+ "content": "Socksbot",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30979": {
+ "content": "Exaramel_for_Windows",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30980": {
+ "content": "TDTESS",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30981": {
+ "content": "Equation",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30982": {
+ "content": "Cherry_Picker",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30983": {
+ "content": "Expand",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30984": {
+ "content": "Crimson",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30985": {
+ "content": "VaporRage",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30986": {
+ "content": "GALLIUM",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30987": {
+ "content": "WEBC2",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30988": {
+ "content": "Moses_Staff",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30989": {
+ "content": "SHARPSTATS",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30990": {
+ "content": "PittyTiger",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30991": {
+ "content": "Cobalt_Group",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30992": {
+ "content": "AppleScript",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30993": {
+ "content": "Mis-Type",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30994": {
+ "content": "UBoatRAT",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30995": {
+ "content": "SombRAT",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30996": {
+ "content": "netstat",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30997": {
+ "content": "HAWKBALL",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30998": {
+ "content": "FoggyWeb",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "30999": {
+ "content": "Wevtutil",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31000": {
+ "content": "RunningRAT",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31001": {
+ "content": "RotaJakiro",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31002": {
+ "content": "PID",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31003": {
+ "content": "Winexe",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31004": {
+ "content": "Black_Basta",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31005": {
+ "content": "SUGARUSH",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31006": {
+ "content": "StoneDrill",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31007": {
+ "content": "TA459",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31008": {
+ "content": "AsyncRAT",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31009": {
+ "content": "BITTER",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31010": {
+ "content": "Higaisa",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31011": {
+ "content": "RGDoor",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31012": {
+ "content": "FIN10",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31013": {
+ "content": "RemoteUtilities",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31014": {
+ "content": "KillDisk",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31015": {
+ "content": "CostaBricks",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31016": {
+ "content": "AvosLocker",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31017": {
+ "content": "APT33",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31018": {
+ "content": "sqlmap",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31019": {
+ "content": "KOMPROGO",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31020": {
+ "content": "ROCKBOOT",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31021": {
+ "content": "ELMER",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31022": {
+ "content": "ObliqueRAT",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31023": {
+ "content": "Aquatic_Panda",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31024": {
+ "content": "DEATHRANSOM",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31025": {
+ "content": "Elise",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31026": {
+ "content": "Lslsass",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31027": {
+ "content": "ConnectWise",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31028": {
+ "content": "BUBBLEWRAP",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31029": {
+ "content": "Clop",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31030": {
+ "content": "Turla",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31031": {
+ "content": "S-Type",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31032": {
+ "content": "xCaon",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31033": {
+ "content": "Janicab",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31034": {
+ "content": "OutSteel",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31035": {
+ "content": "JCry",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31036": {
+ "content": "3PARA_RAT",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31037": {
+ "content": "The_White_Company",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31038": {
+ "content": "Unknown_Logger",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31039": {
+ "content": "SodaMaster",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31040": {
+ "content": "Flagpro",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31041": {
