{
  "2015_Ukraine_Electric_Power_Attack": 50953,
  "2016_Ukraine_Electric_Power_Attack": 50984,
  "3PARA_RAT": 50768,
  "4H_RAT": 50393,
  "</campaign>": 51063,
  "</code>": 51069,
  "</group>": 51065,
  "</software>": 51067,
  "<campaign>": 51062,
  "<code>": 51068,
  "<group>": 51064,
  "<software>": 51066,
  "AADInternals": 50931,
  "ABK": 50383,
  "ADVSTORESHELL": 50982,
  "ANDROMEDA": 51000,
  "APT-C-36": 50428,
  "APT1": 50634,
  "APT12": 50325,
  "APT16": 50623,
  "APT17": 51052,
  "APT18": 50695,
  "APT19": 50399,
  "APT28": 50790,
  "APT29": 51013,
  "APT3": 50886,
  "APT30": 50851,
  "APT32": 50534,
  "APT33": 50749,
  "APT37": 50474,
  "APT38": 51050,
  "APT39": 50543,
  "APT41": 51021,
  "ASPXSpy": 50645,
  "Action_RAT": 50501,
  "AdFind": 50777,
  "Agent.btz": 50598,
  "Agent_Tesla": 50798,
  "Ajax_Security_Team": 50675,
  "Amadey": 50927,
  "Anchor": 50970,
  "Andariel": 51057,
  "Aoqin_Dragon": 50936,
  "AppleJeus": 50774,
  "AppleScript": 50724,
  "AppleSeed": 50865,
  "Aquatic_Panda": 50755,
  "Aria-body": 50260,
  "Arp": 50674,
  "Astaroth": 50385,
  "AsyncRAT": 50740,
  "Attor": 50582,
  "AuTo_Stealer": 50682,
  "AuditCred": 50703,
  "AutoIt_backdoor": 50461,
  "Avaddon": 50971,
  "Avenger": 50436,
  "AvosLocker": 50748,
  "Axiom": 50779,
  "Azorult": 50536,
  "BACKSPACE": 50526,
  "BADCALL": 50546,
  "BADFLICK": 50328,
  "BADHATCH": 50360,
  "BADNEWS": 50616,
  "BBK": 51035,
  "BBSRAT": 50592,
  "BISCUIT": 50420,
  "BITSAdmin": 50987,
  "BITTER": 50741,
  "BLACKCOFFEE": 50944,
  "BLINDINGCAN": 50648,
  "BLUELIGHT": 50995,
  "BONDUPDATER": 50569,
  "BOOSTWRITE": 50459,
  "BOOTRASH": 50272,
  "BRONZE_BUTLER": 51033,
  "BS2005": 50630,
  "BUBBLEWRAP": 50760,
  "Babuk": 50809,
  "BabyShark": 50943,
  "BackConfig": 50681,
  "Backdoor.Oldrea": 50916,
  "BackdoorDiplomacy": 51044,
  "BadPatch": 50283,
  "Bad_Rabbit": 50894,
  "Bandook": 50801,
  "Bankshot": 50986,
  "Bazar": 50874,
  "BendyBear": 50676,
  "Bisonal": 50488,
  "BitPaymer": 50345,
  "BlackCat": 50853,
  "BlackEnergy": 51027,
  "BlackMould": 50977,
  "BlackOasis": 51007,
  "BlackTech": 51012,
  "Black_Basta": 50736,
  "BloodHound": 50698,
  "Blue_Mockingbird": 50677,
  "Bonadan": 50329,
  "BoomBox": 50656,
  "BoxCaon": 50950,
  "Brave_Prince": 50452,
  "Briba": 50550,
  "Brute_Ratel_C4": 50826,
  "Bumblebee": 50504,
  "Bundlore": 50657,
  "C0010": 50352,
  "C0011": 50891,
  "C0015": 50923,
  "C0017": 50708,
  "C0018": 50346,
  "C0021": 50506,
  "C0026": 50273,
  "C0027": 50347,
