{
  "2015_Ukraine_Electric_Power_Attack": 31221,
  "2016_Ukraine_Electric_Power_Attack": 31252,
  "3PARA_RAT": 31036,
  "4H_RAT": 30659,
  "</campaign>": 31334,
  "</code>": 31340,
  "</group>": 31336,
  "</software>": 31338,
  "<campaign>": 31333,
  "<code>": 31339,
  "<group>": 31335,
  "<software>": 31337,
  "AADInternals": 31199,
  "ABK": 30649,
  "ADVSTORESHELL": 31250,
  "ANDROMEDA": 31269,
  "APT-C-36": 30695,
  "APT1": 30902,
  "APT12": 30590,
  "APT16": 30891,
  "APT17": 31323,
  "APT18": 30963,
  "APT19": 30666,
  "APT28": 31058,
  "APT29": 31283,
  "APT3": 31155,
  "APT30": 31120,
  "APT32": 30802,
  "APT33": 31017,
  "APT37": 30742,
  "APT38": 31321,
  "APT39": 30811,
  "APT41": 31291,
  "ASPXSpy": 30913,
  "Action_RAT": 30769,
  "AdFind": 31045,
  "Agent.btz": 30866,
  "Agent_Tesla": 31066,
  "Ajax_Security_Team": 30943,
  "Amadey": 31195,
  "Anchor": 31238,
  "Andariel": 31328,
  "Aoqin_Dragon": 31204,
  "AppleJeus": 31042,
  "AppleScript": 30992,
  "AppleSeed": 31134,
  "Aquatic_Panda": 31023,
  "Aria-body": 30525,
  "Arp": 30942,
  "Astaroth": 30651,
  "AsyncRAT": 31008,
  "Attor": 30850,
  "AuTo_Stealer": 30950,
  "AuditCred": 30971,
  "AutoIt_backdoor": 30729,
  "Avaddon": 31239,
  "Avenger": 30703,
  "AvosLocker": 31016,
  "Axiom": 31047,
  "Azorult": 30804,
  "BACKSPACE": 30794,
  "BADCALL": 30814,
  "BADFLICK": 30594,
  "BADHATCH": 30626,
  "BADNEWS": 30884,
  "BBK": 31306,
  "BBSRAT": 30860,
  "BISCUIT": 30687,
  "BITSAdmin": 31255,
  "BITTER": 31009,
  "BLACKCOFFEE": 31212,
  "BLINDINGCAN": 30916,
  "BLUELIGHT": 31264,
  "BONDUPDATER": 30837,
  "BOOSTWRITE": 30727,
  "BOOTRASH": 30537,
  "BRONZE_BUTLER": 31304,
  "BS2005": 30898,
  "BUBBLEWRAP": 31028,
  "Babuk": 31077,
  "BabyShark": 31211,
  "BackConfig": 30949,
  "Backdoor.Oldrea": 31185,
  "BackdoorDiplomacy": 31315,
  "BadPatch": 30548,
  "Bad_Rabbit": 31163,
  "Bandook": 31069,
  "Bankshot": 31254,
  "Bazar": 31143,
  "BendyBear": 30944,
  "Bisonal": 30756,
  "BitPaymer": 30611,
  "BlackCat": 31122,
  "BlackEnergy": 31297,
  "BlackMould": 31245,
  "BlackOasis": 31276,
  "BlackTech": 31282,
  "Black_Basta": 31004,
  "BloodHound": 30966,
  "Blue_Mockingbird": 30945,
  "Bonadan": 30595,
  "BoomBox": 30924,
  "BoxCaon": 31218,
  "Brave_Prince": 30720,
  "Briba": 30818,
  "Brute_Ratel_C4": 31094,
  "Bumblebee": 30772,
  "Bundlore": 30925,
  "C0010": 30618,
  "C0011": 31160,
  "C0015": 31191,
  "C0017": 30976,
  "C0018": 30612,
  "C0021": 30774,
  "C0026": 30538,
  "C0027": 30613,
  "CALENDAR": 31213,