+ "content": "Frankenstein",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31042": {
+ "content": "AppleJeus",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31043": {
+ "content": "Snip3",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31044": {
+ "content": "spwebmember",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31045": {
+ "content": "AdFind",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31046": {
+ "content": "gsecdump",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31047": {
+ "content": "Axiom",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31048": {
+ "content": "admin@338",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31049": {
+ "content": "Operation_Ghost",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31050": {
+ "content": "down_new",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31051": {
+ "content": "TA2541",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31052": {
+ "content": "Sys10",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31053": {
+ "content": "TSCookie",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31054": {
+ "content": "SYNful_Knock",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31055": {
+ "content": "SilverTerrier",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31056": {
+ "content": "Emotet",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31057": {
+ "content": "InnaputRAT",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31058": {
+ "content": "APT28",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31059": {
+ "content": "MoleNet",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31060": {
+ "content": "Mythic",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31061": {
+ "content": "PlugX",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31062": {
+ "content": "Suckfly",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31063": {
+ "content": "OnionDuke",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31064": {
+ "content": "Squirrelwaffle",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31065": {
+ "content": "POORAIM",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31066": {
+ "content": "Agent_Tesla",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31067": {
+ "content": "Xbash",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31068": {
+ "content": "iKitten",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31069": {
+ "content": "Bandook",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31070": {
+ "content": "Lizar",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31071": {
+ "content": "SamSam",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31072": {
+ "content": "ccf32",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31073": {
+ "content": "Windows_Credential_Editor",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31074": {
+ "content": "Responder",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31075": {
+ "content": "MoustachedBouncer",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31076": {
+ "content": "TeamTNT",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31077": {
+ "content": "Babuk",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31078": {
+ "content": "Orz",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31079": {
+ "content": "ifconfig",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31080": {
+ "content": "Tarrask",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31081": {
+ "content": "GLOOXMAIL",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31082": {
+ "content": "Tomiris",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31083": {
+ "content": "Ryuk",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31084": {
+ "content": "esentutl",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31085": {
+ "content": "MacSpy",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31086": {
+ "content": "Rancor",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31087": {
+ "content": "Kerrdown",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31088": {
+ "content": "PingPull",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31089": {
+ "content": "Misdat",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31090": {
+ "content": "Out1",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31091": {
+ "content": "Spark",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31092": {
+ "content": "Pass-The-Hash_Toolkit",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31093": {
+ "content": "Taidoor",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31094": {
+ "content": "Brute_Ratel_C4",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31095": {
+ "content": "UACMe",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31096": {
+ "content": "OLDBAIT",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31097": {
+ "content": "IndigoZebra",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31098": {
+ "content": "Dok",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31099": {
+ "content": "Hikit",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31100": {
+ "content": "CallMe",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31101": {
+ "content": "DEADEYE",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31102": {
+ "content": "Kevin",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31103": {
+ "content": "DarkTortilla",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31104": {