  "CALENDAR": 50945,
  "CARROTBALL": 50274,
  "CARROTBAT": 50652,
  "CCBkdr": 50694,
  "CHOPSTICK": 50707,
  "CORALDECK": 50394,
  "CORESHELL": 50517,
  "CSPY_Downloader": 50638,
  "CURIUM": 50907,
  "Cachedump": 50892,
  "CaddyWiper": 50603,
  "Cadelspy": 50689,
  "Calisto": 50482,
  "CallMe": 50832,
  "Cannon": 50972,
  "Carbanak": 50537,
  "Carberp": 50848,
  "Carbon": 50570,
  "Cardinal_RAT": 50445,
  "Catchamas": 50454,
  "Caterpillar_WebShell": 50578,
  "ChChes": 50295,
  "Chaes": 50589,
  "Chaos": 50604,
  "CharmPower": 50547,
  "Cherry_Picker": 50714,
  "Chimera": 50898,
  "China_Chopper": 50539,
  "Chinoxy": 50959,
  "Chrommme": 50678,
  "Clambling": 50320,
  "Cleaver": 50358,
  "Clop": 50761,
  "CloudDuke": 50531,
  "Cobalt_Group": 50723,
  "Cobalt_Strike": 50704,
  "Cobian_RAT": 50863,
  "CoinTicker": 50322,
  "ComRAT": 50983,
  "Comnie": 50359,
  "Conficker": 50479,
  "Confucius": 50337,
  "ConnectWise": 50759,
  "Conti": 50313,
  "CookieMiner": 50659,
  "CopyKittens": 50686,
  "CosmicDuke": 50877,
  "CostaBricks": 50747,
  "CostaRicto": 50316,
  "CozyCar": 50311,
  "CrackMapExec": 50380,
  "CreepyDrive": 50464,
  "CreepySnail": 50557,
  "Crimson": 50716,
  "CrossRAT": 50942,
  "Crutch": 50303,
  "Cryptoistic": 50609,
  "Cuba": 50989,
  "Cyclops_Blink": 50640,
  "DCSrv": 50601,
  "DDKONG": 50905,
  "DEADEYE": 50833,
  "DEATHRANSOM": 50756,
  "DOGCALL": 50981,
  "DRATzarus": 51025,
  "Dacls": 50315,
  "DanBot": 50533,
  "DarkComet": 51043,
  "DarkHydrus": 50515,
  "DarkTortilla": 50834,
  "DarkVishnya": 51026,
  "DarkWatchman": 50901,
  "Dark_Caracal": 50553,
  "Darkhotel": 50857,
  "Daserf": 50559,
  "DealersChoice": 50440,
  "Deep_Panda": 50483,
  "Denis": 50372,
  "Derusbi": 50279,
  "Diavol": 50887,
  "Dipsind": 50481,
  "Disco": 50934,
  "DnsSystem": 50443,
  "Dok": 50830,
  "Doki": 50855,
  "Donut": 50906,
  "DownPaper": 50485,
  "Downdelph": 50344,
  "Dragonfly": 50910,
  "Dridex": 50629,
  "DropBook": 50271,
  "Drovorub": 51020,
  "Dtrack": 50620,
  "Duqu": 50334,
  "DustySky": 50450,
  "Dyre": 50840,
  "ECCENTRICBANDWAGON": 50332,
  "EKANS": 50913,
  "ELMER": 50753,
  "EVILNUM": 50321,
  "EXOTIC_LILY": 50366,
  "Earth_Lusca": 50605,
  "Ebury": 50551,
  "Ecipekac": 50521,
  "Egregor": 50644,
  "Elderwood": 50671,
  "Elise": 50757,
  "Ember_Bear": 50513,
  "Emissary": 50993,
  "Emotet": 50788,
  "Empire": 50408,
  "EnvyScout": 50472,
  "Epic": 50288,
  "Equation": 50713,
  "EvilBunny": 51059,
  "EvilGrab": 51040,
  "Evilnum": 50568,