  "CARROTBALL": 30539,
  "CARROTBAT": 30920,
  "CCBkdr": 30962,
  "CHOPSTICK": 30975,
  "CORALDECK": 30661,
  "CORESHELL": 30785,
  "CSPY_Downloader": 30906,
  "CURIUM": 31176,
  "Cachedump": 31161,
  "CaddyWiper": 30871,
  "Cadelspy": 30957,
  "Calisto": 30750,
  "CallMe": 31100,
  "Cannon": 31240,
  "Carbanak": 30805,
  "Carberp": 31117,
  "Carbon": 30838,
  "Cardinal_RAT": 30713,
  "Catchamas": 30722,
  "Caterpillar_WebShell": 30846,
  "ChChes": 30560,
  "Chaes": 30857,
  "Chaos": 30872,
  "CharmPower": 30815,
  "Cherry_Picker": 30982,
  "Chimera": 31167,
  "China_Chopper": 30807,
  "Chinoxy": 31227,
  "Chrommme": 30946,
  "Clambling": 30585,
  "Cleaver": 30624,
  "Clop": 31029,
  "CloudDuke": 30799,
  "Cobalt_Group": 30991,
  "Cobalt_Strike": 30972,
  "Cobian_RAT": 31132,
  "CoinTicker": 30587,
  "ComRAT": 31251,
  "Comnie": 30625,
  "Conficker": 30747,
  "Confucius": 30603,
  "ConnectWise": 31027,
  "Conti": 30578,
  "CookieMiner": 30927,
  "CopyKittens": 30954,
  "CosmicDuke": 31146,
  "CostaBricks": 31015,
  "CostaRicto": 30581,
  "CozyCar": 30576,
  "CrackMapExec": 30646,
  "CreepyDrive": 30732,
  "CreepySnail": 30825,
  "Crimson": 30984,
  "CrossRAT": 31210,
  "Crutch": 30568,
  "Cryptoistic": 30877,
  "Cuba": 31257,
  "Cyclops_Blink": 30908,
  "DCSrv": 30869,
  "DDKONG": 31174,
  "DEADEYE": 31101,
  "DEATHRANSOM": 31024,
  "DOGCALL": 31249,
  "DRATzarus": 31295,
  "Dacls": 30580,
  "DanBot": 30801,
  "DarkComet": 31314,
  "DarkHydrus": 30783,
  "DarkTortilla": 31103,
  "DarkVishnya": 31296,
  "DarkWatchman": 31170,
  "Dark_Caracal": 30821,
  "Darkhotel": 31126,
  "Daserf": 30827,
  "DealersChoice": 30707,
  "Deep_Panda": 30751,
  "Denis": 30638,
  "Derusbi": 30544,
  "Diavol": 31156,
  "Dipsind": 30749,
  "Disco": 31202,
  "DnsSystem": 30710,
  "Dok": 31098,
  "Doki": 31124,
  "Donut": 31175,
  "DownPaper": 30753,
  "Downdelph": 30610,
  "Dragonfly": 31179,
  "Dridex": 30897,
  "DropBook": 30536,
  "Drovorub": 31290,
  "Dtrack": 30888,
  "Duqu": 30600,
  "DustySky": 30718,
  "Dyre": 31109,
  "ECCENTRICBANDWAGON": 30598,
  "EKANS": 31182,
  "ELMER": 31021,
  "EVILNUM": 30586,
  "EXOTIC_LILY": 30632,
  "Earth_Lusca": 30873,
  "Ebury": 30819,
  "Ecipekac": 30789,
  "Egregor": 30912,
  "Elderwood": 30939,
  "Elise": 31025,
  "Ember_Bear": 30781,
  "Emissary": 31262,
  "Emotet": 31056,
  "Empire": 30675,
  "EnvyScout": 30740,
  "Epic": 30553,
  "Equation": 30981,
  "EvilBunny": 31330,
  "EvilGrab": 31311,
  "Evilnum": 30836,
  "Exaramel_for_Linux": 30627,