+ "content": "Rclone",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31105": {
+ "content": "Pony",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31106": {
+ "content": "QakBot",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31107": {
+ "content": "Metador",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31108": {
+ "content": "RTM",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31109": {
+ "content": "Dyre",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31110": {
+ "content": "gh0st_RAT",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31111": {
+ "content": "Hydraq",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31112": {
+ "content": "WannaCry",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31113": {
+ "content": "WellMess",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31114": {
+ "content": "IceApple",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31115": {
+ "content": "KGH_SPY",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31116": {
+ "content": "HAMMERTOSS",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31117": {
+ "content": "Carberp",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31118": {
+ "content": "HermeticWizard",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31119": {
+ "content": "PLEAD",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31120": {
+ "content": "APT30",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31121": {
+ "content": "adbupd",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31122": {
+ "content": "BlackCat",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31123": {
+ "content": "Orangeworm",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31124": {
+ "content": "Doki",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31125": {
+ "content": "HermeticWiper",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31126": {
+ "content": "Darkhotel",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31127": {
+ "content": "RIPTIDE",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31128": {
+ "content": "Proxysvc",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31129": {
+ "content": "Forfiles",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31130": {
+ "content": "Group5",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31131": {
+ "content": "Hacking_Team_UEFI_Rootkit",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31132": {
+ "content": "Cobian_RAT",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31133": {
+ "content": "KeyBoy",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31134": {
+ "content": "AppleSeed",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31135": {
+ "content": "Windigo",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31136": {
+ "content": "Shamoon",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31137": {
+ "content": "ipconfig",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31138": {
+ "content": "SDelete",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31139": {
+ "content": "Operation_Dust_Storm",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31140": {
+ "content": "SharpStage",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31141": {
+ "content": "SpeakUp",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31142": {
+ "content": "PoisonIvy",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31143": {
+ "content": "Bazar",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31144": {
+ "content": "Fysbis",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31145": {
+ "content": "SLOTHFULMEDIA",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31146": {
+ "content": "CosmicDuke",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31147": {
+ "content": "JPIN",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31148": {
+ "content": "Milan",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31149": {
+ "content": "Koadic",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31150": {
+ "content": "Transparent_Tribe",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31151": {
+ "content": "ZxShell",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31152": {
+ "content": "macOS.OSAMiner",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31153": {
+ "content": "Shark",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31154": {
+ "content": "FYAnti",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31155": {
+ "content": "APT3",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31156": {
+ "content": "Diavol",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31157": {
+ "content": "Nltest",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31158": {
+ "content": "Net_Crawler",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31159": {
+ "content": "schtasks",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31160": {
+ "content": "C0011",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31161": {
+ "content": "Cachedump",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31162": {
+ "content": "jRAT",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31163": {
+ "content": "Bad_Rabbit",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31164": {
+ "content": "Gazer",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31165": {
+ "content": "Rocke",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31166": {
+ "content": "Gamaredon_Group",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31167": {