  "Exaramel_for_Linux": 50361,
  "Exaramel_for_Windows": 50711,
  "Expand": 50715,
  "Explosive": 50473,
  "FALLCHILL": 50925,
  "FELIXROOT": 50339,
  "FIN10": 50744,
  "FIN13": 50974,
  "FIN4": 50368,
  "FIN5": 50567,
  "FIN6": 50932,
  "FIN7": 51049,
  "FIN8": 50540,
  "FIVEHANDS": 51038,
  "FLASHFLOOD": 50576,
  "FLIPSIDE": 50278,
  "FYAnti": 50885,
  "FakeM": 50498,
  "FatDuke": 50451,
  "Felismus": 50670,
  "Ferocious": 50973,
  "Ferocious_Kitten": 50523,
  "Fgdump": 50655,
  "FinFisher": 51045,
  "Final1stspy": 50992,
  "Flagpro": 50772,
  "Flame": 50413,
  "FlawedAmmyy": 51006,
  "FlawedGrace": 50933,
  "FoggyWeb": 50730,
  "Forfiles": 50860,
  "Fox_Kitten": 50476,
  "FrameworkPOS": 50579,
  "Frankenstein": 50773,
  "FruitFly": 50446,
  "FunnyDream": 50363,
  "Fysbis": 50875,
  "GALLIUM": 50718,
  "GCMAN": 50684,
  "GLOOXMAIL": 50813,
  "GOLD_SOUTHFIELD": 50478,
  "GRIFFON": 50697,
  "Gallmaker": 50437,
  "Gamaredon_Group": 50897,
  "Gazer": 50895,
  "Gelsemium": 50709,
  "GeminiDuke": 51054,
  "Get2": 50287,
  "GoldFinder": 50626,
  "GoldMax": 50693,
  "Gold_Dragon": 51029,
  "GoldenSpy": 50365,
  "Goopy": 50512,
  "Gorgon_Group": 50525,
  "Grandoreiro": 50292,
  "GravityRAT": 50291,
  "Green_Lambert": 50968,
  "GreyEnergy": 50939,
  "GrimAgent": 50429,
  "Group5": 50861,
  "GuLoader": 50491,
  "H1N1": 50706,
  "HAFNIUM": 50955,
  "HALFBAKED": 50471,
  "HAMMERTOSS": 50847,
  "HARDRAIN": 50524,
  "HAWKBALL": 50729,
  "HDoor": 50495,
  "HELLOKITTY": 50427,
  "HEXANE": 50490,
  "HIDEDRV": 50563,
  "HOMEFRY": 50646,
  "HOPLIGHT": 50926,
  "HTRAN": 50505,
  "HTTPBrowser": 50463,
  "Hacking_Team_UEFI_Rootkit": 50862,
  "Hancitor": 50545,
  "Havij": 50511,
  "Helminth": 50390,
  "HermeticWiper": 50856,
  "HermeticWizard": 50849,
  "Heyoka_Backdoor": 50665,
  "Hi-Zor": 51042,
  "HiddenWasp": 50300,
  "Higaisa": 50742,
  "Hikit": 50831,
  "Hildegard": 50668,
  "HotCroissant": 50580,
  "Hydraq": 50842,
  "HyperBro": 50496,
  "HyperStack": 51046,
  "ISMInjector": 50338,
  "IceApple": 50845,
  "IcedID": 50617,
  "Imminent_Monitor": 50998,
  "Impacket": 50293,
  "Inception": 50900,
  "IndigoZebra": 50829,
  "Indrik_Spider": 50395,
  "Industroyer": 50304,
  "Industroyer2": 50469,
  "InnaputRAT": 50789,
  "InvisiMole": 50596,
  "Invoke-PSImage": 50312,
  "IronNetInjector": 50299,
  "Ixeshe": 50406,
  "JCry": 50767,
  "JHUHUGIT": 50607,
  "JPIN": 50878,
  "JSS_Loader": 50262,
  "Janicab": 50765,
  "Javali": 50549,
  "KARAE": 50353,
  "KEYMARBLE": 50519,
  "KEYPLUG": 50661,