  "Exaramel_for_Windows": 30979,
  "Expand": 30983,
  "Explosive": 30741,
  "FALLCHILL": 31193,
  "FELIXROOT": 30605,
  "FIN10": 31012,
  "FIN13": 31242,
  "FIN4": 30634,
  "FIN5": 30835,
  "FIN6": 31200,
  "FIN7": 31320,
  "FIN8": 30808,
  "FIVEHANDS": 31309,
  "FLASHFLOOD": 30844,
  "FLIPSIDE": 30543,
  "FYAnti": 31154,
  "FakeM": 30766,
  "FatDuke": 30719,
  "Felismus": 30938,
  "Ferocious": 31241,
  "Ferocious_Kitten": 30791,
  "Fgdump": 30923,
  "FinFisher": 31316,
  "Final1stspy": 31260,
  "Flagpro": 31040,
  "Flame": 30680,
  "FlawedAmmyy": 31275,
  "FlawedGrace": 31201,
  "FoggyWeb": 30998,
  "Forfiles": 31129,
  "Fox_Kitten": 30744,
  "FrameworkPOS": 30847,
  "Frankenstein": 31041,
  "FruitFly": 30714,
  "FunnyDream": 30629,
  "Fysbis": 31144,
  "GALLIUM": 30986,
  "GCMAN": 30952,
  "GLOOXMAIL": 31081,
  "GOLD_SOUTHFIELD": 30746,
  "GRIFFON": 30965,
  "Gallmaker": 30704,
  "Gamaredon_Group": 31166,
  "Gazer": 31164,
  "Gelsemium": 30977,
  "GeminiDuke": 31325,
  "Get2": 30552,
  "GoldFinder": 30894,
  "GoldMax": 30961,
  "Gold_Dragon": 31299,
  "GoldenSpy": 30631,
  "Goopy": 30780,
  "Gorgon_Group": 30793,
  "Grandoreiro": 30557,
  "GravityRAT": 30556,
  "Green_Lambert": 31236,
  "GreyEnergy": 31207,
  "GrimAgent": 30696,
  "Group5": 31130,
  "GuLoader": 30759,
  "H1N1": 30974,
  "HAFNIUM": 31223,
  "HALFBAKED": 30739,
  "HAMMERTOSS": 31116,
  "HARDRAIN": 30792,
  "HAWKBALL": 30997,
  "HDoor": 30763,
  "HELLOKITTY": 30694,
  "HEXANE": 30758,
  "HIDEDRV": 30831,
  "HOMEFRY": 30914,
  "HOPLIGHT": 31194,
  "HTRAN": 30773,
  "HTTPBrowser": 30731,
  "Hacking_Team_UEFI_Rootkit": 31131,
  "Hancitor": 30813,
  "Havij": 30779,
  "Helminth": 30656,
  "HermeticWiper": 31125,
  "HermeticWizard": 31118,
  "Heyoka_Backdoor": 30933,
  "Hi-Zor": 31313,
  "HiddenWasp": 30565,
  "Higaisa": 31010,
  "Hikit": 31099,
  "Hildegard": 30936,
  "HotCroissant": 30848,
  "Hydraq": 31111,
  "HyperBro": 30764,
  "HyperStack": 31317,
  "ISMInjector": 30604,
  "IceApple": 31114,
  "IcedID": 30885,
  "Imminent_Monitor": 31267,
  "Impacket": 30558,
  "Inception": 31169,
  "IndigoZebra": 31097,
  "Indrik_Spider": 30662,
  "Industroyer": 30569,
  "Industroyer2": 30737,
  "InnaputRAT": 31057,
  "InvisiMole": 30864,
  "Invoke-PSImage": 30577,
  "IronNetInjector": 30564,
  "Ixeshe": 30673,
  "JCry": 31035,
  "JHUHUGIT": 30875,
  "JPIN": 31147,
  "JSS_Loader": 30527,
  "Janicab": 31033,
  "Javali": 30817,
  "KARAE": 30619,
  "KEYMARBLE": 30787,
  "KEYPLUG": 30929,
  "KGH_SPY": 31115,
  "KOCTOPUS": 30862,