+ "content": "Chimera",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31168": {
+ "content": "Wingbird",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31169": {
+ "content": "Inception",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31170": {
+ "content": "DarkWatchman",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31171": {
+ "content": "Stuxnet",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31172": {
+ "content": "REvil",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31173": {
+ "content": "menuPass",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31174": {
+ "content": "DDKONG",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31175": {
+ "content": "Donut",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31176": {
+ "content": "CURIUM",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31177": {
+ "content": "PyDCrypt",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31178": {
+ "content": "MirageFox",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31179": {
+ "content": "Dragonfly",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31180": {
+ "content": "RCSession",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31181": {
+ "content": "hcdLoader",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31182": {
+ "content": "EKANS",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31183": {
+ "content": "Sliver",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31184": {
+ "content": "SPACESHIP",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31185": {
+ "content": "Backdoor.Oldrea",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31186": {
+ "content": "NanHaiShu",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31187": {
+ "content": "Regin",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31188": {
+ "content": "Patchwork",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31189": {
+ "content": "SEASHARPEE",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31190": {
+ "content": "PowerDuke",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31191": {
+ "content": "C0015",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31192": {
+ "content": "Rifdoor",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31193": {
+ "content": "FALLCHILL",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31194": {
+ "content": "HOPLIGHT",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31195": {
+ "content": "Amadey",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31196": {
+ "content": "Lazarus_Group",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31197": {
+ "content": "Truvasys",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31198": {
+ "content": "KernelCallbackTable",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31199": {
+ "content": "AADInternals",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31200": {
+ "content": "FIN6",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31201": {
+ "content": "FlawedGrace",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31202": {
+ "content": "Disco",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31203": {
+ "content": "QuietSieve",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31204": {
+ "content": "Aoqin_Dragon",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31205": {
+ "content": "SynAck",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31206": {
+ "content": "TEXTMATE",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31207": {
+ "content": "GreyEnergy",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31208": {
+ "content": "Lokibot",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31209": {
+ "content": "Seth-Locker",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31210": {
+ "content": "CrossRAT",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31211": {
+ "content": "BabyShark",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31212": {
+ "content": "BLACKCOFFEE",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31213": {
+ "content": "CALENDAR",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31214": {
+ "content": "OilRig",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31215": {
+ "content": "PoetRAT",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31216": {
+ "content": "TrailBlazer",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31217": {
+ "content": "LoJax",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31218": {
+ "content": "BoxCaon",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31219": {
+ "content": "Reaver",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31220": {
+ "content": "Pysa",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31221": {
+ "content": "2015_Ukraine_Electric_Power_Attack",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31222": {
+ "content": "PowerLess",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31223": {
+ "content": "HAFNIUM",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31224": {
+ "content": "SMOKEDHAM",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31225": {
+ "content": "UPPERCUT",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31226": {
+ "content": "TAINTEDSCRIBE",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31227": {
+ "content": "Chinoxy",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31228": {
+ "content": "Power_Loader",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31229": {
+ "content": "xCmd",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31230": {