  "KGH_SPY": 50846,
  "KOCTOPUS": 50594,
  "KOMPROGO": 50751,
  "KONNI": 50692,
  "KOPILUWAK": 50663,
  "Kasidet": 50370,
  "Kazuar": 50528,
  "Ke3chang": 50615,
  "KernelCallbackTable": 50930,
  "Kerrdown": 50819,
  "Kessel": 50371,
  "KeyBoy": 50864,
  "Keydnap": 50326,
  "KillDisk": 50746,
  "Kimsuky": 50679,
  "Kinsing": 50493,
  "Kivars": 50426,
  "Koadic": 50880,
  "Kobalos": 50978,
  "Komplex": 50650,
  "Kwampirs": 50266,
  "LAPSUS$": 50647,
  "LOWBALL": 51037,
  "LaZagne": 50350,
  "Launch_Agent": 51003,
  "Launch_Daemon": 50375,
  "Lazarus_Group": 50928,
  "LazyScripter": 50381,
  "Leafminer": 50996,
  "Leviathan": 50492,
  "LightNeuron": 50666,
  "Linfo": 50577,
  "Linux_Rabbit": 50969,
  "LiteDuke": 50597,
  "LitePower": 50527,
  "Lizar": 50802,
  "LoJax": 50949,
  "LockerGoga": 50327,
  "Lokibot": 50940,
  "LookBack": 50407,
  "LoudMiner": 50386,
  "Lslsass": 50758,
  "Lucifer": 50565,
  "LuminousMoth": 50378,
  "Lurid": 50348,
  "MCMD": 51030,
  "MESSAGETAP": 50264,
  "MURKYTOP": 51023,
  "MacMa": 51001,
  "MacSpy": 50817,
  "Machete": 50976,
  "Mafalda": 50499,
  "Magic_Hound": 50290,
  "MailSniper": 50341,
  "MarkiRAT": 50258,
  "Matryoshka": 50387,
  "Maze": 50562,
  "MechaFlounder": 50268,
  "MegaCortex": 51041,
  "Melcoz": 50487,
  "Metador": 50838,
  "Metamorfo": 50975,
  "Meteor": 50460,
  "Micropsia": 50964,
  "Milan": 50879,
  "MimiPenguin": 51051,
  "Mimikatz": 50432,
  "Miner-C": 50624,
  "MiniDuke": 50612,
  "MirageFox": 50909,
  "Mis-Type": 50725,
  "Misdat": 50821,
  "Mivast": 50544,
  "Moafee": 50307,
  "MobileOrder": 50688,
  "Mofang": 50999,
  "MoleNet": 50791,
  "Molerats": 50285,
  "Mongall": 50590,
  "MoonWind": 50356,
  "More_eggs": 50558,
  "Mori": 50667,
  "Moses_Staff": 50720,
  "Mosquito": 50384,
  "MoustachedBouncer": 50807,
  "MuddyWater": 50297,
  "Mustang_Panda": 51004,
  "Mythic": 50792,
  "NBTscan": 50318,
  "NDiskMonitor": 50286,
  "NETEAGLE": 50683,
  "NETWIRE": 50423,
  "NOKKI": 51053,
  "Naid": 50535,
  "Naikon": 50444,
  "NanHaiShu": 50917,
  "NanoCore": 50335,
  "NativeZone": 50402,
  "NavRAT": 51018,
  "Nebulae": 51011,
  "Neoichor": 50522,
  "Nerex": 50622,
  "NetTraveler": 51061,
  "Net_Crawler": 50889,
  "Netwalker": 50518,
  "Nidiran": 50500,
  "NightClub": 50417,
  "Night_Dragon": 50294,
  "Nltest": 50888,
  "Nomadic_Octopus": 50310,
  "NotPetya": 50448,
  "OLDBAIT": 50828,
  "OSInfo": 50530,
  "OSX/Shlayer": 50484,
  "OSX_OCEANLOTUS.D": 50672,
  "ObliqueRAT": 50754,
  "OceanSalt": 50302,
  "Octopus": 50289,