  "KOMPROGO": 31019,
  "KONNI": 30960,
  "KOPILUWAK": 30931,
  "Kasidet": 30636,
  "Kazuar": 30796,
  "Ke3chang": 30883,
  "KernelCallbackTable": 31198,
  "Kerrdown": 31087,
  "Kessel": 30637,
  "Kevin": 31102,
  "KeyBoy": 31133,
  "Keydnap": 30592,
  "KillDisk": 31014,
  "Kimsuky": 30947,
  "Kinsing": 30761,
  "Kivars": 30693,
  "Koadic": 31149,
  "Kobalos": 31246,
  "Komplex": 30918,
  "Kwampirs": 30531,
  "LAPSUS$": 30915,
  "LOWBALL": 31308,
  "LaZagne": 30616,
  "Launch_Agent": 31272,
  "Launch_Daemon": 30641,
  "Lazarus_Group": 31196,
  "LazyScripter": 30647,
  "Leafminer": 31265,
  "Leviathan": 30760,
  "LightNeuron": 30934,
  "Linfo": 30845,
  "Linux_Rabbit": 31237,
  "LiteDuke": 30865,
  "LitePower": 30795,
  "Lizar": 31070,
  "LoJax": 31217,
  "LockerGoga": 30593,
  "Lokibot": 31208,
  "LookBack": 30674,
  "LoudMiner": 30652,
  "Lslsass": 31026,
  "Lucifer": 30833,
  "LuminousMoth": 30644,
  "Lurid": 30614,
  "MCMD": 31300,
  "MESSAGETAP": 30529,
  "MURKYTOP": 31293,
  "MacMa": 31270,
  "MacSpy": 31085,
  "Machete": 31244,
  "Mafalda": 30767,
  "Magic_Hound": 30555,
  "MailSniper": 30607,
  "MarkiRAT": 30523,
  "Matryoshka": 30653,
  "Maze": 30830,
  "MechaFlounder": 30533,
  "MegaCortex": 31312,
  "Melcoz": 30755,
  "Metador": 31107,
  "Metamorfo": 31243,
  "Meteor": 30728,
  "Micropsia": 31232,
  "Milan": 31148,
  "MimiPenguin": 31322,
  "Mimikatz": 30699,
  "Miner-C": 30892,
  "MiniDuke": 30880,
  "MirageFox": 31178,
  "Mis-Type": 30993,
  "Misdat": 31089,
  "Mivast": 30812,
  "Moafee": 30572,
  "MobileOrder": 30956,
  "Mofang": 31268,
  "MoleNet": 31059,
  "Molerats": 30550,
  "Mongall": 30858,
  "MoonWind": 30622,
  "More_eggs": 30826,
  "Mori": 30935,
  "Moses_Staff": 30988,
  "Mosquito": 30650,
  "MoustachedBouncer": 31075,
  "MuddyWater": 30562,
  "Mustang_Panda": 31273,
  "Mythic": 31060,
  "NBTscan": 30583,
  "NDiskMonitor": 30551,
  "NETEAGLE": 30951,
  "NETWIRE": 30690,
  "NOKKI": 31324,
  "Naid": 30803,
  "Naikon": 30711,
  "NanHaiShu": 31186,
  "NanoCore": 30601,
  "NativeZone": 30669,
  "NavRAT": 31288,
  "Nebulae": 31281,
  "Neoichor": 30790,
  "Nerex": 30890,
  "Net": 30712,
  "NetTraveler": 31332,
  "Net_Crawler": 31158,
  "Netwalker": 30786,
  "Nidiran": 30768,
  "NightClub": 30684,
  "Night_Dragon": 30559,
  "Nltest": 31157,
  "Nomadic_Octopus": 30575,
  "NotPetya": 30716,
  "OLDBAIT": 31096,
  "OSInfo": 30798,
  "OSX/Shlayer": 30752,
  "OSX_OCEANLOTUS.D": 30940,
  "ObliqueRAT": 31022,
  "OceanSalt": 30567,
  "Octopus": 30554,
  "OilRig": 31214,