+ "content": "nbtstat",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31231": {
+ "content": "Penquin",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31232": {
+ "content": "Micropsia",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31233": {
+ "content": "PoshC2",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31234": {
+ "content": "Operation_Honeybee",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31235": {
+ "content": "Prikormka",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31236": {
+ "content": "Green_Lambert",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31237": {
+ "content": "Linux_Rabbit",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31238": {
+ "content": "Anchor",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31239": {
+ "content": "Avaddon",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31240": {
+ "content": "Cannon",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31241": {
+ "content": "Ferocious",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31242": {
+ "content": "FIN13",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31243": {
+ "content": "Metamorfo",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31244": {
+ "content": "Machete",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31245": {
+ "content": "BlackMould",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31246": {
+ "content": "Kobalos",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31247": {
+ "content": "Pay2Key",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31248": {
+ "content": "ServHelper",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31249": {
+ "content": "DOGCALL",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31250": {
+ "content": "ADVSTORESHELL",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31251": {
+ "content": "ComRAT",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31252": {
+ "content": "2016_Ukraine_Electric_Power_Attack",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31253": {
+ "content": "ProLock",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31254": {
+ "content": "Bankshot",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31255": {
+ "content": "BITSAdmin",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31256": {
+ "content": "ShimRatReporter",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31257": {
+ "content": "Cuba",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31258": {
+ "content": "WindTail",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31259": {
+ "content": "Seasalt",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31260": {
+ "content": "Final1stspy",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31261": {
+ "content": "Tor",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31262": {
+ "content": "Emissary",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31263": {
+ "content": "PowerShower",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31264": {
+ "content": "BLUELIGHT",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31265": {
+ "content": "Leafminer",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31266": {
+ "content": "PowerSploit",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31267": {
+ "content": "Imminent_Monitor",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31268": {
+ "content": "Mofang",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31269": {
+ "content": "ANDROMEDA",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31270": {
+ "content": "MacMa",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31271": {
+ "content": "SYSCON",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31272": {
+ "content": "Launch_Agent",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31273": {
+ "content": "Mustang_Panda",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31274": {
+ "content": "Scattered_Spider",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31275": {
+ "content": "FlawedAmmyy",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31276": {
+ "content": "BlackOasis",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31277": {
+ "content": "Sidewinder",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31278": {
+ "content": "cmd",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31279": {
+ "content": "PcShare",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31280": {
+ "content": "SUGARDUMP",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31281": {
+ "content": "Nebulae",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31282": {
+ "content": "BlackTech",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31283": {
+ "content": "APT29",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31284": {
+ "content": "QuasarRAT",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31285": {
+ "content": "Winnti_for_Windows",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31286": {
+ "content": "Pupy",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31287": {
+ "content": "QUIETEXIT",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31288": {
+ "content": "NavRAT",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31289": {
+ "content": "SslMM",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31290": {
+ "content": "Drovorub",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31291": {
+ "content": "APT41",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31292": {