  "OilRig": 50946,
  "Okrum": 50556,
  "Olympic_Destroyer": 50405,
  "OnionDuke": 50795,
  "OopsIE": 50701,
  "Operation_CuckooBees": 50468,
  "Operation_Dream_Job": 50343,
  "Operation_Dust_Storm": 50870,
  "Operation_Ghost": 50781,
  "Operation_Honeybee": 50966,
  "Operation_Sharpshooter": 50520,
  "Operation_Spalax": 50489,
  "Operation_Wocao": 50631,
  "Orangeworm": 50854,
  "Orz": 50810,
  "Out1": 50822,
  "OutSteel": 50766,
  "OwaAuth": 50532,
  "P.A.S._Webshell": 50662,
  "P2P_ZeuS": 50575,
  "P8RAT": 50699,
  "PHOREAL": 50591,
  "PID": 50734,
  "PLAINTEE": 50561,
  "PLATINUM": 50571,
  "PLEAD": 50850,
  "POLONIUM": 50633,
  "POORAIM": 50797,
  "POSHSPY": 50595,
  "POWERSOURCE": 50581,
  "POWERSTATS": 50296,
  "POWERTON": 50435,
  "POWRUNER": 51060,
  "PROMETHIUM": 50632,
  "PS1": 50593,
  "PUNCHBUGGY": 50664,
  "PUNCHTRACK": 50333,
  "Pacu": 50584,
  "Pandora": 50685,
  "Pasam": 51031,
  "Pass-The-Hash_Toolkit": 50824,
  "Patchwork": 50919,
  "Pay2Key": 50979,
  "PcShare": 51009,
  "Peirates": 50583,
  "Penquin": 50963,
  "Peppy": 50379,
  "Pillowmint": 50354,
  "PinchDuke": 50298,
  "PingPull": 50820,
  "PipeMon": 50497,
  "Pisloader": 50552,
  "PittyTiger": 50722,
  "PlugX": 50793,
  "PoetRAT": 50947,
  "PoisonIvy": 50873,
  "PolyglotDuke": 50599,
  "Pony": 50836,
  "Poseidon_Group": 50600,
  "PoshC2": 50965,
  "PowGoop": 50398,
  "PowerDuke": 50921,
  "PowerLess": 50954,
  "PowerPunch": 50418,
  "PowerShell": 50510,
  "PowerShower": 50994,
  "PowerSploit": 50997,
  "PowerStallion": 50441,
  "Power_Loader": 50960,
  "Prestige": 50458,
  "Prikormka": 50967,
  "ProLock": 50985,
  "Proton": 50637,
  "Proxysvc": 50859,
  "PsExec": 50389,
  "Psylo": 50502,
  "Pteranodon": 50369,
  "Pupy": 51016,
  "Putter_Panda": 50301,
  "PyDCrypt": 50908,
  "Pysa": 50952,
  "QUADAGENT": 51028,
  "QUIETCANARY": 50449,
  "QUIETEXIT": 51017,
  "QakBot": 50837,
  "QuasarRAT": 51014,
  "QuietSieve": 50935,
  "RARSTONE": 50613,
  "RATANKBA": 50314,
  "RCSession": 50911,
  "RDAT": 50373,
  "RDFSNIFFER": 50280,
  "REvil": 50903,
  "RGDoor": 50743,
  "RIPTIDE": 50858,
  "ROADTools": 50308,
  "ROCKBOOT": 50752,
  "ROKRAT": 51032,
  "RTM": 50839,
  "Ragnar_Locker": 50503,
  "Raindrop": 50410,
  "RainyDay": 51047,
  "Ramsay": 50330,
  "Rancor": 50818,
  "RawDisk": 50465,
  "RawPOS": 50376,
  "Rclone": 50835,
  "Reaver": 50951,
  "RedLeaves": 50696,
  "RegDuke": 50411,
  "Regin": 50918,
  "Remcos": 50494,
  "Remexi": 51034,
  "RemoteCMD": 50690,
  "RemoteUtilities": 50745,