  "Okrum": 30824,
  "Olympic_Destroyer": 30672,
  "OnionDuke": 31063,
  "OopsIE": 30969,
  "Operation_CuckooBees": 30736,
  "Operation_Dream_Job": 30609,
  "Operation_Dust_Storm": 31139,
  "Operation_Ghost": 31049,
  "Operation_Honeybee": 31234,
  "Operation_Sharpshooter": 30788,
  "Operation_Spalax": 30757,
  "Operation_Wocao": 30899,
  "Orangeworm": 31123,
  "Orz": 31078,
  "Out1": 31090,
  "OutSteel": 31034,
  "OwaAuth": 30800,
  "P.A.S._Webshell": 30930,
  "P2P_ZeuS": 30843,
  "P8RAT": 30967,
  "PHOREAL": 30859,
  "PID": 31002,
  "PLAINTEE": 30829,
  "PLATINUM": 30839,
  "PLEAD": 31119,
  "POLONIUM": 30901,
  "POORAIM": 31065,
  "POSHSPY": 30863,
  "POWERSOURCE": 30849,
  "POWERSTATS": 30561,
  "POWERTON": 30702,
  "POWRUNER": 31331,
  "PROMETHIUM": 30900,
  "PS1": 30861,
  "PUNCHBUGGY": 30932,
  "PUNCHTRACK": 30599,
  "Pacu": 30852,
  "Pandora": 30953,
  "Pasam": 31301,
  "Pass-The-Hash_Toolkit": 31092,
  "Patchwork": 31188,
  "Pay2Key": 31247,
  "PcShare": 31279,
  "Peirates": 30851,
  "Penquin": 31231,
  "Peppy": 30645,
  "Pillowmint": 30620,
  "PinchDuke": 30563,
  "Ping": 30660,
  "PingPull": 31088,
  "PipeMon": 30765,
  "Pisloader": 30820,
  "PittyTiger": 30990,
  "PlugX": 31061,
  "PoetRAT": 31215,
  "PoisonIvy": 31142,
  "PolyglotDuke": 30867,
  "Pony": 31105,
  "Poseidon_Group": 30868,
  "PoshC2": 31233,
  "PowGoop": 30665,
  "PowerDuke": 31190,
  "PowerLess": 31222,
  "PowerPunch": 30685,
  "PowerShell": 30778,
  "PowerShower": 31263,
  "PowerSploit": 31266,
  "PowerStallion": 30708,
  "Power_Loader": 31228,
  "Prestige": 30726,
  "Prikormka": 31235,
  "ProLock": 31253,
  "Proton": 30905,
  "Proxysvc": 31128,
  "PsExec": 30655,
  "Psylo": 30770,
  "Pteranodon": 30635,
  "Pupy": 31286,
  "Putter_Panda": 30566,
  "PyDCrypt": 31177,
  "Pysa": 31220,
  "QUADAGENT": 31298,
  "QUIETCANARY": 30717,
  "QUIETEXIT": 31287,
  "QakBot": 31106,
  "QuasarRAT": 31284,
  "QuietSieve": 31203,
  "RARSTONE": 30881,
  "RATANKBA": 30579,
  "RCSession": 31180,
  "RDAT": 30639,
  "RDFSNIFFER": 30545,
  "REvil": 31172,
  "RGDoor": 31011,
  "RIPTIDE": 31127,
  "ROADTools": 30573,
  "ROCKBOOT": 31020,
  "ROKRAT": 31303,
  "RTM": 31108,
  "Ragnar_Locker": 30771,
  "Raindrop": 30677,
  "RainyDay": 31318,
  "Ramsay": 30596,
  "Rancor": 31086,
  "RawDisk": 30733,
  "RawPOS": 30642,
  "Rclone": 31104,
  "Reaver": 31219,
  "RedLeaves": 30964,
  "Reg": 30591,
  "RegDuke": 30678,
  "Regin": 31187,
  "Remcos": 30762,
  "Remexi": 31305,
  "RemoteCMD": 30958,
  "RemoteUtilities": 31013,