+ "content": "Systeminfo",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31293": {
+ "content": "MURKYTOP",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31294": {
+ "content": "Skidmap",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31295": {
+ "content": "DRATzarus",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31296": {
+ "content": "DarkVishnya",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31297": {
+ "content": "BlackEnergy",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31298": {
+ "content": "QUADAGENT",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31299": {
+ "content": "Gold_Dragon",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31300": {
+ "content": "MCMD",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31301": {
+ "content": "Pasam",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31302": {
+ "content": "Royal",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31303": {
+ "content": "ROKRAT",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31304": {
+ "content": "BRONZE_BUTLER",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31305": {
+ "content": "Remexi",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31306": {
+ "content": "BBK",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31307": {
+ "content": "Valak",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31308": {
+ "content": "LOWBALL",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31309": {
+ "content": "FIVEHANDS",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31310": {
+ "content": "Remsec",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31311": {
+ "content": "EvilGrab",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31312": {
+ "content": "MegaCortex",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31313": {
+ "content": "Hi-Zor",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31314": {
+ "content": "DarkComet",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31315": {
+ "content": "BackdoorDiplomacy",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31316": {
+ "content": "FinFisher",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31317": {
+ "content": "HyperStack",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31318": {
+ "content": "RainyDay",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31319": {
+ "content": "SOUNDBITE",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31320": {
+ "content": "FIN7",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31321": {
+ "content": "APT38",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31322": {
+ "content": "MimiPenguin",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31323": {
+ "content": "APT17",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31324": {
+ "content": "NOKKI",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31325": {
+ "content": "GeminiDuke",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31326": {
+ "content": "Volt_Typhoon",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31327": {
+ "content": "WIRTE",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31328": {
+ "content": "Andariel",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31329": {
+ "content": "SpicyOmelette",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31330": {
+ "content": "EvilBunny",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31331": {
+ "content": "POWRUNER",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31332": {
+ "content": "NetTraveler",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31333": {
+ "content": "",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31334": {
+ "content": "",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31335": {
+ "content": "",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31336": {
+ "content": "",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31337": {
+ "content": "",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31338": {
+ "content": "",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31339": {
+ "content": "",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ },
+ "31340": {
+ "content": "",
+ "lstrip": false,
+ "normalized": false,
+ "rstrip": false,
+ "single_word": false,
+ "special": true
+ }
+ },
+ "additional_special_tokens": [
+ "Starloader",
+ "MarkiRAT",
+ "zwShell",
+ "Aria-body",
+ "Threat_Group-3390",
+ "JSS_Loader",
+ "Wiper",
+ "MESSAGETAP",
+ "metaMain",
+ "Kwampirs",
+ "SoreFang",
+ "MechaFlounder",
+ "dllname",
+ "SharpDisco",
+ "DropBook",
+ "BOOTRASH",
+ "C0026",
+ "CARROTBALL",
+ "SVCReady",
+ "Wizard_Spider",
+ "WINERACK",
+ "FLIPSIDE",
+ "Derusbi",
+ "RDFSNIFFER",
+ "WellMail",
+ "TinyZBot",
+ "BadPatch",
+ "Strider",
+ "Molerats",
+ "NDiskMonitor",
+ "Get2",
+ "Epic",
+ "Octopus",
+ "Magic_Hound",
+ "GravityRAT",
+ "Grandoreiro",
+ "Impacket",
+ "Night_Dragon",
+ "ChChes",
+ "POWERSTATS",
+ "MuddyWater",
+ "PinchDuke",
+ "IronNetInjector",
+ "HiddenWasp",
+ "Putter_Panda",
+ "OceanSalt",
+ "Crutch",
+ "Industroyer",
+ "netsh",
+ "Stealth_Falcon",
+ "Moafee",
+ "ROADTools",
+ "SHOTPUT",
+ "Nomadic_Octopus",
+ "CozyCar",
+ "Invoke-PSImage",
+ "Conti",
+ "RATANKBA",
+ "Dacls",
+ "CostaRicto",
+ "SysUpdate",
+ "NBTscan",
+ "ThreatNeedle",
+ "Clambling",
+ "EVILNUM",
+ "CoinTicker",
+ "Scarlet_Mimic",
+ "Silent_Librarian",
+ "APT12",
+ "Reg",
+ "Keydnap",
+ "LockerGoga",
+ "BADFLICK",
+ "Bonadan",
+ "Ramsay",
+ "Sowbug",
+ "ECCENTRICBANDWAGON",
+ "PUNCHTRACK",
+ "Duqu",
+ "NanoCore",
+ "Trojan.Mebromi",