  "Remsec": 51039,
  "Responder": 50806,
  "Revenge_RAT": 50691,
  "Rifdoor": 50924,
  "Rising_Sun": 50587,
  "RobbinHood": 50377,
  "Rocke": 50896,
  "RogueRobin": 50425,
  "Rootkit": 50434,
  "RotaJakiro": 50733,
  "Rover": 50636,
  "Rubeus": 50628,
  "Ruler": 50548,
  "RunningRAT": 50732,
  "Ryuk": 50815,
  "S-Type": 50763,
  "SDBbot": 50611,
  "SDelete": 50869,
  "SEASHARPEE": 50920,
  "SHARPSTATS": 50721,
  "SHIPSHAPE": 50702,
  "SHOTPUT": 50309,
  "SHUTTERSPEED": 50585,
  "SILENTTRINITY": 50439,
  "SLOTHFULMEDIA": 50876,
  "SLOWDRIFT": 50355,
  "SMOKEDHAM": 50956,
  "SNUGRIDE": 50430,
  "SOUNDBITE": 51048,
  "SPACESHIP": 50915,
  "SQLRat": 50475,
  "STARWHALE": 50431,
  "SUGARDUMP": 51010,
  "SUGARUSH": 50737,
  "SUNBURST": 50424,
  "SUNSPOT": 50470,
  "SUPERNOVA": 50401,
  "SVCReady": 50275,
  "SYNful_Knock": 50786,
  "SYSCON": 51002,
  "Saint_Bot": 50602,
  "Sakula": 50614,
  "SamSam": 50803,
  "Sandworm_Team": 50421,
  "Sardonic": 50566,
  "Scarlet_Mimic": 50323,
  "Scattered_Spider": 51005,
  "SeaDuke": 50509,
  "Seasalt": 50991,
  "ServHelper": 50980,
  "Seth-Locker": 50941,
  "ShadowPad": 50643,
  "Shamoon": 50867,
  "Shark": 50884,
  "SharpDisco": 50270,
  "SharpStage": 50871,
  "ShiftyBug": 50447,
  "ShimRat": 50514,
  "ShimRatReporter": 50988,
  "Sibot": 50397,
  "SideCopy": 50651,
  "SideTwist": 50658,
  "Sidewinder": 51008,
  "Silence": 50414,
  "Silent_Librarian": 50324,
  "Siloscape": 50392,
  "SilverTerrier": 50787,
  "Skeleton_Key": 50625,
  "Skidmap": 51024,
  "Sliver": 50914,
  "Small_Sieve": 50409,
  "Smoke_Loader": 50541,
  "Snip3": 50775,
  "Socksbot": 50710,
  "SodaMaster": 50771,
  "SolarWinds_Compromise": 50642,
  "SombRAT": 50727,
  "SoreFang": 50267,
  "Sowbug": 50331,
  "Spark": 50823,
  "SpeakUp": 50872,
  "SpicyOmelette": 51058,
  "Squirrelwaffle": 50796,
  "SslMM": 51019,
  "Starloader": 50257,
  "Stealth_Falcon": 50306,
  "StoneDrill": 50738,
  "StreamEx": 50619,
  "Strider": 50284,
  "StrifeWater": 50455,
  "StrongPity": 50554,
  "Stuxnet": 50902,
  "Suckfly": 50794,
  "Sykipot": 50477,
  "SynAck": 50937,
  "Sys10": 50784,
  "SysUpdate": 50317,
  "Systeminfo": 51022,
  "T9000": 50357,
  "TA2541": 50783,
  "TA459": 50739,
  "TA505": 50456,
  "TA551": 50649,
  "TAINTEDSCRIBE": 50958,
  "TDTESS": 50712,
  "TEARDROP": 50480,
  "TEMP.Veles": 50342,
  "TEXTMATE": 50938,
  "TINYTYPHON": 50516,
  "TSCookie": 50785,
  "TURNEDUP": 50555,
  "TYPEFRAME": 50635,
  "Taidoor": 50825,
  "TajMahal": 50486,
  "Tarrask": 50812,
  "Tasklist": 50404,