  "Remsec": 31310,
  "Responder": 31074,
  "Revenge_RAT": 30959,
  "Rifdoor": 31192,
  "Rising_Sun": 30855,
  "RobbinHood": 30643,
  "Rocke": 31165,
  "RogueRobin": 30692,
  "Rootkit": 30701,
  "RotaJakiro": 31001,
  "Rover": 30904,
  "Royal": 31302,
  "Rubeus": 30896,
  "Ruler": 30816,
  "RunningRAT": 31000,
  "Ryuk": 31083,
  "S-Type": 31031,
  "SDBbot": 30879,
  "SDelete": 31138,
  "SEASHARPEE": 31189,
  "SHARPSTATS": 30989,
  "SHIPSHAPE": 30970,
  "SHOTPUT": 30574,
  "SHUTTERSPEED": 30853,
  "SILENTTRINITY": 30706,
  "SLOTHFULMEDIA": 31145,
  "SLOWDRIFT": 30621,
  "SMOKEDHAM": 31224,
  "SNUGRIDE": 30697,
  "SOUNDBITE": 31319,
  "SPACESHIP": 31184,
  "SQLRat": 30743,
  "STARWHALE": 30698,
  "SUGARDUMP": 31280,
  "SUGARUSH": 31005,
  "SUNBURST": 30691,
  "SUNSPOT": 30738,
  "SUPERNOVA": 30668,
  "SVCReady": 30540,
  "SYNful_Knock": 31054,
  "SYSCON": 31271,
  "Saint_Bot": 30870,
  "Sakula": 30882,
  "SamSam": 31071,
  "Sandworm_Team": 30688,
  "Sardonic": 30834,
  "Scarlet_Mimic": 30588,
  "Scattered_Spider": 31274,
  "SeaDuke": 30777,
  "Seasalt": 31259,
  "ServHelper": 31248,
  "Seth-Locker": 31209,
  "ShadowPad": 30911,
  "Shamoon": 31136,
  "Shark": 31153,
  "SharpDisco": 30535,
  "SharpStage": 31140,
  "ShiftyBug": 30715,
  "ShimRat": 30782,
  "ShimRatReporter": 31256,
  "Sibot": 30664,
  "SideCopy": 30919,
  "SideTwist": 30926,
  "Sidewinder": 31277,
  "Silence": 30681,
  "Silent_Librarian": 30589,
  "Siloscape": 30658,
  "SilverTerrier": 31055,
  "Skeleton_Key": 30893,
  "Skidmap": 31294,
  "Sliver": 31183,
  "Small_Sieve": 30676,
  "Smoke_Loader": 30809,
  "Snip3": 31043,
  "Socksbot": 30978,
  "SodaMaster": 31039,
  "SolarWinds_Compromise": 30910,
  "SombRAT": 30995,
  "SoreFang": 30532,
  "Sowbug": 30597,
  "Spark": 31091,
  "SpeakUp": 31141,
  "SpicyOmelette": 31329,
  "Squirrelwaffle": 31064,
  "SslMM": 31289,
  "Starloader": 30522,
  "Stealth_Falcon": 30571,
  "StoneDrill": 31006,
  "StreamEx": 30887,
  "Strider": 30549,
  "StrifeWater": 30723,
  "StrongPity": 30822,
  "Stuxnet": 31171,
  "Suckfly": 31062,
  "Sykipot": 30745,
  "SynAck": 31205,
  "Sys10": 31052,
  "SysUpdate": 30582,
  "Systeminfo": 31292,
  "T9000": 30623,
  "TA2541": 31051,
  "TA459": 31007,
  "TA505": 30724,
  "TA551": 30917,
  "TAINTEDSCRIBE": 31226,
  "TDTESS": 30980,
  "TEARDROP": 30748,
  "TEMP.Veles": 30608,
  "TEXTMATE": 31206,
  "TINYTYPHON": 30784,
  "TSCookie": 31053,
  "TURNEDUP": 30823,
  "TYPEFRAME": 30903,
  "Taidoor": 31093,
  "TajMahal": 30754,
  "Tarrask": 31080,
  "Tasklist": 30671,