+ "Confucius",
+ "ISMInjector",
+ "FELIXROOT",
+ "Vasport",
+ "MailSniper",
+ "TEMP.Veles",
+ "Operation_Dream_Job",
+ "Downdelph",
+ "BitPaymer",
+ "C0018",
+ "C0027",
+ "Lurid",
+ "Zeroaccess",
+ "LaZagne",
+ "Volatile_Cedar",
+ "C0010",
+ "KARAE",
+ "Pillowmint",
+ "SLOWDRIFT",
+ "MoonWind",
+ "T9000",
+ "Cleaver",
+ "Comnie",
+ "BADHATCH",
+ "Exaramel_for_Linux",
+ "Tropic_Trooper",
+ "FunnyDream",
+ "TinyTurla",
+ "GoldenSpy",
+ "EXOTIC_LILY",
+ "Ursnif",
+ "FIN4",
+ "Pteranodon",
+ "Kasidet",
+ "Kessel",
+ "Denis",
+ "RDAT",
+ "dsquery",
+ "Launch_Daemon",
+ "RawPOS",
+ "RobbinHood",
+ "LuminousMoth",
+ "Peppy",
+ "CrackMapExec",
+ "LazyScripter",
+ "Umbreon",
+ "ABK",
+ "Mosquito",
+ "Astaroth",
+ "LoudMiner",
+ "Matryoshka",
+ "Winnti_for_Linux",
+ "PsExec",
+ "Helminth",
+ "ngrok",
+ "Siloscape",
+ "4H_RAT",
+ "Ping",
+ "CORALDECK",
+ "Indrik_Spider",
+ "YAHOYAH",
+ "Sibot",
+ "PowGoop",
+ "APT19",
+ "build_downer",
+ "SUPERNOVA",
+ "NativeZone",
+ "pwdump",
+ "Tasklist",
+ "Olympic_Destroyer",
+ "Ixeshe",
+ "LookBack",
+ "Empire",
+ "Small_Sieve",
+ "Raindrop",
+ "RegDuke",
+ "WinMM",
+ "Flame",
+ "Silence",
+ "ftp",
+ "Torisma",
+ "NightClub",
+ "PowerPunch",
+ "WINDSHIELD",
+ "BISCUIT",
+ "Sandworm_Team",
+ "yty",
+ "NETWIRE",
+ "SUNBURST",
+ "RogueRobin",
+ "Kivars",
+ "HELLOKITTY",
+ "APT-C-36",
+ "GrimAgent",
+ "SNUGRIDE",
+ "STARWHALE",
+ "Mimikatz",
+ "Uroburos",
+ "Rootkit",
+ "POWERTON",
+ "Avenger",
+ "Gallmaker",
+ "Thrip",
+ "SILENTTRINITY",
+ "DealersChoice",
+ "PowerStallion",
+ "Windshift",
+ "DnsSystem",
+ "Naikon",
+ "Net",
+ "Cardinal_RAT",
+ "FruitFly",
+ "ShiftyBug",
+ "NotPetya",
+ "QUIETCANARY",
+ "DustySky",
+ "FatDuke",
+ "Brave_Prince",
+ "kworker:0/1",
+ "Catchamas",
+ "StrifeWater",
+ "TA505",
+ "Waterbear",
+ "Prestige",
+ "BOOSTWRITE",
+ "Meteor",
+ "AutoIt_backdoor",
+ "ZLib",
+ "HTTPBrowser",
+ "CreepyDrive",
+ "RawDisk",
+ "Tonto_Team",
+ "Volgmer",
+ "Operation_CuckooBees",
+ "Industroyer2",
+ "SUNSPOT",
+ "HALFBAKED",
+ "EnvyScout",
+ "Explosive",
+ "APT37",
+ "SQLRat",
+ "Fox_Kitten",
+ "Sykipot",
+ "GOLD_SOUTHFIELD",
+ "Conficker",
+ "TEARDROP",
+ "Dipsind",
+ "Calisto",
+ "Deep_Panda",
+ "OSX/Shlayer",
+ "DownPaper",
+ "TajMahal",
+ "Melcoz",
+ "Bisonal",
+ "Operation_Spalax",
+ "HEXANE",
+ "GuLoader",
+ "Leviathan",
+ "Kinsing",
+ "Remcos",
+ "HDoor",
+ "HyperBro",
+ "PipeMon",
+ "FakeM",
+ "Mafalda",
+ "Nidiran",
+ "Action_RAT",
+ "Psylo",
+ "Ragnar_Locker",
+ "Bumblebee",
+ "HTRAN",
+ "C0021",
+ "XTunnel",
+ "ThiefQuest",
+ "SeaDuke",
+ "PowerShell",
+ "Havij",
+ "Goopy",
+ "Ember_Bear",
+ "ShimRat",
+ "DarkHydrus",
+ "TINYTYPHON",
+ "CORESHELL",
+ "Netwalker",
+ "KEYMARBLE",
+ "Operation_Sharpshooter",
+ "Ecipekac",
+ "Neoichor",
+ "Ferocious_Kitten",
+ "HARDRAIN",
+ "Gorgon_Group",
+ "BACKSPACE",
+ "LitePower",
+ "Kazuar",
+ "Woody_RAT",
+ "OSInfo",
+ "CloudDuke",
+ "OwaAuth",
+ "DanBot",
+ "APT32",
+ "Naid",
+ "Azorult",
+ "Carbanak",
+ "VBShower",
+ "China_Chopper",
+ "FIN8",
+ "Smoke_Loader",
+ "ZxxZ",
+ "APT39",
+ "Mivast",
+ "Hancitor",
+ "BADCALL",
+ "CharmPower",
+ "Ruler",
+ "Javali",
+ "Briba",
+ "Ebury",
+ "Pisloader",
+ "Dark_Caracal",
+ "StrongPity",
+ "TURNEDUP",
+ "Okrum",
+ "CreepySnail",
+ "More_eggs",
+ "Daserf",
+ "Zebrocy",
+ "PLAINTEE",
+ "Maze",
+ "HIDEDRV",
+ "Winnti_Group",
+ "Lucifer",
+ "Sardonic",
+ "FIN5",
+ "Evilnum",
+ "BONDUPDATER",
+ "Carbon",
+ "PLATINUM",
+ "WarzoneRAT",
+ "pngdowner",
+ "Threat_Group-1314",
+ "P2P_ZeuS",
+ "FLASHFLOOD",
+ "Linfo",
+ "Caterpillar_WebShell",
+ "FrameworkPOS",
+ "HotCroissant",
+ "POWERSOURCE",
+ "Attor",
+ "Peirates",
+ "Pacu",
+ "SHUTTERSPEED",
+ "njRAT",
+ "Rising_Sun",
+ "USBStealer",
+ "Chaes",
+ "Mongall",
+ "PHOREAL",
+ "BBSRAT",
+ "PS1",
+ "KOCTOPUS",
+ "POSHSPY",
+ "InvisiMole",
+ "LiteDuke",
+ "Agent.btz",
+ "PolyglotDuke",
+ "Poseidon_Group",
+ "DCSrv",
+ "Saint_Bot",
+ "CaddyWiper",
+ "Chaos",
+ "Earth_Lusca",
+ "Whitefly",
+ "JHUHUGIT",
+ "Wiarp",
+ "Cryptoistic",
+ "VERMIN",
+ "SDBbot",
+ "MiniDuke",
+ "RARSTONE",
+ "Sakula",
+ "Ke3chang",
+ "BADNEWS",
+ "IcedID",
+ "Zeus_Panda",
+ "StreamEx",
+ "Dtrack",
+ "WhisperGate",
+ "Nerex",
+ "APT16",
+ "at",
+ "Miner-C",
+ "Skeleton_Key",
+ "GoldFinder",
+ "Trojan.Karagany",
+ "Rubeus",
+ "Dridex",
+ "BS2005",
+ "Operation_Wocao",
+ "PROMETHIUM",
+ "POLONIUM",
+ "APT1",
+ "TYPEFRAME",
+ "Rover",
+ "Proton",
+ "CSPY_Downloader",
+ "ZeroT",
+ "Cyclops_Blink",
+ "certutil",
+ "SolarWinds_Compromise",
+ "ShadowPad",
+ "Egregor",
+ "ASPXSpy",
+ "HOMEFRY",
+ "LAPSUS$",
+ "BLINDINGCAN",
+ "TA551",
+ "Komplex",
+ "SideCopy",
+ "CARROTBAT",
+ "USBferry",
+ "WastedLocker",
+ "Fgdump",
+ "BoomBox",
+ "Bundlore",
+ "SideTwist",
+ "CookieMiner",
+ "Turian",
+ "KEYPLUG",
+ "P.A.S._Webshell",
+ "KOPILUWAK",
+ "PUNCHBUGGY",
+ "Heyoka_Backdoor",
+ "LightNeuron",
+ "Mori",
+ "Hildegard",
+ "XCSSET",
+ "Felismus",
+ "Elderwood",
+ "OSX_OCEANLOTUS.D",
+ "httpclient",
+ "Arp",
+ "Ajax_Security_Team",
+ "BendyBear",
+ "Blue_Mockingbird",
+ "Chrommme",
+ "Kimsuky",
+ "XAgentOSX",
+ "BackConfig",
+ "AuTo_Stealer",
+ "NETEAGLE",
+ "GCMAN",
+ "Pandora",
+ "CopyKittens",
+ "Zox",
+ "MobileOrder",
+ "Cadelspy",
+ "RemoteCMD",
+ "Revenge_RAT",
+ "KONNI",
+ "GoldMax",
+ "CCBkdr",
+ "APT18",
+ "RedLeaves",
+ "GRIFFON",
+ "BloodHound",
+ "P8RAT",
+ "TrickBot",
+ "OopsIE",
+ "SHIPSHAPE",
+ "AuditCred",
+ "Cobalt_Strike",
+ "ZIRCONIUM",
+ "H1N1",
+ "CHOPSTICK",
+ "C0017",
+ "Gelsemium",
+ "Socksbot",
+ "Exaramel_for_Windows",
+ "TDTESS",
+ "Equation",