  "TeamTNT": 50808,
  "The_White_Company": 50769,
  "ThiefQuest": 50508,
  "ThreatNeedle": 50319,
  "Threat_Group-1314": 50574,
  "Threat_Group-3390": 50261,
  "Thrip": 50438,
  "TinyTurla": 50364,
  "TinyZBot": 50282,
  "Tomiris": 50814,
  "Tonto_Team": 50466,
  "Torisma": 50416,
  "TrailBlazer": 50948,
  "Transparent_Tribe": 50881,
  "TrickBot": 50700,
  "Trojan.Karagany": 50627,
  "Trojan.Mebromi": 50336,
  "Tropic_Trooper": 50362,
  "Truvasys": 50929,
  "Turian": 50660,
  "Turla": 50762,
  "UACMe": 50827,
  "UBoatRAT": 50726,
  "UPPERCUT": 50957,
  "USBStealer": 50588,
  "USBferry": 50653,
  "Umbreon": 50382,
  "Unknown_Logger": 50770,
  "Uroburos": 50433,
  "Ursnif": 50367,
  "VBShower": 50538,
  "VERMIN": 50610,
  "Valak": 51036,
  "VaporRage": 50717,
  "Vasport": 50340,
  "Volatile_Cedar": 50351,
  "Volgmer": 50467,
  "Volt_Typhoon": 51055,
  "WEBC2": 50719,
  "WINDSHIELD": 50419,
  "WINERACK": 50277,
  "WIRTE": 51056,
  "WannaCry": 50843,
  "WarzoneRAT": 50572,
  "WastedLocker": 50654,
  "Waterbear": 50457,
  "WellMail": 50281,
  "WellMess": 50844,
  "Wevtutil": 50731,
  "WhisperGate": 50621,
  "Whitefly": 50606,
  "Wiarp": 50608,
  "WinMM": 50412,
  "WindTail": 50990,
  "Windigo": 50866,
  "Windows_Credential_Editor": 50805,
  "Windshift": 50442,
  "Winexe": 50735,
  "Wingbird": 50899,
  "Winnti_Group": 50564,
  "Winnti_for_Linux": 50388,
  "Winnti_for_Windows": 51015,
  "Wiper": 50263,
  "Wizard_Spider": 50276,
  "Woody_RAT": 50529,
  "XAgentOSX": 50680,
  "XCSSET": 50669,
  "XTunnel": 50507,
  "Xbash": 50799,
  "YAHOYAH": 50396,
  "ZIRCONIUM": 50705,
  "ZLib": 50462,
  "Zebrocy": 50560,
  "ZeroT": 50639,
  "Zeroaccess": 50349,
  "Zeus_Panda": 50618,
  "Zox": 50687,
  "ZxShell": 50882,
  "ZxxZ": 50542,
  "adbupd": 50852,
  "admin@338": 50780,
  "build_downer": 50400,
  "ccf32": 50804,
  "certutil": 50641,
  "dllname": 50269,
  "down_new": 50782,
  "dsquery": 50374,
  "esentutl": 50816,
  "ftp": 50415,
  "gh0st_RAT": 50841,
  "gsecdump": 50778,
  "hcdLoader": 50912,
  "httpclient": 50673,
  "iKitten": 50800,
  "ifconfig": 50811,
  "ipconfig": 50868,
  "jRAT": 50893,
  "kworker:0/1": 50453,
  "macOS.OSAMiner": 50883,
  "meek": 50922,
  "menuPass": 50904,
  "metaMain": 50265,
  "nbtstat": 50962,
  "netsh": 50305,
  "netstat": 50728,
  "ngrok": 50391,
  "njRAT": 50586,
  "pngdowner": 50573,
  "pwdump": 50403,
  "schtasks": 50890,
  "spwebmember": 50776,
  "sqlmap": 50750,
  "xCaon": 50764,
  "xCmd": 50961,
  "yty": 50422,
  "zwShell": 50259
}