  "TeamTNT": 31076,
  "The_White_Company": 31037,
  "ThiefQuest": 30776,
  "ThreatNeedle": 30584,
  "Threat_Group-1314": 30842,
  "Threat_Group-3390": 30526,
  "Thrip": 30705,
  "TinyTurla": 30630,
  "TinyZBot": 30547,
  "Tomiris": 31082,
  "Tonto_Team": 30734,
  "Tor": 31261,
  "Torisma": 30683,
  "TrailBlazer": 31216,
  "Transparent_Tribe": 31150,
  "TrickBot": 30968,
  "Trojan.Karagany": 30895,
  "Trojan.Mebromi": 30602,
  "Tropic_Trooper": 30628,
  "Truvasys": 31197,
  "Turian": 30928,
  "Turla": 31030,
  "UACMe": 31095,
  "UBoatRAT": 30994,
  "UPPERCUT": 31225,
  "USBStealer": 30856,
  "USBferry": 30921,
  "Umbreon": 30648,
  "Unknown_Logger": 31038,
  "Uroburos": 30700,
  "Ursnif": 30633,
  "VBShower": 30806,
  "VERMIN": 30878,
  "Valak": 31307,
  "VaporRage": 30985,
  "Vasport": 30606,
  "Volatile_Cedar": 30617,
  "Volgmer": 30735,
  "Volt_Typhoon": 31326,
  "WEBC2": 30987,
  "WINDSHIELD": 30686,
  "WINERACK": 30542,
  "WIRTE": 31327,
  "WannaCry": 31112,
  "WarzoneRAT": 30840,
  "WastedLocker": 30922,
  "Waterbear": 30725,
  "WellMail": 30546,
  "WellMess": 31113,
  "Wevtutil": 30999,
  "WhisperGate": 30889,
  "Whitefly": 30874,
  "Wiarp": 30876,
  "WinMM": 30679,
  "WindTail": 31258,
  "Windigo": 31135,
  "Windows_Credential_Editor": 31073,
  "Windshift": 30709,
  "Winexe": 31003,
  "Wingbird": 31168,
  "Winnti_Group": 30832,
  "Winnti_for_Linux": 30654,
  "Winnti_for_Windows": 31285,
  "Wiper": 30528,
  "Wizard_Spider": 30541,
  "Woody_RAT": 30797,
  "XAgentOSX": 30948,
  "XCSSET": 30937,
  "XTunnel": 30775,
  "Xbash": 31067,
  "YAHOYAH": 30663,
  "ZIRCONIUM": 30973,
  "ZLib": 30730,
  "Zebrocy": 30828,
  "ZeroT": 30907,
  "Zeroaccess": 30615,
  "Zeus_Panda": 30886,
  "Zox": 30955,
  "ZxShell": 31151,
  "ZxxZ": 30810,
  "adbupd": 31121,
  "admin@338": 31048,
  "build_downer": 30667,
  "ccf32": 31072,
  "certutil": 30909,
  "cmd": 31278,
  "dllname": 30534,
  "down_new": 31050,
  "dsquery": 30640,
  "esentutl": 31084,
  "ftp": 30682,
  "gh0st_RAT": 31110,
  "gsecdump": 31046,
  "hcdLoader": 31181,
  "httpclient": 30941,
  "iKitten": 31068,
  "ifconfig": 31079,
  "ipconfig": 31137,
  "jRAT": 31162,
  "kworker:0/1": 30721,
  "macOS.OSAMiner": 31152,
  "menuPass": 31173,
  "metaMain": 30530,
  "nbtstat": 31230,
  "netsh": 30570,
  "netstat": 30996,
  "ngrok": 30657,
  "njRAT": 30854,
  "pngdowner": 30841,
  "pwdump": 30670,
  "schtasks": 31159,
  "spwebmember": 31044,
  "sqlmap": 31018,
  "xCaon": 31032,
  "xCmd": 31229,
  "yty": 30689,
  "zwShell": 30524
}