+ "Cherry_Picker",
+ "Expand",
+ "Crimson",
+ "VaporRage",
+ "GALLIUM",
+ "WEBC2",
+ "Moses_Staff",
+ "SHARPSTATS",
+ "PittyTiger",
+ "Cobalt_Group",
+ "AppleScript",
+ "Mis-Type",
+ "UBoatRAT",
+ "SombRAT",
+ "netstat",
+ "HAWKBALL",
+ "FoggyWeb",
+ "Wevtutil",
+ "RunningRAT",
+ "RotaJakiro",
+ "PID",
+ "Winexe",
+ "Black_Basta",
+ "SUGARUSH",
+ "StoneDrill",
+ "TA459",
+ "AsyncRAT",
+ "BITTER",
+ "Higaisa",
+ "RGDoor",
+ "FIN10",
+ "RemoteUtilities",
+ "KillDisk",
+ "CostaBricks",
+ "AvosLocker",
+ "APT33",
+ "sqlmap",
+ "KOMPROGO",
+ "ROCKBOOT",
+ "ELMER",
+ "ObliqueRAT",
+ "Aquatic_Panda",
+ "DEATHRANSOM",
+ "Elise",
+ "Lslsass",
+ "ConnectWise",
+ "BUBBLEWRAP",
+ "Clop",
+ "Turla",
+ "S-Type",
+ "xCaon",
+ "Janicab",
+ "OutSteel",
+ "JCry",
+ "3PARA_RAT",
+ "The_White_Company",
+ "Unknown_Logger",
+ "SodaMaster",
+ "Flagpro",
+ "Frankenstein",
+ "AppleJeus",
+ "Snip3",
+ "spwebmember",
+ "AdFind",
+ "gsecdump",
+ "Axiom",
+ "admin@338",
+ "Operation_Ghost",
+ "down_new",
+ "TA2541",
+ "Sys10",
+ "TSCookie",
+ "SYNful_Knock",
+ "SilverTerrier",
+ "Emotet",
+ "InnaputRAT",
+ "APT28",
+ "MoleNet",
+ "Mythic",
+ "PlugX",
+ "Suckfly",
+ "OnionDuke",
+ "Squirrelwaffle",
+ "POORAIM",
+ "Agent_Tesla",
+ "Xbash",
+ "iKitten",
+ "Bandook",
+ "Lizar",
+ "SamSam",
+ "ccf32",
+ "Windows_Credential_Editor",
+ "Responder",
+ "MoustachedBouncer",
+ "TeamTNT",
+ "Babuk",
+ "Orz",
+ "ifconfig",
+ "Tarrask",
+ "GLOOXMAIL",
+ "Tomiris",
+ "Ryuk",
+ "esentutl",
+ "MacSpy",
+ "Rancor",
+ "Kerrdown",
+ "PingPull",
+ "Misdat",
+ "Out1",
+ "Spark",
+ "Pass-The-Hash_Toolkit",
+ "Taidoor",
+ "Brute_Ratel_C4",
+ "UACMe",
+ "OLDBAIT",
+ "IndigoZebra",
+ "Dok",
+ "Hikit",
+ "CallMe",
+ "DEADEYE",
+ "Kevin",
+ "DarkTortilla",
+ "Rclone",
+ "Pony",
+ "QakBot",
+ "Metador",
+ "RTM",
+ "Dyre",
+ "gh0st_RAT",
+ "Hydraq",
+ "WannaCry",
+ "WellMess",
+ "IceApple",
+ "KGH_SPY",
+ "HAMMERTOSS",
+ "Carberp",
+ "HermeticWizard",
+ "PLEAD",
+ "APT30",
+ "adbupd",
+ "BlackCat",
+ "Orangeworm",
+ "Doki",
+ "HermeticWiper",
+ "Darkhotel",
+ "RIPTIDE",
+ "Proxysvc",
+ "Forfiles",
+ "Group5",
+ "Hacking_Team_UEFI_Rootkit",
+ "Cobian_RAT",
+ "KeyBoy",
+ "AppleSeed",
+ "Windigo",
+ "Shamoon",
+ "ipconfig",
+ "SDelete",
+ "Operation_Dust_Storm",
+ "SharpStage",
+ "SpeakUp",
+ "PoisonIvy",
+ "Bazar",
+ "Fysbis",
+ "SLOTHFULMEDIA",
+ "CosmicDuke",
+ "JPIN",
+ "Milan",
+ "Koadic",
+ "Transparent_Tribe",
+ "ZxShell",
+ "macOS.OSAMiner",
+ "Shark",
+ "FYAnti",
+ "APT3",
+ "Diavol",
+ "Nltest",
+ "Net_Crawler",
+ "schtasks",
+ "C0011",
+ "Cachedump",
+ "jRAT",
+ "Bad_Rabbit",
+ "Gazer",
+ "Rocke",
+ "Gamaredon_Group",
+ "Chimera",
+ "Wingbird",
+ "Inception",
+ "DarkWatchman",
+ "Stuxnet",
+ "REvil",
+ "menuPass",
+ "DDKONG",
+ "Donut",
+ "CURIUM",
+ "PyDCrypt",
+ "MirageFox",
+ "Dragonfly",
+ "RCSession",
+ "hcdLoader",
+ "EKANS",
+ "Sliver",
+ "SPACESHIP",
+ "Backdoor.Oldrea",
+ "NanHaiShu",
+ "Regin",
+ "Patchwork",
+ "SEASHARPEE",
+ "PowerDuke",
+ "meek",
+ "C0015",
+ "Rifdoor",
+ "FALLCHILL",
+ "HOPLIGHT",
+ "Amadey",
+ "Lazarus_Group",
+ "Truvasys",
+ "KernelCallbackTable",
+ "route",
+ "AADInternals",
+ "FIN6",
+ "FlawedGrace",
+ "Disco",
+ "QuietSieve",
+ "Aoqin_Dragon",
+ "SynAck",
+ "TEXTMATE",
+ "GreyEnergy",
+ "Lokibot",
+ "Seth-Locker",
+ "CrossRAT",
+ "BabyShark",
+ "BLACKCOFFEE",
+ "CALENDAR",
+ "OilRig",
+ "PoetRAT",
+ "TrailBlazer",
+ "LoJax",
+ "BoxCaon",
+ "Reaver",
+ "Pysa",
+ "2015_Ukraine_Electric_Power_Attack",
+ "PowerLess",
+ "HAFNIUM",
+ "SMOKEDHAM",
+ "UPPERCUT",
+ "TAINTEDSCRIBE",
+ "Chinoxy",
+ "Power_Loader",
+ "xCmd",
+ "nbtstat",
+ "Penquin",
+ "Micropsia",
+ "PoshC2",
+ "Operation_Honeybee",
+ "Prikormka",
+ "Green_Lambert",
+ "Linux_Rabbit",
+ "Anchor",
+ "Avaddon",
+ "Cannon",
+ "Ferocious",
+ "FIN13",
+ "Metamorfo",
+ "Machete",
+ "BlackMould",
+ "Kobalos",
+ "Pay2Key",
+ "ServHelper",
+ "DOGCALL",
+ "ADVSTORESHELL",
+ "ComRAT",
+ "2016_Ukraine_Electric_Power_Attack",
+ "ProLock",
+ "Bankshot",
+ "BITSAdmin",
+ "ShimRatReporter",
+ "Cuba",
+ "WindTail",
+ "Seasalt",
+ "Final1stspy",
+ "Tor",
+ "Emissary",
+ "PowerShower",
+ "BLUELIGHT",
+ "Leafminer",
+ "PowerSploit",
+ "Imminent_Monitor",
+ "Mofang",
+ "ANDROMEDA",
+ "MacMa",
+ "SYSCON",
+ "Launch_Agent",
+ "Mustang_Panda",
+ "Scattered_Spider",
+ "FlawedAmmyy",
+ "BlackOasis",
+ "Sidewinder",
+ "cmd",
+ "PcShare",
+ "SUGARDUMP",
+ "Nebulae",
+ "BlackTech",
+ "APT29",
+ "QuasarRAT",
+ "Winnti_for_Windows",
+ "Pupy",
+ "QUIETEXIT",
+ "NavRAT",
+ "SslMM",
+ "Drovorub",
+ "APT41",
+ "Systeminfo",
+ "MURKYTOP",
+ "Skidmap",
+ "DRATzarus",
+ "DarkVishnya",
+ "BlackEnergy",
+ "QUADAGENT",
+ "Gold_Dragon",
+ "MCMD",
+ "Pasam",
+ "Royal",
+ "ROKRAT",
+ "BRONZE_BUTLER",
+ "Remexi",
+ "BBK",
+ "Valak",
+ "LOWBALL",
+ "FIVEHANDS",
+ "Remsec",
+ "EvilGrab",
+ "MegaCortex",
+ "Hi-Zor",
+ "DarkComet",
+ "BackdoorDiplomacy",
+ "FinFisher",
+ "HyperStack",
+ "RainyDay",
+ "SOUNDBITE",
+ "FIN7",
+ "APT38",
+ "MimiPenguin",
+ "APT17",
+ "NOKKI",
+ "GeminiDuke",
+ "Volt_Typhoon",
+ "WIRTE",
+ "Andariel",
+ "SpicyOmelette",
+ "EvilBunny",
+ "POWRUNER",
+ "NetTraveler",
+ "",
+ "",
+ "",
+ "",
+ "",
+ "",
+ "",
+ ""
+ ],
+ "clean_up_tokenization_spaces": true,
+ "cls_token": "[CLS]",
+ "do_basic_tokenize": true,
+ "do_lower_case": true,
+ "mask_token": "[MASK]",
+ "model_max_length": 512,
+ "never_split": null,
+ "pad_token": "[PAD]",
+ "sep_token": "[SEP]",
+ "strip_accents": null,
+ "tokenize_chinese_chars": true,
+ "tokenizer_class": "BertTokenizer",
+ "unk_token": "[UNK]"
+}